diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 81246706c..2c07660df 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -10,10 +10,6 @@ concurrency:
   group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
-defaults:
-  run:
-    shell: nix develop --fallback --command bash -e {0}
-
 jobs:
   build-nix:
     runs-on: ubuntu-latest
@@ -33,16 +29,20 @@ jobs:
               - '**/*.go'
               - 'integration_test/'
               - 'config-example.yaml'
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
         if: steps.changed-files.outputs.files == 'true'
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
         if: steps.changed-files.outputs.files == 'true'
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
 
       - name: Check vendor hash
         id: vendorhash
         if: steps.changed-files.outputs.files == 'true'
         run: |
-          go run ./cmd/vendorhash check | tee check-result
+          nix develop --command -- go run ./cmd/vendorhash check | tee check-result
           {
             grep '^expected_sri=' check-result || true
             grep '^actual_sri='   check-result || true
@@ -63,7 +63,7 @@ jobs:
 
       - name: Run nix build
         if: steps.changed-files.outputs.files == 'true'
-        run: nix build --fallback
+        run: nix build
 
       - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         if: steps.changed-files.outputs.files == 'true'
@@ -81,13 +81,17 @@ jobs:
           - "GOARCH=amd64 GOOS=darwin"
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
 
       - name: Run go cross compile
         env:
           CGO_ENABLED: 0
-        run: env ${{ matrix.env }} go build -o "headscale"
+        run: env ${{ matrix.env }} nix develop --command -- go build -o "headscale"
           ./cmd/headscale
       - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
diff --git a/.github/workflows/check-generated.yml b/.github/workflows/check-generated.yml
index fffc3da04..43f1d62d4 100644
--- a/.github/workflows/check-generated.yml
+++ b/.github/workflows/check-generated.yml
@@ -12,10 +12,6 @@ concurrency:
   group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
-defaults:
-  run:
-    shell: nix develop --fallback --command bash -e {0}
-
 jobs:
   check-generated:
     runs-on: ubuntu-latest
@@ -32,15 +28,20 @@ jobs:
               - '*.nix'
               - 'go.*'
               - '**/*.go'
+              - '**/*.proto'
+              - 'buf.gen.yaml'
               - 'tools/**'
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
         if: steps.changed-files.outputs.files == 'true'
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
         if: steps.changed-files.outputs.files == 'true'
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
 
       - name: Run make generate
         if: steps.changed-files.outputs.files == 'true'
-        run: make generate
+        run: nix develop --command -- make generate
 
       - name: Check for uncommitted changes
         if: steps.changed-files.outputs.files == 'true'
diff --git a/.github/workflows/check-tests.yaml b/.github/workflows/check-tests.yaml
index b73011732..63a181413 100644
--- a/.github/workflows/check-tests.yaml
+++ b/.github/workflows/check-tests.yaml
@@ -6,10 +6,6 @@ concurrency:
   group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
-defaults:
-  run:
-    shell: nix develop --fallback --command bash -e {0}
-
 jobs:
   check-tests:
     runs-on: ubuntu-latest
@@ -28,15 +24,19 @@ jobs:
               - '**/*.go'
               - 'integration_test/'
               - 'config-example.yaml'
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
         if: steps.changed-files.outputs.files == 'true'
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
         if: steps.changed-files.outputs.files == 'true'
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
 
       - name: Generate and check integration tests
         if: steps.changed-files.outputs.files == 'true'
         run: |
-          (cd .github/workflows && go generate)
+          nix develop --command bash -c "cd .github/workflows && go generate"
           git diff --exit-code .github/workflows/test-integration.yaml
 
       - name: Show missing tests
diff --git a/.github/workflows/container-main.yml b/.github/workflows/container-main.yml
index e2ebe6fc0..9b55a273e 100644
--- a/.github/workflows/container-main.yml
+++ b/.github/workflows/container-main.yml
@@ -16,10 +16,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.sha }}
   cancel-in-progress: true
 
-defaults:
-  run:
-    shell: nix develop --fallback --command bash -e {0}
-
 jobs:
   container:
     if: github.repository == 'juanfont/headscale'
@@ -44,8 +40,12 @@ jobs:
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
 
       - name: Set commit timestamp
         run: echo "SOURCE_DATE_EPOCH=$(git log -1 --format=%ct)" >> $GITHUB_ENV
@@ -56,7 +56,7 @@ jobs:
           KO_DEFAULTBASEIMAGE: gcr.io/distroless/base-debian13
           CGO_ENABLED: "0"
         run: |
-          ko build \
+          nix develop --command -- ko build \
             --bare \
             --platform=linux/amd64,linux/arm64 \
             --tags=main-${GITHUB_SHA::7},development \
@@ -68,7 +68,7 @@ jobs:
           KO_DEFAULTBASEIMAGE: gcr.io/distroless/base-debian13
           CGO_ENABLED: "0"
         run: |
-          ko build \
+          nix develop --command -- ko build \
             --bare \
             --platform=linux/amd64,linux/arm64 \
             --tags=main-${GITHUB_SHA::7},development \
@@ -92,15 +92,19 @@ jobs:
       - name: Checkout
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
 
       - name: Build binary
         env:
           CGO_ENABLED: "0"
           GOOS: ${{ matrix.goos }}
           GOARCH: ${{ matrix.goarch }}
-        run: go build -o headscale ./cmd/headscale
+        run: nix develop --command -- go build -o headscale ./cmd/headscale
 
       - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
diff --git a/.github/workflows/gc.yml b/.github/workflows/gc.yml
deleted file mode 100644
index 9df7a0370..000000000
--- a/.github/workflows/gc.yml
+++ /dev/null
@@ -1,39 +0,0 @@
-name: Cache GC
-
-# Garbage collection for the hestia binary cache. Must run on the default
-# branch: a PR job's cache scope is read-only towards the default branch and
-# dies with the PR, but the default-branch scope grows forever without GC.
-
-concurrency:
-  group: hestia-gc
-  cancel-in-progress: false
-
-on:
-  schedule:
-    # Daily, off-peak (UTC).
-    - cron: "23 3 * * *"
-  workflow_dispatch:
-    inputs:
-      dry-run:
-        description: Plan only; do not repack, touch, or delete anything.
-        type: boolean
-        default: false
-
-permissions:
-  contents: read
-
-jobs:
-  gc:
-    runs-on: ubuntu-latest
-    permissions:
-      # REST cache deletes need actions:write.
-      actions: write
-      contents: read
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
-      - name: Run garbage collection
-        run: '"${HESTIA_BIN}" gc ${{ inputs.dry-run && ''--dry-run'' || '''' }}'
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
diff --git a/.github/workflows/gh-action-integration-generator.go b/.github/workflows/gh-action-integration-generator.go
index 5bb8318bd..3c1e25ca1 100644
--- a/.github/workflows/gh-action-integration-generator.go
+++ b/.github/workflows/gh-action-integration-generator.go
@@ -14,7 +14,7 @@ import (
 // Key is the test function name, value is a list of subtest prefixes.
 // Each prefix becomes a separate CI job as "TestName/prefix".
 //
-// Example: [TestAutoApproveMultiNetwork] has subtests like:
+// Example: TestAutoApproveMultiNetwork has subtests like:
 //   - TestAutoApproveMultiNetwork/authkey-tag-advertiseduringup-false-pol-database
 //   - TestAutoApproveMultiNetwork/webauth-user-advertiseduringup-true-pol-file
 //
diff --git a/.github/workflows/integration-test-template.yml b/.github/workflows/integration-test-template.yml
index 590185c96..75a1d275b 100644
--- a/.github/workflows/integration-test-template.yml
+++ b/.github/workflows/integration-test-template.yml
@@ -51,11 +51,6 @@ jobs:
         with:
           name: tailscale-head-image
           path: /tmp/artifacts
-      - name: Download tailscale released images
-        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
-        with:
-          name: tailscale-released-images
-          path: /tmp/artifacts
       - name: Download hi binary
         uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
@@ -72,33 +67,28 @@ jobs:
         with:
           name: postgres-image
           path: /tmp/artifacts
-      - name: Force overlay2 storage driver
+      - name: Pin Docker to v28 (avoid v29 breaking changes)
         run: |
-          sudo mkdir -p /etc/docker
-          echo '{"storage-driver":"overlay2"}' | sudo tee /etc/docker/daemon.json
+          # Docker 29 breaks docker build via Go client libraries and
+          # docker load/save with certain tarball formats.
+          # Pin to Docker 28.x until our tooling is updated.
+          # https://github.com/actions/runner-images/issues/13474
+          sudo install -m 0755 -d /etc/apt/keyrings
+          curl -fsSL https://download.docker.com/linux/ubuntu/gpg \
+            | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+          echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
+            https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" \
+            | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+          sudo apt-get update -qq
+          VERSION=$(apt-cache madison docker-ce | grep '28\.5' | head -1 | awk '{print $3}')
+          sudo apt-get install -y --allow-downgrades \
+            "docker-ce=${VERSION}" "docker-ce-cli=${VERSION}"
           sudo systemctl restart docker
           docker version
-      - name: Load br_netfilter for in-cluster service routing
-        if: inputs.test == 'TestK8sOperator'
-        # TestK8sOperator runs k3s in a container; without br_netfilter on the
-        # host, bridged pod-to-pod traffic skips kube-proxy's ClusterIP DNAT and
-        # in-cluster DNS (kube-dns) is unreachable. The module cannot be loaded
-        # from inside the unprivileged-module rancher/k3s image, so load it here.
-        run: sudo modprobe br_netfilter
-      - name: Login to Docker Hub
-        env:
-          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_CI_USERNAME }}
-          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_CI_TOKEN }}
-        if: env.DOCKERHUB_USERNAME != ''
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
-        with:
-          username: ${{ env.DOCKERHUB_USERNAME }}
-          password: ${{ env.DOCKERHUB_TOKEN }}
       - name: Load Docker images, Go cache, and prepare binary
         run: |
           gunzip -c /tmp/artifacts/headscale-image.tar.gz | docker load
           gunzip -c /tmp/artifacts/tailscale-head-image.tar.gz | docker load
-          gunzip -c /tmp/artifacts/tailscale-released-images.tar.gz | docker load
           if [ -f /tmp/artifacts/postgres-image.tar.gz ]; then
             gunzip -c /tmp/artifacts/postgres-image.tar.gz | docker load
           fi
@@ -115,12 +105,6 @@ jobs:
           HEADSCALE_INTEGRATION_POSTGRES_IMAGE: ${{ inputs.postgres_flag == '--postgres=1' && format('postgres:{0}', github.sha) || '' }}
           HEADSCALE_INTEGRATION_GO_CACHE: /tmp/go-cache/go
           HEADSCALE_INTEGRATION_GO_BUILD_CACHE: /tmp/go-cache/.cache/go-build
-          # Mirror the docker/login-action secrets into env so the
-          # dockertestutil.Credentials resolver picks them up directly
-          # (otherwise it falls back to parsing ~/.docker/config.json,
-          # which works but is one step further from the source).
-          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_CI_USERNAME }}
-          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_CI_TOKEN }}
         run: /tmp/artifacts/hi run --stats --ts-memory-limit=300 --hs-memory-limit=1500 "^${{ inputs.test }}$" \
           --timeout=120m \
           ${{ inputs.postgres_flag }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
new file mode 100644
index 000000000..5e8ab5c4a
--- /dev/null
+++ b/.github/workflows/lint.yml
@@ -0,0 +1,93 @@
+name: Lint
+
+on: [pull_request]
+
+concurrency:
+  group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  golangci-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          fetch-depth: 0
+      - name: Get changed files
+        id: changed-files
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        with:
+          filters: |
+            files:
+              - '*.nix'
+              - 'go.*'
+              - '**/*.go'
+              - 'integration_test/'
+              - 'config-example.yaml'
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
+        if: steps.changed-files.outputs.files == 'true'
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
+        if: steps.changed-files.outputs.files == 'true'
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
+
+      - name: golangci-lint
+        if: steps.changed-files.outputs.files == 'true'
+        run: nix develop --command -- golangci-lint run
+          --new-from-rev=${{github.event.pull_request.base.sha}}
+          --output.text.path=stdout
+          --output.text.print-linter-name
+          --output.text.print-issued-lines
+          --output.text.colors
+
+  prettier-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          fetch-depth: 2
+      - name: Get changed files
+        id: changed-files
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        with:
+          filters: |
+            files:
+              - '*.nix'
+              - '**/*.md'
+              - '**/*.yml'
+              - '**/*.yaml'
+              - '**/*.ts'
+              - '**/*.js'
+              - '**/*.sass'
+              - '**/*.css'
+              - '**/*.scss'
+              - '**/*.html'
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
+        if: steps.changed-files.outputs.files == 'true'
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
+        if: steps.changed-files.outputs.files == 'true'
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
+
+      - name: Prettify code
+        if: steps.changed-files.outputs.files == 'true'
+        run: nix develop --command -- prettier --no-error-on-unmatched-pattern
+          --ignore-unknown --check **/*.{ts,js,md,yaml,yml,sass,css,scss,html}
+
+  proto-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
+
+      - name: Buf lint
+        run: nix develop --command -- buf lint proto
diff --git a/.github/workflows/nix-checks.yml b/.github/workflows/nix-checks.yml
deleted file mode 100644
index 03c4b8e8b..000000000
--- a/.github/workflows/nix-checks.yml
+++ /dev/null
@@ -1,56 +0,0 @@
-name: Nix Flake Checks
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
-
-concurrency:
-  group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
-  cancel-in-progress: true
-
-# Each job only runs `nix build .#checks.<system>.<name>`; the check logic lives
-# in flake.nix via the flake-checks library. The fileset-filtered checks hit the
-# hestia cache when their inputs are unchanged, so no changed-files gating.
-permissions:
-  contents: read
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
-      - name: build
-        run: nix build -L .#checks.x86_64-linux.build
-
-  gotest:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
-      - name: gotest
-        run: nix build -L .#checks.x86_64-linux.gotest
-
-  golangci-lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
-      - name: golangci-lint
-        run: nix build -L .#checks.x86_64-linux.golangci-lint
-
-  formatting:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
-      - name: formatting
-        run: nix build -L .#checks.x86_64-linux.formatting
diff --git a/.github/workflows/nix-module-test.yml b/.github/workflows/nix-module-test.yml
index 1a7fbcc85..68ad95456 100644
--- a/.github/workflows/nix-module-test.yml
+++ b/.github/workflows/nix-module-test.yml
@@ -38,14 +38,18 @@ jobs:
               - 'cmd/**'
               - 'hscontrol/**'
 
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
         if: steps.changed-files.outputs.nix == 'true' || steps.changed-files.outputs.go == 'true'
 
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
         if: steps.changed-files.outputs.nix == 'true' || steps.changed-files.outputs.go == 'true'
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
 
       - name: Run NixOS module tests
         if: steps.changed-files.outputs.nix == 'true' || steps.changed-files.outputs.go == 'true'
         run: |
           echo "Running NixOS module integration test..."
-          nix build .#checks.x86_64-linux.headscale -L --fallback
+          nix build .#checks.x86_64-linux.headscale -L
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 349ad53d1..f2eeacb4f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,10 +7,6 @@ on:
       - "*" # triggers only if push new tag version
   workflow_dispatch:
 
-defaults:
-  run:
-    shell: nix develop --fallback --command bash -e {0}
-
 jobs:
   goreleaser:
     if: github.repository == 'juanfont/headscale'
@@ -21,6 +17,25 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Pin Docker to v28 (avoid v29 breaking changes)
+        run: |
+          # Docker 29 breaks docker build via Go client libraries and
+          # docker load/save with certain tarball formats.
+          # Pin to Docker 28.x until our tooling is updated.
+          # https://github.com/actions/runner-images/issues/13474
+          sudo install -m 0755 -d /etc/apt/keyrings
+          curl -fsSL https://download.docker.com/linux/ubuntu/gpg \
+            | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+          echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
+            https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" \
+            | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+          sudo apt-get update -qq
+          VERSION=$(apt-cache madison docker-ce | grep '28\.5' | head -1 | awk '{print $3}')
+          sudo apt-get install -y --allow-downgrades \
+            "docker-ce=${VERSION}" "docker-ce-cli=${VERSION}"
+          sudo systemctl restart docker
+          docker version
+
       - name: Login to DockerHub
         uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
@@ -34,10 +49,14 @@ jobs:
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
 
       - name: Run goreleaser
-        run: goreleaser release --clean
+        run: nix develop --command -- goreleaser release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/servertest.yml b/.github/workflows/servertest.yml
deleted file mode 100644
index 795b29590..000000000
--- a/.github/workflows/servertest.yml
+++ /dev/null
@@ -1,36 +0,0 @@
-name: Server Tests
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
-
-concurrency:
-  group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
-  cancel-in-progress: true
-
-# hscontrol/servertest is excluded from the sandboxed gotest flake check: it is
-# slow (10s+ convergence cases) and timing-sensitive (race/stress/HA property
-# tests), so it runs here in the devShell with a generous timeout instead.
-defaults:
-  run:
-    shell: nix develop --fallback --command bash -e {0}
-
-permissions:
-  contents: read
-
-jobs:
-  servertest:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
-
-      - name: go test ./hscontrol/servertest
-        env:
-          CGO_ENABLED: "0"
-        run: go test -timeout=20m ./hscontrol/servertest/...
diff --git a/.github/workflows/test-integration.yaml b/.github/workflows/test-integration.yaml
index 0e2a03377..b30a5e1d5 100644
--- a/.github/workflows/test-integration.yaml
+++ b/.github/workflows/test-integration.yaml
@@ -6,15 +6,9 @@ on: [pull_request]
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
-defaults:
-  run:
-    shell: nix develop --fallback --command bash -e {0}
 jobs:
   # build: Builds binaries and Docker images once, uploads as artifacts for reuse.
   # build-postgres: Pulls postgres image separately to avoid Docker Hub rate limits.
-  # build-tailscale-released: Pre-pulls released Tailscale images from ghcr.io
-  # so fork PRs (no DOCKERHUB_USERNAME secret) don't hit Docker Hub rate
-  # limits at test time.
   # sqlite: Runs all integration tests with SQLite backend.
   # postgres: Runs a subset of tests with PostgreSQL to verify database compatibility.
   build:
@@ -39,18 +33,23 @@ jobs:
               - '.github/workflows/test-integration.yaml'
               - '.github/workflows/integration-test-template.yml'
               - 'Dockerfile.*'
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
         if: steps.changed-files.outputs.files == 'true'
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
         if: steps.changed-files.outputs.files == 'true'
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
       - name: Build binaries and warm Go cache
         if: steps.changed-files.outputs.files == 'true'
         run: |
           # Build all Go binaries in one nix shell to maximize cache reuse
-          go build -o hi ./cmd/hi
-          CGO_ENABLED=0 GOOS=linux go build -o headscale ./cmd/headscale
-          # Build integration test binary to warm the cache with all dependencies
-          go test -c ./integration -o /dev/null 2>/dev/null || true
+          nix develop --command -- bash -c '
+            go build -o hi ./cmd/hi
+            CGO_ENABLED=0 GOOS=linux go build -o headscale ./cmd/headscale
+            # Build integration test binary to warm the cache with all dependencies
+            go test -c ./integration -o /dev/null 2>/dev/null || true
+          '
       - name: Upload hi binary
         if: steps.changed-files.outputs.files == 'true'
         uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
@@ -70,26 +69,25 @@ jobs:
           name: go-cache
           path: go-cache.tar.gz
           retention-days: 10
-      - name: Force overlay2 storage driver
+      - name: Pin Docker to v28 (avoid v29 breaking changes)
         if: steps.changed-files.outputs.files == 'true'
         run: |
-          # Docker 29 runner images default to overlayfs, which breaks
-          # docker build via Go SDK libraries and docker save/load
-          # tarball formats. overlay2 is the long-standing default.
+          # Docker 29 breaks docker build via Go client libraries and
+          # docker load/save with certain tarball formats.
+          # Pin to Docker 28.x until our tooling is updated.
           # https://github.com/actions/runner-images/issues/13474
-          sudo mkdir -p /etc/docker
-          echo '{"storage-driver":"overlay2"}' | sudo tee /etc/docker/daemon.json
+          sudo install -m 0755 -d /etc/apt/keyrings
+          curl -fsSL https://download.docker.com/linux/ubuntu/gpg \
+            | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+          echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
+            https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" \
+            | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+          sudo apt-get update -qq
+          VERSION=$(apt-cache madison docker-ce | grep '28\.5' | head -1 | awk '{print $3}')
+          sudo apt-get install -y --allow-downgrades \
+            "docker-ce=${VERSION}" "docker-ce-cli=${VERSION}"
           sudo systemctl restart docker
           docker version
-      - name: Login to Docker Hub
-        env:
-          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_CI_USERNAME }}
-          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_CI_TOKEN }}
-        if: env.DOCKERHUB_USERNAME != ''
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
-        with:
-          username: ${{ env.DOCKERHUB_USERNAME }}
-          password: ${{ env.DOCKERHUB_TOKEN }}
       - name: Build headscale image
         if: steps.changed-files.outputs.files == 'true'
         run: |
@@ -125,24 +123,25 @@ jobs:
     needs: build
     if: needs.build.outputs.files-changed == 'true'
     steps:
-      - name: Force overlay2 storage driver
-        shell: bash
+      - name: Pin Docker to v28 (avoid v29 breaking changes)
         run: |
-          sudo mkdir -p /etc/docker
-          echo '{"storage-driver":"overlay2"}' | sudo tee /etc/docker/daemon.json
+          # Docker 29 breaks docker build via Go client libraries and
+          # docker load/save with certain tarball formats.
+          # Pin to Docker 28.x until our tooling is updated.
+          # https://github.com/actions/runner-images/issues/13474
+          sudo install -m 0755 -d /etc/apt/keyrings
+          curl -fsSL https://download.docker.com/linux/ubuntu/gpg \
+            | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+          echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
+            https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" \
+            | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+          sudo apt-get update -qq
+          VERSION=$(apt-cache madison docker-ce | grep '28\.5' | head -1 | awk '{print $3}')
+          sudo apt-get install -y --allow-downgrades \
+            "docker-ce=${VERSION}" "docker-ce-cli=${VERSION}"
           sudo systemctl restart docker
           docker version
-      - name: Login to Docker Hub
-        env:
-          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_CI_USERNAME }}
-          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_CI_TOKEN }}
-        if: env.DOCKERHUB_USERNAME != ''
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
-        with:
-          username: ${{ env.DOCKERHUB_USERNAME }}
-          password: ${{ env.DOCKERHUB_TOKEN }}
       - name: Pull and save postgres image
-        shell: bash
         run: |
           docker pull postgres:latest
           docker tag postgres:latest postgres:${{ github.sha }}
@@ -153,67 +152,8 @@ jobs:
           name: postgres-image
           path: postgres-image.tar.gz
           retention-days: 10
-  build-tailscale-released:
-    runs-on: ubuntu-24.04-arm
-    needs: build
-    if: needs.build.outputs.files-changed == 'true'
-    steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
-      - uses: NixOS/nix-installer-action@6b8548fe06acfb0155a50ab5d561accb215764cc # main
-      - uses: Mic92/hestia/action@ff07bb902a9968ac0c3d0e51d90a606662a375d8 # main
-      - name: Force overlay2 storage driver
-        run: |
-          sudo mkdir -p /etc/docker
-          echo '{"storage-driver":"overlay2"}' | sudo tee /etc/docker/daemon.json
-          sudo systemctl restart docker
-          docker version
-      - name: Login to Docker Hub
-        env:
-          DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_CI_USERNAME }}
-          DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_CI_TOKEN }}
-        if: env.DOCKERHUB_USERNAME != ''
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
-        with:
-          username: ${{ env.DOCKERHUB_USERNAME }}
-          password: ${{ env.DOCKERHUB_TOKEN }}
-      - name: List Tailscale versions to pre-pull
-        id: versions
-        run: |
-          versions=$(go run ./cmd/hi list-versions --set=must --exclude=head)
-          echo "versions=${versions}" >> "$GITHUB_OUTPUT"
-          echo "Pre-pulling: ${versions}"
-      - name: Pull Tailscale images
-        run: |
-          # Releases come from ghcr.io (anonymous, unmetered). The
-          # "unstable" floating tag on ghcr.io has been stale since 2022,
-          # so it still needs to come from Docker Hub. xargs -P 0 fans
-          # out one process per tag and returns non-zero if any pull
-          # fails.
-          refs=""
-          for v in ${{ steps.versions.outputs.versions }}; do
-            if [ "${v}" = "unstable" ]; then
-              refs="${refs} tailscale/tailscale:${v}"
-            else
-              refs="${refs} ghcr.io/tailscale/tailscale:${v}"
-            fi
-          done
-          echo "${refs}" | tr ' ' '\n' | grep -v '^$' \
-            | xargs -P 0 -I{} docker pull "{}"
-          echo "REFS=${refs}" >> "$GITHUB_ENV"
-      - name: Save Tailscale images to tarball
-        run: |
-          # Single docker save with all refs: one consistent snapshot, no
-          # parallel-daemon race.
-          docker save ${REFS} | gzip > tailscale-released-images.tar.gz
-          ls -lh tailscale-released-images.tar.gz
-      - name: Upload Tailscale released images
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
-        with:
-          name: tailscale-released-images
-          path: tailscale-released-images.tar.gz
-          retention-days: 10
   sqlite:
-    needs: [build, build-tailscale-released]
+    needs: build
     if: needs.build.outputs.files-changed == 'true'
     strategy:
       fail-fast: false
@@ -241,7 +181,7 @@ jobs:
           - TestACLDynamicUnknownUserRemoval
           - TestAPIAuthenticationBypass
           - TestAPIAuthenticationBypassCurl
-          - TestRemoteCLIAuthenticationBypass
+          - TestGRPCAuthenticationBypass
           - TestCLIWithConfigAuthenticationBypass
           - TestAuthKeyLogoutAndReloginSameUser
           - TestAuthKeyLogoutAndReloginNewUser
@@ -262,34 +202,20 @@ jobs:
           - TestAuthWebFlowAuthenticationPingAll
           - TestAuthWebFlowLogoutAndReloginSameUser
           - TestAuthWebFlowLogoutAndReloginNewUser
-          - TestApiKeyCommand
-          - TestApiKeyCommandValidation
-          - TestAuthCommandValidation
-          - TestNodeCommand
-          - TestNodeExpireCommand
-          - TestNodeRenameCommand
-          - TestPreAuthKeyCorrectUserLoggedInCommand
-          - TestTaggedNodesCLIOutput
-          - TestNodeExpireFlagsCommand
-          - TestNodeCommandValidation
-          - TestNodeTagCommand
-          - TestNodeRouteCommands
-          - TestNodeBackfillIPsCommand
-          - TestOAuthClientCommand
-          - TestOAuthClientCommandValidation
           - TestPolicyCheckCommand
           - TestSSHTestsRejectFailingPolicy
-          - TestPolicyCommand
-          - TestPolicyBrokenConfigCommand
+          - TestUserCommand
           - TestPreAuthKeyCommand
           - TestPreAuthKeyCommandWithoutExpiry
           - TestPreAuthKeyCommandReusableEphemeral
-          - TestPreAuthKeyDeleteCommand
-          - TestPreAuthKeyCommandValidation
-          - TestServerInfoCommands
-          - TestUserCommand
-          - TestUserCreateCommand
-          - TestUserCommandValidation
+          - TestPreAuthKeyCorrectUserLoggedInCommand
+          - TestTaggedNodesCLIOutput
+          - TestApiKeyCommand
+          - TestNodeCommand
+          - TestNodeExpireCommand
+          - TestNodeRenameCommand
+          - TestPolicyCommand
+          - TestPolicyBrokenConfigCommand
           - TestDERPVerifyEndpoint
           - TestResolveMagicDNS
           - TestResolveMagicDNSExtraRecordsPath
@@ -311,7 +237,6 @@ jobs:
           - Test2118DeletingOnlineNodePanics
           - TestGrantCapRelay
           - TestGrantCapDrive
-          - TestK8sOperator
           - TestEnablingRoutes
           - TestHASubnetRouterFailover
           - TestSubnetRouteACL
@@ -344,7 +269,6 @@ jobs:
           - TestSSHCheckModeUnapprovedTimeout
           - TestSSHCheckModeCheckPeriodCLI
           - TestSSHCheckModeAutoApprove
-          - TestSSHCheckModeSessionLossReDelegates
           - TestSSHCheckModeNegativeCLI
           - TestSSHLocalpart
           - TestTagsAuthKeyWithTagRequestDifferentTag
@@ -379,8 +303,6 @@ jobs:
           - TestTagsAuthKeyWithoutUserInheritsTags
           - TestTagsAuthKeyWithoutUserRejectsAdvertisedTags
           - TestTagsAuthKeyConvertToUserViaCLIRegister
-          - TestTS2021WebSocketGET
-          - TestTS2021WASMClientUnderNode
           - TestTailscaleRustAxum
     uses: ./.github/workflows/integration-test-template.yml
     secrets: inherit
@@ -389,7 +311,7 @@ jobs:
       postgres_flag: "--postgres=0"
       database_name: "sqlite"
   postgres:
-    needs: [build, build-postgres, build-tailscale-released]
+    needs: [build, build-postgres]
     if: needs.build.outputs.files-changed == 'true'
     strategy:
       fail-fast: false
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
new file mode 100644
index 000000000..31eb431b4
--- /dev/null
+++ b/.github/workflows/test.yml
@@ -0,0 +1,47 @@
+name: Tests
+
+on: [push, pull_request]
+
+concurrency:
+  group: ${{ github.workflow }}-$${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          fetch-depth: 2
+
+      - name: Get changed files
+        id: changed-files
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+        with:
+          filters: |
+            files:
+              - '*.nix'
+              - 'go.*'
+              - '**/*.go'
+              - 'integration_test/'
+              - 'config-example.yaml'
+
+      - uses: nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035 # v34
+        if: steps.changed-files.outputs.files == 'true'
+      - uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
+        if: steps.changed-files.outputs.files == 'true'
+        with:
+          primary-key: nix-${{ runner.os }}-${{ runner.arch }}-${{ hashFiles('**/*.nix',
+            '**/flake.lock') }}
+          restore-prefixes-first-match: nix-${{ runner.os }}-${{ runner.arch }}
+
+      - name: Run tests
+        if: steps.changed-files.outputs.files == 'true'
+        env:
+          # As of 2025-01-06, these env vars was not automatically
+          # set anymore which breaks the initdb for postgres on
+          # some of the database migration tests.
+          LC_ALL: "en_US.UTF-8"
+          LC_CTYPE: "en_US.UTF-8"
+        run: nix develop --command -- gotestsum
diff --git a/.github/workflows/update-flake.yml b/.github/workflows/update-flake.yml
new file mode 100644
index 000000000..1c8b262ed
--- /dev/null
+++ b/.github/workflows/update-flake.yml
@@ -0,0 +1,19 @@
+name: update-flake-lock
+on:
+  workflow_dispatch: # allows manual triggering
+  schedule:
+    - cron: "0 0 * * 0" # runs weekly on Sunday at 00:00
+
+jobs:
+  lockfile:
+    if: github.repository == 'juanfont/headscale'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@21a544727d0c62386e78b4befe52d19ad12692e3 # v17
+      - name: Update flake.lock
+        uses: DeterminateSystems/update-flake-lock@428c2b58a4b7414dabd372acb6a03dba1084d3ab # v25
+        with:
+          pr-title: "Update flake.lock"
diff --git a/.gitignore b/.gitignore
index 9f72ef80a..8dbdbe855 100644
--- a/.gitignore
+++ b/.gitignore
@@ -46,9 +46,6 @@ result
 
 integration_test/etc/config.dump.yaml
 
-# OpenAPI spec is served live from the code and emitted on demand, not committed
-/openapi/v1/headscale.yaml
-
 # MkDocs
 .cache
 /site
diff --git a/.golangci.yaml b/.golangci.yaml
index 1721cf613..c6d8ff014 100644
--- a/.golangci.yaml
+++ b/.golangci.yaml
@@ -13,7 +13,6 @@ linters:
     - gochecknoinits
     - gocognit
     - godox
-    - gomodguard
     - interfacebloat
     - ireturn
     - lll
@@ -31,17 +30,6 @@ linters:
     - wrapcheck
     - wsl
   settings:
-    goconst:
-      # Test fixtures repeat strings (IPs, tags, hostnames) by their
-      # nature; extracting them obscures the test rather than helping.
-      # Production code stays strict.
-      ignore-tests: true
-      # Default is 3. Bump so "happens thrice" cases that are not part
-      # of a shared vocabulary do not get extracted.
-      min-occurrences: 5
-      # Default is 3. Short literals ("set", "get", "new") read better
-      # at call sites than behind a named constant.
-      min-len: 6
     forbidigo:
       forbid:
         # Forbid time.Sleep everywhere with context-appropriate alternatives
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index aa4355c4c..c1b065670 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -2,9 +2,8 @@
 # See: https://prek.j178.dev/quickstart/
 # See: https://prek.j178.dev/builtin/
 
-# Global exclusions - ignore generated code (proto output and emitted OpenAPI)
-# and recorded golden fixtures.
-exclude: ^(gen|openapi)/|^hscontrol/testdata/apiv1_golden/
+# Global exclusions - ignore generated code
+exclude: ^gen/
 
 repos:
   # Built-in hooks from pre-commit/pre-commit-hooks
diff --git a/AGENTS.md b/AGENTS.md
index 8f3428acb..7fc325c6a 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -275,11 +275,6 @@ Key reminders:
   `e = e.Str("k", v)`. Forgetting to reassign silently drops the field.
 - **Tests**: prefer `hscontrol/servertest/` for server-level tests that
   don't need Docker — faster than full integration tests.
-- **View types in read paths**: response serializers must read through
-  `NodeView`/`UserView`/`PreAuthKeyView` accessors. `AsStruct()` clones the
-  whole record on every read — it is only for DB-write/merge clones and mutable
-  working copies, never to build an API response. `grep AsStruct hscontrol/api`
-  must come back empty.
 
 ## Gotchas
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 785d7d855..a16e84891 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,71 +1,8 @@
 # CHANGELOG
 
-## 0.30.0 (202x-xx-xx)
+## 0.29.0 (202x-xx-xx)
 
-**Minimum supported Tailscale client version: v1.xx.0**
-
-### v1 REST API replaced; gRPC and Protobuf removed
-
-The v1 REST API now provides an OpenAPI 3.1 specification at
-`/api/v1/openapi.yaml`, with interactive documentation at `/api/v1/docs`. This
-replaces the Swagger 2.0 document and the `/swagger` UI. The Protobuf, gRPC and
-grpc-gateway stack behind it is gone, and the `headscale` CLI now talks to the
-HTTP API directly.
-
-[#3324](https://github.com/juanfont/headscale/pull/3324)
-
-### OAuth clients and scopes for the v2 API
-
-The v2 API now authenticates with OAuth 2.0 client-credentials, the way the
-Tailscale ecosystem does. An OAuth client mints short-lived access tokens whose
-scopes limit which operations they may perform and whose tags limit the devices
-they may create, so a credential can be issued with only the access it needs.
-The `headscale oauth-clients` command manages them. This lets the Tailscale
-Terraform provider and Kubernetes operator drive Headscale unchanged; admin API
-keys remain all-access.
-
-[#3334](https://github.com/juanfont/headscale/pull/3334)
-
-### BREAKING
-
-#### API
-
-- The gRPC API is removed; all programmatic access now goes through the HTTP API at `/api/v1` [#3324](https://github.com/juanfont/headscale/pull/3324)
-- API errors are now RFC 7807 `application/problem+json`, including authentication failures, instead of the previous gRPC-status JSON shape [#3324](https://github.com/juanfont/headscale/pull/3324)
-- Errors that previously returned HTTP 500 — unknown users or nodes, malformed input, duplicate names — now return the correct 404, 400 or 409 [#3324](https://github.com/juanfont/headscale/pull/3324)
-- The OpenAPI document is OpenAPI 3.1 at `/api/v1/openapi.yaml` (docs at `/api/v1/docs`), replacing Swagger 2.0 at `/swagger` [#3324](https://github.com/juanfont/headscale/pull/3324)
-
-#### CLI
-
-- `--output json` / `--output yaml` now emit the API's shape — camelCase fields, string-encoded IDs, RFC3339 timestamps — instead of the old Protobuf encoding [#3324](https://github.com/juanfont/headscale/pull/3324)
-- `headscale policy` renames the database-bypass flag from `--bypass-grpc-and-access-database-directly` to `--bypass-server-and-access-database-directly` [#3324](https://github.com/juanfont/headscale/pull/3324)
-
-### Changes
-
-- Expiring or deleting a non-existent pre-auth key now returns an error instead of silently succeeding [#3324](https://github.com/juanfont/headscale/pull/3324)
-- Improve systemd service file hardening [#3341](https://github.com/juanfont/headscale/pull/3341)
-
-## 0.29.2 (2026-07-01)
-
-**Minimum supported Tailscale client version: v1.80.0**
-
-### Changes
-
-- Fix map generation serializing on the policy lock, so a mass reconnect on `autogroup:self`, via or relay policies no longer stalls clients into `unexpected EOF` retry loops [#3358](https://github.com/juanfont/headscale/pull/3358)
-- Fix `/ts2021` rejecting the WebSocket `GET` upgrade with 405, which prevented Tailscale JS/WASM control clients from connecting [#3359](https://github.com/juanfont/headscale/pull/3359)
-- Gracefully handle nodes with an invalid FQDN (empty or too long) instead of failing map delivery; offending names are logged at startup with the fix command [#3349](https://github.com/juanfont/headscale/pull/3349)
-
-## 0.29.1 (2026-06-18)
-
-**Minimum supported Tailscale client version: v1.80.0**
-
-### Changes
-
-- Fix nodes with `tags='null'` losing their assigned user on upgrade [#3325](https://github.com/juanfont/headscale/pull/3325)
-
-## 0.29.0 (2026-06-17)
-
-**Minimum supported Tailscale client version: v1.80.0**
+**Minimum supported Tailscale client version: v1.76.0**
 
 ### Tailscale ACL compatibility improvements
 
@@ -109,31 +46,36 @@ This feature is **beta** while behavioural coverage against Tailscale SaaS broad
 
 ### SSH policy tests (beta)
 
-Headscale now evaluates the `sshTests` block in a policy file. Each entry names a source, one or
-more destination hosts, and three optional user lists: `accept` asserts the listed login users
-reach every destination via an accept- or check-action SSH rule, `deny` asserts none of them
-reach any destination, and `check` requires reachability specifically through a check-action
-rule. Tests run on `headscale policy set`, on SIGHUP reload (`systemctl reload headscale` /
-`kill -HUP $(pidof headscale)`), and on `headscale policy check`. A failing test rejects the
-write before it is applied, with the same error message Tailscale SaaS would return for the same
-policy.
+Headscale now evaluates the `sshTests` block in a policy file. Tests assert which SSH login users
+can connect from a named source to named destinations against the same SSH rules clients receive.
+They run on `headscale policy set`, on SIGHUP reload (`systemctl reload headscale` /
+`kill -HUP $(pidof headscale)`), and on `headscale policy check`. A failing test rejects the write
+before it is applied, with the same error message Tailscale SaaS would return for the same policy.
+
+An entry has the shape:
+
+```hujson
+"sshTests": [
+    {
+        "src":    "alice@example.com",
+        "dst":    ["tag:server"],
+        "accept": ["root"],
+        "deny":   ["alice"],
+        "check":  ["ubuntu"]
+    }
+]
+```
+
+`accept` asserts the listed login users reach every dst via an accept- or check-action SSH rule,
+`deny` asserts none of them reach any dst, and `check` requires reachability specifically via a
+check-action rule.
 
 At boot a stored policy whose sshTests no longer pass — for example because a referenced user was
-deleted while the server was offline — logs a warning and the server keeps running. Fix the
-policy and reload.
+deleted while the server was offline — logs a warning and the server keeps running. Fix the policy
+and reload.
 
 This feature is **beta** while behavioural coverage against Tailscale SaaS broadens.
 
-[#3263](https://github.com/juanfont/headscale/pull/3263)
-
-### SSH rule validation
-
-SSH rule parsing now trims surrounding whitespace on `action`, `users`, `src`, and `dst`,
-rejects empty or wildcard entries in `users`, rejects empty `acceptEnv`, and rejects negative
-`checkPeriod`. `hosts:` aliases are rejected as SSH destinations, non-ASCII tag names are
-rejected at parse time, and the wording for group-nesting cycles matches Tailscale SaaS.
-[#3263](https://github.com/juanfont/headscale/pull/3263)
-
 ### Grants
 
 We now support [Tailscale grants](https://tailscale.com/docs/features/access-control/grants)
@@ -143,82 +85,33 @@ field steers traffic through specific tagged subnet routers or exit nodes. The `
 an ACL rule. Grants can be mixed with ACLs in the same policy file.
 [#2180](https://github.com/juanfont/headscale/pull/2180)
 
-As part of this, we added `autogroup:danger-all`. It resolves to `0.0.0.0/0` and `::/0`, all IP
+As part of this, we added `autogroup:danger-all`. It resolves to `0.0.0.0/0` and `::/0` — all IP
 addresses, including those outside the tailnet. This replaces the old behaviour where `*` matched
-all IPs (see BREAKING below). The name is intentional: accepting traffic from the entire
+all IPs (see BREAKING below). The name is intentionally scary: accepting traffic from the entire
 internet is a security-sensitive choice. `autogroup:danger-all` can only be used as a source.
 
-### Node attributes (`nodeAttrs`)
+### Hostname handling (cleanroom rewrite)
 
-ACL policies now accept a `nodeAttrs` block. Each entry hands a list of
-Tailscale node capabilities to every node matching `target`. The accepted
-target forms are the same as `acls.src` and `grants.src`: users, groups,
-tags, hosts, prefixes, `autogroup:member`, `autogroup:tagged`, and `*`.
+The hostname ingest pipeline has been rewritten to match Tailscale SaaS byte-for-byte.
+Headscale previously had three overlapping regexes and two disagreeing entry points
+(registration vs map-request update), which caused a recurring class of bugs: names
+containing apostrophes, spaces, dots, or non-ASCII characters were alternately rejected
+(dropping updates with log spam) or stored as `invalid-<rand>` surrogates
+([#3188](https://github.com/juanfont/headscale/issues/3188),
+[#2926](https://github.com/juanfont/headscale/issues/2926),
+[#2343](https://github.com/juanfont/headscale/issues/2343),
+[#2762](https://github.com/juanfont/headscale/issues/2762),
+[#2177](https://github.com/juanfont/headscale/issues/2177),
+[#2121](https://github.com/juanfont/headscale/issues/2121),
+[#2449](https://github.com/juanfont/headscale/issues/2449),
+[#363](https://github.com/juanfont/headscale/issues/363)).
 
-```jsonc
-{
-  "randomizeClientPort": true,
-  "nodeAttrs": [
-    { "target": ["autogroup:tagged"], "attr": ["disable-captive-portal-detection"] },
-    { "target": ["alice@example.com"], "attr": ["nextdns:abc123"] },
-  ],
-}
-```
+What changed:
 
-Frequently requested capabilities this unlocks include `magicdns-aaaa`,
-`disable-relay-server`, `disable-captive-portal-detection`,
-`nextdns:<profile>` / `nextdns:no-device-info`, `randomize-client-port`,
-and the Taildrive `drive:share` / `drive:access` pair. The set is not
-limited to these, any string-only cap an operator places in policy
-reaches clients unchanged.
-
-`randomizeClientPort` also lands as a top-level policy field that toggles
-the default for every node, replacing the old server-config knob.
-
-A new `auto_update.enabled` config option controls the tailnet-wide
-default for client auto-update. When true, every node's CapMap carries
-`default-auto-update: [true]` so fresh clients pick up the default
-unless they make a local opt-in / opt-out choice.
-
-Policies that use the `funnel` cap, `ipPool` blocks, or
-`autogroup:admin` / `autogroup:owner` targets are rejected at load —
-those features depend on machinery headscale does not yet ship.
-
-[#3251](https://github.com/juanfont/headscale/pull/3251)
-
-### Taildrive
-
-Taildrive ([file-sync between
-nodes](https://tailscale.com/docs/features/taildrive)) is now
-configurable through policy. Grant `drive:share` to the node that
-hosts files and `drive:access` to nodes that read or write them; pair
-with a `tailscale.com/cap/drive` grant to set the per-share access
-mode:
-
-```jsonc
-{
-  "nodeAttrs": [
-    { "target": ["tag:fileserver"], "attr": ["drive:share"] },
-    { "target": ["autogroup:member"], "attr": ["drive:access"] },
-  ],
-  "grants": [
-    {
-      "src": ["autogroup:member"],
-      "dst": ["tag:fileserver"],
-      "app": {
-        "tailscale.com/cap/drive": [{ "shares": ["*"], "access": "rw" }],
-      },
-    },
-  ],
-}
-```
-
-A wildcard `nodeAttrs` (`"target": ["*"]`) hands the caps to every
-node when fine-grained control is not needed.
-
-### Hostname sanitisation
-
-Hostnames are now santised using Tailscales `magicdns` sanitisation rules, matching Tailscale SaaS behavior. This means that hostnames with non-ASCII characters, special characters, or reserved DNS label characters are now transformed into valid DNS labels for MagicDNS. This improves our previously too strict sanitisation that rejected hostnames based on our guesswork and not based on the Tailscale upstream behaviour.
+- Sanitisation and validation now come directly from
+  `tailscale.com/util/dnsname.SanitizeHostname` / `ValidLabel`.
+- Admin rename (`headscale nodes rename`) now validates via `dnsname.ValidLabel` and
+  rejects labels already held by another node (previously coerced invalid input silently).
 
 Examples that previously regressed and now work:
 
@@ -231,24 +124,11 @@ Examples that previously regressed and now work:
 | `My-PC!`             | `My-PC!`             | `my-pc`               |
 | `我的电脑`           | `我的电脑`           | `node`                |
 
-[#3202](https://github.com/juanfont/headscale/pull/3202)
-
-### HA subnet router health probing
-
-Headscale now actively probes HA subnet routers to detect nodes that are connected but not
-forwarding traffic. The control plane periodically pings HA subnet routers via the Noise
-control channel and fails over to a healthy standby if the primary stops responding. This is
-enabled by default (`node.routes.ha.probe_interval: 10s`, `probe_timeout: 5s`) and only
-active when HA routes exist (2+ nodes advertising the same prefix). Set `probe_interval` to
-`0` to disable. This complements the existing disconnect-based failover, catching "zombie
-connected" routers that maintain their control session but cannot route packets.
-[#3194](https://github.com/juanfont/headscale/pull/3194)
-
 ### BREAKING
 
 #### Hostname handling
 
-- The `GivenName` collision policy changed from an 8-char random hash suffix (`laptop-abc12xyz`) to a monotonic numeric suffix (`laptop`, `laptop-1`, `laptop-2`, …), matching Tailscale SaaS. Empty / all-non-ASCII hostnames now fall back to the literal `node` instead of `invalid-<rand>`. MagicDNS names change on upgrade for any node whose previous label was a random-suffix form; the raw `Hostname` column is unchanged. [#3202](https://github.com/juanfont/headscale/pull/3202)
+- The `GivenName` collision policy changed from an 8-char random hash suffix (`laptop-abc12xyz`) to a monotonic numeric suffix (`laptop`, `laptop-1`, `laptop-2`, …), matching Tailscale SaaS. Empty / all-non-ASCII hostnames now fall back to the literal `node` instead of `invalid-<rand>`. MagicDNS names change on upgrade for any node whose previous label was a random-suffix form; the raw `Hostname` column is unchanged.
 
 #### ACL Policy
 
@@ -257,8 +137,8 @@ connected" routers that maintain their control session but cannot route packets.
   - Policies that need to match all IP addresses including non-Tailscale IPs should use `autogroup:danger-all` as a source, or explicit CIDR ranges as destinations [#2180](https://github.com/juanfont/headscale/pull/2180)
   - `autogroup:danger-all` can only be used as a source; it cannot be used as a destination
   - **Note**: Users with non-standard IP ranges configured in `prefixes.ipv4` or `prefixes.ipv6` (which is unsupported and produces a warning) will need to explicitly specify their CIDR ranges in ACL rules instead of using `*`
-- Validate `autogroup:self` source restrictions matching Tailscale behavior - tags, hosts, and IPs are rejected as sources for `autogroup:self` destinations [#3036](https://github.com/juanfont/headscale/pull/3036)
-  - Policies using tags, hosts, or IP addresses as sources for `autogroup:self` destinations will now fail validation
+- Validate autogroup:self source restrictions matching Tailscale behavior - tags, hosts, and IPs are rejected as sources for autogroup:self destinations [#3036](https://github.com/juanfont/headscale/pull/3036)
+  - Policies using tags, hosts, or IP addresses as sources for autogroup:self destinations will now fail validation
 - The `proto:icmp` protocol name now only includes ICMPv4 (protocol 1), matching Tailscale behavior [#3036](https://github.com/juanfont/headscale/pull/3036)
   - Previously, `proto:icmp` included both ICMPv4 and ICMPv6
   - Use `proto:ipv6-icmp` or protocol number `58` explicitly for ICMPv6
@@ -270,32 +150,21 @@ connected" routers that maintain their control session but cannot route packets.
   - Downgrading to a previous minor version is blocked
   - Patch version changes within the same minor are always allowed
 
-#### Configuration
-
-- The `randomize_client_port` server-config key was removed; the
-  toggle now lives in the policy file as a top-level
-  `randomizeClientPort` field, matching the Tailscale-hosted schema. [#3251](https://github.com/juanfont/headscale/pull/3251)
-  Headscale refuses to start when the old key is set. Move it to the
-  policy file referenced by `policy.path`:
-
-  ```jsonc
-  {
-    "randomizeClientPort": true,
-  }
-  ```
-
-  If you do not have a policy file yet, create one with that minimal
-  content and point `policy.path` at it. The default carries over —
-  empty / absent policy means `randomizeClientPort: false`, matching
-  the previous behaviour for operators who never set the key. Per-node
-  opt-in via `nodeAttrs` is also supported and stacks on top of the
-  global default.
-
 #### CLI
 
 - `headscale nodes register` is deprecated in favour of `headscale auth register --auth-id <id> --user <user>` [#1850](https://github.com/juanfont/headscale/pull/1850)
   - The old command continues to work but will be removed in a future release
 
+### HA subnet router health probing
+
+Headscale now actively probes HA subnet routers to detect nodes that are connected but not
+forwarding traffic. The control plane periodically pings HA subnet routers via the Noise
+control channel and fails over to a healthy standby if the primary stops responding. This is
+enabled by default (`node.routes.ha.probe_interval: 10s`, `probe_timeout: 5s`) and only
+active when HA routes exist (2+ nodes advertising the same prefix). Set `probe_interval` to
+`0` to disable. This complements the existing disconnect-based failover, catching "zombie
+connected" routers that maintain their control session but cannot route packets.
+
 ### Changes
 
 #### ACL Policy
@@ -336,7 +205,7 @@ connected" routers that maintain their control session but cannot route packets.
 - `headscale policy check --bypass-grpc-and-access-database-directly` validates `user@` tokens against the live user database [#3160](https://github.com/juanfont/headscale/issues/3160)
 - Remove deprecated `--namespace` flag from `nodes list`, `nodes register`, and `debug create-node` commands (use `--user` instead) [#3093](https://github.com/juanfont/headscale/pull/3093)
 - Remove deprecated `namespace`/`ns` command aliases for `users` and `machine`/`machines` aliases for `nodes` [#3093](https://github.com/juanfont/headscale/pull/3093)
-- Fix `DestroyUser` deleting all pre-auth keys in the database instead of only the target user's keys [#3155](https://github.com/juanfont/headscale/pull/3155)
+- **User deletion**: Fix `DestroyUser` deleting all pre-auth keys in the database instead of only the target user's keys [#3155](https://github.com/juanfont/headscale/pull/3155)
 - `headscale policy check` evaluates the `tests` block when invoked with `--bypass-grpc-and-access-database-directly`; without the flag it warns instead of running the tests against empty data [#1803](https://github.com/juanfont/headscale/issues/1803)
 
 #### API
@@ -356,7 +225,6 @@ connected" routers that maintain their control session but cannot route packets.
   - Tagged nodes (registered with tagged pre-auth keys) are exempt from default expiry
   - `oidc.expiry` has been removed; use `node.expiry` instead (applies to all registration methods including OIDC)
   - `ephemeral_node_inactivity_timeout` is deprecated in favour of `node.ephemeral.inactivity_timeout`
-- Add `trusted_proxies` to gate `True-Client-IP` / `X-Real-IP` / `X-Forwarded-For` (previously honoured from any client) [#3268](https://github.com/juanfont/headscale/pull/3268)
 
 #### Debug
 
@@ -368,10 +236,8 @@ connected" routers that maintain their control session but cannot route packets.
 
 - Remove old migrations for the debian package [#3185](https://github.com/juanfont/headscale/pull/3185)
 - Install `config-example.yaml` as example for the debian package [#3186](https://github.com/juanfont/headscale/pull/3186)
-- Fix user-owned re-registration with zero client expiry and no default storing `0001-01-01 00:00:00` in the database instead of `NULL` [#3199](https://github.com/juanfont/headscale/pull/3199)
-- Fix `tailscaled` restart on a node with no expiry resetting `NULL` to `0001-01-01 00:00:00` in the database, affecting both tagged and untagged nodes [#3197](https://github.com/juanfont/headscale/pull/3197)
-- Backfill `nodes.expiry` rows persisted by older versions as `0001-01-01 00:00:00` to `NULL`, so nodes upgraded from <0.28 stop reporting as expired [#3284](https://github.com/juanfont/headscale/issues/3284)
-- Update reverse proxy documentation for `trusted_proxies` configuration option [#3292](https://github.com/juanfont/headscale/pull/3292)
+- **Node Expiry**: Fix user owned re registration with zero client expiry and no default storing `0001-01-01 00:00:00` in the database instead of NULL [#3199](https://github.com/juanfont/headscale/pull/3199)
+  - Pre-existing rows with `0001-01-01 00:00:00` are not backfilled; they clear themselves the next time the node re-registers
 
 ## 0.28.0 (2026-02-04)
 
diff --git a/Dockerfile.derper b/Dockerfile.derper
index 166d38547..0deb69e40 100644
--- a/Dockerfile.derper
+++ b/Dockerfile.derper
@@ -1,6 +1,6 @@
 # For testing purposes only
 
-FROM golang:1.26.4-alpine AS build-env
+FROM golang:1.26.3-alpine AS build-env
 
 WORKDIR /go/src
 
@@ -12,7 +12,7 @@ WORKDIR /go/src/tailscale
 ARG TARGETARCH
 RUN GOARCH=$TARGETARCH go install -v ./cmd/derper
 
-FROM alpine:3.23
+FROM alpine:3.22
 RUN apk add --no-cache ca-certificates iptables iproute2 ip6tables curl
 
 COPY --from=build-env /go/bin/* /usr/local/bin/
diff --git a/Dockerfile.integration b/Dockerfile.integration
index 670ef452c..c897ab8d2 100644
--- a/Dockerfile.integration
+++ b/Dockerfile.integration
@@ -2,7 +2,7 @@
 # and are in no way endorsed by Headscale's maintainers as an
 # official nor supported release or distribution.
 
-FROM docker.io/golang:1.26.4-trixie AS builder
+FROM docker.io/golang:1.26.2-trixie AS builder
 ARG VERSION=dev
 ENV GOPATH /go
 WORKDIR /go/src/headscale
diff --git a/Dockerfile.tailscale-HEAD b/Dockerfile.tailscale-HEAD
index b3151e614..7d0d43bfc 100644
--- a/Dockerfile.tailscale-HEAD
+++ b/Dockerfile.tailscale-HEAD
@@ -4,7 +4,7 @@
 # This Dockerfile is more or less lifted from tailscale/tailscale
 # to ensure a similar build process when testing the HEAD of tailscale.
 
-FROM golang:1.26.4-alpine AS build-env
+FROM golang:1.26.3-alpine AS build-env
 
 WORKDIR /go/src
 
@@ -36,7 +36,7 @@ RUN GOARCH=$TARGETARCH go install -tags="${BUILD_TAGS}" -ldflags="\
       -X tailscale.com/version.gitCommitStamp=$VERSION_GIT_HASH" \
       -v ./cmd/tailscale ./cmd/tailscaled ./cmd/containerboot
 
-FROM alpine:3.23
+FROM alpine:3.22
 # Upstream: ca-certificates ip6tables iptables iproute2
 # Tests: curl python3 (traceroute via BusyBox)
 RUN apk add --no-cache ca-certificates curl ip6tables iptables iproute2 python3
diff --git a/Dockerfile.tailscale-rs b/Dockerfile.tailscale-rs
index 043764771..c60409238 100644
--- a/Dockerfile.tailscale-rs
+++ b/Dockerfile.tailscale-rs
@@ -1,4 +1,4 @@
-FROM rust:1.95-trixie AS builder
+FROM rust:1.94-bookworm AS builder
 
 ARG TAILSCALE_RS_REPO=https://github.com/tailscale/tailscale-rs.git
 ARG TAILSCALE_RS_REF=main
@@ -15,7 +15,7 @@ RUN sed -i '/^axum = \["dep:axum"\]/a insecure-keyfetch = ["ts_control/insecure-
 
 RUN cargo build --release --features axum,insecure-keyfetch --example axum
 
-FROM debian:trixie-slim
+FROM debian:bookworm-slim
 
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
diff --git a/Dockerfile.wasmclient b/Dockerfile.wasmclient
deleted file mode 100644
index cc939a09f..000000000
--- a/Dockerfile.wasmclient
+++ /dev/null
@@ -1,30 +0,0 @@
-# For integration testing only.
-#
-# Builds the Tailscale control client (integration/wasmic/wasmclient) for
-# GOOS=js/GOARCH=wasm and packages it with Go's wasm_exec Node runner. The
-# container idles; the integration test execs
-#   node /app/wasm_exec_node.js /app/client.wasm <control-url>
-# to drive a real browser-style WebSocket GET against headscale's /ts2021,
-# guarding the regression in issue #3357.
-
-FROM golang:1.26.4-alpine AS build
-
-WORKDIR /src
-
-# Only the module metadata and the wasm client package are needed to build the
-# js/wasm binary; its imports (tailscale.com/control/controlhttp, ...) resolve
-# from the module proxy.
-COPY go.mod go.sum ./
-COPY integration/wasmic/wasmclient ./integration/wasmic/wasmclient
-
-RUN GOOS=js GOARCH=wasm go build -o /out/client.wasm ./integration/wasmic/wasmclient \
-    && cp "$(go env GOROOT)/lib/wasm/wasm_exec.js" /out/wasm_exec.js \
-    && cp "$(go env GOROOT)/lib/wasm/wasm_exec_node.js" /out/wasm_exec_node.js
-
-FROM node:24-alpine
-
-WORKDIR /app
-COPY --from=build /out/ /app/
-
-# Idle; the test execs the client on demand with the headscale control URL.
-ENTRYPOINT ["tail", "-f", "/dev/null"]
diff --git a/Makefile b/Makefile
index da2726714..6a2f84584 100644
--- a/Makefile
+++ b/Makefile
@@ -20,6 +20,7 @@ endef
 
 # Source file collections using shell find for better performance
 GO_SOURCES := $(shell find . -name '*.go' -not -path './gen/*' -not -path './vendor/*')
+PROTO_SOURCES := $(shell find . -name '*.proto' -not -path './gen/*' -not -path './vendor/*')
 PRETTIER_SOURCES := $(shell find . \( -name '*.md' -o -name '*.yaml' -o -name '*.yml' -o -name '*.ts' -o -name '*.js' -o -name '*.html' -o -name '*.css' -o -name '*.scss' -o -name '*.sass' \) -not -path './gen/*' -not -path './vendor/*' -not -path './node_modules/*')
 
 # Default target
@@ -34,6 +35,8 @@ check-deps:
 	$(call check_tool,gofumpt)
 	$(call check_tool,mdformat)
 	$(call check_tool,prettier)
+	$(call check_tool,clang-format)
+	$(call check_tool,buf)
 
 # Build targets
 .PHONY: build
@@ -50,7 +53,7 @@ test: check-deps $(GO_SOURCES) go.mod go.sum
 
 # Formatting targets
 .PHONY: fmt
-fmt: fmt-go fmt-mdformat fmt-prettier
+fmt: fmt-go fmt-mdformat fmt-prettier fmt-proto
 
 .PHONY: fmt-go
 fmt-go: check-deps $(GO_SOURCES)
@@ -68,49 +71,35 @@ fmt-prettier: check-deps $(PRETTIER_SOURCES)
 	@echo "Formatting markup and config files..."
 	prettier --write '**/*.{ts,js,md,yaml,yml,sass,css,scss,html}'
 
+.PHONY: fmt-proto
+fmt-proto: check-deps $(PROTO_SOURCES)
+	@echo "Formatting Protocol Buffer files..."
+	clang-format -i $(PROTO_SOURCES)
+
 # Linting targets
 .PHONY: lint
-lint: lint-go
+lint: lint-go lint-proto
 
 .PHONY: lint-go
 lint-go: check-deps $(GO_SOURCES) go.mod go.sum
 	@echo "Linting Go code..."
 	golangci-lint run --timeout 10m
 
+.PHONY: lint-proto
+lint-proto: check-deps $(PROTO_SOURCES)
+	@echo "Linting Protocol Buffer files..."
+	cd proto/ && buf lint
+
 # Code generation
 .PHONY: generate
 generate: check-deps
 	@echo "Generating code..."
 	go generate ./...
-	$(MAKE) client
-
-# Emit the OpenAPI spec on demand. The server serves it live at /openapi.yaml;
-# this is for external consumers or inspection and is not committed.
-.PHONY: openapi
-openapi:
-	@echo "Emitting OpenAPI spec from code..."
-	go run ./cmd/gen-openapi
-
-# Generate the strongly-typed Go HTTP clients (v1 and v2). The served specs are
-# OpenAPI 3.1, but oapi-codegen v2 does not yet read 3.1, so each client is
-# generated from a transient 3.0.3 downgrade of its document. Pinned so the
-# committed clients are reproducible.
-.PHONY: client
-client:
-	@echo "Generating API clients..."
-	@tmp=$$(mktemp -t headscale-openapi-3.0.XXXXXX.yaml); \
-	go run ./cmd/gen-openapi -downgrade "$$tmp" && \
-	go run github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen@v2.7.1 \
-		-generate types,client -package clientv1 -o gen/client/v1/client.gen.go "$$tmp" && \
-	go run ./cmd/gen-openapi -api v2 -downgrade "$$tmp" && \
-	go run github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen@v2.7.1 \
-		-generate types,client -package clientv2 -o gen/client/v2/client.gen.go "$$tmp"; \
-	status=$$?; rm -f "$$tmp"; exit $$status
 
 # Clean targets
 .PHONY: clean
 clean:
-	rm -rf headscale gen/client
+	rm -rf headscale gen
 
 # Development workflow
 .PHONY: dev
@@ -130,9 +119,9 @@ help:
 	@echo "  all          - Run lint, test, and build (default)"
 	@echo "  build        - Build headscale binary"
 	@echo "  test         - Run Go tests"
-	@echo "  fmt          - Format all code (Go, docs, markup)"
-	@echo "  lint         - Lint all code (Go)"
-	@echo "  generate     - Generate code (go generate + client)"
+	@echo "  fmt          - Format all code (Go, docs, proto)"
+	@echo "  lint         - Lint all code (Go, proto)"
+	@echo "  generate     - Generate code from Protocol Buffers"
 	@echo "  dev          - Full development workflow (fmt + lint + test + build)"
 	@echo "  clean        - Clean build artifacts"
 	@echo ""
@@ -140,7 +129,9 @@ help:
 	@echo "  fmt-go       - Format Go code only"
 	@echo "  fmt-mdformat - Format documentation only"
 	@echo "  fmt-prettier - Format markup and config files only"
+	@echo "  fmt-proto    - Format Protocol Buffer files only"
 	@echo "  lint-go      - Lint Go code only"
+	@echo "  lint-proto   - Lint Protocol Buffer files only"
 	@echo ""
 	@echo "Dependencies:"
 	@echo "  check-deps   - Verify required tools are available"
diff --git a/buf.gen.yaml b/buf.gen.yaml
new file mode 100644
index 000000000..d7b832ab3
--- /dev/null
+++ b/buf.gen.yaml
@@ -0,0 +1,21 @@
+version: v1
+plugins:
+  - name: go
+    out: gen/go
+    opt:
+      - paths=source_relative
+  - name: go-grpc
+    out: gen/go
+    opt:
+      - paths=source_relative
+  - name: grpc-gateway
+    out: gen/go
+    opt:
+      - paths=source_relative
+      - generate_unbound_methods=true
+  # - name: gorm
+  #   out: gen/go
+  #   opt:
+  #     - paths=source_relative,enums=string,gateway=true
+  - name: openapiv2
+    out: gen/openapiv2
diff --git a/cmd/dev/README.md b/cmd/dev/README.md
index f703f4421..46da415db 100644
--- a/cmd/dev/README.md
+++ b/cmd/dev/README.md
@@ -42,7 +42,8 @@ go tool mts node1 status
 | `--port` | 8080    | Headscale listen port        |
 | `--keep` | false   | Keep state directory on exit |
 
-The metrics/debug port is `port + 1010` (default 9090).
+The metrics/debug port is `port + 1010` (default 9090) and the gRPC
+port is `port + 42363` (default 50443).
 
 ## What it does
 
diff --git a/cmd/dev/main.go b/cmd/dev/main.go
index a1953123b..b3c7a8407 100644
--- a/cmd/dev/main.go
+++ b/cmd/dev/main.go
@@ -28,14 +28,17 @@ var errHealthTimeout = errors.New("health check timed out")
 
 var errEmptyAuthKey = errors.New("empty auth key in response")
 
-// maxDevPort is the highest --port value that keeps the derived metrics
-// port (port+1010) inside the valid 1..65535 TCP range.
-const maxDevPort = 64525
+// maxDevPort is the highest --port value that keeps both the derived
+// metrics port (port+1010) and gRPC port (port+42363) inside the valid
+// 1..65535 TCP range.
+const maxDevPort = 23172
 
 const devConfig = `---
 server_url: http://127.0.0.1:%d
 listen_addr: 127.0.0.1:%d
 metrics_listen_addr: 127.0.0.1:%d
+grpc_listen_addr: 127.0.0.1:%d
+grpc_allow_insecure: true
 
 noise:
   private_key_path: %s/noise_private.key
@@ -80,7 +83,7 @@ func main() {
 
 	if *port < 1 || *port > maxDevPort {
 		log.Fatalf(
-			"--port must be in 1..%d (higher values overflow the derived metrics port); got %d",
+			"--port must be in 1..%d (higher values overflow the derived gRPC port); got %d",
 			maxDevPort, *port,
 		)
 	}
@@ -98,6 +101,7 @@ func main() {
 
 func run() error {
 	metricsPort := *port + 1010 // default 9090
+	grpcPort := *port + 42363   // default 50443
 
 	tmpDir, err := os.MkdirTemp("", "headscale-dev-")
 	if err != nil {
@@ -110,9 +114,8 @@ func run() error {
 
 	// Write config.
 	configPath := filepath.Join(tmpDir, "config.yaml")
-	configContent := fmt.Sprintf(
-		devConfig,
-		*port, *port, metricsPort,
+	configContent := fmt.Sprintf(devConfig,
+		*port, *port, metricsPort, grpcPort,
 		tmpDir, tmpDir, tmpDir,
 	)
 
@@ -190,8 +193,7 @@ func run() error {
 	}
 
 	// Print banner.
-	fmt.Printf(
-		`
+	fmt.Printf(`
 === Headscale Dev Environment ===
   Server:  http://127.0.0.1:%d
   Metrics: http://127.0.0.1:%d
diff --git a/cmd/gen-openapi/main.go b/cmd/gen-openapi/main.go
deleted file mode 100644
index 32568f14f..000000000
--- a/cmd/gen-openapi/main.go
+++ /dev/null
@@ -1,75 +0,0 @@
-// Command gen-openapi emits a Headscale OpenAPI document from the authoritative
-// Huma definitions in hscontrol/api/v1 and hscontrol/api/v2. The server also
-// serves each spec live (at /openapi.yaml and /api/v2/openapi); this tool emits
-// them on demand, and with -downgrade the 3.0.3 form used to generate the typed
-// client. The output is not committed.
-//
-// Usage:
-//
-//	go run ./cmd/gen-openapi                       # write the v1 3.1 spec to its default path
-//	go run ./cmd/gen-openapi -api v2               # write the v2 3.1 spec to its default path
-//	go run ./cmd/gen-openapi -downgrade <path>     # write the v1 3.0.3 downgrade (for client gen)
-//	go run ./cmd/gen-openapi -api v2 -downgrade <path>  # the v2 3.0.3 downgrade
-package main
-
-import (
-	"flag"
-	"log"
-	"os"
-	"path/filepath"
-
-	apiv1 "github.com/juanfont/headscale/hscontrol/api/v1"
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
-)
-
-// spec bundles a version's full (3.1) and downgraded (3.0.3) generators with the
-// committed output path. outPath is relative to the repository root.
-type spec struct {
-	full    func() ([]byte, error)
-	down    func() ([]byte, error)
-	outPath string
-}
-
-// specs maps the -api value to its generators.
-var specs = map[string]spec{
-	"v1": {apiv1.Spec, apiv1.Spec30, "openapi/v1/headscale.yaml"},
-	"v2": {apiv2.Spec, apiv2.Spec30, "openapi/v2/headscale.yaml"},
-}
-
-func main() {
-	api := flag.String("api", "v1", "which API spec to emit: v1 or v2")
-	downgrade := flag.String("downgrade", "", "write the OpenAPI 3.0.3 downgrade to this path instead of the committed 3.1 spec")
-	flag.Parse()
-
-	s, ok := specs[*api]
-	if !ok {
-		log.Fatalf("unknown -api %q (want v1 or v2)", *api)
-	}
-
-	if *downgrade != "" {
-		writeSpec(*downgrade, s.down)
-
-		return
-	}
-
-	writeSpec(s.outPath, s.full)
-}
-
-func writeSpec(path string, gen func() ([]byte, error)) {
-	spec, err := gen()
-	if err != nil {
-		log.Fatalf("generating OpenAPI spec: %v", err)
-	}
-
-	err = os.MkdirAll(filepath.Dir(path), 0o755)
-	if err != nil {
-		log.Fatalf("creating output directory: %v", err)
-	}
-
-	err = os.WriteFile(path, spec, 0o600)
-	if err != nil {
-		log.Fatalf("writing %s: %v", path, err)
-	}
-
-	log.Printf("wrote %s", path)
-}
diff --git a/cmd/headscale/cli/api_key.go b/cmd/headscale/cli/api_key.go
index 82559235a..acc9ffa9f 100644
--- a/cmd/headscale/cli/api_key.go
+++ b/cmd/headscale/cli/api_key.go
@@ -3,11 +3,11 @@ package cli
 import (
 	"context"
 	"fmt"
-	"net/http"
 	"strconv"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/util"
+	"github.com/pterm/pterm"
 	"github.com/spf13/cobra"
 )
 
@@ -41,43 +41,36 @@ var apiKeysCmd = &cobra.Command{
 }
 
 var listAPIKeys = &cobra.Command{
-	Use:     cmdList,
+	Use:     "list",
 	Short:   "List the Api keys for headscale",
-	Aliases: []string{"ls", cmdShow},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		resp, err := client.ListApiKeysWithResponse(ctx)
+	Aliases: []string{"ls", "show"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		response, err := client.ListApiKeys(ctx, &v1.ListApiKeysRequest{})
 		if err != nil {
 			return fmt.Errorf("listing api keys: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
+		return printListOutput(cmd, response.GetApiKeys(), func() error {
+			tableData := pterm.TableData{
+				{"ID", "Prefix", "Expiration", "Created"},
+			}
 
-		apiKeys := resp.JSON200.ApiKeys
-
-		return printListOutput(cmd, apiKeys, func() error {
-			rows := make([][]string, 0, len(apiKeys))
-			for _, key := range apiKeys {
+			for _, key := range response.GetApiKeys() {
 				expiration := "-"
-				if key.Expiration != nil {
-					expiration = ColourTime(*key.Expiration)
+
+				if key.GetExpiration() != nil {
+					expiration = ColourTime(key.GetExpiration().AsTime())
 				}
 
-				var created string
-				if key.CreatedAt != nil {
-					created = key.CreatedAt.Format(HeadscaleDateTimeFormat)
-				}
-
-				rows = append(rows, []string{
-					key.Id,
-					key.Prefix,
+				tableData = append(tableData, []string{
+					strconv.FormatUint(key.GetId(), util.Base10),
+					key.GetPrefix(),
 					expiration,
-					created,
+					key.GetCreatedAt().AsTime().Format(HeadscaleDateTimeFormat),
 				})
 			}
 
-			return renderTable([]string{"ID", "Prefix", colExpiration, colCreated}, rows)
+			return pterm.DefaultTable.WithHasHeader().WithData(tableData).Render()
 		})
 	}),
 }
@@ -89,25 +82,21 @@ var createAPIKeyCmd = &cobra.Command{
 Creates a new Api key, the Api key is only visible on creation
 and cannot be retrieved again.
 If you lose a key, create a new one and revoke (expire) the old one.`,
-	Aliases: []string{"c", cmdNew},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		expiryTime, err := expirationFromFlag(cmd)
+	Aliases: []string{"c", "new"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		expiration, err := expirationFromFlag(cmd)
 		if err != nil {
 			return err
 		}
 
-		resp, err := client.CreateApiKeyWithResponse(ctx, clientv1.CreateApiKeyJSONRequestBody{
-			Expiration: &expiryTime,
+		response, err := client.CreateApiKey(ctx, &v1.CreateApiKeyRequest{
+			Expiration: expiration,
 		})
 		if err != nil {
 			return fmt.Errorf("creating api key: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200.ApiKey, resp.JSON200.ApiKey)
+		return printOutput(cmd, response.GetApiKey(), response.GetApiKey())
 	}),
 }
 
@@ -128,96 +117,45 @@ func apiKeyIDOrPrefix(cmd *cobra.Command) (uint64, string, error) {
 }
 
 var expireAPIKeyCmd = &cobra.Command{
-	Use:     cmdExpire,
+	Use:     "expire",
 	Short:   "Expire an ApiKey",
-	Aliases: []string{"revoke", aliasExp, "e"},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	Aliases: []string{"revoke", "exp", "e"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		id, prefix, err := apiKeyIDOrPrefix(cmd)
 		if err != nil {
 			return err
 		}
 
-		body := clientv1.ExpireApiKeyJSONRequestBody{}
-
-		if id != 0 {
-			idStr := strconv.FormatUint(id, util.Base10)
-			body.Id = &idStr
-		}
-
-		if prefix != "" {
-			body.Prefix = &prefix
-		}
-
-		resp, err := client.ExpireApiKeyWithResponse(ctx, body)
+		response, err := client.ExpireApiKey(ctx, &v1.ExpireApiKeyRequest{
+			Id:     id,
+			Prefix: prefix,
+		})
 		if err != nil {
 			return fmt.Errorf("expiring api key: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200, "Key expired")
+		return printOutput(cmd, response, "Key expired")
 	}),
 }
 
 var deleteAPIKeyCmd = &cobra.Command{
-	Use:     cmdDelete,
+	Use:     "delete",
 	Short:   "Delete an ApiKey",
-	Aliases: []string{"remove", aliasDel},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	Aliases: []string{"remove", "del"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		id, prefix, err := apiKeyIDOrPrefix(cmd)
 		if err != nil {
 			return err
 		}
 
-		// The DELETE route addresses the key by its prefix in the path. When the
-		// user deletes by --id we resolve the id to its (masked) prefix first,
-		// since the path segment is required and a query-only id cannot be routed.
-		if prefix == "" {
-			prefix, err = apiKeyPrefixForID(ctx, client, id)
-			if err != nil {
-				return err
-			}
-		}
-
-		resp, err := client.DeleteApiKeyWithResponse(ctx, prefix, &clientv1.DeleteApiKeyParams{})
+		response, err := client.DeleteApiKey(ctx, &v1.DeleteApiKeyRequest{
+			Id:     id,
+			Prefix: prefix,
+		})
 		if err != nil {
 			return fmt.Errorf("deleting api key: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200, "Key deleted")
+		return printOutput(cmd, response, "Key deleted")
 	}),
 }
-
-// apiKeyPrefixForID resolves an API key id to its display prefix by listing the
-// keys. The DELETE endpoint addresses keys by prefix in the URL path, so a
-// delete by --id needs the prefix; the returned masked prefix is accepted by
-// the server's lookup.
-func apiKeyPrefixForID(
-	ctx context.Context,
-	client *clientv1.ClientWithResponses,
-	id uint64,
-) (string, error) {
-	resp, err := client.ListApiKeysWithResponse(ctx)
-	if err != nil {
-		return "", fmt.Errorf("listing api keys: %w", err)
-	}
-
-	if resp.StatusCode() != http.StatusOK {
-		return "", apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-	}
-
-	idStr := strconv.FormatUint(id, util.Base10)
-	for _, key := range resp.JSON200.ApiKeys {
-		if key.Id == idStr {
-			return key.Prefix, nil
-		}
-	}
-
-	return "", fmt.Errorf("%w: api key %d not found", errMissingParameter, id)
-}
diff --git a/cmd/headscale/cli/auth.go b/cmd/headscale/cli/auth.go
index 30abe797a..8a5476dd0 100644
--- a/cmd/headscale/cli/auth.go
+++ b/cmd/headscale/cli/auth.go
@@ -3,9 +3,8 @@ package cli
 import (
 	"context"
 	"fmt"
-	"net/http"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/spf13/cobra"
 )
 
@@ -34,66 +33,61 @@ var authCmd = &cobra.Command{
 var authRegisterCmd = &cobra.Command{
 	Use:   "register",
 	Short: "Register a node to your network",
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		user, _ := cmd.Flags().GetString("user")
 		authID, _ := cmd.Flags().GetString("auth-id")
 
-		resp, err := client.AuthRegisterWithResponse(ctx, clientv1.AuthRegisterJSONRequestBody{
-			AuthId: &authID,
-			User:   &user,
-		})
+		request := &v1.AuthRegisterRequest{
+			AuthId: authID,
+			User:   user,
+		}
+
+		response, err := client.AuthRegister(ctx, request)
 		if err != nil {
 			return fmt.Errorf("registering node: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		node := resp.JSON200.Node
-
 		return printOutput(
 			cmd,
-			node,
-			fmt.Sprintf("Node %s registered", node.GivenName),
-		)
+			response.GetNode(),
+			fmt.Sprintf("Node %s registered", response.GetNode().GetGivenName()))
 	}),
 }
 
 var authApproveCmd = &cobra.Command{
 	Use:   "approve",
 	Short: "Approve a pending authentication request",
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		authID, _ := cmd.Flags().GetString("auth-id")
 
-		resp, err := client.AuthApproveWithResponse(ctx, clientv1.AuthApproveJSONRequestBody{AuthId: &authID})
+		request := &v1.AuthApproveRequest{
+			AuthId: authID,
+		}
+
+		response, err := client.AuthApprove(ctx, request)
 		if err != nil {
 			return fmt.Errorf("approving auth request: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200, "Auth request approved")
+		return printOutput(cmd, response, "Auth request approved")
 	}),
 }
 
 var authRejectCmd = &cobra.Command{
 	Use:   "reject",
 	Short: "Reject a pending authentication request",
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		authID, _ := cmd.Flags().GetString("auth-id")
 
-		resp, err := client.AuthRejectWithResponse(ctx, clientv1.AuthRejectJSONRequestBody{AuthId: &authID})
+		request := &v1.AuthRejectRequest{
+			AuthId: authID,
+		}
+
+		response, err := client.AuthReject(ctx, request)
 		if err != nil {
 			return fmt.Errorf("rejecting auth request: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200, "Auth request rejected")
+		return printOutput(cmd, response, "Auth request rejected")
 	}),
 }
diff --git a/cmd/headscale/cli/debug.go b/cmd/headscale/cli/debug.go
index 64262c00d..1f934f0bb 100644
--- a/cmd/headscale/cli/debug.go
+++ b/cmd/headscale/cli/debug.go
@@ -3,9 +3,8 @@ package cli
 import (
 	"context"
 	"fmt"
-	"net/http"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/spf13/cobra"
 )
@@ -33,7 +32,7 @@ var debugCmd = &cobra.Command{
 var createNodeCmd = &cobra.Command{
 	Use:   "create-node",
 	Short: "Create a node that can be registered with `auth register <>` command",
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		user, _ := cmd.Flags().GetString("user")
 		name, _ := cmd.Flags().GetString("name")
 		registrationID, _ := cmd.Flags().GetString("key")
@@ -45,20 +44,18 @@ var createNodeCmd = &cobra.Command{
 
 		routes, _ := cmd.Flags().GetStringSlice("route")
 
-		resp, err := client.DebugCreateNodeWithResponse(ctx, clientv1.DebugCreateNodeJSONRequestBody{
-			Key:    &registrationID,
-			Name:   &name,
-			User:   &user,
-			Routes: &routes,
-		})
+		request := &v1.DebugCreateNodeRequest{
+			Key:    registrationID,
+			Name:   name,
+			User:   user,
+			Routes: routes,
+		}
+
+		response, err := client.DebugCreateNode(ctx, request)
 		if err != nil {
 			return fmt.Errorf("creating node: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200.Node, "Node created")
+		return printOutput(cmd, response.GetNode(), "Node created")
 	}),
 }
diff --git a/cmd/headscale/cli/health.go b/cmd/headscale/cli/health.go
index 6fccb0ac2..b3b4f4307 100644
--- a/cmd/headscale/cli/health.go
+++ b/cmd/headscale/cli/health.go
@@ -3,9 +3,8 @@ package cli
 import (
 	"context"
 	"fmt"
-	"net/http"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/spf13/cobra"
 )
 
@@ -17,16 +16,12 @@ var healthCmd = &cobra.Command{
 	Use:   "health",
 	Short: "Check the health of the Headscale server",
 	Long:  "Check the health of the Headscale server. This command will return an exit code of 0 if the server is healthy, or 1 if it is not.",
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		resp, err := client.HealthWithResponse(ctx)
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		response, err := client.Health(ctx, &v1.HealthRequest{})
 		if err != nil {
 			return fmt.Errorf("checking health: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200, "")
+		return printOutput(cmd, response, "")
 	}),
 }
diff --git a/cmd/headscale/cli/mockoidc.go b/cmd/headscale/cli/mockoidc.go
index 255143bae..be951b762 100644
--- a/cmd/headscale/cli/mockoidc.go
+++ b/cmd/headscale/cli/mockoidc.go
@@ -3,7 +3,6 @@ package cli
 import (
 	"context"
 	"encoding/json"
-	"errors"
 	"fmt"
 	"net"
 	"net/http"
@@ -17,14 +16,18 @@ import (
 	"github.com/spf13/cobra"
 )
 
-var (
-	errMockOidcClientIDNotDefined     = errors.New("MOCKOIDC_CLIENT_ID not defined")
-	errMockOidcClientSecretNotDefined = errors.New("MOCKOIDC_CLIENT_SECRET not defined")
-	errMockOidcPortNotDefined         = errors.New("MOCKOIDC_PORT not defined")
-	errMockOidcUsersNotDefined        = errors.New("MOCKOIDC_USERS not defined")
-)
+// Error is used to compare errors as per https://dave.cheney.net/2016/04/07/constant-errors
+type Error string
 
-const refreshTTL = 60 * time.Minute
+func (e Error) Error() string { return string(e) }
+
+const (
+	errMockOidcClientIDNotDefined     = Error("MOCKOIDC_CLIENT_ID not defined")
+	errMockOidcClientSecretNotDefined = Error("MOCKOIDC_CLIENT_SECRET not defined")
+	errMockOidcPortNotDefined         = Error("MOCKOIDC_PORT not defined")
+	errMockOidcUsersNotDefined        = Error("MOCKOIDC_USERS not defined")
+	refreshTTL                        = 60 * time.Minute
+)
 
 var accessTTL = 2 * time.Minute
 
diff --git a/cmd/headscale/cli/nodes.go b/cmd/headscale/cli/nodes.go
index 9dc798a3a..ec24b7f90 100644
--- a/cmd/headscale/cli/nodes.go
+++ b/cmd/headscale/cli/nodes.go
@@ -3,17 +3,17 @@ package cli
 import (
 	"context"
 	"fmt"
-	"net/http"
 	"net/netip"
 	"strconv"
 	"strings"
 	"time"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/pterm/pterm"
 	"github.com/samber/lo"
 	"github.com/spf13/cobra"
+	"google.golang.org/protobuf/types/known/timestamppb"
 	"tailscale.com/types/key"
 )
 
@@ -67,59 +67,41 @@ var registerNodeCmd = &cobra.Command{
 	Use:        "register",
 	Short:      "Registers a node to your network",
 	Deprecated: "use 'headscale auth register --auth-id <id> --user <user>' instead",
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		user, _ := cmd.Flags().GetString("user")
 		registrationID, _ := cmd.Flags().GetString("key")
 
-		params := &clientv1.RegisterNodeParams{
-			User: &user,
-			Key:  &registrationID,
+		request := &v1.RegisterNodeRequest{
+			Key:  registrationID,
+			User: user,
 		}
 
-		resp, err := client.RegisterNodeWithResponse(ctx, params)
+		response, err := client.RegisterNode(ctx, request)
 		if err != nil {
 			return fmt.Errorf("registering node: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		node := resp.JSON200.Node
-
 		return printOutput(
 			cmd,
-			node,
-			fmt.Sprintf("Node %s registered", node.GivenName),
-		)
+			response.GetNode(),
+			fmt.Sprintf("Node %s registered", response.GetNode().GetGivenName()))
 	}),
 }
 
 var listNodesCmd = &cobra.Command{
-	Use:     cmdList,
+	Use:     "list",
 	Short:   "List nodes",
-	Aliases: []string{"ls", cmdShow},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	Aliases: []string{"ls", "show"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		user, _ := cmd.Flags().GetString("user")
 
-		params := &clientv1.ListNodesParams{}
-		if user != "" {
-			params.User = &user
-		}
-
-		resp, err := client.ListNodesWithResponse(ctx, params)
+		response, err := client.ListNodes(ctx, &v1.ListNodesRequest{User: user})
 		if err != nil {
 			return fmt.Errorf("listing nodes: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		nodes := resp.JSON200.Nodes
-
-		return printListOutput(cmd, nodes, func() error {
-			tableData, err := nodesToPtables(nodes)
+		return printListOutput(cmd, response.GetNodes(), func() error {
+			tableData, err := nodesToPtables(user, response.GetNodes())
 			if err != nil {
 				return fmt.Errorf("converting to table: %w", err)
 			}
@@ -133,33 +115,27 @@ var listNodeRoutesCmd = &cobra.Command{
 	Use:     "list-routes",
 	Short:   "List routes available on nodes",
 	Aliases: []string{"lsr", "routes"},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		identifier, _ := cmd.Flags().GetUint64("identifier")
 
-		resp, err := client.ListNodesWithResponse(ctx, &clientv1.ListNodesParams{})
+		response, err := client.ListNodes(ctx, &v1.ListNodesRequest{})
 		if err != nil {
 			return fmt.Errorf("listing nodes: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		nodes := resp.JSON200.Nodes
-
+		nodes := response.GetNodes()
 		if identifier != 0 {
-			idStr := strconv.FormatUint(identifier, util.Base10)
-			for _, node := range nodes {
-				if node.Id == idStr {
-					nodes = []clientv1.Node{node}
+			for _, node := range response.GetNodes() {
+				if node.GetId() == identifier {
+					nodes = []*v1.Node{node}
 
 					break
 				}
 			}
 		}
 
-		nodes = lo.Filter(nodes, func(n clientv1.Node, _ int) bool {
-			return len(n.SubnetRoutes) > 0 || len(n.ApprovedRoutes) > 0 || len(n.AvailableRoutes) > 0
+		nodes = lo.Filter(nodes, func(n *v1.Node, _ int) bool {
+			return (n.GetSubnetRoutes() != nil && len(n.GetSubnetRoutes()) > 0) || (n.GetApprovedRoutes() != nil && len(n.GetApprovedRoutes()) > 0) || (n.GetAvailableRoutes() != nil && len(n.GetAvailableRoutes()) > 0)
 		})
 
 		return printListOutput(cmd, nodes, func() error {
@@ -169,33 +145,29 @@ var listNodeRoutesCmd = &cobra.Command{
 }
 
 var expireNodeCmd = &cobra.Command{
-	Use:   cmdExpire,
+	Use:   "expire",
 	Short: "Expire (log out) a node in your network",
 	Long: `Expiring a node will keep the node in the database and force it to reauthenticate.
 
 Use --disable to disable key expiry (node will never expire).`,
-	Aliases: []string{"logout", aliasExp, "e"},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	Aliases: []string{"logout", "exp", "e"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		identifier, _ := cmd.Flags().GetUint64("identifier")
 		disableExpiry, _ := cmd.Flags().GetBool("disable")
-		nodeID := strconv.FormatUint(identifier, util.Base10)
 
 		// Handle disable expiry - node will never expire.
 		if disableExpiry {
-			disable := true
+			request := &v1.ExpireNodeRequest{
+				NodeId:        identifier,
+				DisableExpiry: true,
+			}
 
-			resp, err := client.ExpireNodeWithResponse(ctx, nodeID, clientv1.ExpireNodeJSONRequestBody{
-				DisableExpiry: &disable,
-			})
+			response, err := client.ExpireNode(ctx, request)
 			if err != nil {
 				return fmt.Errorf("disabling node expiry: %w", err)
 			}
 
-			if resp.StatusCode() != http.StatusOK {
-				return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-			}
-
-			return printOutput(cmd, resp.JSON200.Node, "Node expiry disabled")
+			return printOutput(cmd, response.GetNode(), "Node expiry disabled")
 		}
 
 		expiry, _ := cmd.Flags().GetString("expiry")
@@ -213,31 +185,28 @@ Use --disable to disable key expiry (node will never expire).`,
 			}
 		}
 
-		resp, err := client.ExpireNodeWithResponse(ctx, nodeID, clientv1.ExpireNodeJSONRequestBody{
-			Expiry: &expiryTime,
-		})
+		request := &v1.ExpireNodeRequest{
+			NodeId: identifier,
+			Expiry: timestamppb.New(expiryTime),
+		}
+
+		response, err := client.ExpireNode(ctx, request)
 		if err != nil {
 			return fmt.Errorf("expiring node: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		node := resp.JSON200.Node
-
 		if now.Equal(expiryTime) || now.After(expiryTime) {
-			return printOutput(cmd, node, "Node expired")
+			return printOutput(cmd, response.GetNode(), "Node expired")
 		}
 
-		return printOutput(cmd, node, "Node expiration updated")
+		return printOutput(cmd, response.GetNode(), "Node expiration updated")
 	}),
 }
 
 var renameNodeCmd = &cobra.Command{
 	Use:   "rename NEW_NAME",
 	Short: "Renames a node in your network",
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		identifier, _ := cmd.Flags().GetUint64("identifier")
 
 		newName := ""
@@ -245,55 +214,55 @@ var renameNodeCmd = &cobra.Command{
 			newName = args[0]
 		}
 
-		resp, err := client.RenameNodeWithResponse(ctx, strconv.FormatUint(identifier, util.Base10), newName)
+		request := &v1.RenameNodeRequest{
+			NodeId:  identifier,
+			NewName: newName,
+		}
+
+		response, err := client.RenameNode(ctx, request)
 		if err != nil {
 			return fmt.Errorf("renaming node: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200.Node, "Node renamed")
+		return printOutput(cmd, response.GetNode(), "Node renamed")
 	}),
 }
 
 var deleteNodeCmd = &cobra.Command{
-	Use:     cmdDelete,
+	Use:     "delete",
 	Short:   "Delete a node",
-	Aliases: []string{aliasDel},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	Aliases: []string{"del"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		identifier, _ := cmd.Flags().GetUint64("identifier")
-		nodeID := strconv.FormatUint(identifier, util.Base10)
 
-		getResponse, err := client.GetNodeWithResponse(ctx, nodeID)
+		getRequest := &v1.GetNodeRequest{
+			NodeId: identifier,
+		}
+
+		getResponse, err := client.GetNode(ctx, getRequest)
 		if err != nil {
 			return fmt.Errorf("getting node: %w", err)
 		}
 
-		if getResponse.StatusCode() != http.StatusOK {
-			return apiError(getResponse.StatusCode(), getResponse.ApplicationproblemJSONDefault)
+		deleteRequest := &v1.DeleteNodeRequest{
+			NodeId: identifier,
 		}
 
 		if !confirmAction(cmd, fmt.Sprintf(
 			"Do you want to remove the node %s?",
-			getResponse.JSON200.Node.Name,
+			getResponse.GetNode().GetName(),
 		)) {
-			return printOutput(cmd, map[string]string{colResult: "Node not deleted"}, "Node not deleted")
+			return printOutput(cmd, map[string]string{"Result": "Node not deleted"}, "Node not deleted")
 		}
 
-		deleteResponse, err := client.DeleteNodeWithResponse(ctx, nodeID)
+		_, err = client.DeleteNode(ctx, deleteRequest)
 		if err != nil {
 			return fmt.Errorf("deleting node: %w", err)
 		}
 
-		if deleteResponse.StatusCode() != http.StatusOK {
-			return apiError(deleteResponse.StatusCode(), deleteResponse.ApplicationproblemJSONDefault)
-		}
-
 		return printOutput(
 			cmd,
-			map[string]string{colResult: "Node deleted"},
+			map[string]string{"Result": "Node deleted"},
 			"Node deleted",
 		)
 	}),
@@ -319,26 +288,26 @@ be assigned to nodes.`,
 			return nil
 		}
 
-		return withClient(func(ctx context.Context, client *clientv1.ClientWithResponses) error {
-			confirmed := true
+		ctx, client, conn, cancel, err := newHeadscaleCLIWithConfig()
+		if err != nil {
+			return fmt.Errorf("connecting to headscale: %w", err)
+		}
+		defer cancel()
+		defer conn.Close()
 
-			resp, err := client.BackfillNodeIPsWithResponse(ctx, &clientv1.BackfillNodeIPsParams{
-				Confirmed: &confirmed,
-			})
-			if err != nil {
-				return fmt.Errorf("backfilling IPs: %w", err)
-			}
+		changes, err := client.BackfillNodeIPs(ctx, &v1.BackfillNodeIPsRequest{Confirmed: true})
+		if err != nil {
+			return fmt.Errorf("backfilling IPs: %w", err)
+		}
 
-			if resp.StatusCode() != http.StatusOK {
-				return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-			}
-
-			return printOutput(cmd, resp.JSON200, "Node IPs backfilled successfully")
-		})
+		return printOutput(cmd, changes, "Node IPs backfilled successfully")
 	},
 }
 
-func nodesToPtables(nodes []clientv1.Node) (pterm.TableData, error) {
+func nodesToPtables(
+	currentUser string,
+	nodes []*v1.Node,
+) (pterm.TableData, error) {
 	tableHeader := []string{
 		"ID",
 		"Hostname",
@@ -350,57 +319,88 @@ func nodesToPtables(nodes []clientv1.Node) (pterm.TableData, error) {
 		"IP addresses",
 		"Ephemeral",
 		"Last seen",
-		colExpiration,
+		"Expiration",
 		"Connected",
 		"Expired",
 	}
-	tableData := make(pterm.TableData, 1, 1+len(nodes))
-	tableData[0] = tableHeader
+	tableData := pterm.TableData{tableHeader}
 
 	for _, node := range nodes {
-		// An absent pre-auth key decodes into a zero NodePreAuthKey, so guard
-		// on Id before reading its flags.
-		ephemeral := node.PreAuthKey.Id != "" && node.PreAuthKey.Ephemeral
-
-		var lastSeenTime string
-		if node.LastSeen != nil {
-			lastSeenTime = node.LastSeen.Format(HeadscaleDateTimeFormat)
+		var ephemeral bool
+		if node.GetPreAuthKey() != nil && node.GetPreAuthKey().GetEphemeral() {
+			ephemeral = true
 		}
 
-		expiryTime := "N/A"
-		if node.Expiry != nil {
-			expiryTime = node.Expiry.Format(HeadscaleDateTimeFormat)
+		var (
+			lastSeen     time.Time
+			lastSeenTime string
+		)
+
+		if node.GetLastSeen() != nil {
+			lastSeen = node.GetLastSeen().AsTime()
+			lastSeenTime = lastSeen.Format(HeadscaleDateTimeFormat)
+		}
+
+		var (
+			expiry     time.Time
+			expiryTime string
+		)
+
+		if node.GetExpiry() != nil {
+			expiry = node.GetExpiry().AsTime()
+			expiryTime = expiry.Format(HeadscaleDateTimeFormat)
+		} else {
+			expiryTime = "N/A"
 		}
 
 		var machineKey key.MachinePublic
 
-		err := machineKey.UnmarshalText([]byte(node.MachineKey))
+		err := machineKey.UnmarshalText(
+			[]byte(node.GetMachineKey()),
+		)
 		if err != nil {
 			machineKey = key.MachinePublic{}
 		}
 
 		var nodeKey key.NodePublic
 
-		err = nodeKey.UnmarshalText([]byte(node.NodeKey))
+		err = nodeKey.UnmarshalText(
+			[]byte(node.GetNodeKey()),
+		)
 		if err != nil {
 			return nil, err
 		}
 
-		online := pterm.LightRed("offline")
-		if node.Online {
+		var online string
+		if node.GetOnline() {
 			online = pterm.LightGreen("online")
+		} else {
+			online = pterm.LightRed("offline")
 		}
 
-		expired := pterm.LightGreen("no")
-		if node.Expiry != nil && node.Expiry.Before(time.Now()) {
+		var expired string
+		if node.GetExpiry() != nil && node.GetExpiry().AsTime().Before(time.Now()) {
 			expired = pterm.LightRed("yes")
+		} else {
+			expired = pterm.LightGreen("no")
 		}
 
-		tags := strings.Join(node.Tags, "\n")
+		var tagsBuilder strings.Builder
+
+		for _, tag := range node.GetTags() {
+			tagsBuilder.WriteString("\n" + tag)
+		}
+
+		tags := strings.TrimLeft(tagsBuilder.String(), "\n")
+
+		var user string
+		if node.GetUser() != nil {
+			user = node.GetUser().GetName()
+		}
 
 		var ipBuilder strings.Builder
 
-		for _, addr := range node.IpAddresses {
+		for _, addr := range node.GetIpAddresses() {
 			ip, err := netip.ParseAddr(addr)
 			if err == nil {
 				if ipBuilder.Len() > 0 {
@@ -414,12 +414,12 @@ func nodesToPtables(nodes []clientv1.Node) (pterm.TableData, error) {
 		ipAddresses := ipBuilder.String()
 
 		nodeData := []string{
-			node.Id,
-			node.Name,
-			node.GivenName,
+			strconv.FormatUint(node.GetId(), util.Base10),
+			node.GetName(),
+			node.GetGivenName(),
 			machineKey.ShortString(),
 			nodeKey.ShortString(),
-			node.User.Name,
+			user,
 			tags,
 			ipAddresses,
 			strconv.FormatBool(ephemeral),
@@ -438,7 +438,7 @@ func nodesToPtables(nodes []clientv1.Node) (pterm.TableData, error) {
 }
 
 func nodeRoutesToPtables(
-	nodes []clientv1.Node,
+	nodes []*v1.Node,
 ) pterm.TableData {
 	tableHeader := []string{
 		"ID",
@@ -447,16 +447,15 @@ func nodeRoutesToPtables(
 		"Available",
 		"Serving (Primary)",
 	}
-	tableData := make(pterm.TableData, 1, 1+len(nodes))
-	tableData[0] = tableHeader
+	tableData := pterm.TableData{tableHeader}
 
 	for _, node := range nodes {
 		nodeData := []string{
-			node.Id,
-			node.GivenName,
-			strings.Join(node.ApprovedRoutes, "\n"),
-			strings.Join(node.AvailableRoutes, "\n"),
-			strings.Join(node.SubnetRoutes, "\n"),
+			strconv.FormatUint(node.GetId(), util.Base10),
+			node.GetGivenName(),
+			strings.Join(node.GetApprovedRoutes(), "\n"),
+			strings.Join(node.GetAvailableRoutes(), "\n"),
+			strings.Join(node.GetSubnetRoutes(), "\n"),
 		}
 		tableData = append(
 			tableData,
@@ -471,43 +470,43 @@ var tagCmd = &cobra.Command{
 	Use:     "tag",
 	Short:   "Manage the tags of a node",
 	Aliases: []string{"tags", "t"},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		identifier, _ := cmd.Flags().GetUint64("identifier")
 		tagsToSet, _ := cmd.Flags().GetStringSlice("tags")
 
-		resp, err := client.SetTagsWithResponse(ctx, strconv.FormatUint(identifier, util.Base10), clientv1.SetTagsJSONRequestBody{
-			Tags: &tagsToSet,
-		})
+		// Sending tags to node
+		request := &v1.SetTagsRequest{
+			NodeId: identifier,
+			Tags:   tagsToSet,
+		}
+
+		resp, err := client.SetTags(ctx, request)
 		if err != nil {
 			return fmt.Errorf("setting tags: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200.Node, "Node updated")
+		return printOutput(cmd, resp.GetNode(), "Node updated")
 	}),
 }
 
 var approveRoutesCmd = &cobra.Command{
 	Use:   "approve-routes",
 	Short: "Manage the approved routes of a node",
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		identifier, _ := cmd.Flags().GetUint64("identifier")
 		routes, _ := cmd.Flags().GetStringSlice("routes")
 
-		resp, err := client.SetApprovedRoutesWithResponse(ctx, strconv.FormatUint(identifier, util.Base10), clientv1.SetApprovedRoutesJSONRequestBody{
-			Routes: &routes,
-		})
+		// Sending routes to node
+		request := &v1.SetApprovedRoutesRequest{
+			NodeId: identifier,
+			Routes: routes,
+		}
+
+		resp, err := client.SetApprovedRoutes(ctx, request)
 		if err != nil {
 			return fmt.Errorf("setting approved routes: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200.Node, "Node updated")
+		return printOutput(cmd, resp.GetNode(), "Node updated")
 	}),
 }
diff --git a/cmd/headscale/cli/oauth_client.go b/cmd/headscale/cli/oauth_client.go
deleted file mode 100644
index aeb566469..000000000
--- a/cmd/headscale/cli/oauth_client.go
+++ /dev/null
@@ -1,271 +0,0 @@
-package cli
-
-import (
-	"context"
-	"crypto/tls"
-	"encoding/json"
-	"fmt"
-	"net"
-	"net/http"
-	"strings"
-
-	clientv2 "github.com/juanfont/headscale/gen/client/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/spf13/cobra"
-)
-
-// oauthTailnet is the single Headscale tailnet the v2 API addresses as "-".
-const oauthTailnet = "-"
-
-func init() {
-	rootCmd.AddCommand(oauthClientsCmd)
-
-	oauthClientsCmd.AddCommand(listOAuthClientsCmd)
-
-	createOAuthClientCmd.Flags().
-		StringArrayP("scope", "s", nil, "Scope the client's tokens are granted (repeatable): auth_keys, oauth_keys, devices:core, devices:routes, policy_file, feature_settings (each with a :read variant), or all/all:read")
-	createOAuthClientCmd.Flags().
-		StringArrayP("tag", "t", nil, "Tag the client's tokens may assign to devices (repeatable), e.g. tag:k8s-operator")
-	createOAuthClientCmd.Flags().StringP("description", "d", "", "Human-readable description")
-	oauthClientsCmd.AddCommand(createOAuthClientCmd)
-
-	deleteOAuthClientCmd.Flags().StringP("id", "i", "", "OAuth client id")
-	oauthClientsCmd.AddCommand(deleteOAuthClientCmd)
-}
-
-var oauthClientsCmd = &cobra.Command{
-	Use:     "oauth-clients",
-	Short:   "Manage OAuth clients",
-	Aliases: []string{"oauth-client", "oauthclients", "oauthclient", "oauth"},
-}
-
-var createOAuthClientCmd = &cobra.Command{
-	Use:   "create",
-	Short: "Create an OAuth client",
-	Long: `Create a general-purpose OAuth client. It authenticates with the OAuth 2.0
-client-credentials grant and mints short-lived, scope-limited access tokens.
-The wire format is compatible with Tailscale tooling (the Terraform provider,
-the Kubernetes operator, tscli, ...), so those can drive Headscale unchanged.
-
-The client secret is shown ONCE on creation and cannot be retrieved again; if
-you lose it, delete the client and create a new one.
-
-Scopes gate what the client's tokens may do; tags are the device tags those
-tokens may assign and are required when the scopes include devices:core or
-auth_keys.`,
-	Aliases: []string{"c", cmdNew},
-	RunE: func(cmd *cobra.Command, _ []string) error {
-		scopes, _ := cmd.Flags().GetStringArray("scope")
-		tags, _ := cmd.Flags().GetStringArray("tag")
-		description, _ := cmd.Flags().GetString("description")
-
-		if len(scopes) == 0 {
-			return fmt.Errorf("at least one --scope is required: %w", errMissingParameter)
-		}
-
-		ctx, client, cancel, err := newV2Client()
-		if err != nil {
-			return err
-		}
-		defer cancel()
-
-		keyType := "client"
-
-		resp, err := client.CreateKeyWithResponse(ctx, oauthTailnet, clientv2.CreateKeyRequest{
-			KeyType:     &keyType,
-			Scopes:      &scopes,
-			Tags:        &tags,
-			Description: &description,
-		})
-		if err != nil {
-			return fmt.Errorf("creating oauth client: %w", err)
-		}
-
-		err = v2Error(resp.HTTPResponse.StatusCode, resp.Body)
-		if err != nil {
-			return err
-		}
-
-		key := resp.JSON200
-
-		return printOutput(cmd, key,
-			fmt.Sprintf("OAuth client %s created.\nSecret (shown once, store it now): %s", key.Id, ptrStr(key.Key)))
-	},
-}
-
-var listOAuthClientsCmd = &cobra.Command{
-	Use:     cmdList,
-	Short:   "List OAuth clients",
-	Aliases: []string{"ls", cmdShow},
-	RunE: func(cmd *cobra.Command, _ []string) error {
-		ctx, client, cancel, err := newV2Client()
-		if err != nil {
-			return err
-		}
-		defer cancel()
-
-		resp, err := client.ListKeysWithResponse(ctx, oauthTailnet, nil)
-		if err != nil {
-			return fmt.Errorf("listing oauth clients: %w", err)
-		}
-
-		err = v2Error(resp.HTTPResponse.StatusCode, resp.Body)
-		if err != nil {
-			return err
-		}
-
-		// The keys endpoint is multiplexed; keep only OAuth clients.
-		clients := make([]clientv2.Key, 0, len(resp.JSON200.Keys))
-
-		for _, k := range resp.JSON200.Keys {
-			if k.KeyType == "client" {
-				clients = append(clients, k)
-			}
-		}
-
-		return printListOutput(cmd, clients, func() error {
-			rows := make([][]string, 0, len(clients))
-			for _, c := range clients {
-				rows = append(rows, []string{
-					c.Id,
-					strings.Join(ptrStrs(c.Scopes), ","),
-					strings.Join(ptrStrs(c.Tags), ","),
-					ptrStr(c.Description),
-					c.Created.Format(HeadscaleDateTimeFormat),
-				})
-			}
-
-			return renderTable([]string{"ID", "Scopes", "Tags", "Description", colCreated}, rows)
-		})
-	},
-}
-
-var deleteOAuthClientCmd = &cobra.Command{
-	Use:     cmdDelete,
-	Short:   "Delete an OAuth client",
-	Aliases: []string{"remove", aliasDel},
-	RunE: func(cmd *cobra.Command, _ []string) error {
-		id, _ := cmd.Flags().GetString("id")
-		if id == "" {
-			return fmt.Errorf("--id is required: %w", errMissingParameter)
-		}
-
-		ctx, client, cancel, err := newV2Client()
-		if err != nil {
-			return err
-		}
-		defer cancel()
-
-		resp, err := client.DeleteKeyWithResponse(ctx, oauthTailnet, id)
-		if err != nil {
-			return fmt.Errorf("deleting oauth client: %w", err)
-		}
-
-		err = v2Error(resp.HTTPResponse.StatusCode, resp.Body)
-		if err != nil {
-			return err
-		}
-
-		return printOutput(cmd, map[string]string{"id": id}, "OAuth client "+id+" deleted")
-	},
-}
-
-// newV2Client builds a generated v2 API client, selecting the transport the same
-// way the v1 client does: over the local unix socket it is unauthenticated
-// (local trust); a remote address injects the configured API key as a bearer
-// token.
-func newV2Client() (context.Context, *clientv2.ClientWithResponses, context.CancelFunc, error) {
-	cfg, err := types.LoadCLIConfig()
-	if err != nil {
-		return nil, nil, nil, fmt.Errorf("loading configuration: %w", err)
-	}
-
-	ctx, cancel := context.WithTimeout(context.Background(), cfg.CLI.Timeout)
-
-	if cfg.CLI.Address == "" {
-		socketPath := cfg.UnixSocket
-
-		httpClient := &http.Client{Transport: &http.Transport{
-			DialContext: func(ctx context.Context, _, _ string) (net.Conn, error) {
-				return dialHeadscaleSocket(ctx, socketPath)
-			},
-		}}
-
-		client, err := clientv2.NewClientWithResponses("http://local", clientv2.WithHTTPClient(httpClient))
-		if err != nil {
-			cancel()
-
-			return nil, nil, nil, err
-		}
-
-		return ctx, client, cancel, nil
-	}
-
-	if cfg.CLI.APIKey == "" {
-		cancel()
-
-		return nil, nil, nil, errAPIKeyNotSet
-	}
-
-	transport := &http.Transport{}
-	if cfg.CLI.Insecure {
-		//nolint:gosec // intentionally honouring the insecure flag
-		transport.TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
-	}
-
-	apiKey := cfg.CLI.APIKey
-
-	client, err := clientv2.NewClientWithResponses(
-		clientBaseURL(cfg.CLI.Address),
-		clientv2.WithHTTPClient(&http.Client{Transport: transport}),
-		clientv2.WithRequestEditorFn(func(_ context.Context, req *http.Request) error {
-			req.Header.Set("Authorization", "Bearer "+apiKey)
-
-			return nil
-		}),
-	)
-	if err != nil {
-		cancel()
-
-		return nil, nil, nil, err
-	}
-
-	return ctx, client, cancel, nil
-}
-
-// v2Error turns a non-2xx v2 response into an error. The v2 API emits the
-// Tailscale error body ({"message":...}) rather than RFC 7807, so it reads the
-// "message" field instead of the generated problem+json types.
-func v2Error(status int, body []byte) error {
-	if status >= http.StatusOK && status < http.StatusMultipleChoices {
-		return nil
-	}
-
-	var e struct {
-		Message string `json:"message"`
-	}
-
-	if json.Unmarshal(body, &e) == nil && e.Message != "" {
-		//nolint:err113 // surfacing the server's message
-		return fmt.Errorf("api error (%d): %s", status, e.Message)
-	}
-
-	//nolint:err113 // surfacing the server's body
-	return fmt.Errorf("api error (%d): %s", status, strings.TrimSpace(string(body)))
-}
-
-func ptrStr(s *string) string {
-	if s == nil {
-		return ""
-	}
-
-	return *s
-}
-
-func ptrStrs(s *[]string) []string {
-	if s == nil {
-		return nil
-	}
-
-	return *s
-}
diff --git a/cmd/headscale/cli/policy.go b/cmd/headscale/cli/policy.go
index ae69cc8a9..a29624327 100644
--- a/cmd/headscale/cli/policy.go
+++ b/cmd/headscale/cli/policy.go
@@ -1,13 +1,11 @@
 package cli
 
 import (
-	"context"
 	"errors"
 	"fmt"
-	"net/http"
 	"os"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/db"
 	"github.com/juanfont/headscale/hscontrol/policy"
 	"github.com/juanfont/headscale/hscontrol/types"
@@ -16,13 +14,14 @@ import (
 )
 
 const (
-	bypassFlag = "bypass-server-and-access-database-directly" //nolint:gosec // not a credential
+	bypassFlag = "bypass-grpc-and-access-database-directly" //nolint:gosec // not a credential
 )
 
 var errAborted = errors.New("command aborted by user")
 
-// bypassDatabase opens the database directly, bypassing the running server.
-// The caller must close the returned handle.
+// bypassDatabase loads the server config and opens the database directly,
+// bypassing the gRPC server. The caller is responsible for closing the
+// returned database handle.
 func bypassDatabase() (*db.HSDatabase, error) {
 	cfg, err := types.LoadServerConfig()
 	if err != nil {
@@ -37,29 +36,19 @@ func bypassDatabase() (*db.HSDatabase, error) {
 	return d, nil
 }
 
-// openBypassDB confirms the destructive bypass action and opens the database
-// directly. The caller is responsible for closing the returned handle.
-func openBypassDB(cmd *cobra.Command) (*db.HSDatabase, error) {
-	if !confirmAction(cmd, "DO NOT run this command if an instance of headscale is running, are you sure headscale is not running?") {
-		return nil, errAborted
-	}
-
-	return bypassDatabase()
-}
-
 func init() {
 	rootCmd.AddCommand(policyCmd)
 
-	getPolicy.Flags().BoolP(bypassFlag, "", false, "Uses the headscale config to directly access the database, bypassing the API and does not require the server to be running")
+	getPolicy.Flags().BoolP(bypassFlag, "", false, "Uses the headscale config to directly access the database, bypassing gRPC and does not require the server to be running")
 	policyCmd.AddCommand(getPolicy)
 
 	setPolicy.Flags().StringP("file", "f", "", "Path to a policy file in HuJSON format")
-	setPolicy.Flags().BoolP(bypassFlag, "", false, "Uses the headscale config to directly access the database, bypassing the API and does not require the server to be running")
+	setPolicy.Flags().BoolP(bypassFlag, "", false, "Uses the headscale config to directly access the database, bypassing gRPC and does not require the server to be running")
 	mustMarkRequired(setPolicy, "file")
 	policyCmd.AddCommand(setPolicy)
 
 	checkPolicy.Flags().StringP("file", "f", "", "Path to a policy file in HuJSON format")
-	checkPolicy.Flags().BoolP(bypassFlag, "", false, "Open the database directly (no running server required) to resolve user references and to evaluate the policy's tests and sshTests blocks. Required when those checks are needed.")
+	checkPolicy.Flags().BoolP(bypassFlag, "", false, "Open the database directly (no gRPC, no running server) to validate user@ token references and to evaluate the policy's tests and sshTests blocks. Required when those checks are needed.")
 	mustMarkRequired(checkPolicy, "file")
 	policyCmd.AddCommand(checkPolicy)
 }
@@ -72,12 +61,16 @@ var policyCmd = &cobra.Command{
 var getPolicy = &cobra.Command{
 	Use:     "get",
 	Short:   "Print the current ACL Policy",
-	Aliases: []string{cmdShow, "view", "fetch"},
+	Aliases: []string{"show", "view", "fetch"},
 	RunE: func(cmd *cobra.Command, args []string) error {
 		var policyData string
 
 		if bypass, _ := cmd.Flags().GetBool(bypassFlag); bypass {
-			d, err := openBypassDB(cmd)
+			if !confirmAction(cmd, "DO NOT run this command if an instance of headscale is running, are you sure headscale is not running?") {
+				return errAborted
+			}
+
+			d, err := bypassDatabase()
 			if err != nil {
 				return err
 			}
@@ -90,23 +83,19 @@ var getPolicy = &cobra.Command{
 
 			policyData = pol.Data
 		} else {
-			err := withClient(func(ctx context.Context, client *clientv1.ClientWithResponses) error {
-				resp, err := client.GetPolicyWithResponse(ctx)
-				if err != nil {
-					return fmt.Errorf("loading ACL policy: %w", err)
-				}
-
-				if resp.StatusCode() != http.StatusOK {
-					return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-				}
-
-				policyData = resp.JSON200.Policy
-
-				return nil
-			})
+			ctx, client, conn, cancel, err := newHeadscaleCLIWithConfig()
 			if err != nil {
-				return err
+				return fmt.Errorf("connecting to headscale: %w", err)
 			}
+			defer cancel()
+			defer conn.Close()
+
+			response, err := client.GetPolicy(ctx, &v1.GetPolicyRequest{})
+			if err != nil {
+				return fmt.Errorf("loading ACL policy: %w", err)
+			}
+
+			policyData = response.GetPolicy()
 		}
 
 		// This does not pass output format as we don't support yaml, json or
@@ -133,13 +122,17 @@ var setPolicy = &cobra.Command{
 		}
 
 		if bypass, _ := cmd.Flags().GetBool(bypassFlag); bypass {
-			d, err := openBypassDB(cmd)
+			if !confirmAction(cmd, "DO NOT run this command if an instance of headscale is running, are you sure headscale is not running?") {
+				return errAborted
+			}
+
+			d, err := bypassDatabase()
 			if err != nil {
 				return err
 			}
 			defer d.Close()
 
-			users, err := d.ListUsers(nil)
+			users, err := d.ListUsers()
 			if err != nil {
 				return fmt.Errorf("loading users for policy validation: %w", err)
 			}
@@ -154,24 +147,18 @@ var setPolicy = &cobra.Command{
 				return fmt.Errorf("setting ACL policy: %w", err)
 			}
 		} else {
-			policyStr := string(policyBytes)
+			request := &v1.SetPolicyRequest{Policy: string(policyBytes)}
 
-			err := withClient(func(ctx context.Context, client *clientv1.ClientWithResponses) error {
-				resp, err := client.SetPolicyWithResponse(ctx, clientv1.SetPolicyJSONRequestBody{
-					Policy: &policyStr,
-				})
-				if err != nil {
-					return fmt.Errorf("setting ACL policy: %w", err)
-				}
-
-				if resp.StatusCode() != http.StatusOK {
-					return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-				}
-
-				return nil
-			})
+			ctx, client, conn, cancel, err := newHeadscaleCLIWithConfig()
 			if err != nil {
-				return err
+				return fmt.Errorf("connecting to headscale: %w", err)
+			}
+			defer cancel()
+			defer conn.Close()
+
+			_, err = client.SetPolicy(ctx, request)
+			if err != nil {
+				return fmt.Errorf("setting ACL policy: %w", err)
 			}
 		}
 
@@ -186,8 +173,8 @@ var checkPolicy = &cobra.Command{
 	Short: "Check the Policy file for errors",
 	Long: `
 	Check validates the policy against the server's live users and nodes,
-	running any "tests" or "sshTests" block. By default the command calls a
-	running headscale over its API; pass --` + bypassFlag + ` to
+	running any "tests" or "sshTests" block. By default the command is a
+	thin frontend for a gRPC call to a running headscale; pass --` + bypassFlag + ` to
 	open the database directly when headscale is not running.`,
 	RunE: func(cmd *cobra.Command, args []string) error {
 		policyPath, _ := cmd.Flags().GetString("file")
@@ -198,13 +185,17 @@ var checkPolicy = &cobra.Command{
 		}
 
 		if bypass, _ := cmd.Flags().GetBool(bypassFlag); bypass {
-			d, err := openBypassDB(cmd)
+			if !confirmAction(cmd, "DO NOT run this command if an instance of headscale is running, are you sure headscale is not running?") {
+				return errAborted
+			}
+
+			d, err := bypassDatabase()
 			if err != nil {
 				return err
 			}
 			defer d.Close()
 
-			users, err := d.ListUsers(nil)
+			users, err := d.ListUsers()
 			if err != nil {
 				return fmt.Errorf("loading users: %w", err)
 			}
@@ -214,9 +205,9 @@ var checkPolicy = &cobra.Command{
 				return fmt.Errorf("loading nodes: %w", err)
 			}
 
-			// [policy.NewPolicyManager] validates structure and user references
+			// NewPolicyManager validates structure and user references
 			// but intentionally skips test evaluation (boot path).
-			// [policy.PolicyManager.SetPolicy] is the user-write boundary and is what runs the
+			// SetPolicy is the user-write boundary and is what runs the
 			// tests and sshTests blocks.
 			pm, err := policy.NewPolicyManager(policyBytes, users, nodes.ViewSlice())
 			if err != nil {
@@ -233,22 +224,14 @@ var checkPolicy = &cobra.Command{
 			return nil
 		}
 
-		policyStr := string(policyBytes)
+		ctx, client, conn, cancel, err := newHeadscaleCLIWithConfig()
+		if err != nil {
+			return fmt.Errorf("connecting to headscale: %w", err)
+		}
+		defer cancel()
+		defer conn.Close()
 
-		err = withClient(func(ctx context.Context, client *clientv1.ClientWithResponses) error {
-			resp, err := client.CheckPolicyWithResponse(ctx, clientv1.CheckPolicyJSONRequestBody{
-				Policy: &policyStr,
-			})
-			if err != nil {
-				return err
-			}
-
-			if resp.StatusCode() != http.StatusOK {
-				return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-			}
-
-			return nil
-		})
+		_, err = client.CheckPolicy(ctx, &v1.CheckPolicyRequest{Policy: string(policyBytes)})
 		if err != nil {
 			return err
 		}
diff --git a/cmd/headscale/cli/preauthkeys.go b/cmd/headscale/cli/preauthkeys.go
index f6d4ad2b0..0a0f82852 100644
--- a/cmd/headscale/cli/preauthkeys.go
+++ b/cmd/headscale/cli/preauthkeys.go
@@ -3,12 +3,12 @@ package cli
 import (
 	"context"
 	"fmt"
-	"net/http"
 	"strconv"
 	"strings"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/util"
+	"github.com/pterm/pterm"
 	"github.com/spf13/cobra"
 )
 
@@ -42,57 +42,57 @@ var preauthkeysCmd = &cobra.Command{
 }
 
 var listPreAuthKeys = &cobra.Command{
-	Use:     cmdList,
+	Use:     "list",
 	Short:   "List all preauthkeys",
-	Aliases: []string{"ls", cmdShow},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		resp, err := client.ListPreAuthKeysWithResponse(ctx)
+	Aliases: []string{"ls", "show"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		response, err := client.ListPreAuthKeys(ctx, &v1.ListPreAuthKeysRequest{})
 		if err != nil {
 			return fmt.Errorf("listing preauthkeys: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
+		return printListOutput(cmd, response.GetPreAuthKeys(), func() error {
+			tableData := pterm.TableData{
+				{
+					"ID",
+					"Key/Prefix",
+					"Reusable",
+					"Ephemeral",
+					"Used",
+					"Expiration",
+					"Created",
+					"Owner",
+				},
+			}
 
-		preAuthKeys := resp.JSON200.PreAuthKeys
-
-		return printListOutput(cmd, preAuthKeys, func() error {
-			rows := make([][]string, 0, len(preAuthKeys))
-			for _, key := range preAuthKeys {
-				expiration := ColourTime(key.Expiration)
-
-				owner := "-"
-
-				switch {
-				case len(key.AclTags) > 0:
-					owner = strings.Join(key.AclTags, "\n")
-				case key.User.Id != "":
-					owner = key.User.Name
+			for _, key := range response.GetPreAuthKeys() {
+				expiration := "-"
+				if key.GetExpiration() != nil {
+					expiration = ColourTime(key.GetExpiration().AsTime())
 				}
 
-				rows = append(rows, []string{
-					key.Id,
-					key.Key,
-					strconv.FormatBool(key.Reusable),
-					strconv.FormatBool(key.Ephemeral),
-					strconv.FormatBool(key.Used),
+				var owner string
+				if len(key.GetAclTags()) > 0 {
+					owner = strings.Join(key.GetAclTags(), "\n")
+				} else if key.GetUser() != nil {
+					owner = key.GetUser().GetName()
+				} else {
+					owner = "-"
+				}
+
+				tableData = append(tableData, []string{
+					strconv.FormatUint(key.GetId(), util.Base10),
+					key.GetKey(),
+					strconv.FormatBool(key.GetReusable()),
+					strconv.FormatBool(key.GetEphemeral()),
+					strconv.FormatBool(key.GetUsed()),
 					expiration,
-					key.CreatedAt.Format(HeadscaleDateTimeFormat),
+					key.GetCreatedAt().AsTime().Format(HeadscaleDateTimeFormat),
 					owner,
 				})
 			}
 
-			return renderTable([]string{
-				"ID",
-				"Key/Prefix",
-				"Reusable",
-				"Ephemeral",
-				"Used",
-				colExpiration,
-				colCreated,
-				"Owner",
-			}, rows)
+			return pterm.DefaultTable.WithHasHeader().WithData(tableData).Render()
 		})
 	}),
 }
@@ -100,103 +100,79 @@ var listPreAuthKeys = &cobra.Command{
 var createPreAuthKeyCmd = &cobra.Command{
 	Use:     "create",
 	Short:   "Creates a new preauthkey",
-	Aliases: []string{"c", cmdNew},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	Aliases: []string{"c", "new"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		user, _ := cmd.Flags().GetUint64("user")
 		reusable, _ := cmd.Flags().GetBool("reusable")
 		ephemeral, _ := cmd.Flags().GetBool("ephemeral")
 		tags, _ := cmd.Flags().GetStringSlice("tags")
 
-		expiryTime, err := expirationFromFlag(cmd)
+		expiration, err := expirationFromFlag(cmd)
 		if err != nil {
 			return err
 		}
 
-		userStr := strconv.FormatUint(user, util.Base10)
-
-		request := clientv1.CreatePreAuthKeyJSONRequestBody{
-			User:       &userStr,
-			Reusable:   &reusable,
-			Ephemeral:  &ephemeral,
-			AclTags:    &tags,
-			Expiration: &expiryTime,
+		request := &v1.CreatePreAuthKeyRequest{
+			User:       user,
+			Reusable:   reusable,
+			Ephemeral:  ephemeral,
+			AclTags:    tags,
+			Expiration: expiration,
 		}
 
-		resp, err := client.CreatePreAuthKeyWithResponse(ctx, request)
+		response, err := client.CreatePreAuthKey(ctx, request)
 		if err != nil {
 			return fmt.Errorf("creating preauthkey: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		preAuthKey := resp.JSON200.PreAuthKey
-
-		return printOutput(cmd, preAuthKey, preAuthKey.Key)
+		return printOutput(cmd, response.GetPreAuthKey(), response.GetPreAuthKey().GetKey())
 	}),
 }
 
-// preAuthKeyID reads the required --id flag for preauthkey commands.
-func preAuthKeyID(cmd *cobra.Command) (uint64, error) {
-	id, _ := cmd.Flags().GetUint64("id")
-	if id == 0 {
-		return 0, fmt.Errorf("missing --id parameter: %w", errMissingParameter)
-	}
-
-	return id, nil
-}
-
 var expirePreAuthKeyCmd = &cobra.Command{
-	Use:     cmdExpire,
+	Use:     "expire",
 	Short:   "Expire a preauthkey",
-	Aliases: []string{"revoke", aliasExp, "e"},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		id, err := preAuthKeyID(cmd)
-		if err != nil {
-			return err
+	Aliases: []string{"revoke", "exp", "e"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		id, _ := cmd.Flags().GetUint64("id")
+
+		if id == 0 {
+			return fmt.Errorf("missing --id parameter: %w", errMissingParameter)
 		}
 
-		idStr := strconv.FormatUint(id, util.Base10)
+		request := &v1.ExpirePreAuthKeyRequest{
+			Id: id,
+		}
 
-		resp, err := client.ExpirePreAuthKeyWithResponse(ctx, clientv1.ExpirePreAuthKeyJSONRequestBody{
-			Id: &idStr,
-		})
+		response, err := client.ExpirePreAuthKey(ctx, request)
 		if err != nil {
 			return fmt.Errorf("expiring preauthkey: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200, "Key expired")
+		return printOutput(cmd, response, "Key expired")
 	}),
 }
 
 var deletePreAuthKeyCmd = &cobra.Command{
-	Use:     cmdDelete,
+	Use:     "delete",
 	Short:   "Delete a preauthkey",
-	Aliases: []string{aliasDel, "rm", "d"},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		id, err := preAuthKeyID(cmd)
-		if err != nil {
-			return err
+	Aliases: []string{"del", "rm", "d"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		id, _ := cmd.Flags().GetUint64("id")
+
+		if id == 0 {
+			return fmt.Errorf("missing --id parameter: %w", errMissingParameter)
 		}
 
-		idStr := strconv.FormatUint(id, util.Base10)
+		request := &v1.DeletePreAuthKeyRequest{
+			Id: id,
+		}
 
-		resp, err := client.DeletePreAuthKeyWithResponse(ctx, &clientv1.DeletePreAuthKeyParams{
-			Id: &idStr,
-		})
+		response, err := client.DeletePreAuthKey(ctx, request)
 		if err != nil {
 			return fmt.Errorf("deleting preauthkey: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200, "Key deleted")
+		return printOutput(cmd, response, "Key deleted")
 	}),
 }
diff --git a/cmd/headscale/cli/root.go b/cmd/headscale/cli/root.go
index ff06ea24b..fa7ded2dc 100644
--- a/cmd/headscale/cli/root.go
+++ b/cmd/headscale/cli/root.go
@@ -3,7 +3,6 @@ package cli
 import (
 	"os"
 	"runtime"
-	"slices"
 	"strings"
 
 	"github.com/juanfont/headscale/hscontrol/types"
@@ -31,7 +30,7 @@ func init() {
 		Bool("force", false, "Disable prompts and forces the execution")
 
 	// Re-enable usage output only for flag-parsing errors; runtime errors
-	// from [cobra.Command.RunE] should never dump usage text.
+	// from RunE should never dump usage text.
 	rootCmd.SetFlagErrorFunc(func(cmd *cobra.Command, err error) error {
 		cmd.SilenceUsage = false
 
@@ -96,9 +95,13 @@ func initConfig() {
 var prereleases = []string{"alpha", "beta", "rc", "dev"}
 
 func isPreReleaseVersion(version string) bool {
-	return slices.ContainsFunc(prereleases, func(unstable string) bool {
-		return strings.Contains(version, unstable)
-	})
+	for _, unstable := range prereleases {
+		if strings.Contains(version, unstable) {
+			return true
+		}
+	}
+
+	return false
 }
 
 // filterPreReleasesIfStable returns a function that filters out
@@ -117,7 +120,13 @@ func filterPreReleasesIfStable(versionFunc func() string) func(string) bool {
 		}
 
 		// If we are on a stable release, filter out pre-releases.
-		return isPreReleaseVersion(tag)
+		for _, ignore := range prereleases {
+			if strings.Contains(tag, ignore) {
+				return true
+			}
+		}
+
+		return false
 	}
 }
 
diff --git a/cmd/headscale/cli/root_test.go b/cmd/headscale/cli/root_test.go
index fb1fefd11..8d1b9c01a 100644
--- a/cmd/headscale/cli/root_test.go
+++ b/cmd/headscale/cli/root_test.go
@@ -4,19 +4,6 @@ import (
 	"testing"
 )
 
-const (
-	v23       = "0.23.0"
-	v23Alpha1 = "0.23.0-alpha.1"
-	v23Beta1  = "0.23.0-beta.1"
-	v23RC1    = "0.23.0-rc.1"
-	v23Dev    = "0.23.0-dev"
-	v231      = "0.23.1"
-
-	v24Alpha1Tag = "v0.24.0-alpha.1"
-	v24RCTag     = "v0.24.0-rc.1"
-	v24Tag       = "v0.24.0"
-)
-
 func TestFilterPreReleasesIfStable(t *testing.T) {
 	tests := []struct {
 		name           string
@@ -27,64 +14,64 @@ func TestFilterPreReleasesIfStable(t *testing.T) {
 	}{
 		{
 			name:           "stable version filters alpha tag",
-			currentVersion: v23,
-			tag:            v24Alpha1Tag,
+			currentVersion: "0.23.0",
+			tag:            "v0.24.0-alpha.1",
 			expectedFilter: true,
 			description:    "When on stable release, alpha tags should be filtered",
 		},
 		{
 			name:           "stable version filters beta tag",
-			currentVersion: v23,
+			currentVersion: "0.23.0",
 			tag:            "v0.24.0-beta.2",
 			expectedFilter: true,
 			description:    "When on stable release, beta tags should be filtered",
 		},
 		{
 			name:           "stable version filters rc tag",
-			currentVersion: v23,
-			tag:            v24RCTag,
+			currentVersion: "0.23.0",
+			tag:            "v0.24.0-rc.1",
 			expectedFilter: true,
 			description:    "When on stable release, rc tags should be filtered",
 		},
 		{
 			name:           "stable version allows stable tag",
-			currentVersion: v23,
-			tag:            v24Tag,
+			currentVersion: "0.23.0",
+			tag:            "v0.24.0",
 			expectedFilter: false,
 			description:    "When on stable release, stable tags should not be filtered",
 		},
 		{
 			name:           "alpha version allows alpha tag",
-			currentVersion: v23Alpha1,
+			currentVersion: "0.23.0-alpha.1",
 			tag:            "v0.24.0-alpha.2",
 			expectedFilter: false,
 			description:    "When on alpha release, alpha tags should not be filtered",
 		},
 		{
 			name:           "alpha version allows beta tag",
-			currentVersion: v23Alpha1,
+			currentVersion: "0.23.0-alpha.1",
 			tag:            "v0.24.0-beta.1",
 			expectedFilter: false,
 			description:    "When on alpha release, beta tags should not be filtered",
 		},
 		{
 			name:           "alpha version allows rc tag",
-			currentVersion: v23Alpha1,
-			tag:            v24RCTag,
+			currentVersion: "0.23.0-alpha.1",
+			tag:            "v0.24.0-rc.1",
 			expectedFilter: false,
 			description:    "When on alpha release, rc tags should not be filtered",
 		},
 		{
 			name:           "alpha version allows stable tag",
-			currentVersion: v23Alpha1,
-			tag:            v24Tag,
+			currentVersion: "0.23.0-alpha.1",
+			tag:            "v0.24.0",
 			expectedFilter: false,
 			description:    "When on alpha release, stable tags should not be filtered",
 		},
 		{
 			name:           "beta version allows alpha tag",
-			currentVersion: v23Beta1,
-			tag:            v24Alpha1Tag,
+			currentVersion: "0.23.0-beta.1",
+			tag:            "v0.24.0-alpha.1",
 			expectedFilter: false,
 			description:    "When on beta release, alpha tags should not be filtered",
 		},
@@ -97,28 +84,28 @@ func TestFilterPreReleasesIfStable(t *testing.T) {
 		},
 		{
 			name:           "beta version allows rc tag",
-			currentVersion: v23Beta1,
-			tag:            v24RCTag,
+			currentVersion: "0.23.0-beta.1",
+			tag:            "v0.24.0-rc.1",
 			expectedFilter: false,
 			description:    "When on beta release, rc tags should not be filtered",
 		},
 		{
 			name:           "beta version allows stable tag",
-			currentVersion: v23Beta1,
-			tag:            v24Tag,
+			currentVersion: "0.23.0-beta.1",
+			tag:            "v0.24.0",
 			expectedFilter: false,
 			description:    "When on beta release, stable tags should not be filtered",
 		},
 		{
 			name:           "rc version allows alpha tag",
-			currentVersion: v23RC1,
-			tag:            v24Alpha1Tag,
+			currentVersion: "0.23.0-rc.1",
+			tag:            "v0.24.0-alpha.1",
 			expectedFilter: false,
 			description:    "When on rc release, alpha tags should not be filtered",
 		},
 		{
 			name:           "rc version allows beta tag",
-			currentVersion: v23RC1,
+			currentVersion: "0.23.0-rc.1",
 			tag:            "v0.24.0-beta.1",
 			expectedFilter: false,
 			description:    "When on rc release, beta tags should not be filtered",
@@ -132,78 +119,78 @@ func TestFilterPreReleasesIfStable(t *testing.T) {
 		},
 		{
 			name:           "rc version allows stable tag",
-			currentVersion: v23RC1,
-			tag:            v24Tag,
+			currentVersion: "0.23.0-rc.1",
+			tag:            "v0.24.0",
 			expectedFilter: false,
 			description:    "When on rc release, stable tags should not be filtered",
 		},
 		{
 			name:           "stable version with patch filters alpha",
-			currentVersion: v231,
-			tag:            v24Alpha1Tag,
+			currentVersion: "0.23.1",
+			tag:            "v0.24.0-alpha.1",
 			expectedFilter: true,
 			description:    "Stable version with patch number should filter alpha tags",
 		},
 		{
 			name:           "stable version with patch allows stable",
-			currentVersion: v231,
-			tag:            v24Tag,
+			currentVersion: "0.23.1",
+			tag:            "v0.24.0",
 			expectedFilter: false,
 			description:    "Stable version with patch number should allow stable tags",
 		},
 		{
 			name:           "tag with alpha substring in version number",
-			currentVersion: v23,
+			currentVersion: "0.23.0",
 			tag:            "v1.0.0-alpha.1",
 			expectedFilter: true,
 			description:    "Tags with alpha in version string should be filtered on stable",
 		},
 		{
 			name:           "tag with beta substring in version number",
-			currentVersion: v23,
+			currentVersion: "0.23.0",
 			tag:            "v1.0.0-beta.1",
 			expectedFilter: true,
 			description:    "Tags with beta in version string should be filtered on stable",
 		},
 		{
 			name:           "tag with rc substring in version number",
-			currentVersion: v23,
+			currentVersion: "0.23.0",
 			tag:            "v1.0.0-rc.1",
 			expectedFilter: true,
 			description:    "Tags with rc in version string should be filtered on stable",
 		},
 		{
 			name:           "empty tag on stable version",
-			currentVersion: v23,
+			currentVersion: "0.23.0",
 			tag:            "",
 			expectedFilter: false,
 			description:    "Empty tags should not be filtered",
 		},
 		{
 			name:           "dev version allows all tags",
-			currentVersion: v23Dev,
-			tag:            v24Alpha1Tag,
+			currentVersion: "0.23.0-dev",
+			tag:            "v0.24.0-alpha.1",
 			expectedFilter: false,
 			description:    "Dev versions should not filter any tags (pre-release allows all)",
 		},
 		{
 			name:           "stable version filters dev tag",
-			currentVersion: v23,
+			currentVersion: "0.23.0",
 			tag:            "v0.24.0-dev",
 			expectedFilter: true,
 			description:    "When on stable release, dev tags should be filtered",
 		},
 		{
 			name:           "dev version allows dev tag",
-			currentVersion: v23Dev,
+			currentVersion: "0.23.0-dev",
 			tag:            "v0.24.0-dev.1",
 			expectedFilter: false,
 			description:    "When on dev release, dev tags should not be filtered",
 		},
 		{
 			name:           "dev version allows stable tag",
-			currentVersion: v23Dev,
-			tag:            v24Tag,
+			currentVersion: "0.23.0-dev",
+			tag:            "v0.24.0",
 			expectedFilter: false,
 			description:    "When on dev release, stable tags should not be filtered",
 		},
@@ -213,8 +200,7 @@ func TestFilterPreReleasesIfStable(t *testing.T) {
 		t.Run(tt.name, func(t *testing.T) {
 			result := filterPreReleasesIfStable(func() string { return tt.currentVersion })(tt.tag)
 			if result != tt.expectedFilter {
-				t.Errorf(
-					"%s: got %v, want %v\nDescription: %s\nCurrent version: %s, Tag: %s",
+				t.Errorf("%s: got %v, want %v\nDescription: %s\nCurrent version: %s, Tag: %s",
 					tt.name,
 					result,
 					tt.expectedFilter,
@@ -236,25 +222,25 @@ func TestIsPreReleaseVersion(t *testing.T) {
 	}{
 		{
 			name:        "stable version",
-			version:     v23,
+			version:     "0.23.0",
 			expected:    false,
 			description: "Stable version should not be pre-release",
 		},
 		{
 			name:        "alpha version",
-			version:     v23Alpha1,
+			version:     "0.23.0-alpha.1",
 			expected:    true,
 			description: "Alpha version should be pre-release",
 		},
 		{
 			name:        "beta version",
-			version:     v23Beta1,
+			version:     "0.23.0-beta.1",
 			expected:    true,
 			description: "Beta version should be pre-release",
 		},
 		{
 			name:        "rc version",
-			version:     v23RC1,
+			version:     "0.23.0-rc.1",
 			expected:    true,
 			description: "RC version should be pre-release",
 		},
@@ -272,7 +258,7 @@ func TestIsPreReleaseVersion(t *testing.T) {
 		},
 		{
 			name:        "dev version",
-			version:     v23Dev,
+			version:     "0.23.0-dev",
 			expected:    true,
 			description: "Dev version should be pre-release",
 		},
@@ -284,7 +270,7 @@ func TestIsPreReleaseVersion(t *testing.T) {
 		},
 		{
 			name:        "version with patch number",
-			version:     v231,
+			version:     "0.23.1",
 			expected:    false,
 			description: "Stable version with patch should not be pre-release",
 		},
@@ -294,8 +280,7 @@ func TestIsPreReleaseVersion(t *testing.T) {
 		t.Run(tt.name, func(t *testing.T) {
 			result := isPreReleaseVersion(tt.version)
 			if result != tt.expected {
-				t.Errorf(
-					"%s: got %v, want %v\nDescription: %s\nVersion: %s",
+				t.Errorf("%s: got %v, want %v\nDescription: %s\nVersion: %s",
 					tt.name,
 					result,
 					tt.expected,
diff --git a/cmd/headscale/cli/strings.go b/cmd/headscale/cli/strings.go
deleted file mode 100644
index f6c003c63..000000000
--- a/cmd/headscale/cli/strings.go
+++ /dev/null
@@ -1,23 +0,0 @@
-package cli
-
-// Shared CLI vocabulary used across multiple command definitions in this
-// package. Centralising the strings prevents goconst drift and ensures a
-// typo in a subcommand name fails to compile rather than silently
-// breaking the binding.
-const (
-	// Subcommand verbs (cobra Use field).
-	cmdList   = "list"
-	cmdShow   = "show"
-	cmdNew    = "new"
-	cmdDelete = "delete"
-	cmdExpire = "expire"
-
-	// Subcommand aliases.
-	aliasDel = "del"
-	aliasExp = "exp"
-
-	// Output table column headers and printOutput map keys.
-	colResult     = "Result"
-	colCreated    = "Created"
-	colExpiration = "Expiration"
-)
diff --git a/cmd/headscale/cli/users.go b/cmd/headscale/cli/users.go
index 71be49cf4..1e4609cec 100644
--- a/cmd/headscale/cli/users.go
+++ b/cmd/headscale/cli/users.go
@@ -4,13 +4,13 @@ import (
 	"context"
 	"errors"
 	"fmt"
-	"net/http"
 	"net/url"
 	"strconv"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
+	"github.com/pterm/pterm"
 	"github.com/rs/zerolog/log"
 	"github.com/spf13/cobra"
 )
@@ -37,50 +37,13 @@ func usernameAndIDFromFlag(cmd *cobra.Command) (uint64, string, error) {
 
 	// Normalise unset/negative identifiers to 0 so the uint64
 	// conversion does not produce a bogus large value.
-	identifier = max(identifier, 0)
+	if identifier < 0 {
+		identifier = 0
+	}
 
 	return uint64(identifier), username, nil //nolint:gosec // identifier is clamped to >= 0 above
 }
 
-// resolveSingleUser resolves exactly one user from the --name/--id flags,
-// returning the raw flag id and the matched user.
-func resolveSingleUser(
-	ctx context.Context,
-	client *clientv1.ClientWithResponses,
-	cmd *cobra.Command,
-) (uint64, *clientv1.User, error) {
-	id, username, err := usernameAndIDFromFlag(cmd)
-	if err != nil {
-		return 0, nil, err
-	}
-
-	params := &clientv1.ListUsersParams{}
-	if username != "" {
-		params.Name = &username
-	}
-
-	if id != 0 {
-		idStr := strconv.FormatUint(id, util.Base10)
-		params.Id = &idStr
-	}
-
-	resp, err := client.ListUsersWithResponse(ctx, params)
-	if err != nil {
-		return 0, nil, fmt.Errorf("listing users: %w", err)
-	}
-
-	if resp.StatusCode() != http.StatusOK {
-		return 0, nil, apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-	}
-
-	users := resp.JSON200.Users
-	if len(users) != 1 {
-		return 0, nil, errMultipleUsersMatch
-	}
-
-	return id, &users[0], nil
-}
-
 func init() {
 	rootCmd.AddCommand(userCmd)
 	userCmd.AddCommand(createUserCmd)
@@ -107,7 +70,7 @@ var userCmd = &cobra.Command{
 var createUserCmd = &cobra.Command{
 	Use:     "create NAME",
 	Short:   "Creates a new user",
-	Aliases: []string{"c", cmdNew},
+	Aliases: []string{"c", "new"},
 	Args: func(cmd *cobra.Command, args []string) error {
 		if len(args) < 1 {
 			return errMissingParameter
@@ -115,19 +78,19 @@ var createUserCmd = &cobra.Command{
 
 		return nil
 	},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
 		userName := args[0]
 
-		log.Trace().Interface(zf.Client, client).Msg("obtained API client")
+		log.Trace().Interface(zf.Client, client).Msg("obtained gRPC client")
 
-		request := clientv1.CreateUserJSONRequestBody{Name: &userName}
+		request := &v1.CreateUserRequest{Name: userName}
 
 		if displayName, _ := cmd.Flags().GetString("display-name"); displayName != "" {
-			request.DisplayName = &displayName
+			request.DisplayName = displayName
 		}
 
 		if email, _ := cmd.Flags().GetString("email"); email != "" {
-			request.Email = &email
+			request.Email = email
 		}
 
 		if pictureURL, _ := cmd.Flags().GetString("picture-url"); pictureURL != "" {
@@ -135,60 +98,70 @@ var createUserCmd = &cobra.Command{
 				return fmt.Errorf("invalid picture URL: %w", err)
 			}
 
-			request.PictureUrl = &pictureURL
+			request.PictureUrl = pictureURL
 		}
 
 		log.Trace().Interface(zf.Request, request).Msg("sending CreateUser request")
 
-		resp, err := client.CreateUserWithResponse(ctx, request)
+		response, err := client.CreateUser(ctx, request)
 		if err != nil {
 			return fmt.Errorf("creating user: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200.User, "User created")
+		return printOutput(cmd, response.GetUser(), "User created")
 	}),
 }
 
 var destroyUserCmd = &cobra.Command{
 	Use:     "destroy --identifier ID or --name NAME",
 	Short:   "Destroys a user",
-	Aliases: []string{cmdDelete},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		_, user, err := resolveSingleUser(ctx, client, cmd)
+	Aliases: []string{"delete"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		id, username, err := usernameAndIDFromFlag(cmd)
 		if err != nil {
 			return err
 		}
 
-		if !confirmAction(cmd, fmt.Sprintf(
-			"Do you want to remove the user %q (%s) and any associated preauthkeys?",
-			user.Name, user.Id,
-		)) {
-			return printOutput(cmd, map[string]string{colResult: "User not destroyed"}, "User not destroyed")
+		request := &v1.ListUsersRequest{
+			Name: username,
+			Id:   id,
 		}
 
-		resp, err := client.DeleteUserWithResponse(ctx, user.Id)
+		users, err := client.ListUsers(ctx, request)
+		if err != nil {
+			return fmt.Errorf("listing users: %w", err)
+		}
+
+		if len(users.GetUsers()) != 1 {
+			return errMultipleUsersMatch
+		}
+
+		user := users.GetUsers()[0]
+
+		if !confirmAction(cmd, fmt.Sprintf(
+			"Do you want to remove the user %q (%d) and any associated preauthkeys?",
+			user.GetName(), user.GetId(),
+		)) {
+			return printOutput(cmd, map[string]string{"Result": "User not destroyed"}, "User not destroyed")
+		}
+
+		deleteRequest := &v1.DeleteUserRequest{Id: user.GetId()}
+
+		response, err := client.DeleteUser(ctx, deleteRequest)
 		if err != nil {
 			return fmt.Errorf("destroying user: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200, "User destroyed")
+		return printOutput(cmd, response, "User destroyed")
 	}),
 }
 
 var listUsersCmd = &cobra.Command{
-	Use:     cmdList,
+	Use:     "list",
 	Short:   "List all the users",
-	Aliases: []string{"ls", cmdShow},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		params := &clientv1.ListUsersParams{}
+	Aliases: []string{"ls", "show"},
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		request := &v1.ListUsersRequest{}
 
 		id, _ := cmd.Flags().GetInt64("identifier")
 		username, _ := cmd.Flags().GetString("name")
@@ -197,41 +170,34 @@ var listUsersCmd = &cobra.Command{
 		// filter by one param at most
 		switch {
 		case id > 0:
-			idStr := strconv.FormatInt(id, util.Base10)
-			params.Id = &idStr
+			request.Id = uint64(id)
 		case username != "":
-			params.Name = &username
+			request.Name = username
 		case email != "":
-			params.Email = &email
+			request.Email = email
 		}
 
-		resp, err := client.ListUsersWithResponse(ctx, params)
+		response, err := client.ListUsers(ctx, request)
 		if err != nil {
 			return fmt.Errorf("listing users: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		users := resp.JSON200.Users
-
-		return printListOutput(cmd, users, func() error {
-			rows := make([][]string, 0, len(users))
-			for _, user := range users {
-				rows = append(
-					rows,
+		return printListOutput(cmd, response.GetUsers(), func() error {
+			tableData := pterm.TableData{{"ID", "Name", "Username", "Email", "Created"}}
+			for _, user := range response.GetUsers() {
+				tableData = append(
+					tableData,
 					[]string{
-						user.Id,
-						user.DisplayName,
-						user.Name,
-						user.Email,
-						user.CreatedAt.Format(HeadscaleDateTimeFormat),
+						strconv.FormatUint(user.GetId(), util.Base10),
+						user.GetDisplayName(),
+						user.GetName(),
+						user.GetEmail(),
+						user.GetCreatedAt().AsTime().Format(HeadscaleDateTimeFormat),
 					},
 				)
 			}
 
-			return renderTable([]string{"ID", "Name", "Username", "Email", colCreated}, rows)
+			return pterm.DefaultTable.WithHasHeader().WithData(tableData).Render()
 		})
 	}),
 }
@@ -240,23 +206,38 @@ var renameUserCmd = &cobra.Command{
 	Use:     "rename",
 	Short:   "Renames a user",
 	Aliases: []string{"mv"},
-	RunE: clientRunE(func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error {
-		id, _, err := resolveSingleUser(ctx, client, cmd)
+	RunE: grpcRunE(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error {
+		id, username, err := usernameAndIDFromFlag(cmd)
 		if err != nil {
 			return err
 		}
 
+		listReq := &v1.ListUsersRequest{
+			Name: username,
+			Id:   id,
+		}
+
+		users, err := client.ListUsers(ctx, listReq)
+		if err != nil {
+			return fmt.Errorf("listing users: %w", err)
+		}
+
+		if len(users.GetUsers()) != 1 {
+			return errMultipleUsersMatch
+		}
+
 		newName, _ := cmd.Flags().GetString("new-name")
 
-		resp, err := client.RenameUserWithResponse(ctx, strconv.FormatUint(id, util.Base10), newName)
+		renameReq := &v1.RenameUserRequest{
+			OldId:   id,
+			NewName: newName,
+		}
+
+		response, err := client.RenameUser(ctx, renameReq)
 		if err != nil {
 			return fmt.Errorf("renaming user: %w", err)
 		}
 
-		if resp.StatusCode() != http.StatusOK {
-			return apiError(resp.StatusCode(), resp.ApplicationproblemJSONDefault)
-		}
-
-		return printOutput(cmd, resp.JSON200.User, "User renamed")
+		return printOutput(cmd, response.GetUser(), "User renamed")
 	}),
 }
diff --git a/cmd/headscale/cli/utils.go b/cmd/headscale/cli/utils.go
index 9a5c311c2..f5bf47f8d 100644
--- a/cmd/headscale/cli/utils.go
+++ b/cmd/headscale/cli/utils.go
@@ -6,23 +6,21 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
-	"net"
-	"net/http"
 	"os"
-	"slices"
-	"strings"
 	"time"
 
-	"github.com/cenkalti/backoff/v5"
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
 	"github.com/prometheus/common/model"
-	"github.com/pterm/pterm"
 	"github.com/rs/zerolog/log"
 	"github.com/spf13/cobra"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/credentials"
+	"google.golang.org/grpc/credentials/insecure"
+	"google.golang.org/protobuf/types/known/timestamppb"
 	"gopkg.in/yaml.v3"
 )
 
@@ -38,45 +36,11 @@ const (
 var (
 	errAPIKeyNotSet     = errors.New("HEADSCALE_CLI_API_KEY environment variable needs to be set")
 	errMissingParameter = errors.New("missing parameters")
-	errResponseStatus   = errors.New("unexpected response status")
 )
 
-// apiError turns a non-2xx response into an error, surfacing the server's
-// RFC7807 problem detail. detail holds the operation context and errors[] the
-// wrapped cause (e.g. "name is too long"); both are joined so the server's
-// message text is not lost.
-func apiError(statusCode int, problem *clientv1.ErrorModel) error {
-	if problem == nil {
-		return fmt.Errorf("%w: %d %s", errResponseStatus, statusCode, http.StatusText(statusCode))
-	}
-
-	parts := make([]string, 0, 2)
-
-	if problem.Detail != nil && *problem.Detail != "" {
-		parts = append(parts, *problem.Detail)
-	}
-
-	if problem.Errors != nil {
-		for _, e := range *problem.Errors {
-			if e.Message != nil && *e.Message != "" {
-				parts = append(parts, *e.Message)
-			}
-		}
-	}
-
-	if len(parts) == 0 && problem.Title != nil && *problem.Title != "" {
-		parts = append(parts, *problem.Title)
-	}
-
-	if len(parts) == 0 {
-		return fmt.Errorf("%w: %d %s", errResponseStatus, statusCode, http.StatusText(statusCode))
-	}
-
-	return fmt.Errorf("%w: %s", errResponseStatus, strings.Join(parts, ": "))
-}
-
-// mustMarkRequired marks the named flags as required, panicking on an unknown
-// flag. Only called from init(), where a failure is a programming error.
+// mustMarkRequired marks the named flags as required on cmd, panicking
+// if any name does not match a registered flag.  This is only called
+// from init() where a failure indicates a programming error.
 func mustMarkRequired(cmd *cobra.Command, names ...string) {
 	for _, n := range names {
 		err := cmd.MarkFlagRequired(n)
@@ -103,47 +67,28 @@ func newHeadscaleServerWithConfig() (*hscontrol.Headscale, error) {
 	return app, nil
 }
 
-// clientRunE wraps a [cobra.Command.RunE] func, injecting a ready API client
-// and a context whose timeout/cancel the wrapper owns.
-func clientRunE(
-	fn func(ctx context.Context, client *clientv1.ClientWithResponses, cmd *cobra.Command, args []string) error,
+// grpcRunE wraps a cobra RunE func, injecting a ready gRPC client and
+// context. Connection lifecycle is managed by the wrapper — callers
+// never see the underlying conn or cancel func.
+func grpcRunE(
+	fn func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) error,
 ) func(*cobra.Command, []string) error {
 	return func(cmd *cobra.Command, args []string) error {
-		ctx, client, cancel, err := newHeadscaleCLIWithConfig()
+		ctx, client, conn, cancel, err := newHeadscaleCLIWithConfig()
 		if err != nil {
 			return fmt.Errorf("connecting to headscale: %w", err)
 		}
 		defer cancel()
+		defer conn.Close()
 
 		return fn(ctx, client, cmd, args)
 	}
 }
 
-// withClient runs fn with an API client. For commands that branch on a flag
-// before talking to the server, where clientRunE's whole-RunE wrapping does
-// not fit.
-func withClient(
-	fn func(ctx context.Context, client *clientv1.ClientWithResponses) error,
-) error {
-	ctx, client, cancel, err := newHeadscaleCLIWithConfig()
-	if err != nil {
-		return fmt.Errorf("connecting to headscale: %w", err)
-	}
-	defer cancel()
-
-	return fn(ctx, client)
-}
-
-// newHeadscaleCLIWithConfig builds an HTTP client for the Headscale v1 API.
-//
-// When cfg.CLI.Address is unset the CLI is assumed to run on the server host
-// and talks to the unix socket over HTTP without authentication (local trust).
-// Otherwise it talks to the remote TCP address over HTTPS and injects the
-// configured API key as a bearer token.
-func newHeadscaleCLIWithConfig() (context.Context, *clientv1.ClientWithResponses, context.CancelFunc, error) {
+func newHeadscaleCLIWithConfig() (context.Context, v1.HeadscaleServiceClient, *grpc.ClientConn, context.CancelFunc, error) {
 	cfg, err := types.LoadCLIConfig()
 	if err != nil {
-		return nil, nil, nil, fmt.Errorf("loading configuration: %w", err)
+		return nil, nil, nil, nil, fmt.Errorf("loading configuration: %w", err)
 	}
 
 	log.Debug().
@@ -152,131 +97,89 @@ func newHeadscaleCLIWithConfig() (context.Context, *clientv1.ClientWithResponses
 
 	ctx, cancel := context.WithTimeout(context.Background(), cfg.CLI.Timeout)
 
+	grpcOptions := []grpc.DialOption{
+		grpc.WithBlock(), //nolint:staticcheck // SA1019: deprecated but supported in 1.x
+	}
+
 	address := cfg.CLI.Address
 
-	// If the address is not set, we assume that we are on the server hosting [hscontrol].
+	// If the address is not set, we assume that we are on the server hosting hscontrol.
 	if address == "" {
 		log.Debug().
 			Str("socket", cfg.UnixSocket).
 			Msgf("HEADSCALE_CLI_ADDRESS environment is not set, connecting to unix socket.")
 
-		client, err := newSocketClient(cfg.UnixSocket)
+		address = cfg.UnixSocket
+
+		// Try to give the user better feedback if we cannot write to the headscale
+		// socket.  Note: os.OpenFile on a Unix domain socket returns ENXIO on
+		// Linux which is expected — only permission errors are actionable here.
+		// The actual gRPC connection uses net.Dial which handles sockets properly.
+		socket, err := os.OpenFile(cfg.UnixSocket, os.O_WRONLY, SocketWritePermissions) //nolint
 		if err != nil {
+			if os.IsPermission(err) {
+				cancel()
+
+				return nil, nil, nil, nil, fmt.Errorf(
+					"unable to read/write to headscale socket %q, do you have the correct permissions? %w",
+					cfg.UnixSocket,
+					err,
+				)
+			}
+		} else {
+			socket.Close()
+		}
+
+		grpcOptions = append(
+			grpcOptions,
+			grpc.WithTransportCredentials(insecure.NewCredentials()),
+			grpc.WithContextDialer(util.GrpcSocketDialer),
+		)
+	} else {
+		// If we are not connecting to a local server, require an API key for authentication
+		apiKey := cfg.CLI.APIKey
+		if apiKey == "" {
 			cancel()
 
-			return nil, nil, nil, err
+			return nil, nil, nil, nil, errAPIKeyNotSet
 		}
 
-		log.Trace().Caller().Str(zf.Address, cfg.UnixSocket).Msg("connecting via unix socket")
+		grpcOptions = append(grpcOptions,
+			grpc.WithPerRPCCredentials(tokenAuth{
+				token: apiKey,
+			}),
+		)
 
-		return ctx, client, cancel, nil
-	}
+		if cfg.CLI.Insecure {
+			tlsConfig := &tls.Config{
+				// turn of gosec as we are intentionally setting
+				// insecure.
+				//nolint:gosec
+				InsecureSkipVerify: true,
+			}
 
-	// Remote connections require an API key for authentication.
-	apiKey := cfg.CLI.APIKey
-	if apiKey == "" {
-		cancel()
-
-		return nil, nil, nil, errAPIKeyNotSet
-	}
-
-	client, err := newRemoteClient(address, apiKey, cfg.CLI.Insecure)
-	if err != nil {
-		cancel()
-
-		return nil, nil, nil, err
-	}
-
-	log.Trace().Caller().Str(zf.Address, address).Msg("connecting via HTTPS")
-
-	return ctx, client, cancel, nil
-}
-
-// newSocketClient builds an API client that dials the local unix socket. The
-// base-URL host is irrelevant; the custom dialer routes every request to the
-// socket.
-func newSocketClient(socketPath string) (*clientv1.ClientWithResponses, error) {
-	// Probe for a clearer permission error up front. [os.OpenFile] on a unix
-	// socket returns ENXIO on Linux (expected); only permission errors are
-	// actionable. The real connection goes through [net.Dial].
-	socket, err := os.OpenFile(socketPath, os.O_WRONLY, SocketWritePermissions) //nolint
-	if err != nil {
-		if os.IsPermission(err) {
-			return nil, fmt.Errorf(
-				"unable to read/write to headscale socket %q, do you have the correct permissions? %w",
-				socketPath,
-				err,
+			grpcOptions = append(grpcOptions,
+				grpc.WithTransportCredentials(credentials.NewTLS(tlsConfig)),
+			)
+		} else {
+			grpcOptions = append(grpcOptions,
+				grpc.WithTransportCredentials(credentials.NewClientTLSFromCert(nil, "")),
 			)
 		}
-	} else {
-		socket.Close()
 	}
 
-	httpClient := &http.Client{
-		Transport: &http.Transport{
-			DialContext: func(ctx context.Context, _, _ string) (net.Conn, error) {
-				return dialHeadscaleSocket(ctx, socketPath)
-			},
-		},
+	log.Trace().Caller().Str(zf.Address, address).Msg("connecting via gRPC")
+
+	conn, err := grpc.DialContext(ctx, address, grpcOptions...) //nolint:staticcheck // SA1019: deprecated but supported in 1.x
+	if err != nil {
+		cancel()
+
+		return nil, nil, nil, nil, fmt.Errorf("connecting to %s: %w", address, err)
 	}
 
-	return clientv1.NewClientWithResponses(
-		"http://local",
-		clientv1.WithHTTPClient(httpClient),
-	)
-}
+	client := v1.NewHeadscaleServiceClient(conn)
 
-// dialHeadscaleSocket connects to the unix socket, retrying until it appears or
-// ctx (the CLI timeout) expires. The socket is created late in startup (after
-// noise key, database, migrations), so a command run right after the server
-// starts can race its creation; retrying preserves the old gRPC client's
-// blocking-dial tolerance rather than failing on a not-yet-present socket.
-func dialHeadscaleSocket(ctx context.Context, socketPath string) (net.Conn, error) {
-	b := backoff.NewExponentialBackOff()
-	b.InitialInterval = 50 * time.Millisecond
-	b.MaxInterval = 1 * time.Second
-
-	return backoff.Retry(ctx, func() (net.Conn, error) {
-		return util.SocketDialer(ctx, socketPath)
-	}, backoff.WithBackOff(b))
-}
-
-// clientBaseURL turns a configured CLI address into a client base URL. A bare
-// host[:port] (the historical form) defaults to https; an address that already
-// carries a scheme is used as-is, so an explicit http:// or https:// is honoured
-// rather than doubled into https://https://...
-func clientBaseURL(address string) string {
-	if strings.Contains(address, "://") {
-		return address
-	}
-
-	return "https://" + address
-}
-
-// newRemoteClient builds an API client for a remote Headscale over HTTPS,
-// honouring insecure (skip TLS verification) and injecting the API key as a
-// bearer token on every request.
-func newRemoteClient(address, apiKey string, insecure bool) (*clientv1.ClientWithResponses, error) {
-	transport := &http.Transport{}
-	if insecure {
-		transport.TLSClientConfig = &tls.Config{
-			// turn off gosec as we are intentionally setting insecure.
-			//nolint:gosec
-			InsecureSkipVerify: true,
-		}
-	}
-
-	httpClient := &http.Client{Transport: transport}
-
-	return clientv1.NewClientWithResponses(
-		clientBaseURL(address),
-		clientv1.WithHTTPClient(httpClient),
-		clientv1.WithRequestEditorFn(func(_ context.Context, req *http.Request) error {
-			req.Header.Set("Authorization", "Bearer "+apiKey)
-
-			return nil
-		}),
-	)
+	return ctx, client, conn, cancel, nil
 }
 
 // formatOutput serialises result into the requested format. For the
@@ -325,16 +228,16 @@ func printOutput(cmd *cobra.Command, result any, override string) error {
 }
 
 // expirationFromFlag parses the --expiration flag as a Prometheus-style
-// duration (e.g. "90d", "1h") and returns an absolute time.
-func expirationFromFlag(cmd *cobra.Command) (time.Time, error) {
+// duration (e.g. "90d", "1h") and returns an absolute timestamp.
+func expirationFromFlag(cmd *cobra.Command) (*timestamppb.Timestamp, error) {
 	durationStr, _ := cmd.Flags().GetString("expiration")
 
 	duration, err := model.ParseDuration(durationStr)
 	if err != nil {
-		return time.Time{}, fmt.Errorf("parsing duration: %w", err)
+		return nil, fmt.Errorf("parsing duration: %w", err)
 	}
 
-	return time.Now().UTC().Add(time.Duration(duration)), nil
+	return timestamppb.New(time.Now().UTC().Add(time.Duration(duration))), nil
 }
 
 // confirmAction returns true when the user confirms a prompt, or when
@@ -348,19 +251,9 @@ func confirmAction(cmd *cobra.Command, prompt string) bool {
 	return util.YesNo(prompt)
 }
 
-// renderTable prints a human-readable pterm table with the given header row
-// and data rows, using the shared header styling.
-func renderTable(header []string, rows [][]string) error {
-	tableData := make(pterm.TableData, 0, 1+len(rows))
-	tableData = append(tableData, header)
-	tableData = append(tableData, rows...)
-
-	return pterm.DefaultTable.WithHasHeader().WithData(tableData).Render()
-}
-
 // printListOutput checks the --output flag: when a machine-readable format is
-// requested it serialises data as JSON/YAML; otherwise it calls the render
-// callback to produce the human-readable pterm table.
+// requested it serialises data as JSON/YAML; otherwise it calls renderTable
+// to produce the human-readable pterm table.
 func printListOutput(
 	cmd *cobra.Command,
 	data any,
@@ -376,25 +269,56 @@ func printListOutput(
 
 // printError writes err to stderr, formatting it as JSON/YAML when the
 // --output flag requests machine-readable output.  Used exclusively by
-// [Execute] so that every error surfaces in the format the caller asked for.
+// Execute() so that every error surfaces in the format the caller asked for.
 func printError(err error, outputFormat string) {
 	type errOutput struct {
 		Error string `json:"error"`
 	}
 
-	if outputFormat == "" {
+	e := errOutput{Error: err.Error()}
+
+	var formatted []byte
+
+	switch outputFormat {
+	case outputFormatJSON:
+		formatted, _ = json.MarshalIndent(e, "", "\t") //nolint:errchkjson // errOutput contains only a string field
+	case outputFormatJSONLine:
+		formatted, _ = json.Marshal(e) //nolint:errchkjson // errOutput contains only a string field
+	case outputFormatYAML:
+		formatted, _ = yaml.Marshal(e)
+	default:
 		fmt.Fprintf(os.Stderr, "Error: %s\n", err)
 
 		return
 	}
 
-	// formatOutput cannot fail here: errOutput is a single string field.
-	out, _ := formatOutput(errOutput{Error: err.Error()}, "", outputFormat)
-	fmt.Fprintf(os.Stderr, "%s\n", out)
+	fmt.Fprintf(os.Stderr, "%s\n", formatted)
 }
 
 func hasMachineOutputFlag() bool {
-	return slices.ContainsFunc(os.Args, func(arg string) bool {
-		return arg == outputFormatJSON || arg == outputFormatJSONLine || arg == outputFormatYAML
-	})
+	for _, arg := range os.Args {
+		if arg == outputFormatJSON || arg == outputFormatJSONLine || arg == outputFormatYAML {
+			return true
+		}
+	}
+
+	return false
+}
+
+type tokenAuth struct {
+	token string
+}
+
+// Return value is mapped to request headers.
+func (t tokenAuth) GetRequestMetadata(
+	ctx context.Context,
+	in ...string,
+) (map[string]string, error) {
+	return map[string]string{
+		"authorization": "Bearer " + t.token,
+	}, nil
+}
+
+func (tokenAuth) RequireTransportSecurity() bool {
+	return true
 }
diff --git a/cmd/headscale/cli/utils_socket_test.go b/cmd/headscale/cli/utils_socket_test.go
deleted file mode 100644
index cc9b22ed6..000000000
--- a/cmd/headscale/cli/utils_socket_test.go
+++ /dev/null
@@ -1,72 +0,0 @@
-package cli
-
-import (
-	"context"
-	"net"
-	"path/filepath"
-	"testing"
-	"time"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestDialHeadscaleSocketRetriesUntilPresent proves the CLI socket dialer
-// tolerates a not-yet-created socket (the server-still-starting race) by
-// retrying until it appears, rather than failing immediately like a bare dial.
-func TestDialHeadscaleSocketRetriesUntilPresent(t *testing.T) {
-	sock := filepath.Join(t.TempDir(), "headscale.sock")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 3*time.Second)
-	defer cancel()
-
-	type result struct {
-		conn net.Conn
-		err  error
-	}
-
-	done := make(chan result, 1)
-
-	go func() {
-		conn, err := dialHeadscaleSocket(ctx, sock)
-		done <- result{conn, err}
-	}()
-
-	// Listen only after the dialer has begun, so its backoff must retry the
-	// absent socket and connect once it exists.
-	var lc net.ListenConfig
-
-	ln, err := lc.Listen(ctx, "unix", sock)
-	require.NoError(t, err)
-
-	defer ln.Close()
-
-	go func() {
-		if conn, _ := ln.Accept(); conn != nil {
-			conn.Close()
-		}
-	}()
-
-	res := <-done
-	require.NoError(t, res.err)
-	require.NotNil(t, res.conn)
-
-	res.conn.Close()
-}
-
-// TestDialHeadscaleSocketRespectsDeadline proves the retry is bounded by the
-// context: when the socket never appears, the dialer returns an error around the
-// deadline instead of hanging.
-func TestDialHeadscaleSocketRespectsDeadline(t *testing.T) {
-	sock := filepath.Join(t.TempDir(), "absent.sock")
-
-	ctx, cancel := context.WithTimeout(context.Background(), 200*time.Millisecond)
-	defer cancel()
-
-	start := time.Now()
-
-	conn, err := dialHeadscaleSocket(ctx, sock)
-	require.Error(t, err)
-	assert.Nil(t, conn)
-	assert.Less(t, time.Since(start), 5*time.Second, "should stop near the deadline, not hang")
-}
diff --git a/cmd/headscale/cli/utils_test.go b/cmd/headscale/cli/utils_test.go
deleted file mode 100644
index 845d676c5..000000000
--- a/cmd/headscale/cli/utils_test.go
+++ /dev/null
@@ -1,35 +0,0 @@
-package cli
-
-import "testing"
-
-func TestClientBaseURL(t *testing.T) {
-	tests := []struct {
-		name    string
-		address string
-		want    string
-	}{
-		{
-			name:    "bare host defaults to https",
-			address: "headscale.example.com:50443",
-			want:    "https://headscale.example.com:50443",
-		},
-		{
-			name:    "explicit https scheme is kept",
-			address: "https://headscale.example.com",
-			want:    "https://headscale.example.com",
-		},
-		{
-			name:    "explicit http scheme is kept",
-			address: "http://localhost:8080",
-			want:    "http://localhost:8080",
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			if got := clientBaseURL(tt.address); got != tt.want {
-				t.Errorf("clientBaseURL(%q) = %q, want %q", tt.address, got, tt.want)
-			}
-		})
-	}
-}
diff --git a/cmd/headscale/headscale.go b/cmd/headscale/headscale.go
index 933e78e06..679f082ee 100644
--- a/cmd/headscale/headscale.go
+++ b/cmd/headscale/headscale.go
@@ -11,7 +11,21 @@ import (
 )
 
 func main() {
-	colors := termcolor.SupportLevel(os.Stderr) != termcolor.LevelNone
+	var colors bool
+
+	switch l := termcolor.SupportLevel(os.Stderr); l {
+	case termcolor.Level16M:
+		colors = true
+	case termcolor.Level256:
+		colors = true
+	case termcolor.LevelBasic:
+		colors = true
+	case termcolor.LevelNone:
+		colors = false
+	default:
+		// no color, return text as is.
+		colors = false
+	}
 
 	// Adhere to no-color.org manifesto of allowing users to
 	// turn off color in cli/services
diff --git a/cmd/headscale/headscale_test.go b/cmd/headscale/headscale_test.go
index 08532aee2..01eb09b2d 100644
--- a/cmd/headscale/headscale_test.go
+++ b/cmd/headscale/headscale_test.go
@@ -73,4 +73,5 @@ func TestConfigLoading(t *testing.T) {
 	assert.Equal(t, "HTTP-01", viper.GetString("tls_letsencrypt_challenge_type"))
 	assert.Equal(t, fs.FileMode(0o770), util.GetFileMode("unix_socket_permission"))
 	assert.False(t, viper.GetBool("logtail.enabled"))
+	assert.False(t, viper.GetBool("randomize_client_port"))
 }
diff --git a/cmd/hi/cleanup.go b/cmd/hi/cleanup.go
index d58ab779e..26db49ae9 100644
--- a/cmd/hi/cleanup.go
+++ b/cmd/hi/cleanup.go
@@ -71,8 +71,26 @@ func killTestContainers(ctx context.Context) error {
 	removed := 0
 
 	for _, cont := range containers {
-		if isTestContainerName(cont.Names) {
-			if killAndRemove(ctx, cli, cont) {
+		shouldRemove := false
+
+		for _, name := range cont.Names {
+			if strings.Contains(name, "headscale-test-suite") ||
+				strings.Contains(name, "hs-") ||
+				strings.Contains(name, "ts-") ||
+				strings.Contains(name, "derp-") {
+				shouldRemove = true
+				break
+			}
+		}
+
+		if shouldRemove {
+			// First kill the container if it's running
+			if cont.State == "running" {
+				_ = cli.ContainerKill(ctx, cont.ID, "KILL")
+			}
+
+			// Then remove the container with retry logic
+			if removeContainerWithRetry(ctx, cli, cont.ID) {
 				removed++
 			}
 		}
@@ -111,7 +129,13 @@ func killTestContainersByRunID(ctx context.Context, runID string) error {
 	removed := 0
 
 	for _, cont := range containers {
-		if killAndRemove(ctx, cli, cont) {
+		// Kill the container if it's running
+		if cont.State == "running" {
+			_ = cli.ContainerKill(ctx, cont.ID, "KILL")
+		}
+
+		// Remove the container with retry logic
+		if removeContainerWithRetry(ctx, cli, cont.ID) {
 			removed++
 		}
 	}
@@ -149,8 +173,20 @@ func cleanupStaleTestContainers(ctx context.Context) error {
 
 	for _, cont := range containers {
 		// Only remove containers that look like test containers
-		if isTestContainerName(cont.Names) {
-			if killAndRemove(ctx, cli, cont) {
+		shouldRemove := false
+
+		for _, name := range cont.Names {
+			if strings.Contains(name, "headscale-test-suite") ||
+				strings.Contains(name, "hs-") ||
+				strings.Contains(name, "ts-") ||
+				strings.Contains(name, "derp-") {
+				shouldRemove = true
+				break
+			}
+		}
+
+		if shouldRemove {
+			if removeContainerWithRetry(ctx, cli, cont.ID) {
 				removed++
 			}
 		}
@@ -187,46 +223,6 @@ func removeContainerWithRetry(ctx context.Context, cli *client.Client, container
 	return err == nil
 }
 
-// testContainerNamePrefixes are the name prefixes used by containers that the
-// integration test harness creates (headscale, tailscale, DERP, and k3s).
-var testContainerNamePrefixes = []string{"hs-", "ts-", "derp-", "k3s-"}
-
-// matchesTestContainerPrefix reports whether name belongs to an integration
-// test container, ignoring any leading "/" that Docker prefixes names with.
-func matchesTestContainerPrefix(name string) bool {
-	name = strings.TrimPrefix(name, "/")
-	for _, prefix := range testContainerNamePrefixes {
-		if strings.HasPrefix(name, prefix) {
-			return true
-		}
-	}
-
-	return false
-}
-
-// isTestContainerName reports whether any of the container names belong to an
-// integration test container.
-func isTestContainerName(names []string) bool {
-	for _, name := range names {
-		if strings.Contains(name, "headscale-test-suite") ||
-			matchesTestContainerPrefix(name) {
-			return true
-		}
-	}
-
-	return false
-}
-
-// killAndRemove kills a running container then removes it with retry logic,
-// reporting whether the removal succeeded.
-func killAndRemove(ctx context.Context, cli *client.Client, cont container.Summary) bool {
-	if cont.State == "running" {
-		_ = cli.ContainerKill(ctx, cont.ID, "KILL")
-	}
-
-	return removeContainerWithRetry(ctx, cli, cont.ID)
-}
-
 // pruneDockerNetworks removes unused Docker networks.
 func pruneDockerNetworks(ctx context.Context) error {
 	cli, err := createDockerClient(ctx)
diff --git a/cmd/hi/docker.go b/cmd/hi/docker.go
index 102ee526e..060057a9c 100644
--- a/cmd/hi/docker.go
+++ b/cmd/hi/docker.go
@@ -14,7 +14,6 @@ import (
 	"strings"
 	"time"
 
-	"github.com/cenkalti/backoff/v5"
 	"github.com/docker/docker/api/types/container"
 	"github.com/docker/docker/api/types/image"
 	"github.com/docker/docker/api/types/mount"
@@ -523,9 +522,9 @@ func checkImageAvailableLocally(ctx context.Context, cli *client.Client, imageNa
 	return true, nil
 }
 
-// ensureImageAvailable pulls imageName if missing, using Docker Hub
-// credentials and retrying transient errors.
+// ensureImageAvailable checks if the image is available locally first, then pulls if needed.
 func ensureImageAvailable(ctx context.Context, cli *client.Client, imageName string, verbose bool) error {
+	// First check if image is available locally
 	available, err := checkImageAvailableLocally(ctx, cli, imageName)
 	if err != nil {
 		return fmt.Errorf("checking local image availability: %w", err)
@@ -539,64 +538,34 @@ func ensureImageAvailable(ctx context.Context, cli *client.Client, imageName str
 		return nil
 	}
 
+	// Image not available locally, try to pull it
 	if verbose {
 		log.Printf("Image %s not found locally, pulling...", imageName)
 	}
 
-	registryAuth, err := dockertestutil.RegistryAuth()
+	reader, err := cli.ImagePull(ctx, imageName, image.PullOptions{})
 	if err != nil {
-		return fmt.Errorf("resolving registry auth: %w", err)
+		return fmt.Errorf("pulling image %s: %w", imageName, err)
 	}
+	defer reader.Close()
 
-	_, err = backoff.Retry(
-		ctx,
-		func() (struct{}, error) {
-			reader, pullErr := cli.ImagePull(ctx, imageName, image.PullOptions{RegistryAuth: registryAuth})
-			if pullErr != nil {
-				if isPermanentDockerPullError(pullErr) {
-					return struct{}{}, backoff.Permanent(pullErr)
-				}
+	if verbose {
+		_, err = io.Copy(os.Stdout, reader)
+		if err != nil {
+			return fmt.Errorf("reading pull output: %w", err)
+		}
+	} else {
+		_, err = io.Copy(io.Discard, reader)
+		if err != nil {
+			return fmt.Errorf("reading pull output: %w", err)
+		}
 
-				return struct{}{}, fmt.Errorf("pulling image %s: %w", imageName, pullErr)
-			}
-			defer reader.Close()
-
-			sink := io.Discard
-			if verbose {
-				sink = os.Stdout
-			}
-
-			_, copyErr := io.Copy(sink, reader)
-			if copyErr != nil {
-				return struct{}{}, fmt.Errorf("reading pull output: %w", copyErr)
-			}
-
-			return struct{}{}, nil
-		},
-		backoff.WithBackOff(backoff.NewExponentialBackOff()),
-		backoff.WithMaxElapsedTime(60*time.Second),
-	)
-	if err != nil {
-		return err
-	}
-
-	if !verbose {
 		log.Printf("Image %s pulled successfully", imageName)
 	}
 
 	return nil
 }
 
-func isPermanentDockerPullError(err error) bool {
-	msg := strings.ToLower(err.Error())
-
-	return strings.Contains(msg, "manifest unknown") ||
-		strings.Contains(msg, "manifest not found") ||
-		strings.Contains(msg, "repository does not exist") ||
-		strings.Contains(msg, "name unknown") ||
-		strings.Contains(msg, "no such image")
-}
-
 // listControlFiles displays the headscale test artifacts created in the control logs directory.
 func listControlFiles(logsDir string) {
 	entries, err := os.ReadDir(logsDir)
@@ -735,7 +704,7 @@ func getCurrentTestContainers(containers []container.Summary, testContainerID st
 	for _, cont := range containers {
 		for _, name := range cont.Names {
 			containerName := strings.TrimPrefix(name, "/")
-			if matchesTestContainerPrefix(containerName) {
+			if strings.HasPrefix(containerName, "hs-") || strings.HasPrefix(containerName, "ts-") {
 				// Check if container has matching run ID label
 				if cont.Labels != nil && cont.Labels["hi.run-id"] == runID {
 					testRunContainers = append(testRunContainers, testContainer{
@@ -769,6 +738,17 @@ func extractContainerArtifacts(ctx context.Context, cli *client.Client, containe
 		return fmt.Errorf("extracting logs: %w", err)
 	}
 
+	// Extract tar files for headscale containers only
+	if strings.HasPrefix(containerName, "hs-") {
+		err := extractContainerFiles(ctx, cli, containerID, containerName, logsDir, verbose)
+		if err != nil {
+			if verbose {
+				log.Printf("Warning: failed to extract files from %s: %v", containerName, err)
+			}
+			// Don't fail the whole extraction if files are missing
+		}
+	}
+
 	return nil
 }
 
@@ -816,3 +796,12 @@ func extractContainerLogs(ctx context.Context, cli *client.Client, containerID,
 
 	return nil
 }
+
+// extractContainerFiles extracts database file and directories from headscale containers.
+// Note: The actual file extraction is now handled by the integration tests themselves
+// via SaveProfile, SaveMapResponses, and SaveDatabase functions in hsic.go.
+func extractContainerFiles(ctx context.Context, cli *client.Client, containerID, containerName, logsDir string, verbose bool) error {
+	// Files are now extracted directly by the integration tests
+	// This function is kept for potential future use or other file types
+	return nil
+}
diff --git a/cmd/hi/doctor.go b/cmd/hi/doctor.go
index 7bd42fb90..1791d66de 100644
--- a/cmd/hi/doctor.go
+++ b/cmd/hi/doctor.go
@@ -5,25 +5,8 @@ import (
 	"errors"
 	"fmt"
 	"log"
-	"os"
 	"os/exec"
 	"strings"
-
-	"github.com/juanfont/headscale/integration/dockertestutil"
-	"github.com/juanfont/headscale/integration/k3sic"
-)
-
-const (
-	statusPass = "PASS"
-	statusFail = "FAIL"
-	statusWarn = "WARN"
-
-	nameDockerDaemon  = "Docker Daemon"
-	nameDockerContext = "Docker Context"
-	nameDockerSocket  = "Docker Socket"
-	nameGolangImage   = "Golang Image"
-	nameK3sImage      = "K3s Image"
-	nameGoInstall     = "Go Installation"
 )
 
 var ErrSystemChecksFailed = errors.New("system checks failed")
@@ -36,21 +19,6 @@ type DoctorResult struct {
 	Suggestions []string
 }
 
-// pass builds a passing DoctorResult.
-func pass(name, message string) DoctorResult {
-	return DoctorResult{Name: name, Status: statusPass, Message: message}
-}
-
-// warn builds a warning DoctorResult with optional suggestions.
-func warn(name, message string, suggestions ...string) DoctorResult {
-	return DoctorResult{Name: name, Status: statusWarn, Message: message, Suggestions: suggestions}
-}
-
-// fail builds a failing DoctorResult with optional suggestions.
-func fail(name, message string, suggestions ...string) DoctorResult {
-	return DoctorResult{Name: name, Status: statusFail, Message: message, Suggestions: suggestions}
-}
-
 // runDoctorCheck performs comprehensive pre-flight checks for integration testing.
 func runDoctorCheck(ctx context.Context) error {
 	results := []DoctorResult{}
@@ -63,12 +31,10 @@ func runDoctorCheck(ctx context.Context) error {
 	results = append(results, dockerResult)
 
 	// If Docker is available, run additional checks
-	if dockerResult.Status == statusPass {
+	if dockerResult.Status == "PASS" {
 		results = append(results, checkDockerContext(ctx))
 		results = append(results, checkDockerSocket(ctx))
-		results = append(results, checkDockerHubCredentials())
 		results = append(results, checkGolangImage(ctx))
-		results = append(results, checkK3sImage(ctx))
 	}
 
 	// Check 3: Go installation
@@ -85,7 +51,7 @@ func runDoctorCheck(ctx context.Context) error {
 
 	// Return error if any critical checks failed
 	for _, result := range results {
-		if result.Status == statusFail {
+		if result.Status == "FAIL" {
 			return fmt.Errorf("%w - see details above", ErrSystemChecksFailed)
 		}
 	}
@@ -99,115 +65,140 @@ func runDoctorCheck(ctx context.Context) error {
 func checkDockerBinary() DoctorResult {
 	_, err := exec.LookPath("docker")
 	if err != nil {
-		return fail(
-			"Docker Binary",
-			"Docker binary not found in PATH",
-			"Install Docker: https://docs.docker.com/get-docker/",
-			"For macOS: consider using colima or Docker Desktop",
-			"Ensure docker is in your PATH",
-		)
+		return DoctorResult{
+			Name:    "Docker Binary",
+			Status:  "FAIL",
+			Message: "Docker binary not found in PATH",
+			Suggestions: []string{
+				"Install Docker: https://docs.docker.com/get-docker/",
+				"For macOS: consider using colima or Docker Desktop",
+				"Ensure docker is in your PATH",
+			},
+		}
 	}
 
-	return pass("Docker Binary", "Docker binary found")
+	return DoctorResult{
+		Name:    "Docker Binary",
+		Status:  "PASS",
+		Message: "Docker binary found",
+	}
 }
 
 // checkDockerDaemon verifies Docker daemon is running and accessible.
 func checkDockerDaemon(ctx context.Context) DoctorResult {
 	cli, err := createDockerClient(ctx)
 	if err != nil {
-		return fail(
-			nameDockerDaemon,
-			fmt.Sprintf("Cannot create Docker client: %v", err),
-			"Start Docker daemon/service",
-			"Check Docker Desktop is running (if using Docker Desktop)",
-			"For colima: run 'colima start'",
-			"Verify DOCKER_HOST environment variable if set",
-		)
+		return DoctorResult{
+			Name:    "Docker Daemon",
+			Status:  "FAIL",
+			Message: fmt.Sprintf("Cannot create Docker client: %v", err),
+			Suggestions: []string{
+				"Start Docker daemon/service",
+				"Check Docker Desktop is running (if using Docker Desktop)",
+				"For colima: run 'colima start'",
+				"Verify DOCKER_HOST environment variable if set",
+			},
+		}
 	}
 	defer cli.Close()
 
 	_, err = cli.Ping(ctx)
 	if err != nil {
-		return fail(
-			nameDockerDaemon,
-			fmt.Sprintf("Cannot ping Docker daemon: %v", err),
-			"Ensure Docker daemon is running",
-			"Check Docker socket permissions",
-			"Try: docker info",
-		)
+		return DoctorResult{
+			Name:    "Docker Daemon",
+			Status:  "FAIL",
+			Message: fmt.Sprintf("Cannot ping Docker daemon: %v", err),
+			Suggestions: []string{
+				"Ensure Docker daemon is running",
+				"Check Docker socket permissions",
+				"Try: docker info",
+			},
+		}
 	}
 
-	return pass(nameDockerDaemon, "Docker daemon is running and accessible")
+	return DoctorResult{
+		Name:    "Docker Daemon",
+		Status:  "PASS",
+		Message: "Docker daemon is running and accessible",
+	}
 }
 
 // checkDockerContext verifies Docker context configuration.
 func checkDockerContext(ctx context.Context) DoctorResult {
 	contextInfo, err := getCurrentDockerContext(ctx)
 	if err != nil {
-		return warn(
-			nameDockerContext,
-			"Could not detect Docker context, using default settings",
-			"Check: docker context ls",
-			"Consider setting up a specific context if needed",
-		)
+		return DoctorResult{
+			Name:    "Docker Context",
+			Status:  "WARN",
+			Message: "Could not detect Docker context, using default settings",
+			Suggestions: []string{
+				"Check: docker context ls",
+				"Consider setting up a specific context if needed",
+			},
+		}
 	}
 
 	if contextInfo == nil {
-		return pass(nameDockerContext, "Using default Docker context")
+		return DoctorResult{
+			Name:    "Docker Context",
+			Status:  "PASS",
+			Message: "Using default Docker context",
+		}
 	}
 
-	return pass(nameDockerContext, "Using Docker context: "+contextInfo.Name)
+	return DoctorResult{
+		Name:    "Docker Context",
+		Status:  "PASS",
+		Message: "Using Docker context: " + contextInfo.Name,
+	}
 }
 
 // checkDockerSocket verifies Docker socket accessibility.
 func checkDockerSocket(ctx context.Context) DoctorResult {
 	cli, err := createDockerClient(ctx)
 	if err != nil {
-		return fail(
-			nameDockerSocket,
-			fmt.Sprintf("Cannot access Docker socket: %v", err),
-			"Check Docker socket permissions",
-			"Add user to docker group: sudo usermod -aG docker $USER",
-			"For colima: ensure socket is accessible",
-		)
+		return DoctorResult{
+			Name:    "Docker Socket",
+			Status:  "FAIL",
+			Message: fmt.Sprintf("Cannot access Docker socket: %v", err),
+			Suggestions: []string{
+				"Check Docker socket permissions",
+				"Add user to docker group: sudo usermod -aG docker $USER",
+				"For colima: ensure socket is accessible",
+			},
+		}
 	}
 	defer cli.Close()
 
 	info, err := cli.Info(ctx)
 	if err != nil {
-		return fail(
-			nameDockerSocket,
-			fmt.Sprintf("Cannot get Docker info: %v", err),
-			"Check Docker daemon status",
-			"Verify socket permissions",
-		)
+		return DoctorResult{
+			Name:    "Docker Socket",
+			Status:  "FAIL",
+			Message: fmt.Sprintf("Cannot get Docker info: %v", err),
+			Suggestions: []string{
+				"Check Docker daemon status",
+				"Verify socket permissions",
+			},
+		}
 	}
 
-	return pass(nameDockerSocket, fmt.Sprintf("Docker socket accessible (Server: %s)", info.ServerVersion))
-}
-
-// checkDockerHubCredentials warns when pulls would be anonymous and
-// therefore rate-limited.
-func checkDockerHubCredentials() DoctorResult {
-	_, _, source := dockertestutil.Credentials()
-	if source == dockertestutil.CredentialSourceAnonymous {
-		return warn(
-			"Docker Hub Credentials",
-			"No Docker Hub credentials found — pulls will be rate-limited (100/6h per IP)",
-			"Run: docker login",
-			"Or export DOCKERHUB_USERNAME and DOCKERHUB_TOKEN",
-			"In CI: ensure the docker/login-action step is configured with secrets",
-		)
+	return DoctorResult{
+		Name:    "Docker Socket",
+		Status:  "PASS",
+		Message: fmt.Sprintf("Docker socket accessible (Server: %s)", info.ServerVersion),
 	}
-
-	return pass("Docker Hub Credentials", fmt.Sprintf("Credentials available (source: %s)", source))
 }
 
 // checkGolangImage verifies the golang Docker image is available locally or can be pulled.
 func checkGolangImage(ctx context.Context) DoctorResult {
 	cli, err := createDockerClient(ctx)
 	if err != nil {
-		return fail(nameGolangImage, "Cannot create Docker client for image check")
+		return DoctorResult{
+			Name:    "Golang Image",
+			Status:  "FAIL",
+			Message: "Cannot create Docker client for image check",
+		}
 	}
 	defer cli.Close()
 
@@ -217,94 +208,81 @@ func checkGolangImage(ctx context.Context) DoctorResult {
 	// First check if image is available locally
 	available, err := checkImageAvailableLocally(ctx, cli, imageName)
 	if err != nil {
-		return fail(
-			nameGolangImage,
-			fmt.Sprintf("Cannot check golang image %s: %v", imageName, err),
-			"Check Docker daemon status",
-			"Try: docker images | grep golang",
-		)
+		return DoctorResult{
+			Name:    "Golang Image",
+			Status:  "FAIL",
+			Message: fmt.Sprintf("Cannot check golang image %s: %v", imageName, err),
+			Suggestions: []string{
+				"Check Docker daemon status",
+				"Try: docker images | grep golang",
+			},
+		}
 	}
 
 	if available {
-		return pass(nameGolangImage, fmt.Sprintf("Golang image %s is available locally", imageName))
+		return DoctorResult{
+			Name:    "Golang Image",
+			Status:  "PASS",
+			Message: fmt.Sprintf("Golang image %s is available locally", imageName),
+		}
 	}
 
 	// Image not available locally, try to pull it
 	err = ensureImageAvailable(ctx, cli, imageName, false)
 	if err != nil {
-		return fail(
-			nameGolangImage,
-			fmt.Sprintf("Golang image %s not available locally and cannot pull: %v", imageName, err),
-			"Check internet connectivity",
-			"Verify Docker Hub access",
-			"Try: docker pull "+imageName,
-			"Or run tests offline if image was pulled previously",
-		)
+		return DoctorResult{
+			Name:    "Golang Image",
+			Status:  "FAIL",
+			Message: fmt.Sprintf("Golang image %s not available locally and cannot pull: %v", imageName, err),
+			Suggestions: []string{
+				"Check internet connectivity",
+				"Verify Docker Hub access",
+				"Try: docker pull " + imageName,
+				"Or run tests offline if image was pulled previously",
+			},
+		}
 	}
 
-	return pass(nameGolangImage, fmt.Sprintf("Golang image %s is now available", imageName))
-}
-
-// checkK3sImage verifies the ghcr k3s image used by TestK8sOperator is available
-// locally or can be pulled. The image is pinned (see [k3sic.K3sImage]).
-func checkK3sImage(ctx context.Context) DoctorResult {
-	cli, err := createDockerClient(ctx)
-	if err != nil {
-		return fail(nameK3sImage, "Cannot create Docker client for image check")
+	return DoctorResult{
+		Name:    "Golang Image",
+		Status:  "PASS",
+		Message: fmt.Sprintf("Golang image %s is now available", imageName),
 	}
-	defer cli.Close()
-
-	imageName := k3sic.K3sImage
-
-	available, err := checkImageAvailableLocally(ctx, cli, imageName)
-	if err != nil {
-		return fail(
-			nameK3sImage,
-			fmt.Sprintf("Cannot check k3s image %s: %v", imageName, err),
-			"Check Docker daemon status",
-			"Try: docker images | grep k3s",
-		)
-	}
-
-	if available {
-		return pass(nameK3sImage, fmt.Sprintf("K3s image %s is available locally", imageName))
-	}
-
-	err = ensureImageAvailable(ctx, cli, imageName, false)
-	if err != nil {
-		return warn(
-			nameK3sImage,
-			fmt.Sprintf("K3s image %s not available locally and could not pull: %v", imageName, err),
-			"Only TestK8sOperator needs this image; other tests are unaffected",
-			"Try: docker pull "+imageName,
-		)
-	}
-
-	return pass(nameK3sImage, fmt.Sprintf("K3s image %s is now available", imageName))
 }
 
 // checkGoInstallation verifies Go is installed and working.
 func checkGoInstallation(ctx context.Context) DoctorResult {
 	_, err := exec.LookPath("go")
 	if err != nil {
-		return fail(
-			nameGoInstall,
-			"Go binary not found in PATH",
-			"Install Go: https://golang.org/dl/",
-			"Ensure go is in your PATH",
-		)
+		return DoctorResult{
+			Name:    "Go Installation",
+			Status:  "FAIL",
+			Message: "Go binary not found in PATH",
+			Suggestions: []string{
+				"Install Go: https://golang.org/dl/",
+				"Ensure go is in your PATH",
+			},
+		}
 	}
 
 	cmd := exec.CommandContext(ctx, "go", "version")
 
 	output, err := cmd.Output()
 	if err != nil {
-		return fail(nameGoInstall, fmt.Sprintf("Cannot get Go version: %v", err))
+		return DoctorResult{
+			Name:    "Go Installation",
+			Status:  "FAIL",
+			Message: fmt.Sprintf("Cannot get Go version: %v", err),
+		}
 	}
 
 	version := strings.TrimSpace(string(output))
 
-	return pass(nameGoInstall, version)
+	return DoctorResult{
+		Name:    "Go Installation",
+		Status:  "PASS",
+		Message: version,
+	}
 }
 
 // checkGitRepository verifies we're in a git repository.
@@ -313,19 +291,26 @@ func checkGitRepository(ctx context.Context) DoctorResult {
 
 	err := cmd.Run()
 	if err != nil {
-		return fail(
-			"Git Repository",
-			"Not in a Git repository",
-			"Run from within the headscale git repository",
-			"Clone the repository: git clone https://github.com/juanfont/headscale.git",
-		)
+		return DoctorResult{
+			Name:    "Git Repository",
+			Status:  "FAIL",
+			Message: "Not in a Git repository",
+			Suggestions: []string{
+				"Run from within the headscale git repository",
+				"Clone the repository: git clone https://github.com/juanfont/headscale.git",
+			},
+		}
 	}
 
-	return pass("Git Repository", "Running in Git repository")
+	return DoctorResult{
+		Name:    "Git Repository",
+		Status:  "PASS",
+		Message: "Running in Git repository",
+	}
 }
 
 // checkRequiredFiles verifies required files exist.
-func checkRequiredFiles(_ context.Context) DoctorResult {
+func checkRequiredFiles(ctx context.Context) DoctorResult {
 	requiredFiles := []string{
 		"go.mod",
 		"integration/",
@@ -335,23 +320,32 @@ func checkRequiredFiles(_ context.Context) DoctorResult {
 	var missingFiles []string
 
 	for _, file := range requiredFiles {
-		_, err := os.Stat(file)
+		cmd := exec.CommandContext(ctx, "test", "-e", file)
+
+		err := cmd.Run()
 		if err != nil {
 			missingFiles = append(missingFiles, file)
 		}
 	}
 
 	if len(missingFiles) > 0 {
-		return fail(
-			"Required Files",
-			"Missing required files: "+strings.Join(missingFiles, ", "),
-			"Ensure you're in the headscale project root directory",
-			"Check that integration/ directory exists",
-			"Verify this is a complete headscale repository",
-		)
+		return DoctorResult{
+			Name:    "Required Files",
+			Status:  "FAIL",
+			Message: "Missing required files: " + strings.Join(missingFiles, ", "),
+			Suggestions: []string{
+				"Ensure you're in the headscale project root directory",
+				"Check that integration/ directory exists",
+				"Verify this is a complete headscale repository",
+			},
+		}
 	}
 
-	return pass("Required Files", "All required files found")
+	return DoctorResult{
+		Name:    "Required Files",
+		Status:  "PASS",
+		Message: "All required files found",
+	}
 }
 
 // displayDoctorResults shows the results in a formatted way.
@@ -363,11 +357,11 @@ func displayDoctorResults(results []DoctorResult) {
 		var icon string
 
 		switch result.Status {
-		case statusPass:
+		case "PASS":
 			icon = "✅"
-		case statusWarn:
+		case "WARN":
 			icon = "⚠️"
-		case statusFail:
+		case "FAIL":
 			icon = "❌"
 		default:
 			icon = "❓"
diff --git a/cmd/hi/listversions.go b/cmd/hi/listversions.go
deleted file mode 100644
index c2162ad64..000000000
--- a/cmd/hi/listversions.go
+++ /dev/null
@@ -1,89 +0,0 @@
-package main
-
-import (
-	"encoding/json"
-	"errors"
-	"fmt"
-	"strings"
-
-	"github.com/creachadair/command"
-	"github.com/juanfont/headscale/hscontrol/capver"
-)
-
-var (
-	errUnknownSet    = errors.New("unknown --set value (want must|all)")
-	errUnknownFormat = errors.New("unknown --format value (want space|newline|json)")
-)
-
-// ListVersionsConfig holds flags for the list-versions subcommand.
-type ListVersionsConfig struct {
-	Set     string `flag:"set,default=must,Version set: must|all"`
-	Exclude string `flag:"exclude,Comma-separated versions to exclude (e.g. head,unstable)"`
-	Format  string `flag:"format,default=space,Output format: space|newline|json"`
-}
-
-var listVersionsConfig ListVersionsConfig
-
-// listVersions prints the Tailscale versions used by integration tests
-// in a format CI can shell out to. Mirrors integration/scenario.go
-// AllVersions and MustTestVersions: "head" and "unstable" are bare
-// tags, releases get a "v" prefix so each entry can be appended to
-// "ghcr.io/tailscale/tailscale:" directly.
-func listVersions(env *command.Env) error {
-	release := capver.TailscaleLatestMajorMinor(capver.SupportedMajorMinorVersions, true)
-	all := append([]string{"head", "unstable"}, release...)
-	must := append(append([]string{}, all[0:4]...), all[len(all)-2:]...)
-
-	var versions []string
-
-	switch listVersionsConfig.Set {
-	case "must":
-		versions = must
-	case "all":
-		versions = all
-	default:
-		return fmt.Errorf("%w: %q", errUnknownSet, listVersionsConfig.Set)
-	}
-
-	excluded := make(map[string]bool)
-
-	if listVersionsConfig.Exclude != "" {
-		for v := range strings.SplitSeq(listVersionsConfig.Exclude, ",") {
-			excluded[strings.TrimSpace(v)] = true
-		}
-	}
-
-	out := make([]string, 0, len(versions))
-
-	for _, v := range versions {
-		if excluded[v] {
-			continue
-		}
-
-		if v != "head" && v != "unstable" {
-			v = "v" + v
-		}
-
-		out = append(out, v)
-	}
-
-	switch listVersionsConfig.Format {
-	case "space":
-		fmt.Println(strings.Join(out, " "))
-	case "newline":
-		for _, v := range out {
-			fmt.Println(v)
-		}
-	case "json":
-		b, err := json.Marshal(out)
-		if err != nil {
-			return err
-		}
-
-		fmt.Println(string(b))
-	default:
-		return fmt.Errorf("%w: %q", errUnknownFormat, listVersionsConfig.Format)
-	}
-
-	return nil
-}
diff --git a/cmd/hi/main.go b/cmd/hi/main.go
index 903d77fa1..2bbfefe04 100644
--- a/cmd/hi/main.go
+++ b/cmd/hi/main.go
@@ -29,13 +29,6 @@ func main() {
 					return runDoctorCheck(env.Context())
 				},
 			},
-			{
-				Name:     "list-versions",
-				Help:     "Print Tailscale versions used by integration tests",
-				Usage:    "list-versions [flags]",
-				SetFlags: command.Flags(flax.MustBind, &listVersionsConfig),
-				Run:      listVersions,
-			},
 			{
 				Name: "clean",
 				Help: "Clean Docker resources",
@@ -86,17 +79,20 @@ func main() {
 }
 
 func cleanAll(ctx context.Context) error {
-	for _, step := range []func(context.Context) error{
-		killTestContainers,
-		pruneDockerNetworks,
-		cleanOldImages,
-		cleanCacheVolume,
-	} {
-		err := step(ctx)
-		if err != nil {
-			return err
-		}
+	err := killTestContainers(ctx)
+	if err != nil {
+		return err
 	}
 
-	return nil
+	err = pruneDockerNetworks(ctx)
+	if err != nil {
+		return err
+	}
+
+	err = cleanOldImages(ctx)
+	if err != nil {
+		return err
+	}
+
+	return cleanCacheVolume(ctx)
 }
diff --git a/cmd/hi/run.go b/cmd/hi/run.go
index 35214e3cf..c297c6d83 100644
--- a/cmd/hi/run.go
+++ b/cmd/hi/run.go
@@ -6,7 +6,6 @@ import (
 	"log"
 	"os"
 	"path/filepath"
-	"strings"
 	"time"
 
 	"github.com/creachadair/command"
@@ -67,21 +66,64 @@ func runIntegrationTest(env *command.Env) error {
 
 // detectGoVersion reads the Go version from go.mod file.
 func detectGoVersion() string {
-	content, err := os.ReadFile("go.mod")
-	if err != nil {
-		content, err = os.ReadFile(filepath.Join("..", "..", "go.mod"))
-		if err != nil {
-			return "1.26.1"
-		}
+	goModPath := filepath.Join("..", "..", "go.mod")
+
+	if _, err := os.Stat("go.mod"); err == nil { //nolint:noinlineerr
+		goModPath = "go.mod"
+	} else if _, err := os.Stat("../../go.mod"); err == nil { //nolint:noinlineerr
+		goModPath = "../../go.mod"
 	}
 
-	for line := range strings.Lines(string(content)) {
-		if rest, ok := strings.CutPrefix(line, "go "); ok {
-			if f := strings.Fields(rest); len(f) > 0 {
-				return f[0]
+	content, err := os.ReadFile(goModPath)
+	if err != nil {
+		return "1.26.1"
+	}
+
+	lines := splitLines(string(content))
+	for _, line := range lines {
+		if len(line) > 3 && line[:3] == "go " {
+			version := line[3:]
+			if idx := indexOf(version, " "); idx != -1 {
+				version = version[:idx]
 			}
+
+			return version
 		}
 	}
 
 	return "1.26.1"
 }
+
+// splitLines splits a string into lines without using strings.Split.
+func splitLines(s string) []string {
+	var (
+		lines   []string
+		current string
+	)
+
+	for _, char := range s {
+		if char == '\n' {
+			lines = append(lines, current)
+			current = ""
+		} else {
+			current += string(char)
+		}
+	}
+
+	if current != "" {
+		lines = append(lines, current)
+	}
+
+	return lines
+}
+
+// indexOf finds the first occurrence of substr in s.
+func indexOf(s, substr string) int {
+	for i := 0; i <= len(s)-len(substr); i++ {
+		if s[i:i+len(substr)] == substr {
+			return i
+		}
+	}
+
+	return -1
+}
diff --git a/cmd/hi/stats.go b/cmd/hi/stats.go
index f56043d96..8ab8b7b3c 100644
--- a/cmd/hi/stats.go
+++ b/cmd/hi/stats.go
@@ -1,13 +1,12 @@
 package main
 
 import (
-	"cmp"
 	"context"
 	"encoding/json"
 	"errors"
 	"fmt"
 	"log"
-	"slices"
+	"sort"
 	"strings"
 	"sync"
 	"time"
@@ -161,7 +160,7 @@ func (sc *StatsCollector) monitorDockerEvents(ctx context.Context, runID string,
 					continue
 				}
 
-				// Convert to [types.Container] format for consistency
+				// Convert to types.Container format for consistency
 				cont := types.Container{ //nolint:staticcheck // SA1019: use container.Summary
 					ID:     containerInfo.ID,
 					Names:  []string{containerInfo.Name},
@@ -257,7 +256,7 @@ func (sc *StatsCollector) collectStatsForContainer(ctx context.Context, containe
 
 			err := decoder.Decode(&stats)
 			if err != nil {
-				// [io.EOF] is expected when container stops or stream ends
+				// EOF is expected when container stops or stream ends
 				if err.Error() != "EOF" && verbose {
 					log.Printf("Failed to decode stats for container %s: %v", containerID[:12], err)
 				}
@@ -313,7 +312,7 @@ func calculateCPUPercent(prevStats, stats *container.Stats) float64 { //nolint:s
 		// Calculate CPU percentage: (container CPU delta / system CPU delta) * number of CPUs * 100
 		numCPUs := float64(len(stats.CPUStats.CPUUsage.PercpuUsage))
 		if numCPUs == 0 {
-			// Fallback: if [PercpuUsage] is not available, assume 1 CPU
+			// Fallback: if PercpuUsage is not available, assume 1 CPU
 			numCPUs = 1.0
 		}
 
@@ -375,24 +374,24 @@ func (sc *StatsCollector) GetSummary() []ContainerStatsSummary {
 			SampleCount:   len(stats),
 		}
 
-		extract := func(get func(StatsSample) float64) []float64 {
-			values := make([]float64, len(stats))
-			for i, sample := range stats {
-				values[i] = get(sample)
-			}
+		// Calculate CPU stats
+		cpuValues := make([]float64, len(stats))
+		memoryValues := make([]float64, len(stats))
 
-			return values
+		for i, sample := range stats {
+			cpuValues[i] = sample.CPUUsage
+			memoryValues[i] = sample.MemoryMB
 		}
 
-		summary.CPU = calculateStatsSummary(extract(func(s StatsSample) float64 { return s.CPUUsage }))
-		summary.Memory = calculateStatsSummary(extract(func(s StatsSample) float64 { return s.MemoryMB }))
+		summary.CPU = calculateStatsSummary(cpuValues)
+		summary.Memory = calculateStatsSummary(memoryValues)
 
 		summaries = append(summaries, summary)
 	}
 
 	// Sort by container name for consistent output
-	slices.SortFunc(summaries, func(a, b ContainerStatsSummary) int {
-		return cmp.Compare(a.ContainerName, b.ContainerName)
+	sort.Slice(summaries, func(i, j int) bool {
+		return summaries[i].ContainerName < summaries[j].ContainerName
 	})
 
 	return summaries
@@ -409,8 +408,14 @@ func calculateStatsSummary(values []float64) StatsSummary {
 	sum := 0.0
 
 	for _, value := range values {
-		minVal = min(minVal, value)
-		maxVal = max(maxVal, value)
+		if value < minVal {
+			minVal = value
+		}
+
+		if value > maxVal {
+			maxVal = value
+		}
+
 		sum += value
 	}
 
diff --git a/cmd/vendorhash/main.go b/cmd/vendorhash/main.go
index 2a385c125..ca6e35fce 100644
--- a/cmd/vendorhash/main.go
+++ b/cmd/vendorhash/main.go
@@ -12,7 +12,7 @@
 //	vendorhash check   exit non-zero if flakehashes.json is stale
 //	vendorhash update  recompute and rewrite flakehashes.json
 //
-// The JSON schema and [goModFingerprint] algorithm mirror upstream
+// The JSON schema and goModFingerprint algorithm mirror upstream
 // tailscale's tool/updateflakes so a future shared library extraction
 // is straightforward.
 package main
@@ -82,8 +82,8 @@ func usage() {
 	fmt.Fprintln(os.Stderr, "usage: vendorhash <check|update>")
 }
 
-// errStale signals to [main] that the check found a mismatch; it has
-// already printed a remediation message, so [main] should exit 1
+// errStale signals to main that the check found a mismatch; it has
+// already printed a remediation message, so main should exit 1
 // silently.
 var errStale = errors.New("vendor hash stale")
 
diff --git a/config-example.yaml b/config-example.yaml
index 09f0356b8..6cd529c5a 100644
--- a/config-example.yaml
+++ b/config-example.yaml
@@ -23,12 +23,21 @@ listen_addr: 127.0.0.1:8080
 # Use an empty value to disable the metrics listener.
 metrics_listen_addr: 127.0.0.1:9090
 
-# CIDR(s) of reverse proxies (e.g. 127.0.0.1/32) whose
-# True-Client-IP, X-Real-IP and X-Forwarded-For headers should
-# be honoured. Empty (default) ignores those headers; setting
-# this without a proxy in front lets clients spoof their logged
-# source IP.
-trusted_proxies: []
+# Address to listen for gRPC.
+# gRPC is used for controlling a headscale server
+# remotely with the CLI
+# Note: Remote access _only_ works if you have
+# valid certificates.
+#
+# For production:
+# grpc_listen_addr: 0.0.0.0:50443
+grpc_listen_addr: 127.0.0.1:50443
+
+# Allow the gRPC admin interface to run in INSECURE
+# mode. This is not recommended as the traffic will
+# be unencrypted. Only enable if you know what you
+# are doing.
+grpc_allow_insecure: false
 
 # The Noise section includes specific configuration for the
 # TS2021 Noise protocol
@@ -71,7 +80,8 @@ prefixes:
 # connection cannot be established.
 # https://tailscale.com/blog/how-tailscale-works/#encrypted-tcp-relays-derp
 #
-# Headscale needs a list of DERP servers that can be presented to the clients.
+# headscale needs a list of DERP servers that can be presented
+# to the clients.
 derp:
   server:
     # If enabled, runs the embedded DERP server and merges it into the rest of the DERP config
@@ -116,9 +126,9 @@ derp:
 
   # Locally available DERP map files encoded in YAML
   #
-  # This option is mostly interesting for people hosting their own DERP servers:
+  # This option is mostly interesting for people hosting
+  # their own DERP servers:
   # https://tailscale.com/docs/reference/derp-servers/custom-derp-servers
-  # https://headscale.net/stable/ref/derp/
   #
   # paths:
   #   - /etc/headscale/derp-example.yaml
@@ -230,12 +240,12 @@ database:
   #   ssl: false
 
 ### TLS configuration
-# See: https://headscale.net/stable/ref/tls/
-
-## Let's Encrypt / ACME
-# Headscale supports automatically requesting and setting up
+#
+## Let's encrypt / ACME
+#
+# headscale supports automatically requesting and setting up
 # TLS for a domain with Let's Encrypt.
-
+#
 # URL to ACME directory
 acme_url: https://acme-v02.api.letsencrypt.org/directory
 
@@ -245,13 +255,15 @@ acme_email: ""
 # Domain name to request a TLS certificate for:
 tls_letsencrypt_hostname: ""
 
-# Path to store certificates and metadata needed by letsencrypt
+# Path to store certificates and metadata needed by
+# letsencrypt
+# For production:
 tls_letsencrypt_cache_dir: /var/lib/headscale/cache
 
 # Type of ACME challenge to use, currently supported types:
 # HTTP-01 or TLS-ALPN-01
+# See: docs/ref/tls.md for more information
 tls_letsencrypt_challenge_type: HTTP-01
-
 # When HTTP-01 challenge is chosen, letsencrypt must set up a
 # verification endpoint, and it will be listening on:
 # :http = port 80
@@ -277,7 +289,6 @@ policy:
   # The mode can be "file" or "database" that defines
   # where the policies are stored and read from.
   mode: file
-
   # If the mode is set to "file", the path to a HuJSON file containing policies.
   path: ""
 
@@ -286,6 +297,7 @@ policy:
 # headscale supports Tailscale's DNS configuration and MagicDNS.
 # Please have a look to their docs to better understand the concepts:
 #
+# - https://tailscale.com/docs/features/access-control/acls
 # - https://tailscale.com/docs/features/magicdns
 # - https://tailscale.com/blog/2021-09-private-dns-with-magicdns
 #
@@ -302,7 +314,7 @@ policy:
 # If you want stop Headscale from managing the DNS configuration
 # all the fields under `dns` should be set to empty values.
 dns:
-  # Whether to use MagicDNS
+  # Whether to use [MagicDNS](https://tailscale.com/docs/features/magicdns).
   magic_dns: true
 
   # Defines the base domain to create the hostnames for MagicDNS.
@@ -343,7 +355,7 @@ dns:
 
   # Extra DNS records
   # so far only A and AAAA records are supported (on the tailscale side)
-  # See: https://headscale.net/stable/ref/dns/
+  # See: docs/ref/dns.md
   extra_records: []
   #   - name: "grafana.myvpn.example.com"
   #     type: "A"
@@ -362,7 +374,6 @@ unix_socket: /var/run/headscale/headscale.sock
 unix_socket_permission: "0770"
 
 # OpenID Connect
-# https://headscale.net/stable/ref/oidc/
 # oidc:
 #   # Block startup until the identity provider is available and healthy.
 #   only_start_if_oidc_is_available: true
@@ -441,25 +452,19 @@ logtail:
   # disabled by default. Enabling this will make your clients send logs to Tailscale Inc.
   enabled: false
 
+# Enabling this option makes devices prefer a random port for WireGuard traffic over the
+# default static port 41641. This option is intended as a workaround for some buggy
+# firewall devices. See https://tailscale.com/docs/integrations/firewalls for more information.
+randomize_client_port: false
+
 # Taildrop configuration
-# Taildrop is the file sharing feature of Tailscale, allowing nodes to
-# send files to each other.
+# Taildrop is the file sharing feature of Tailscale, allowing nodes to send files to each other.
 # https://tailscale.com/docs/features/taildrop
 taildrop:
-  # Enable or disable Taildrop tailnet-wide. When disabled, headscale
-  # withholds `https://tailscale.com/cap/file-sharing` from every
-  # node's CapMap.
+  # Enable or disable Taildrop for all nodes.
+  # When enabled, nodes can send files to other nodes owned by the same user.
+  # Tagged devices and cross-user transfers are not permitted by Tailscale clients.
   enabled: true
-
-# Default node auto-update behaviour. When enabled, every node's
-# CapMap carries `default-auto-update: [true]` so clients that have
-# not made a local opt-in / opt-out choice run auto-updates by
-# default. Setting it back to false flips the default for future
-# clients; clients that already stored the value locally keep their
-# choice.
-auto_update:
-  enabled: false
-
 # Advanced performance tuning parameters.
 # The defaults are carefully chosen and should rarely need adjustment.
 # Only modify these if you have identified a specific performance issue.
diff --git a/docs/about/faq.md b/docs/about/faq.md
index 25cdb1123..09792653d 100644
--- a/docs/about/faq.md
+++ b/docs/about/faq.md
@@ -152,15 +152,15 @@ See also <https://tailscale.com/docs/concepts/device-visibility>.
 Headscale checks if the policy is valid during startup and refuses to start if it detects an error. The error message
 indicates which part of the policy is invalid. Follow these steps to fix your policy:
 
-- Dump the policy to a file: `headscale policy get --bypass-server-and-access-database-directly > policy.json`
+- Dump the policy to a file: `headscale policy get --bypass-grpc-and-access-database-directly > policy.json`
 - Edit and fixup `policy.json`. Use the command `headscale policy check --file policy.json` to validate the policy.
-- Load the modified policy: `headscale policy set --bypass-server-and-access-database-directly --file policy.json`
+- Load the modified policy: `headscale policy set --bypass-grpc-and-access-database-directly --file policy.json`
 - Start Headscale as usual.
 
 !!! warning "Full server configuration required"
 
     The above commands to get/set the policy require a complete server configuration file including database settings. A
-    minimal config to [control Headscale via remote CLI](../ref/api.md#remote-control) is not sufficient. You may use
+    minimal config to [control Headscale via remote CLI](../ref/api.md#grpc) is not sufficient. You may use
     `headscale -c /path/to/config.yaml` to specify the path to an alternative configuration file.
 
 ## How can I migrate back to the recommended IP prefixes?
diff --git a/docs/about/features.md b/docs/about/features.md
index e92327c8c..675c0ea04 100644
--- a/docs/about/features.md
+++ b/docs/about/features.md
@@ -13,9 +13,7 @@ provides on overview of Headscale's feature and compatibility with the Tailscale
     - [x] [Global and restricted nameservers (split DNS)](https://tailscale.com/docs/reference/dns-in-tailscale#nameservers)
     - [x] [search domains](https://tailscale.com/docs/reference/dns-in-tailscale#search-domains)
     - [x] [Extra DNS records (Headscale only)](../ref/dns.md#setting-extra-dns-records)
-- [x] File sharing
-    - [x] [Taildrive](https://tailscale.com/docs/features/taildrive)
-    - [x] [Taildrop](https://tailscale.com/docs/features/taildrop)
+- [x] [Taildrop](https://tailscale.com/docs/features/taildrop)
 - [x] [Tags](../ref/tags.md)
 - [x] [Routes](../ref/routes.md)
     - [x] [Subnet routers](../ref/routes.md#subnet-router)
@@ -33,9 +31,6 @@ provides on overview of Headscale's feature and compatibility with the Tailscale
       routers](../ref/routes.md#automatically-approve-routes-of-a-subnet-router) and [exit
       nodes](../ref/routes.md#automatically-approve-an-exit-node-with-auto-approvers)
     - [x] [Tailscale SSH](https://tailscale.com/docs/features/tailscale-ssh)
-    - [x] [Node attributes](../ref/policy.md#node-attributes)
-    - [x] [Tests](https://tailscale.com/docs/reference/syntax/policy-file#tests) and
-      [sshTests](https://tailscale.com/docs/reference/syntax/policy-file#ssh-tests)
 - [x] [Node registration using Single-Sign-On (OpenID Connect)](../ref/oidc.md) ([GitHub label "OIDC"](https://github.com/juanfont/headscale/labels/OIDC))
     - [x] Basic registration
     - [x] Update user profile from identity provider
diff --git a/docs/ref/api.md b/docs/ref/api.md
index 8f492dfd3..4337da137 100644
--- a/docs/ref/api.md
+++ b/docs/ref/api.md
@@ -1,10 +1,10 @@
 # API
 
-Headscale provides a [HTTP REST API](#rest-api) which may be used to integrate a [web
-interface](integration/web-ui.md), [remote control Headscale](#remote-control) or provide a base for custom
+Headscale provides a [HTTP REST API](#rest-api) and a [gRPC interface](#grpc) which may be used to integrate a [web
+interface](integration/web-ui.md), [remote control Headscale](#setup-remote-control) or provide a base for custom
 integration and tooling.
 
-The API requires a valid API key before use. To create an API key, log into your Headscale server and generate
+Both interfaces require a valid API key before use. To create an API key, log into your Headscale server and generate
 one with the default expiration of 90 days:
 
 ```shell
@@ -29,12 +29,12 @@ headscale apikeys expire --prefix <PREFIX>
 ## REST API
 
 - API endpoint: `/api/v1`, e.g. `https://headscale.example.com/api/v1`
-- Documentation: `/api/v1/docs`, e.g. `https://headscale.example.com/api/v1/docs`
+- Documentation: `/swagger`, e.g. `https://headscale.example.com/swagger`
 - Headscale Version: `/version`, e.g. `https://headscale.example.com/version`
 - Authenticate using HTTP Bearer authentication by sending the [API key](#api) with the HTTP `Authorization: Bearer <API_KEY>` header.
 
 Start by [creating an API key](#api) and test it with the examples below. Read the API documentation provided by your
-Headscale server at `/api/v1/docs` for details.
+Headscale server at `/swagger` for details.
 
 === "Get details for all users"
 
@@ -54,18 +54,20 @@ Headscale server at `/api/v1/docs` for details.
 
     ```console
     curl -H "Authorization: Bearer <API_KEY>" \
-        --json '{"user": "<USER>", "authId": "<AUTH_ID>"}' \
+        --json '{"user": "<USER>", "authId": "AUTH_ID>"}' \
         https://headscale.example.com/api/v1/auth/register
     ```
 
-## Remote control
+## gRPC
 
-The `headscale` binary can control a Headscale instance from a remote machine over the HTTP API.
+The gRPC interface can be used to control a Headscale instance from a remote machine with the `headscale` binary.
 
 ### Prerequisite
 
 - A workstation to run `headscale` (any supported platform, e.g. Linux).
-- The Headscale server reachable over HTTP(S).
+- A Headscale server with gRPC enabled.
+- Connections to the gRPC port (default: `50443`) are allowed.
+- Remote access requires an encrypted connection via TLS.
 - An [API key](#api) to authenticate with the Headscale server.
 
 ### Setup remote control
@@ -86,20 +88,19 @@ The `headscale` binary can control a Headscale instance from a remote machine ov
 
         ```yaml title="config.yaml"
         cli:
-            address: <HEADSCALE_URL>
+            address: <HEADSCALE_ADDRESS>:<PORT>
             api_key: <API_KEY>
         ```
 
     === "Environment variables"
 
         ```shell
-        export HEADSCALE_CLI_ADDRESS="<HEADSCALE_URL>"
+        export HEADSCALE_CLI_ADDRESS="<HEADSCALE_ADDRESS>:<PORT>"
         export HEADSCALE_CLI_API_KEY="<API_KEY>"
         ```
 
-    This instructs the `headscale` binary to connect to a remote instance at `<HEADSCALE_URL>` (e.g.
-    `https://headscale.example.com`), instead of connecting to the local instance. A bare host without a scheme is
-    assumed to be `https`.
+    This instructs the `headscale` binary to connect to a remote instance at `<HEADSCALE_ADDRESS>:<PORT>`, instead of
+    connecting to the local instance.
 
 1. Test the connection by listing all nodes:
 
@@ -112,12 +113,15 @@ The `headscale` binary can control a Headscale instance from a remote machine ov
 
 ### Behind a proxy
 
-The remote CLI uses the same HTTP API as everything else, so it works through the reverse proxy already in front of
-Headscale with no extra setup.
+It's possible to run the gRPC remote endpoint behind a reverse proxy, like Nginx, and have it run on the _same_ port as Headscale.
+
+While this is _not a supported_ feature, an example on how this can be set up on
+[NixOS is shown here](https://github.com/kradalby/dotfiles/blob/4489cdbb19cddfbfae82cd70448a38fde5a76711/machines/headscale.oracldn/headscale.nix#L61-L91).
 
 ### Troubleshooting
 
 - Make sure you have the _same_ Headscale version on your server and workstation.
+- Ensure that connections to the gRPC port are allowed.
 - Verify that your TLS certificate is valid and trusted.
 - If you don't have access to a trusted certificate (e.g. from Let's Encrypt), either:
     - Add your self-signed certificate to the trust store of your OS _or_
diff --git a/docs/ref/integration/reverse-proxy.md b/docs/ref/integration/reverse-proxy.md
index 2729786a5..3586171fd 100644
--- a/docs/ref/integration/reverse-proxy.md
+++ b/docs/ref/integration/reverse-proxy.md
@@ -1,183 +1,90 @@
-# Running Headscale behind a reverse proxy
+# Running headscale behind a reverse proxy
 
 !!! warning "Community documentation"
 
-    This page is not actively maintained by the Headscale authors and is
-    written by community members. It is _not_ verified by Headscale developers.
+    This page is not actively maintained by the headscale authors and is
+    written by community members. It is _not_ verified by headscale developers.
 
     **It might be outdated and it might miss necessary steps**.
 
-Running Headscale behind a reverse proxy is useful when running multiple applications on the same server, and you want
-to reuse the same external IP and port - usually tcp/443 for HTTPS.
+Running headscale behind a reverse proxy is useful when running multiple applications on the same server, and you want to reuse the same external IP and port - usually tcp/443 for HTTPS.
 
-Please see [limitations](#limitations) for known issues and limitations.
+### WebSockets
 
-## Configuration
+The reverse proxy MUST be configured to support WebSockets to communicate with Tailscale clients.
 
-The configuration depends on the set of Headscale features you intend to use. Please have a look at the
-[requirements](../../setup/requirements.md) and especially the [ports in use](../../setup/requirements.md#ports-in-use)
-section to learn what a Tailscale clients expects.
-
-The configuration examples in this documentation are basic and cover only HTTP and HTTPS traffic. Other features such as
-STUN for Headscale's [embedded DERP server](../derp.md) are expected to be exposed directly or to be only available on
-localhost.
-
-### WebSocket
-
-Tailscale clients are using a custom protocol (Tailscale Control Protocol) to communicate with a control server such as
-Headscale. The reverse proxy **must** be configured to support WebSockets in order to communicate with Tailscale clients
-and it needs to handle two peculiarities of the Tailscale Control Protocol:
-
-- The POST method is used to upgrade the WebSocket connection.
-- The value for the `Upgrade` header is `tailscale-control-protocol`.
-
-### TLS
-
-Headscale can be configured not to use TLS, leaving it to the reverse proxy to handle. Add the following configuration
-values to your Headscale [configuration file](../configuration.md):
-
-```yaml title="config.yaml" hl_lines="1"
-server_url: https://<SERVER_NAME>
-tls_cert_path: ""
-tls_key_path: ""
-```
-
-Headscale logs `WRN listening without TLS but ServerURL does not start with http://` during startup. This is expected
-and indicates that the reverse proxy is in charge of terminating TLS.
-
-### Trusted proxies
-
-Headscale ignores `True-Client-IP`, `X-Real-IP` and `X-Forwarded-For` headers unless the request's TCP peer matches the
-`trusted_proxies` configuration option. Set this to the CIDR(s) your reverse proxy connects from so the real client IP
-appears in access logs.
-
-```yaml title="config.yaml"
-trusted_proxies:
-  - 127.0.0.1/32
-  - ::1/128
-```
-
-The reverse proxy is responsible to replace any client-supplied `True-Client-IP`, `X-Real-IP`, `X-Forwarded-For` headers
-on inbound requests with sanitized values. Headscale picks the first valid IP address supplied by headers in this order:
-
-- `True-Client-IP`
-- `X-Real-IP`
-- `X-Forwarded-For`
-
-## Limitations
-
-- A reverse proxy adds another layer of complexity that needs to be able to handle the [Tailscale Control
-  Protocol](#websocket) properly. Be sure to test your setup without a reverse proxy before raising an issue.
-- STUN (used along with the [embedded DERP server](../derp.md)) requires udp/3478 to be served publicly.
-
-## Reverse proxy specific configuration
-
-!!! warning "Third-party software and services"
-
-    This section of the documentation is specific for third-party software and services. We recommend users read the
-    third-party documentation for a secure configuration.
-
-This following Headscale configuration may be used as base for the various reverse proxy examples below. The following
-is [assumed](../../setup/requirements.md):
-
-- Service for Tailscale clients is served via HTTPS on port 443.
-- The reverse proxy redirects HTTP to HTTPS and is terminating TLS.
-- Both Headscale and the reverse proxy are running on the same host.
-- [Metrics](../debug.md#metrics-and-debug-endpoint) are not proxied, those are available via localhost.
-
-```yaml title="config.yaml" hl_lines="1"
-server_url: https://<SERVER_NAME>
-listen_addr: 127.0.0.1:8080
-metrics_listen_addr: 127.0.0.1:9090
-trusted_proxies:
-  - 127.0.0.1/32
-  - ::1/128
-tls_cert_path: ""
-tls_key_path: ""
-```
-
-### Apache
-
-The following basic Apache configuration works with the Headscale configuration [as shown
-above](#reverse-proxy-specific-configuration). Substitute placeholders and adjust the configuration as needed:
-
-- `<SERVER_NAME>`: The server name for your instance, e.g. `headscale.example.com`
-- `<PATH_TO_TLS_CERT>`: Absolute path to your TLS certificate
-- `<PATH_TO_TLS_KEY>`: Absolute path to your TLS private key
-
-```apache title="apache.conf" hl_lines="2 7 11 14-15"
-<VirtualHost *:80>
-  ServerName <SERVER_NAME>
-
-  # Tailscale captive portal detection
-  RedirectMatch 204 ^/generate_204$
-
-  RedirectMatch permanent "^/(.*)$" "https://<SERVER_NAME>/$1"
-</VirtualHost>
-
-<VirtualHost *:443>
-  ServerName <SERVER_NAME>
-
-  SSLEngine On
-  SSLCertificateFile <PATH_TO_TLS_CERT>
-  SSLCertificateKeyFile <PATH_TO_TLS_KEY>
-
-  RequestHeader set True-Client-IP "%{REMOTE_ADDR}s"
-  RequestHeader set X-Real-IP "%{REMOTE_ADDR}s"
-
-  ProxyPreserveHost On
-  ProxyPass / http://127.0.0.1:8080/ upgrade=any
-</VirtualHost>
-```
-
-Note that `upgrade=any` is required as a parameter for `ProxyPass` so that WebSocket traffic whose `Upgrade` header
-value is not equal to `WebSocket` (i. e. Tailscale Control Protocol) is forwarded correctly. See the [Apache
-docs](https://httpd.apache.org/docs/current/mod/mod_proxy.html#upgrade) for more information on this.
-
-### Caddy
-
-The following basic Caddyfile works with the Headscale configuration [as shown
-above](#reverse-proxy-specific-configuration). Substitute placeholders and adjust the configuration as needed:
-
-- `<SERVER_NAME>`: The server name for your instance, e.g. `headscale.example.com`
-
-```none title="Caddyfile" hl_lines="1 12"
-http://<SERVER_NAME> {
-	# Tailscale captive portal detection
-	handle /generate_204 {
-		respond 204
-	}
-
-	handle * {
-		redir https://{host}{uri}
-	}
-}
-
-<SERVER_NAME> {
-	reverse_proxy 127.0.0.1:8080 {
-		header_up True-Client-IP {remote_host}
-		header_up X-Real-IP {remote_host}
-	}
-}
-```
-
-Caddy will [automatically](https://caddyserver.com/docs/automatic-https) provision a certificate for your
-domain/subdomain, force HTTPS, and proxy WebSocket connections.
+WebSockets support is also required when using the Headscale [embedded DERP server](../derp.md). In this case, you will also need to expose the UDP port used for STUN (by default, udp/3478). Please check our [config-example.yaml](https://github.com/juanfont/headscale/blob/main/config-example.yaml).
 
 ### Cloudflare
 
-Running Headscale behind a Cloudflare Proxy or Cloudflare Tunnel is not supported and will not work as Cloudflare does
-not support [WebSocket POSTs as required by the Tailscale protocol](#websocket). See [issue
-1468](https://github.com/juanfont/headscale/issues/1468) for more information.
+Running headscale behind a cloudflare proxy or cloudflare tunnel is not supported and will not work as Cloudflare does not support WebSocket POSTs as required by the Tailscale protocol. See [this issue](https://github.com/juanfont/headscale/issues/1468)
+
+### TLS
+
+Headscale can be configured not to use TLS, leaving it to the reverse proxy to handle. Add the following configuration values to your headscale config file.
+
+```yaml title="config.yaml"
+server_url: https://<YOUR_SERVER_NAME> # This should be the FQDN at which headscale will be served
+listen_addr: 0.0.0.0:8080
+metrics_listen_addr: 0.0.0.0:9090
+tls_cert_path: ""
+tls_key_path: ""
+```
+
+## nginx
+
+The following example configuration can be used in your nginx setup, substituting values as necessary. `<IP:PORT>` should be the IP address and port where headscale is running. In most cases, this will be `http://localhost:8080`.
+
+```nginx title="nginx.conf"
+map $http_upgrade $connection_upgrade {
+    default      upgrade;
+    ''           close;
+}
+
+server {
+    listen 80;
+	listen [::]:80;
+
+	listen 443      ssl http2;
+	listen [::]:443 ssl http2;
+
+    server_name <YOUR_SERVER_NAME>;
+
+    ssl_certificate <PATH_TO_CERT>;
+    ssl_certificate_key <PATH_CERT_KEY>;
+    ssl_protocols TLSv1.2 TLSv1.3;
+
+    location / {
+        proxy_pass http://<IP:PORT>;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_set_header Host $server_name;
+        proxy_redirect http:// https://;
+        proxy_buffering off;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
+    }
+}
+```
+
+## istio/envoy
+
+If you using [Istio](https://istio.io/) ingressgateway or [Envoy](https://www.envoyproxy.io/) as reverse proxy, there are some tips for you. If not set, you may see some debug log in proxy as below:
+
+```log
+Sending local reply with details upgrade_failed
+```
 
 ### Envoy
 
-You need to add a new upgrade_type named `tailscale-control-protocol`. [See
-details](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto#extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-upgradeconfig).
+You need to add a new upgrade_type named `tailscale-control-protocol`. [see details](https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/http_connection_manager/v3/http_connection_manager.proto#extensions-filters-network-http-connection-manager-v3-httpconnectionmanager-upgradeconfig)
 
 ### Istio
 
-Same as [envoy](#envoy), we can use `EnvoyFilter` to add a new upgrade_type named `tailscale-control-protocol`.
+Same as envoy, we can use `EnvoyFilter` to add upgrade_type.
 
 ```yaml
 apiVersion: networking.istio.io/v1alpha3
@@ -202,68 +109,33 @@ spec:
               - upgrade_type: tailscale-control-protocol
 ```
 
-### Nginx
+## Caddy
 
-The following basic Nginx configuration works with the Headscale configuration [as shown
-above](#reverse-proxy-specific-configuration). Substitute placeholders and adjust the configuration as needed:
+The following Caddyfile is all that is necessary to use Caddy as a reverse proxy for headscale, in combination with the `config.yaml` specifications above to disable headscale's built in TLS. Replace values as necessary - `<YOUR_SERVER_NAME>` should be the FQDN at which headscale will be served, and `<IP:PORT>` should be the IP address and port where headscale is running. In most cases, this will be `localhost:8080`.
 
-- `<SERVER_NAME>`: The server name for your instance, e.g. `headscale.example.com`
-- `<PATH_TO_TLS_CERT>`: Absolute path to your TLS certificate
-- `<PATH_TO_TLS_KEY>`: Absolute path to your TLS private key
-
-```nginx title="nginx.conf" hl_lines="19 37 39-40"
-# headscale
-upstream headscale {
-  zone upstreams 64K;
-  server 127.0.0.1:8080 max_fails=1 fail_timeout=5s;
-  keepalive 2;
-}
-
-# websocket
-map $http_upgrade $connection_upgrade {
-  default keep-alive;
-  ''      close;
-}
-
-# http
-server {
-  listen 80;
-  listen [::]:80;
-
-  server_name <SERVER_NAME>;
-
-  # Tailscale captive portal detection
-  location = /generate_204 {
-    return 204;
-  }
-
-  location / {
-    return 301 https://$server_name$request_uri;
-  }
-}
-
-# https
-server {
-  listen 443 ssl;
-  listen [::]:443 ssl;
-  http2 on;
-
-  server_name <SERVER_NAME>;
-
-  ssl_certificate <PATH_TO_TLS_CERT>;
-  ssl_certificate_key <PATH_TO_TLS_KEY>;
-
-  location / {
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection $connection_upgrade;
-    proxy_set_header Host $host;
-    proxy_set_header True-Client-IP $remote_addr;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_buffering off;
-    proxy_pass http://headscale;
-  }
+```none title="Caddyfile"
+<YOUR_SERVER_NAME> {
+    reverse_proxy <IP:PORT>
 }
 ```
+
+Caddy v2 will [automatically](https://caddyserver.com/docs/automatic-https) provision a certificate for your domain/subdomain, force HTTPS, and proxy websockets - no further configuration is necessary.
+
+For a slightly more complex configuration which utilizes Docker containers to manage Caddy, headscale, and Headscale-UI, [Guru Computing's guide](https://blog.gurucomputing.com.au/smart-vpns-with-headscale/) is an excellent reference.
+
+## Apache
+
+The following minimal Apache config will proxy traffic to the headscale instance on `<IP:PORT>`. Note that `upgrade=any` is required as a parameter for `ProxyPass` so that WebSockets traffic whose `Upgrade` header value is not equal to `WebSocket` (i. e. Tailscale Control Protocol) is forwarded correctly. See the [Apache docs](https://httpd.apache.org/docs/2.4/mod/mod_proxy_wstunnel.html) for more information on this.
+
+```apache title="apache.conf"
+<VirtualHost *:443>
+	ServerName <YOUR_SERVER_NAME>
+
+	ProxyPreserveHost On
+	ProxyPass / http://<IP:PORT>/ upgrade=any
+
+	SSLEngine On
+	SSLCertificateFile <PATH_TO_CERT>
+	SSLCertificateKeyFile <PATH_CERT_KEY>
+</VirtualHost>
+```
diff --git a/docs/ref/integration/web-ui.md b/docs/ref/integration/web-ui.md
index 12aa6d373..8f00695a8 100644
--- a/docs/ref/integration/web-ui.md
+++ b/docs/ref/integration/web-ui.md
@@ -23,7 +23,5 @@ Headscale doesn't provide a built-in web interface but users may pick one from t
 - [HeadControl](https://github.com/ahmadzip/HeadControl) - Minimal Headscale admin dashboard, built with Go and HTMX
 - [Headscale Manager](https://github.com/hkdone/headscalemanager) - Headscale UI for Android
 - [Headscale UI](https://github.com/MunMunMiao/headscale-ui) - Headscale UI online and Self-hosting
-- [Headscale Panel](https://github.com/headscale-panel/panel) - A modern Headscale management panel with a clean,
-  network-operations-focused UI
 
 You can ask for support on our [Discord server](https://discord.gg/c84AZQhmpx) in the "web-interfaces" channel.
diff --git a/docs/ref/policy.md b/docs/ref/policy.md
index f326d7ecb..10248e76b 100644
--- a/docs/ref/policy.md
+++ b/docs/ref/policy.md
@@ -158,17 +158,17 @@ devices. Can only be used in policy destinations.
         {
           "src": ["boss@"],
           "dst": ["boss@"],
-          "ip": ["*"]
+          "ip": "*"
         },
         {
           "src": ["dev1@"],
           "dst": ["dev1@"],
-          "ip": ["*"]
+          "ip": "*"
         },
         {
           "src": ["intern1@"],
           "dst": ["intern1@"],
-          "ip": ["*"]
+          "ip": "*"
         }
       ]
     }
@@ -196,54 +196,5 @@ Used in Tailscale SSH rules to allow access to any user except root. Can only be
 This autogroup resolves to all IP addresses (`0.0.0.0/0` and `::/0`) which also includes all IP addresses outside the
 standard Tailscale IP ranges. This autogroup can only be used as source.
 
-## Node Attributes
-
-[Node attributes](https://tailscale.com/docs/reference/syntax/policy-file#node-attributes) allow for device-specific
-configuration and attributes. At least the following node attributes are currently supported by Headscale[^2]:
-
-- `drive:access`, `drive:share`: [Taildrive support](https://tailscale.com/docs/features/taildrive).
-- `nextdns:<profile>`, `nextdns:no-device-info`: [NextDNS integration](https://tailscale.com/docs/integrations/nextdns).
-  Be sure to set NextDNS as global resolver in the [configuration](configuration.md).
-- `magicdns-aaaa`: Respond to AAAA queries on the local [MagicDNS](https://tailscale.com/docs/features/magicdns)
-  resolver at 100.100.100.100.
-- `disable-ipv4`: Selectively disable IPv4 for specfic nodes. This is may be useful to workaround [CGNat
-  conflicts](https://tailscale.com/docs/reference/troubleshooting/network-configuration/cgnat-conflicts).
-- `randomize-client-port`: Allocate a [random port for WireGuard
-  traffic](https://tailscale.com/docs/reference/syntax/policy-file#randomizeclientport) instead of the static default
-  port 41641.
-- `disable-captive-portal-detection`: [Disable automatic captive portal
-  detection](https://tailscale.com/docs/integrations/captive-portals#disable-captive-portal-detection).
-
-```json title="policy.json"
-{
-  "nodeAttrs": [
-    {
-      // Enable MagicDNS AAAA records for all nodes
-      "target": ["*"]
-      "attr": ["magicdns-aaaa"]
-    }
-  ]
-}
-```
-
-## Network-wide policy options
-
-The following options are applied for the entire tailnet. Consider [node attributes](#node-attributes) for a more
-fine-grained configuration instead.
-
-- `randomizeClientPort`: Allocate a [random port for WireGuard
-  traffic](https://tailscale.com/docs/reference/syntax/policy-file#randomizeclientport) instead of the static default
-  port 41641.
-
-```json title="policy.json"
-{
-  // Use a random WireGuard port for the entire tailnet
-  "randomizeClientPort": true
-}
-```
-
 [^1]: Headscale also allows to store the policy in the database. This is typically only required in case a [web
     interface](integration/web-ui.md) is used.
-
-[^2]: Other key-only node attributes can be used as well. Find them in the client source code with `grep -E '^\s+NodeAttr\w+' tailcfg/tailcfg.go` or by using [GitHub code search (requires
-    login)](https://github.com/search?q=repo%3Atailscale%2Ftailscale%20language%3Ago%20path%3Atailcfg%2Ftailcfg.go%20symbol%3A%2FNodeAttr%5Cw%2B%2F&type=code).
diff --git a/docs/setup/install/official.md b/docs/setup/install/official.md
index 52988836d..a70422f8f 100644
--- a/docs/setup/install/official.md
+++ b/docs/setup/install/official.md
@@ -31,10 +31,10 @@ distributions are Ubuntu 22.04 or newer, Debian 12 or newer.
     sudo nano /etc/headscale/config.yaml
     ```
 
-1. Restart headscale to pick up configuration changes:
+1. Enable and start the headscale service:
 
     ```shell
-    sudo systemctl restart headscale
+    sudo systemctl enable --now headscale
     ```
 
 1. Verify that headscale is running as intended:
diff --git a/docs/setup/requirements.md b/docs/setup/requirements.md
index da84ae856..6c11386c3 100644
--- a/docs/setup/requirements.md
+++ b/docs/setup/requirements.md
@@ -26,6 +26,9 @@ The ports in use vary with the intended scenario and enabled features. Some of t
 - udp/3478
     - Expose publicly: yes
     - STUN, required if the [embedded DERP server](../ref/derp.md) is enabled
+- tcp/50443
+    - Expose publicly: yes
+    - Only required if the gRPC interface is used to [remote-control Headscale](../ref/api.md#grpc).
 - tcp/9090
     - Expose publicly: no
     - [Metrics and debug endpoint](../ref/debug.md#metrics-and-debug-endpoint)
diff --git a/docs/setup/upgrade.md b/docs/setup/upgrade.md
index 8176e933a..e12359cf3 100644
--- a/docs/setup/upgrade.md
+++ b/docs/setup/upgrade.md
@@ -2,7 +2,7 @@
 
 !!! tip "Required update path"
 
-    It's required to update from one stable version to the next (e.g. 0.26.0 → 0.27.1 → 0.28.0) without skipping minor
+    Its required to update from one stable version to the next (e.g. 0.26.0 → 0.27.1 → 0.28.0) without skipping minor
     versions in between. You should always pick the latest available patch release.
 
 Update an existing Headscale installation to a new version:
@@ -23,7 +23,7 @@ upgrading. A full backup of Headscale depends on your individual setup, but belo
 
 === "Standard installation"
 
-    An installation that follows our [official releases](install/official.md) setup guide uses the following paths:
+    A installation that follows our [official releases](install/official.md) setup guide uses the following paths:
 
     - [Configuration file](../ref/configuration.md): `/etc/headscale/config.yaml`
     - Data directory: `/var/lib/headscale`
@@ -37,7 +37,7 @@ upgrading. A full backup of Headscale depends on your individual setup, but belo
 
 === "Container"
 
-    An installation that follows our [container](install/container.md) setup guide uses a single source volume directory
+    A installation that follows our [container](install/container.md) setup guide uses a single source volume directory
     that contains the configuration file, data directory and the SQLite database.
 
     ```console
diff --git a/flake.lock b/flake.lock
index c723d287a..339d9dd1c 100644
--- a/flake.lock
+++ b/flake.lock
@@ -1,27 +1,5 @@
 {
   "nodes": {
-    "flake-checks": {
-      "inputs": {
-        "flake-utils": "flake-utils",
-        "nixpkgs": [
-          "nixpkgs"
-        ],
-        "treefmt-nix": "treefmt-nix"
-      },
-      "locked": {
-        "lastModified": 1781951072,
-        "narHash": "sha256-hA9u6hB4QzpReP8hudxqiaa4vLhoRvtXi6YmUgJRGEs=",
-        "owner": "kradalby",
-        "repo": "flake-checks",
-        "rev": "3d2882efec5cf10f8b5a8a035d93ba6ba9f21717",
-        "type": "github"
-      },
-      "original": {
-        "owner": "kradalby",
-        "repo": "flake-checks",
-        "type": "github"
-      }
-    },
     "flake-utils": {
       "inputs": {
         "systems": "systems"
@@ -40,44 +18,25 @@
         "type": "github"
       }
     },
-    "flake-utils_2": {
-      "inputs": {
-        "systems": "systems_2"
-      },
-      "locked": {
-        "lastModified": 1731533236,
-        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "flake-utils",
-        "type": "github"
-      }
-    },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1781153106,
-        "narHash": "sha256-yzsroLCcuRG4KdGMxWt0eXKOrRSgQT8/xjYngeq9ujU=",
+        "lastModified": 1777270315,
+        "narHash": "sha256-yKB4G6cKsQsWN7M6rZGk6gkJPDNPIzT05y4qzRyCDlI=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "9ee75f111a06d7ab2b2f729698a8eff53d54e070",
+        "rev": "6368eda62c9775c38ef7f714b2555a741c20c72d",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
-        "ref": "staging-next-26.05",
+        "ref": "nixpkgs-unstable",
         "repo": "nixpkgs",
         "type": "github"
       }
     },
     "root": {
       "inputs": {
-        "flake-checks": "flake-checks",
-        "flake-utils": "flake-utils_2",
+        "flake-utils": "flake-utils",
         "nixpkgs": "nixpkgs"
       }
     },
@@ -95,42 +54,6 @@
         "repo": "default",
         "type": "github"
       }
-    },
-    "systems_2": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
-    "treefmt-nix": {
-      "inputs": {
-        "nixpkgs": [
-          "flake-checks",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1780220602,
-        "narHash": "sha256-eynAfOmbmxJnkp7YewvCEbShNnnYJ9gLLqkzsYtBPeM=",
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "rev": "db947814a175b7ca6ded66e21383d938df01c227",
-        "type": "github"
-      },
-      "original": {
-        "owner": "numtide",
-        "repo": "treefmt-nix",
-        "type": "github"
-      }
     }
   },
   "root": "root",
diff --git a/flake.nix b/flake.nix
index 96786def3..ef0b40b86 100644
--- a/flake.nix
+++ b/flake.nix
@@ -2,24 +2,14 @@
   description = "headscale - Open Source Tailscale Control server";
 
   inputs = {
-    # Pinned to staging-next-26.05 for Go 1.26.4 (security fix GO-2026-5037/5039):
-    # nixpkgs-unstable still ships 1.26.3 — the bump is merged to nixpkgs staging
-    # but the large-rebuild staging->unstable pipeline lags. The 26.05 line is
-    # otherwise current (dev tools match unstable). Switch back to nixpkgs-unstable
-    # once it ships go_1_26 >= 1.26.4.
-    nixpkgs.url = "github:NixOS/nixpkgs/staging-next-26.05";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
     flake-utils.url = "github:numtide/flake-utils";
-    # Reusable Go flake checks (build/test/lint/format); CI runs them via
-    # `nix build .#checks.<system>.<name>` instead of bespoke per-tool steps.
-    flake-checks.url = "github:kradalby/flake-checks";
-    flake-checks.inputs.nixpkgs.follows = "nixpkgs";
   };
 
   outputs =
     { self
     , nixpkgs
     , flake-utils
-    , flake-checks
     , ...
     }:
     let
@@ -36,7 +26,6 @@
       overlays.default = _: prev:
         let
           pkgs = nixpkgs.legacyPackages.${prev.stdenv.hostPlatform.system};
-          # Go 1.26 builder; resolves to Go 1.26.4 from the pinned nixpkgs.
           buildGo = pkgs.buildGo126Module;
           vendorHash = (builtins.fromJSON (builtins.readFile ./flakehashes.json)).vendor.sri;
         in
@@ -71,20 +60,53 @@
             subPackages = [ "cmd/hi" ];
           };
 
-          # Build golangci-lint with stock Go 1.26 (upstream uses hardcoded Go
-          # version); it does not build against the pinned 1.26.4.
+          protoc-gen-grpc-gateway = buildGo rec {
+            pname = "grpc-gateway";
+            version = "2.28.0";
+
+            src = pkgs.fetchFromGitHub {
+              owner = "grpc-ecosystem";
+              repo = "grpc-gateway";
+              rev = "v${version}";
+              sha256 = "sha256-93omvHb+b+S0w4D+FGEEwYYDjgumJFDAruc1P4elfvA=";
+            };
+
+            vendorHash = "sha256-jVP5zfFPfHeAEApKNJzZwuZLA+DjKgkL7m2DFG72UNs=";
+
+            nativeBuildInputs = [ pkgs.installShellFiles ];
+
+            subPackages = [ "protoc-gen-grpc-gateway" "protoc-gen-openapiv2" ];
+          };
+
+          protobuf-language-server = buildGo rec {
+            pname = "protobuf-language-server";
+            version = "ab4c128";
+
+            src = pkgs.fetchFromGitHub {
+              owner = "lasorda";
+              repo = "protobuf-language-server";
+              rev = "ab4c128f00774d51bd6d1f4cfa735f4b7c8619e3";
+              sha256 = "sha256-yF6kG+qTRxVO/qp2V9HgTyFBeOm5RQzeqdZFrdidwxM=";
+            };
+
+            vendorHash = "sha256-4nTpKBe7ekJsfQf+P6edT/9Vp2SBYbKz1ITawD3bhkI=";
+
+            subPackages = [ "." ];
+          };
+
+          # Build golangci-lint with Go 1.26 (upstream uses hardcoded Go version)
           golangci-lint = buildGo rec {
             pname = "golangci-lint";
-            version = "2.12.2";
+            version = "2.11.4";
 
             src = pkgs.fetchFromGitHub {
               owner = "golangci";
               repo = "golangci-lint";
               rev = "v${version}";
-              hash = "sha256-qR7fp1x2S+EwEAcplRHTvA3jWwLr/XSiYKSZtAwkrNU=";
+              hash = "sha256-B19aLvfNRY9TOYw/71f2vpNUuSIz8OI4dL0ijGezsas=";
             };
 
-            vendorHash = "sha256-AG5wtLwWLz55bdp1oi3cW+9O3yj1W1P7MV9zxym7Pb4=";
+            vendorHash = "sha256-xuoj4+U4tB5gpABKq4Dbp2cxnljxdYoBbO8A7DqPM5E=";
 
             subPackages = [ "cmd/golangci-lint" ];
 
@@ -157,11 +179,6 @@
             yq-go
             ripgrep
             postgresql
-
-            # External clients exercised by the Tailscale-compatible v2 API
-            # roundtrip tests (TestAPIv2). Binaries: tofu, tscli.
-            opentofu
-            tscli
             python314Packages.mdformat
             python314Packages.mdformat-footnote
             python314Packages.mdformat-frontmatter
@@ -171,8 +188,17 @@
             # 'dot' is needed for pprof graphs
             # go tool pprof -http=: <source>
             graphviz
+
+            # Protobuf dependencies
+            protobuf
+            protoc-gen-go
+            protoc-gen-go-grpc
+            protoc-gen-grpc-gateway
+            buf
+            clang-tools # clang-format
+            protobuf-language-server
           ]
-          ++ lib.optionals pkgs.stdenv.isLinux [ traceroute ];
+          ++ lib.optional pkgs.stdenv.isLinux [ traceroute ];
 
         # Add entry to build a docker image with headscale
         # caveat: only works on Linux
@@ -186,59 +212,6 @@
           contents = [ pkgs.headscale ];
           config.Entrypoint = [ (pkgs.headscale + "/bin/headscale") ];
         };
-
-        # Go flake checks from the flake-checks library. CI gates on
-        # `nix build .#checks.<system>.<name>`; the logic lives here, not in
-        # bespoke workflow steps. Linux-only: parts of the tree are
-        # Linux-specific and the pure unit subset is validated by CI.
-        fc = flake-checks.lib;
-        common = {
-          inherit pkgs;
-          root = ./.;
-          pname = "headscale";
-          version = headscaleVersion;
-          vendorHash = (builtins.fromJSON (builtins.readFile ./flakehashes.json)).vendor.sri;
-          goPkg = pkgs.go_1_26;
-          # //go:embed targets and test-read files outside the default whitelist.
-          embedDirs = [ ./hscontrol/assets ./hscontrol/db/schema.sql ./config-example.yaml ];
-          extraSrc = [
-            ./hscontrol/testdata
-            ./hscontrol/types/testdata
-            ./hscontrol/db/testdata
-            ./hscontrol/policy/v2/testdata
-          ];
-        };
-        goChecks = {
-          build = fc.goBuild (common // { subPackages = [ "cmd/headscale" ]; });
-
-          # The pure unit subset. ./integration (Docker) and
-          # ./hscontrol/servertest (slow: 10s+ convergence plus race/stress/HA
-          # property tests — run by the servertest workflow instead) are dropped
-          # from the test set but kept in source so cmd/hi and friends still
-          # compile; TestPostgres* needs a server (the SQLite equivalents still
-          # run). CGO off matches the build.
-          gotest = fc.goTest (common // {
-            testExclude = [ "/integration" "/hscontrol/servertest" ];
-            goSkip = [ "TestPostgres" ];
-            testEnv = "export CGO_ENABLED=0";
-          });
-
-          # Full-tree golangci-lint (golines, gofumpt, etc.); uses the overlay's
-          # golangci-lint built against the pinned Go.
-          golangci-lint = fc.goLint common;
-
-          # nixpkgs-fmt + prettier, excluding generated output. goFmt = "off":
-          # Go formatting (golines, gofumpt) is enforced by the golangci-lint
-          # check, not treefmt. prettierExts matches the old prettier-lint glob
-          # (no json: testdata fixtures are hand-formatted).
-          formatting = fc.goFormat (common // {
-            goFmt = "off";
-            prettier = true;
-            prettierExts = [ "ts" "js" "md" "yaml" "yml" "sass" "css" "scss" "html" ];
-            # Mirror .prettierignore (docs/ are mkdocs-flavoured; gen/ generated).
-            fmtExclude = [ ./gen ./docs ];
-          });
-        };
       in
       {
         # `nix develop`
@@ -256,7 +229,7 @@
               (pkgs.writeShellScriptBin
                 "go-mod-update-all"
                 ''
-                  cat go.mod | ${pkgs.ripgrep}/bin/rg "\t" | ${pkgs.ripgrep}/bin/rg -v indirect | ${pkgs.gawk}/bin/awk '{print $1}' | ${pkgs.findutils}/bin/xargs go get -u
+                  cat go.mod | ${pkgs.silver-searcher}/bin/ag "\t" | ${pkgs.silver-searcher}/bin/ag -v indirect | ${pkgs.gawk}/bin/awk '{print $1}' | ${pkgs.findutils}/bin/xargs go get -u
                   go mod tidy
                 '')
             ];
@@ -284,9 +257,6 @@
 
         checks = {
           headscale = pkgs.testers.nixosTest (import ./nix/tests/headscale.nix);
-        }
-        # The Go build/test checks are gated to Linux: parts of the tree are
-        # Linux-specific and the pure unit subset is validated by CI.
-        // pkgs.lib.optionalAttrs pkgs.stdenv.isLinux goChecks;
+        };
       });
 }
diff --git a/flakehashes.json b/flakehashes.json
index ea971a38e..5c88162e8 100644
--- a/flakehashes.json
+++ b/flakehashes.json
@@ -1,6 +1,6 @@
 {
   "vendor": {
-    "goModSum": "sha256-SJml8RXGmb2p0g1nOsHn86FA1hwgd5ZffLSkUj5zek8=",
-    "sri": "sha256-pjGNuVtgFFzWNq/2cK7a4iyF13AfcHz098nk92a9Ido="
+    "goModSum": "sha256-IE0n9cSqO4XNX4RN+CGBk9VC46iACiZKDFf/215iivk=",
+    "sri": "sha256-ijEIP9NSomhlWOgsVN7tPvSuvkTiLtnvXvhZmatIDLM="
   }
 }
diff --git a/gen/client/v1/client.gen.go b/gen/client/v1/client.gen.go
deleted file mode 100644
index f2b120a46..000000000
--- a/gen/client/v1/client.gen.go
+++ /dev/null
@@ -1,4728 +0,0 @@
-// Package clientv1 provides primitives to interact with the openapi HTTP API.
-//
-// Code generated by github.com/oapi-codegen/oapi-codegen/v2 version v2.7.1 DO NOT EDIT.
-package clientv1
-
-import (
-	"bytes"
-	"context"
-	"encoding/json"
-	"fmt"
-	"io"
-	"net/http"
-	"net/url"
-	"strings"
-	"time"
-
-	"github.com/oapi-codegen/runtime"
-)
-
-const (
-	BearerScopes bearerContextKey = "bearer.Scopes"
-)
-
-// Defines values for NodeRegisterMethod.
-const (
-	REGISTERMETHODAUTHKEY     NodeRegisterMethod = "REGISTER_METHOD_AUTH_KEY"
-	REGISTERMETHODCLI         NodeRegisterMethod = "REGISTER_METHOD_CLI"
-	REGISTERMETHODOIDC        NodeRegisterMethod = "REGISTER_METHOD_OIDC"
-	REGISTERMETHODUNSPECIFIED NodeRegisterMethod = "REGISTER_METHOD_UNSPECIFIED"
-)
-
-// Valid indicates whether the value is a known member of the NodeRegisterMethod enum.
-func (e NodeRegisterMethod) Valid() bool {
-	switch e {
-	case REGISTERMETHODAUTHKEY:
-		return true
-	case REGISTERMETHODCLI:
-		return true
-	case REGISTERMETHODOIDC:
-		return true
-	case REGISTERMETHODUNSPECIFIED:
-		return true
-	default:
-		return false
-	}
-}
-
-// ApiKey defines model for ApiKey.
-type ApiKey struct {
-	CreatedAt  *time.Time `json:"createdAt"`
-	Expiration *time.Time `json:"expiration"`
-	Id         string     `json:"id"`
-	LastSeen   *time.Time `json:"lastSeen"`
-	Prefix     string     `json:"prefix"`
-}
-
-// AuthApproveOutputBody defines model for AuthApproveOutputBody.
-type AuthApproveOutputBody = map[string]interface{}
-
-// AuthApproveRequestBody defines model for AuthApproveRequestBody.
-type AuthApproveRequestBody struct {
-	AuthId *string `json:"authId,omitempty"`
-}
-
-// AuthRegisterOutputBody defines model for AuthRegisterOutputBody.
-type AuthRegisterOutputBody struct {
-	Node Node `json:"node"`
-}
-
-// AuthRegisterRequestBody defines model for AuthRegisterRequestBody.
-type AuthRegisterRequestBody struct {
-	AuthId *string `json:"authId,omitempty"`
-	User   *string `json:"user,omitempty"`
-}
-
-// AuthRejectOutputBody defines model for AuthRejectOutputBody.
-type AuthRejectOutputBody = map[string]interface{}
-
-// AuthRejectRequestBody defines model for AuthRejectRequestBody.
-type AuthRejectRequestBody struct {
-	AuthId *string `json:"authId,omitempty"`
-}
-
-// BackfillNodeIPsOutputBody defines model for BackfillNodeIPsOutputBody.
-type BackfillNodeIPsOutputBody struct {
-	Changes []string `json:"changes"`
-}
-
-// CheckPolicyOutputBody defines model for CheckPolicyOutputBody.
-type CheckPolicyOutputBody = map[string]interface{}
-
-// CreateApiKeyOutputBody defines model for CreateApiKeyOutputBody.
-type CreateApiKeyOutputBody struct {
-	ApiKey string `json:"apiKey"`
-}
-
-// CreateApiKeyRequestBody defines model for CreateApiKeyRequestBody.
-type CreateApiKeyRequestBody struct {
-	Expiration *time.Time `json:"expiration,omitempty"`
-}
-
-// CreatePreAuthKeyRequestBody defines model for CreatePreAuthKeyRequestBody.
-type CreatePreAuthKeyRequestBody struct {
-	AclTags    *[]string  `json:"aclTags,omitempty"`
-	Ephemeral  *bool      `json:"ephemeral,omitempty"`
-	Expiration *time.Time `json:"expiration,omitempty"`
-	Reusable   *bool      `json:"reusable,omitempty"`
-	User       *string    `json:"user,omitempty"`
-}
-
-// CreateUserRequestBody defines model for CreateUserRequestBody.
-type CreateUserRequestBody struct {
-	DisplayName *string `json:"displayName,omitempty"`
-	Email       *string `json:"email,omitempty"`
-	Name        *string `json:"name,omitempty"`
-	PictureUrl  *string `json:"pictureUrl,omitempty"`
-}
-
-// DebugCreateNodeRequestBody defines model for DebugCreateNodeRequestBody.
-type DebugCreateNodeRequestBody struct {
-	Key    *string   `json:"key,omitempty"`
-	Name   *string   `json:"name,omitempty"`
-	Routes *[]string `json:"routes,omitempty"`
-	User   *string   `json:"user,omitempty"`
-}
-
-// DeleteApiKeyOutputBody defines model for DeleteApiKeyOutputBody.
-type DeleteApiKeyOutputBody = map[string]interface{}
-
-// DeleteNodeOutputBody defines model for DeleteNodeOutputBody.
-type DeleteNodeOutputBody = map[string]interface{}
-
-// DeletePreAuthKeyOutputBody defines model for DeletePreAuthKeyOutputBody.
-type DeletePreAuthKeyOutputBody = map[string]interface{}
-
-// DeleteUserOutputBody defines model for DeleteUserOutputBody.
-type DeleteUserOutputBody = map[string]interface{}
-
-// ErrorDetail defines model for ErrorDetail.
-type ErrorDetail struct {
-	// Location Where the error occurred, e.g. 'body.items[3].tags' or 'path.thing-id'
-	Location *string `json:"location,omitempty"`
-
-	// Message Error message text
-	Message *string `json:"message,omitempty"`
-
-	// Value The value at the given location
-	Value interface{} `json:"value,omitempty"`
-}
-
-// ErrorModel defines model for ErrorModel.
-type ErrorModel struct {
-	// Detail A human-readable explanation specific to this occurrence of the problem.
-	Detail *string `json:"detail,omitempty"`
-
-	// Errors Optional list of individual error details
-	Errors *[]ErrorDetail `json:"errors,omitempty"`
-
-	// Instance A URI reference that identifies the specific occurrence of the problem.
-	Instance *string `json:"instance,omitempty"`
-
-	// Status HTTP status code
-	Status *int64 `json:"status,omitempty"`
-
-	// Title A short, human-readable summary of the problem type. This value should not change between occurrences of the error.
-	Title *string `json:"title,omitempty"`
-
-	// Type A URI reference to human-readable documentation for the error.
-	Type *string `json:"type,omitempty"`
-}
-
-// ExpireApiKeyOutputBody defines model for ExpireApiKeyOutputBody.
-type ExpireApiKeyOutputBody = map[string]interface{}
-
-// ExpireApiKeyRequestBody defines model for ExpireApiKeyRequestBody.
-type ExpireApiKeyRequestBody struct {
-	Id     *string `json:"id,omitempty"`
-	Prefix *string `json:"prefix,omitempty"`
-}
-
-// ExpireNodeRequestBody defines model for ExpireNodeRequestBody.
-type ExpireNodeRequestBody struct {
-	DisableExpiry *bool      `json:"disableExpiry,omitempty"`
-	Expiry        *time.Time `json:"expiry,omitempty"`
-}
-
-// ExpirePreAuthKeyOutputBody defines model for ExpirePreAuthKeyOutputBody.
-type ExpirePreAuthKeyOutputBody = map[string]interface{}
-
-// ExpirePreAuthKeyRequestBody defines model for ExpirePreAuthKeyRequestBody.
-type ExpirePreAuthKeyRequestBody struct {
-	Id *string `json:"id,omitempty"`
-}
-
-// HealthResponseBody defines model for HealthResponseBody.
-type HealthResponseBody struct {
-	DatabaseConnectivity bool `json:"databaseConnectivity"`
-}
-
-// ListApiKeysOutputBody defines model for ListApiKeysOutputBody.
-type ListApiKeysOutputBody struct {
-	ApiKeys []ApiKey `json:"apiKeys"`
-}
-
-// ListNodesOutputBody defines model for ListNodesOutputBody.
-type ListNodesOutputBody struct {
-	Nodes []Node `json:"nodes"`
-}
-
-// ListPreAuthKeysOutputBody defines model for ListPreAuthKeysOutputBody.
-type ListPreAuthKeysOutputBody struct {
-	PreAuthKeys []PreAuthKey `json:"preAuthKeys"`
-}
-
-// ListUsersOutputBody defines model for ListUsersOutputBody.
-type ListUsersOutputBody struct {
-	Users []User `json:"users"`
-}
-
-// Node defines model for Node.
-type Node struct {
-	ApprovedRoutes  []string           `json:"approvedRoutes"`
-	AvailableRoutes []string           `json:"availableRoutes"`
-	CreatedAt       time.Time          `json:"createdAt"`
-	DiscoKey        string             `json:"discoKey"`
-	Expiry          *time.Time         `json:"expiry"`
-	GivenName       string             `json:"givenName"`
-	Id              string             `json:"id"`
-	IpAddresses     []string           `json:"ipAddresses"`
-	LastSeen        *time.Time         `json:"lastSeen"`
-	MachineKey      string             `json:"machineKey"`
-	Name            string             `json:"name"`
-	NodeKey         string             `json:"nodeKey"`
-	Online          bool               `json:"online"`
-	PreAuthKey      NodePreAuthKey     `json:"preAuthKey"`
-	RegisterMethod  NodeRegisterMethod `json:"registerMethod"`
-	SubnetRoutes    []string           `json:"subnetRoutes"`
-	Tags            []string           `json:"tags"`
-	User            User               `json:"user"`
-}
-
-// NodeRegisterMethod defines model for Node.RegisterMethod.
-type NodeRegisterMethod string
-
-// NodeOutputBody defines model for NodeOutputBody.
-type NodeOutputBody struct {
-	Node Node `json:"node"`
-}
-
-// NodePreAuthKey defines model for NodePreAuthKey.
-type NodePreAuthKey struct {
-	AclTags    []string   `json:"aclTags"`
-	CreatedAt  *time.Time `json:"createdAt"`
-	Ephemeral  bool       `json:"ephemeral"`
-	Expiration *time.Time `json:"expiration"`
-	Id         string     `json:"id"`
-	Key        string     `json:"key"`
-	Reusable   bool       `json:"reusable"`
-	Used       bool       `json:"used"`
-	User       User       `json:"user"`
-}
-
-// PolicyRequestBody defines model for PolicyRequestBody.
-type PolicyRequestBody struct {
-	Policy *string `json:"policy,omitempty"`
-}
-
-// PolicyResponseBody defines model for PolicyResponseBody.
-type PolicyResponseBody struct {
-	Policy    string    `json:"policy"`
-	UpdatedAt time.Time `json:"updatedAt"`
-}
-
-// PreAuthKey defines model for PreAuthKey.
-type PreAuthKey struct {
-	AclTags    []string  `json:"aclTags"`
-	CreatedAt  time.Time `json:"createdAt"`
-	Ephemeral  bool      `json:"ephemeral"`
-	Expiration time.Time `json:"expiration"`
-	Id         string    `json:"id"`
-	Key        string    `json:"key"`
-	Reusable   bool      `json:"reusable"`
-	Used       bool      `json:"used"`
-	User       User      `json:"user"`
-}
-
-// PreAuthKeyOutputBody defines model for PreAuthKeyOutputBody.
-type PreAuthKeyOutputBody struct {
-	PreAuthKey PreAuthKey `json:"preAuthKey"`
-}
-
-// SetApprovedRoutesRequestBody defines model for SetApprovedRoutesRequestBody.
-type SetApprovedRoutesRequestBody struct {
-	Routes *[]string `json:"routes,omitempty"`
-}
-
-// SetTagsRequestBody defines model for SetTagsRequestBody.
-type SetTagsRequestBody struct {
-	Tags *[]string `json:"tags,omitempty"`
-}
-
-// User defines model for User.
-type User struct {
-	CreatedAt     time.Time `json:"createdAt"`
-	DisplayName   string    `json:"displayName"`
-	Email         string    `json:"email"`
-	Id            string    `json:"id"`
-	Name          string    `json:"name"`
-	ProfilePicUrl string    `json:"profilePicUrl"`
-	Provider      string    `json:"provider"`
-	ProviderId    string    `json:"providerId"`
-}
-
-// UserOutputBody defines model for UserOutputBody.
-type UserOutputBody struct {
-	User User `json:"user"`
-}
-
-// bearerContextKey is the context key for bearer security scheme
-type bearerContextKey string
-
-// DeleteApiKeyParams defines parameters for DeleteApiKey.
-type DeleteApiKeyParams struct {
-	Id *string `form:"id,omitempty" json:"id,omitempty"`
-}
-
-// ListNodesParams defines parameters for ListNodes.
-type ListNodesParams struct {
-	User *string `form:"user,omitempty" json:"user,omitempty"`
-}
-
-// BackfillNodeIPsParams defines parameters for BackfillNodeIPs.
-type BackfillNodeIPsParams struct {
-	Confirmed *bool `form:"confirmed,omitempty" json:"confirmed,omitempty"`
-}
-
-// RegisterNodeParams defines parameters for RegisterNode.
-type RegisterNodeParams struct {
-	User *string `form:"user,omitempty" json:"user,omitempty"`
-	Key  *string `form:"key,omitempty" json:"key,omitempty"`
-}
-
-// DeletePreAuthKeyParams defines parameters for DeletePreAuthKey.
-type DeletePreAuthKeyParams struct {
-	Id *string `form:"id,omitempty" json:"id,omitempty"`
-}
-
-// ListUsersParams defines parameters for ListUsers.
-type ListUsersParams struct {
-	Id    *string `form:"id,omitempty" json:"id,omitempty"`
-	Name  *string `form:"name,omitempty" json:"name,omitempty"`
-	Email *string `form:"email,omitempty" json:"email,omitempty"`
-}
-
-// CreateApiKeyJSONRequestBody defines body for CreateApiKey for application/json ContentType.
-type CreateApiKeyJSONRequestBody = CreateApiKeyRequestBody
-
-// ExpireApiKeyJSONRequestBody defines body for ExpireApiKey for application/json ContentType.
-type ExpireApiKeyJSONRequestBody = ExpireApiKeyRequestBody
-
-// AuthApproveJSONRequestBody defines body for AuthApprove for application/json ContentType.
-type AuthApproveJSONRequestBody = AuthApproveRequestBody
-
-// AuthRegisterJSONRequestBody defines body for AuthRegister for application/json ContentType.
-type AuthRegisterJSONRequestBody = AuthRegisterRequestBody
-
-// AuthRejectJSONRequestBody defines body for AuthReject for application/json ContentType.
-type AuthRejectJSONRequestBody = AuthRejectRequestBody
-
-// DebugCreateNodeJSONRequestBody defines body for DebugCreateNode for application/json ContentType.
-type DebugCreateNodeJSONRequestBody = DebugCreateNodeRequestBody
-
-// SetApprovedRoutesJSONRequestBody defines body for SetApprovedRoutes for application/json ContentType.
-type SetApprovedRoutesJSONRequestBody = SetApprovedRoutesRequestBody
-
-// ExpireNodeJSONRequestBody defines body for ExpireNode for application/json ContentType.
-type ExpireNodeJSONRequestBody = ExpireNodeRequestBody
-
-// SetTagsJSONRequestBody defines body for SetTags for application/json ContentType.
-type SetTagsJSONRequestBody = SetTagsRequestBody
-
-// SetPolicyJSONRequestBody defines body for SetPolicy for application/json ContentType.
-type SetPolicyJSONRequestBody = PolicyRequestBody
-
-// CheckPolicyJSONRequestBody defines body for CheckPolicy for application/json ContentType.
-type CheckPolicyJSONRequestBody = PolicyRequestBody
-
-// CreatePreAuthKeyJSONRequestBody defines body for CreatePreAuthKey for application/json ContentType.
-type CreatePreAuthKeyJSONRequestBody = CreatePreAuthKeyRequestBody
-
-// ExpirePreAuthKeyJSONRequestBody defines body for ExpirePreAuthKey for application/json ContentType.
-type ExpirePreAuthKeyJSONRequestBody = ExpirePreAuthKeyRequestBody
-
-// CreateUserJSONRequestBody defines body for CreateUser for application/json ContentType.
-type CreateUserJSONRequestBody = CreateUserRequestBody
-
-// RequestEditorFn  is the function signature for the RequestEditor callback function
-type RequestEditorFn func(ctx context.Context, req *http.Request) error
-
-// Doer performs HTTP requests.
-//
-// The standard http.Client implements this interface.
-type HttpRequestDoer interface {
-	Do(req *http.Request) (*http.Response, error)
-}
-
-// Client which conforms to the OpenAPI3 specification for this service.
-type Client struct {
-	// The endpoint of the server conforming to this interface, with scheme,
-	// https://api.deepmap.com for example. This can contain a path relative
-	// to the server, such as https://api.deepmap.com/dev-test, and all the
-	// paths in the swagger spec will be appended to the server.
-	Server string
-
-	// Doer for performing requests, typically a *http.Client with any
-	// customized settings, such as certificate chains.
-	Client HttpRequestDoer
-
-	// A list of callbacks for modifying requests which are generated before sending over
-	// the network.
-	RequestEditors []RequestEditorFn
-}
-
-// ClientOption allows setting custom parameters during construction
-type ClientOption func(*Client) error
-
-// Creates a new Client, with reasonable defaults
-func NewClient(server string, opts ...ClientOption) (*Client, error) {
-	// create a client with sane default values
-	client := Client{
-		Server: server,
-	}
-	// mutate client and add all optional params
-	for _, o := range opts {
-		if err := o(&client); err != nil {
-			return nil, err
-		}
-	}
-	// ensure the server URL always has a trailing slash
-	if !strings.HasSuffix(client.Server, "/") {
-		client.Server += "/"
-	}
-	// create httpClient, if not already present
-	if client.Client == nil {
-		client.Client = &http.Client{}
-	}
-	return &client, nil
-}
-
-// WithHTTPClient allows overriding the default Doer, which is
-// automatically created using http.Client. This is useful for tests.
-func WithHTTPClient(doer HttpRequestDoer) ClientOption {
-	return func(c *Client) error {
-		c.Client = doer
-		return nil
-	}
-}
-
-// WithRequestEditorFn allows setting up a callback function, which will be
-// called right before sending the request. This can be used to mutate the request.
-func WithRequestEditorFn(fn RequestEditorFn) ClientOption {
-	return func(c *Client) error {
-		c.RequestEditors = append(c.RequestEditors, fn)
-		return nil
-	}
-}
-
-// The interface specification for the client above.
-type ClientInterface interface {
-	// ListApiKeys request
-	ListApiKeys(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// CreateApiKeyWithBody request with any body
-	CreateApiKeyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	CreateApiKey(ctx context.Context, body CreateApiKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ExpireApiKeyWithBody request with any body
-	ExpireApiKeyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	ExpireApiKey(ctx context.Context, body ExpireApiKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// DeleteApiKey request
-	DeleteApiKey(ctx context.Context, prefix string, params *DeleteApiKeyParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// AuthApproveWithBody request with any body
-	AuthApproveWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	AuthApprove(ctx context.Context, body AuthApproveJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// AuthRegisterWithBody request with any body
-	AuthRegisterWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	AuthRegister(ctx context.Context, body AuthRegisterJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// AuthRejectWithBody request with any body
-	AuthRejectWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	AuthReject(ctx context.Context, body AuthRejectJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// DebugCreateNodeWithBody request with any body
-	DebugCreateNodeWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	DebugCreateNode(ctx context.Context, body DebugCreateNodeJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// Health request
-	Health(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ListNodes request
-	ListNodes(ctx context.Context, params *ListNodesParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// BackfillNodeIPs request
-	BackfillNodeIPs(ctx context.Context, params *BackfillNodeIPsParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// RegisterNode request
-	RegisterNode(ctx context.Context, params *RegisterNodeParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// DeleteNode request
-	DeleteNode(ctx context.Context, nodeId string, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// GetNode request
-	GetNode(ctx context.Context, nodeId string, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// SetApprovedRoutesWithBody request with any body
-	SetApprovedRoutesWithBody(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	SetApprovedRoutes(ctx context.Context, nodeId string, body SetApprovedRoutesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ExpireNodeWithBody request with any body
-	ExpireNodeWithBody(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	ExpireNode(ctx context.Context, nodeId string, body ExpireNodeJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// RenameNode request
-	RenameNode(ctx context.Context, nodeId string, newName string, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// SetTagsWithBody request with any body
-	SetTagsWithBody(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	SetTags(ctx context.Context, nodeId string, body SetTagsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// GetPolicy request
-	GetPolicy(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// SetPolicyWithBody request with any body
-	SetPolicyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	SetPolicy(ctx context.Context, body SetPolicyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// CheckPolicyWithBody request with any body
-	CheckPolicyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	CheckPolicy(ctx context.Context, body CheckPolicyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// DeletePreAuthKey request
-	DeletePreAuthKey(ctx context.Context, params *DeletePreAuthKeyParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ListPreAuthKeys request
-	ListPreAuthKeys(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// CreatePreAuthKeyWithBody request with any body
-	CreatePreAuthKeyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	CreatePreAuthKey(ctx context.Context, body CreatePreAuthKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ExpirePreAuthKeyWithBody request with any body
-	ExpirePreAuthKeyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	ExpirePreAuthKey(ctx context.Context, body ExpirePreAuthKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ListUsers request
-	ListUsers(ctx context.Context, params *ListUsersParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// CreateUserWithBody request with any body
-	CreateUserWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	CreateUser(ctx context.Context, body CreateUserJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// DeleteUser request
-	DeleteUser(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// RenameUser request
-	RenameUser(ctx context.Context, oldId string, newName string, reqEditors ...RequestEditorFn) (*http.Response, error)
-}
-
-func (c *Client) ListApiKeys(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewListApiKeysRequest(c.Server)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CreateApiKeyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCreateApiKeyRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CreateApiKey(ctx context.Context, body CreateApiKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCreateApiKeyRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ExpireApiKeyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewExpireApiKeyRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ExpireApiKey(ctx context.Context, body ExpireApiKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewExpireApiKeyRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) DeleteApiKey(ctx context.Context, prefix string, params *DeleteApiKeyParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewDeleteApiKeyRequest(c.Server, prefix, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) AuthApproveWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewAuthApproveRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) AuthApprove(ctx context.Context, body AuthApproveJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewAuthApproveRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) AuthRegisterWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewAuthRegisterRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) AuthRegister(ctx context.Context, body AuthRegisterJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewAuthRegisterRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) AuthRejectWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewAuthRejectRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) AuthReject(ctx context.Context, body AuthRejectJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewAuthRejectRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) DebugCreateNodeWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewDebugCreateNodeRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) DebugCreateNode(ctx context.Context, body DebugCreateNodeJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewDebugCreateNodeRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) Health(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewHealthRequest(c.Server)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ListNodes(ctx context.Context, params *ListNodesParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewListNodesRequest(c.Server, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) BackfillNodeIPs(ctx context.Context, params *BackfillNodeIPsParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewBackfillNodeIPsRequest(c.Server, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) RegisterNode(ctx context.Context, params *RegisterNodeParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewRegisterNodeRequest(c.Server, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) DeleteNode(ctx context.Context, nodeId string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewDeleteNodeRequest(c.Server, nodeId)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) GetNode(ctx context.Context, nodeId string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewGetNodeRequest(c.Server, nodeId)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetApprovedRoutesWithBody(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetApprovedRoutesRequestWithBody(c.Server, nodeId, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetApprovedRoutes(ctx context.Context, nodeId string, body SetApprovedRoutesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetApprovedRoutesRequest(c.Server, nodeId, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ExpireNodeWithBody(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewExpireNodeRequestWithBody(c.Server, nodeId, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ExpireNode(ctx context.Context, nodeId string, body ExpireNodeJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewExpireNodeRequest(c.Server, nodeId, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) RenameNode(ctx context.Context, nodeId string, newName string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewRenameNodeRequest(c.Server, nodeId, newName)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetTagsWithBody(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetTagsRequestWithBody(c.Server, nodeId, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetTags(ctx context.Context, nodeId string, body SetTagsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetTagsRequest(c.Server, nodeId, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) GetPolicy(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewGetPolicyRequest(c.Server)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetPolicyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetPolicyRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetPolicy(ctx context.Context, body SetPolicyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetPolicyRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CheckPolicyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCheckPolicyRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CheckPolicy(ctx context.Context, body CheckPolicyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCheckPolicyRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) DeletePreAuthKey(ctx context.Context, params *DeletePreAuthKeyParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewDeletePreAuthKeyRequest(c.Server, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ListPreAuthKeys(ctx context.Context, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewListPreAuthKeysRequest(c.Server)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CreatePreAuthKeyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCreatePreAuthKeyRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CreatePreAuthKey(ctx context.Context, body CreatePreAuthKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCreatePreAuthKeyRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ExpirePreAuthKeyWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewExpirePreAuthKeyRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ExpirePreAuthKey(ctx context.Context, body ExpirePreAuthKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewExpirePreAuthKeyRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ListUsers(ctx context.Context, params *ListUsersParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewListUsersRequest(c.Server, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CreateUserWithBody(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCreateUserRequestWithBody(c.Server, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CreateUser(ctx context.Context, body CreateUserJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCreateUserRequest(c.Server, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) DeleteUser(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewDeleteUserRequest(c.Server, id)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) RenameUser(ctx context.Context, oldId string, newName string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewRenameUserRequest(c.Server, oldId, newName)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-// NewListApiKeysRequest generates requests for ListApiKeys
-func NewListApiKeysRequest(server string) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/apikey")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewCreateApiKeyRequest calls the generic CreateApiKey builder with application/json body
-func NewCreateApiKeyRequest(server string, body CreateApiKeyJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewCreateApiKeyRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewCreateApiKeyRequestWithBody generates requests for CreateApiKey with any type of body
-func NewCreateApiKeyRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/apikey")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewExpireApiKeyRequest calls the generic ExpireApiKey builder with application/json body
-func NewExpireApiKeyRequest(server string, body ExpireApiKeyJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewExpireApiKeyRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewExpireApiKeyRequestWithBody generates requests for ExpireApiKey with any type of body
-func NewExpireApiKeyRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/apikey/expire")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewDeleteApiKeyRequest generates requests for DeleteApiKey
-func NewDeleteApiKeyRequest(server string, prefix string, params *DeleteApiKeyParams) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "prefix", prefix, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/apikey/%s", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Id != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "id", *params.Id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: "uint64"}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodDelete, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewAuthApproveRequest calls the generic AuthApprove builder with application/json body
-func NewAuthApproveRequest(server string, body AuthApproveJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewAuthApproveRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewAuthApproveRequestWithBody generates requests for AuthApprove with any type of body
-func NewAuthApproveRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/auth/approve")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewAuthRegisterRequest calls the generic AuthRegister builder with application/json body
-func NewAuthRegisterRequest(server string, body AuthRegisterJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewAuthRegisterRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewAuthRegisterRequestWithBody generates requests for AuthRegister with any type of body
-func NewAuthRegisterRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/auth/register")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewAuthRejectRequest calls the generic AuthReject builder with application/json body
-func NewAuthRejectRequest(server string, body AuthRejectJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewAuthRejectRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewAuthRejectRequestWithBody generates requests for AuthReject with any type of body
-func NewAuthRejectRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/auth/reject")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewDebugCreateNodeRequest calls the generic DebugCreateNode builder with application/json body
-func NewDebugCreateNodeRequest(server string, body DebugCreateNodeJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewDebugCreateNodeRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewDebugCreateNodeRequestWithBody generates requests for DebugCreateNode with any type of body
-func NewDebugCreateNodeRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/debug/node")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewHealthRequest generates requests for Health
-func NewHealthRequest(server string) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/health")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewListNodesRequest generates requests for ListNodes
-func NewListNodesRequest(server string, params *ListNodesParams) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.User != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "user", *params.User, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewBackfillNodeIPsRequest generates requests for BackfillNodeIPs
-func NewBackfillNodeIPsRequest(server string, params *BackfillNodeIPsParams) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node/backfillips")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Confirmed != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "confirmed", *params.Confirmed, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "boolean", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewRegisterNodeRequest generates requests for RegisterNode
-func NewRegisterNodeRequest(server string, params *RegisterNodeParams) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node/register")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.User != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "user", *params.User, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if params.Key != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "key", *params.Key, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewDeleteNodeRequest generates requests for DeleteNode
-func NewDeleteNodeRequest(server string, nodeId string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "nodeId", nodeId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: "uint64"})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node/%s", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodDelete, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewGetNodeRequest generates requests for GetNode
-func NewGetNodeRequest(server string, nodeId string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "nodeId", nodeId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: "uint64"})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node/%s", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewSetApprovedRoutesRequest calls the generic SetApprovedRoutes builder with application/json body
-func NewSetApprovedRoutesRequest(server string, nodeId string, body SetApprovedRoutesJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewSetApprovedRoutesRequestWithBody(server, nodeId, "application/json", bodyReader)
-}
-
-// NewSetApprovedRoutesRequestWithBody generates requests for SetApprovedRoutes with any type of body
-func NewSetApprovedRoutesRequestWithBody(server string, nodeId string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "nodeId", nodeId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: "uint64"})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node/%s/approve_routes", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewExpireNodeRequest calls the generic ExpireNode builder with application/json body
-func NewExpireNodeRequest(server string, nodeId string, body ExpireNodeJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewExpireNodeRequestWithBody(server, nodeId, "application/json", bodyReader)
-}
-
-// NewExpireNodeRequestWithBody generates requests for ExpireNode with any type of body
-func NewExpireNodeRequestWithBody(server string, nodeId string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "nodeId", nodeId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: "uint64"})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node/%s/expire", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewRenameNodeRequest generates requests for RenameNode
-func NewRenameNodeRequest(server string, nodeId string, newName string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "nodeId", nodeId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: "uint64"})
-	if err != nil {
-		return nil, err
-	}
-
-	var pathParam1 string
-
-	pathParam1, err = runtime.StyleParamWithOptions("simple", false, "newName", newName, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node/%s/rename/%s", pathParam0, pathParam1)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewSetTagsRequest calls the generic SetTags builder with application/json body
-func NewSetTagsRequest(server string, nodeId string, body SetTagsJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewSetTagsRequestWithBody(server, nodeId, "application/json", bodyReader)
-}
-
-// NewSetTagsRequestWithBody generates requests for SetTags with any type of body
-func NewSetTagsRequestWithBody(server string, nodeId string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "nodeId", nodeId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: "uint64"})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/node/%s/tags", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewGetPolicyRequest generates requests for GetPolicy
-func NewGetPolicyRequest(server string) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/policy")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewSetPolicyRequest calls the generic SetPolicy builder with application/json body
-func NewSetPolicyRequest(server string, body SetPolicyJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewSetPolicyRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewSetPolicyRequestWithBody generates requests for SetPolicy with any type of body
-func NewSetPolicyRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/policy")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPut, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewCheckPolicyRequest calls the generic CheckPolicy builder with application/json body
-func NewCheckPolicyRequest(server string, body CheckPolicyJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewCheckPolicyRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewCheckPolicyRequestWithBody generates requests for CheckPolicy with any type of body
-func NewCheckPolicyRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/policy/check")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewDeletePreAuthKeyRequest generates requests for DeletePreAuthKey
-func NewDeletePreAuthKeyRequest(server string, params *DeletePreAuthKeyParams) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/preauthkey")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Id != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "id", *params.Id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: "uint64"}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodDelete, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewListPreAuthKeysRequest generates requests for ListPreAuthKeys
-func NewListPreAuthKeysRequest(server string) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/preauthkey")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewCreatePreAuthKeyRequest calls the generic CreatePreAuthKey builder with application/json body
-func NewCreatePreAuthKeyRequest(server string, body CreatePreAuthKeyJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewCreatePreAuthKeyRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewCreatePreAuthKeyRequestWithBody generates requests for CreatePreAuthKey with any type of body
-func NewCreatePreAuthKeyRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/preauthkey")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewExpirePreAuthKeyRequest calls the generic ExpirePreAuthKey builder with application/json body
-func NewExpirePreAuthKeyRequest(server string, body ExpirePreAuthKeyJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewExpirePreAuthKeyRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewExpirePreAuthKeyRequestWithBody generates requests for ExpirePreAuthKey with any type of body
-func NewExpirePreAuthKeyRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/preauthkey/expire")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewListUsersRequest generates requests for ListUsers
-func NewListUsersRequest(server string, params *ListUsersParams) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/user")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Id != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "id", *params.Id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: "uint64"}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if params.Name != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "name", *params.Name, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if params.Email != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "email", *params.Email, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewCreateUserRequest calls the generic CreateUser builder with application/json body
-func NewCreateUserRequest(server string, body CreateUserJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewCreateUserRequestWithBody(server, "application/json", bodyReader)
-}
-
-// NewCreateUserRequestWithBody generates requests for CreateUser with any type of body
-func NewCreateUserRequestWithBody(server string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/user")
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewDeleteUserRequest generates requests for DeleteUser
-func NewDeleteUserRequest(server string, id string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: "uint64"})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/user/%s", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodDelete, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewRenameUserRequest generates requests for RenameUser
-func NewRenameUserRequest(server string, oldId string, newName string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "oldId", oldId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: "uint64"})
-	if err != nil {
-		return nil, err
-	}
-
-	var pathParam1 string
-
-	pathParam1, err = runtime.StyleParamWithOptions("simple", false, "newName", newName, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v1/user/%s/rename/%s", pathParam0, pathParam1)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-func (c *Client) applyEditors(ctx context.Context, req *http.Request, additionalEditors []RequestEditorFn) error {
-	for _, r := range c.RequestEditors {
-		if err := r(ctx, req); err != nil {
-			return err
-		}
-	}
-	for _, r := range additionalEditors {
-		if err := r(ctx, req); err != nil {
-			return err
-		}
-	}
-	return nil
-}
-
-// ClientWithResponses builds on ClientInterface to offer response payloads
-type ClientWithResponses struct {
-	ClientInterface
-}
-
-// NewClientWithResponses creates a new ClientWithResponses, which wraps
-// Client with return type handling
-func NewClientWithResponses(server string, opts ...ClientOption) (*ClientWithResponses, error) {
-	client, err := NewClient(server, opts...)
-	if err != nil {
-		return nil, err
-	}
-	return &ClientWithResponses{client}, nil
-}
-
-// WithBaseURL overrides the baseURL.
-func WithBaseURL(baseURL string) ClientOption {
-	return func(c *Client) error {
-		newBaseURL, err := url.Parse(baseURL)
-		if err != nil {
-			return err
-		}
-		c.Server = newBaseURL.String()
-		return nil
-	}
-}
-
-// ClientWithResponsesInterface is the interface specification for the client with responses above.
-type ClientWithResponsesInterface interface {
-	// ListApiKeysWithResponse request
-	ListApiKeysWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*ListApiKeysResponse, error)
-
-	// CreateApiKeyWithBodyWithResponse request with any body
-	CreateApiKeyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreateApiKeyResponse, error)
-
-	CreateApiKeyWithResponse(ctx context.Context, body CreateApiKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*CreateApiKeyResponse, error)
-
-	// ExpireApiKeyWithBodyWithResponse request with any body
-	ExpireApiKeyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ExpireApiKeyResponse, error)
-
-	ExpireApiKeyWithResponse(ctx context.Context, body ExpireApiKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*ExpireApiKeyResponse, error)
-
-	// DeleteApiKeyWithResponse request
-	DeleteApiKeyWithResponse(ctx context.Context, prefix string, params *DeleteApiKeyParams, reqEditors ...RequestEditorFn) (*DeleteApiKeyResponse, error)
-
-	// AuthApproveWithBodyWithResponse request with any body
-	AuthApproveWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*AuthApproveResponse, error)
-
-	AuthApproveWithResponse(ctx context.Context, body AuthApproveJSONRequestBody, reqEditors ...RequestEditorFn) (*AuthApproveResponse, error)
-
-	// AuthRegisterWithBodyWithResponse request with any body
-	AuthRegisterWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*AuthRegisterResponse, error)
-
-	AuthRegisterWithResponse(ctx context.Context, body AuthRegisterJSONRequestBody, reqEditors ...RequestEditorFn) (*AuthRegisterResponse, error)
-
-	// AuthRejectWithBodyWithResponse request with any body
-	AuthRejectWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*AuthRejectResponse, error)
-
-	AuthRejectWithResponse(ctx context.Context, body AuthRejectJSONRequestBody, reqEditors ...RequestEditorFn) (*AuthRejectResponse, error)
-
-	// DebugCreateNodeWithBodyWithResponse request with any body
-	DebugCreateNodeWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*DebugCreateNodeResponse, error)
-
-	DebugCreateNodeWithResponse(ctx context.Context, body DebugCreateNodeJSONRequestBody, reqEditors ...RequestEditorFn) (*DebugCreateNodeResponse, error)
-
-	// HealthWithResponse request
-	HealthWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*HealthResponse, error)
-
-	// ListNodesWithResponse request
-	ListNodesWithResponse(ctx context.Context, params *ListNodesParams, reqEditors ...RequestEditorFn) (*ListNodesResponse, error)
-
-	// BackfillNodeIPsWithResponse request
-	BackfillNodeIPsWithResponse(ctx context.Context, params *BackfillNodeIPsParams, reqEditors ...RequestEditorFn) (*BackfillNodeIPsResponse, error)
-
-	// RegisterNodeWithResponse request
-	RegisterNodeWithResponse(ctx context.Context, params *RegisterNodeParams, reqEditors ...RequestEditorFn) (*RegisterNodeResponse, error)
-
-	// DeleteNodeWithResponse request
-	DeleteNodeWithResponse(ctx context.Context, nodeId string, reqEditors ...RequestEditorFn) (*DeleteNodeResponse, error)
-
-	// GetNodeWithResponse request
-	GetNodeWithResponse(ctx context.Context, nodeId string, reqEditors ...RequestEditorFn) (*GetNodeResponse, error)
-
-	// SetApprovedRoutesWithBodyWithResponse request with any body
-	SetApprovedRoutesWithBodyWithResponse(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetApprovedRoutesResponse, error)
-
-	SetApprovedRoutesWithResponse(ctx context.Context, nodeId string, body SetApprovedRoutesJSONRequestBody, reqEditors ...RequestEditorFn) (*SetApprovedRoutesResponse, error)
-
-	// ExpireNodeWithBodyWithResponse request with any body
-	ExpireNodeWithBodyWithResponse(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ExpireNodeResponse, error)
-
-	ExpireNodeWithResponse(ctx context.Context, nodeId string, body ExpireNodeJSONRequestBody, reqEditors ...RequestEditorFn) (*ExpireNodeResponse, error)
-
-	// RenameNodeWithResponse request
-	RenameNodeWithResponse(ctx context.Context, nodeId string, newName string, reqEditors ...RequestEditorFn) (*RenameNodeResponse, error)
-
-	// SetTagsWithBodyWithResponse request with any body
-	SetTagsWithBodyWithResponse(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetTagsResponse, error)
-
-	SetTagsWithResponse(ctx context.Context, nodeId string, body SetTagsJSONRequestBody, reqEditors ...RequestEditorFn) (*SetTagsResponse, error)
-
-	// GetPolicyWithResponse request
-	GetPolicyWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetPolicyResponse, error)
-
-	// SetPolicyWithBodyWithResponse request with any body
-	SetPolicyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetPolicyResponse, error)
-
-	SetPolicyWithResponse(ctx context.Context, body SetPolicyJSONRequestBody, reqEditors ...RequestEditorFn) (*SetPolicyResponse, error)
-
-	// CheckPolicyWithBodyWithResponse request with any body
-	CheckPolicyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CheckPolicyResponse, error)
-
-	CheckPolicyWithResponse(ctx context.Context, body CheckPolicyJSONRequestBody, reqEditors ...RequestEditorFn) (*CheckPolicyResponse, error)
-
-	// DeletePreAuthKeyWithResponse request
-	DeletePreAuthKeyWithResponse(ctx context.Context, params *DeletePreAuthKeyParams, reqEditors ...RequestEditorFn) (*DeletePreAuthKeyResponse, error)
-
-	// ListPreAuthKeysWithResponse request
-	ListPreAuthKeysWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*ListPreAuthKeysResponse, error)
-
-	// CreatePreAuthKeyWithBodyWithResponse request with any body
-	CreatePreAuthKeyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreatePreAuthKeyResponse, error)
-
-	CreatePreAuthKeyWithResponse(ctx context.Context, body CreatePreAuthKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*CreatePreAuthKeyResponse, error)
-
-	// ExpirePreAuthKeyWithBodyWithResponse request with any body
-	ExpirePreAuthKeyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ExpirePreAuthKeyResponse, error)
-
-	ExpirePreAuthKeyWithResponse(ctx context.Context, body ExpirePreAuthKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*ExpirePreAuthKeyResponse, error)
-
-	// ListUsersWithResponse request
-	ListUsersWithResponse(ctx context.Context, params *ListUsersParams, reqEditors ...RequestEditorFn) (*ListUsersResponse, error)
-
-	// CreateUserWithBodyWithResponse request with any body
-	CreateUserWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreateUserResponse, error)
-
-	CreateUserWithResponse(ctx context.Context, body CreateUserJSONRequestBody, reqEditors ...RequestEditorFn) (*CreateUserResponse, error)
-
-	// DeleteUserWithResponse request
-	DeleteUserWithResponse(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*DeleteUserResponse, error)
-
-	// RenameUserWithResponse request
-	RenameUserWithResponse(ctx context.Context, oldId string, newName string, reqEditors ...RequestEditorFn) (*RenameUserResponse, error)
-}
-
-type ListApiKeysResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *ListApiKeysOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ListApiKeysResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ListApiKeysResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ListApiKeysResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type CreateApiKeyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *CreateApiKeyOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r CreateApiKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r CreateApiKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r CreateApiKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ExpireApiKeyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *ExpireApiKeyOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ExpireApiKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ExpireApiKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ExpireApiKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type DeleteApiKeyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *DeleteApiKeyOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r DeleteApiKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r DeleteApiKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r DeleteApiKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type AuthApproveResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *AuthApproveOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r AuthApproveResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r AuthApproveResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r AuthApproveResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type AuthRegisterResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *AuthRegisterOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r AuthRegisterResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r AuthRegisterResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r AuthRegisterResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type AuthRejectResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *AuthRejectOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r AuthRejectResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r AuthRejectResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r AuthRejectResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type DebugCreateNodeResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *NodeOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r DebugCreateNodeResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r DebugCreateNodeResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r DebugCreateNodeResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type HealthResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *HealthResponseBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r HealthResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r HealthResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r HealthResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ListNodesResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *ListNodesOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ListNodesResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ListNodesResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ListNodesResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type BackfillNodeIPsResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *BackfillNodeIPsOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r BackfillNodeIPsResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r BackfillNodeIPsResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r BackfillNodeIPsResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type RegisterNodeResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *NodeOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r RegisterNodeResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r RegisterNodeResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r RegisterNodeResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type DeleteNodeResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *DeleteNodeOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r DeleteNodeResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r DeleteNodeResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r DeleteNodeResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type GetNodeResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *NodeOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r GetNodeResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r GetNodeResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r GetNodeResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type SetApprovedRoutesResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *NodeOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r SetApprovedRoutesResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r SetApprovedRoutesResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r SetApprovedRoutesResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ExpireNodeResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *NodeOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ExpireNodeResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ExpireNodeResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ExpireNodeResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type RenameNodeResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *NodeOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r RenameNodeResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r RenameNodeResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r RenameNodeResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type SetTagsResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *NodeOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r SetTagsResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r SetTagsResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r SetTagsResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type GetPolicyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *PolicyResponseBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r GetPolicyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r GetPolicyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r GetPolicyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type SetPolicyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *PolicyResponseBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r SetPolicyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r SetPolicyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r SetPolicyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type CheckPolicyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *CheckPolicyOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r CheckPolicyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r CheckPolicyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r CheckPolicyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type DeletePreAuthKeyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *DeletePreAuthKeyOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r DeletePreAuthKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r DeletePreAuthKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r DeletePreAuthKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ListPreAuthKeysResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *ListPreAuthKeysOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ListPreAuthKeysResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ListPreAuthKeysResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ListPreAuthKeysResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type CreatePreAuthKeyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *PreAuthKeyOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r CreatePreAuthKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r CreatePreAuthKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r CreatePreAuthKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ExpirePreAuthKeyResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *ExpirePreAuthKeyOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ExpirePreAuthKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ExpirePreAuthKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ExpirePreAuthKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ListUsersResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *ListUsersOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ListUsersResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ListUsersResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ListUsersResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type CreateUserResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *UserOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r CreateUserResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r CreateUserResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r CreateUserResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type DeleteUserResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *DeleteUserOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r DeleteUserResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r DeleteUserResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r DeleteUserResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type RenameUserResponse struct {
-	Body                          []byte
-	HTTPResponse                  *http.Response
-	JSON200                       *UserOutputBody
-	ApplicationproblemJSONDefault *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r RenameUserResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r RenameUserResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r RenameUserResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-// ListApiKeysWithResponse request returning *ListApiKeysResponse
-func (c *ClientWithResponses) ListApiKeysWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*ListApiKeysResponse, error) {
-	rsp, err := c.ListApiKeys(ctx, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseListApiKeysResponse(rsp)
-}
-
-// CreateApiKeyWithBodyWithResponse request with arbitrary body returning *CreateApiKeyResponse
-func (c *ClientWithResponses) CreateApiKeyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreateApiKeyResponse, error) {
-	rsp, err := c.CreateApiKeyWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCreateApiKeyResponse(rsp)
-}
-
-func (c *ClientWithResponses) CreateApiKeyWithResponse(ctx context.Context, body CreateApiKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*CreateApiKeyResponse, error) {
-	rsp, err := c.CreateApiKey(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCreateApiKeyResponse(rsp)
-}
-
-// ExpireApiKeyWithBodyWithResponse request with arbitrary body returning *ExpireApiKeyResponse
-func (c *ClientWithResponses) ExpireApiKeyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ExpireApiKeyResponse, error) {
-	rsp, err := c.ExpireApiKeyWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseExpireApiKeyResponse(rsp)
-}
-
-func (c *ClientWithResponses) ExpireApiKeyWithResponse(ctx context.Context, body ExpireApiKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*ExpireApiKeyResponse, error) {
-	rsp, err := c.ExpireApiKey(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseExpireApiKeyResponse(rsp)
-}
-
-// DeleteApiKeyWithResponse request returning *DeleteApiKeyResponse
-func (c *ClientWithResponses) DeleteApiKeyWithResponse(ctx context.Context, prefix string, params *DeleteApiKeyParams, reqEditors ...RequestEditorFn) (*DeleteApiKeyResponse, error) {
-	rsp, err := c.DeleteApiKey(ctx, prefix, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseDeleteApiKeyResponse(rsp)
-}
-
-// AuthApproveWithBodyWithResponse request with arbitrary body returning *AuthApproveResponse
-func (c *ClientWithResponses) AuthApproveWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*AuthApproveResponse, error) {
-	rsp, err := c.AuthApproveWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseAuthApproveResponse(rsp)
-}
-
-func (c *ClientWithResponses) AuthApproveWithResponse(ctx context.Context, body AuthApproveJSONRequestBody, reqEditors ...RequestEditorFn) (*AuthApproveResponse, error) {
-	rsp, err := c.AuthApprove(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseAuthApproveResponse(rsp)
-}
-
-// AuthRegisterWithBodyWithResponse request with arbitrary body returning *AuthRegisterResponse
-func (c *ClientWithResponses) AuthRegisterWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*AuthRegisterResponse, error) {
-	rsp, err := c.AuthRegisterWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseAuthRegisterResponse(rsp)
-}
-
-func (c *ClientWithResponses) AuthRegisterWithResponse(ctx context.Context, body AuthRegisterJSONRequestBody, reqEditors ...RequestEditorFn) (*AuthRegisterResponse, error) {
-	rsp, err := c.AuthRegister(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseAuthRegisterResponse(rsp)
-}
-
-// AuthRejectWithBodyWithResponse request with arbitrary body returning *AuthRejectResponse
-func (c *ClientWithResponses) AuthRejectWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*AuthRejectResponse, error) {
-	rsp, err := c.AuthRejectWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseAuthRejectResponse(rsp)
-}
-
-func (c *ClientWithResponses) AuthRejectWithResponse(ctx context.Context, body AuthRejectJSONRequestBody, reqEditors ...RequestEditorFn) (*AuthRejectResponse, error) {
-	rsp, err := c.AuthReject(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseAuthRejectResponse(rsp)
-}
-
-// DebugCreateNodeWithBodyWithResponse request with arbitrary body returning *DebugCreateNodeResponse
-func (c *ClientWithResponses) DebugCreateNodeWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*DebugCreateNodeResponse, error) {
-	rsp, err := c.DebugCreateNodeWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseDebugCreateNodeResponse(rsp)
-}
-
-func (c *ClientWithResponses) DebugCreateNodeWithResponse(ctx context.Context, body DebugCreateNodeJSONRequestBody, reqEditors ...RequestEditorFn) (*DebugCreateNodeResponse, error) {
-	rsp, err := c.DebugCreateNode(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseDebugCreateNodeResponse(rsp)
-}
-
-// HealthWithResponse request returning *HealthResponse
-func (c *ClientWithResponses) HealthWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*HealthResponse, error) {
-	rsp, err := c.Health(ctx, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseHealthResponse(rsp)
-}
-
-// ListNodesWithResponse request returning *ListNodesResponse
-func (c *ClientWithResponses) ListNodesWithResponse(ctx context.Context, params *ListNodesParams, reqEditors ...RequestEditorFn) (*ListNodesResponse, error) {
-	rsp, err := c.ListNodes(ctx, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseListNodesResponse(rsp)
-}
-
-// BackfillNodeIPsWithResponse request returning *BackfillNodeIPsResponse
-func (c *ClientWithResponses) BackfillNodeIPsWithResponse(ctx context.Context, params *BackfillNodeIPsParams, reqEditors ...RequestEditorFn) (*BackfillNodeIPsResponse, error) {
-	rsp, err := c.BackfillNodeIPs(ctx, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseBackfillNodeIPsResponse(rsp)
-}
-
-// RegisterNodeWithResponse request returning *RegisterNodeResponse
-func (c *ClientWithResponses) RegisterNodeWithResponse(ctx context.Context, params *RegisterNodeParams, reqEditors ...RequestEditorFn) (*RegisterNodeResponse, error) {
-	rsp, err := c.RegisterNode(ctx, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseRegisterNodeResponse(rsp)
-}
-
-// DeleteNodeWithResponse request returning *DeleteNodeResponse
-func (c *ClientWithResponses) DeleteNodeWithResponse(ctx context.Context, nodeId string, reqEditors ...RequestEditorFn) (*DeleteNodeResponse, error) {
-	rsp, err := c.DeleteNode(ctx, nodeId, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseDeleteNodeResponse(rsp)
-}
-
-// GetNodeWithResponse request returning *GetNodeResponse
-func (c *ClientWithResponses) GetNodeWithResponse(ctx context.Context, nodeId string, reqEditors ...RequestEditorFn) (*GetNodeResponse, error) {
-	rsp, err := c.GetNode(ctx, nodeId, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseGetNodeResponse(rsp)
-}
-
-// SetApprovedRoutesWithBodyWithResponse request with arbitrary body returning *SetApprovedRoutesResponse
-func (c *ClientWithResponses) SetApprovedRoutesWithBodyWithResponse(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetApprovedRoutesResponse, error) {
-	rsp, err := c.SetApprovedRoutesWithBody(ctx, nodeId, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetApprovedRoutesResponse(rsp)
-}
-
-func (c *ClientWithResponses) SetApprovedRoutesWithResponse(ctx context.Context, nodeId string, body SetApprovedRoutesJSONRequestBody, reqEditors ...RequestEditorFn) (*SetApprovedRoutesResponse, error) {
-	rsp, err := c.SetApprovedRoutes(ctx, nodeId, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetApprovedRoutesResponse(rsp)
-}
-
-// ExpireNodeWithBodyWithResponse request with arbitrary body returning *ExpireNodeResponse
-func (c *ClientWithResponses) ExpireNodeWithBodyWithResponse(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ExpireNodeResponse, error) {
-	rsp, err := c.ExpireNodeWithBody(ctx, nodeId, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseExpireNodeResponse(rsp)
-}
-
-func (c *ClientWithResponses) ExpireNodeWithResponse(ctx context.Context, nodeId string, body ExpireNodeJSONRequestBody, reqEditors ...RequestEditorFn) (*ExpireNodeResponse, error) {
-	rsp, err := c.ExpireNode(ctx, nodeId, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseExpireNodeResponse(rsp)
-}
-
-// RenameNodeWithResponse request returning *RenameNodeResponse
-func (c *ClientWithResponses) RenameNodeWithResponse(ctx context.Context, nodeId string, newName string, reqEditors ...RequestEditorFn) (*RenameNodeResponse, error) {
-	rsp, err := c.RenameNode(ctx, nodeId, newName, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseRenameNodeResponse(rsp)
-}
-
-// SetTagsWithBodyWithResponse request with arbitrary body returning *SetTagsResponse
-func (c *ClientWithResponses) SetTagsWithBodyWithResponse(ctx context.Context, nodeId string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetTagsResponse, error) {
-	rsp, err := c.SetTagsWithBody(ctx, nodeId, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetTagsResponse(rsp)
-}
-
-func (c *ClientWithResponses) SetTagsWithResponse(ctx context.Context, nodeId string, body SetTagsJSONRequestBody, reqEditors ...RequestEditorFn) (*SetTagsResponse, error) {
-	rsp, err := c.SetTags(ctx, nodeId, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetTagsResponse(rsp)
-}
-
-// GetPolicyWithResponse request returning *GetPolicyResponse
-func (c *ClientWithResponses) GetPolicyWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*GetPolicyResponse, error) {
-	rsp, err := c.GetPolicy(ctx, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseGetPolicyResponse(rsp)
-}
-
-// SetPolicyWithBodyWithResponse request with arbitrary body returning *SetPolicyResponse
-func (c *ClientWithResponses) SetPolicyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetPolicyResponse, error) {
-	rsp, err := c.SetPolicyWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetPolicyResponse(rsp)
-}
-
-func (c *ClientWithResponses) SetPolicyWithResponse(ctx context.Context, body SetPolicyJSONRequestBody, reqEditors ...RequestEditorFn) (*SetPolicyResponse, error) {
-	rsp, err := c.SetPolicy(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetPolicyResponse(rsp)
-}
-
-// CheckPolicyWithBodyWithResponse request with arbitrary body returning *CheckPolicyResponse
-func (c *ClientWithResponses) CheckPolicyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CheckPolicyResponse, error) {
-	rsp, err := c.CheckPolicyWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCheckPolicyResponse(rsp)
-}
-
-func (c *ClientWithResponses) CheckPolicyWithResponse(ctx context.Context, body CheckPolicyJSONRequestBody, reqEditors ...RequestEditorFn) (*CheckPolicyResponse, error) {
-	rsp, err := c.CheckPolicy(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCheckPolicyResponse(rsp)
-}
-
-// DeletePreAuthKeyWithResponse request returning *DeletePreAuthKeyResponse
-func (c *ClientWithResponses) DeletePreAuthKeyWithResponse(ctx context.Context, params *DeletePreAuthKeyParams, reqEditors ...RequestEditorFn) (*DeletePreAuthKeyResponse, error) {
-	rsp, err := c.DeletePreAuthKey(ctx, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseDeletePreAuthKeyResponse(rsp)
-}
-
-// ListPreAuthKeysWithResponse request returning *ListPreAuthKeysResponse
-func (c *ClientWithResponses) ListPreAuthKeysWithResponse(ctx context.Context, reqEditors ...RequestEditorFn) (*ListPreAuthKeysResponse, error) {
-	rsp, err := c.ListPreAuthKeys(ctx, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseListPreAuthKeysResponse(rsp)
-}
-
-// CreatePreAuthKeyWithBodyWithResponse request with arbitrary body returning *CreatePreAuthKeyResponse
-func (c *ClientWithResponses) CreatePreAuthKeyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreatePreAuthKeyResponse, error) {
-	rsp, err := c.CreatePreAuthKeyWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCreatePreAuthKeyResponse(rsp)
-}
-
-func (c *ClientWithResponses) CreatePreAuthKeyWithResponse(ctx context.Context, body CreatePreAuthKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*CreatePreAuthKeyResponse, error) {
-	rsp, err := c.CreatePreAuthKey(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCreatePreAuthKeyResponse(rsp)
-}
-
-// ExpirePreAuthKeyWithBodyWithResponse request with arbitrary body returning *ExpirePreAuthKeyResponse
-func (c *ClientWithResponses) ExpirePreAuthKeyWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*ExpirePreAuthKeyResponse, error) {
-	rsp, err := c.ExpirePreAuthKeyWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseExpirePreAuthKeyResponse(rsp)
-}
-
-func (c *ClientWithResponses) ExpirePreAuthKeyWithResponse(ctx context.Context, body ExpirePreAuthKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*ExpirePreAuthKeyResponse, error) {
-	rsp, err := c.ExpirePreAuthKey(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseExpirePreAuthKeyResponse(rsp)
-}
-
-// ListUsersWithResponse request returning *ListUsersResponse
-func (c *ClientWithResponses) ListUsersWithResponse(ctx context.Context, params *ListUsersParams, reqEditors ...RequestEditorFn) (*ListUsersResponse, error) {
-	rsp, err := c.ListUsers(ctx, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseListUsersResponse(rsp)
-}
-
-// CreateUserWithBodyWithResponse request with arbitrary body returning *CreateUserResponse
-func (c *ClientWithResponses) CreateUserWithBodyWithResponse(ctx context.Context, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreateUserResponse, error) {
-	rsp, err := c.CreateUserWithBody(ctx, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCreateUserResponse(rsp)
-}
-
-func (c *ClientWithResponses) CreateUserWithResponse(ctx context.Context, body CreateUserJSONRequestBody, reqEditors ...RequestEditorFn) (*CreateUserResponse, error) {
-	rsp, err := c.CreateUser(ctx, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCreateUserResponse(rsp)
-}
-
-// DeleteUserWithResponse request returning *DeleteUserResponse
-func (c *ClientWithResponses) DeleteUserWithResponse(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*DeleteUserResponse, error) {
-	rsp, err := c.DeleteUser(ctx, id, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseDeleteUserResponse(rsp)
-}
-
-// RenameUserWithResponse request returning *RenameUserResponse
-func (c *ClientWithResponses) RenameUserWithResponse(ctx context.Context, oldId string, newName string, reqEditors ...RequestEditorFn) (*RenameUserResponse, error) {
-	rsp, err := c.RenameUser(ctx, oldId, newName, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseRenameUserResponse(rsp)
-}
-
-// ParseListApiKeysResponse parses an HTTP response from a ListApiKeysWithResponse call
-func ParseListApiKeysResponse(rsp *http.Response) (*ListApiKeysResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ListApiKeysResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ListApiKeysOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseCreateApiKeyResponse parses an HTTP response from a CreateApiKeyWithResponse call
-func ParseCreateApiKeyResponse(rsp *http.Response) (*CreateApiKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &CreateApiKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest CreateApiKeyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseExpireApiKeyResponse parses an HTTP response from a ExpireApiKeyWithResponse call
-func ParseExpireApiKeyResponse(rsp *http.Response) (*ExpireApiKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ExpireApiKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ExpireApiKeyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseDeleteApiKeyResponse parses an HTTP response from a DeleteApiKeyWithResponse call
-func ParseDeleteApiKeyResponse(rsp *http.Response) (*DeleteApiKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &DeleteApiKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest DeleteApiKeyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseAuthApproveResponse parses an HTTP response from a AuthApproveWithResponse call
-func ParseAuthApproveResponse(rsp *http.Response) (*AuthApproveResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &AuthApproveResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest AuthApproveOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseAuthRegisterResponse parses an HTTP response from a AuthRegisterWithResponse call
-func ParseAuthRegisterResponse(rsp *http.Response) (*AuthRegisterResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &AuthRegisterResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest AuthRegisterOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseAuthRejectResponse parses an HTTP response from a AuthRejectWithResponse call
-func ParseAuthRejectResponse(rsp *http.Response) (*AuthRejectResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &AuthRejectResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest AuthRejectOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseDebugCreateNodeResponse parses an HTTP response from a DebugCreateNodeWithResponse call
-func ParseDebugCreateNodeResponse(rsp *http.Response) (*DebugCreateNodeResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &DebugCreateNodeResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest NodeOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseHealthResponse parses an HTTP response from a HealthWithResponse call
-func ParseHealthResponse(rsp *http.Response) (*HealthResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &HealthResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest HealthResponseBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseListNodesResponse parses an HTTP response from a ListNodesWithResponse call
-func ParseListNodesResponse(rsp *http.Response) (*ListNodesResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ListNodesResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ListNodesOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseBackfillNodeIPsResponse parses an HTTP response from a BackfillNodeIPsWithResponse call
-func ParseBackfillNodeIPsResponse(rsp *http.Response) (*BackfillNodeIPsResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &BackfillNodeIPsResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest BackfillNodeIPsOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseRegisterNodeResponse parses an HTTP response from a RegisterNodeWithResponse call
-func ParseRegisterNodeResponse(rsp *http.Response) (*RegisterNodeResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &RegisterNodeResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest NodeOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseDeleteNodeResponse parses an HTTP response from a DeleteNodeWithResponse call
-func ParseDeleteNodeResponse(rsp *http.Response) (*DeleteNodeResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &DeleteNodeResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest DeleteNodeOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseGetNodeResponse parses an HTTP response from a GetNodeWithResponse call
-func ParseGetNodeResponse(rsp *http.Response) (*GetNodeResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &GetNodeResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest NodeOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseSetApprovedRoutesResponse parses an HTTP response from a SetApprovedRoutesWithResponse call
-func ParseSetApprovedRoutesResponse(rsp *http.Response) (*SetApprovedRoutesResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &SetApprovedRoutesResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest NodeOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseExpireNodeResponse parses an HTTP response from a ExpireNodeWithResponse call
-func ParseExpireNodeResponse(rsp *http.Response) (*ExpireNodeResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ExpireNodeResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest NodeOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseRenameNodeResponse parses an HTTP response from a RenameNodeWithResponse call
-func ParseRenameNodeResponse(rsp *http.Response) (*RenameNodeResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &RenameNodeResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest NodeOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseSetTagsResponse parses an HTTP response from a SetTagsWithResponse call
-func ParseSetTagsResponse(rsp *http.Response) (*SetTagsResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &SetTagsResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest NodeOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseGetPolicyResponse parses an HTTP response from a GetPolicyWithResponse call
-func ParseGetPolicyResponse(rsp *http.Response) (*GetPolicyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &GetPolicyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest PolicyResponseBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseSetPolicyResponse parses an HTTP response from a SetPolicyWithResponse call
-func ParseSetPolicyResponse(rsp *http.Response) (*SetPolicyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &SetPolicyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest PolicyResponseBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseCheckPolicyResponse parses an HTTP response from a CheckPolicyWithResponse call
-func ParseCheckPolicyResponse(rsp *http.Response) (*CheckPolicyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &CheckPolicyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest CheckPolicyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseDeletePreAuthKeyResponse parses an HTTP response from a DeletePreAuthKeyWithResponse call
-func ParseDeletePreAuthKeyResponse(rsp *http.Response) (*DeletePreAuthKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &DeletePreAuthKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest DeletePreAuthKeyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseListPreAuthKeysResponse parses an HTTP response from a ListPreAuthKeysWithResponse call
-func ParseListPreAuthKeysResponse(rsp *http.Response) (*ListPreAuthKeysResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ListPreAuthKeysResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ListPreAuthKeysOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseCreatePreAuthKeyResponse parses an HTTP response from a CreatePreAuthKeyWithResponse call
-func ParseCreatePreAuthKeyResponse(rsp *http.Response) (*CreatePreAuthKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &CreatePreAuthKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest PreAuthKeyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseExpirePreAuthKeyResponse parses an HTTP response from a ExpirePreAuthKeyWithResponse call
-func ParseExpirePreAuthKeyResponse(rsp *http.Response) (*ExpirePreAuthKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ExpirePreAuthKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ExpirePreAuthKeyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseListUsersResponse parses an HTTP response from a ListUsersWithResponse call
-func ParseListUsersResponse(rsp *http.Response) (*ListUsersResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ListUsersResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ListUsersOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseCreateUserResponse parses an HTTP response from a CreateUserWithResponse call
-func ParseCreateUserResponse(rsp *http.Response) (*CreateUserResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &CreateUserResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest UserOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseDeleteUserResponse parses an HTTP response from a DeleteUserWithResponse call
-func ParseDeleteUserResponse(rsp *http.Response) (*DeleteUserResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &DeleteUserResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest DeleteUserOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseRenameUserResponse parses an HTTP response from a RenameUserWithResponse call
-func ParseRenameUserResponse(rsp *http.Response) (*RenameUserResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &RenameUserResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest UserOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && true:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSONDefault = &dest
-
-	}
-
-	return response, nil
-}
diff --git a/gen/client/v2/client.gen.go b/gen/client/v2/client.gen.go
deleted file mode 100644
index c31b47ab1..000000000
--- a/gen/client/v2/client.gen.go
+++ /dev/null
@@ -1,4013 +0,0 @@
-// Package clientv2 provides primitives to interact with the openapi HTTP API.
-//
-// Code generated by github.com/oapi-codegen/oapi-codegen/v2 version v2.7.1 DO NOT EDIT.
-package clientv2
-
-import (
-	"bytes"
-	"context"
-	"encoding/json"
-	"fmt"
-	"io"
-	"net/http"
-	"net/url"
-	"strings"
-	"time"
-
-	"github.com/oapi-codegen/runtime"
-	openapi_types "github.com/oapi-codegen/runtime/types"
-)
-
-const (
-	BasicAuthScopes  basicAuthContextKey  = "basicAuth.Scopes"
-	BearerAuthScopes bearerAuthContextKey = "bearerAuth.Scopes"
-)
-
-// CreateKeyRequest defines model for CreateKeyRequest.
-type CreateKeyRequest struct {
-	Capabilities *KeyCapabilities `json:"capabilities,omitempty"`
-	Description  *string          `json:"description,omitempty"`
-
-	// ExpirySeconds Lifetime in seconds; defaults to 90 days. Auth keys only.
-	ExpirySeconds *int64 `json:"expirySeconds,omitempty"`
-
-	// KeyType Key kind: "auth" (default) or "client" (OAuth client).
-	KeyType *string `json:"keyType,omitempty"`
-
-	// Scopes OAuth scopes granted to the client. keyType=client only.
-	Scopes *[]string `json:"scopes,omitempty"`
-
-	// Tags Tags the client may assign. keyType=client only.
-	Tags *[]string `json:"tags,omitempty"`
-}
-
-// DeleteKeyOutputBody defines model for DeleteKeyOutputBody.
-type DeleteKeyOutputBody = map[string]interface{}
-
-// Device defines model for Device.
-type Device struct {
-	Addresses         []string   `json:"addresses"`
-	AdvertisedRoutes  *[]string  `json:"advertisedRoutes,omitempty"`
-	Authorized        bool       `json:"authorized"`
-	ClientVersion     string     `json:"clientVersion"`
-	Created           time.Time  `json:"created"`
-	EnabledRoutes     *[]string  `json:"enabledRoutes,omitempty"`
-	Expires           *time.Time `json:"expires,omitempty"`
-	Hostname          string     `json:"hostname"`
-	Id                string     `json:"id"`
-	IsEphemeral       bool       `json:"isEphemeral"`
-	KeyExpiryDisabled bool       `json:"keyExpiryDisabled"`
-	LastSeen          *time.Time `json:"lastSeen,omitempty"`
-	MachineKey        string     `json:"machineKey"`
-	Name              string     `json:"name"`
-	NodeId            string     `json:"nodeId"`
-	NodeKey           string     `json:"nodeKey"`
-	Os                string     `json:"os"`
-	Tags              []string   `json:"tags"`
-	UpdateAvailable   bool       `json:"updateAvailable"`
-	User              string     `json:"user"`
-}
-
-// DeviceRoutes defines model for DeviceRoutes.
-type DeviceRoutes struct {
-	AdvertisedRoutes []string `json:"advertisedRoutes"`
-	EnabledRoutes    []string `json:"enabledRoutes"`
-}
-
-// EmptyOutputBody defines model for EmptyOutputBody.
-type EmptyOutputBody = map[string]interface{}
-
-// ErrorDetail defines model for ErrorDetail.
-type ErrorDetail struct {
-	// Location Where the error occurred, e.g. 'body.items[3].tags' or 'path.thing-id'
-	Location *string `json:"location,omitempty"`
-
-	// Message Error message text
-	Message *string `json:"message,omitempty"`
-
-	// Value The value at the given location
-	Value interface{} `json:"value,omitempty"`
-}
-
-// ErrorModel defines model for ErrorModel.
-type ErrorModel struct {
-	// Detail A human-readable explanation specific to this occurrence of the problem.
-	Detail *string `json:"detail,omitempty"`
-
-	// Errors Optional list of individual error details
-	Errors *[]ErrorDetail `json:"errors,omitempty"`
-
-	// Instance A URI reference that identifies the specific occurrence of the problem.
-	Instance *string `json:"instance,omitempty"`
-
-	// Status HTTP status code
-	Status *int64 `json:"status,omitempty"`
-
-	// Title A short, human-readable summary of the problem type. This value should not change between occurrences of the error.
-	Title *string `json:"title,omitempty"`
-
-	// Type A URI reference to human-readable documentation for the error.
-	Type *string `json:"type,omitempty"`
-}
-
-// Key defines model for Key.
-type Key struct {
-	Capabilities  KeyCapabilities `json:"capabilities"`
-	Created       time.Time       `json:"created"`
-	Description   *string         `json:"description,omitempty"`
-	Expires       *time.Time      `json:"expires,omitempty"`
-	ExpirySeconds *int64          `json:"expirySeconds,omitempty"`
-	Id            string          `json:"id"`
-	Invalid       bool            `json:"invalid"`
-	Key           *string         `json:"key,omitempty"`
-	KeyType       string          `json:"keyType"`
-	Revoked       *time.Time      `json:"revoked,omitempty"`
-	Scopes        *[]string       `json:"scopes,omitempty"`
-	Tags          *[]string       `json:"tags,omitempty"`
-	UserId        *string         `json:"userId,omitempty"`
-}
-
-// KeyCapabilities defines model for KeyCapabilities.
-type KeyCapabilities struct {
-	Devices KeyDeviceCapabilities `json:"devices"`
-}
-
-// KeyDeviceCapabilities defines model for KeyDeviceCapabilities.
-type KeyDeviceCapabilities struct {
-	Create KeyDeviceCreateCapabilities `json:"create"`
-}
-
-// KeyDeviceCreateCapabilities defines model for KeyDeviceCreateCapabilities.
-type KeyDeviceCreateCapabilities struct {
-	Ephemeral     bool      `json:"ephemeral"`
-	Preauthorized bool      `json:"preauthorized"`
-	Reusable      bool      `json:"reusable"`
-	Tags          *[]string `json:"tags"`
-}
-
-// ListDevicesOutputBody defines model for ListDevicesOutputBody.
-type ListDevicesOutputBody struct {
-	Devices []Device `json:"devices"`
-}
-
-// ListKeysOutputBody defines model for ListKeysOutputBody.
-type ListKeysOutputBody struct {
-	Keys []Key `json:"keys"`
-}
-
-// ListUsersOutputBody defines model for ListUsersOutputBody.
-type ListUsersOutputBody struct {
-	Users []User `json:"users"`
-}
-
-// SetAuthorizedRequest defines model for SetAuthorizedRequest.
-type SetAuthorizedRequest struct {
-	Authorized bool `json:"authorized"`
-}
-
-// SetKeyRequest defines model for SetKeyRequest.
-type SetKeyRequest struct {
-	KeyExpiryDisabled bool `json:"keyExpiryDisabled"`
-}
-
-// SetNameRequest defines model for SetNameRequest.
-type SetNameRequest struct {
-	Name string `json:"name"`
-}
-
-// SetSubnetRoutesRequest defines model for SetSubnetRoutesRequest.
-type SetSubnetRoutesRequest struct {
-	Routes []string `json:"routes"`
-}
-
-// SetTagsRequest defines model for SetTagsRequest.
-type SetTagsRequest struct {
-	Tags *[]string `json:"tags"`
-}
-
-// TailnetSettings defines model for TailnetSettings.
-type TailnetSettings struct {
-	AclsExternalLink                       string `json:"aclsExternalLink"`
-	AclsExternallyManagedOn                bool   `json:"aclsExternallyManagedOn"`
-	DevicesApprovalOn                      bool   `json:"devicesApprovalOn"`
-	DevicesAutoUpdatesOn                   bool   `json:"devicesAutoUpdatesOn"`
-	DevicesKeyDurationDays                 int64  `json:"devicesKeyDurationDays"`
-	HttpsEnabled                           bool   `json:"httpsEnabled"`
-	NetworkFlowLoggingOn                   bool   `json:"networkFlowLoggingOn"`
-	PostureIdentityCollectionOn            bool   `json:"postureIdentityCollectionOn"`
-	RegionalRoutingOn                      bool   `json:"regionalRoutingOn"`
-	UsersApprovalOn                        bool   `json:"usersApprovalOn"`
-	UsersRoleAllowedToJoinExternalTailnets string `json:"usersRoleAllowedToJoinExternalTailnets"`
-}
-
-// User defines model for User.
-type User struct {
-	Created            time.Time `json:"created"`
-	CurrentlyConnected bool      `json:"currentlyConnected"`
-	DeviceCount        int64     `json:"deviceCount"`
-	DisplayName        string    `json:"displayName"`
-	Id                 string    `json:"id"`
-	LastSeen           time.Time `json:"lastSeen"`
-	LoginName          string    `json:"loginName"`
-	ProfilePicUrl      string    `json:"profilePicUrl"`
-	Role               string    `json:"role"`
-	Status             string    `json:"status"`
-	TailnetId          string    `json:"tailnetId"`
-	Type               string    `json:"type"`
-}
-
-// basicAuthContextKey is the context key for basicAuth security scheme
-type basicAuthContextKey string
-
-// bearerAuthContextKey is the context key for bearerAuth security scheme
-type bearerAuthContextKey string
-
-// DeleteDeviceParams defines parameters for DeleteDevice.
-type DeleteDeviceParams struct {
-	// Fields Set to "all" for route fields.
-	Fields *string `form:"fields,omitempty" json:"fields,omitempty"`
-}
-
-// GetDeviceParams defines parameters for GetDevice.
-type GetDeviceParams struct {
-	// Fields Set to "all" for route fields.
-	Fields *string `form:"fields,omitempty" json:"fields,omitempty"`
-}
-
-// GetDeviceRoutesParams defines parameters for GetDeviceRoutes.
-type GetDeviceRoutesParams struct {
-	// Fields Set to "all" for route fields.
-	Fields *string `form:"fields,omitempty" json:"fields,omitempty"`
-}
-
-// GetACLParams defines parameters for GetACL.
-type GetACLParams struct {
-	// Details Accepted for compatibility; ignored.
-	Details *bool   `form:"details,omitempty" json:"details,omitempty"`
-	Accept  *string `json:"Accept,omitempty"`
-}
-
-// SetACLJSONBody defines parameters for SetACL.
-type SetACLJSONBody = openapi_types.File
-
-// SetACLParams defines parameters for SetACL.
-type SetACLParams struct {
-	IfMatch *string `json:"If-Match,omitempty"`
-	Accept  *string `json:"Accept,omitempty"`
-}
-
-// ListDevicesParams defines parameters for ListDevices.
-type ListDevicesParams struct {
-	Fields *string `form:"fields,omitempty" json:"fields,omitempty"`
-}
-
-// ListKeysParams defines parameters for ListKeys.
-type ListKeysParams struct {
-	// All Accepted for compatibility; Headscale returns all keys.
-	All *bool `form:"all,omitempty" json:"all,omitempty"`
-}
-
-// UpdateTailnetSettingsJSONBody defines parameters for UpdateTailnetSettings.
-type UpdateTailnetSettingsJSONBody = interface{}
-
-// ListUsersParams defines parameters for ListUsers.
-type ListUsersParams struct {
-	// Type Filter by user type; Headscale users are all "member".
-	Type *string `form:"type,omitempty" json:"type,omitempty"`
-
-	// Role Filter by user role; Headscale users are all "member".
-	Role *string `form:"role,omitempty" json:"role,omitempty"`
-}
-
-// AuthorizeDeviceJSONRequestBody defines body for AuthorizeDevice for application/json ContentType.
-type AuthorizeDeviceJSONRequestBody = SetAuthorizedRequest
-
-// SetDeviceKeyJSONRequestBody defines body for SetDeviceKey for application/json ContentType.
-type SetDeviceKeyJSONRequestBody = SetKeyRequest
-
-// SetDeviceNameJSONRequestBody defines body for SetDeviceName for application/json ContentType.
-type SetDeviceNameJSONRequestBody = SetNameRequest
-
-// SetDeviceRoutesJSONRequestBody defines body for SetDeviceRoutes for application/json ContentType.
-type SetDeviceRoutesJSONRequestBody = SetSubnetRoutesRequest
-
-// SetDeviceTagsJSONRequestBody defines body for SetDeviceTags for application/json ContentType.
-type SetDeviceTagsJSONRequestBody = SetTagsRequest
-
-// SetACLJSONRequestBody defines body for SetACL for application/json ContentType.
-type SetACLJSONRequestBody = SetACLJSONBody
-
-// CreateKeyJSONRequestBody defines body for CreateKey for application/json ContentType.
-type CreateKeyJSONRequestBody = CreateKeyRequest
-
-// UpdateTailnetSettingsJSONRequestBody defines body for UpdateTailnetSettings for application/json ContentType.
-type UpdateTailnetSettingsJSONRequestBody = UpdateTailnetSettingsJSONBody
-
-// RequestEditorFn  is the function signature for the RequestEditor callback function
-type RequestEditorFn func(ctx context.Context, req *http.Request) error
-
-// Doer performs HTTP requests.
-//
-// The standard http.Client implements this interface.
-type HttpRequestDoer interface {
-	Do(req *http.Request) (*http.Response, error)
-}
-
-// Client which conforms to the OpenAPI3 specification for this service.
-type Client struct {
-	// The endpoint of the server conforming to this interface, with scheme,
-	// https://api.deepmap.com for example. This can contain a path relative
-	// to the server, such as https://api.deepmap.com/dev-test, and all the
-	// paths in the swagger spec will be appended to the server.
-	Server string
-
-	// Doer for performing requests, typically a *http.Client with any
-	// customized settings, such as certificate chains.
-	Client HttpRequestDoer
-
-	// A list of callbacks for modifying requests which are generated before sending over
-	// the network.
-	RequestEditors []RequestEditorFn
-}
-
-// ClientOption allows setting custom parameters during construction
-type ClientOption func(*Client) error
-
-// Creates a new Client, with reasonable defaults
-func NewClient(server string, opts ...ClientOption) (*Client, error) {
-	// create a client with sane default values
-	client := Client{
-		Server: server,
-	}
-	// mutate client and add all optional params
-	for _, o := range opts {
-		if err := o(&client); err != nil {
-			return nil, err
-		}
-	}
-	// ensure the server URL always has a trailing slash
-	if !strings.HasSuffix(client.Server, "/") {
-		client.Server += "/"
-	}
-	// create httpClient, if not already present
-	if client.Client == nil {
-		client.Client = &http.Client{}
-	}
-	return &client, nil
-}
-
-// WithHTTPClient allows overriding the default Doer, which is
-// automatically created using http.Client. This is useful for tests.
-func WithHTTPClient(doer HttpRequestDoer) ClientOption {
-	return func(c *Client) error {
-		c.Client = doer
-		return nil
-	}
-}
-
-// WithRequestEditorFn allows setting up a callback function, which will be
-// called right before sending the request. This can be used to mutate the request.
-func WithRequestEditorFn(fn RequestEditorFn) ClientOption {
-	return func(c *Client) error {
-		c.RequestEditors = append(c.RequestEditors, fn)
-		return nil
-	}
-}
-
-// The interface specification for the client above.
-type ClientInterface interface {
-	// DeleteDevice request
-	DeleteDevice(ctx context.Context, id string, params *DeleteDeviceParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// GetDevice request
-	GetDevice(ctx context.Context, id string, params *GetDeviceParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// AuthorizeDeviceWithBody request with any body
-	AuthorizeDeviceWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	AuthorizeDevice(ctx context.Context, id string, body AuthorizeDeviceJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// SetDeviceKeyWithBody request with any body
-	SetDeviceKeyWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	SetDeviceKey(ctx context.Context, id string, body SetDeviceKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// SetDeviceNameWithBody request with any body
-	SetDeviceNameWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	SetDeviceName(ctx context.Context, id string, body SetDeviceNameJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// GetDeviceRoutes request
-	GetDeviceRoutes(ctx context.Context, id string, params *GetDeviceRoutesParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// SetDeviceRoutesWithBody request with any body
-	SetDeviceRoutesWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	SetDeviceRoutes(ctx context.Context, id string, body SetDeviceRoutesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// SetDeviceTagsWithBody request with any body
-	SetDeviceTagsWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	SetDeviceTags(ctx context.Context, id string, body SetDeviceTagsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// GetACL request
-	GetACL(ctx context.Context, tailnet string, params *GetACLParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// SetACLWithBody request with any body
-	SetACLWithBody(ctx context.Context, tailnet string, params *SetACLParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	SetACL(ctx context.Context, tailnet string, params *SetACLParams, body SetACLJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ListDevices request
-	ListDevices(ctx context.Context, tailnet string, params *ListDevicesParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ListKeys request
-	ListKeys(ctx context.Context, tailnet string, params *ListKeysParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// CreateKeyWithBody request with any body
-	CreateKeyWithBody(ctx context.Context, tailnet string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	CreateKey(ctx context.Context, tailnet string, body CreateKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// DeleteKey request
-	DeleteKey(ctx context.Context, tailnet string, keyId string, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// GetKey request
-	GetKey(ctx context.Context, tailnet string, keyId string, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// GetTailnetSettings request
-	GetTailnetSettings(ctx context.Context, tailnet string, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// UpdateTailnetSettingsWithBody request with any body
-	UpdateTailnetSettingsWithBody(ctx context.Context, tailnet string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	UpdateTailnetSettings(ctx context.Context, tailnet string, body UpdateTailnetSettingsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// ListUsers request
-	ListUsers(ctx context.Context, tailnet string, params *ListUsersParams, reqEditors ...RequestEditorFn) (*http.Response, error)
-
-	// GetUser request
-	GetUser(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*http.Response, error)
-}
-
-func (c *Client) DeleteDevice(ctx context.Context, id string, params *DeleteDeviceParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewDeleteDeviceRequest(c.Server, id, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) GetDevice(ctx context.Context, id string, params *GetDeviceParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewGetDeviceRequest(c.Server, id, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) AuthorizeDeviceWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewAuthorizeDeviceRequestWithBody(c.Server, id, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) AuthorizeDevice(ctx context.Context, id string, body AuthorizeDeviceJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewAuthorizeDeviceRequest(c.Server, id, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetDeviceKeyWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetDeviceKeyRequestWithBody(c.Server, id, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetDeviceKey(ctx context.Context, id string, body SetDeviceKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetDeviceKeyRequest(c.Server, id, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetDeviceNameWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetDeviceNameRequestWithBody(c.Server, id, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetDeviceName(ctx context.Context, id string, body SetDeviceNameJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetDeviceNameRequest(c.Server, id, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) GetDeviceRoutes(ctx context.Context, id string, params *GetDeviceRoutesParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewGetDeviceRoutesRequest(c.Server, id, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetDeviceRoutesWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetDeviceRoutesRequestWithBody(c.Server, id, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetDeviceRoutes(ctx context.Context, id string, body SetDeviceRoutesJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetDeviceRoutesRequest(c.Server, id, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetDeviceTagsWithBody(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetDeviceTagsRequestWithBody(c.Server, id, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetDeviceTags(ctx context.Context, id string, body SetDeviceTagsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetDeviceTagsRequest(c.Server, id, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) GetACL(ctx context.Context, tailnet string, params *GetACLParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewGetACLRequest(c.Server, tailnet, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetACLWithBody(ctx context.Context, tailnet string, params *SetACLParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetACLRequestWithBody(c.Server, tailnet, params, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) SetACL(ctx context.Context, tailnet string, params *SetACLParams, body SetACLJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewSetACLRequest(c.Server, tailnet, params, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ListDevices(ctx context.Context, tailnet string, params *ListDevicesParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewListDevicesRequest(c.Server, tailnet, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ListKeys(ctx context.Context, tailnet string, params *ListKeysParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewListKeysRequest(c.Server, tailnet, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CreateKeyWithBody(ctx context.Context, tailnet string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCreateKeyRequestWithBody(c.Server, tailnet, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) CreateKey(ctx context.Context, tailnet string, body CreateKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewCreateKeyRequest(c.Server, tailnet, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) DeleteKey(ctx context.Context, tailnet string, keyId string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewDeleteKeyRequest(c.Server, tailnet, keyId)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) GetKey(ctx context.Context, tailnet string, keyId string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewGetKeyRequest(c.Server, tailnet, keyId)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) GetTailnetSettings(ctx context.Context, tailnet string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewGetTailnetSettingsRequest(c.Server, tailnet)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) UpdateTailnetSettingsWithBody(ctx context.Context, tailnet string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewUpdateTailnetSettingsRequestWithBody(c.Server, tailnet, contentType, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) UpdateTailnetSettings(ctx context.Context, tailnet string, body UpdateTailnetSettingsJSONRequestBody, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewUpdateTailnetSettingsRequest(c.Server, tailnet, body)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) ListUsers(ctx context.Context, tailnet string, params *ListUsersParams, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewListUsersRequest(c.Server, tailnet, params)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-func (c *Client) GetUser(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*http.Response, error) {
-	req, err := NewGetUserRequest(c.Server, id)
-	if err != nil {
-		return nil, err
-	}
-	req = req.WithContext(ctx)
-	if err := c.applyEditors(ctx, req, reqEditors); err != nil {
-		return nil, err
-	}
-	return c.Client.Do(req)
-}
-
-// NewDeleteDeviceRequest generates requests for DeleteDevice
-func NewDeleteDeviceRequest(server string, id string, params *DeleteDeviceParams) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/device/%s", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Fields != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "fields", *params.Fields, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodDelete, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewGetDeviceRequest generates requests for GetDevice
-func NewGetDeviceRequest(server string, id string, params *GetDeviceParams) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/device/%s", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Fields != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "fields", *params.Fields, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewAuthorizeDeviceRequest calls the generic AuthorizeDevice builder with application/json body
-func NewAuthorizeDeviceRequest(server string, id string, body AuthorizeDeviceJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewAuthorizeDeviceRequestWithBody(server, id, "application/json", bodyReader)
-}
-
-// NewAuthorizeDeviceRequestWithBody generates requests for AuthorizeDevice with any type of body
-func NewAuthorizeDeviceRequestWithBody(server string, id string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/device/%s/authorized", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewSetDeviceKeyRequest calls the generic SetDeviceKey builder with application/json body
-func NewSetDeviceKeyRequest(server string, id string, body SetDeviceKeyJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewSetDeviceKeyRequestWithBody(server, id, "application/json", bodyReader)
-}
-
-// NewSetDeviceKeyRequestWithBody generates requests for SetDeviceKey with any type of body
-func NewSetDeviceKeyRequestWithBody(server string, id string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/device/%s/key", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewSetDeviceNameRequest calls the generic SetDeviceName builder with application/json body
-func NewSetDeviceNameRequest(server string, id string, body SetDeviceNameJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewSetDeviceNameRequestWithBody(server, id, "application/json", bodyReader)
-}
-
-// NewSetDeviceNameRequestWithBody generates requests for SetDeviceName with any type of body
-func NewSetDeviceNameRequestWithBody(server string, id string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/device/%s/name", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewGetDeviceRoutesRequest generates requests for GetDeviceRoutes
-func NewGetDeviceRoutesRequest(server string, id string, params *GetDeviceRoutesParams) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/device/%s/routes", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Fields != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "fields", *params.Fields, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewSetDeviceRoutesRequest calls the generic SetDeviceRoutes builder with application/json body
-func NewSetDeviceRoutesRequest(server string, id string, body SetDeviceRoutesJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewSetDeviceRoutesRequestWithBody(server, id, "application/json", bodyReader)
-}
-
-// NewSetDeviceRoutesRequestWithBody generates requests for SetDeviceRoutes with any type of body
-func NewSetDeviceRoutesRequestWithBody(server string, id string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/device/%s/routes", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewSetDeviceTagsRequest calls the generic SetDeviceTags builder with application/json body
-func NewSetDeviceTagsRequest(server string, id string, body SetDeviceTagsJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewSetDeviceTagsRequestWithBody(server, id, "application/json", bodyReader)
-}
-
-// NewSetDeviceTagsRequestWithBody generates requests for SetDeviceTags with any type of body
-func NewSetDeviceTagsRequestWithBody(server string, id string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/device/%s/tags", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewGetACLRequest generates requests for GetACL
-func NewGetACLRequest(server string, tailnet string, params *GetACLParams) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/acl", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Details != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "details", *params.Details, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "boolean", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-
-		if params.Accept != nil {
-			var headerParam0 string
-
-			headerParam0, err = runtime.StyleParamWithOptions("simple", false, "Accept", *params.Accept, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationHeader, Type: "string", Format: ""})
-			if err != nil {
-				return nil, err
-			}
-
-			req.Header.Set("Accept", headerParam0)
-		}
-
-	}
-
-	return req, nil
-}
-
-// NewSetACLRequest calls the generic SetACL builder with application/json body
-func NewSetACLRequest(server string, tailnet string, params *SetACLParams, body SetACLJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewSetACLRequestWithBody(server, tailnet, params, "application/json", bodyReader)
-}
-
-// NewSetACLRequestWithBody generates requests for SetACL with any type of body
-func NewSetACLRequestWithBody(server string, tailnet string, params *SetACLParams, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/acl", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	if params != nil {
-
-		if params.IfMatch != nil {
-			var headerParam0 string
-
-			headerParam0, err = runtime.StyleParamWithOptions("simple", false, "If-Match", *params.IfMatch, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationHeader, Type: "string", Format: ""})
-			if err != nil {
-				return nil, err
-			}
-
-			req.Header.Set("If-Match", headerParam0)
-		}
-
-		if params.Accept != nil {
-			var headerParam1 string
-
-			headerParam1, err = runtime.StyleParamWithOptions("simple", false, "Accept", *params.Accept, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationHeader, Type: "string", Format: ""})
-			if err != nil {
-				return nil, err
-			}
-
-			req.Header.Set("Accept", headerParam1)
-		}
-
-	}
-
-	return req, nil
-}
-
-// NewListDevicesRequest generates requests for ListDevices
-func NewListDevicesRequest(server string, tailnet string, params *ListDevicesParams) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/devices", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Fields != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "fields", *params.Fields, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewListKeysRequest generates requests for ListKeys
-func NewListKeysRequest(server string, tailnet string, params *ListKeysParams) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/keys", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.All != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "all", *params.All, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "boolean", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewCreateKeyRequest calls the generic CreateKey builder with application/json body
-func NewCreateKeyRequest(server string, tailnet string, body CreateKeyJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewCreateKeyRequestWithBody(server, tailnet, "application/json", bodyReader)
-}
-
-// NewCreateKeyRequestWithBody generates requests for CreateKey with any type of body
-func NewCreateKeyRequestWithBody(server string, tailnet string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/keys", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPost, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewDeleteKeyRequest generates requests for DeleteKey
-func NewDeleteKeyRequest(server string, tailnet string, keyId string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	var pathParam1 string
-
-	pathParam1, err = runtime.StyleParamWithOptions("simple", false, "keyId", keyId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/keys/%s", pathParam0, pathParam1)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodDelete, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewGetKeyRequest generates requests for GetKey
-func NewGetKeyRequest(server string, tailnet string, keyId string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	var pathParam1 string
-
-	pathParam1, err = runtime.StyleParamWithOptions("simple", false, "keyId", keyId, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/keys/%s", pathParam0, pathParam1)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewGetTailnetSettingsRequest generates requests for GetTailnetSettings
-func NewGetTailnetSettingsRequest(server string, tailnet string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/settings", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewUpdateTailnetSettingsRequest calls the generic UpdateTailnetSettings builder with application/json body
-func NewUpdateTailnetSettingsRequest(server string, tailnet string, body UpdateTailnetSettingsJSONRequestBody) (*http.Request, error) {
-	var bodyReader io.Reader
-	buf, err := json.Marshal(body)
-	if err != nil {
-		return nil, err
-	}
-	bodyReader = bytes.NewReader(buf)
-	return NewUpdateTailnetSettingsRequestWithBody(server, tailnet, "application/json", bodyReader)
-}
-
-// NewUpdateTailnetSettingsRequestWithBody generates requests for UpdateTailnetSettings with any type of body
-func NewUpdateTailnetSettingsRequestWithBody(server string, tailnet string, contentType string, body io.Reader) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/settings", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodPatch, queryURL.String(), body)
-	if err != nil {
-		return nil, err
-	}
-
-	req.Header.Add("Content-Type", contentType)
-
-	return req, nil
-}
-
-// NewListUsersRequest generates requests for ListUsers
-func NewListUsersRequest(server string, tailnet string, params *ListUsersParams) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "tailnet", tailnet, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/tailnet/%s/users", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	if params != nil {
-		// queryValues collects non-styled parameters (passthrough, JSON)
-		// that are safe to round-trip through url.Values.Encode().
-		queryValues := queryURL.Query()
-		// rawQueryFragments collects pre-encoded query fragments from
-		// styled parameters, preserving literal commas as delimiters
-		// per the OpenAPI spec (e.g. "color=blue,black,brown").
-		var rawQueryFragments []string
-
-		if params.Type != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "type", *params.Type, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if params.Role != nil {
-
-			if queryFrag, err := runtime.StyleParamWithOptions("form", false, "role", *params.Role, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationQuery, Type: "string", Format: ""}); err != nil {
-				return nil, err
-			} else {
-				for _, qp := range strings.Split(queryFrag, "&") {
-					rawQueryFragments = append(rawQueryFragments, qp)
-				}
-			}
-
-		}
-
-		if encoded := queryValues.Encode(); encoded != "" {
-			rawQueryFragments = append(rawQueryFragments, encoded)
-		}
-		queryURL.RawQuery = strings.Join(rawQueryFragments, "&")
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-// NewGetUserRequest generates requests for GetUser
-func NewGetUserRequest(server string, id string) (*http.Request, error) {
-	var err error
-
-	var pathParam0 string
-
-	pathParam0, err = runtime.StyleParamWithOptions("simple", false, "id", id, runtime.StyleParamOptions{ParamLocation: runtime.ParamLocationPath, Type: "string", Format: ""})
-	if err != nil {
-		return nil, err
-	}
-
-	serverURL, err := url.Parse(server)
-	if err != nil {
-		return nil, err
-	}
-
-	operationPath := fmt.Sprintf("/api/v2/users/%s", pathParam0)
-	if operationPath[0] == '/' {
-		operationPath = "." + operationPath
-	}
-
-	queryURL, err := serverURL.Parse(operationPath)
-	if err != nil {
-		return nil, err
-	}
-
-	req, err := http.NewRequest(http.MethodGet, queryURL.String(), nil)
-	if err != nil {
-		return nil, err
-	}
-
-	return req, nil
-}
-
-func (c *Client) applyEditors(ctx context.Context, req *http.Request, additionalEditors []RequestEditorFn) error {
-	for _, r := range c.RequestEditors {
-		if err := r(ctx, req); err != nil {
-			return err
-		}
-	}
-	for _, r := range additionalEditors {
-		if err := r(ctx, req); err != nil {
-			return err
-		}
-	}
-	return nil
-}
-
-// ClientWithResponses builds on ClientInterface to offer response payloads
-type ClientWithResponses struct {
-	ClientInterface
-}
-
-// NewClientWithResponses creates a new ClientWithResponses, which wraps
-// Client with return type handling
-func NewClientWithResponses(server string, opts ...ClientOption) (*ClientWithResponses, error) {
-	client, err := NewClient(server, opts...)
-	if err != nil {
-		return nil, err
-	}
-	return &ClientWithResponses{client}, nil
-}
-
-// WithBaseURL overrides the baseURL.
-func WithBaseURL(baseURL string) ClientOption {
-	return func(c *Client) error {
-		newBaseURL, err := url.Parse(baseURL)
-		if err != nil {
-			return err
-		}
-		c.Server = newBaseURL.String()
-		return nil
-	}
-}
-
-// ClientWithResponsesInterface is the interface specification for the client with responses above.
-type ClientWithResponsesInterface interface {
-	// DeleteDeviceWithResponse request
-	DeleteDeviceWithResponse(ctx context.Context, id string, params *DeleteDeviceParams, reqEditors ...RequestEditorFn) (*DeleteDeviceResponse, error)
-
-	// GetDeviceWithResponse request
-	GetDeviceWithResponse(ctx context.Context, id string, params *GetDeviceParams, reqEditors ...RequestEditorFn) (*GetDeviceResponse, error)
-
-	// AuthorizeDeviceWithBodyWithResponse request with any body
-	AuthorizeDeviceWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*AuthorizeDeviceResponse, error)
-
-	AuthorizeDeviceWithResponse(ctx context.Context, id string, body AuthorizeDeviceJSONRequestBody, reqEditors ...RequestEditorFn) (*AuthorizeDeviceResponse, error)
-
-	// SetDeviceKeyWithBodyWithResponse request with any body
-	SetDeviceKeyWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetDeviceKeyResponse, error)
-
-	SetDeviceKeyWithResponse(ctx context.Context, id string, body SetDeviceKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*SetDeviceKeyResponse, error)
-
-	// SetDeviceNameWithBodyWithResponse request with any body
-	SetDeviceNameWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetDeviceNameResponse, error)
-
-	SetDeviceNameWithResponse(ctx context.Context, id string, body SetDeviceNameJSONRequestBody, reqEditors ...RequestEditorFn) (*SetDeviceNameResponse, error)
-
-	// GetDeviceRoutesWithResponse request
-	GetDeviceRoutesWithResponse(ctx context.Context, id string, params *GetDeviceRoutesParams, reqEditors ...RequestEditorFn) (*GetDeviceRoutesResponse, error)
-
-	// SetDeviceRoutesWithBodyWithResponse request with any body
-	SetDeviceRoutesWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetDeviceRoutesResponse, error)
-
-	SetDeviceRoutesWithResponse(ctx context.Context, id string, body SetDeviceRoutesJSONRequestBody, reqEditors ...RequestEditorFn) (*SetDeviceRoutesResponse, error)
-
-	// SetDeviceTagsWithBodyWithResponse request with any body
-	SetDeviceTagsWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetDeviceTagsResponse, error)
-
-	SetDeviceTagsWithResponse(ctx context.Context, id string, body SetDeviceTagsJSONRequestBody, reqEditors ...RequestEditorFn) (*SetDeviceTagsResponse, error)
-
-	// GetACLWithResponse request
-	GetACLWithResponse(ctx context.Context, tailnet string, params *GetACLParams, reqEditors ...RequestEditorFn) (*GetACLResponse, error)
-
-	// SetACLWithBodyWithResponse request with any body
-	SetACLWithBodyWithResponse(ctx context.Context, tailnet string, params *SetACLParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetACLResponse, error)
-
-	SetACLWithResponse(ctx context.Context, tailnet string, params *SetACLParams, body SetACLJSONRequestBody, reqEditors ...RequestEditorFn) (*SetACLResponse, error)
-
-	// ListDevicesWithResponse request
-	ListDevicesWithResponse(ctx context.Context, tailnet string, params *ListDevicesParams, reqEditors ...RequestEditorFn) (*ListDevicesResponse, error)
-
-	// ListKeysWithResponse request
-	ListKeysWithResponse(ctx context.Context, tailnet string, params *ListKeysParams, reqEditors ...RequestEditorFn) (*ListKeysResponse, error)
-
-	// CreateKeyWithBodyWithResponse request with any body
-	CreateKeyWithBodyWithResponse(ctx context.Context, tailnet string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreateKeyResponse, error)
-
-	CreateKeyWithResponse(ctx context.Context, tailnet string, body CreateKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*CreateKeyResponse, error)
-
-	// DeleteKeyWithResponse request
-	DeleteKeyWithResponse(ctx context.Context, tailnet string, keyId string, reqEditors ...RequestEditorFn) (*DeleteKeyResponse, error)
-
-	// GetKeyWithResponse request
-	GetKeyWithResponse(ctx context.Context, tailnet string, keyId string, reqEditors ...RequestEditorFn) (*GetKeyResponse, error)
-
-	// GetTailnetSettingsWithResponse request
-	GetTailnetSettingsWithResponse(ctx context.Context, tailnet string, reqEditors ...RequestEditorFn) (*GetTailnetSettingsResponse, error)
-
-	// UpdateTailnetSettingsWithBodyWithResponse request with any body
-	UpdateTailnetSettingsWithBodyWithResponse(ctx context.Context, tailnet string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*UpdateTailnetSettingsResponse, error)
-
-	UpdateTailnetSettingsWithResponse(ctx context.Context, tailnet string, body UpdateTailnetSettingsJSONRequestBody, reqEditors ...RequestEditorFn) (*UpdateTailnetSettingsResponse, error)
-
-	// ListUsersWithResponse request
-	ListUsersWithResponse(ctx context.Context, tailnet string, params *ListUsersParams, reqEditors ...RequestEditorFn) (*ListUsersResponse, error)
-
-	// GetUserWithResponse request
-	GetUserWithResponse(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*GetUserResponse, error)
-}
-
-type DeleteDeviceResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *EmptyOutputBody
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r DeleteDeviceResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r DeleteDeviceResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r DeleteDeviceResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type GetDeviceResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *Device
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r GetDeviceResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r GetDeviceResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r GetDeviceResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type AuthorizeDeviceResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *EmptyOutputBody
-	ApplicationproblemJSON400 *ErrorModel
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r AuthorizeDeviceResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r AuthorizeDeviceResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r AuthorizeDeviceResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type SetDeviceKeyResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *EmptyOutputBody
-	ApplicationproblemJSON400 *ErrorModel
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r SetDeviceKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r SetDeviceKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r SetDeviceKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type SetDeviceNameResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *EmptyOutputBody
-	ApplicationproblemJSON400 *ErrorModel
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r SetDeviceNameResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r SetDeviceNameResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r SetDeviceNameResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type GetDeviceRoutesResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *DeviceRoutes
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r GetDeviceRoutesResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r GetDeviceRoutesResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r GetDeviceRoutesResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type SetDeviceRoutesResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *DeviceRoutes
-	ApplicationproblemJSON400 *ErrorModel
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r SetDeviceRoutesResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r SetDeviceRoutesResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r SetDeviceRoutesResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type SetDeviceTagsResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *EmptyOutputBody
-	ApplicationproblemJSON400 *ErrorModel
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r SetDeviceTagsResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r SetDeviceTagsResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r SetDeviceTagsResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type GetACLResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r GetACLResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r GetACLResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r GetACLResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type SetACLResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	ApplicationproblemJSON400 *ErrorModel
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON412 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r SetACLResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r SetACLResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r SetACLResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ListDevicesResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *ListDevicesOutputBody
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ListDevicesResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ListDevicesResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ListDevicesResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ListKeysResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *ListKeysOutputBody
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ListKeysResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ListKeysResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ListKeysResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type CreateKeyResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *Key
-	ApplicationproblemJSON400 *ErrorModel
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r CreateKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r CreateKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r CreateKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type DeleteKeyResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *DeleteKeyOutputBody
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r DeleteKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r DeleteKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r DeleteKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type GetKeyResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *Key
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r GetKeyResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r GetKeyResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r GetKeyResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type GetTailnetSettingsResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *TailnetSettings
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r GetTailnetSettingsResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r GetTailnetSettingsResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r GetTailnetSettingsResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type UpdateTailnetSettingsResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *TailnetSettings
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-	ApplicationproblemJSON501 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r UpdateTailnetSettingsResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r UpdateTailnetSettingsResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r UpdateTailnetSettingsResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type ListUsersResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *ListUsersOutputBody
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r ListUsersResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r ListUsersResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r ListUsersResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-type GetUserResponse struct {
-	Body                      []byte
-	HTTPResponse              *http.Response
-	JSON200                   *User
-	ApplicationproblemJSON401 *ErrorModel
-	ApplicationproblemJSON403 *ErrorModel
-	ApplicationproblemJSON404 *ErrorModel
-	ApplicationproblemJSON422 *ErrorModel
-	ApplicationproblemJSON500 *ErrorModel
-}
-
-// Status returns HTTPResponse.Status
-func (r GetUserResponse) Status() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Status
-	}
-	return http.StatusText(0)
-}
-
-// StatusCode returns HTTPResponse.StatusCode
-func (r GetUserResponse) StatusCode() int {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.StatusCode
-	}
-	return 0
-}
-
-// ContentType is a convenience method to retrieve the Content-Type value from the HTTP response headers
-func (r GetUserResponse) ContentType() string {
-	if r.HTTPResponse != nil {
-		return r.HTTPResponse.Header.Get("Content-Type")
-	}
-	return ""
-}
-
-// DeleteDeviceWithResponse request returning *DeleteDeviceResponse
-func (c *ClientWithResponses) DeleteDeviceWithResponse(ctx context.Context, id string, params *DeleteDeviceParams, reqEditors ...RequestEditorFn) (*DeleteDeviceResponse, error) {
-	rsp, err := c.DeleteDevice(ctx, id, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseDeleteDeviceResponse(rsp)
-}
-
-// GetDeviceWithResponse request returning *GetDeviceResponse
-func (c *ClientWithResponses) GetDeviceWithResponse(ctx context.Context, id string, params *GetDeviceParams, reqEditors ...RequestEditorFn) (*GetDeviceResponse, error) {
-	rsp, err := c.GetDevice(ctx, id, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseGetDeviceResponse(rsp)
-}
-
-// AuthorizeDeviceWithBodyWithResponse request with arbitrary body returning *AuthorizeDeviceResponse
-func (c *ClientWithResponses) AuthorizeDeviceWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*AuthorizeDeviceResponse, error) {
-	rsp, err := c.AuthorizeDeviceWithBody(ctx, id, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseAuthorizeDeviceResponse(rsp)
-}
-
-func (c *ClientWithResponses) AuthorizeDeviceWithResponse(ctx context.Context, id string, body AuthorizeDeviceJSONRequestBody, reqEditors ...RequestEditorFn) (*AuthorizeDeviceResponse, error) {
-	rsp, err := c.AuthorizeDevice(ctx, id, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseAuthorizeDeviceResponse(rsp)
-}
-
-// SetDeviceKeyWithBodyWithResponse request with arbitrary body returning *SetDeviceKeyResponse
-func (c *ClientWithResponses) SetDeviceKeyWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetDeviceKeyResponse, error) {
-	rsp, err := c.SetDeviceKeyWithBody(ctx, id, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetDeviceKeyResponse(rsp)
-}
-
-func (c *ClientWithResponses) SetDeviceKeyWithResponse(ctx context.Context, id string, body SetDeviceKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*SetDeviceKeyResponse, error) {
-	rsp, err := c.SetDeviceKey(ctx, id, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetDeviceKeyResponse(rsp)
-}
-
-// SetDeviceNameWithBodyWithResponse request with arbitrary body returning *SetDeviceNameResponse
-func (c *ClientWithResponses) SetDeviceNameWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetDeviceNameResponse, error) {
-	rsp, err := c.SetDeviceNameWithBody(ctx, id, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetDeviceNameResponse(rsp)
-}
-
-func (c *ClientWithResponses) SetDeviceNameWithResponse(ctx context.Context, id string, body SetDeviceNameJSONRequestBody, reqEditors ...RequestEditorFn) (*SetDeviceNameResponse, error) {
-	rsp, err := c.SetDeviceName(ctx, id, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetDeviceNameResponse(rsp)
-}
-
-// GetDeviceRoutesWithResponse request returning *GetDeviceRoutesResponse
-func (c *ClientWithResponses) GetDeviceRoutesWithResponse(ctx context.Context, id string, params *GetDeviceRoutesParams, reqEditors ...RequestEditorFn) (*GetDeviceRoutesResponse, error) {
-	rsp, err := c.GetDeviceRoutes(ctx, id, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseGetDeviceRoutesResponse(rsp)
-}
-
-// SetDeviceRoutesWithBodyWithResponse request with arbitrary body returning *SetDeviceRoutesResponse
-func (c *ClientWithResponses) SetDeviceRoutesWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetDeviceRoutesResponse, error) {
-	rsp, err := c.SetDeviceRoutesWithBody(ctx, id, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetDeviceRoutesResponse(rsp)
-}
-
-func (c *ClientWithResponses) SetDeviceRoutesWithResponse(ctx context.Context, id string, body SetDeviceRoutesJSONRequestBody, reqEditors ...RequestEditorFn) (*SetDeviceRoutesResponse, error) {
-	rsp, err := c.SetDeviceRoutes(ctx, id, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetDeviceRoutesResponse(rsp)
-}
-
-// SetDeviceTagsWithBodyWithResponse request with arbitrary body returning *SetDeviceTagsResponse
-func (c *ClientWithResponses) SetDeviceTagsWithBodyWithResponse(ctx context.Context, id string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetDeviceTagsResponse, error) {
-	rsp, err := c.SetDeviceTagsWithBody(ctx, id, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetDeviceTagsResponse(rsp)
-}
-
-func (c *ClientWithResponses) SetDeviceTagsWithResponse(ctx context.Context, id string, body SetDeviceTagsJSONRequestBody, reqEditors ...RequestEditorFn) (*SetDeviceTagsResponse, error) {
-	rsp, err := c.SetDeviceTags(ctx, id, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetDeviceTagsResponse(rsp)
-}
-
-// GetACLWithResponse request returning *GetACLResponse
-func (c *ClientWithResponses) GetACLWithResponse(ctx context.Context, tailnet string, params *GetACLParams, reqEditors ...RequestEditorFn) (*GetACLResponse, error) {
-	rsp, err := c.GetACL(ctx, tailnet, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseGetACLResponse(rsp)
-}
-
-// SetACLWithBodyWithResponse request with arbitrary body returning *SetACLResponse
-func (c *ClientWithResponses) SetACLWithBodyWithResponse(ctx context.Context, tailnet string, params *SetACLParams, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*SetACLResponse, error) {
-	rsp, err := c.SetACLWithBody(ctx, tailnet, params, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetACLResponse(rsp)
-}
-
-func (c *ClientWithResponses) SetACLWithResponse(ctx context.Context, tailnet string, params *SetACLParams, body SetACLJSONRequestBody, reqEditors ...RequestEditorFn) (*SetACLResponse, error) {
-	rsp, err := c.SetACL(ctx, tailnet, params, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseSetACLResponse(rsp)
-}
-
-// ListDevicesWithResponse request returning *ListDevicesResponse
-func (c *ClientWithResponses) ListDevicesWithResponse(ctx context.Context, tailnet string, params *ListDevicesParams, reqEditors ...RequestEditorFn) (*ListDevicesResponse, error) {
-	rsp, err := c.ListDevices(ctx, tailnet, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseListDevicesResponse(rsp)
-}
-
-// ListKeysWithResponse request returning *ListKeysResponse
-func (c *ClientWithResponses) ListKeysWithResponse(ctx context.Context, tailnet string, params *ListKeysParams, reqEditors ...RequestEditorFn) (*ListKeysResponse, error) {
-	rsp, err := c.ListKeys(ctx, tailnet, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseListKeysResponse(rsp)
-}
-
-// CreateKeyWithBodyWithResponse request with arbitrary body returning *CreateKeyResponse
-func (c *ClientWithResponses) CreateKeyWithBodyWithResponse(ctx context.Context, tailnet string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*CreateKeyResponse, error) {
-	rsp, err := c.CreateKeyWithBody(ctx, tailnet, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCreateKeyResponse(rsp)
-}
-
-func (c *ClientWithResponses) CreateKeyWithResponse(ctx context.Context, tailnet string, body CreateKeyJSONRequestBody, reqEditors ...RequestEditorFn) (*CreateKeyResponse, error) {
-	rsp, err := c.CreateKey(ctx, tailnet, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseCreateKeyResponse(rsp)
-}
-
-// DeleteKeyWithResponse request returning *DeleteKeyResponse
-func (c *ClientWithResponses) DeleteKeyWithResponse(ctx context.Context, tailnet string, keyId string, reqEditors ...RequestEditorFn) (*DeleteKeyResponse, error) {
-	rsp, err := c.DeleteKey(ctx, tailnet, keyId, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseDeleteKeyResponse(rsp)
-}
-
-// GetKeyWithResponse request returning *GetKeyResponse
-func (c *ClientWithResponses) GetKeyWithResponse(ctx context.Context, tailnet string, keyId string, reqEditors ...RequestEditorFn) (*GetKeyResponse, error) {
-	rsp, err := c.GetKey(ctx, tailnet, keyId, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseGetKeyResponse(rsp)
-}
-
-// GetTailnetSettingsWithResponse request returning *GetTailnetSettingsResponse
-func (c *ClientWithResponses) GetTailnetSettingsWithResponse(ctx context.Context, tailnet string, reqEditors ...RequestEditorFn) (*GetTailnetSettingsResponse, error) {
-	rsp, err := c.GetTailnetSettings(ctx, tailnet, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseGetTailnetSettingsResponse(rsp)
-}
-
-// UpdateTailnetSettingsWithBodyWithResponse request with arbitrary body returning *UpdateTailnetSettingsResponse
-func (c *ClientWithResponses) UpdateTailnetSettingsWithBodyWithResponse(ctx context.Context, tailnet string, contentType string, body io.Reader, reqEditors ...RequestEditorFn) (*UpdateTailnetSettingsResponse, error) {
-	rsp, err := c.UpdateTailnetSettingsWithBody(ctx, tailnet, contentType, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseUpdateTailnetSettingsResponse(rsp)
-}
-
-func (c *ClientWithResponses) UpdateTailnetSettingsWithResponse(ctx context.Context, tailnet string, body UpdateTailnetSettingsJSONRequestBody, reqEditors ...RequestEditorFn) (*UpdateTailnetSettingsResponse, error) {
-	rsp, err := c.UpdateTailnetSettings(ctx, tailnet, body, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseUpdateTailnetSettingsResponse(rsp)
-}
-
-// ListUsersWithResponse request returning *ListUsersResponse
-func (c *ClientWithResponses) ListUsersWithResponse(ctx context.Context, tailnet string, params *ListUsersParams, reqEditors ...RequestEditorFn) (*ListUsersResponse, error) {
-	rsp, err := c.ListUsers(ctx, tailnet, params, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseListUsersResponse(rsp)
-}
-
-// GetUserWithResponse request returning *GetUserResponse
-func (c *ClientWithResponses) GetUserWithResponse(ctx context.Context, id string, reqEditors ...RequestEditorFn) (*GetUserResponse, error) {
-	rsp, err := c.GetUser(ctx, id, reqEditors...)
-	if err != nil {
-		return nil, err
-	}
-	return ParseGetUserResponse(rsp)
-}
-
-// ParseDeleteDeviceResponse parses an HTTP response from a DeleteDeviceWithResponse call
-func ParseDeleteDeviceResponse(rsp *http.Response) (*DeleteDeviceResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &DeleteDeviceResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest EmptyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseGetDeviceResponse parses an HTTP response from a GetDeviceWithResponse call
-func ParseGetDeviceResponse(rsp *http.Response) (*GetDeviceResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &GetDeviceResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest Device
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseAuthorizeDeviceResponse parses an HTTP response from a AuthorizeDeviceWithResponse call
-func ParseAuthorizeDeviceResponse(rsp *http.Response) (*AuthorizeDeviceResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &AuthorizeDeviceResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest EmptyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 400:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON400 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseSetDeviceKeyResponse parses an HTTP response from a SetDeviceKeyWithResponse call
-func ParseSetDeviceKeyResponse(rsp *http.Response) (*SetDeviceKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &SetDeviceKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest EmptyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 400:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON400 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseSetDeviceNameResponse parses an HTTP response from a SetDeviceNameWithResponse call
-func ParseSetDeviceNameResponse(rsp *http.Response) (*SetDeviceNameResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &SetDeviceNameResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest EmptyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 400:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON400 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseGetDeviceRoutesResponse parses an HTTP response from a GetDeviceRoutesWithResponse call
-func ParseGetDeviceRoutesResponse(rsp *http.Response) (*GetDeviceRoutesResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &GetDeviceRoutesResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest DeviceRoutes
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseSetDeviceRoutesResponse parses an HTTP response from a SetDeviceRoutesWithResponse call
-func ParseSetDeviceRoutesResponse(rsp *http.Response) (*SetDeviceRoutesResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &SetDeviceRoutesResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest DeviceRoutes
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 400:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON400 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseSetDeviceTagsResponse parses an HTTP response from a SetDeviceTagsWithResponse call
-func ParseSetDeviceTagsResponse(rsp *http.Response) (*SetDeviceTagsResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &SetDeviceTagsResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest EmptyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 400:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON400 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseGetACLResponse parses an HTTP response from a GetACLWithResponse call
-func ParseGetACLResponse(rsp *http.Response) (*GetACLResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &GetACLResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseSetACLResponse parses an HTTP response from a SetACLWithResponse call
-func ParseSetACLResponse(rsp *http.Response) (*SetACLResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &SetACLResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 400:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON400 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 412:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON412 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseListDevicesResponse parses an HTTP response from a ListDevicesWithResponse call
-func ParseListDevicesResponse(rsp *http.Response) (*ListDevicesResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ListDevicesResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ListDevicesOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseListKeysResponse parses an HTTP response from a ListKeysWithResponse call
-func ParseListKeysResponse(rsp *http.Response) (*ListKeysResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ListKeysResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ListKeysOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseCreateKeyResponse parses an HTTP response from a CreateKeyWithResponse call
-func ParseCreateKeyResponse(rsp *http.Response) (*CreateKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &CreateKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest Key
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 400:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON400 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseDeleteKeyResponse parses an HTTP response from a DeleteKeyWithResponse call
-func ParseDeleteKeyResponse(rsp *http.Response) (*DeleteKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &DeleteKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest DeleteKeyOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseGetKeyResponse parses an HTTP response from a GetKeyWithResponse call
-func ParseGetKeyResponse(rsp *http.Response) (*GetKeyResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &GetKeyResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest Key
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseGetTailnetSettingsResponse parses an HTTP response from a GetTailnetSettingsWithResponse call
-func ParseGetTailnetSettingsResponse(rsp *http.Response) (*GetTailnetSettingsResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &GetTailnetSettingsResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest TailnetSettings
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseUpdateTailnetSettingsResponse parses an HTTP response from a UpdateTailnetSettingsWithResponse call
-func ParseUpdateTailnetSettingsResponse(rsp *http.Response) (*UpdateTailnetSettingsResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &UpdateTailnetSettingsResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest TailnetSettings
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 501:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON501 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseListUsersResponse parses an HTTP response from a ListUsersWithResponse call
-func ParseListUsersResponse(rsp *http.Response) (*ListUsersResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &ListUsersResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest ListUsersOutputBody
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
-
-// ParseGetUserResponse parses an HTTP response from a GetUserWithResponse call
-func ParseGetUserResponse(rsp *http.Response) (*GetUserResponse, error) {
-	bodyBytes, err := io.ReadAll(rsp.Body)
-	defer func() { _ = rsp.Body.Close() }()
-	if err != nil {
-		return nil, err
-	}
-
-	response := &GetUserResponse{
-		Body:         bodyBytes,
-		HTTPResponse: rsp,
-	}
-
-	switch {
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 200:
-		var dest User
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.JSON200 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 401:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON401 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 403:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON403 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 404:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON404 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 422:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON422 = &dest
-
-	case strings.Contains(rsp.Header.Get("Content-Type"), "json") && rsp.StatusCode == 500:
-		var dest ErrorModel
-		if err := json.Unmarshal(bodyBytes, &dest); err != nil {
-			return nil, err
-		}
-		response.ApplicationproblemJSON500 = &dest
-
-	}
-
-	return response, nil
-}
diff --git a/gen/go/headscale/v1/apikey.pb.go b/gen/go/headscale/v1/apikey.pb.go
new file mode 100644
index 000000000..0c8557384
--- /dev/null
+++ b/gen/go/headscale/v1/apikey.pb.go
@@ -0,0 +1,537 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: headscale/v1/apikey.proto
+
+package v1
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type ApiKey struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            uint64                 `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	Prefix        string                 `protobuf:"bytes,2,opt,name=prefix,proto3" json:"prefix,omitempty"`
+	Expiration    *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=expiration,proto3" json:"expiration,omitempty"`
+	CreatedAt     *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
+	LastSeen      *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=last_seen,json=lastSeen,proto3" json:"last_seen,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ApiKey) Reset() {
+	*x = ApiKey{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ApiKey) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ApiKey) ProtoMessage() {}
+
+func (x *ApiKey) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ApiKey.ProtoReflect.Descriptor instead.
+func (*ApiKey) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *ApiKey) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+func (x *ApiKey) GetPrefix() string {
+	if x != nil {
+		return x.Prefix
+	}
+	return ""
+}
+
+func (x *ApiKey) GetExpiration() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Expiration
+	}
+	return nil
+}
+
+func (x *ApiKey) GetCreatedAt() *timestamppb.Timestamp {
+	if x != nil {
+		return x.CreatedAt
+	}
+	return nil
+}
+
+func (x *ApiKey) GetLastSeen() *timestamppb.Timestamp {
+	if x != nil {
+		return x.LastSeen
+	}
+	return nil
+}
+
+type CreateApiKeyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Expiration    *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=expiration,proto3" json:"expiration,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CreateApiKeyRequest) Reset() {
+	*x = CreateApiKeyRequest{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CreateApiKeyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateApiKeyRequest) ProtoMessage() {}
+
+func (x *CreateApiKeyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateApiKeyRequest.ProtoReflect.Descriptor instead.
+func (*CreateApiKeyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *CreateApiKeyRequest) GetExpiration() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Expiration
+	}
+	return nil
+}
+
+type CreateApiKeyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	ApiKey        string                 `protobuf:"bytes,1,opt,name=api_key,json=apiKey,proto3" json:"api_key,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CreateApiKeyResponse) Reset() {
+	*x = CreateApiKeyResponse{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CreateApiKeyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateApiKeyResponse) ProtoMessage() {}
+
+func (x *CreateApiKeyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateApiKeyResponse.ProtoReflect.Descriptor instead.
+func (*CreateApiKeyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *CreateApiKeyResponse) GetApiKey() string {
+	if x != nil {
+		return x.ApiKey
+	}
+	return ""
+}
+
+type ExpireApiKeyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Prefix        string                 `protobuf:"bytes,1,opt,name=prefix,proto3" json:"prefix,omitempty"`
+	Id            uint64                 `protobuf:"varint,2,opt,name=id,proto3" json:"id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ExpireApiKeyRequest) Reset() {
+	*x = ExpireApiKeyRequest{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ExpireApiKeyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ExpireApiKeyRequest) ProtoMessage() {}
+
+func (x *ExpireApiKeyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ExpireApiKeyRequest.ProtoReflect.Descriptor instead.
+func (*ExpireApiKeyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *ExpireApiKeyRequest) GetPrefix() string {
+	if x != nil {
+		return x.Prefix
+	}
+	return ""
+}
+
+func (x *ExpireApiKeyRequest) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+type ExpireApiKeyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ExpireApiKeyResponse) Reset() {
+	*x = ExpireApiKeyResponse{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ExpireApiKeyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ExpireApiKeyResponse) ProtoMessage() {}
+
+func (x *ExpireApiKeyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ExpireApiKeyResponse.ProtoReflect.Descriptor instead.
+func (*ExpireApiKeyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{4}
+}
+
+type ListApiKeysRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListApiKeysRequest) Reset() {
+	*x = ListApiKeysRequest{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListApiKeysRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListApiKeysRequest) ProtoMessage() {}
+
+func (x *ListApiKeysRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListApiKeysRequest.ProtoReflect.Descriptor instead.
+func (*ListApiKeysRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{5}
+}
+
+type ListApiKeysResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	ApiKeys       []*ApiKey              `protobuf:"bytes,1,rep,name=api_keys,json=apiKeys,proto3" json:"api_keys,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListApiKeysResponse) Reset() {
+	*x = ListApiKeysResponse{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListApiKeysResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListApiKeysResponse) ProtoMessage() {}
+
+func (x *ListApiKeysResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[6]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListApiKeysResponse.ProtoReflect.Descriptor instead.
+func (*ListApiKeysResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{6}
+}
+
+func (x *ListApiKeysResponse) GetApiKeys() []*ApiKey {
+	if x != nil {
+		return x.ApiKeys
+	}
+	return nil
+}
+
+type DeleteApiKeyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Prefix        string                 `protobuf:"bytes,1,opt,name=prefix,proto3" json:"prefix,omitempty"`
+	Id            uint64                 `protobuf:"varint,2,opt,name=id,proto3" json:"id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeleteApiKeyRequest) Reset() {
+	*x = DeleteApiKeyRequest{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeleteApiKeyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteApiKeyRequest) ProtoMessage() {}
+
+func (x *DeleteApiKeyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteApiKeyRequest.ProtoReflect.Descriptor instead.
+func (*DeleteApiKeyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *DeleteApiKeyRequest) GetPrefix() string {
+	if x != nil {
+		return x.Prefix
+	}
+	return ""
+}
+
+func (x *DeleteApiKeyRequest) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+type DeleteApiKeyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeleteApiKeyResponse) Reset() {
+	*x = DeleteApiKeyResponse{}
+	mi := &file_headscale_v1_apikey_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeleteApiKeyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteApiKeyResponse) ProtoMessage() {}
+
+func (x *DeleteApiKeyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_apikey_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteApiKeyResponse.ProtoReflect.Descriptor instead.
+func (*DeleteApiKeyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_apikey_proto_rawDescGZIP(), []int{8}
+}
+
+var File_headscale_v1_apikey_proto protoreflect.FileDescriptor
+
+const file_headscale_v1_apikey_proto_rawDesc = "" +
+	"\n" +
+	"\x19headscale/v1/apikey.proto\x12\fheadscale.v1\x1a\x1fgoogle/protobuf/timestamp.proto\"\xe0\x01\n" +
+	"\x06ApiKey\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\x04R\x02id\x12\x16\n" +
+	"\x06prefix\x18\x02 \x01(\tR\x06prefix\x12:\n" +
+	"\n" +
+	"expiration\x18\x03 \x01(\v2\x1a.google.protobuf.TimestampR\n" +
+	"expiration\x129\n" +
+	"\n" +
+	"created_at\x18\x04 \x01(\v2\x1a.google.protobuf.TimestampR\tcreatedAt\x127\n" +
+	"\tlast_seen\x18\x05 \x01(\v2\x1a.google.protobuf.TimestampR\blastSeen\"Q\n" +
+	"\x13CreateApiKeyRequest\x12:\n" +
+	"\n" +
+	"expiration\x18\x01 \x01(\v2\x1a.google.protobuf.TimestampR\n" +
+	"expiration\"/\n" +
+	"\x14CreateApiKeyResponse\x12\x17\n" +
+	"\aapi_key\x18\x01 \x01(\tR\x06apiKey\"=\n" +
+	"\x13ExpireApiKeyRequest\x12\x16\n" +
+	"\x06prefix\x18\x01 \x01(\tR\x06prefix\x12\x0e\n" +
+	"\x02id\x18\x02 \x01(\x04R\x02id\"\x16\n" +
+	"\x14ExpireApiKeyResponse\"\x14\n" +
+	"\x12ListApiKeysRequest\"F\n" +
+	"\x13ListApiKeysResponse\x12/\n" +
+	"\bapi_keys\x18\x01 \x03(\v2\x14.headscale.v1.ApiKeyR\aapiKeys\"=\n" +
+	"\x13DeleteApiKeyRequest\x12\x16\n" +
+	"\x06prefix\x18\x01 \x01(\tR\x06prefix\x12\x0e\n" +
+	"\x02id\x18\x02 \x01(\x04R\x02id\"\x16\n" +
+	"\x14DeleteApiKeyResponseB)Z'github.com/juanfont/headscale/gen/go/v1b\x06proto3"
+
+var (
+	file_headscale_v1_apikey_proto_rawDescOnce sync.Once
+	file_headscale_v1_apikey_proto_rawDescData []byte
+)
+
+func file_headscale_v1_apikey_proto_rawDescGZIP() []byte {
+	file_headscale_v1_apikey_proto_rawDescOnce.Do(func() {
+		file_headscale_v1_apikey_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_headscale_v1_apikey_proto_rawDesc), len(file_headscale_v1_apikey_proto_rawDesc)))
+	})
+	return file_headscale_v1_apikey_proto_rawDescData
+}
+
+var file_headscale_v1_apikey_proto_msgTypes = make([]protoimpl.MessageInfo, 9)
+var file_headscale_v1_apikey_proto_goTypes = []any{
+	(*ApiKey)(nil),                // 0: headscale.v1.ApiKey
+	(*CreateApiKeyRequest)(nil),   // 1: headscale.v1.CreateApiKeyRequest
+	(*CreateApiKeyResponse)(nil),  // 2: headscale.v1.CreateApiKeyResponse
+	(*ExpireApiKeyRequest)(nil),   // 3: headscale.v1.ExpireApiKeyRequest
+	(*ExpireApiKeyResponse)(nil),  // 4: headscale.v1.ExpireApiKeyResponse
+	(*ListApiKeysRequest)(nil),    // 5: headscale.v1.ListApiKeysRequest
+	(*ListApiKeysResponse)(nil),   // 6: headscale.v1.ListApiKeysResponse
+	(*DeleteApiKeyRequest)(nil),   // 7: headscale.v1.DeleteApiKeyRequest
+	(*DeleteApiKeyResponse)(nil),  // 8: headscale.v1.DeleteApiKeyResponse
+	(*timestamppb.Timestamp)(nil), // 9: google.protobuf.Timestamp
+}
+var file_headscale_v1_apikey_proto_depIdxs = []int32{
+	9, // 0: headscale.v1.ApiKey.expiration:type_name -> google.protobuf.Timestamp
+	9, // 1: headscale.v1.ApiKey.created_at:type_name -> google.protobuf.Timestamp
+	9, // 2: headscale.v1.ApiKey.last_seen:type_name -> google.protobuf.Timestamp
+	9, // 3: headscale.v1.CreateApiKeyRequest.expiration:type_name -> google.protobuf.Timestamp
+	0, // 4: headscale.v1.ListApiKeysResponse.api_keys:type_name -> headscale.v1.ApiKey
+	5, // [5:5] is the sub-list for method output_type
+	5, // [5:5] is the sub-list for method input_type
+	5, // [5:5] is the sub-list for extension type_name
+	5, // [5:5] is the sub-list for extension extendee
+	0, // [0:5] is the sub-list for field type_name
+}
+
+func init() { file_headscale_v1_apikey_proto_init() }
+func file_headscale_v1_apikey_proto_init() {
+	if File_headscale_v1_apikey_proto != nil {
+		return
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_headscale_v1_apikey_proto_rawDesc), len(file_headscale_v1_apikey_proto_rawDesc)),
+			NumEnums:      0,
+			NumMessages:   9,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_headscale_v1_apikey_proto_goTypes,
+		DependencyIndexes: file_headscale_v1_apikey_proto_depIdxs,
+		MessageInfos:      file_headscale_v1_apikey_proto_msgTypes,
+	}.Build()
+	File_headscale_v1_apikey_proto = out.File
+	file_headscale_v1_apikey_proto_goTypes = nil
+	file_headscale_v1_apikey_proto_depIdxs = nil
+}
diff --git a/gen/go/headscale/v1/auth.pb.go b/gen/go/headscale/v1/auth.pb.go
new file mode 100644
index 000000000..2d6bf779e
--- /dev/null
+++ b/gen/go/headscale/v1/auth.pb.go
@@ -0,0 +1,351 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: headscale/v1/auth.proto
+
+package v1
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type AuthRegisterRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	User          string                 `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
+	AuthId        string                 `protobuf:"bytes,2,opt,name=auth_id,json=authId,proto3" json:"auth_id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *AuthRegisterRequest) Reset() {
+	*x = AuthRegisterRequest{}
+	mi := &file_headscale_v1_auth_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AuthRegisterRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AuthRegisterRequest) ProtoMessage() {}
+
+func (x *AuthRegisterRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_auth_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AuthRegisterRequest.ProtoReflect.Descriptor instead.
+func (*AuthRegisterRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_auth_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *AuthRegisterRequest) GetUser() string {
+	if x != nil {
+		return x.User
+	}
+	return ""
+}
+
+func (x *AuthRegisterRequest) GetAuthId() string {
+	if x != nil {
+		return x.AuthId
+	}
+	return ""
+}
+
+type AuthRegisterResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Node          *Node                  `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *AuthRegisterResponse) Reset() {
+	*x = AuthRegisterResponse{}
+	mi := &file_headscale_v1_auth_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AuthRegisterResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AuthRegisterResponse) ProtoMessage() {}
+
+func (x *AuthRegisterResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_auth_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AuthRegisterResponse.ProtoReflect.Descriptor instead.
+func (*AuthRegisterResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_auth_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *AuthRegisterResponse) GetNode() *Node {
+	if x != nil {
+		return x.Node
+	}
+	return nil
+}
+
+type AuthApproveRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	AuthId        string                 `protobuf:"bytes,1,opt,name=auth_id,json=authId,proto3" json:"auth_id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *AuthApproveRequest) Reset() {
+	*x = AuthApproveRequest{}
+	mi := &file_headscale_v1_auth_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AuthApproveRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AuthApproveRequest) ProtoMessage() {}
+
+func (x *AuthApproveRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_auth_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AuthApproveRequest.ProtoReflect.Descriptor instead.
+func (*AuthApproveRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_auth_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *AuthApproveRequest) GetAuthId() string {
+	if x != nil {
+		return x.AuthId
+	}
+	return ""
+}
+
+type AuthApproveResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *AuthApproveResponse) Reset() {
+	*x = AuthApproveResponse{}
+	mi := &file_headscale_v1_auth_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AuthApproveResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AuthApproveResponse) ProtoMessage() {}
+
+func (x *AuthApproveResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_auth_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AuthApproveResponse.ProtoReflect.Descriptor instead.
+func (*AuthApproveResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_auth_proto_rawDescGZIP(), []int{3}
+}
+
+type AuthRejectRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	AuthId        string                 `protobuf:"bytes,1,opt,name=auth_id,json=authId,proto3" json:"auth_id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *AuthRejectRequest) Reset() {
+	*x = AuthRejectRequest{}
+	mi := &file_headscale_v1_auth_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AuthRejectRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AuthRejectRequest) ProtoMessage() {}
+
+func (x *AuthRejectRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_auth_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AuthRejectRequest.ProtoReflect.Descriptor instead.
+func (*AuthRejectRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_auth_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *AuthRejectRequest) GetAuthId() string {
+	if x != nil {
+		return x.AuthId
+	}
+	return ""
+}
+
+type AuthRejectResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *AuthRejectResponse) Reset() {
+	*x = AuthRejectResponse{}
+	mi := &file_headscale_v1_auth_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AuthRejectResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AuthRejectResponse) ProtoMessage() {}
+
+func (x *AuthRejectResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_auth_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AuthRejectResponse.ProtoReflect.Descriptor instead.
+func (*AuthRejectResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_auth_proto_rawDescGZIP(), []int{5}
+}
+
+var File_headscale_v1_auth_proto protoreflect.FileDescriptor
+
+const file_headscale_v1_auth_proto_rawDesc = "" +
+	"\n" +
+	"\x17headscale/v1/auth.proto\x12\fheadscale.v1\x1a\x17headscale/v1/node.proto\"B\n" +
+	"\x13AuthRegisterRequest\x12\x12\n" +
+	"\x04user\x18\x01 \x01(\tR\x04user\x12\x17\n" +
+	"\aauth_id\x18\x02 \x01(\tR\x06authId\">\n" +
+	"\x14AuthRegisterResponse\x12&\n" +
+	"\x04node\x18\x01 \x01(\v2\x12.headscale.v1.NodeR\x04node\"-\n" +
+	"\x12AuthApproveRequest\x12\x17\n" +
+	"\aauth_id\x18\x01 \x01(\tR\x06authId\"\x15\n" +
+	"\x13AuthApproveResponse\",\n" +
+	"\x11AuthRejectRequest\x12\x17\n" +
+	"\aauth_id\x18\x01 \x01(\tR\x06authId\"\x14\n" +
+	"\x12AuthRejectResponseB)Z'github.com/juanfont/headscale/gen/go/v1b\x06proto3"
+
+var (
+	file_headscale_v1_auth_proto_rawDescOnce sync.Once
+	file_headscale_v1_auth_proto_rawDescData []byte
+)
+
+func file_headscale_v1_auth_proto_rawDescGZIP() []byte {
+	file_headscale_v1_auth_proto_rawDescOnce.Do(func() {
+		file_headscale_v1_auth_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_headscale_v1_auth_proto_rawDesc), len(file_headscale_v1_auth_proto_rawDesc)))
+	})
+	return file_headscale_v1_auth_proto_rawDescData
+}
+
+var file_headscale_v1_auth_proto_msgTypes = make([]protoimpl.MessageInfo, 6)
+var file_headscale_v1_auth_proto_goTypes = []any{
+	(*AuthRegisterRequest)(nil),  // 0: headscale.v1.AuthRegisterRequest
+	(*AuthRegisterResponse)(nil), // 1: headscale.v1.AuthRegisterResponse
+	(*AuthApproveRequest)(nil),   // 2: headscale.v1.AuthApproveRequest
+	(*AuthApproveResponse)(nil),  // 3: headscale.v1.AuthApproveResponse
+	(*AuthRejectRequest)(nil),    // 4: headscale.v1.AuthRejectRequest
+	(*AuthRejectResponse)(nil),   // 5: headscale.v1.AuthRejectResponse
+	(*Node)(nil),                 // 6: headscale.v1.Node
+}
+var file_headscale_v1_auth_proto_depIdxs = []int32{
+	6, // 0: headscale.v1.AuthRegisterResponse.node:type_name -> headscale.v1.Node
+	1, // [1:1] is the sub-list for method output_type
+	1, // [1:1] is the sub-list for method input_type
+	1, // [1:1] is the sub-list for extension type_name
+	1, // [1:1] is the sub-list for extension extendee
+	0, // [0:1] is the sub-list for field type_name
+}
+
+func init() { file_headscale_v1_auth_proto_init() }
+func file_headscale_v1_auth_proto_init() {
+	if File_headscale_v1_auth_proto != nil {
+		return
+	}
+	file_headscale_v1_node_proto_init()
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_headscale_v1_auth_proto_rawDesc), len(file_headscale_v1_auth_proto_rawDesc)),
+			NumEnums:      0,
+			NumMessages:   6,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_headscale_v1_auth_proto_goTypes,
+		DependencyIndexes: file_headscale_v1_auth_proto_depIdxs,
+		MessageInfos:      file_headscale_v1_auth_proto_msgTypes,
+	}.Build()
+	File_headscale_v1_auth_proto = out.File
+	file_headscale_v1_auth_proto_goTypes = nil
+	file_headscale_v1_auth_proto_depIdxs = nil
+}
diff --git a/gen/go/headscale/v1/device.pb.go b/gen/go/headscale/v1/device.pb.go
new file mode 100644
index 000000000..e2362b05a
--- /dev/null
+++ b/gen/go/headscale/v1/device.pb.go
@@ -0,0 +1,890 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: headscale/v1/device.proto
+
+package v1
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type Latency struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	LatencyMs     float32                `protobuf:"fixed32,1,opt,name=latency_ms,json=latencyMs,proto3" json:"latency_ms,omitempty"`
+	Preferred     bool                   `protobuf:"varint,2,opt,name=preferred,proto3" json:"preferred,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Latency) Reset() {
+	*x = Latency{}
+	mi := &file_headscale_v1_device_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Latency) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Latency) ProtoMessage() {}
+
+func (x *Latency) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Latency.ProtoReflect.Descriptor instead.
+func (*Latency) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *Latency) GetLatencyMs() float32 {
+	if x != nil {
+		return x.LatencyMs
+	}
+	return 0
+}
+
+func (x *Latency) GetPreferred() bool {
+	if x != nil {
+		return x.Preferred
+	}
+	return false
+}
+
+type ClientSupports struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	HairPinning   bool                   `protobuf:"varint,1,opt,name=hair_pinning,json=hairPinning,proto3" json:"hair_pinning,omitempty"`
+	Ipv6          bool                   `protobuf:"varint,2,opt,name=ipv6,proto3" json:"ipv6,omitempty"`
+	Pcp           bool                   `protobuf:"varint,3,opt,name=pcp,proto3" json:"pcp,omitempty"`
+	Pmp           bool                   `protobuf:"varint,4,opt,name=pmp,proto3" json:"pmp,omitempty"`
+	Udp           bool                   `protobuf:"varint,5,opt,name=udp,proto3" json:"udp,omitempty"`
+	Upnp          bool                   `protobuf:"varint,6,opt,name=upnp,proto3" json:"upnp,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ClientSupports) Reset() {
+	*x = ClientSupports{}
+	mi := &file_headscale_v1_device_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ClientSupports) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ClientSupports) ProtoMessage() {}
+
+func (x *ClientSupports) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ClientSupports.ProtoReflect.Descriptor instead.
+func (*ClientSupports) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *ClientSupports) GetHairPinning() bool {
+	if x != nil {
+		return x.HairPinning
+	}
+	return false
+}
+
+func (x *ClientSupports) GetIpv6() bool {
+	if x != nil {
+		return x.Ipv6
+	}
+	return false
+}
+
+func (x *ClientSupports) GetPcp() bool {
+	if x != nil {
+		return x.Pcp
+	}
+	return false
+}
+
+func (x *ClientSupports) GetPmp() bool {
+	if x != nil {
+		return x.Pmp
+	}
+	return false
+}
+
+func (x *ClientSupports) GetUdp() bool {
+	if x != nil {
+		return x.Udp
+	}
+	return false
+}
+
+func (x *ClientSupports) GetUpnp() bool {
+	if x != nil {
+		return x.Upnp
+	}
+	return false
+}
+
+type ClientConnectivity struct {
+	state                 protoimpl.MessageState `protogen:"open.v1"`
+	Endpoints             []string               `protobuf:"bytes,1,rep,name=endpoints,proto3" json:"endpoints,omitempty"`
+	Derp                  string                 `protobuf:"bytes,2,opt,name=derp,proto3" json:"derp,omitempty"`
+	MappingVariesByDestIp bool                   `protobuf:"varint,3,opt,name=mapping_varies_by_dest_ip,json=mappingVariesByDestIp,proto3" json:"mapping_varies_by_dest_ip,omitempty"`
+	Latency               map[string]*Latency    `protobuf:"bytes,4,rep,name=latency,proto3" json:"latency,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	ClientSupports        *ClientSupports        `protobuf:"bytes,5,opt,name=client_supports,json=clientSupports,proto3" json:"client_supports,omitempty"`
+	unknownFields         protoimpl.UnknownFields
+	sizeCache             protoimpl.SizeCache
+}
+
+func (x *ClientConnectivity) Reset() {
+	*x = ClientConnectivity{}
+	mi := &file_headscale_v1_device_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ClientConnectivity) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ClientConnectivity) ProtoMessage() {}
+
+func (x *ClientConnectivity) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ClientConnectivity.ProtoReflect.Descriptor instead.
+func (*ClientConnectivity) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *ClientConnectivity) GetEndpoints() []string {
+	if x != nil {
+		return x.Endpoints
+	}
+	return nil
+}
+
+func (x *ClientConnectivity) GetDerp() string {
+	if x != nil {
+		return x.Derp
+	}
+	return ""
+}
+
+func (x *ClientConnectivity) GetMappingVariesByDestIp() bool {
+	if x != nil {
+		return x.MappingVariesByDestIp
+	}
+	return false
+}
+
+func (x *ClientConnectivity) GetLatency() map[string]*Latency {
+	if x != nil {
+		return x.Latency
+	}
+	return nil
+}
+
+func (x *ClientConnectivity) GetClientSupports() *ClientSupports {
+	if x != nil {
+		return x.ClientSupports
+	}
+	return nil
+}
+
+type GetDeviceRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetDeviceRequest) Reset() {
+	*x = GetDeviceRequest{}
+	mi := &file_headscale_v1_device_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetDeviceRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetDeviceRequest) ProtoMessage() {}
+
+func (x *GetDeviceRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetDeviceRequest.ProtoReflect.Descriptor instead.
+func (*GetDeviceRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *GetDeviceRequest) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+type GetDeviceResponse struct {
+	state                     protoimpl.MessageState `protogen:"open.v1"`
+	Addresses                 []string               `protobuf:"bytes,1,rep,name=addresses,proto3" json:"addresses,omitempty"`
+	Id                        string                 `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`
+	User                      string                 `protobuf:"bytes,3,opt,name=user,proto3" json:"user,omitempty"`
+	Name                      string                 `protobuf:"bytes,4,opt,name=name,proto3" json:"name,omitempty"`
+	Hostname                  string                 `protobuf:"bytes,5,opt,name=hostname,proto3" json:"hostname,omitempty"`
+	ClientVersion             string                 `protobuf:"bytes,6,opt,name=client_version,json=clientVersion,proto3" json:"client_version,omitempty"`
+	UpdateAvailable           bool                   `protobuf:"varint,7,opt,name=update_available,json=updateAvailable,proto3" json:"update_available,omitempty"`
+	Os                        string                 `protobuf:"bytes,8,opt,name=os,proto3" json:"os,omitempty"`
+	Created                   *timestamppb.Timestamp `protobuf:"bytes,9,opt,name=created,proto3" json:"created,omitempty"`
+	LastSeen                  *timestamppb.Timestamp `protobuf:"bytes,10,opt,name=last_seen,json=lastSeen,proto3" json:"last_seen,omitempty"`
+	KeyExpiryDisabled         bool                   `protobuf:"varint,11,opt,name=key_expiry_disabled,json=keyExpiryDisabled,proto3" json:"key_expiry_disabled,omitempty"`
+	Expires                   *timestamppb.Timestamp `protobuf:"bytes,12,opt,name=expires,proto3" json:"expires,omitempty"`
+	Authorized                bool                   `protobuf:"varint,13,opt,name=authorized,proto3" json:"authorized,omitempty"`
+	IsExternal                bool                   `protobuf:"varint,14,opt,name=is_external,json=isExternal,proto3" json:"is_external,omitempty"`
+	MachineKey                string                 `protobuf:"bytes,15,opt,name=machine_key,json=machineKey,proto3" json:"machine_key,omitempty"`
+	NodeKey                   string                 `protobuf:"bytes,16,opt,name=node_key,json=nodeKey,proto3" json:"node_key,omitempty"`
+	BlocksIncomingConnections bool                   `protobuf:"varint,17,opt,name=blocks_incoming_connections,json=blocksIncomingConnections,proto3" json:"blocks_incoming_connections,omitempty"`
+	EnabledRoutes             []string               `protobuf:"bytes,18,rep,name=enabled_routes,json=enabledRoutes,proto3" json:"enabled_routes,omitempty"`
+	AdvertisedRoutes          []string               `protobuf:"bytes,19,rep,name=advertised_routes,json=advertisedRoutes,proto3" json:"advertised_routes,omitempty"`
+	ClientConnectivity        *ClientConnectivity    `protobuf:"bytes,20,opt,name=client_connectivity,json=clientConnectivity,proto3" json:"client_connectivity,omitempty"`
+	unknownFields             protoimpl.UnknownFields
+	sizeCache                 protoimpl.SizeCache
+}
+
+func (x *GetDeviceResponse) Reset() {
+	*x = GetDeviceResponse{}
+	mi := &file_headscale_v1_device_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetDeviceResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetDeviceResponse) ProtoMessage() {}
+
+func (x *GetDeviceResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetDeviceResponse.ProtoReflect.Descriptor instead.
+func (*GetDeviceResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *GetDeviceResponse) GetAddresses() []string {
+	if x != nil {
+		return x.Addresses
+	}
+	return nil
+}
+
+func (x *GetDeviceResponse) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+func (x *GetDeviceResponse) GetUser() string {
+	if x != nil {
+		return x.User
+	}
+	return ""
+}
+
+func (x *GetDeviceResponse) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *GetDeviceResponse) GetHostname() string {
+	if x != nil {
+		return x.Hostname
+	}
+	return ""
+}
+
+func (x *GetDeviceResponse) GetClientVersion() string {
+	if x != nil {
+		return x.ClientVersion
+	}
+	return ""
+}
+
+func (x *GetDeviceResponse) GetUpdateAvailable() bool {
+	if x != nil {
+		return x.UpdateAvailable
+	}
+	return false
+}
+
+func (x *GetDeviceResponse) GetOs() string {
+	if x != nil {
+		return x.Os
+	}
+	return ""
+}
+
+func (x *GetDeviceResponse) GetCreated() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Created
+	}
+	return nil
+}
+
+func (x *GetDeviceResponse) GetLastSeen() *timestamppb.Timestamp {
+	if x != nil {
+		return x.LastSeen
+	}
+	return nil
+}
+
+func (x *GetDeviceResponse) GetKeyExpiryDisabled() bool {
+	if x != nil {
+		return x.KeyExpiryDisabled
+	}
+	return false
+}
+
+func (x *GetDeviceResponse) GetExpires() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Expires
+	}
+	return nil
+}
+
+func (x *GetDeviceResponse) GetAuthorized() bool {
+	if x != nil {
+		return x.Authorized
+	}
+	return false
+}
+
+func (x *GetDeviceResponse) GetIsExternal() bool {
+	if x != nil {
+		return x.IsExternal
+	}
+	return false
+}
+
+func (x *GetDeviceResponse) GetMachineKey() string {
+	if x != nil {
+		return x.MachineKey
+	}
+	return ""
+}
+
+func (x *GetDeviceResponse) GetNodeKey() string {
+	if x != nil {
+		return x.NodeKey
+	}
+	return ""
+}
+
+func (x *GetDeviceResponse) GetBlocksIncomingConnections() bool {
+	if x != nil {
+		return x.BlocksIncomingConnections
+	}
+	return false
+}
+
+func (x *GetDeviceResponse) GetEnabledRoutes() []string {
+	if x != nil {
+		return x.EnabledRoutes
+	}
+	return nil
+}
+
+func (x *GetDeviceResponse) GetAdvertisedRoutes() []string {
+	if x != nil {
+		return x.AdvertisedRoutes
+	}
+	return nil
+}
+
+func (x *GetDeviceResponse) GetClientConnectivity() *ClientConnectivity {
+	if x != nil {
+		return x.ClientConnectivity
+	}
+	return nil
+}
+
+type DeleteDeviceRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeleteDeviceRequest) Reset() {
+	*x = DeleteDeviceRequest{}
+	mi := &file_headscale_v1_device_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeleteDeviceRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteDeviceRequest) ProtoMessage() {}
+
+func (x *DeleteDeviceRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteDeviceRequest.ProtoReflect.Descriptor instead.
+func (*DeleteDeviceRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *DeleteDeviceRequest) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+type DeleteDeviceResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeleteDeviceResponse) Reset() {
+	*x = DeleteDeviceResponse{}
+	mi := &file_headscale_v1_device_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeleteDeviceResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteDeviceResponse) ProtoMessage() {}
+
+func (x *DeleteDeviceResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[6]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteDeviceResponse.ProtoReflect.Descriptor instead.
+func (*DeleteDeviceResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{6}
+}
+
+type GetDeviceRoutesRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetDeviceRoutesRequest) Reset() {
+	*x = GetDeviceRoutesRequest{}
+	mi := &file_headscale_v1_device_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetDeviceRoutesRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetDeviceRoutesRequest) ProtoMessage() {}
+
+func (x *GetDeviceRoutesRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetDeviceRoutesRequest.ProtoReflect.Descriptor instead.
+func (*GetDeviceRoutesRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *GetDeviceRoutesRequest) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+type GetDeviceRoutesResponse struct {
+	state            protoimpl.MessageState `protogen:"open.v1"`
+	EnabledRoutes    []string               `protobuf:"bytes,1,rep,name=enabled_routes,json=enabledRoutes,proto3" json:"enabled_routes,omitempty"`
+	AdvertisedRoutes []string               `protobuf:"bytes,2,rep,name=advertised_routes,json=advertisedRoutes,proto3" json:"advertised_routes,omitempty"`
+	unknownFields    protoimpl.UnknownFields
+	sizeCache        protoimpl.SizeCache
+}
+
+func (x *GetDeviceRoutesResponse) Reset() {
+	*x = GetDeviceRoutesResponse{}
+	mi := &file_headscale_v1_device_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetDeviceRoutesResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetDeviceRoutesResponse) ProtoMessage() {}
+
+func (x *GetDeviceRoutesResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetDeviceRoutesResponse.ProtoReflect.Descriptor instead.
+func (*GetDeviceRoutesResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *GetDeviceRoutesResponse) GetEnabledRoutes() []string {
+	if x != nil {
+		return x.EnabledRoutes
+	}
+	return nil
+}
+
+func (x *GetDeviceRoutesResponse) GetAdvertisedRoutes() []string {
+	if x != nil {
+		return x.AdvertisedRoutes
+	}
+	return nil
+}
+
+type EnableDeviceRoutesRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
+	Routes        []string               `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *EnableDeviceRoutesRequest) Reset() {
+	*x = EnableDeviceRoutesRequest{}
+	mi := &file_headscale_v1_device_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *EnableDeviceRoutesRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*EnableDeviceRoutesRequest) ProtoMessage() {}
+
+func (x *EnableDeviceRoutesRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[9]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use EnableDeviceRoutesRequest.ProtoReflect.Descriptor instead.
+func (*EnableDeviceRoutesRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{9}
+}
+
+func (x *EnableDeviceRoutesRequest) GetId() string {
+	if x != nil {
+		return x.Id
+	}
+	return ""
+}
+
+func (x *EnableDeviceRoutesRequest) GetRoutes() []string {
+	if x != nil {
+		return x.Routes
+	}
+	return nil
+}
+
+type EnableDeviceRoutesResponse struct {
+	state            protoimpl.MessageState `protogen:"open.v1"`
+	EnabledRoutes    []string               `protobuf:"bytes,1,rep,name=enabled_routes,json=enabledRoutes,proto3" json:"enabled_routes,omitempty"`
+	AdvertisedRoutes []string               `protobuf:"bytes,2,rep,name=advertised_routes,json=advertisedRoutes,proto3" json:"advertised_routes,omitempty"`
+	unknownFields    protoimpl.UnknownFields
+	sizeCache        protoimpl.SizeCache
+}
+
+func (x *EnableDeviceRoutesResponse) Reset() {
+	*x = EnableDeviceRoutesResponse{}
+	mi := &file_headscale_v1_device_proto_msgTypes[10]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *EnableDeviceRoutesResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*EnableDeviceRoutesResponse) ProtoMessage() {}
+
+func (x *EnableDeviceRoutesResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_device_proto_msgTypes[10]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use EnableDeviceRoutesResponse.ProtoReflect.Descriptor instead.
+func (*EnableDeviceRoutesResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_device_proto_rawDescGZIP(), []int{10}
+}
+
+func (x *EnableDeviceRoutesResponse) GetEnabledRoutes() []string {
+	if x != nil {
+		return x.EnabledRoutes
+	}
+	return nil
+}
+
+func (x *EnableDeviceRoutesResponse) GetAdvertisedRoutes() []string {
+	if x != nil {
+		return x.AdvertisedRoutes
+	}
+	return nil
+}
+
+var File_headscale_v1_device_proto protoreflect.FileDescriptor
+
+const file_headscale_v1_device_proto_rawDesc = "" +
+	"\n" +
+	"\x19headscale/v1/device.proto\x12\fheadscale.v1\x1a\x1fgoogle/protobuf/timestamp.proto\"F\n" +
+	"\aLatency\x12\x1d\n" +
+	"\n" +
+	"latency_ms\x18\x01 \x01(\x02R\tlatencyMs\x12\x1c\n" +
+	"\tpreferred\x18\x02 \x01(\bR\tpreferred\"\x91\x01\n" +
+	"\x0eClientSupports\x12!\n" +
+	"\fhair_pinning\x18\x01 \x01(\bR\vhairPinning\x12\x12\n" +
+	"\x04ipv6\x18\x02 \x01(\bR\x04ipv6\x12\x10\n" +
+	"\x03pcp\x18\x03 \x01(\bR\x03pcp\x12\x10\n" +
+	"\x03pmp\x18\x04 \x01(\bR\x03pmp\x12\x10\n" +
+	"\x03udp\x18\x05 \x01(\bR\x03udp\x12\x12\n" +
+	"\x04upnp\x18\x06 \x01(\bR\x04upnp\"\xe3\x02\n" +
+	"\x12ClientConnectivity\x12\x1c\n" +
+	"\tendpoints\x18\x01 \x03(\tR\tendpoints\x12\x12\n" +
+	"\x04derp\x18\x02 \x01(\tR\x04derp\x128\n" +
+	"\x19mapping_varies_by_dest_ip\x18\x03 \x01(\bR\x15mappingVariesByDestIp\x12G\n" +
+	"\alatency\x18\x04 \x03(\v2-.headscale.v1.ClientConnectivity.LatencyEntryR\alatency\x12E\n" +
+	"\x0fclient_supports\x18\x05 \x01(\v2\x1c.headscale.v1.ClientSupportsR\x0eclientSupports\x1aQ\n" +
+	"\fLatencyEntry\x12\x10\n" +
+	"\x03key\x18\x01 \x01(\tR\x03key\x12+\n" +
+	"\x05value\x18\x02 \x01(\v2\x15.headscale.v1.LatencyR\x05value:\x028\x01\"\"\n" +
+	"\x10GetDeviceRequest\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\tR\x02id\"\xa0\x06\n" +
+	"\x11GetDeviceResponse\x12\x1c\n" +
+	"\taddresses\x18\x01 \x03(\tR\taddresses\x12\x0e\n" +
+	"\x02id\x18\x02 \x01(\tR\x02id\x12\x12\n" +
+	"\x04user\x18\x03 \x01(\tR\x04user\x12\x12\n" +
+	"\x04name\x18\x04 \x01(\tR\x04name\x12\x1a\n" +
+	"\bhostname\x18\x05 \x01(\tR\bhostname\x12%\n" +
+	"\x0eclient_version\x18\x06 \x01(\tR\rclientVersion\x12)\n" +
+	"\x10update_available\x18\a \x01(\bR\x0fupdateAvailable\x12\x0e\n" +
+	"\x02os\x18\b \x01(\tR\x02os\x124\n" +
+	"\acreated\x18\t \x01(\v2\x1a.google.protobuf.TimestampR\acreated\x127\n" +
+	"\tlast_seen\x18\n" +
+	" \x01(\v2\x1a.google.protobuf.TimestampR\blastSeen\x12.\n" +
+	"\x13key_expiry_disabled\x18\v \x01(\bR\x11keyExpiryDisabled\x124\n" +
+	"\aexpires\x18\f \x01(\v2\x1a.google.protobuf.TimestampR\aexpires\x12\x1e\n" +
+	"\n" +
+	"authorized\x18\r \x01(\bR\n" +
+	"authorized\x12\x1f\n" +
+	"\vis_external\x18\x0e \x01(\bR\n" +
+	"isExternal\x12\x1f\n" +
+	"\vmachine_key\x18\x0f \x01(\tR\n" +
+	"machineKey\x12\x19\n" +
+	"\bnode_key\x18\x10 \x01(\tR\anodeKey\x12>\n" +
+	"\x1bblocks_incoming_connections\x18\x11 \x01(\bR\x19blocksIncomingConnections\x12%\n" +
+	"\x0eenabled_routes\x18\x12 \x03(\tR\renabledRoutes\x12+\n" +
+	"\x11advertised_routes\x18\x13 \x03(\tR\x10advertisedRoutes\x12Q\n" +
+	"\x13client_connectivity\x18\x14 \x01(\v2 .headscale.v1.ClientConnectivityR\x12clientConnectivity\"%\n" +
+	"\x13DeleteDeviceRequest\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\tR\x02id\"\x16\n" +
+	"\x14DeleteDeviceResponse\"(\n" +
+	"\x16GetDeviceRoutesRequest\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\tR\x02id\"m\n" +
+	"\x17GetDeviceRoutesResponse\x12%\n" +
+	"\x0eenabled_routes\x18\x01 \x03(\tR\renabledRoutes\x12+\n" +
+	"\x11advertised_routes\x18\x02 \x03(\tR\x10advertisedRoutes\"C\n" +
+	"\x19EnableDeviceRoutesRequest\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\tR\x02id\x12\x16\n" +
+	"\x06routes\x18\x02 \x03(\tR\x06routes\"p\n" +
+	"\x1aEnableDeviceRoutesResponse\x12%\n" +
+	"\x0eenabled_routes\x18\x01 \x03(\tR\renabledRoutes\x12+\n" +
+	"\x11advertised_routes\x18\x02 \x03(\tR\x10advertisedRoutesB)Z'github.com/juanfont/headscale/gen/go/v1b\x06proto3"
+
+var (
+	file_headscale_v1_device_proto_rawDescOnce sync.Once
+	file_headscale_v1_device_proto_rawDescData []byte
+)
+
+func file_headscale_v1_device_proto_rawDescGZIP() []byte {
+	file_headscale_v1_device_proto_rawDescOnce.Do(func() {
+		file_headscale_v1_device_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_headscale_v1_device_proto_rawDesc), len(file_headscale_v1_device_proto_rawDesc)))
+	})
+	return file_headscale_v1_device_proto_rawDescData
+}
+
+var file_headscale_v1_device_proto_msgTypes = make([]protoimpl.MessageInfo, 12)
+var file_headscale_v1_device_proto_goTypes = []any{
+	(*Latency)(nil),                    // 0: headscale.v1.Latency
+	(*ClientSupports)(nil),             // 1: headscale.v1.ClientSupports
+	(*ClientConnectivity)(nil),         // 2: headscale.v1.ClientConnectivity
+	(*GetDeviceRequest)(nil),           // 3: headscale.v1.GetDeviceRequest
+	(*GetDeviceResponse)(nil),          // 4: headscale.v1.GetDeviceResponse
+	(*DeleteDeviceRequest)(nil),        // 5: headscale.v1.DeleteDeviceRequest
+	(*DeleteDeviceResponse)(nil),       // 6: headscale.v1.DeleteDeviceResponse
+	(*GetDeviceRoutesRequest)(nil),     // 7: headscale.v1.GetDeviceRoutesRequest
+	(*GetDeviceRoutesResponse)(nil),    // 8: headscale.v1.GetDeviceRoutesResponse
+	(*EnableDeviceRoutesRequest)(nil),  // 9: headscale.v1.EnableDeviceRoutesRequest
+	(*EnableDeviceRoutesResponse)(nil), // 10: headscale.v1.EnableDeviceRoutesResponse
+	nil,                                // 11: headscale.v1.ClientConnectivity.LatencyEntry
+	(*timestamppb.Timestamp)(nil),      // 12: google.protobuf.Timestamp
+}
+var file_headscale_v1_device_proto_depIdxs = []int32{
+	11, // 0: headscale.v1.ClientConnectivity.latency:type_name -> headscale.v1.ClientConnectivity.LatencyEntry
+	1,  // 1: headscale.v1.ClientConnectivity.client_supports:type_name -> headscale.v1.ClientSupports
+	12, // 2: headscale.v1.GetDeviceResponse.created:type_name -> google.protobuf.Timestamp
+	12, // 3: headscale.v1.GetDeviceResponse.last_seen:type_name -> google.protobuf.Timestamp
+	12, // 4: headscale.v1.GetDeviceResponse.expires:type_name -> google.protobuf.Timestamp
+	2,  // 5: headscale.v1.GetDeviceResponse.client_connectivity:type_name -> headscale.v1.ClientConnectivity
+	0,  // 6: headscale.v1.ClientConnectivity.LatencyEntry.value:type_name -> headscale.v1.Latency
+	7,  // [7:7] is the sub-list for method output_type
+	7,  // [7:7] is the sub-list for method input_type
+	7,  // [7:7] is the sub-list for extension type_name
+	7,  // [7:7] is the sub-list for extension extendee
+	0,  // [0:7] is the sub-list for field type_name
+}
+
+func init() { file_headscale_v1_device_proto_init() }
+func file_headscale_v1_device_proto_init() {
+	if File_headscale_v1_device_proto != nil {
+		return
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_headscale_v1_device_proto_rawDesc), len(file_headscale_v1_device_proto_rawDesc)),
+			NumEnums:      0,
+			NumMessages:   12,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_headscale_v1_device_proto_goTypes,
+		DependencyIndexes: file_headscale_v1_device_proto_depIdxs,
+		MessageInfos:      file_headscale_v1_device_proto_msgTypes,
+	}.Build()
+	File_headscale_v1_device_proto = out.File
+	file_headscale_v1_device_proto_goTypes = nil
+	file_headscale_v1_device_proto_depIdxs = nil
+}
diff --git a/gen/go/headscale/v1/headscale.pb.go b/gen/go/headscale/v1/headscale.pb.go
new file mode 100644
index 000000000..4a1875126
--- /dev/null
+++ b/gen/go/headscale/v1/headscale.pb.go
@@ -0,0 +1,318 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: headscale/v1/headscale.proto
+
+package v1
+
+import (
+	_ "google.golang.org/genproto/googleapis/api/annotations"
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type HealthRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *HealthRequest) Reset() {
+	*x = HealthRequest{}
+	mi := &file_headscale_v1_headscale_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *HealthRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*HealthRequest) ProtoMessage() {}
+
+func (x *HealthRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_headscale_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use HealthRequest.ProtoReflect.Descriptor instead.
+func (*HealthRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_headscale_proto_rawDescGZIP(), []int{0}
+}
+
+type HealthResponse struct {
+	state                protoimpl.MessageState `protogen:"open.v1"`
+	DatabaseConnectivity bool                   `protobuf:"varint,1,opt,name=database_connectivity,json=databaseConnectivity,proto3" json:"database_connectivity,omitempty"`
+	unknownFields        protoimpl.UnknownFields
+	sizeCache            protoimpl.SizeCache
+}
+
+func (x *HealthResponse) Reset() {
+	*x = HealthResponse{}
+	mi := &file_headscale_v1_headscale_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *HealthResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*HealthResponse) ProtoMessage() {}
+
+func (x *HealthResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_headscale_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use HealthResponse.ProtoReflect.Descriptor instead.
+func (*HealthResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_headscale_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *HealthResponse) GetDatabaseConnectivity() bool {
+	if x != nil {
+		return x.DatabaseConnectivity
+	}
+	return false
+}
+
+var File_headscale_v1_headscale_proto protoreflect.FileDescriptor
+
+const file_headscale_v1_headscale_proto_rawDesc = "" +
+	"\n" +
+	"\x1cheadscale/v1/headscale.proto\x12\fheadscale.v1\x1a\x1cgoogle/api/annotations.proto\x1a\x17headscale/v1/user.proto\x1a\x1dheadscale/v1/preauthkey.proto\x1a\x17headscale/v1/node.proto\x1a\x19headscale/v1/apikey.proto\x1a\x17headscale/v1/auth.proto\x1a\x19headscale/v1/policy.proto\"\x0f\n" +
+	"\rHealthRequest\"E\n" +
+	"\x0eHealthResponse\x123\n" +
+	"\x15database_connectivity\x18\x01 \x01(\bR\x14databaseConnectivity2\xe0\x1a\n" +
+	"\x10HeadscaleService\x12h\n" +
+	"\n" +
+	"CreateUser\x12\x1f.headscale.v1.CreateUserRequest\x1a .headscale.v1.CreateUserResponse\"\x17\x82\xd3\xe4\x93\x02\x11:\x01*\"\f/api/v1/user\x12\x80\x01\n" +
+	"\n" +
+	"RenameUser\x12\x1f.headscale.v1.RenameUserRequest\x1a .headscale.v1.RenameUserResponse\"/\x82\xd3\xe4\x93\x02)\"'/api/v1/user/{old_id}/rename/{new_name}\x12j\n" +
+	"\n" +
+	"DeleteUser\x12\x1f.headscale.v1.DeleteUserRequest\x1a .headscale.v1.DeleteUserResponse\"\x19\x82\xd3\xe4\x93\x02\x13*\x11/api/v1/user/{id}\x12b\n" +
+	"\tListUsers\x12\x1e.headscale.v1.ListUsersRequest\x1a\x1f.headscale.v1.ListUsersResponse\"\x14\x82\xd3\xe4\x93\x02\x0e\x12\f/api/v1/user\x12\x80\x01\n" +
+	"\x10CreatePreAuthKey\x12%.headscale.v1.CreatePreAuthKeyRequest\x1a&.headscale.v1.CreatePreAuthKeyResponse\"\x1d\x82\xd3\xe4\x93\x02\x17:\x01*\"\x12/api/v1/preauthkey\x12\x87\x01\n" +
+	"\x10ExpirePreAuthKey\x12%.headscale.v1.ExpirePreAuthKeyRequest\x1a&.headscale.v1.ExpirePreAuthKeyResponse\"$\x82\xd3\xe4\x93\x02\x1e:\x01*\"\x19/api/v1/preauthkey/expire\x12}\n" +
+	"\x10DeletePreAuthKey\x12%.headscale.v1.DeletePreAuthKeyRequest\x1a&.headscale.v1.DeletePreAuthKeyResponse\"\x1a\x82\xd3\xe4\x93\x02\x14*\x12/api/v1/preauthkey\x12z\n" +
+	"\x0fListPreAuthKeys\x12$.headscale.v1.ListPreAuthKeysRequest\x1a%.headscale.v1.ListPreAuthKeysResponse\"\x1a\x82\xd3\xe4\x93\x02\x14\x12\x12/api/v1/preauthkey\x12}\n" +
+	"\x0fDebugCreateNode\x12$.headscale.v1.DebugCreateNodeRequest\x1a%.headscale.v1.DebugCreateNodeResponse\"\x1d\x82\xd3\xe4\x93\x02\x17:\x01*\"\x12/api/v1/debug/node\x12f\n" +
+	"\aGetNode\x12\x1c.headscale.v1.GetNodeRequest\x1a\x1d.headscale.v1.GetNodeResponse\"\x1e\x82\xd3\xe4\x93\x02\x18\x12\x16/api/v1/node/{node_id}\x12n\n" +
+	"\aSetTags\x12\x1c.headscale.v1.SetTagsRequest\x1a\x1d.headscale.v1.SetTagsResponse\"&\x82\xd3\xe4\x93\x02 :\x01*\"\x1b/api/v1/node/{node_id}/tags\x12\x96\x01\n" +
+	"\x11SetApprovedRoutes\x12&.headscale.v1.SetApprovedRoutesRequest\x1a'.headscale.v1.SetApprovedRoutesResponse\"0\x82\xd3\xe4\x93\x02*:\x01*\"%/api/v1/node/{node_id}/approve_routes\x12t\n" +
+	"\fRegisterNode\x12!.headscale.v1.RegisterNodeRequest\x1a\".headscale.v1.RegisterNodeResponse\"\x1d\x82\xd3\xe4\x93\x02\x17\"\x15/api/v1/node/register\x12o\n" +
+	"\n" +
+	"DeleteNode\x12\x1f.headscale.v1.DeleteNodeRequest\x1a .headscale.v1.DeleteNodeResponse\"\x1e\x82\xd3\xe4\x93\x02\x18*\x16/api/v1/node/{node_id}\x12v\n" +
+	"\n" +
+	"ExpireNode\x12\x1f.headscale.v1.ExpireNodeRequest\x1a .headscale.v1.ExpireNodeResponse\"%\x82\xd3\xe4\x93\x02\x1f\"\x1d/api/v1/node/{node_id}/expire\x12\x81\x01\n" +
+	"\n" +
+	"RenameNode\x12\x1f.headscale.v1.RenameNodeRequest\x1a .headscale.v1.RenameNodeResponse\"0\x82\xd3\xe4\x93\x02*\"(/api/v1/node/{node_id}/rename/{new_name}\x12b\n" +
+	"\tListNodes\x12\x1e.headscale.v1.ListNodesRequest\x1a\x1f.headscale.v1.ListNodesResponse\"\x14\x82\xd3\xe4\x93\x02\x0e\x12\f/api/v1/node\x12\x80\x01\n" +
+	"\x0fBackfillNodeIPs\x12$.headscale.v1.BackfillNodeIPsRequest\x1a%.headscale.v1.BackfillNodeIPsResponse\" \x82\xd3\xe4\x93\x02\x1a\"\x18/api/v1/node/backfillips\x12w\n" +
+	"\fAuthRegister\x12!.headscale.v1.AuthRegisterRequest\x1a\".headscale.v1.AuthRegisterResponse\" \x82\xd3\xe4\x93\x02\x1a:\x01*\"\x15/api/v1/auth/register\x12s\n" +
+	"\vAuthApprove\x12 .headscale.v1.AuthApproveRequest\x1a!.headscale.v1.AuthApproveResponse\"\x1f\x82\xd3\xe4\x93\x02\x19:\x01*\"\x14/api/v1/auth/approve\x12o\n" +
+	"\n" +
+	"AuthReject\x12\x1f.headscale.v1.AuthRejectRequest\x1a .headscale.v1.AuthRejectResponse\"\x1e\x82\xd3\xe4\x93\x02\x18:\x01*\"\x13/api/v1/auth/reject\x12p\n" +
+	"\fCreateApiKey\x12!.headscale.v1.CreateApiKeyRequest\x1a\".headscale.v1.CreateApiKeyResponse\"\x19\x82\xd3\xe4\x93\x02\x13:\x01*\"\x0e/api/v1/apikey\x12w\n" +
+	"\fExpireApiKey\x12!.headscale.v1.ExpireApiKeyRequest\x1a\".headscale.v1.ExpireApiKeyResponse\" \x82\xd3\xe4\x93\x02\x1a:\x01*\"\x15/api/v1/apikey/expire\x12j\n" +
+	"\vListApiKeys\x12 .headscale.v1.ListApiKeysRequest\x1a!.headscale.v1.ListApiKeysResponse\"\x16\x82\xd3\xe4\x93\x02\x10\x12\x0e/api/v1/apikey\x12v\n" +
+	"\fDeleteApiKey\x12!.headscale.v1.DeleteApiKeyRequest\x1a\".headscale.v1.DeleteApiKeyResponse\"\x1f\x82\xd3\xe4\x93\x02\x19*\x17/api/v1/apikey/{prefix}\x12d\n" +
+	"\tGetPolicy\x12\x1e.headscale.v1.GetPolicyRequest\x1a\x1f.headscale.v1.GetPolicyResponse\"\x16\x82\xd3\xe4\x93\x02\x10\x12\x0e/api/v1/policy\x12g\n" +
+	"\tSetPolicy\x12\x1e.headscale.v1.SetPolicyRequest\x1a\x1f.headscale.v1.SetPolicyResponse\"\x19\x82\xd3\xe4\x93\x02\x13:\x01*\x1a\x0e/api/v1/policy\x12s\n" +
+	"\vCheckPolicy\x12 .headscale.v1.CheckPolicyRequest\x1a!.headscale.v1.CheckPolicyResponse\"\x1f\x82\xd3\xe4\x93\x02\x19:\x01*\"\x14/api/v1/policy/check\x12[\n" +
+	"\x06Health\x12\x1b.headscale.v1.HealthRequest\x1a\x1c.headscale.v1.HealthResponse\"\x16\x82\xd3\xe4\x93\x02\x10\x12\x0e/api/v1/healthB)Z'github.com/juanfont/headscale/gen/go/v1b\x06proto3"
+
+var (
+	file_headscale_v1_headscale_proto_rawDescOnce sync.Once
+	file_headscale_v1_headscale_proto_rawDescData []byte
+)
+
+func file_headscale_v1_headscale_proto_rawDescGZIP() []byte {
+	file_headscale_v1_headscale_proto_rawDescOnce.Do(func() {
+		file_headscale_v1_headscale_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_headscale_v1_headscale_proto_rawDesc), len(file_headscale_v1_headscale_proto_rawDesc)))
+	})
+	return file_headscale_v1_headscale_proto_rawDescData
+}
+
+var file_headscale_v1_headscale_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
+var file_headscale_v1_headscale_proto_goTypes = []any{
+	(*HealthRequest)(nil),             // 0: headscale.v1.HealthRequest
+	(*HealthResponse)(nil),            // 1: headscale.v1.HealthResponse
+	(*CreateUserRequest)(nil),         // 2: headscale.v1.CreateUserRequest
+	(*RenameUserRequest)(nil),         // 3: headscale.v1.RenameUserRequest
+	(*DeleteUserRequest)(nil),         // 4: headscale.v1.DeleteUserRequest
+	(*ListUsersRequest)(nil),          // 5: headscale.v1.ListUsersRequest
+	(*CreatePreAuthKeyRequest)(nil),   // 6: headscale.v1.CreatePreAuthKeyRequest
+	(*ExpirePreAuthKeyRequest)(nil),   // 7: headscale.v1.ExpirePreAuthKeyRequest
+	(*DeletePreAuthKeyRequest)(nil),   // 8: headscale.v1.DeletePreAuthKeyRequest
+	(*ListPreAuthKeysRequest)(nil),    // 9: headscale.v1.ListPreAuthKeysRequest
+	(*DebugCreateNodeRequest)(nil),    // 10: headscale.v1.DebugCreateNodeRequest
+	(*GetNodeRequest)(nil),            // 11: headscale.v1.GetNodeRequest
+	(*SetTagsRequest)(nil),            // 12: headscale.v1.SetTagsRequest
+	(*SetApprovedRoutesRequest)(nil),  // 13: headscale.v1.SetApprovedRoutesRequest
+	(*RegisterNodeRequest)(nil),       // 14: headscale.v1.RegisterNodeRequest
+	(*DeleteNodeRequest)(nil),         // 15: headscale.v1.DeleteNodeRequest
+	(*ExpireNodeRequest)(nil),         // 16: headscale.v1.ExpireNodeRequest
+	(*RenameNodeRequest)(nil),         // 17: headscale.v1.RenameNodeRequest
+	(*ListNodesRequest)(nil),          // 18: headscale.v1.ListNodesRequest
+	(*BackfillNodeIPsRequest)(nil),    // 19: headscale.v1.BackfillNodeIPsRequest
+	(*AuthRegisterRequest)(nil),       // 20: headscale.v1.AuthRegisterRequest
+	(*AuthApproveRequest)(nil),        // 21: headscale.v1.AuthApproveRequest
+	(*AuthRejectRequest)(nil),         // 22: headscale.v1.AuthRejectRequest
+	(*CreateApiKeyRequest)(nil),       // 23: headscale.v1.CreateApiKeyRequest
+	(*ExpireApiKeyRequest)(nil),       // 24: headscale.v1.ExpireApiKeyRequest
+	(*ListApiKeysRequest)(nil),        // 25: headscale.v1.ListApiKeysRequest
+	(*DeleteApiKeyRequest)(nil),       // 26: headscale.v1.DeleteApiKeyRequest
+	(*GetPolicyRequest)(nil),          // 27: headscale.v1.GetPolicyRequest
+	(*SetPolicyRequest)(nil),          // 28: headscale.v1.SetPolicyRequest
+	(*CheckPolicyRequest)(nil),        // 29: headscale.v1.CheckPolicyRequest
+	(*CreateUserResponse)(nil),        // 30: headscale.v1.CreateUserResponse
+	(*RenameUserResponse)(nil),        // 31: headscale.v1.RenameUserResponse
+	(*DeleteUserResponse)(nil),        // 32: headscale.v1.DeleteUserResponse
+	(*ListUsersResponse)(nil),         // 33: headscale.v1.ListUsersResponse
+	(*CreatePreAuthKeyResponse)(nil),  // 34: headscale.v1.CreatePreAuthKeyResponse
+	(*ExpirePreAuthKeyResponse)(nil),  // 35: headscale.v1.ExpirePreAuthKeyResponse
+	(*DeletePreAuthKeyResponse)(nil),  // 36: headscale.v1.DeletePreAuthKeyResponse
+	(*ListPreAuthKeysResponse)(nil),   // 37: headscale.v1.ListPreAuthKeysResponse
+	(*DebugCreateNodeResponse)(nil),   // 38: headscale.v1.DebugCreateNodeResponse
+	(*GetNodeResponse)(nil),           // 39: headscale.v1.GetNodeResponse
+	(*SetTagsResponse)(nil),           // 40: headscale.v1.SetTagsResponse
+	(*SetApprovedRoutesResponse)(nil), // 41: headscale.v1.SetApprovedRoutesResponse
+	(*RegisterNodeResponse)(nil),      // 42: headscale.v1.RegisterNodeResponse
+	(*DeleteNodeResponse)(nil),        // 43: headscale.v1.DeleteNodeResponse
+	(*ExpireNodeResponse)(nil),        // 44: headscale.v1.ExpireNodeResponse
+	(*RenameNodeResponse)(nil),        // 45: headscale.v1.RenameNodeResponse
+	(*ListNodesResponse)(nil),         // 46: headscale.v1.ListNodesResponse
+	(*BackfillNodeIPsResponse)(nil),   // 47: headscale.v1.BackfillNodeIPsResponse
+	(*AuthRegisterResponse)(nil),      // 48: headscale.v1.AuthRegisterResponse
+	(*AuthApproveResponse)(nil),       // 49: headscale.v1.AuthApproveResponse
+	(*AuthRejectResponse)(nil),        // 50: headscale.v1.AuthRejectResponse
+	(*CreateApiKeyResponse)(nil),      // 51: headscale.v1.CreateApiKeyResponse
+	(*ExpireApiKeyResponse)(nil),      // 52: headscale.v1.ExpireApiKeyResponse
+	(*ListApiKeysResponse)(nil),       // 53: headscale.v1.ListApiKeysResponse
+	(*DeleteApiKeyResponse)(nil),      // 54: headscale.v1.DeleteApiKeyResponse
+	(*GetPolicyResponse)(nil),         // 55: headscale.v1.GetPolicyResponse
+	(*SetPolicyResponse)(nil),         // 56: headscale.v1.SetPolicyResponse
+	(*CheckPolicyResponse)(nil),       // 57: headscale.v1.CheckPolicyResponse
+}
+var file_headscale_v1_headscale_proto_depIdxs = []int32{
+	2,  // 0: headscale.v1.HeadscaleService.CreateUser:input_type -> headscale.v1.CreateUserRequest
+	3,  // 1: headscale.v1.HeadscaleService.RenameUser:input_type -> headscale.v1.RenameUserRequest
+	4,  // 2: headscale.v1.HeadscaleService.DeleteUser:input_type -> headscale.v1.DeleteUserRequest
+	5,  // 3: headscale.v1.HeadscaleService.ListUsers:input_type -> headscale.v1.ListUsersRequest
+	6,  // 4: headscale.v1.HeadscaleService.CreatePreAuthKey:input_type -> headscale.v1.CreatePreAuthKeyRequest
+	7,  // 5: headscale.v1.HeadscaleService.ExpirePreAuthKey:input_type -> headscale.v1.ExpirePreAuthKeyRequest
+	8,  // 6: headscale.v1.HeadscaleService.DeletePreAuthKey:input_type -> headscale.v1.DeletePreAuthKeyRequest
+	9,  // 7: headscale.v1.HeadscaleService.ListPreAuthKeys:input_type -> headscale.v1.ListPreAuthKeysRequest
+	10, // 8: headscale.v1.HeadscaleService.DebugCreateNode:input_type -> headscale.v1.DebugCreateNodeRequest
+	11, // 9: headscale.v1.HeadscaleService.GetNode:input_type -> headscale.v1.GetNodeRequest
+	12, // 10: headscale.v1.HeadscaleService.SetTags:input_type -> headscale.v1.SetTagsRequest
+	13, // 11: headscale.v1.HeadscaleService.SetApprovedRoutes:input_type -> headscale.v1.SetApprovedRoutesRequest
+	14, // 12: headscale.v1.HeadscaleService.RegisterNode:input_type -> headscale.v1.RegisterNodeRequest
+	15, // 13: headscale.v1.HeadscaleService.DeleteNode:input_type -> headscale.v1.DeleteNodeRequest
+	16, // 14: headscale.v1.HeadscaleService.ExpireNode:input_type -> headscale.v1.ExpireNodeRequest
+	17, // 15: headscale.v1.HeadscaleService.RenameNode:input_type -> headscale.v1.RenameNodeRequest
+	18, // 16: headscale.v1.HeadscaleService.ListNodes:input_type -> headscale.v1.ListNodesRequest
+	19, // 17: headscale.v1.HeadscaleService.BackfillNodeIPs:input_type -> headscale.v1.BackfillNodeIPsRequest
+	20, // 18: headscale.v1.HeadscaleService.AuthRegister:input_type -> headscale.v1.AuthRegisterRequest
+	21, // 19: headscale.v1.HeadscaleService.AuthApprove:input_type -> headscale.v1.AuthApproveRequest
+	22, // 20: headscale.v1.HeadscaleService.AuthReject:input_type -> headscale.v1.AuthRejectRequest
+	23, // 21: headscale.v1.HeadscaleService.CreateApiKey:input_type -> headscale.v1.CreateApiKeyRequest
+	24, // 22: headscale.v1.HeadscaleService.ExpireApiKey:input_type -> headscale.v1.ExpireApiKeyRequest
+	25, // 23: headscale.v1.HeadscaleService.ListApiKeys:input_type -> headscale.v1.ListApiKeysRequest
+	26, // 24: headscale.v1.HeadscaleService.DeleteApiKey:input_type -> headscale.v1.DeleteApiKeyRequest
+	27, // 25: headscale.v1.HeadscaleService.GetPolicy:input_type -> headscale.v1.GetPolicyRequest
+	28, // 26: headscale.v1.HeadscaleService.SetPolicy:input_type -> headscale.v1.SetPolicyRequest
+	29, // 27: headscale.v1.HeadscaleService.CheckPolicy:input_type -> headscale.v1.CheckPolicyRequest
+	0,  // 28: headscale.v1.HeadscaleService.Health:input_type -> headscale.v1.HealthRequest
+	30, // 29: headscale.v1.HeadscaleService.CreateUser:output_type -> headscale.v1.CreateUserResponse
+	31, // 30: headscale.v1.HeadscaleService.RenameUser:output_type -> headscale.v1.RenameUserResponse
+	32, // 31: headscale.v1.HeadscaleService.DeleteUser:output_type -> headscale.v1.DeleteUserResponse
+	33, // 32: headscale.v1.HeadscaleService.ListUsers:output_type -> headscale.v1.ListUsersResponse
+	34, // 33: headscale.v1.HeadscaleService.CreatePreAuthKey:output_type -> headscale.v1.CreatePreAuthKeyResponse
+	35, // 34: headscale.v1.HeadscaleService.ExpirePreAuthKey:output_type -> headscale.v1.ExpirePreAuthKeyResponse
+	36, // 35: headscale.v1.HeadscaleService.DeletePreAuthKey:output_type -> headscale.v1.DeletePreAuthKeyResponse
+	37, // 36: headscale.v1.HeadscaleService.ListPreAuthKeys:output_type -> headscale.v1.ListPreAuthKeysResponse
+	38, // 37: headscale.v1.HeadscaleService.DebugCreateNode:output_type -> headscale.v1.DebugCreateNodeResponse
+	39, // 38: headscale.v1.HeadscaleService.GetNode:output_type -> headscale.v1.GetNodeResponse
+	40, // 39: headscale.v1.HeadscaleService.SetTags:output_type -> headscale.v1.SetTagsResponse
+	41, // 40: headscale.v1.HeadscaleService.SetApprovedRoutes:output_type -> headscale.v1.SetApprovedRoutesResponse
+	42, // 41: headscale.v1.HeadscaleService.RegisterNode:output_type -> headscale.v1.RegisterNodeResponse
+	43, // 42: headscale.v1.HeadscaleService.DeleteNode:output_type -> headscale.v1.DeleteNodeResponse
+	44, // 43: headscale.v1.HeadscaleService.ExpireNode:output_type -> headscale.v1.ExpireNodeResponse
+	45, // 44: headscale.v1.HeadscaleService.RenameNode:output_type -> headscale.v1.RenameNodeResponse
+	46, // 45: headscale.v1.HeadscaleService.ListNodes:output_type -> headscale.v1.ListNodesResponse
+	47, // 46: headscale.v1.HeadscaleService.BackfillNodeIPs:output_type -> headscale.v1.BackfillNodeIPsResponse
+	48, // 47: headscale.v1.HeadscaleService.AuthRegister:output_type -> headscale.v1.AuthRegisterResponse
+	49, // 48: headscale.v1.HeadscaleService.AuthApprove:output_type -> headscale.v1.AuthApproveResponse
+	50, // 49: headscale.v1.HeadscaleService.AuthReject:output_type -> headscale.v1.AuthRejectResponse
+	51, // 50: headscale.v1.HeadscaleService.CreateApiKey:output_type -> headscale.v1.CreateApiKeyResponse
+	52, // 51: headscale.v1.HeadscaleService.ExpireApiKey:output_type -> headscale.v1.ExpireApiKeyResponse
+	53, // 52: headscale.v1.HeadscaleService.ListApiKeys:output_type -> headscale.v1.ListApiKeysResponse
+	54, // 53: headscale.v1.HeadscaleService.DeleteApiKey:output_type -> headscale.v1.DeleteApiKeyResponse
+	55, // 54: headscale.v1.HeadscaleService.GetPolicy:output_type -> headscale.v1.GetPolicyResponse
+	56, // 55: headscale.v1.HeadscaleService.SetPolicy:output_type -> headscale.v1.SetPolicyResponse
+	57, // 56: headscale.v1.HeadscaleService.CheckPolicy:output_type -> headscale.v1.CheckPolicyResponse
+	1,  // 57: headscale.v1.HeadscaleService.Health:output_type -> headscale.v1.HealthResponse
+	29, // [29:58] is the sub-list for method output_type
+	0,  // [0:29] is the sub-list for method input_type
+	0,  // [0:0] is the sub-list for extension type_name
+	0,  // [0:0] is the sub-list for extension extendee
+	0,  // [0:0] is the sub-list for field type_name
+}
+
+func init() { file_headscale_v1_headscale_proto_init() }
+func file_headscale_v1_headscale_proto_init() {
+	if File_headscale_v1_headscale_proto != nil {
+		return
+	}
+	file_headscale_v1_user_proto_init()
+	file_headscale_v1_preauthkey_proto_init()
+	file_headscale_v1_node_proto_init()
+	file_headscale_v1_apikey_proto_init()
+	file_headscale_v1_auth_proto_init()
+	file_headscale_v1_policy_proto_init()
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_headscale_v1_headscale_proto_rawDesc), len(file_headscale_v1_headscale_proto_rawDesc)),
+			NumEnums:      0,
+			NumMessages:   2,
+			NumExtensions: 0,
+			NumServices:   1,
+		},
+		GoTypes:           file_headscale_v1_headscale_proto_goTypes,
+		DependencyIndexes: file_headscale_v1_headscale_proto_depIdxs,
+		MessageInfos:      file_headscale_v1_headscale_proto_msgTypes,
+	}.Build()
+	File_headscale_v1_headscale_proto = out.File
+	file_headscale_v1_headscale_proto_goTypes = nil
+	file_headscale_v1_headscale_proto_depIdxs = nil
+}
diff --git a/gen/go/headscale/v1/headscale.pb.gw.go b/gen/go/headscale/v1/headscale.pb.gw.go
new file mode 100644
index 000000000..cbe1c9c31
--- /dev/null
+++ b/gen/go/headscale/v1/headscale.pb.gw.go
@@ -0,0 +1,2201 @@
+// Code generated by protoc-gen-grpc-gateway. DO NOT EDIT.
+// source: headscale/v1/headscale.proto
+
+/*
+Package v1 is a reverse proxy.
+
+It translates gRPC into RESTful JSON APIs.
+*/
+package v1
+
+import (
+	"context"
+	"errors"
+	"io"
+	"net/http"
+
+	"github.com/grpc-ecosystem/grpc-gateway/v2/runtime"
+	"github.com/grpc-ecosystem/grpc-gateway/v2/utilities"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/codes"
+	"google.golang.org/grpc/grpclog"
+	"google.golang.org/grpc/metadata"
+	"google.golang.org/grpc/status"
+	"google.golang.org/protobuf/proto"
+)
+
+// Suppress "imported and not used" errors
+var (
+	_ codes.Code
+	_ io.Reader
+	_ status.Status
+	_ = errors.New
+	_ = runtime.String
+	_ = utilities.NewDoubleArray
+	_ = metadata.Join
+)
+
+func request_HeadscaleService_CreateUser_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq CreateUserRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.CreateUser(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_CreateUser_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq CreateUserRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.CreateUser(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_RenameUser_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq RenameUserRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["old_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "old_id")
+	}
+	protoReq.OldId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "old_id", err)
+	}
+	val, ok = pathParams["new_name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "new_name")
+	}
+	protoReq.NewName, err = runtime.String(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "new_name", err)
+	}
+	msg, err := client.RenameUser(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_RenameUser_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq RenameUserRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	val, ok := pathParams["old_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "old_id")
+	}
+	protoReq.OldId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "old_id", err)
+	}
+	val, ok = pathParams["new_name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "new_name")
+	}
+	protoReq.NewName, err = runtime.String(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "new_name", err)
+	}
+	msg, err := server.RenameUser(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_DeleteUser_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DeleteUserRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "id")
+	}
+	protoReq.Id, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "id", err)
+	}
+	msg, err := client.DeleteUser(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_DeleteUser_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DeleteUserRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	val, ok := pathParams["id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "id")
+	}
+	protoReq.Id, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "id", err)
+	}
+	msg, err := server.DeleteUser(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+var filter_HeadscaleService_ListUsers_0 = &utilities.DoubleArray{Encoding: map[string]int{}, Base: []int(nil), Check: []int(nil)}
+
+func request_HeadscaleService_ListUsers_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ListUsersRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_ListUsers_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := client.ListUsers(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_ListUsers_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ListUsersRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_ListUsers_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.ListUsers(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_CreatePreAuthKey_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq CreatePreAuthKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.CreatePreAuthKey(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_CreatePreAuthKey_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq CreatePreAuthKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.CreatePreAuthKey(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_ExpirePreAuthKey_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ExpirePreAuthKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.ExpirePreAuthKey(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_ExpirePreAuthKey_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ExpirePreAuthKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.ExpirePreAuthKey(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+var filter_HeadscaleService_DeletePreAuthKey_0 = &utilities.DoubleArray{Encoding: map[string]int{}, Base: []int(nil), Check: []int(nil)}
+
+func request_HeadscaleService_DeletePreAuthKey_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DeletePreAuthKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_DeletePreAuthKey_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := client.DeletePreAuthKey(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_DeletePreAuthKey_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DeletePreAuthKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_DeletePreAuthKey_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.DeletePreAuthKey(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_ListPreAuthKeys_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ListPreAuthKeysRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.ListPreAuthKeys(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_ListPreAuthKeys_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ListPreAuthKeysRequest
+		metadata runtime.ServerMetadata
+	)
+	msg, err := server.ListPreAuthKeys(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_DebugCreateNode_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DebugCreateNodeRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.DebugCreateNode(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_DebugCreateNode_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DebugCreateNodeRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.DebugCreateNode(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_GetNode_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq GetNodeRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	msg, err := client.GetNode(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_GetNode_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq GetNodeRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	msg, err := server.GetNode(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_SetTags_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq SetTagsRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	msg, err := client.SetTags(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_SetTags_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq SetTagsRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	msg, err := server.SetTags(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_SetApprovedRoutes_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq SetApprovedRoutesRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	msg, err := client.SetApprovedRoutes(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_SetApprovedRoutes_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq SetApprovedRoutesRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	msg, err := server.SetApprovedRoutes(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+var filter_HeadscaleService_RegisterNode_0 = &utilities.DoubleArray{Encoding: map[string]int{}, Base: []int(nil), Check: []int(nil)}
+
+func request_HeadscaleService_RegisterNode_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq RegisterNodeRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_RegisterNode_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := client.RegisterNode(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_RegisterNode_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq RegisterNodeRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_RegisterNode_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.RegisterNode(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_DeleteNode_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DeleteNodeRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	msg, err := client.DeleteNode(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_DeleteNode_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DeleteNodeRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	msg, err := server.DeleteNode(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+var filter_HeadscaleService_ExpireNode_0 = &utilities.DoubleArray{Encoding: map[string]int{"node_id": 0}, Base: []int{1, 1, 0}, Check: []int{0, 1, 2}}
+
+func request_HeadscaleService_ExpireNode_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ExpireNodeRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_ExpireNode_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := client.ExpireNode(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_ExpireNode_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ExpireNodeRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_ExpireNode_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.ExpireNode(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_RenameNode_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq RenameNodeRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	val, ok = pathParams["new_name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "new_name")
+	}
+	protoReq.NewName, err = runtime.String(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "new_name", err)
+	}
+	msg, err := client.RenameNode(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_RenameNode_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq RenameNodeRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	val, ok := pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+	protoReq.NodeId, err = runtime.Uint64(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+	val, ok = pathParams["new_name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "new_name")
+	}
+	protoReq.NewName, err = runtime.String(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "new_name", err)
+	}
+	msg, err := server.RenameNode(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+var filter_HeadscaleService_ListNodes_0 = &utilities.DoubleArray{Encoding: map[string]int{}, Base: []int(nil), Check: []int(nil)}
+
+func request_HeadscaleService_ListNodes_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ListNodesRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_ListNodes_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := client.ListNodes(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_ListNodes_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ListNodesRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_ListNodes_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.ListNodes(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+var filter_HeadscaleService_BackfillNodeIPs_0 = &utilities.DoubleArray{Encoding: map[string]int{}, Base: []int(nil), Check: []int(nil)}
+
+func request_HeadscaleService_BackfillNodeIPs_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq BackfillNodeIPsRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_BackfillNodeIPs_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := client.BackfillNodeIPs(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_BackfillNodeIPs_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq BackfillNodeIPsRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_BackfillNodeIPs_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.BackfillNodeIPs(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_AuthRegister_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq AuthRegisterRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.AuthRegister(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_AuthRegister_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq AuthRegisterRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.AuthRegister(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_AuthApprove_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq AuthApproveRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.AuthApprove(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_AuthApprove_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq AuthApproveRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.AuthApprove(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_AuthReject_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq AuthRejectRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.AuthReject(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_AuthReject_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq AuthRejectRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.AuthReject(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_CreateApiKey_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq CreateApiKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.CreateApiKey(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_CreateApiKey_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq CreateApiKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.CreateApiKey(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_ExpireApiKey_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ExpireApiKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.ExpireApiKey(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_ExpireApiKey_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ExpireApiKeyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.ExpireApiKey(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_ListApiKeys_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ListApiKeysRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.ListApiKeys(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_ListApiKeys_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq ListApiKeysRequest
+		metadata runtime.ServerMetadata
+	)
+	msg, err := server.ListApiKeys(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+var filter_HeadscaleService_DeleteApiKey_0 = &utilities.DoubleArray{Encoding: map[string]int{"prefix": 0}, Base: []int{1, 1, 0}, Check: []int{0, 1, 2}}
+
+func request_HeadscaleService_DeleteApiKey_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DeleteApiKeyRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	val, ok := pathParams["prefix"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "prefix")
+	}
+	protoReq.Prefix, err = runtime.String(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "prefix", err)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_DeleteApiKey_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := client.DeleteApiKey(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_DeleteApiKey_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq DeleteApiKeyRequest
+		metadata runtime.ServerMetadata
+		err      error
+	)
+	val, ok := pathParams["prefix"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "prefix")
+	}
+	protoReq.Prefix, err = runtime.String(val)
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "prefix", err)
+	}
+	if err := req.ParseForm(); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if err := runtime.PopulateQueryParameters(&protoReq, req.Form, filter_HeadscaleService_DeleteApiKey_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.DeleteApiKey(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_GetPolicy_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq GetPolicyRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.GetPolicy(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_GetPolicy_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq GetPolicyRequest
+		metadata runtime.ServerMetadata
+	)
+	msg, err := server.GetPolicy(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_SetPolicy_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq SetPolicyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.SetPolicy(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_SetPolicy_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq SetPolicyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.SetPolicy(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_CheckPolicy_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq CheckPolicyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.CheckPolicy(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_CheckPolicy_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq CheckPolicyRequest
+		metadata runtime.ServerMetadata
+	)
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && !errors.Is(err, io.EOF) {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+	msg, err := server.CheckPolicy(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+func request_HeadscaleService_Health_0(ctx context.Context, marshaler runtime.Marshaler, client HeadscaleServiceClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq HealthRequest
+		metadata runtime.ServerMetadata
+	)
+	if req.Body != nil {
+		_, _ = io.Copy(io.Discard, req.Body)
+	}
+	msg, err := client.Health(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+}
+
+func local_request_HeadscaleService_Health_0(ctx context.Context, marshaler runtime.Marshaler, server HeadscaleServiceServer, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var (
+		protoReq HealthRequest
+		metadata runtime.ServerMetadata
+	)
+	msg, err := server.Health(ctx, &protoReq)
+	return msg, metadata, err
+}
+
+// RegisterHeadscaleServiceHandlerServer registers the http handlers for service HeadscaleService to "mux".
+// UnaryRPC     :call HeadscaleServiceServer directly.
+// StreamingRPC :currently unsupported pending https://github.com/grpc/grpc-go/issues/906.
+// Note that using this registration option will cause many gRPC library features to stop working. Consider using RegisterHeadscaleServiceHandlerFromEndpoint instead.
+// GRPC interceptors will not work for this type of registration. To use interceptors, you must use the "runtime.WithMiddlewares" option in the "runtime.NewServeMux" call.
+func RegisterHeadscaleServiceHandlerServer(ctx context.Context, mux *runtime.ServeMux, server HeadscaleServiceServer) error {
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_CreateUser_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/CreateUser", runtime.WithHTTPPathPattern("/api/v1/user"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_CreateUser_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_CreateUser_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_RenameUser_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/RenameUser", runtime.WithHTTPPathPattern("/api/v1/user/{old_id}/rename/{new_name}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_RenameUser_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_RenameUser_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodDelete, pattern_HeadscaleService_DeleteUser_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DeleteUser", runtime.WithHTTPPathPattern("/api/v1/user/{id}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_DeleteUser_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DeleteUser_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_ListUsers_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ListUsers", runtime.WithHTTPPathPattern("/api/v1/user"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_ListUsers_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ListUsers_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_CreatePreAuthKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/CreatePreAuthKey", runtime.WithHTTPPathPattern("/api/v1/preauthkey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_CreatePreAuthKey_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_CreatePreAuthKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_ExpirePreAuthKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ExpirePreAuthKey", runtime.WithHTTPPathPattern("/api/v1/preauthkey/expire"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_ExpirePreAuthKey_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ExpirePreAuthKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodDelete, pattern_HeadscaleService_DeletePreAuthKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DeletePreAuthKey", runtime.WithHTTPPathPattern("/api/v1/preauthkey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_DeletePreAuthKey_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DeletePreAuthKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_ListPreAuthKeys_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ListPreAuthKeys", runtime.WithHTTPPathPattern("/api/v1/preauthkey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_ListPreAuthKeys_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ListPreAuthKeys_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_DebugCreateNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DebugCreateNode", runtime.WithHTTPPathPattern("/api/v1/debug/node"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_DebugCreateNode_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DebugCreateNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_GetNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/GetNode", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_GetNode_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_GetNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_SetTags_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/SetTags", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}/tags"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_SetTags_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_SetTags_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_SetApprovedRoutes_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/SetApprovedRoutes", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}/approve_routes"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_SetApprovedRoutes_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_SetApprovedRoutes_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_RegisterNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/RegisterNode", runtime.WithHTTPPathPattern("/api/v1/node/register"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_RegisterNode_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_RegisterNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodDelete, pattern_HeadscaleService_DeleteNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DeleteNode", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_DeleteNode_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DeleteNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_ExpireNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ExpireNode", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}/expire"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_ExpireNode_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ExpireNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_RenameNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/RenameNode", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}/rename/{new_name}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_RenameNode_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_RenameNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_ListNodes_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ListNodes", runtime.WithHTTPPathPattern("/api/v1/node"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_ListNodes_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ListNodes_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_BackfillNodeIPs_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/BackfillNodeIPs", runtime.WithHTTPPathPattern("/api/v1/node/backfillips"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_BackfillNodeIPs_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_BackfillNodeIPs_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_AuthRegister_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/AuthRegister", runtime.WithHTTPPathPattern("/api/v1/auth/register"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_AuthRegister_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_AuthRegister_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_AuthApprove_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/AuthApprove", runtime.WithHTTPPathPattern("/api/v1/auth/approve"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_AuthApprove_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_AuthApprove_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_AuthReject_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/AuthReject", runtime.WithHTTPPathPattern("/api/v1/auth/reject"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_AuthReject_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_AuthReject_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_CreateApiKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/CreateApiKey", runtime.WithHTTPPathPattern("/api/v1/apikey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_CreateApiKey_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_CreateApiKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_ExpireApiKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ExpireApiKey", runtime.WithHTTPPathPattern("/api/v1/apikey/expire"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_ExpireApiKey_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ExpireApiKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_ListApiKeys_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ListApiKeys", runtime.WithHTTPPathPattern("/api/v1/apikey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_ListApiKeys_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ListApiKeys_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodDelete, pattern_HeadscaleService_DeleteApiKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DeleteApiKey", runtime.WithHTTPPathPattern("/api/v1/apikey/{prefix}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_DeleteApiKey_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DeleteApiKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_GetPolicy_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/GetPolicy", runtime.WithHTTPPathPattern("/api/v1/policy"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_GetPolicy_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_GetPolicy_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPut, pattern_HeadscaleService_SetPolicy_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/SetPolicy", runtime.WithHTTPPathPattern("/api/v1/policy"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_SetPolicy_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_SetPolicy_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_CheckPolicy_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/CheckPolicy", runtime.WithHTTPPathPattern("/api/v1/policy/check"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_CheckPolicy_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_CheckPolicy_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_Health_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		var stream runtime.ServerTransportStream
+		ctx = grpc.NewContextWithServerTransportStream(ctx, &stream)
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateIncomingContext(ctx, mux, req, "/headscale.v1.HeadscaleService/Health", runtime.WithHTTPPathPattern("/api/v1/health"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := local_request_HeadscaleService_Health_0(annotatedContext, inboundMarshaler, server, req, pathParams)
+		md.HeaderMD, md.TrailerMD = metadata.Join(md.HeaderMD, stream.Header()), metadata.Join(md.TrailerMD, stream.Trailer())
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_Health_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+
+	return nil
+}
+
+// RegisterHeadscaleServiceHandlerFromEndpoint is same as RegisterHeadscaleServiceHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterHeadscaleServiceHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.NewClient(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Errorf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Errorf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+	return RegisterHeadscaleServiceHandler(ctx, mux, conn)
+}
+
+// RegisterHeadscaleServiceHandler registers the http handlers for service HeadscaleService to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterHeadscaleServiceHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterHeadscaleServiceHandlerClient(ctx, mux, NewHeadscaleServiceClient(conn))
+}
+
+// RegisterHeadscaleServiceHandlerClient registers the http handlers for service HeadscaleService
+// to "mux". The handlers forward requests to the grpc endpoint over the given implementation of "HeadscaleServiceClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "HeadscaleServiceClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "HeadscaleServiceClient" to call the correct interceptors. This client ignores the HTTP middlewares.
+func RegisterHeadscaleServiceHandlerClient(ctx context.Context, mux *runtime.ServeMux, client HeadscaleServiceClient) error {
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_CreateUser_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/CreateUser", runtime.WithHTTPPathPattern("/api/v1/user"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_CreateUser_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_CreateUser_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_RenameUser_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/RenameUser", runtime.WithHTTPPathPattern("/api/v1/user/{old_id}/rename/{new_name}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_RenameUser_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_RenameUser_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodDelete, pattern_HeadscaleService_DeleteUser_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DeleteUser", runtime.WithHTTPPathPattern("/api/v1/user/{id}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_DeleteUser_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DeleteUser_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_ListUsers_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ListUsers", runtime.WithHTTPPathPattern("/api/v1/user"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_ListUsers_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ListUsers_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_CreatePreAuthKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/CreatePreAuthKey", runtime.WithHTTPPathPattern("/api/v1/preauthkey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_CreatePreAuthKey_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_CreatePreAuthKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_ExpirePreAuthKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ExpirePreAuthKey", runtime.WithHTTPPathPattern("/api/v1/preauthkey/expire"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_ExpirePreAuthKey_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ExpirePreAuthKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodDelete, pattern_HeadscaleService_DeletePreAuthKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DeletePreAuthKey", runtime.WithHTTPPathPattern("/api/v1/preauthkey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_DeletePreAuthKey_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DeletePreAuthKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_ListPreAuthKeys_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ListPreAuthKeys", runtime.WithHTTPPathPattern("/api/v1/preauthkey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_ListPreAuthKeys_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ListPreAuthKeys_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_DebugCreateNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DebugCreateNode", runtime.WithHTTPPathPattern("/api/v1/debug/node"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_DebugCreateNode_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DebugCreateNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_GetNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/GetNode", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_GetNode_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_GetNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_SetTags_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/SetTags", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}/tags"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_SetTags_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_SetTags_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_SetApprovedRoutes_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/SetApprovedRoutes", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}/approve_routes"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_SetApprovedRoutes_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_SetApprovedRoutes_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_RegisterNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/RegisterNode", runtime.WithHTTPPathPattern("/api/v1/node/register"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_RegisterNode_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_RegisterNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodDelete, pattern_HeadscaleService_DeleteNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DeleteNode", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_DeleteNode_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DeleteNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_ExpireNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ExpireNode", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}/expire"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_ExpireNode_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ExpireNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_RenameNode_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/RenameNode", runtime.WithHTTPPathPattern("/api/v1/node/{node_id}/rename/{new_name}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_RenameNode_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_RenameNode_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_ListNodes_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ListNodes", runtime.WithHTTPPathPattern("/api/v1/node"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_ListNodes_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ListNodes_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_BackfillNodeIPs_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/BackfillNodeIPs", runtime.WithHTTPPathPattern("/api/v1/node/backfillips"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_BackfillNodeIPs_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_BackfillNodeIPs_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_AuthRegister_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/AuthRegister", runtime.WithHTTPPathPattern("/api/v1/auth/register"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_AuthRegister_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_AuthRegister_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_AuthApprove_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/AuthApprove", runtime.WithHTTPPathPattern("/api/v1/auth/approve"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_AuthApprove_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_AuthApprove_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_AuthReject_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/AuthReject", runtime.WithHTTPPathPattern("/api/v1/auth/reject"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_AuthReject_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_AuthReject_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_CreateApiKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/CreateApiKey", runtime.WithHTTPPathPattern("/api/v1/apikey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_CreateApiKey_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_CreateApiKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_ExpireApiKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ExpireApiKey", runtime.WithHTTPPathPattern("/api/v1/apikey/expire"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_ExpireApiKey_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ExpireApiKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_ListApiKeys_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/ListApiKeys", runtime.WithHTTPPathPattern("/api/v1/apikey"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_ListApiKeys_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_ListApiKeys_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodDelete, pattern_HeadscaleService_DeleteApiKey_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/DeleteApiKey", runtime.WithHTTPPathPattern("/api/v1/apikey/{prefix}"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_DeleteApiKey_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_DeleteApiKey_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_GetPolicy_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/GetPolicy", runtime.WithHTTPPathPattern("/api/v1/policy"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_GetPolicy_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_GetPolicy_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPut, pattern_HeadscaleService_SetPolicy_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/SetPolicy", runtime.WithHTTPPathPattern("/api/v1/policy"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_SetPolicy_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_SetPolicy_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodPost, pattern_HeadscaleService_CheckPolicy_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/CheckPolicy", runtime.WithHTTPPathPattern("/api/v1/policy/check"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_CheckPolicy_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_CheckPolicy_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	mux.Handle(http.MethodGet, pattern_HeadscaleService_Health_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		annotatedContext, err := runtime.AnnotateContext(ctx, mux, req, "/headscale.v1.HeadscaleService/Health", runtime.WithHTTPPathPattern("/api/v1/health"))
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_HeadscaleService_Health_0(annotatedContext, inboundMarshaler, client, req, pathParams)
+		annotatedContext = runtime.NewServerMetadataContext(annotatedContext, md)
+		if err != nil {
+			runtime.HTTPError(annotatedContext, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		forward_HeadscaleService_Health_0(annotatedContext, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+	})
+	return nil
+}
+
+var (
+	pattern_HeadscaleService_CreateUser_0        = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "user"}, ""))
+	pattern_HeadscaleService_RenameUser_0        = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3, 2, 4, 1, 0, 4, 1, 5, 5}, []string{"api", "v1", "user", "old_id", "rename", "new_name"}, ""))
+	pattern_HeadscaleService_DeleteUser_0        = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"api", "v1", "user", "id"}, ""))
+	pattern_HeadscaleService_ListUsers_0         = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "user"}, ""))
+	pattern_HeadscaleService_CreatePreAuthKey_0  = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "preauthkey"}, ""))
+	pattern_HeadscaleService_ExpirePreAuthKey_0  = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "preauthkey", "expire"}, ""))
+	pattern_HeadscaleService_DeletePreAuthKey_0  = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "preauthkey"}, ""))
+	pattern_HeadscaleService_ListPreAuthKeys_0   = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "preauthkey"}, ""))
+	pattern_HeadscaleService_DebugCreateNode_0   = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "debug", "node"}, ""))
+	pattern_HeadscaleService_GetNode_0           = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"api", "v1", "node", "node_id"}, ""))
+	pattern_HeadscaleService_SetTags_0           = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3, 2, 4}, []string{"api", "v1", "node", "node_id", "tags"}, ""))
+	pattern_HeadscaleService_SetApprovedRoutes_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3, 2, 4}, []string{"api", "v1", "node", "node_id", "approve_routes"}, ""))
+	pattern_HeadscaleService_RegisterNode_0      = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "node", "register"}, ""))
+	pattern_HeadscaleService_DeleteNode_0        = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"api", "v1", "node", "node_id"}, ""))
+	pattern_HeadscaleService_ExpireNode_0        = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3, 2, 4}, []string{"api", "v1", "node", "node_id", "expire"}, ""))
+	pattern_HeadscaleService_RenameNode_0        = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3, 2, 4, 1, 0, 4, 1, 5, 5}, []string{"api", "v1", "node", "node_id", "rename", "new_name"}, ""))
+	pattern_HeadscaleService_ListNodes_0         = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "node"}, ""))
+	pattern_HeadscaleService_BackfillNodeIPs_0   = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "node", "backfillips"}, ""))
+	pattern_HeadscaleService_AuthRegister_0      = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "auth", "register"}, ""))
+	pattern_HeadscaleService_AuthApprove_0       = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "auth", "approve"}, ""))
+	pattern_HeadscaleService_AuthReject_0        = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "auth", "reject"}, ""))
+	pattern_HeadscaleService_CreateApiKey_0      = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "apikey"}, ""))
+	pattern_HeadscaleService_ExpireApiKey_0      = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "apikey", "expire"}, ""))
+	pattern_HeadscaleService_ListApiKeys_0       = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "apikey"}, ""))
+	pattern_HeadscaleService_DeleteApiKey_0      = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"api", "v1", "apikey", "prefix"}, ""))
+	pattern_HeadscaleService_GetPolicy_0         = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "policy"}, ""))
+	pattern_HeadscaleService_SetPolicy_0         = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "policy"}, ""))
+	pattern_HeadscaleService_CheckPolicy_0       = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"api", "v1", "policy", "check"}, ""))
+	pattern_HeadscaleService_Health_0            = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"api", "v1", "health"}, ""))
+)
+
+var (
+	forward_HeadscaleService_CreateUser_0        = runtime.ForwardResponseMessage
+	forward_HeadscaleService_RenameUser_0        = runtime.ForwardResponseMessage
+	forward_HeadscaleService_DeleteUser_0        = runtime.ForwardResponseMessage
+	forward_HeadscaleService_ListUsers_0         = runtime.ForwardResponseMessage
+	forward_HeadscaleService_CreatePreAuthKey_0  = runtime.ForwardResponseMessage
+	forward_HeadscaleService_ExpirePreAuthKey_0  = runtime.ForwardResponseMessage
+	forward_HeadscaleService_DeletePreAuthKey_0  = runtime.ForwardResponseMessage
+	forward_HeadscaleService_ListPreAuthKeys_0   = runtime.ForwardResponseMessage
+	forward_HeadscaleService_DebugCreateNode_0   = runtime.ForwardResponseMessage
+	forward_HeadscaleService_GetNode_0           = runtime.ForwardResponseMessage
+	forward_HeadscaleService_SetTags_0           = runtime.ForwardResponseMessage
+	forward_HeadscaleService_SetApprovedRoutes_0 = runtime.ForwardResponseMessage
+	forward_HeadscaleService_RegisterNode_0      = runtime.ForwardResponseMessage
+	forward_HeadscaleService_DeleteNode_0        = runtime.ForwardResponseMessage
+	forward_HeadscaleService_ExpireNode_0        = runtime.ForwardResponseMessage
+	forward_HeadscaleService_RenameNode_0        = runtime.ForwardResponseMessage
+	forward_HeadscaleService_ListNodes_0         = runtime.ForwardResponseMessage
+	forward_HeadscaleService_BackfillNodeIPs_0   = runtime.ForwardResponseMessage
+	forward_HeadscaleService_AuthRegister_0      = runtime.ForwardResponseMessage
+	forward_HeadscaleService_AuthApprove_0       = runtime.ForwardResponseMessage
+	forward_HeadscaleService_AuthReject_0        = runtime.ForwardResponseMessage
+	forward_HeadscaleService_CreateApiKey_0      = runtime.ForwardResponseMessage
+	forward_HeadscaleService_ExpireApiKey_0      = runtime.ForwardResponseMessage
+	forward_HeadscaleService_ListApiKeys_0       = runtime.ForwardResponseMessage
+	forward_HeadscaleService_DeleteApiKey_0      = runtime.ForwardResponseMessage
+	forward_HeadscaleService_GetPolicy_0         = runtime.ForwardResponseMessage
+	forward_HeadscaleService_SetPolicy_0         = runtime.ForwardResponseMessage
+	forward_HeadscaleService_CheckPolicy_0       = runtime.ForwardResponseMessage
+	forward_HeadscaleService_Health_0            = runtime.ForwardResponseMessage
+)
diff --git a/gen/go/headscale/v1/headscale_grpc.pb.go b/gen/go/headscale/v1/headscale_grpc.pb.go
new file mode 100644
index 000000000..9c1e38e77
--- /dev/null
+++ b/gen/go/headscale/v1/headscale_grpc.pb.go
@@ -0,0 +1,1199 @@
+// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
+// versions:
+// - protoc-gen-go-grpc v1.6.1
+// - protoc             (unknown)
+// source: headscale/v1/headscale.proto
+
+package v1
+
+import (
+	context "context"
+	grpc "google.golang.org/grpc"
+	codes "google.golang.org/grpc/codes"
+	status "google.golang.org/grpc/status"
+)
+
+// This is a compile-time assertion to ensure that this generated file
+// is compatible with the grpc package it is being compiled against.
+// Requires gRPC-Go v1.64.0 or later.
+const _ = grpc.SupportPackageIsVersion9
+
+const (
+	HeadscaleService_CreateUser_FullMethodName        = "/headscale.v1.HeadscaleService/CreateUser"
+	HeadscaleService_RenameUser_FullMethodName        = "/headscale.v1.HeadscaleService/RenameUser"
+	HeadscaleService_DeleteUser_FullMethodName        = "/headscale.v1.HeadscaleService/DeleteUser"
+	HeadscaleService_ListUsers_FullMethodName         = "/headscale.v1.HeadscaleService/ListUsers"
+	HeadscaleService_CreatePreAuthKey_FullMethodName  = "/headscale.v1.HeadscaleService/CreatePreAuthKey"
+	HeadscaleService_ExpirePreAuthKey_FullMethodName  = "/headscale.v1.HeadscaleService/ExpirePreAuthKey"
+	HeadscaleService_DeletePreAuthKey_FullMethodName  = "/headscale.v1.HeadscaleService/DeletePreAuthKey"
+	HeadscaleService_ListPreAuthKeys_FullMethodName   = "/headscale.v1.HeadscaleService/ListPreAuthKeys"
+	HeadscaleService_DebugCreateNode_FullMethodName   = "/headscale.v1.HeadscaleService/DebugCreateNode"
+	HeadscaleService_GetNode_FullMethodName           = "/headscale.v1.HeadscaleService/GetNode"
+	HeadscaleService_SetTags_FullMethodName           = "/headscale.v1.HeadscaleService/SetTags"
+	HeadscaleService_SetApprovedRoutes_FullMethodName = "/headscale.v1.HeadscaleService/SetApprovedRoutes"
+	HeadscaleService_RegisterNode_FullMethodName      = "/headscale.v1.HeadscaleService/RegisterNode"
+	HeadscaleService_DeleteNode_FullMethodName        = "/headscale.v1.HeadscaleService/DeleteNode"
+	HeadscaleService_ExpireNode_FullMethodName        = "/headscale.v1.HeadscaleService/ExpireNode"
+	HeadscaleService_RenameNode_FullMethodName        = "/headscale.v1.HeadscaleService/RenameNode"
+	HeadscaleService_ListNodes_FullMethodName         = "/headscale.v1.HeadscaleService/ListNodes"
+	HeadscaleService_BackfillNodeIPs_FullMethodName   = "/headscale.v1.HeadscaleService/BackfillNodeIPs"
+	HeadscaleService_AuthRegister_FullMethodName      = "/headscale.v1.HeadscaleService/AuthRegister"
+	HeadscaleService_AuthApprove_FullMethodName       = "/headscale.v1.HeadscaleService/AuthApprove"
+	HeadscaleService_AuthReject_FullMethodName        = "/headscale.v1.HeadscaleService/AuthReject"
+	HeadscaleService_CreateApiKey_FullMethodName      = "/headscale.v1.HeadscaleService/CreateApiKey"
+	HeadscaleService_ExpireApiKey_FullMethodName      = "/headscale.v1.HeadscaleService/ExpireApiKey"
+	HeadscaleService_ListApiKeys_FullMethodName       = "/headscale.v1.HeadscaleService/ListApiKeys"
+	HeadscaleService_DeleteApiKey_FullMethodName      = "/headscale.v1.HeadscaleService/DeleteApiKey"
+	HeadscaleService_GetPolicy_FullMethodName         = "/headscale.v1.HeadscaleService/GetPolicy"
+	HeadscaleService_SetPolicy_FullMethodName         = "/headscale.v1.HeadscaleService/SetPolicy"
+	HeadscaleService_CheckPolicy_FullMethodName       = "/headscale.v1.HeadscaleService/CheckPolicy"
+	HeadscaleService_Health_FullMethodName            = "/headscale.v1.HeadscaleService/Health"
+)
+
+// HeadscaleServiceClient is the client API for HeadscaleService service.
+//
+// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
+type HeadscaleServiceClient interface {
+	// --- User start ---
+	CreateUser(ctx context.Context, in *CreateUserRequest, opts ...grpc.CallOption) (*CreateUserResponse, error)
+	RenameUser(ctx context.Context, in *RenameUserRequest, opts ...grpc.CallOption) (*RenameUserResponse, error)
+	DeleteUser(ctx context.Context, in *DeleteUserRequest, opts ...grpc.CallOption) (*DeleteUserResponse, error)
+	ListUsers(ctx context.Context, in *ListUsersRequest, opts ...grpc.CallOption) (*ListUsersResponse, error)
+	// --- PreAuthKeys start ---
+	CreatePreAuthKey(ctx context.Context, in *CreatePreAuthKeyRequest, opts ...grpc.CallOption) (*CreatePreAuthKeyResponse, error)
+	ExpirePreAuthKey(ctx context.Context, in *ExpirePreAuthKeyRequest, opts ...grpc.CallOption) (*ExpirePreAuthKeyResponse, error)
+	DeletePreAuthKey(ctx context.Context, in *DeletePreAuthKeyRequest, opts ...grpc.CallOption) (*DeletePreAuthKeyResponse, error)
+	ListPreAuthKeys(ctx context.Context, in *ListPreAuthKeysRequest, opts ...grpc.CallOption) (*ListPreAuthKeysResponse, error)
+	// --- Node start ---
+	DebugCreateNode(ctx context.Context, in *DebugCreateNodeRequest, opts ...grpc.CallOption) (*DebugCreateNodeResponse, error)
+	GetNode(ctx context.Context, in *GetNodeRequest, opts ...grpc.CallOption) (*GetNodeResponse, error)
+	SetTags(ctx context.Context, in *SetTagsRequest, opts ...grpc.CallOption) (*SetTagsResponse, error)
+	SetApprovedRoutes(ctx context.Context, in *SetApprovedRoutesRequest, opts ...grpc.CallOption) (*SetApprovedRoutesResponse, error)
+	RegisterNode(ctx context.Context, in *RegisterNodeRequest, opts ...grpc.CallOption) (*RegisterNodeResponse, error)
+	DeleteNode(ctx context.Context, in *DeleteNodeRequest, opts ...grpc.CallOption) (*DeleteNodeResponse, error)
+	ExpireNode(ctx context.Context, in *ExpireNodeRequest, opts ...grpc.CallOption) (*ExpireNodeResponse, error)
+	RenameNode(ctx context.Context, in *RenameNodeRequest, opts ...grpc.CallOption) (*RenameNodeResponse, error)
+	ListNodes(ctx context.Context, in *ListNodesRequest, opts ...grpc.CallOption) (*ListNodesResponse, error)
+	BackfillNodeIPs(ctx context.Context, in *BackfillNodeIPsRequest, opts ...grpc.CallOption) (*BackfillNodeIPsResponse, error)
+	// --- Auth start ---
+	AuthRegister(ctx context.Context, in *AuthRegisterRequest, opts ...grpc.CallOption) (*AuthRegisterResponse, error)
+	AuthApprove(ctx context.Context, in *AuthApproveRequest, opts ...grpc.CallOption) (*AuthApproveResponse, error)
+	AuthReject(ctx context.Context, in *AuthRejectRequest, opts ...grpc.CallOption) (*AuthRejectResponse, error)
+	// --- ApiKeys start ---
+	CreateApiKey(ctx context.Context, in *CreateApiKeyRequest, opts ...grpc.CallOption) (*CreateApiKeyResponse, error)
+	ExpireApiKey(ctx context.Context, in *ExpireApiKeyRequest, opts ...grpc.CallOption) (*ExpireApiKeyResponse, error)
+	ListApiKeys(ctx context.Context, in *ListApiKeysRequest, opts ...grpc.CallOption) (*ListApiKeysResponse, error)
+	DeleteApiKey(ctx context.Context, in *DeleteApiKeyRequest, opts ...grpc.CallOption) (*DeleteApiKeyResponse, error)
+	// --- Policy start ---
+	GetPolicy(ctx context.Context, in *GetPolicyRequest, opts ...grpc.CallOption) (*GetPolicyResponse, error)
+	SetPolicy(ctx context.Context, in *SetPolicyRequest, opts ...grpc.CallOption) (*SetPolicyResponse, error)
+	CheckPolicy(ctx context.Context, in *CheckPolicyRequest, opts ...grpc.CallOption) (*CheckPolicyResponse, error)
+	// --- Health start ---
+	Health(ctx context.Context, in *HealthRequest, opts ...grpc.CallOption) (*HealthResponse, error)
+}
+
+type headscaleServiceClient struct {
+	cc grpc.ClientConnInterface
+}
+
+func NewHeadscaleServiceClient(cc grpc.ClientConnInterface) HeadscaleServiceClient {
+	return &headscaleServiceClient{cc}
+}
+
+func (c *headscaleServiceClient) CreateUser(ctx context.Context, in *CreateUserRequest, opts ...grpc.CallOption) (*CreateUserResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(CreateUserResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_CreateUser_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) RenameUser(ctx context.Context, in *RenameUserRequest, opts ...grpc.CallOption) (*RenameUserResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(RenameUserResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_RenameUser_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) DeleteUser(ctx context.Context, in *DeleteUserRequest, opts ...grpc.CallOption) (*DeleteUserResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(DeleteUserResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_DeleteUser_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) ListUsers(ctx context.Context, in *ListUsersRequest, opts ...grpc.CallOption) (*ListUsersResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ListUsersResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_ListUsers_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) CreatePreAuthKey(ctx context.Context, in *CreatePreAuthKeyRequest, opts ...grpc.CallOption) (*CreatePreAuthKeyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(CreatePreAuthKeyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_CreatePreAuthKey_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) ExpirePreAuthKey(ctx context.Context, in *ExpirePreAuthKeyRequest, opts ...grpc.CallOption) (*ExpirePreAuthKeyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ExpirePreAuthKeyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_ExpirePreAuthKey_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) DeletePreAuthKey(ctx context.Context, in *DeletePreAuthKeyRequest, opts ...grpc.CallOption) (*DeletePreAuthKeyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(DeletePreAuthKeyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_DeletePreAuthKey_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) ListPreAuthKeys(ctx context.Context, in *ListPreAuthKeysRequest, opts ...grpc.CallOption) (*ListPreAuthKeysResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ListPreAuthKeysResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_ListPreAuthKeys_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) DebugCreateNode(ctx context.Context, in *DebugCreateNodeRequest, opts ...grpc.CallOption) (*DebugCreateNodeResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(DebugCreateNodeResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_DebugCreateNode_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) GetNode(ctx context.Context, in *GetNodeRequest, opts ...grpc.CallOption) (*GetNodeResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(GetNodeResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_GetNode_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) SetTags(ctx context.Context, in *SetTagsRequest, opts ...grpc.CallOption) (*SetTagsResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(SetTagsResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_SetTags_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) SetApprovedRoutes(ctx context.Context, in *SetApprovedRoutesRequest, opts ...grpc.CallOption) (*SetApprovedRoutesResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(SetApprovedRoutesResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_SetApprovedRoutes_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) RegisterNode(ctx context.Context, in *RegisterNodeRequest, opts ...grpc.CallOption) (*RegisterNodeResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(RegisterNodeResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_RegisterNode_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) DeleteNode(ctx context.Context, in *DeleteNodeRequest, opts ...grpc.CallOption) (*DeleteNodeResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(DeleteNodeResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_DeleteNode_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) ExpireNode(ctx context.Context, in *ExpireNodeRequest, opts ...grpc.CallOption) (*ExpireNodeResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ExpireNodeResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_ExpireNode_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) RenameNode(ctx context.Context, in *RenameNodeRequest, opts ...grpc.CallOption) (*RenameNodeResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(RenameNodeResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_RenameNode_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) ListNodes(ctx context.Context, in *ListNodesRequest, opts ...grpc.CallOption) (*ListNodesResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ListNodesResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_ListNodes_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) BackfillNodeIPs(ctx context.Context, in *BackfillNodeIPsRequest, opts ...grpc.CallOption) (*BackfillNodeIPsResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(BackfillNodeIPsResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_BackfillNodeIPs_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) AuthRegister(ctx context.Context, in *AuthRegisterRequest, opts ...grpc.CallOption) (*AuthRegisterResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(AuthRegisterResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_AuthRegister_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) AuthApprove(ctx context.Context, in *AuthApproveRequest, opts ...grpc.CallOption) (*AuthApproveResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(AuthApproveResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_AuthApprove_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) AuthReject(ctx context.Context, in *AuthRejectRequest, opts ...grpc.CallOption) (*AuthRejectResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(AuthRejectResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_AuthReject_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) CreateApiKey(ctx context.Context, in *CreateApiKeyRequest, opts ...grpc.CallOption) (*CreateApiKeyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(CreateApiKeyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_CreateApiKey_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) ExpireApiKey(ctx context.Context, in *ExpireApiKeyRequest, opts ...grpc.CallOption) (*ExpireApiKeyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ExpireApiKeyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_ExpireApiKey_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) ListApiKeys(ctx context.Context, in *ListApiKeysRequest, opts ...grpc.CallOption) (*ListApiKeysResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ListApiKeysResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_ListApiKeys_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) DeleteApiKey(ctx context.Context, in *DeleteApiKeyRequest, opts ...grpc.CallOption) (*DeleteApiKeyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(DeleteApiKeyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_DeleteApiKey_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) GetPolicy(ctx context.Context, in *GetPolicyRequest, opts ...grpc.CallOption) (*GetPolicyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(GetPolicyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_GetPolicy_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) SetPolicy(ctx context.Context, in *SetPolicyRequest, opts ...grpc.CallOption) (*SetPolicyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(SetPolicyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_SetPolicy_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) CheckPolicy(ctx context.Context, in *CheckPolicyRequest, opts ...grpc.CallOption) (*CheckPolicyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(CheckPolicyResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_CheckPolicy_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *headscaleServiceClient) Health(ctx context.Context, in *HealthRequest, opts ...grpc.CallOption) (*HealthResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(HealthResponse)
+	err := c.cc.Invoke(ctx, HeadscaleService_Health_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// HeadscaleServiceServer is the server API for HeadscaleService service.
+// All implementations must embed UnimplementedHeadscaleServiceServer
+// for forward compatibility.
+type HeadscaleServiceServer interface {
+	// --- User start ---
+	CreateUser(context.Context, *CreateUserRequest) (*CreateUserResponse, error)
+	RenameUser(context.Context, *RenameUserRequest) (*RenameUserResponse, error)
+	DeleteUser(context.Context, *DeleteUserRequest) (*DeleteUserResponse, error)
+	ListUsers(context.Context, *ListUsersRequest) (*ListUsersResponse, error)
+	// --- PreAuthKeys start ---
+	CreatePreAuthKey(context.Context, *CreatePreAuthKeyRequest) (*CreatePreAuthKeyResponse, error)
+	ExpirePreAuthKey(context.Context, *ExpirePreAuthKeyRequest) (*ExpirePreAuthKeyResponse, error)
+	DeletePreAuthKey(context.Context, *DeletePreAuthKeyRequest) (*DeletePreAuthKeyResponse, error)
+	ListPreAuthKeys(context.Context, *ListPreAuthKeysRequest) (*ListPreAuthKeysResponse, error)
+	// --- Node start ---
+	DebugCreateNode(context.Context, *DebugCreateNodeRequest) (*DebugCreateNodeResponse, error)
+	GetNode(context.Context, *GetNodeRequest) (*GetNodeResponse, error)
+	SetTags(context.Context, *SetTagsRequest) (*SetTagsResponse, error)
+	SetApprovedRoutes(context.Context, *SetApprovedRoutesRequest) (*SetApprovedRoutesResponse, error)
+	RegisterNode(context.Context, *RegisterNodeRequest) (*RegisterNodeResponse, error)
+	DeleteNode(context.Context, *DeleteNodeRequest) (*DeleteNodeResponse, error)
+	ExpireNode(context.Context, *ExpireNodeRequest) (*ExpireNodeResponse, error)
+	RenameNode(context.Context, *RenameNodeRequest) (*RenameNodeResponse, error)
+	ListNodes(context.Context, *ListNodesRequest) (*ListNodesResponse, error)
+	BackfillNodeIPs(context.Context, *BackfillNodeIPsRequest) (*BackfillNodeIPsResponse, error)
+	// --- Auth start ---
+	AuthRegister(context.Context, *AuthRegisterRequest) (*AuthRegisterResponse, error)
+	AuthApprove(context.Context, *AuthApproveRequest) (*AuthApproveResponse, error)
+	AuthReject(context.Context, *AuthRejectRequest) (*AuthRejectResponse, error)
+	// --- ApiKeys start ---
+	CreateApiKey(context.Context, *CreateApiKeyRequest) (*CreateApiKeyResponse, error)
+	ExpireApiKey(context.Context, *ExpireApiKeyRequest) (*ExpireApiKeyResponse, error)
+	ListApiKeys(context.Context, *ListApiKeysRequest) (*ListApiKeysResponse, error)
+	DeleteApiKey(context.Context, *DeleteApiKeyRequest) (*DeleteApiKeyResponse, error)
+	// --- Policy start ---
+	GetPolicy(context.Context, *GetPolicyRequest) (*GetPolicyResponse, error)
+	SetPolicy(context.Context, *SetPolicyRequest) (*SetPolicyResponse, error)
+	CheckPolicy(context.Context, *CheckPolicyRequest) (*CheckPolicyResponse, error)
+	// --- Health start ---
+	Health(context.Context, *HealthRequest) (*HealthResponse, error)
+	mustEmbedUnimplementedHeadscaleServiceServer()
+}
+
+// UnimplementedHeadscaleServiceServer must be embedded to have
+// forward compatible implementations.
+//
+// NOTE: this should be embedded by value instead of pointer to avoid a nil
+// pointer dereference when methods are called.
+type UnimplementedHeadscaleServiceServer struct{}
+
+func (UnimplementedHeadscaleServiceServer) CreateUser(context.Context, *CreateUserRequest) (*CreateUserResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method CreateUser not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) RenameUser(context.Context, *RenameUserRequest) (*RenameUserResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method RenameUser not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) DeleteUser(context.Context, *DeleteUserRequest) (*DeleteUserResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method DeleteUser not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) ListUsers(context.Context, *ListUsersRequest) (*ListUsersResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method ListUsers not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) CreatePreAuthKey(context.Context, *CreatePreAuthKeyRequest) (*CreatePreAuthKeyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method CreatePreAuthKey not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) ExpirePreAuthKey(context.Context, *ExpirePreAuthKeyRequest) (*ExpirePreAuthKeyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method ExpirePreAuthKey not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) DeletePreAuthKey(context.Context, *DeletePreAuthKeyRequest) (*DeletePreAuthKeyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method DeletePreAuthKey not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) ListPreAuthKeys(context.Context, *ListPreAuthKeysRequest) (*ListPreAuthKeysResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method ListPreAuthKeys not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) DebugCreateNode(context.Context, *DebugCreateNodeRequest) (*DebugCreateNodeResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method DebugCreateNode not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) GetNode(context.Context, *GetNodeRequest) (*GetNodeResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method GetNode not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) SetTags(context.Context, *SetTagsRequest) (*SetTagsResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method SetTags not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) SetApprovedRoutes(context.Context, *SetApprovedRoutesRequest) (*SetApprovedRoutesResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method SetApprovedRoutes not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) RegisterNode(context.Context, *RegisterNodeRequest) (*RegisterNodeResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method RegisterNode not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) DeleteNode(context.Context, *DeleteNodeRequest) (*DeleteNodeResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method DeleteNode not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) ExpireNode(context.Context, *ExpireNodeRequest) (*ExpireNodeResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method ExpireNode not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) RenameNode(context.Context, *RenameNodeRequest) (*RenameNodeResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method RenameNode not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) ListNodes(context.Context, *ListNodesRequest) (*ListNodesResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method ListNodes not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) BackfillNodeIPs(context.Context, *BackfillNodeIPsRequest) (*BackfillNodeIPsResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method BackfillNodeIPs not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) AuthRegister(context.Context, *AuthRegisterRequest) (*AuthRegisterResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method AuthRegister not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) AuthApprove(context.Context, *AuthApproveRequest) (*AuthApproveResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method AuthApprove not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) AuthReject(context.Context, *AuthRejectRequest) (*AuthRejectResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method AuthReject not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) CreateApiKey(context.Context, *CreateApiKeyRequest) (*CreateApiKeyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method CreateApiKey not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) ExpireApiKey(context.Context, *ExpireApiKeyRequest) (*ExpireApiKeyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method ExpireApiKey not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) ListApiKeys(context.Context, *ListApiKeysRequest) (*ListApiKeysResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method ListApiKeys not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) DeleteApiKey(context.Context, *DeleteApiKeyRequest) (*DeleteApiKeyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method DeleteApiKey not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) GetPolicy(context.Context, *GetPolicyRequest) (*GetPolicyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method GetPolicy not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) SetPolicy(context.Context, *SetPolicyRequest) (*SetPolicyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method SetPolicy not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) CheckPolicy(context.Context, *CheckPolicyRequest) (*CheckPolicyResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method CheckPolicy not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) Health(context.Context, *HealthRequest) (*HealthResponse, error) {
+	return nil, status.Error(codes.Unimplemented, "method Health not implemented")
+}
+func (UnimplementedHeadscaleServiceServer) mustEmbedUnimplementedHeadscaleServiceServer() {}
+func (UnimplementedHeadscaleServiceServer) testEmbeddedByValue()                          {}
+
+// UnsafeHeadscaleServiceServer may be embedded to opt out of forward compatibility for this service.
+// Use of this interface is not recommended, as added methods to HeadscaleServiceServer will
+// result in compilation errors.
+type UnsafeHeadscaleServiceServer interface {
+	mustEmbedUnimplementedHeadscaleServiceServer()
+}
+
+func RegisterHeadscaleServiceServer(s grpc.ServiceRegistrar, srv HeadscaleServiceServer) {
+	// If the following call panics, it indicates UnimplementedHeadscaleServiceServer was
+	// embedded by pointer and is nil.  This will cause panics if an
+	// unimplemented method is ever invoked, so we test this at initialization
+	// time to prevent it from happening at runtime later due to I/O.
+	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
+		t.testEmbeddedByValue()
+	}
+	s.RegisterService(&HeadscaleService_ServiceDesc, srv)
+}
+
+func _HeadscaleService_CreateUser_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(CreateUserRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).CreateUser(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_CreateUser_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).CreateUser(ctx, req.(*CreateUserRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_RenameUser_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(RenameUserRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).RenameUser(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_RenameUser_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).RenameUser(ctx, req.(*RenameUserRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_DeleteUser_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(DeleteUserRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).DeleteUser(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_DeleteUser_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).DeleteUser(ctx, req.(*DeleteUserRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_ListUsers_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ListUsersRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).ListUsers(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_ListUsers_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).ListUsers(ctx, req.(*ListUsersRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_CreatePreAuthKey_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(CreatePreAuthKeyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).CreatePreAuthKey(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_CreatePreAuthKey_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).CreatePreAuthKey(ctx, req.(*CreatePreAuthKeyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_ExpirePreAuthKey_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ExpirePreAuthKeyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).ExpirePreAuthKey(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_ExpirePreAuthKey_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).ExpirePreAuthKey(ctx, req.(*ExpirePreAuthKeyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_DeletePreAuthKey_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(DeletePreAuthKeyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).DeletePreAuthKey(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_DeletePreAuthKey_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).DeletePreAuthKey(ctx, req.(*DeletePreAuthKeyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_ListPreAuthKeys_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ListPreAuthKeysRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).ListPreAuthKeys(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_ListPreAuthKeys_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).ListPreAuthKeys(ctx, req.(*ListPreAuthKeysRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_DebugCreateNode_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(DebugCreateNodeRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).DebugCreateNode(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_DebugCreateNode_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).DebugCreateNode(ctx, req.(*DebugCreateNodeRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_GetNode_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(GetNodeRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).GetNode(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_GetNode_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).GetNode(ctx, req.(*GetNodeRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_SetTags_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SetTagsRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).SetTags(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_SetTags_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).SetTags(ctx, req.(*SetTagsRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_SetApprovedRoutes_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SetApprovedRoutesRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).SetApprovedRoutes(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_SetApprovedRoutes_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).SetApprovedRoutes(ctx, req.(*SetApprovedRoutesRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_RegisterNode_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(RegisterNodeRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).RegisterNode(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_RegisterNode_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).RegisterNode(ctx, req.(*RegisterNodeRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_DeleteNode_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(DeleteNodeRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).DeleteNode(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_DeleteNode_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).DeleteNode(ctx, req.(*DeleteNodeRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_ExpireNode_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ExpireNodeRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).ExpireNode(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_ExpireNode_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).ExpireNode(ctx, req.(*ExpireNodeRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_RenameNode_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(RenameNodeRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).RenameNode(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_RenameNode_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).RenameNode(ctx, req.(*RenameNodeRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_ListNodes_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ListNodesRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).ListNodes(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_ListNodes_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).ListNodes(ctx, req.(*ListNodesRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_BackfillNodeIPs_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(BackfillNodeIPsRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).BackfillNodeIPs(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_BackfillNodeIPs_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).BackfillNodeIPs(ctx, req.(*BackfillNodeIPsRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_AuthRegister_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(AuthRegisterRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).AuthRegister(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_AuthRegister_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).AuthRegister(ctx, req.(*AuthRegisterRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_AuthApprove_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(AuthApproveRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).AuthApprove(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_AuthApprove_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).AuthApprove(ctx, req.(*AuthApproveRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_AuthReject_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(AuthRejectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).AuthReject(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_AuthReject_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).AuthReject(ctx, req.(*AuthRejectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_CreateApiKey_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(CreateApiKeyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).CreateApiKey(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_CreateApiKey_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).CreateApiKey(ctx, req.(*CreateApiKeyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_ExpireApiKey_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ExpireApiKeyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).ExpireApiKey(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_ExpireApiKey_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).ExpireApiKey(ctx, req.(*ExpireApiKeyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_ListApiKeys_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ListApiKeysRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).ListApiKeys(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_ListApiKeys_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).ListApiKeys(ctx, req.(*ListApiKeysRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_DeleteApiKey_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(DeleteApiKeyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).DeleteApiKey(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_DeleteApiKey_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).DeleteApiKey(ctx, req.(*DeleteApiKeyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_GetPolicy_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(GetPolicyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).GetPolicy(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_GetPolicy_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).GetPolicy(ctx, req.(*GetPolicyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_SetPolicy_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SetPolicyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).SetPolicy(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_SetPolicy_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).SetPolicy(ctx, req.(*SetPolicyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_CheckPolicy_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(CheckPolicyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).CheckPolicy(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_CheckPolicy_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).CheckPolicy(ctx, req.(*CheckPolicyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _HeadscaleService_Health_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(HealthRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(HeadscaleServiceServer).Health(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: HeadscaleService_Health_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(HeadscaleServiceServer).Health(ctx, req.(*HealthRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+// HeadscaleService_ServiceDesc is the grpc.ServiceDesc for HeadscaleService service.
+// It's only intended for direct use with grpc.RegisterService,
+// and not to be introspected or modified (even as a copy)
+var HeadscaleService_ServiceDesc = grpc.ServiceDesc{
+	ServiceName: "headscale.v1.HeadscaleService",
+	HandlerType: (*HeadscaleServiceServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "CreateUser",
+			Handler:    _HeadscaleService_CreateUser_Handler,
+		},
+		{
+			MethodName: "RenameUser",
+			Handler:    _HeadscaleService_RenameUser_Handler,
+		},
+		{
+			MethodName: "DeleteUser",
+			Handler:    _HeadscaleService_DeleteUser_Handler,
+		},
+		{
+			MethodName: "ListUsers",
+			Handler:    _HeadscaleService_ListUsers_Handler,
+		},
+		{
+			MethodName: "CreatePreAuthKey",
+			Handler:    _HeadscaleService_CreatePreAuthKey_Handler,
+		},
+		{
+			MethodName: "ExpirePreAuthKey",
+			Handler:    _HeadscaleService_ExpirePreAuthKey_Handler,
+		},
+		{
+			MethodName: "DeletePreAuthKey",
+			Handler:    _HeadscaleService_DeletePreAuthKey_Handler,
+		},
+		{
+			MethodName: "ListPreAuthKeys",
+			Handler:    _HeadscaleService_ListPreAuthKeys_Handler,
+		},
+		{
+			MethodName: "DebugCreateNode",
+			Handler:    _HeadscaleService_DebugCreateNode_Handler,
+		},
+		{
+			MethodName: "GetNode",
+			Handler:    _HeadscaleService_GetNode_Handler,
+		},
+		{
+			MethodName: "SetTags",
+			Handler:    _HeadscaleService_SetTags_Handler,
+		},
+		{
+			MethodName: "SetApprovedRoutes",
+			Handler:    _HeadscaleService_SetApprovedRoutes_Handler,
+		},
+		{
+			MethodName: "RegisterNode",
+			Handler:    _HeadscaleService_RegisterNode_Handler,
+		},
+		{
+			MethodName: "DeleteNode",
+			Handler:    _HeadscaleService_DeleteNode_Handler,
+		},
+		{
+			MethodName: "ExpireNode",
+			Handler:    _HeadscaleService_ExpireNode_Handler,
+		},
+		{
+			MethodName: "RenameNode",
+			Handler:    _HeadscaleService_RenameNode_Handler,
+		},
+		{
+			MethodName: "ListNodes",
+			Handler:    _HeadscaleService_ListNodes_Handler,
+		},
+		{
+			MethodName: "BackfillNodeIPs",
+			Handler:    _HeadscaleService_BackfillNodeIPs_Handler,
+		},
+		{
+			MethodName: "AuthRegister",
+			Handler:    _HeadscaleService_AuthRegister_Handler,
+		},
+		{
+			MethodName: "AuthApprove",
+			Handler:    _HeadscaleService_AuthApprove_Handler,
+		},
+		{
+			MethodName: "AuthReject",
+			Handler:    _HeadscaleService_AuthReject_Handler,
+		},
+		{
+			MethodName: "CreateApiKey",
+			Handler:    _HeadscaleService_CreateApiKey_Handler,
+		},
+		{
+			MethodName: "ExpireApiKey",
+			Handler:    _HeadscaleService_ExpireApiKey_Handler,
+		},
+		{
+			MethodName: "ListApiKeys",
+			Handler:    _HeadscaleService_ListApiKeys_Handler,
+		},
+		{
+			MethodName: "DeleteApiKey",
+			Handler:    _HeadscaleService_DeleteApiKey_Handler,
+		},
+		{
+			MethodName: "GetPolicy",
+			Handler:    _HeadscaleService_GetPolicy_Handler,
+		},
+		{
+			MethodName: "SetPolicy",
+			Handler:    _HeadscaleService_SetPolicy_Handler,
+		},
+		{
+			MethodName: "CheckPolicy",
+			Handler:    _HeadscaleService_CheckPolicy_Handler,
+		},
+		{
+			MethodName: "Health",
+			Handler:    _HeadscaleService_Health_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "headscale/v1/headscale.proto",
+}
diff --git a/gen/go/headscale/v1/node.pb.go b/gen/go/headscale/v1/node.pb.go
new file mode 100644
index 000000000..32142ed8b
--- /dev/null
+++ b/gen/go/headscale/v1/node.pb.go
@@ -0,0 +1,1379 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: headscale/v1/node.proto
+
+package v1
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type RegisterMethod int32
+
+const (
+	RegisterMethod_REGISTER_METHOD_UNSPECIFIED RegisterMethod = 0
+	RegisterMethod_REGISTER_METHOD_AUTH_KEY    RegisterMethod = 1
+	RegisterMethod_REGISTER_METHOD_CLI         RegisterMethod = 2
+	RegisterMethod_REGISTER_METHOD_OIDC        RegisterMethod = 3
+)
+
+// Enum value maps for RegisterMethod.
+var (
+	RegisterMethod_name = map[int32]string{
+		0: "REGISTER_METHOD_UNSPECIFIED",
+		1: "REGISTER_METHOD_AUTH_KEY",
+		2: "REGISTER_METHOD_CLI",
+		3: "REGISTER_METHOD_OIDC",
+	}
+	RegisterMethod_value = map[string]int32{
+		"REGISTER_METHOD_UNSPECIFIED": 0,
+		"REGISTER_METHOD_AUTH_KEY":    1,
+		"REGISTER_METHOD_CLI":         2,
+		"REGISTER_METHOD_OIDC":        3,
+	}
+)
+
+func (x RegisterMethod) Enum() *RegisterMethod {
+	p := new(RegisterMethod)
+	*p = x
+	return p
+}
+
+func (x RegisterMethod) String() string {
+	return protoimpl.X.EnumStringOf(x.Descriptor(), protoreflect.EnumNumber(x))
+}
+
+func (RegisterMethod) Descriptor() protoreflect.EnumDescriptor {
+	return file_headscale_v1_node_proto_enumTypes[0].Descriptor()
+}
+
+func (RegisterMethod) Type() protoreflect.EnumType {
+	return &file_headscale_v1_node_proto_enumTypes[0]
+}
+
+func (x RegisterMethod) Number() protoreflect.EnumNumber {
+	return protoreflect.EnumNumber(x)
+}
+
+// Deprecated: Use RegisterMethod.Descriptor instead.
+func (RegisterMethod) EnumDescriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{0}
+}
+
+type Node struct {
+	state          protoimpl.MessageState `protogen:"open.v1"`
+	Id             uint64                 `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	MachineKey     string                 `protobuf:"bytes,2,opt,name=machine_key,json=machineKey,proto3" json:"machine_key,omitempty"`
+	NodeKey        string                 `protobuf:"bytes,3,opt,name=node_key,json=nodeKey,proto3" json:"node_key,omitempty"`
+	DiscoKey       string                 `protobuf:"bytes,4,opt,name=disco_key,json=discoKey,proto3" json:"disco_key,omitempty"`
+	IpAddresses    []string               `protobuf:"bytes,5,rep,name=ip_addresses,json=ipAddresses,proto3" json:"ip_addresses,omitempty"`
+	Name           string                 `protobuf:"bytes,6,opt,name=name,proto3" json:"name,omitempty"`
+	User           *User                  `protobuf:"bytes,7,opt,name=user,proto3" json:"user,omitempty"`
+	LastSeen       *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=last_seen,json=lastSeen,proto3" json:"last_seen,omitempty"`
+	Expiry         *timestamppb.Timestamp `protobuf:"bytes,10,opt,name=expiry,proto3" json:"expiry,omitempty"`
+	PreAuthKey     *PreAuthKey            `protobuf:"bytes,11,opt,name=pre_auth_key,json=preAuthKey,proto3" json:"pre_auth_key,omitempty"`
+	CreatedAt      *timestamppb.Timestamp `protobuf:"bytes,12,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
+	RegisterMethod RegisterMethod         `protobuf:"varint,13,opt,name=register_method,json=registerMethod,proto3,enum=headscale.v1.RegisterMethod" json:"register_method,omitempty"`
+	// Deprecated
+	// repeated string forced_tags = 18;
+	// repeated string invalid_tags = 19;
+	// repeated string valid_tags = 20;
+	GivenName       string   `protobuf:"bytes,21,opt,name=given_name,json=givenName,proto3" json:"given_name,omitempty"`
+	Online          bool     `protobuf:"varint,22,opt,name=online,proto3" json:"online,omitempty"`
+	ApprovedRoutes  []string `protobuf:"bytes,23,rep,name=approved_routes,json=approvedRoutes,proto3" json:"approved_routes,omitempty"`
+	AvailableRoutes []string `protobuf:"bytes,24,rep,name=available_routes,json=availableRoutes,proto3" json:"available_routes,omitempty"`
+	SubnetRoutes    []string `protobuf:"bytes,25,rep,name=subnet_routes,json=subnetRoutes,proto3" json:"subnet_routes,omitempty"`
+	Tags            []string `protobuf:"bytes,26,rep,name=tags,proto3" json:"tags,omitempty"`
+	unknownFields   protoimpl.UnknownFields
+	sizeCache       protoimpl.SizeCache
+}
+
+func (x *Node) Reset() {
+	*x = Node{}
+	mi := &file_headscale_v1_node_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Node) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Node) ProtoMessage() {}
+
+func (x *Node) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Node.ProtoReflect.Descriptor instead.
+func (*Node) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *Node) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+func (x *Node) GetMachineKey() string {
+	if x != nil {
+		return x.MachineKey
+	}
+	return ""
+}
+
+func (x *Node) GetNodeKey() string {
+	if x != nil {
+		return x.NodeKey
+	}
+	return ""
+}
+
+func (x *Node) GetDiscoKey() string {
+	if x != nil {
+		return x.DiscoKey
+	}
+	return ""
+}
+
+func (x *Node) GetIpAddresses() []string {
+	if x != nil {
+		return x.IpAddresses
+	}
+	return nil
+}
+
+func (x *Node) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *Node) GetUser() *User {
+	if x != nil {
+		return x.User
+	}
+	return nil
+}
+
+func (x *Node) GetLastSeen() *timestamppb.Timestamp {
+	if x != nil {
+		return x.LastSeen
+	}
+	return nil
+}
+
+func (x *Node) GetExpiry() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Expiry
+	}
+	return nil
+}
+
+func (x *Node) GetPreAuthKey() *PreAuthKey {
+	if x != nil {
+		return x.PreAuthKey
+	}
+	return nil
+}
+
+func (x *Node) GetCreatedAt() *timestamppb.Timestamp {
+	if x != nil {
+		return x.CreatedAt
+	}
+	return nil
+}
+
+func (x *Node) GetRegisterMethod() RegisterMethod {
+	if x != nil {
+		return x.RegisterMethod
+	}
+	return RegisterMethod_REGISTER_METHOD_UNSPECIFIED
+}
+
+func (x *Node) GetGivenName() string {
+	if x != nil {
+		return x.GivenName
+	}
+	return ""
+}
+
+func (x *Node) GetOnline() bool {
+	if x != nil {
+		return x.Online
+	}
+	return false
+}
+
+func (x *Node) GetApprovedRoutes() []string {
+	if x != nil {
+		return x.ApprovedRoutes
+	}
+	return nil
+}
+
+func (x *Node) GetAvailableRoutes() []string {
+	if x != nil {
+		return x.AvailableRoutes
+	}
+	return nil
+}
+
+func (x *Node) GetSubnetRoutes() []string {
+	if x != nil {
+		return x.SubnetRoutes
+	}
+	return nil
+}
+
+func (x *Node) GetTags() []string {
+	if x != nil {
+		return x.Tags
+	}
+	return nil
+}
+
+type RegisterNodeRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	User          string                 `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
+	Key           string                 `protobuf:"bytes,2,opt,name=key,proto3" json:"key,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *RegisterNodeRequest) Reset() {
+	*x = RegisterNodeRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *RegisterNodeRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RegisterNodeRequest) ProtoMessage() {}
+
+func (x *RegisterNodeRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RegisterNodeRequest.ProtoReflect.Descriptor instead.
+func (*RegisterNodeRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *RegisterNodeRequest) GetUser() string {
+	if x != nil {
+		return x.User
+	}
+	return ""
+}
+
+func (x *RegisterNodeRequest) GetKey() string {
+	if x != nil {
+		return x.Key
+	}
+	return ""
+}
+
+type RegisterNodeResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Node          *Node                  `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *RegisterNodeResponse) Reset() {
+	*x = RegisterNodeResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *RegisterNodeResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RegisterNodeResponse) ProtoMessage() {}
+
+func (x *RegisterNodeResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RegisterNodeResponse.ProtoReflect.Descriptor instead.
+func (*RegisterNodeResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *RegisterNodeResponse) GetNode() *Node {
+	if x != nil {
+		return x.Node
+	}
+	return nil
+}
+
+type GetNodeRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	NodeId        uint64                 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetNodeRequest) Reset() {
+	*x = GetNodeRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetNodeRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetNodeRequest) ProtoMessage() {}
+
+func (x *GetNodeRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetNodeRequest.ProtoReflect.Descriptor instead.
+func (*GetNodeRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *GetNodeRequest) GetNodeId() uint64 {
+	if x != nil {
+		return x.NodeId
+	}
+	return 0
+}
+
+type GetNodeResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Node          *Node                  `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetNodeResponse) Reset() {
+	*x = GetNodeResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetNodeResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetNodeResponse) ProtoMessage() {}
+
+func (x *GetNodeResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetNodeResponse.ProtoReflect.Descriptor instead.
+func (*GetNodeResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *GetNodeResponse) GetNode() *Node {
+	if x != nil {
+		return x.Node
+	}
+	return nil
+}
+
+type SetTagsRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	NodeId        uint64                 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
+	Tags          []string               `protobuf:"bytes,2,rep,name=tags,proto3" json:"tags,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SetTagsRequest) Reset() {
+	*x = SetTagsRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SetTagsRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SetTagsRequest) ProtoMessage() {}
+
+func (x *SetTagsRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SetTagsRequest.ProtoReflect.Descriptor instead.
+func (*SetTagsRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *SetTagsRequest) GetNodeId() uint64 {
+	if x != nil {
+		return x.NodeId
+	}
+	return 0
+}
+
+func (x *SetTagsRequest) GetTags() []string {
+	if x != nil {
+		return x.Tags
+	}
+	return nil
+}
+
+type SetTagsResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Node          *Node                  `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SetTagsResponse) Reset() {
+	*x = SetTagsResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SetTagsResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SetTagsResponse) ProtoMessage() {}
+
+func (x *SetTagsResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[6]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SetTagsResponse.ProtoReflect.Descriptor instead.
+func (*SetTagsResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{6}
+}
+
+func (x *SetTagsResponse) GetNode() *Node {
+	if x != nil {
+		return x.Node
+	}
+	return nil
+}
+
+type SetApprovedRoutesRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	NodeId        uint64                 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
+	Routes        []string               `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SetApprovedRoutesRequest) Reset() {
+	*x = SetApprovedRoutesRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SetApprovedRoutesRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SetApprovedRoutesRequest) ProtoMessage() {}
+
+func (x *SetApprovedRoutesRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SetApprovedRoutesRequest.ProtoReflect.Descriptor instead.
+func (*SetApprovedRoutesRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *SetApprovedRoutesRequest) GetNodeId() uint64 {
+	if x != nil {
+		return x.NodeId
+	}
+	return 0
+}
+
+func (x *SetApprovedRoutesRequest) GetRoutes() []string {
+	if x != nil {
+		return x.Routes
+	}
+	return nil
+}
+
+type SetApprovedRoutesResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Node          *Node                  `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SetApprovedRoutesResponse) Reset() {
+	*x = SetApprovedRoutesResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SetApprovedRoutesResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SetApprovedRoutesResponse) ProtoMessage() {}
+
+func (x *SetApprovedRoutesResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SetApprovedRoutesResponse.ProtoReflect.Descriptor instead.
+func (*SetApprovedRoutesResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *SetApprovedRoutesResponse) GetNode() *Node {
+	if x != nil {
+		return x.Node
+	}
+	return nil
+}
+
+type DeleteNodeRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	NodeId        uint64                 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeleteNodeRequest) Reset() {
+	*x = DeleteNodeRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeleteNodeRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteNodeRequest) ProtoMessage() {}
+
+func (x *DeleteNodeRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[9]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteNodeRequest.ProtoReflect.Descriptor instead.
+func (*DeleteNodeRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{9}
+}
+
+func (x *DeleteNodeRequest) GetNodeId() uint64 {
+	if x != nil {
+		return x.NodeId
+	}
+	return 0
+}
+
+type DeleteNodeResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeleteNodeResponse) Reset() {
+	*x = DeleteNodeResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[10]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeleteNodeResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteNodeResponse) ProtoMessage() {}
+
+func (x *DeleteNodeResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[10]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteNodeResponse.ProtoReflect.Descriptor instead.
+func (*DeleteNodeResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{10}
+}
+
+type ExpireNodeRequest struct {
+	state  protoimpl.MessageState `protogen:"open.v1"`
+	NodeId uint64                 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
+	Expiry *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=expiry,proto3" json:"expiry,omitempty"`
+	// When true, sets expiry to null (node will never expire).
+	DisableExpiry bool `protobuf:"varint,3,opt,name=disable_expiry,json=disableExpiry,proto3" json:"disable_expiry,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ExpireNodeRequest) Reset() {
+	*x = ExpireNodeRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[11]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ExpireNodeRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ExpireNodeRequest) ProtoMessage() {}
+
+func (x *ExpireNodeRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[11]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ExpireNodeRequest.ProtoReflect.Descriptor instead.
+func (*ExpireNodeRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{11}
+}
+
+func (x *ExpireNodeRequest) GetNodeId() uint64 {
+	if x != nil {
+		return x.NodeId
+	}
+	return 0
+}
+
+func (x *ExpireNodeRequest) GetExpiry() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Expiry
+	}
+	return nil
+}
+
+func (x *ExpireNodeRequest) GetDisableExpiry() bool {
+	if x != nil {
+		return x.DisableExpiry
+	}
+	return false
+}
+
+type ExpireNodeResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Node          *Node                  `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ExpireNodeResponse) Reset() {
+	*x = ExpireNodeResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[12]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ExpireNodeResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ExpireNodeResponse) ProtoMessage() {}
+
+func (x *ExpireNodeResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[12]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ExpireNodeResponse.ProtoReflect.Descriptor instead.
+func (*ExpireNodeResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{12}
+}
+
+func (x *ExpireNodeResponse) GetNode() *Node {
+	if x != nil {
+		return x.Node
+	}
+	return nil
+}
+
+type RenameNodeRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	NodeId        uint64                 `protobuf:"varint,1,opt,name=node_id,json=nodeId,proto3" json:"node_id,omitempty"`
+	NewName       string                 `protobuf:"bytes,2,opt,name=new_name,json=newName,proto3" json:"new_name,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *RenameNodeRequest) Reset() {
+	*x = RenameNodeRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[13]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *RenameNodeRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RenameNodeRequest) ProtoMessage() {}
+
+func (x *RenameNodeRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[13]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RenameNodeRequest.ProtoReflect.Descriptor instead.
+func (*RenameNodeRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{13}
+}
+
+func (x *RenameNodeRequest) GetNodeId() uint64 {
+	if x != nil {
+		return x.NodeId
+	}
+	return 0
+}
+
+func (x *RenameNodeRequest) GetNewName() string {
+	if x != nil {
+		return x.NewName
+	}
+	return ""
+}
+
+type RenameNodeResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Node          *Node                  `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *RenameNodeResponse) Reset() {
+	*x = RenameNodeResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[14]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *RenameNodeResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RenameNodeResponse) ProtoMessage() {}
+
+func (x *RenameNodeResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[14]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RenameNodeResponse.ProtoReflect.Descriptor instead.
+func (*RenameNodeResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{14}
+}
+
+func (x *RenameNodeResponse) GetNode() *Node {
+	if x != nil {
+		return x.Node
+	}
+	return nil
+}
+
+type ListNodesRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	User          string                 `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListNodesRequest) Reset() {
+	*x = ListNodesRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[15]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListNodesRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListNodesRequest) ProtoMessage() {}
+
+func (x *ListNodesRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[15]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListNodesRequest.ProtoReflect.Descriptor instead.
+func (*ListNodesRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{15}
+}
+
+func (x *ListNodesRequest) GetUser() string {
+	if x != nil {
+		return x.User
+	}
+	return ""
+}
+
+type ListNodesResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Nodes         []*Node                `protobuf:"bytes,1,rep,name=nodes,proto3" json:"nodes,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListNodesResponse) Reset() {
+	*x = ListNodesResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[16]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListNodesResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListNodesResponse) ProtoMessage() {}
+
+func (x *ListNodesResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[16]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListNodesResponse.ProtoReflect.Descriptor instead.
+func (*ListNodesResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{16}
+}
+
+func (x *ListNodesResponse) GetNodes() []*Node {
+	if x != nil {
+		return x.Nodes
+	}
+	return nil
+}
+
+type DebugCreateNodeRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	User          string                 `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
+	Key           string                 `protobuf:"bytes,2,opt,name=key,proto3" json:"key,omitempty"`
+	Name          string                 `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
+	Routes        []string               `protobuf:"bytes,4,rep,name=routes,proto3" json:"routes,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DebugCreateNodeRequest) Reset() {
+	*x = DebugCreateNodeRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[17]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DebugCreateNodeRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DebugCreateNodeRequest) ProtoMessage() {}
+
+func (x *DebugCreateNodeRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[17]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DebugCreateNodeRequest.ProtoReflect.Descriptor instead.
+func (*DebugCreateNodeRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{17}
+}
+
+func (x *DebugCreateNodeRequest) GetUser() string {
+	if x != nil {
+		return x.User
+	}
+	return ""
+}
+
+func (x *DebugCreateNodeRequest) GetKey() string {
+	if x != nil {
+		return x.Key
+	}
+	return ""
+}
+
+func (x *DebugCreateNodeRequest) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *DebugCreateNodeRequest) GetRoutes() []string {
+	if x != nil {
+		return x.Routes
+	}
+	return nil
+}
+
+type DebugCreateNodeResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Node          *Node                  `protobuf:"bytes,1,opt,name=node,proto3" json:"node,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DebugCreateNodeResponse) Reset() {
+	*x = DebugCreateNodeResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[18]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DebugCreateNodeResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DebugCreateNodeResponse) ProtoMessage() {}
+
+func (x *DebugCreateNodeResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[18]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DebugCreateNodeResponse.ProtoReflect.Descriptor instead.
+func (*DebugCreateNodeResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{18}
+}
+
+func (x *DebugCreateNodeResponse) GetNode() *Node {
+	if x != nil {
+		return x.Node
+	}
+	return nil
+}
+
+type BackfillNodeIPsRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Confirmed     bool                   `protobuf:"varint,1,opt,name=confirmed,proto3" json:"confirmed,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *BackfillNodeIPsRequest) Reset() {
+	*x = BackfillNodeIPsRequest{}
+	mi := &file_headscale_v1_node_proto_msgTypes[19]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *BackfillNodeIPsRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*BackfillNodeIPsRequest) ProtoMessage() {}
+
+func (x *BackfillNodeIPsRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[19]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use BackfillNodeIPsRequest.ProtoReflect.Descriptor instead.
+func (*BackfillNodeIPsRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{19}
+}
+
+func (x *BackfillNodeIPsRequest) GetConfirmed() bool {
+	if x != nil {
+		return x.Confirmed
+	}
+	return false
+}
+
+type BackfillNodeIPsResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Changes       []string               `protobuf:"bytes,1,rep,name=changes,proto3" json:"changes,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *BackfillNodeIPsResponse) Reset() {
+	*x = BackfillNodeIPsResponse{}
+	mi := &file_headscale_v1_node_proto_msgTypes[20]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *BackfillNodeIPsResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*BackfillNodeIPsResponse) ProtoMessage() {}
+
+func (x *BackfillNodeIPsResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_node_proto_msgTypes[20]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use BackfillNodeIPsResponse.ProtoReflect.Descriptor instead.
+func (*BackfillNodeIPsResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_node_proto_rawDescGZIP(), []int{20}
+}
+
+func (x *BackfillNodeIPsResponse) GetChanges() []string {
+	if x != nil {
+		return x.Changes
+	}
+	return nil
+}
+
+var File_headscale_v1_node_proto protoreflect.FileDescriptor
+
+const file_headscale_v1_node_proto_rawDesc = "" +
+	"\n" +
+	"\x17headscale/v1/node.proto\x12\fheadscale.v1\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x1dheadscale/v1/preauthkey.proto\x1a\x17headscale/v1/user.proto\"\xc9\x05\n" +
+	"\x04Node\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\x04R\x02id\x12\x1f\n" +
+	"\vmachine_key\x18\x02 \x01(\tR\n" +
+	"machineKey\x12\x19\n" +
+	"\bnode_key\x18\x03 \x01(\tR\anodeKey\x12\x1b\n" +
+	"\tdisco_key\x18\x04 \x01(\tR\bdiscoKey\x12!\n" +
+	"\fip_addresses\x18\x05 \x03(\tR\vipAddresses\x12\x12\n" +
+	"\x04name\x18\x06 \x01(\tR\x04name\x12&\n" +
+	"\x04user\x18\a \x01(\v2\x12.headscale.v1.UserR\x04user\x127\n" +
+	"\tlast_seen\x18\b \x01(\v2\x1a.google.protobuf.TimestampR\blastSeen\x122\n" +
+	"\x06expiry\x18\n" +
+	" \x01(\v2\x1a.google.protobuf.TimestampR\x06expiry\x12:\n" +
+	"\fpre_auth_key\x18\v \x01(\v2\x18.headscale.v1.PreAuthKeyR\n" +
+	"preAuthKey\x129\n" +
+	"\n" +
+	"created_at\x18\f \x01(\v2\x1a.google.protobuf.TimestampR\tcreatedAt\x12E\n" +
+	"\x0fregister_method\x18\r \x01(\x0e2\x1c.headscale.v1.RegisterMethodR\x0eregisterMethod\x12\x1d\n" +
+	"\n" +
+	"given_name\x18\x15 \x01(\tR\tgivenName\x12\x16\n" +
+	"\x06online\x18\x16 \x01(\bR\x06online\x12'\n" +
+	"\x0fapproved_routes\x18\x17 \x03(\tR\x0eapprovedRoutes\x12)\n" +
+	"\x10available_routes\x18\x18 \x03(\tR\x0favailableRoutes\x12#\n" +
+	"\rsubnet_routes\x18\x19 \x03(\tR\fsubnetRoutes\x12\x12\n" +
+	"\x04tags\x18\x1a \x03(\tR\x04tagsJ\x04\b\t\x10\n" +
+	"J\x04\b\x0e\x10\x15\";\n" +
+	"\x13RegisterNodeRequest\x12\x12\n" +
+	"\x04user\x18\x01 \x01(\tR\x04user\x12\x10\n" +
+	"\x03key\x18\x02 \x01(\tR\x03key\">\n" +
+	"\x14RegisterNodeResponse\x12&\n" +
+	"\x04node\x18\x01 \x01(\v2\x12.headscale.v1.NodeR\x04node\")\n" +
+	"\x0eGetNodeRequest\x12\x17\n" +
+	"\anode_id\x18\x01 \x01(\x04R\x06nodeId\"9\n" +
+	"\x0fGetNodeResponse\x12&\n" +
+	"\x04node\x18\x01 \x01(\v2\x12.headscale.v1.NodeR\x04node\"=\n" +
+	"\x0eSetTagsRequest\x12\x17\n" +
+	"\anode_id\x18\x01 \x01(\x04R\x06nodeId\x12\x12\n" +
+	"\x04tags\x18\x02 \x03(\tR\x04tags\"9\n" +
+	"\x0fSetTagsResponse\x12&\n" +
+	"\x04node\x18\x01 \x01(\v2\x12.headscale.v1.NodeR\x04node\"K\n" +
+	"\x18SetApprovedRoutesRequest\x12\x17\n" +
+	"\anode_id\x18\x01 \x01(\x04R\x06nodeId\x12\x16\n" +
+	"\x06routes\x18\x02 \x03(\tR\x06routes\"C\n" +
+	"\x19SetApprovedRoutesResponse\x12&\n" +
+	"\x04node\x18\x01 \x01(\v2\x12.headscale.v1.NodeR\x04node\",\n" +
+	"\x11DeleteNodeRequest\x12\x17\n" +
+	"\anode_id\x18\x01 \x01(\x04R\x06nodeId\"\x14\n" +
+	"\x12DeleteNodeResponse\"\x87\x01\n" +
+	"\x11ExpireNodeRequest\x12\x17\n" +
+	"\anode_id\x18\x01 \x01(\x04R\x06nodeId\x122\n" +
+	"\x06expiry\x18\x02 \x01(\v2\x1a.google.protobuf.TimestampR\x06expiry\x12%\n" +
+	"\x0edisable_expiry\x18\x03 \x01(\bR\rdisableExpiry\"<\n" +
+	"\x12ExpireNodeResponse\x12&\n" +
+	"\x04node\x18\x01 \x01(\v2\x12.headscale.v1.NodeR\x04node\"G\n" +
+	"\x11RenameNodeRequest\x12\x17\n" +
+	"\anode_id\x18\x01 \x01(\x04R\x06nodeId\x12\x19\n" +
+	"\bnew_name\x18\x02 \x01(\tR\anewName\"<\n" +
+	"\x12RenameNodeResponse\x12&\n" +
+	"\x04node\x18\x01 \x01(\v2\x12.headscale.v1.NodeR\x04node\"&\n" +
+	"\x10ListNodesRequest\x12\x12\n" +
+	"\x04user\x18\x01 \x01(\tR\x04user\"=\n" +
+	"\x11ListNodesResponse\x12(\n" +
+	"\x05nodes\x18\x01 \x03(\v2\x12.headscale.v1.NodeR\x05nodes\"j\n" +
+	"\x16DebugCreateNodeRequest\x12\x12\n" +
+	"\x04user\x18\x01 \x01(\tR\x04user\x12\x10\n" +
+	"\x03key\x18\x02 \x01(\tR\x03key\x12\x12\n" +
+	"\x04name\x18\x03 \x01(\tR\x04name\x12\x16\n" +
+	"\x06routes\x18\x04 \x03(\tR\x06routes\"A\n" +
+	"\x17DebugCreateNodeResponse\x12&\n" +
+	"\x04node\x18\x01 \x01(\v2\x12.headscale.v1.NodeR\x04node\"6\n" +
+	"\x16BackfillNodeIPsRequest\x12\x1c\n" +
+	"\tconfirmed\x18\x01 \x01(\bR\tconfirmed\"3\n" +
+	"\x17BackfillNodeIPsResponse\x12\x18\n" +
+	"\achanges\x18\x01 \x03(\tR\achanges*\x82\x01\n" +
+	"\x0eRegisterMethod\x12\x1f\n" +
+	"\x1bREGISTER_METHOD_UNSPECIFIED\x10\x00\x12\x1c\n" +
+	"\x18REGISTER_METHOD_AUTH_KEY\x10\x01\x12\x17\n" +
+	"\x13REGISTER_METHOD_CLI\x10\x02\x12\x18\n" +
+	"\x14REGISTER_METHOD_OIDC\x10\x03B)Z'github.com/juanfont/headscale/gen/go/v1b\x06proto3"
+
+var (
+	file_headscale_v1_node_proto_rawDescOnce sync.Once
+	file_headscale_v1_node_proto_rawDescData []byte
+)
+
+func file_headscale_v1_node_proto_rawDescGZIP() []byte {
+	file_headscale_v1_node_proto_rawDescOnce.Do(func() {
+		file_headscale_v1_node_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_headscale_v1_node_proto_rawDesc), len(file_headscale_v1_node_proto_rawDesc)))
+	})
+	return file_headscale_v1_node_proto_rawDescData
+}
+
+var file_headscale_v1_node_proto_enumTypes = make([]protoimpl.EnumInfo, 1)
+var file_headscale_v1_node_proto_msgTypes = make([]protoimpl.MessageInfo, 21)
+var file_headscale_v1_node_proto_goTypes = []any{
+	(RegisterMethod)(0),               // 0: headscale.v1.RegisterMethod
+	(*Node)(nil),                      // 1: headscale.v1.Node
+	(*RegisterNodeRequest)(nil),       // 2: headscale.v1.RegisterNodeRequest
+	(*RegisterNodeResponse)(nil),      // 3: headscale.v1.RegisterNodeResponse
+	(*GetNodeRequest)(nil),            // 4: headscale.v1.GetNodeRequest
+	(*GetNodeResponse)(nil),           // 5: headscale.v1.GetNodeResponse
+	(*SetTagsRequest)(nil),            // 6: headscale.v1.SetTagsRequest
+	(*SetTagsResponse)(nil),           // 7: headscale.v1.SetTagsResponse
+	(*SetApprovedRoutesRequest)(nil),  // 8: headscale.v1.SetApprovedRoutesRequest
+	(*SetApprovedRoutesResponse)(nil), // 9: headscale.v1.SetApprovedRoutesResponse
+	(*DeleteNodeRequest)(nil),         // 10: headscale.v1.DeleteNodeRequest
+	(*DeleteNodeResponse)(nil),        // 11: headscale.v1.DeleteNodeResponse
+	(*ExpireNodeRequest)(nil),         // 12: headscale.v1.ExpireNodeRequest
+	(*ExpireNodeResponse)(nil),        // 13: headscale.v1.ExpireNodeResponse
+	(*RenameNodeRequest)(nil),         // 14: headscale.v1.RenameNodeRequest
+	(*RenameNodeResponse)(nil),        // 15: headscale.v1.RenameNodeResponse
+	(*ListNodesRequest)(nil),          // 16: headscale.v1.ListNodesRequest
+	(*ListNodesResponse)(nil),         // 17: headscale.v1.ListNodesResponse
+	(*DebugCreateNodeRequest)(nil),    // 18: headscale.v1.DebugCreateNodeRequest
+	(*DebugCreateNodeResponse)(nil),   // 19: headscale.v1.DebugCreateNodeResponse
+	(*BackfillNodeIPsRequest)(nil),    // 20: headscale.v1.BackfillNodeIPsRequest
+	(*BackfillNodeIPsResponse)(nil),   // 21: headscale.v1.BackfillNodeIPsResponse
+	(*User)(nil),                      // 22: headscale.v1.User
+	(*timestamppb.Timestamp)(nil),     // 23: google.protobuf.Timestamp
+	(*PreAuthKey)(nil),                // 24: headscale.v1.PreAuthKey
+}
+var file_headscale_v1_node_proto_depIdxs = []int32{
+	22, // 0: headscale.v1.Node.user:type_name -> headscale.v1.User
+	23, // 1: headscale.v1.Node.last_seen:type_name -> google.protobuf.Timestamp
+	23, // 2: headscale.v1.Node.expiry:type_name -> google.protobuf.Timestamp
+	24, // 3: headscale.v1.Node.pre_auth_key:type_name -> headscale.v1.PreAuthKey
+	23, // 4: headscale.v1.Node.created_at:type_name -> google.protobuf.Timestamp
+	0,  // 5: headscale.v1.Node.register_method:type_name -> headscale.v1.RegisterMethod
+	1,  // 6: headscale.v1.RegisterNodeResponse.node:type_name -> headscale.v1.Node
+	1,  // 7: headscale.v1.GetNodeResponse.node:type_name -> headscale.v1.Node
+	1,  // 8: headscale.v1.SetTagsResponse.node:type_name -> headscale.v1.Node
+	1,  // 9: headscale.v1.SetApprovedRoutesResponse.node:type_name -> headscale.v1.Node
+	23, // 10: headscale.v1.ExpireNodeRequest.expiry:type_name -> google.protobuf.Timestamp
+	1,  // 11: headscale.v1.ExpireNodeResponse.node:type_name -> headscale.v1.Node
+	1,  // 12: headscale.v1.RenameNodeResponse.node:type_name -> headscale.v1.Node
+	1,  // 13: headscale.v1.ListNodesResponse.nodes:type_name -> headscale.v1.Node
+	1,  // 14: headscale.v1.DebugCreateNodeResponse.node:type_name -> headscale.v1.Node
+	15, // [15:15] is the sub-list for method output_type
+	15, // [15:15] is the sub-list for method input_type
+	15, // [15:15] is the sub-list for extension type_name
+	15, // [15:15] is the sub-list for extension extendee
+	0,  // [0:15] is the sub-list for field type_name
+}
+
+func init() { file_headscale_v1_node_proto_init() }
+func file_headscale_v1_node_proto_init() {
+	if File_headscale_v1_node_proto != nil {
+		return
+	}
+	file_headscale_v1_preauthkey_proto_init()
+	file_headscale_v1_user_proto_init()
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_headscale_v1_node_proto_rawDesc), len(file_headscale_v1_node_proto_rawDesc)),
+			NumEnums:      1,
+			NumMessages:   21,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_headscale_v1_node_proto_goTypes,
+		DependencyIndexes: file_headscale_v1_node_proto_depIdxs,
+		EnumInfos:         file_headscale_v1_node_proto_enumTypes,
+		MessageInfos:      file_headscale_v1_node_proto_msgTypes,
+	}.Build()
+	File_headscale_v1_node_proto = out.File
+	file_headscale_v1_node_proto_goTypes = nil
+	file_headscale_v1_node_proto_depIdxs = nil
+}
diff --git a/gen/go/headscale/v1/policy.pb.go b/gen/go/headscale/v1/policy.pb.go
new file mode 100644
index 000000000..7b58ac121
--- /dev/null
+++ b/gen/go/headscale/v1/policy.pb.go
@@ -0,0 +1,363 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: headscale/v1/policy.proto
+
+package v1
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type SetPolicyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Policy        string                 `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SetPolicyRequest) Reset() {
+	*x = SetPolicyRequest{}
+	mi := &file_headscale_v1_policy_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SetPolicyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SetPolicyRequest) ProtoMessage() {}
+
+func (x *SetPolicyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_policy_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SetPolicyRequest.ProtoReflect.Descriptor instead.
+func (*SetPolicyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_policy_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *SetPolicyRequest) GetPolicy() string {
+	if x != nil {
+		return x.Policy
+	}
+	return ""
+}
+
+type SetPolicyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Policy        string                 `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
+	UpdatedAt     *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=updated_at,json=updatedAt,proto3" json:"updated_at,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *SetPolicyResponse) Reset() {
+	*x = SetPolicyResponse{}
+	mi := &file_headscale_v1_policy_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *SetPolicyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*SetPolicyResponse) ProtoMessage() {}
+
+func (x *SetPolicyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_policy_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use SetPolicyResponse.ProtoReflect.Descriptor instead.
+func (*SetPolicyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_policy_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *SetPolicyResponse) GetPolicy() string {
+	if x != nil {
+		return x.Policy
+	}
+	return ""
+}
+
+func (x *SetPolicyResponse) GetUpdatedAt() *timestamppb.Timestamp {
+	if x != nil {
+		return x.UpdatedAt
+	}
+	return nil
+}
+
+type GetPolicyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetPolicyRequest) Reset() {
+	*x = GetPolicyRequest{}
+	mi := &file_headscale_v1_policy_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetPolicyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetPolicyRequest) ProtoMessage() {}
+
+func (x *GetPolicyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_policy_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetPolicyRequest.ProtoReflect.Descriptor instead.
+func (*GetPolicyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_policy_proto_rawDescGZIP(), []int{2}
+}
+
+type GetPolicyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Policy        string                 `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
+	UpdatedAt     *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=updated_at,json=updatedAt,proto3" json:"updated_at,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetPolicyResponse) Reset() {
+	*x = GetPolicyResponse{}
+	mi := &file_headscale_v1_policy_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetPolicyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetPolicyResponse) ProtoMessage() {}
+
+func (x *GetPolicyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_policy_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetPolicyResponse.ProtoReflect.Descriptor instead.
+func (*GetPolicyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_policy_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *GetPolicyResponse) GetPolicy() string {
+	if x != nil {
+		return x.Policy
+	}
+	return ""
+}
+
+func (x *GetPolicyResponse) GetUpdatedAt() *timestamppb.Timestamp {
+	if x != nil {
+		return x.UpdatedAt
+	}
+	return nil
+}
+
+type CheckPolicyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Policy        string                 `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CheckPolicyRequest) Reset() {
+	*x = CheckPolicyRequest{}
+	mi := &file_headscale_v1_policy_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CheckPolicyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CheckPolicyRequest) ProtoMessage() {}
+
+func (x *CheckPolicyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_policy_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CheckPolicyRequest.ProtoReflect.Descriptor instead.
+func (*CheckPolicyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_policy_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *CheckPolicyRequest) GetPolicy() string {
+	if x != nil {
+		return x.Policy
+	}
+	return ""
+}
+
+type CheckPolicyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CheckPolicyResponse) Reset() {
+	*x = CheckPolicyResponse{}
+	mi := &file_headscale_v1_policy_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CheckPolicyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CheckPolicyResponse) ProtoMessage() {}
+
+func (x *CheckPolicyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_policy_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CheckPolicyResponse.ProtoReflect.Descriptor instead.
+func (*CheckPolicyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_policy_proto_rawDescGZIP(), []int{5}
+}
+
+var File_headscale_v1_policy_proto protoreflect.FileDescriptor
+
+const file_headscale_v1_policy_proto_rawDesc = "" +
+	"\n" +
+	"\x19headscale/v1/policy.proto\x12\fheadscale.v1\x1a\x1fgoogle/protobuf/timestamp.proto\"*\n" +
+	"\x10SetPolicyRequest\x12\x16\n" +
+	"\x06policy\x18\x01 \x01(\tR\x06policy\"f\n" +
+	"\x11SetPolicyResponse\x12\x16\n" +
+	"\x06policy\x18\x01 \x01(\tR\x06policy\x129\n" +
+	"\n" +
+	"updated_at\x18\x02 \x01(\v2\x1a.google.protobuf.TimestampR\tupdatedAt\"\x12\n" +
+	"\x10GetPolicyRequest\"f\n" +
+	"\x11GetPolicyResponse\x12\x16\n" +
+	"\x06policy\x18\x01 \x01(\tR\x06policy\x129\n" +
+	"\n" +
+	"updated_at\x18\x02 \x01(\v2\x1a.google.protobuf.TimestampR\tupdatedAt\",\n" +
+	"\x12CheckPolicyRequest\x12\x16\n" +
+	"\x06policy\x18\x01 \x01(\tR\x06policy\"\x15\n" +
+	"\x13CheckPolicyResponseB)Z'github.com/juanfont/headscale/gen/go/v1b\x06proto3"
+
+var (
+	file_headscale_v1_policy_proto_rawDescOnce sync.Once
+	file_headscale_v1_policy_proto_rawDescData []byte
+)
+
+func file_headscale_v1_policy_proto_rawDescGZIP() []byte {
+	file_headscale_v1_policy_proto_rawDescOnce.Do(func() {
+		file_headscale_v1_policy_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_headscale_v1_policy_proto_rawDesc), len(file_headscale_v1_policy_proto_rawDesc)))
+	})
+	return file_headscale_v1_policy_proto_rawDescData
+}
+
+var file_headscale_v1_policy_proto_msgTypes = make([]protoimpl.MessageInfo, 6)
+var file_headscale_v1_policy_proto_goTypes = []any{
+	(*SetPolicyRequest)(nil),      // 0: headscale.v1.SetPolicyRequest
+	(*SetPolicyResponse)(nil),     // 1: headscale.v1.SetPolicyResponse
+	(*GetPolicyRequest)(nil),      // 2: headscale.v1.GetPolicyRequest
+	(*GetPolicyResponse)(nil),     // 3: headscale.v1.GetPolicyResponse
+	(*CheckPolicyRequest)(nil),    // 4: headscale.v1.CheckPolicyRequest
+	(*CheckPolicyResponse)(nil),   // 5: headscale.v1.CheckPolicyResponse
+	(*timestamppb.Timestamp)(nil), // 6: google.protobuf.Timestamp
+}
+var file_headscale_v1_policy_proto_depIdxs = []int32{
+	6, // 0: headscale.v1.SetPolicyResponse.updated_at:type_name -> google.protobuf.Timestamp
+	6, // 1: headscale.v1.GetPolicyResponse.updated_at:type_name -> google.protobuf.Timestamp
+	2, // [2:2] is the sub-list for method output_type
+	2, // [2:2] is the sub-list for method input_type
+	2, // [2:2] is the sub-list for extension type_name
+	2, // [2:2] is the sub-list for extension extendee
+	0, // [0:2] is the sub-list for field type_name
+}
+
+func init() { file_headscale_v1_policy_proto_init() }
+func file_headscale_v1_policy_proto_init() {
+	if File_headscale_v1_policy_proto != nil {
+		return
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_headscale_v1_policy_proto_rawDesc), len(file_headscale_v1_policy_proto_rawDesc)),
+			NumEnums:      0,
+			NumMessages:   6,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_headscale_v1_policy_proto_goTypes,
+		DependencyIndexes: file_headscale_v1_policy_proto_depIdxs,
+		MessageInfos:      file_headscale_v1_policy_proto_msgTypes,
+	}.Build()
+	File_headscale_v1_policy_proto = out.File
+	file_headscale_v1_policy_proto_goTypes = nil
+	file_headscale_v1_policy_proto_depIdxs = nil
+}
diff --git a/gen/go/headscale/v1/preauthkey.pb.go b/gen/go/headscale/v1/preauthkey.pb.go
new file mode 100644
index 000000000..ff902d45c
--- /dev/null
+++ b/gen/go/headscale/v1/preauthkey.pb.go
@@ -0,0 +1,596 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: headscale/v1/preauthkey.proto
+
+package v1
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type PreAuthKey struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	User          *User                  `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
+	Id            uint64                 `protobuf:"varint,2,opt,name=id,proto3" json:"id,omitempty"`
+	Key           string                 `protobuf:"bytes,3,opt,name=key,proto3" json:"key,omitempty"`
+	Reusable      bool                   `protobuf:"varint,4,opt,name=reusable,proto3" json:"reusable,omitempty"`
+	Ephemeral     bool                   `protobuf:"varint,5,opt,name=ephemeral,proto3" json:"ephemeral,omitempty"`
+	Used          bool                   `protobuf:"varint,6,opt,name=used,proto3" json:"used,omitempty"`
+	Expiration    *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=expiration,proto3" json:"expiration,omitempty"`
+	CreatedAt     *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
+	AclTags       []string               `protobuf:"bytes,9,rep,name=acl_tags,json=aclTags,proto3" json:"acl_tags,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *PreAuthKey) Reset() {
+	*x = PreAuthKey{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *PreAuthKey) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PreAuthKey) ProtoMessage() {}
+
+func (x *PreAuthKey) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PreAuthKey.ProtoReflect.Descriptor instead.
+func (*PreAuthKey) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *PreAuthKey) GetUser() *User {
+	if x != nil {
+		return x.User
+	}
+	return nil
+}
+
+func (x *PreAuthKey) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+func (x *PreAuthKey) GetKey() string {
+	if x != nil {
+		return x.Key
+	}
+	return ""
+}
+
+func (x *PreAuthKey) GetReusable() bool {
+	if x != nil {
+		return x.Reusable
+	}
+	return false
+}
+
+func (x *PreAuthKey) GetEphemeral() bool {
+	if x != nil {
+		return x.Ephemeral
+	}
+	return false
+}
+
+func (x *PreAuthKey) GetUsed() bool {
+	if x != nil {
+		return x.Used
+	}
+	return false
+}
+
+func (x *PreAuthKey) GetExpiration() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Expiration
+	}
+	return nil
+}
+
+func (x *PreAuthKey) GetCreatedAt() *timestamppb.Timestamp {
+	if x != nil {
+		return x.CreatedAt
+	}
+	return nil
+}
+
+func (x *PreAuthKey) GetAclTags() []string {
+	if x != nil {
+		return x.AclTags
+	}
+	return nil
+}
+
+type CreatePreAuthKeyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	User          uint64                 `protobuf:"varint,1,opt,name=user,proto3" json:"user,omitempty"`
+	Reusable      bool                   `protobuf:"varint,2,opt,name=reusable,proto3" json:"reusable,omitempty"`
+	Ephemeral     bool                   `protobuf:"varint,3,opt,name=ephemeral,proto3" json:"ephemeral,omitempty"`
+	Expiration    *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=expiration,proto3" json:"expiration,omitempty"`
+	AclTags       []string               `protobuf:"bytes,5,rep,name=acl_tags,json=aclTags,proto3" json:"acl_tags,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CreatePreAuthKeyRequest) Reset() {
+	*x = CreatePreAuthKeyRequest{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CreatePreAuthKeyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreatePreAuthKeyRequest) ProtoMessage() {}
+
+func (x *CreatePreAuthKeyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreatePreAuthKeyRequest.ProtoReflect.Descriptor instead.
+func (*CreatePreAuthKeyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *CreatePreAuthKeyRequest) GetUser() uint64 {
+	if x != nil {
+		return x.User
+	}
+	return 0
+}
+
+func (x *CreatePreAuthKeyRequest) GetReusable() bool {
+	if x != nil {
+		return x.Reusable
+	}
+	return false
+}
+
+func (x *CreatePreAuthKeyRequest) GetEphemeral() bool {
+	if x != nil {
+		return x.Ephemeral
+	}
+	return false
+}
+
+func (x *CreatePreAuthKeyRequest) GetExpiration() *timestamppb.Timestamp {
+	if x != nil {
+		return x.Expiration
+	}
+	return nil
+}
+
+func (x *CreatePreAuthKeyRequest) GetAclTags() []string {
+	if x != nil {
+		return x.AclTags
+	}
+	return nil
+}
+
+type CreatePreAuthKeyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	PreAuthKey    *PreAuthKey            `protobuf:"bytes,1,opt,name=pre_auth_key,json=preAuthKey,proto3" json:"pre_auth_key,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CreatePreAuthKeyResponse) Reset() {
+	*x = CreatePreAuthKeyResponse{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CreatePreAuthKeyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreatePreAuthKeyResponse) ProtoMessage() {}
+
+func (x *CreatePreAuthKeyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreatePreAuthKeyResponse.ProtoReflect.Descriptor instead.
+func (*CreatePreAuthKeyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *CreatePreAuthKeyResponse) GetPreAuthKey() *PreAuthKey {
+	if x != nil {
+		return x.PreAuthKey
+	}
+	return nil
+}
+
+type ExpirePreAuthKeyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            uint64                 `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ExpirePreAuthKeyRequest) Reset() {
+	*x = ExpirePreAuthKeyRequest{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ExpirePreAuthKeyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ExpirePreAuthKeyRequest) ProtoMessage() {}
+
+func (x *ExpirePreAuthKeyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ExpirePreAuthKeyRequest.ProtoReflect.Descriptor instead.
+func (*ExpirePreAuthKeyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *ExpirePreAuthKeyRequest) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+type ExpirePreAuthKeyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ExpirePreAuthKeyResponse) Reset() {
+	*x = ExpirePreAuthKeyResponse{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ExpirePreAuthKeyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ExpirePreAuthKeyResponse) ProtoMessage() {}
+
+func (x *ExpirePreAuthKeyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ExpirePreAuthKeyResponse.ProtoReflect.Descriptor instead.
+func (*ExpirePreAuthKeyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{4}
+}
+
+type DeletePreAuthKeyRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            uint64                 `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeletePreAuthKeyRequest) Reset() {
+	*x = DeletePreAuthKeyRequest{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeletePreAuthKeyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeletePreAuthKeyRequest) ProtoMessage() {}
+
+func (x *DeletePreAuthKeyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeletePreAuthKeyRequest.ProtoReflect.Descriptor instead.
+func (*DeletePreAuthKeyRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *DeletePreAuthKeyRequest) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+type DeletePreAuthKeyResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeletePreAuthKeyResponse) Reset() {
+	*x = DeletePreAuthKeyResponse{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeletePreAuthKeyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeletePreAuthKeyResponse) ProtoMessage() {}
+
+func (x *DeletePreAuthKeyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[6]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeletePreAuthKeyResponse.ProtoReflect.Descriptor instead.
+func (*DeletePreAuthKeyResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{6}
+}
+
+type ListPreAuthKeysRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListPreAuthKeysRequest) Reset() {
+	*x = ListPreAuthKeysRequest{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListPreAuthKeysRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListPreAuthKeysRequest) ProtoMessage() {}
+
+func (x *ListPreAuthKeysRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListPreAuthKeysRequest.ProtoReflect.Descriptor instead.
+func (*ListPreAuthKeysRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{7}
+}
+
+type ListPreAuthKeysResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	PreAuthKeys   []*PreAuthKey          `protobuf:"bytes,1,rep,name=pre_auth_keys,json=preAuthKeys,proto3" json:"pre_auth_keys,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListPreAuthKeysResponse) Reset() {
+	*x = ListPreAuthKeysResponse{}
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListPreAuthKeysResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListPreAuthKeysResponse) ProtoMessage() {}
+
+func (x *ListPreAuthKeysResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_preauthkey_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListPreAuthKeysResponse.ProtoReflect.Descriptor instead.
+func (*ListPreAuthKeysResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_preauthkey_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *ListPreAuthKeysResponse) GetPreAuthKeys() []*PreAuthKey {
+	if x != nil {
+		return x.PreAuthKeys
+	}
+	return nil
+}
+
+var File_headscale_v1_preauthkey_proto protoreflect.FileDescriptor
+
+const file_headscale_v1_preauthkey_proto_rawDesc = "" +
+	"\n" +
+	"\x1dheadscale/v1/preauthkey.proto\x12\fheadscale.v1\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x17headscale/v1/user.proto\"\xb6\x02\n" +
+	"\n" +
+	"PreAuthKey\x12&\n" +
+	"\x04user\x18\x01 \x01(\v2\x12.headscale.v1.UserR\x04user\x12\x0e\n" +
+	"\x02id\x18\x02 \x01(\x04R\x02id\x12\x10\n" +
+	"\x03key\x18\x03 \x01(\tR\x03key\x12\x1a\n" +
+	"\breusable\x18\x04 \x01(\bR\breusable\x12\x1c\n" +
+	"\tephemeral\x18\x05 \x01(\bR\tephemeral\x12\x12\n" +
+	"\x04used\x18\x06 \x01(\bR\x04used\x12:\n" +
+	"\n" +
+	"expiration\x18\a \x01(\v2\x1a.google.protobuf.TimestampR\n" +
+	"expiration\x129\n" +
+	"\n" +
+	"created_at\x18\b \x01(\v2\x1a.google.protobuf.TimestampR\tcreatedAt\x12\x19\n" +
+	"\bacl_tags\x18\t \x03(\tR\aaclTags\"\xbe\x01\n" +
+	"\x17CreatePreAuthKeyRequest\x12\x12\n" +
+	"\x04user\x18\x01 \x01(\x04R\x04user\x12\x1a\n" +
+	"\breusable\x18\x02 \x01(\bR\breusable\x12\x1c\n" +
+	"\tephemeral\x18\x03 \x01(\bR\tephemeral\x12:\n" +
+	"\n" +
+	"expiration\x18\x04 \x01(\v2\x1a.google.protobuf.TimestampR\n" +
+	"expiration\x12\x19\n" +
+	"\bacl_tags\x18\x05 \x03(\tR\aaclTags\"V\n" +
+	"\x18CreatePreAuthKeyResponse\x12:\n" +
+	"\fpre_auth_key\x18\x01 \x01(\v2\x18.headscale.v1.PreAuthKeyR\n" +
+	"preAuthKey\")\n" +
+	"\x17ExpirePreAuthKeyRequest\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\x04R\x02id\"\x1a\n" +
+	"\x18ExpirePreAuthKeyResponse\")\n" +
+	"\x17DeletePreAuthKeyRequest\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\x04R\x02id\"\x1a\n" +
+	"\x18DeletePreAuthKeyResponse\"\x18\n" +
+	"\x16ListPreAuthKeysRequest\"W\n" +
+	"\x17ListPreAuthKeysResponse\x12<\n" +
+	"\rpre_auth_keys\x18\x01 \x03(\v2\x18.headscale.v1.PreAuthKeyR\vpreAuthKeysB)Z'github.com/juanfont/headscale/gen/go/v1b\x06proto3"
+
+var (
+	file_headscale_v1_preauthkey_proto_rawDescOnce sync.Once
+	file_headscale_v1_preauthkey_proto_rawDescData []byte
+)
+
+func file_headscale_v1_preauthkey_proto_rawDescGZIP() []byte {
+	file_headscale_v1_preauthkey_proto_rawDescOnce.Do(func() {
+		file_headscale_v1_preauthkey_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_headscale_v1_preauthkey_proto_rawDesc), len(file_headscale_v1_preauthkey_proto_rawDesc)))
+	})
+	return file_headscale_v1_preauthkey_proto_rawDescData
+}
+
+var file_headscale_v1_preauthkey_proto_msgTypes = make([]protoimpl.MessageInfo, 9)
+var file_headscale_v1_preauthkey_proto_goTypes = []any{
+	(*PreAuthKey)(nil),               // 0: headscale.v1.PreAuthKey
+	(*CreatePreAuthKeyRequest)(nil),  // 1: headscale.v1.CreatePreAuthKeyRequest
+	(*CreatePreAuthKeyResponse)(nil), // 2: headscale.v1.CreatePreAuthKeyResponse
+	(*ExpirePreAuthKeyRequest)(nil),  // 3: headscale.v1.ExpirePreAuthKeyRequest
+	(*ExpirePreAuthKeyResponse)(nil), // 4: headscale.v1.ExpirePreAuthKeyResponse
+	(*DeletePreAuthKeyRequest)(nil),  // 5: headscale.v1.DeletePreAuthKeyRequest
+	(*DeletePreAuthKeyResponse)(nil), // 6: headscale.v1.DeletePreAuthKeyResponse
+	(*ListPreAuthKeysRequest)(nil),   // 7: headscale.v1.ListPreAuthKeysRequest
+	(*ListPreAuthKeysResponse)(nil),  // 8: headscale.v1.ListPreAuthKeysResponse
+	(*User)(nil),                     // 9: headscale.v1.User
+	(*timestamppb.Timestamp)(nil),    // 10: google.protobuf.Timestamp
+}
+var file_headscale_v1_preauthkey_proto_depIdxs = []int32{
+	9,  // 0: headscale.v1.PreAuthKey.user:type_name -> headscale.v1.User
+	10, // 1: headscale.v1.PreAuthKey.expiration:type_name -> google.protobuf.Timestamp
+	10, // 2: headscale.v1.PreAuthKey.created_at:type_name -> google.protobuf.Timestamp
+	10, // 3: headscale.v1.CreatePreAuthKeyRequest.expiration:type_name -> google.protobuf.Timestamp
+	0,  // 4: headscale.v1.CreatePreAuthKeyResponse.pre_auth_key:type_name -> headscale.v1.PreAuthKey
+	0,  // 5: headscale.v1.ListPreAuthKeysResponse.pre_auth_keys:type_name -> headscale.v1.PreAuthKey
+	6,  // [6:6] is the sub-list for method output_type
+	6,  // [6:6] is the sub-list for method input_type
+	6,  // [6:6] is the sub-list for extension type_name
+	6,  // [6:6] is the sub-list for extension extendee
+	0,  // [0:6] is the sub-list for field type_name
+}
+
+func init() { file_headscale_v1_preauthkey_proto_init() }
+func file_headscale_v1_preauthkey_proto_init() {
+	if File_headscale_v1_preauthkey_proto != nil {
+		return
+	}
+	file_headscale_v1_user_proto_init()
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_headscale_v1_preauthkey_proto_rawDesc), len(file_headscale_v1_preauthkey_proto_rawDesc)),
+			NumEnums:      0,
+			NumMessages:   9,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_headscale_v1_preauthkey_proto_goTypes,
+		DependencyIndexes: file_headscale_v1_preauthkey_proto_depIdxs,
+		MessageInfos:      file_headscale_v1_preauthkey_proto_msgTypes,
+	}.Build()
+	File_headscale_v1_preauthkey_proto = out.File
+	file_headscale_v1_preauthkey_proto_goTypes = nil
+	file_headscale_v1_preauthkey_proto_depIdxs = nil
+}
diff --git a/gen/go/headscale/v1/user.pb.go b/gen/go/headscale/v1/user.pb.go
new file mode 100644
index 000000000..5f05d0849
--- /dev/null
+++ b/gen/go/headscale/v1/user.pb.go
@@ -0,0 +1,615 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// versions:
+// 	protoc-gen-go v1.36.11
+// 	protoc        (unknown)
+// source: headscale/v1/user.proto
+
+package v1
+
+import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	timestamppb "google.golang.org/protobuf/types/known/timestamppb"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
+)
+
+const (
+	// Verify that this generated code is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
+	// Verify that runtime/protoimpl is sufficiently up-to-date.
+	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
+)
+
+type User struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            uint64                 `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	Name          string                 `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
+	CreatedAt     *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
+	DisplayName   string                 `protobuf:"bytes,4,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
+	Email         string                 `protobuf:"bytes,5,opt,name=email,proto3" json:"email,omitempty"`
+	ProviderId    string                 `protobuf:"bytes,6,opt,name=provider_id,json=providerId,proto3" json:"provider_id,omitempty"`
+	Provider      string                 `protobuf:"bytes,7,opt,name=provider,proto3" json:"provider,omitempty"`
+	ProfilePicUrl string                 `protobuf:"bytes,8,opt,name=profile_pic_url,json=profilePicUrl,proto3" json:"profile_pic_url,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *User) Reset() {
+	*x = User{}
+	mi := &file_headscale_v1_user_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *User) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*User) ProtoMessage() {}
+
+func (x *User) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use User.ProtoReflect.Descriptor instead.
+func (*User) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{0}
+}
+
+func (x *User) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+func (x *User) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *User) GetCreatedAt() *timestamppb.Timestamp {
+	if x != nil {
+		return x.CreatedAt
+	}
+	return nil
+}
+
+func (x *User) GetDisplayName() string {
+	if x != nil {
+		return x.DisplayName
+	}
+	return ""
+}
+
+func (x *User) GetEmail() string {
+	if x != nil {
+		return x.Email
+	}
+	return ""
+}
+
+func (x *User) GetProviderId() string {
+	if x != nil {
+		return x.ProviderId
+	}
+	return ""
+}
+
+func (x *User) GetProvider() string {
+	if x != nil {
+		return x.Provider
+	}
+	return ""
+}
+
+func (x *User) GetProfilePicUrl() string {
+	if x != nil {
+		return x.ProfilePicUrl
+	}
+	return ""
+}
+
+type CreateUserRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Name          string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
+	DisplayName   string                 `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
+	Email         string                 `protobuf:"bytes,3,opt,name=email,proto3" json:"email,omitempty"`
+	PictureUrl    string                 `protobuf:"bytes,4,opt,name=picture_url,json=pictureUrl,proto3" json:"picture_url,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CreateUserRequest) Reset() {
+	*x = CreateUserRequest{}
+	mi := &file_headscale_v1_user_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CreateUserRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateUserRequest) ProtoMessage() {}
+
+func (x *CreateUserRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateUserRequest.ProtoReflect.Descriptor instead.
+func (*CreateUserRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{1}
+}
+
+func (x *CreateUserRequest) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *CreateUserRequest) GetDisplayName() string {
+	if x != nil {
+		return x.DisplayName
+	}
+	return ""
+}
+
+func (x *CreateUserRequest) GetEmail() string {
+	if x != nil {
+		return x.Email
+	}
+	return ""
+}
+
+func (x *CreateUserRequest) GetPictureUrl() string {
+	if x != nil {
+		return x.PictureUrl
+	}
+	return ""
+}
+
+type CreateUserResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	User          *User                  `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *CreateUserResponse) Reset() {
+	*x = CreateUserResponse{}
+	mi := &file_headscale_v1_user_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *CreateUserResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*CreateUserResponse) ProtoMessage() {}
+
+func (x *CreateUserResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use CreateUserResponse.ProtoReflect.Descriptor instead.
+func (*CreateUserResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *CreateUserResponse) GetUser() *User {
+	if x != nil {
+		return x.User
+	}
+	return nil
+}
+
+type RenameUserRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	OldId         uint64                 `protobuf:"varint,1,opt,name=old_id,json=oldId,proto3" json:"old_id,omitempty"`
+	NewName       string                 `protobuf:"bytes,2,opt,name=new_name,json=newName,proto3" json:"new_name,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *RenameUserRequest) Reset() {
+	*x = RenameUserRequest{}
+	mi := &file_headscale_v1_user_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *RenameUserRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RenameUserRequest) ProtoMessage() {}
+
+func (x *RenameUserRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RenameUserRequest.ProtoReflect.Descriptor instead.
+func (*RenameUserRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *RenameUserRequest) GetOldId() uint64 {
+	if x != nil {
+		return x.OldId
+	}
+	return 0
+}
+
+func (x *RenameUserRequest) GetNewName() string {
+	if x != nil {
+		return x.NewName
+	}
+	return ""
+}
+
+type RenameUserResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	User          *User                  `protobuf:"bytes,1,opt,name=user,proto3" json:"user,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *RenameUserResponse) Reset() {
+	*x = RenameUserResponse{}
+	mi := &file_headscale_v1_user_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *RenameUserResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*RenameUserResponse) ProtoMessage() {}
+
+func (x *RenameUserResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use RenameUserResponse.ProtoReflect.Descriptor instead.
+func (*RenameUserResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{4}
+}
+
+func (x *RenameUserResponse) GetUser() *User {
+	if x != nil {
+		return x.User
+	}
+	return nil
+}
+
+type DeleteUserRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            uint64                 `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeleteUserRequest) Reset() {
+	*x = DeleteUserRequest{}
+	mi := &file_headscale_v1_user_proto_msgTypes[5]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeleteUserRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteUserRequest) ProtoMessage() {}
+
+func (x *DeleteUserRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[5]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteUserRequest.ProtoReflect.Descriptor instead.
+func (*DeleteUserRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{5}
+}
+
+func (x *DeleteUserRequest) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+type DeleteUserResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *DeleteUserResponse) Reset() {
+	*x = DeleteUserResponse{}
+	mi := &file_headscale_v1_user_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DeleteUserResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DeleteUserResponse) ProtoMessage() {}
+
+func (x *DeleteUserResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[6]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DeleteUserResponse.ProtoReflect.Descriptor instead.
+func (*DeleteUserResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{6}
+}
+
+type ListUsersRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Id            uint64                 `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
+	Name          string                 `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
+	Email         string                 `protobuf:"bytes,3,opt,name=email,proto3" json:"email,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListUsersRequest) Reset() {
+	*x = ListUsersRequest{}
+	mi := &file_headscale_v1_user_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListUsersRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListUsersRequest) ProtoMessage() {}
+
+func (x *ListUsersRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListUsersRequest.ProtoReflect.Descriptor instead.
+func (*ListUsersRequest) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *ListUsersRequest) GetId() uint64 {
+	if x != nil {
+		return x.Id
+	}
+	return 0
+}
+
+func (x *ListUsersRequest) GetName() string {
+	if x != nil {
+		return x.Name
+	}
+	return ""
+}
+
+func (x *ListUsersRequest) GetEmail() string {
+	if x != nil {
+		return x.Email
+	}
+	return ""
+}
+
+type ListUsersResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Users         []*User                `protobuf:"bytes,1,rep,name=users,proto3" json:"users,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *ListUsersResponse) Reset() {
+	*x = ListUsersResponse{}
+	mi := &file_headscale_v1_user_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListUsersResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListUsersResponse) ProtoMessage() {}
+
+func (x *ListUsersResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_headscale_v1_user_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListUsersResponse.ProtoReflect.Descriptor instead.
+func (*ListUsersResponse) Descriptor() ([]byte, []int) {
+	return file_headscale_v1_user_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *ListUsersResponse) GetUsers() []*User {
+	if x != nil {
+		return x.Users
+	}
+	return nil
+}
+
+var File_headscale_v1_user_proto protoreflect.FileDescriptor
+
+const file_headscale_v1_user_proto_rawDesc = "" +
+	"\n" +
+	"\x17headscale/v1/user.proto\x12\fheadscale.v1\x1a\x1fgoogle/protobuf/timestamp.proto\"\x83\x02\n" +
+	"\x04User\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\x04R\x02id\x12\x12\n" +
+	"\x04name\x18\x02 \x01(\tR\x04name\x129\n" +
+	"\n" +
+	"created_at\x18\x03 \x01(\v2\x1a.google.protobuf.TimestampR\tcreatedAt\x12!\n" +
+	"\fdisplay_name\x18\x04 \x01(\tR\vdisplayName\x12\x14\n" +
+	"\x05email\x18\x05 \x01(\tR\x05email\x12\x1f\n" +
+	"\vprovider_id\x18\x06 \x01(\tR\n" +
+	"providerId\x12\x1a\n" +
+	"\bprovider\x18\a \x01(\tR\bprovider\x12&\n" +
+	"\x0fprofile_pic_url\x18\b \x01(\tR\rprofilePicUrl\"\x81\x01\n" +
+	"\x11CreateUserRequest\x12\x12\n" +
+	"\x04name\x18\x01 \x01(\tR\x04name\x12!\n" +
+	"\fdisplay_name\x18\x02 \x01(\tR\vdisplayName\x12\x14\n" +
+	"\x05email\x18\x03 \x01(\tR\x05email\x12\x1f\n" +
+	"\vpicture_url\x18\x04 \x01(\tR\n" +
+	"pictureUrl\"<\n" +
+	"\x12CreateUserResponse\x12&\n" +
+	"\x04user\x18\x01 \x01(\v2\x12.headscale.v1.UserR\x04user\"E\n" +
+	"\x11RenameUserRequest\x12\x15\n" +
+	"\x06old_id\x18\x01 \x01(\x04R\x05oldId\x12\x19\n" +
+	"\bnew_name\x18\x02 \x01(\tR\anewName\"<\n" +
+	"\x12RenameUserResponse\x12&\n" +
+	"\x04user\x18\x01 \x01(\v2\x12.headscale.v1.UserR\x04user\"#\n" +
+	"\x11DeleteUserRequest\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\x04R\x02id\"\x14\n" +
+	"\x12DeleteUserResponse\"L\n" +
+	"\x10ListUsersRequest\x12\x0e\n" +
+	"\x02id\x18\x01 \x01(\x04R\x02id\x12\x12\n" +
+	"\x04name\x18\x02 \x01(\tR\x04name\x12\x14\n" +
+	"\x05email\x18\x03 \x01(\tR\x05email\"=\n" +
+	"\x11ListUsersResponse\x12(\n" +
+	"\x05users\x18\x01 \x03(\v2\x12.headscale.v1.UserR\x05usersB)Z'github.com/juanfont/headscale/gen/go/v1b\x06proto3"
+
+var (
+	file_headscale_v1_user_proto_rawDescOnce sync.Once
+	file_headscale_v1_user_proto_rawDescData []byte
+)
+
+func file_headscale_v1_user_proto_rawDescGZIP() []byte {
+	file_headscale_v1_user_proto_rawDescOnce.Do(func() {
+		file_headscale_v1_user_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_headscale_v1_user_proto_rawDesc), len(file_headscale_v1_user_proto_rawDesc)))
+	})
+	return file_headscale_v1_user_proto_rawDescData
+}
+
+var file_headscale_v1_user_proto_msgTypes = make([]protoimpl.MessageInfo, 9)
+var file_headscale_v1_user_proto_goTypes = []any{
+	(*User)(nil),                  // 0: headscale.v1.User
+	(*CreateUserRequest)(nil),     // 1: headscale.v1.CreateUserRequest
+	(*CreateUserResponse)(nil),    // 2: headscale.v1.CreateUserResponse
+	(*RenameUserRequest)(nil),     // 3: headscale.v1.RenameUserRequest
+	(*RenameUserResponse)(nil),    // 4: headscale.v1.RenameUserResponse
+	(*DeleteUserRequest)(nil),     // 5: headscale.v1.DeleteUserRequest
+	(*DeleteUserResponse)(nil),    // 6: headscale.v1.DeleteUserResponse
+	(*ListUsersRequest)(nil),      // 7: headscale.v1.ListUsersRequest
+	(*ListUsersResponse)(nil),     // 8: headscale.v1.ListUsersResponse
+	(*timestamppb.Timestamp)(nil), // 9: google.protobuf.Timestamp
+}
+var file_headscale_v1_user_proto_depIdxs = []int32{
+	9, // 0: headscale.v1.User.created_at:type_name -> google.protobuf.Timestamp
+	0, // 1: headscale.v1.CreateUserResponse.user:type_name -> headscale.v1.User
+	0, // 2: headscale.v1.RenameUserResponse.user:type_name -> headscale.v1.User
+	0, // 3: headscale.v1.ListUsersResponse.users:type_name -> headscale.v1.User
+	4, // [4:4] is the sub-list for method output_type
+	4, // [4:4] is the sub-list for method input_type
+	4, // [4:4] is the sub-list for extension type_name
+	4, // [4:4] is the sub-list for extension extendee
+	0, // [0:4] is the sub-list for field type_name
+}
+
+func init() { file_headscale_v1_user_proto_init() }
+func file_headscale_v1_user_proto_init() {
+	if File_headscale_v1_user_proto != nil {
+		return
+	}
+	type x struct{}
+	out := protoimpl.TypeBuilder{
+		File: protoimpl.DescBuilder{
+			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
+			RawDescriptor: unsafe.Slice(unsafe.StringData(file_headscale_v1_user_proto_rawDesc), len(file_headscale_v1_user_proto_rawDesc)),
+			NumEnums:      0,
+			NumMessages:   9,
+			NumExtensions: 0,
+			NumServices:   0,
+		},
+		GoTypes:           file_headscale_v1_user_proto_goTypes,
+		DependencyIndexes: file_headscale_v1_user_proto_depIdxs,
+		MessageInfos:      file_headscale_v1_user_proto_msgTypes,
+	}.Build()
+	File_headscale_v1_user_proto = out.File
+	file_headscale_v1_user_proto_goTypes = nil
+	file_headscale_v1_user_proto_depIdxs = nil
+}
diff --git a/gen/openapiv2/headscale/v1/apikey.swagger.json b/gen/openapiv2/headscale/v1/apikey.swagger.json
new file mode 100644
index 000000000..8c8596a95
--- /dev/null
+++ b/gen/openapiv2/headscale/v1/apikey.swagger.json
@@ -0,0 +1,44 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "headscale/v1/apikey.proto",
+    "version": "version not set"
+  },
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {},
+  "definitions": {
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/gen/openapiv2/headscale/v1/auth.swagger.json b/gen/openapiv2/headscale/v1/auth.swagger.json
new file mode 100644
index 000000000..2e99e1a75
--- /dev/null
+++ b/gen/openapiv2/headscale/v1/auth.swagger.json
@@ -0,0 +1,44 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "headscale/v1/auth.proto",
+    "version": "version not set"
+  },
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {},
+  "definitions": {
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/gen/openapiv2/headscale/v1/device.swagger.json b/gen/openapiv2/headscale/v1/device.swagger.json
new file mode 100644
index 000000000..99d20debf
--- /dev/null
+++ b/gen/openapiv2/headscale/v1/device.swagger.json
@@ -0,0 +1,44 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "headscale/v1/device.proto",
+    "version": "version not set"
+  },
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {},
+  "definitions": {
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/gen/openapiv2/headscale/v1/headscale.swagger.json b/gen/openapiv2/headscale/v1/headscale.swagger.json
new file mode 100644
index 000000000..545cf0b5b
--- /dev/null
+++ b/gen/openapiv2/headscale/v1/headscale.swagger.json
@@ -0,0 +1,1535 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "headscale/v1/headscale.proto",
+    "version": "version not set"
+  },
+  "tags": [
+    {
+      "name": "HeadscaleService"
+    }
+  ],
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {
+    "/api/v1/apikey": {
+      "get": {
+        "operationId": "HeadscaleService_ListApiKeys",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1ListApiKeysResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "tags": [
+          "HeadscaleService"
+        ]
+      },
+      "post": {
+        "summary": "--- ApiKeys start ---",
+        "operationId": "HeadscaleService_CreateApiKey",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1CreateApiKeyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1CreateApiKeyRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/apikey/expire": {
+      "post": {
+        "operationId": "HeadscaleService_ExpireApiKey",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1ExpireApiKeyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1ExpireApiKeyRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/apikey/{prefix}": {
+      "delete": {
+        "operationId": "HeadscaleService_DeleteApiKey",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1DeleteApiKeyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "prefix",
+            "in": "path",
+            "required": true,
+            "type": "string"
+          },
+          {
+            "name": "id",
+            "in": "query",
+            "required": false,
+            "type": "string",
+            "format": "uint64"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/auth/approve": {
+      "post": {
+        "operationId": "HeadscaleService_AuthApprove",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1AuthApproveResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1AuthApproveRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/auth/register": {
+      "post": {
+        "summary": "--- Auth start ---",
+        "operationId": "HeadscaleService_AuthRegister",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1AuthRegisterResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1AuthRegisterRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/auth/reject": {
+      "post": {
+        "operationId": "HeadscaleService_AuthReject",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1AuthRejectResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1AuthRejectRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/debug/node": {
+      "post": {
+        "summary": "--- Node start ---",
+        "operationId": "HeadscaleService_DebugCreateNode",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1DebugCreateNodeResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1DebugCreateNodeRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/health": {
+      "get": {
+        "summary": "--- Health start ---",
+        "operationId": "HeadscaleService_Health",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1HealthResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/node": {
+      "get": {
+        "operationId": "HeadscaleService_ListNodes",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1ListNodesResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "user",
+            "in": "query",
+            "required": false,
+            "type": "string"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/node/backfillips": {
+      "post": {
+        "operationId": "HeadscaleService_BackfillNodeIPs",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1BackfillNodeIPsResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "confirmed",
+            "in": "query",
+            "required": false,
+            "type": "boolean"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/node/register": {
+      "post": {
+        "operationId": "HeadscaleService_RegisterNode",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1RegisterNodeResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "user",
+            "in": "query",
+            "required": false,
+            "type": "string"
+          },
+          {
+            "name": "key",
+            "in": "query",
+            "required": false,
+            "type": "string"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/node/{nodeId}": {
+      "get": {
+        "operationId": "HeadscaleService_GetNode",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1GetNodeResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "nodeId",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "format": "uint64"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      },
+      "delete": {
+        "operationId": "HeadscaleService_DeleteNode",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1DeleteNodeResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "nodeId",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "format": "uint64"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/node/{nodeId}/approve_routes": {
+      "post": {
+        "operationId": "HeadscaleService_SetApprovedRoutes",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1SetApprovedRoutesResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "nodeId",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "format": "uint64"
+          },
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/HeadscaleServiceSetApprovedRoutesBody"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/node/{nodeId}/expire": {
+      "post": {
+        "operationId": "HeadscaleService_ExpireNode",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1ExpireNodeResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "nodeId",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "format": "uint64"
+          },
+          {
+            "name": "expiry",
+            "in": "query",
+            "required": false,
+            "type": "string",
+            "format": "date-time"
+          },
+          {
+            "name": "disableExpiry",
+            "description": "When true, sets expiry to null (node will never expire).",
+            "in": "query",
+            "required": false,
+            "type": "boolean"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/node/{nodeId}/rename/{newName}": {
+      "post": {
+        "operationId": "HeadscaleService_RenameNode",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1RenameNodeResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "nodeId",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "format": "uint64"
+          },
+          {
+            "name": "newName",
+            "in": "path",
+            "required": true,
+            "type": "string"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/node/{nodeId}/tags": {
+      "post": {
+        "operationId": "HeadscaleService_SetTags",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1SetTagsResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "nodeId",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "format": "uint64"
+          },
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/HeadscaleServiceSetTagsBody"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/policy": {
+      "get": {
+        "summary": "--- Policy start ---",
+        "operationId": "HeadscaleService_GetPolicy",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1GetPolicyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "tags": [
+          "HeadscaleService"
+        ]
+      },
+      "put": {
+        "operationId": "HeadscaleService_SetPolicy",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1SetPolicyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1SetPolicyRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/policy/check": {
+      "post": {
+        "operationId": "HeadscaleService_CheckPolicy",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1CheckPolicyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1CheckPolicyRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/preauthkey": {
+      "get": {
+        "operationId": "HeadscaleService_ListPreAuthKeys",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1ListPreAuthKeysResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "tags": [
+          "HeadscaleService"
+        ]
+      },
+      "delete": {
+        "operationId": "HeadscaleService_DeletePreAuthKey",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1DeletePreAuthKeyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "id",
+            "in": "query",
+            "required": false,
+            "type": "string",
+            "format": "uint64"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      },
+      "post": {
+        "summary": "--- PreAuthKeys start ---",
+        "operationId": "HeadscaleService_CreatePreAuthKey",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1CreatePreAuthKeyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1CreatePreAuthKeyRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/preauthkey/expire": {
+      "post": {
+        "operationId": "HeadscaleService_ExpirePreAuthKey",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1ExpirePreAuthKeyResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1ExpirePreAuthKeyRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/user": {
+      "get": {
+        "operationId": "HeadscaleService_ListUsers",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1ListUsersResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "id",
+            "in": "query",
+            "required": false,
+            "type": "string",
+            "format": "uint64"
+          },
+          {
+            "name": "name",
+            "in": "query",
+            "required": false,
+            "type": "string"
+          },
+          {
+            "name": "email",
+            "in": "query",
+            "required": false,
+            "type": "string"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      },
+      "post": {
+        "summary": "--- User start ---",
+        "operationId": "HeadscaleService_CreateUser",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1CreateUserResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/v1CreateUserRequest"
+            }
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/user/{id}": {
+      "delete": {
+        "operationId": "HeadscaleService_DeleteUser",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1DeleteUserResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "id",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "format": "uint64"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    },
+    "/api/v1/user/{oldId}/rename/{newName}": {
+      "post": {
+        "operationId": "HeadscaleService_RenameUser",
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/v1RenameUserResponse"
+            }
+          },
+          "default": {
+            "description": "An unexpected error response.",
+            "schema": {
+              "$ref": "#/definitions/rpcStatus"
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "oldId",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "format": "uint64"
+          },
+          {
+            "name": "newName",
+            "in": "path",
+            "required": true,
+            "type": "string"
+          }
+        ],
+        "tags": [
+          "HeadscaleService"
+        ]
+      }
+    }
+  },
+  "definitions": {
+    "HeadscaleServiceSetApprovedRoutesBody": {
+      "type": "object",
+      "properties": {
+        "routes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "HeadscaleServiceSetTagsBody": {
+      "type": "object",
+      "properties": {
+        "tags": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    },
+    "v1ApiKey": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "format": "uint64"
+        },
+        "prefix": {
+          "type": "string"
+        },
+        "expiration": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "lastSeen": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "v1AuthApproveRequest": {
+      "type": "object",
+      "properties": {
+        "authId": {
+          "type": "string"
+        }
+      }
+    },
+    "v1AuthApproveResponse": {
+      "type": "object"
+    },
+    "v1AuthRegisterRequest": {
+      "type": "object",
+      "properties": {
+        "user": {
+          "type": "string"
+        },
+        "authId": {
+          "type": "string"
+        }
+      }
+    },
+    "v1AuthRegisterResponse": {
+      "type": "object",
+      "properties": {
+        "node": {
+          "$ref": "#/definitions/v1Node"
+        }
+      }
+    },
+    "v1AuthRejectRequest": {
+      "type": "object",
+      "properties": {
+        "authId": {
+          "type": "string"
+        }
+      }
+    },
+    "v1AuthRejectResponse": {
+      "type": "object"
+    },
+    "v1BackfillNodeIPsResponse": {
+      "type": "object",
+      "properties": {
+        "changes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "v1CheckPolicyRequest": {
+      "type": "object",
+      "properties": {
+        "policy": {
+          "type": "string"
+        }
+      }
+    },
+    "v1CheckPolicyResponse": {
+      "type": "object"
+    },
+    "v1CreateApiKeyRequest": {
+      "type": "object",
+      "properties": {
+        "expiration": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "v1CreateApiKeyResponse": {
+      "type": "object",
+      "properties": {
+        "apiKey": {
+          "type": "string"
+        }
+      }
+    },
+    "v1CreatePreAuthKeyRequest": {
+      "type": "object",
+      "properties": {
+        "user": {
+          "type": "string",
+          "format": "uint64"
+        },
+        "reusable": {
+          "type": "boolean"
+        },
+        "ephemeral": {
+          "type": "boolean"
+        },
+        "expiration": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "aclTags": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "v1CreatePreAuthKeyResponse": {
+      "type": "object",
+      "properties": {
+        "preAuthKey": {
+          "$ref": "#/definitions/v1PreAuthKey"
+        }
+      }
+    },
+    "v1CreateUserRequest": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string"
+        },
+        "displayName": {
+          "type": "string"
+        },
+        "email": {
+          "type": "string"
+        },
+        "pictureUrl": {
+          "type": "string"
+        }
+      }
+    },
+    "v1CreateUserResponse": {
+      "type": "object",
+      "properties": {
+        "user": {
+          "$ref": "#/definitions/v1User"
+        }
+      }
+    },
+    "v1DebugCreateNodeRequest": {
+      "type": "object",
+      "properties": {
+        "user": {
+          "type": "string"
+        },
+        "key": {
+          "type": "string"
+        },
+        "name": {
+          "type": "string"
+        },
+        "routes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "v1DebugCreateNodeResponse": {
+      "type": "object",
+      "properties": {
+        "node": {
+          "$ref": "#/definitions/v1Node"
+        }
+      }
+    },
+    "v1DeleteApiKeyResponse": {
+      "type": "object"
+    },
+    "v1DeleteNodeResponse": {
+      "type": "object"
+    },
+    "v1DeletePreAuthKeyResponse": {
+      "type": "object"
+    },
+    "v1DeleteUserResponse": {
+      "type": "object"
+    },
+    "v1ExpireApiKeyRequest": {
+      "type": "object",
+      "properties": {
+        "prefix": {
+          "type": "string"
+        },
+        "id": {
+          "type": "string",
+          "format": "uint64"
+        }
+      }
+    },
+    "v1ExpireApiKeyResponse": {
+      "type": "object"
+    },
+    "v1ExpireNodeResponse": {
+      "type": "object",
+      "properties": {
+        "node": {
+          "$ref": "#/definitions/v1Node"
+        }
+      }
+    },
+    "v1ExpirePreAuthKeyRequest": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "format": "uint64"
+        }
+      }
+    },
+    "v1ExpirePreAuthKeyResponse": {
+      "type": "object"
+    },
+    "v1GetNodeResponse": {
+      "type": "object",
+      "properties": {
+        "node": {
+          "$ref": "#/definitions/v1Node"
+        }
+      }
+    },
+    "v1GetPolicyResponse": {
+      "type": "object",
+      "properties": {
+        "policy": {
+          "type": "string"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "v1HealthResponse": {
+      "type": "object",
+      "properties": {
+        "databaseConnectivity": {
+          "type": "boolean"
+        }
+      }
+    },
+    "v1ListApiKeysResponse": {
+      "type": "object",
+      "properties": {
+        "apiKeys": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1ApiKey"
+          }
+        }
+      }
+    },
+    "v1ListNodesResponse": {
+      "type": "object",
+      "properties": {
+        "nodes": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1Node"
+          }
+        }
+      }
+    },
+    "v1ListPreAuthKeysResponse": {
+      "type": "object",
+      "properties": {
+        "preAuthKeys": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1PreAuthKey"
+          }
+        }
+      }
+    },
+    "v1ListUsersResponse": {
+      "type": "object",
+      "properties": {
+        "users": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/v1User"
+          }
+        }
+      }
+    },
+    "v1Node": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "format": "uint64"
+        },
+        "machineKey": {
+          "type": "string"
+        },
+        "nodeKey": {
+          "type": "string"
+        },
+        "discoKey": {
+          "type": "string"
+        },
+        "ipAddresses": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "name": {
+          "type": "string"
+        },
+        "user": {
+          "$ref": "#/definitions/v1User"
+        },
+        "lastSeen": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "expiry": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "preAuthKey": {
+          "$ref": "#/definitions/v1PreAuthKey"
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "registerMethod": {
+          "$ref": "#/definitions/v1RegisterMethod"
+        },
+        "givenName": {
+          "type": "string",
+          "title": "Deprecated\nrepeated string forced_tags = 18;\nrepeated string invalid_tags = 19;\nrepeated string valid_tags = 20;"
+        },
+        "online": {
+          "type": "boolean"
+        },
+        "approvedRoutes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "availableRoutes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "subnetRoutes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "tags": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "v1PreAuthKey": {
+      "type": "object",
+      "properties": {
+        "user": {
+          "$ref": "#/definitions/v1User"
+        },
+        "id": {
+          "type": "string",
+          "format": "uint64"
+        },
+        "key": {
+          "type": "string"
+        },
+        "reusable": {
+          "type": "boolean"
+        },
+        "ephemeral": {
+          "type": "boolean"
+        },
+        "used": {
+          "type": "boolean"
+        },
+        "expiration": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "aclTags": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "v1RegisterMethod": {
+      "type": "string",
+      "enum": [
+        "REGISTER_METHOD_UNSPECIFIED",
+        "REGISTER_METHOD_AUTH_KEY",
+        "REGISTER_METHOD_CLI",
+        "REGISTER_METHOD_OIDC"
+      ],
+      "default": "REGISTER_METHOD_UNSPECIFIED"
+    },
+    "v1RegisterNodeResponse": {
+      "type": "object",
+      "properties": {
+        "node": {
+          "$ref": "#/definitions/v1Node"
+        }
+      }
+    },
+    "v1RenameNodeResponse": {
+      "type": "object",
+      "properties": {
+        "node": {
+          "$ref": "#/definitions/v1Node"
+        }
+      }
+    },
+    "v1RenameUserResponse": {
+      "type": "object",
+      "properties": {
+        "user": {
+          "$ref": "#/definitions/v1User"
+        }
+      }
+    },
+    "v1SetApprovedRoutesResponse": {
+      "type": "object",
+      "properties": {
+        "node": {
+          "$ref": "#/definitions/v1Node"
+        }
+      }
+    },
+    "v1SetPolicyRequest": {
+      "type": "object",
+      "properties": {
+        "policy": {
+          "type": "string"
+        }
+      }
+    },
+    "v1SetPolicyResponse": {
+      "type": "object",
+      "properties": {
+        "policy": {
+          "type": "string"
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "v1SetTagsResponse": {
+      "type": "object",
+      "properties": {
+        "node": {
+          "$ref": "#/definitions/v1Node"
+        }
+      }
+    },
+    "v1User": {
+      "type": "object",
+      "properties": {
+        "id": {
+          "type": "string",
+          "format": "uint64"
+        },
+        "name": {
+          "type": "string"
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "displayName": {
+          "type": "string"
+        },
+        "email": {
+          "type": "string"
+        },
+        "providerId": {
+          "type": "string"
+        },
+        "provider": {
+          "type": "string"
+        },
+        "profilePicUrl": {
+          "type": "string"
+        }
+      }
+    }
+  }
+}
diff --git a/gen/openapiv2/headscale/v1/node.swagger.json b/gen/openapiv2/headscale/v1/node.swagger.json
new file mode 100644
index 000000000..163213470
--- /dev/null
+++ b/gen/openapiv2/headscale/v1/node.swagger.json
@@ -0,0 +1,44 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "headscale/v1/node.proto",
+    "version": "version not set"
+  },
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {},
+  "definitions": {
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/gen/openapiv2/headscale/v1/policy.swagger.json b/gen/openapiv2/headscale/v1/policy.swagger.json
new file mode 100644
index 000000000..63057ed0e
--- /dev/null
+++ b/gen/openapiv2/headscale/v1/policy.swagger.json
@@ -0,0 +1,44 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "headscale/v1/policy.proto",
+    "version": "version not set"
+  },
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {},
+  "definitions": {
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/gen/openapiv2/headscale/v1/preauthkey.swagger.json b/gen/openapiv2/headscale/v1/preauthkey.swagger.json
new file mode 100644
index 000000000..17a2be1a7
--- /dev/null
+++ b/gen/openapiv2/headscale/v1/preauthkey.swagger.json
@@ -0,0 +1,44 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "headscale/v1/preauthkey.proto",
+    "version": "version not set"
+  },
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {},
+  "definitions": {
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/gen/openapiv2/headscale/v1/user.swagger.json b/gen/openapiv2/headscale/v1/user.swagger.json
new file mode 100644
index 000000000..008ca3e85
--- /dev/null
+++ b/gen/openapiv2/headscale/v1/user.swagger.json
@@ -0,0 +1,44 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "headscale/v1/user.proto",
+    "version": "version not set"
+  },
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "paths": {},
+  "definitions": {
+    "protobufAny": {
+      "type": "object",
+      "properties": {
+        "@type": {
+          "type": "string"
+        }
+      },
+      "additionalProperties": {}
+    },
+    "rpcStatus": {
+      "type": "object",
+      "properties": {
+        "code": {
+          "type": "integer",
+          "format": "int32"
+        },
+        "message": {
+          "type": "string"
+        },
+        "details": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "$ref": "#/definitions/protobufAny"
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/go.mod b/go.mod
index 41cf5b057..ce1dc52f1 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/juanfont/headscale
 
-go 1.26.4
+go 1.26.2
 
 require (
 	github.com/arl/statsviz v0.8.0
@@ -8,52 +8,54 @@ require (
 	github.com/chasefleming/elem-go v0.31.0
 	github.com/coder/websocket v1.8.14
 	github.com/coreos/go-oidc/v3 v3.18.0
-	github.com/creachadair/command v0.2.6
-	github.com/creachadair/flax v0.0.6
-	github.com/danielgtaylor/huma/v2 v2.38.0
+	github.com/creachadair/command v0.2.2
+	github.com/creachadair/flax v0.0.5
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
 	github.com/docker/docker v28.5.2+incompatible
-	github.com/fsnotify/fsnotify v1.10.1
+	github.com/fsnotify/fsnotify v1.9.0
 	github.com/glebarez/sqlite v1.11.0
-	github.com/go-chi/chi/v5 v5.3.0
+	github.com/go-chi/chi/v5 v5.2.5
 	github.com/go-chi/metrics v0.1.1
-	github.com/go-gormigrate/gormigrate/v2 v2.1.6
-	github.com/go-json-experiment/json v0.0.0-20260601182631-00ed12fed2a6
+	github.com/go-gormigrate/gormigrate/v2 v2.1.5
+	github.com/go-json-experiment/json v0.0.0-20260214004413-d219187c3433
 	github.com/gofrs/uuid/v5 v5.4.0
 	github.com/google/go-cmp v0.7.0
+	github.com/gorilla/mux v1.8.1
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0
 	github.com/hashicorp/golang-lru/v2 v2.0.7
 	github.com/jagottsicher/termcolor v1.0.2
-	github.com/oapi-codegen/runtime v1.4.1
 	github.com/oauth2-proxy/mockoidc v0.0.0-20240214162133-caebfff84d25
 	github.com/ory/dockertest/v3 v3.12.0
+	github.com/philip-bui/grpc-zerolog v1.0.1
 	github.com/pkg/profile v1.7.0
 	github.com/prometheus/client_golang v1.23.2
-	github.com/prometheus/common v0.68.1
+	github.com/prometheus/common v0.67.5
 	github.com/pterm/pterm v0.12.83
-	github.com/puzpuzpuz/xsync/v4 v4.5.0
-	github.com/realclientip/realclientip-go v1.0.0
-	github.com/rs/zerolog v1.35.1
+	github.com/puzpuzpuz/xsync/v4 v4.4.0
+	github.com/rs/zerolog v1.35.0
 	github.com/samber/lo v1.53.0
 	github.com/sasha-s/go-deadlock v0.3.9
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/viper v1.21.0
 	github.com/stretchr/testify v1.11.1
 	github.com/tailscale/hujson v0.0.0-20260302212456-ecc657c15afd
-	github.com/tailscale/squibble v0.0.0-20260411062017-141f5d618bc4
-	github.com/tailscale/tailsql v0.0.0-20260522170732-77aec5aabc76
+	github.com/tailscale/squibble v0.0.0-20260303070345-3ac5157f405e
+	github.com/tailscale/tailsql v0.0.0-20260322172246-3ab0c1744d9c
 	github.com/tcnksm/go-latest v0.0.0-20170313132115-e3007ae9052e
 	go4.org/netipx v0.0.0-20231129151722-fdeea329fbba
-	golang.org/x/crypto v0.53.0
-	golang.org/x/exp v0.0.0-20260603202125-055de637280b
-	golang.org/x/net v0.56.0
+	golang.org/x/crypto v0.50.0
+	golang.org/x/exp v0.0.0-20260312153236-7ab1446f8b90
+	golang.org/x/net v0.53.0
 	golang.org/x/oauth2 v0.36.0
-	golang.org/x/sync v0.21.0
+	golang.org/x/sync v0.20.0
+	google.golang.org/genproto/googleapis/api v0.0.0-20260406210006-6f92a3bedf2d
+	google.golang.org/grpc v1.80.0
+	google.golang.org/protobuf v1.36.11
 	gopkg.in/yaml.v3 v3.0.1
 	gorm.io/driver/postgres v1.6.0
 	gorm.io/gorm v1.31.1
-	pgregory.net/rapid v1.3.0
-	tailscale.com v1.101.0-pre
-	tailscale.com/client/tailscale/v2 v2.9.0
+	pgregory.net/rapid v1.2.0
+	tailscale.com v1.97.0-pre.0.20260429005429-40088602c960
 	zombiezen.com/go/postgrestest v1.0.1
 )
 
@@ -75,10 +77,10 @@ require (
 // together, e.g:
 // go get modernc.org/libc@v1.55.3 modernc.org/sqlite@v1.33.1
 require (
-	modernc.org/libc v1.72.3 // indirect
+	modernc.org/libc v1.70.0 // indirect
 	modernc.org/mathutil v1.7.1 // indirect
 	modernc.org/memory v1.11.0 // indirect
-	modernc.org/sqlite v1.52.0
+	modernc.org/sqlite v1.48.2
 )
 
 // NOTE: gvisor must be updated in lockstep with
@@ -91,7 +93,7 @@ require gvisor.dev/gvisor v0.0.0-20260224225140-573d5e7127a8 // indirect
 
 require (
 	atomicgo.dev/cursor v0.2.0 // indirect
-	atomicgo.dev/keyboard v0.2.10 // indirect
+	atomicgo.dev/keyboard v0.2.9 // indirect
 	atomicgo.dev/schedule v0.1.0 // indirect
 	dario.cat/mergo v1.0.2 // indirect
 	filippo.io/edwards25519 v1.2.0 // indirect
@@ -102,7 +104,6 @@ require (
 	github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 // indirect
 	github.com/akutz/memconn v0.1.0 // indirect
 	github.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e // indirect
-	github.com/apapsch/go-jsonmerge/v2 v2.0.0 // indirect
 	github.com/atotto/clipboard v0.1.4 // indirect
 	github.com/aws/aws-sdk-go-v2 v1.41.1 // indirect
 	github.com/aws/aws-sdk-go-v2/config v1.32.7 // indirect
@@ -125,50 +126,49 @@ require (
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
 	github.com/containerd/console v1.0.5 // indirect
-	github.com/containerd/continuity v0.5.0 // indirect
+	github.com/containerd/continuity v0.4.5 // indirect
 	github.com/containerd/errdefs v1.0.0 // indirect
 	github.com/containerd/errdefs/pkg v0.3.0 // indirect
-	github.com/creachadair/mds v0.29.0 // indirect
+	github.com/creachadair/mds v0.26.2 // indirect
 	github.com/creachadair/msync v0.8.2 // indirect
 	github.com/dblohm7/wingoes v0.0.0-20250822163801-6d8e6105c62d // indirect
 	github.com/dgryski/go-metro v0.0.0-20250106013310-edb8663e5e33 // indirect
 	github.com/distribution/reference v0.6.0 // indirect
-	github.com/docker/cli v29.5.3+incompatible // indirect
-	github.com/docker/go-connections v0.7.0 // indirect
+	github.com/docker/cli v29.4.0+incompatible // indirect
+	github.com/docker/go-connections v0.6.0 // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/felixge/fgprof v0.9.5 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
 	github.com/fogleman/gg v1.3.0 // indirect
-	github.com/fxamacker/cbor/v2 v2.9.1 // indirect
+	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
 	github.com/gaissmai/bart v0.26.1 // indirect
 	github.com/glebarez/go-sqlite v1.22.0 // indirect
-	github.com/go-jose/go-jose/v3 v3.0.5 // indirect
+	github.com/go-jose/go-jose/v3 v3.0.4 // indirect
 	github.com/go-jose/go-jose/v4 v4.1.4 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
-	github.com/go4org/hashtriemap v0.0.0-20251130024219-545ba229f689 // indirect
 	github.com/godbus/dbus/v5 v5.2.2 // indirect
 	github.com/golang-jwt/jwt/v5 v5.3.1 // indirect
 	github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0 // indirect
 	github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 // indirect
+	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/go-github v17.0.0+incompatible // indirect
 	github.com/google/go-querystring v1.2.0 // indirect
-	github.com/google/pprof v0.0.0-20260604005048-7023385849c0 // indirect
+	github.com/google/pprof v0.0.0-20260202012954-cb029daf43ef // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
 	github.com/google/uuid v1.6.0 // indirect
-	github.com/gookit/color v1.6.1 // indirect
+	github.com/gookit/color v1.6.0 // indirect
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 // indirect
-	github.com/hashicorp/go-version v1.9.0 // indirect
+	github.com/hashicorp/go-version v1.8.0 // indirect
 	github.com/hdevalence/ed25519consensus v0.2.0 // indirect
 	github.com/huin/goupnp v1.3.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
 	github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
-	github.com/jackc/pgx/v5 v5.10.0 // indirect
+	github.com/jackc/pgx/v5 v5.8.0 // indirect
 	github.com/jackc/puddle/v2 v2.2.2 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect
@@ -176,18 +176,18 @@ require (
 	github.com/jsimonetti/rtnetlink v1.4.2 // indirect
 	github.com/kamstrup/intmap v0.5.2 // indirect
 	github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
-	github.com/klauspost/compress v1.18.6 // indirect
-	github.com/lib/pq v1.12.3 // indirect
+	github.com/klauspost/compress v1.18.5 // indirect
+	github.com/lib/pq v1.11.1 // indirect
 	github.com/lithammer/fuzzysearch v1.1.8 // indirect
-	github.com/mattn/go-colorable v0.1.15 // indirect
-	github.com/mattn/go-isatty v0.0.22 // indirect
-	github.com/mattn/go-runewidth v0.0.24 // indirect
+	github.com/mattn/go-colorable v0.1.14 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mattn/go-runewidth v0.0.20 // indirect
 	github.com/mdlayher/netlink v1.8.0 // indirect
 	github.com/mdlayher/socket v0.5.1 // indirect
 	github.com/mitchellh/go-ps v1.0.0 // indirect
 	github.com/moby/docker-image-spec v1.3.1 // indirect
-	github.com/moby/moby/api v1.54.2 // indirect
-	github.com/moby/moby/client v0.4.1 // indirect
+	github.com/moby/moby/api v1.54.1 // indirect
+	github.com/moby/moby/client v0.4.0 // indirect
 	github.com/moby/sys/atomicwriter v0.1.0 // indirect
 	github.com/moby/sys/user v0.4.0 // indirect
 	github.com/moby/term v0.5.2 // indirect
@@ -197,14 +197,15 @@ require (
 	github.com/opencontainers/go-digest v1.0.0 // indirect
 	github.com/opencontainers/image-spec v1.1.1 // indirect
 	github.com/opencontainers/runc v1.3.2 // indirect
-	github.com/pelletier/go-toml/v2 v2.3.1 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
 	github.com/peterbourgon/ff/v3 v3.4.0 // indirect
-	github.com/petermattis/goid v0.0.0-20260330135022-df67b199bc81 // indirect
+	github.com/petermattis/goid v0.0.0-20260113132338-7c7de50cc741 // indirect
 	github.com/pires/go-proxyproto v0.9.2 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
+	github.com/prometheus-community/pro-bing v0.7.0 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/procfs v0.20.1 // indirect
+	github.com/prometheus/procfs v0.19.2 // indirect
 	github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
 	github.com/safchain/ethtool v0.7.0 // indirect
 	github.com/sagikazarmark/locafero v0.12.0 // indirect
@@ -217,9 +218,9 @@ require (
 	github.com/tailscale/certstore v0.1.1-0.20260409135935-3638fb84b77d // indirect
 	github.com/tailscale/go-winio v0.0.0-20231025203758-c4f33415bf55 // indirect
 	github.com/tailscale/peercred v0.0.0-20250107143737-35a0c7bd7edc // indirect
-	github.com/tailscale/setec v0.0.0-20260310221408-dcd97e42f251 // indirect
+	github.com/tailscale/setec v0.0.0-20260115174028-19d190c5556d // indirect
 	github.com/tailscale/web-client-prebuilt v0.0.0-20251127225136-f19339b67368 // indirect
-	github.com/tailscale/wireguard-go v0.0.0-20260527010701-b48af7099cad // indirect
+	github.com/tailscale/wireguard-go v0.0.0-20260304043104-4184faf59e56 // indirect
 	github.com/toqueteos/webbrowser v1.2.0 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
@@ -227,28 +228,24 @@ require (
 	github.com/xeipuuv/gojsonschema v1.2.0 // indirect
 	github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 // indirect
-	go.opentelemetry.io/otel v1.44.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 // indirect
-	go.opentelemetry.io/otel/metric v1.44.0 // indirect
-	go.opentelemetry.io/otel/trace v1.44.0 // indirect
-	go.yaml.in/yaml/v2 v2.4.4 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0 // indirect
+	go.opentelemetry.io/otel v1.40.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0 // indirect
+	go.opentelemetry.io/otel/metric v1.40.0 // indirect
+	go.opentelemetry.io/otel/trace v1.40.0 // indirect
+	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	go4.org/mem v0.0.0-20240501181205-ae6ca9944745 // indirect
-	golang.org/x/exp/typeparams v0.0.0-20260603202125-055de637280b // indirect
-	golang.org/x/image v0.41.0 // indirect
-	golang.org/x/mod v0.36.0 // indirect
-	golang.org/x/sys v0.46.0 // indirect
-	golang.org/x/term v0.44.0 // indirect
-	golang.org/x/text v0.38.0 // indirect
+	golang.org/x/image v0.27.0 // indirect
+	golang.org/x/mod v0.35.0 // indirect
+	golang.org/x/sys v0.43.0 // indirect
+	golang.org/x/term v0.42.0 // indirect
+	golang.org/x/text v0.36.0 // indirect
 	golang.org/x/time v0.15.0 // indirect
-	golang.org/x/tools v0.45.0 // indirect
+	golang.org/x/tools v0.44.0 // indirect
 	golang.zx2c4.com/wintun v0.0.0-20230126152724-0fa3db229ce2 // indirect
 	golang.zx2c4.com/wireguard/windows v0.5.3 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260610212136-7ab31c22f7ad // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa // indirect
-	google.golang.org/grpc v1.81.1 // indirect
-	google.golang.org/protobuf v1.36.11 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect
 	k8s.io/client-go v0.34.0 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
 	software.sslmate.com/src/go-pkcs12 v0.4.0 // indirect
diff --git a/go.sum b/go.sum
index 048eba2ca..eabebf535 100644
--- a/go.sum
+++ b/go.sum
@@ -4,8 +4,8 @@ atomicgo.dev/assert v0.0.2 h1:FiKeMiZSgRrZsPo9qn/7vmr7mCsh5SZyXY4YGYiYwrg=
 atomicgo.dev/assert v0.0.2/go.mod h1:ut4NcI3QDdJtlmAxQULOmA13Gz6e2DWbSAS8RUOmNYQ=
 atomicgo.dev/cursor v0.2.0 h1:H6XN5alUJ52FZZUkI7AlJbUc1aW38GWZalpYRPpoPOw=
 atomicgo.dev/cursor v0.2.0/go.mod h1:Lr4ZJB3U7DfPPOkbH7/6TOtJ4vFGHlgj1nc+n900IpU=
-atomicgo.dev/keyboard v0.2.10 h1:v7mvUKUZLHIggxULEIuWbT+WkkyQSgdbA201EziAhHU=
-atomicgo.dev/keyboard v0.2.10/go.mod h1:ap/z5ilnhLqYq852m6kPeTq5Z6aESGWu5mzRpJlC6aI=
+atomicgo.dev/keyboard v0.2.9 h1:tOsIid3nlPLZ3lwgG8KZMp/SFmr7P0ssEN5JUsm78K8=
+atomicgo.dev/keyboard v0.2.9/go.mod h1:BC4w9g00XkxH/f1HXhW2sXmJFOCWbKn9xrOunSFtExQ=
 atomicgo.dev/schedule v0.1.0 h1:nTthAbhZS5YZmgYbb2+DH8uQIZcTlIrd4eYr3UQxEjs=
 atomicgo.dev/schedule v0.1.0/go.mod h1:xeUa3oAkiuHYh8bKiQBRojqAMq3PXXbJujjb0hw8pEU=
 dario.cat/mergo v1.0.2 h1:85+piFYR1tMbRrLcDwR18y4UKJ3aH1Tbzi24VRW1TK8=
@@ -22,23 +22,28 @@ github.com/BurntSushi/toml v1.5.0 h1:W5quZX/G/csjUnuI8SUYlsHs9M38FC7znL0lIO+DvMg
 github.com/BurntSushi/toml v1.5.0/go.mod h1:ukJfTF/6rtPPRCnwkur4qwRxa8vTRFBF0uk2lLoLwho=
 github.com/Kodeworks/golang-image-ico v0.0.0-20141118225523-73f0f4cfade9 h1:1ltqoej5GtaWF8jaiA49HwsZD459jqm9YFz9ZtMFpQA=
 github.com/Kodeworks/golang-image-ico v0.0.0-20141118225523-73f0f4cfade9/go.mod h1:7uhhqiBaR4CpN0k9rMjOtjpcfGd6DG2m04zQxKnWQ0I=
+github.com/MarvinJWendt/testza v0.1.0/go.mod h1:7AxNvlfeHP7Z/hDQ5JtE3OKYT3XFUeLCDE2DQninSqs=
+github.com/MarvinJWendt/testza v0.2.1/go.mod h1:God7bhG8n6uQxwdScay+gjm9/LnO4D3kkcZX4hv9Rp8=
+github.com/MarvinJWendt/testza v0.2.8/go.mod h1:nwIcjmr0Zz+Rcwfh3/4UhBp7ePKVhuBExvZqnKYWlII=
+github.com/MarvinJWendt/testza v0.2.10/go.mod h1:pd+VWsoGUiFtq+hRKSU1Bktnn+DMCSrDrXDpX2bG66k=
+github.com/MarvinJWendt/testza v0.2.12/go.mod h1:JOIegYyV7rX+7VZ9r77L/eH6CfJHHzXjB69adAhzZkI=
+github.com/MarvinJWendt/testza v0.3.0/go.mod h1:eFcL4I0idjtIx8P9C6KkAuLgATNKpX4/2oUqKc6bF2c=
+github.com/MarvinJWendt/testza v0.4.2/go.mod h1:mSdhXiKH8sg/gQehJ63bINcCKp7RtYewEjXsvsVUPbE=
 github.com/MarvinJWendt/testza v0.5.2 h1:53KDo64C1z/h/d/stCYCPY69bt/OSwjq5KpFNwi+zB4=
 github.com/MarvinJWendt/testza v0.5.2/go.mod h1:xu53QFE5sCdjtMCKk8YMQ2MnymimEctc4n3EjyIYvEY=
 github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY=
 github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
 github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 h1:TngWCqHvy9oXAN6lEVMRuU21PR1EtLVZJmdB18Gu3Rw=
 github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5/go.mod h1:lmUJ/7eu/Q8D7ML55dXQrVaamCz2vxCfdQBasLZfHKk=
-github.com/RaveNoX/go-jsoncommentstrip v1.0.0/go.mod h1:78ihd09MekBnJnxpICcwzCMzGrKSKYe4AqU6PDYYpjk=
 github.com/akutz/memconn v0.1.0 h1:NawI0TORU4hcOMsMr11g7vwlCdkYeLKXBcxWu2W/P8A=
 github.com/akutz/memconn v0.1.0/go.mod h1:Jo8rI7m0NieZyLI5e2CDlRdRqRRB4S7Xp77ukDjH+Fw=
 github.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e h1:4dAU9FXIyQktpoUAgOJK3OTFc/xug0PCXYCqU0FgDKI=
 github.com/alexbrainman/sspi v0.0.0-20250919150558-7d374ff0d59e/go.mod h1:cEWa1LVoE5KvSD9ONXsZrj0z6KqySlCCNKHlLzbqAt4=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8=
 github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
-github.com/apapsch/go-jsonmerge/v2 v2.0.0 h1:axGnT1gRIfimI7gJifB699GoE/oq+F2MU7Dml6nw9rQ=
-github.com/apapsch/go-jsonmerge/v2 v2.0.0/go.mod h1:lvDnEdqiQrp0O42VQGgmlKpxL1AP2+08jFMw88y4klk=
 github.com/arl/statsviz v0.8.0 h1:O6GjjVxEDxcByAucOSl29HaGYLXsuwA3ujJw8H9E7/U=
 github.com/arl/statsviz v0.8.0/go.mod h1:XlrbiT7xYT03xaW9JMMfD8KFUhBOESJwfyNJu83PbB0=
+github.com/atomicgo/cursor v0.0.1/go.mod h1:cBON2QmmrysudxNBFthvMtN32r3jxVRIvzkUiF/RuIk=
 github.com/atotto/clipboard v0.1.4 h1:EH0zSVneZPSuFR11BlR9YppQTVDbh5+16AmcJi4g1z4=
 github.com/atotto/clipboard v0.1.4/go.mod h1:ZY9tmq7sm5xIbd9bOK4onWV4S6X0u6GY7Vn0Yu86PYI=
 github.com/aws/aws-sdk-go-v2 v1.41.1 h1:ABlyEARCDLN034NhxlRUSZr4l71mh+T5KAeGh6cerhU=
@@ -85,7 +90,6 @@ github.com/axiomhq/hyperloglog v0.2.6 h1:sRhvvF3RIXWQgAXaTphLp4yJiX4S0IN3MWTaAgZ
 github.com/axiomhq/hyperloglog v0.2.6/go.mod h1:YjX/dQqCR/7QYX0g8mu8UZAjpIenz1FKM71UEsjFoTo=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
-github.com/bmatcuk/doublestar v1.1.1/go.mod h1:UD6OnuiIn0yFxxA2le/rnRU1G4RaI4UvFv1sNto9p6w=
 github.com/cenkalti/backoff/v4 v4.3.0 h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8=
 github.com/cenkalti/backoff/v4 v4.3.0/go.mod h1:Y3VNntkOUPxTVeUxJ/G5vcM//AlwfmyYozVcomhLiZE=
 github.com/cenkalti/backoff/v5 v5.0.3 h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=
@@ -109,10 +113,11 @@ github.com/clipperhouse/uax29/v2 v2.7.0 h1:+gs4oBZ2gPfVrKPthwbMzWZDaAFPGYK72F0NJ
 github.com/clipperhouse/uax29/v2 v2.7.0/go.mod h1:EFJ2TJMRUaplDxHKj1qAEhCtQPW2tJSwu5BF98AuoVM=
 github.com/coder/websocket v1.8.14 h1:9L0p0iKiNOibykf283eHkKUHHrpG7f65OE3BhhO7v9g=
 github.com/coder/websocket v1.8.14/go.mod h1:NX3SzP+inril6yawo5CQXx8+fk145lPDC6pumgx0mVg=
+github.com/containerd/console v1.0.3/go.mod h1:7LqA/THxQ86k76b8c/EMSiaJ3h1eZkMkXar0TQ1gf3U=
 github.com/containerd/console v1.0.5 h1:R0ymNeydRqH2DmakFNdmjR2k0t7UPuiOV/N/27/qqsc=
 github.com/containerd/console v1.0.5/go.mod h1:YynlIjWYF8myEu6sdkwKIvGQq+cOckRm6So2avqoYAk=
-github.com/containerd/continuity v0.5.0 h1:7a85HZpCSs+1Zps0Ee3DPSuAWY+0SJM1JNM51nlEVDg=
-github.com/containerd/continuity v0.5.0/go.mod h1:/lNJvtJKUQStBzpVQ1+rasXO1LAWtUQssk28EZvJ3nE=
+github.com/containerd/continuity v0.4.5 h1:ZRoN1sXq9u7V6QoHMcVWGhOwDFqZ4B9i5H6un1Wh0x4=
+github.com/containerd/continuity v0.4.5/go.mod h1:/lNJvtJKUQStBzpVQ1+rasXO1LAWtUQssk28EZvJ3nE=
 github.com/containerd/errdefs v1.0.0 h1:tg5yIfIlQIrxYtu9ajqY42W3lpS19XqdxRQeEwYG8PI=
 github.com/containerd/errdefs v1.0.0/go.mod h1:+YBYIdtsnF4Iw6nWZhJcqGSg/dwvV7tyJ/kCkyJ2k+M=
 github.com/containerd/errdefs/pkg v0.3.0 h1:9IKJ06FvyNlexW690DXuQNx2KA2cUJXx151Xdx3ZPPE=
@@ -124,20 +129,18 @@ github.com/coreos/go-iptables v0.7.1-0.20240112124308-65c67c9f46e6/go.mod h1:Qe8
 github.com/coreos/go-oidc/v3 v3.18.0 h1:V9orjXynvu5wiC9SemFTWnG4F45v403aIcjWo0d41+A=
 github.com/coreos/go-oidc/v3 v3.18.0/go.mod h1:DYCf24+ncYi+XkIH97GY1+dqoRlbaSI26KVTCI9SrY4=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
-github.com/creachadair/command v0.2.6 h1:+d4xUSZza5nqRVVsVRf5jDbix/0uKxVqFrc30F4uyRI=
-github.com/creachadair/command v0.2.6/go.mod h1:HWvS3zEpVakKlNXxT/j1U8tNoDaY7By7ORYQ+m1ha2U=
-github.com/creachadair/flax v0.0.6 h1:IFUdRdfKynNTyR5SRlrHMUGnxxMZZen8RVpwcDq/ftk=
-github.com/creachadair/flax v0.0.6/go.mod h1:F1PML0JZLXSNDMNiRGK2yjm5f+L9QCHchyHBldFymj8=
-github.com/creachadair/mds v0.29.0 h1:LyR8pWAj2ofsrdJ9s2YoIqN8b6a1djHmPQULD2fTSCA=
-github.com/creachadair/mds v0.29.0/go.mod h1:dMBTCSy3iS3dwh4Rb1zxeZz2d7K8+N24GCTsayWtQRI=
+github.com/creachadair/command v0.2.2 h1:4RGsUhqFf1imFC+vMWOOCiQdncThCdcdMJp0JNCjxxc=
+github.com/creachadair/command v0.2.2/go.mod h1:Z6Zp6CSJcnaWWR4wHgdqzODnFdxFJAaa/DrcVkeUu3E=
+github.com/creachadair/flax v0.0.5 h1:zt+CRuXQASxwQ68e9GHAOnEgAU29nF0zYMHOCrL5wzE=
+github.com/creachadair/flax v0.0.5/go.mod h1:F1PML0JZLXSNDMNiRGK2yjm5f+L9QCHchyHBldFymj8=
+github.com/creachadair/mds v0.26.2 h1:rCtvEV/bCRY0hGfwvvMg0p3yzKgBE8l/9OV4fjF9QQ8=
+github.com/creachadair/mds v0.26.2/go.mod h1:dMBTCSy3iS3dwh4Rb1zxeZz2d7K8+N24GCTsayWtQRI=
 github.com/creachadair/msync v0.8.2 h1:ujvc/SVJPn+bFwmjUHucXNTTn3opVe2YbQ46mBCnP08=
 github.com/creachadair/msync v0.8.2/go.mod h1:LzxqD9kfIl/O3DczkwOgJplLPqwrTbIhINlf9bHIsEY=
 github.com/creachadair/taskgroup v0.13.2 h1:3KyqakBuFsm3KkXi/9XIb0QcA8tEzLHLgaoidf0MdVc=
 github.com/creachadair/taskgroup v0.13.2/go.mod h1:i3V1Zx7H8RjwljUEeUWYT30Lmb9poewSb2XI1yTwD0g=
 github.com/creack/pty v1.1.24 h1:bJrF4RRfyJnbTJqzRLHzcGaZK1NeM5kTC9jGgovnR1s=
 github.com/creack/pty v1.1.24/go.mod h1:08sCNb52WyoAwi2QDyzUCTgcvVFhUzewun7wtTfvcwE=
-github.com/danielgtaylor/huma/v2 v2.38.0 h1:fb0WZCatnaiHLphMQDDWDjygNxfMkX/ENma3QsRl7vY=
-github.com/danielgtaylor/huma/v2 v2.38.0/go.mod h1:k9hwjlgWFt1t2jsmQGlsgXAG2FBTZa4kkjV581qAtfo=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
@@ -152,12 +155,12 @@ github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5Qvfr
 github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
 github.com/djherbis/times v1.6.0 h1:w2ctJ92J8fBvWPxugmXIv7Nz7Q3iDMKNx9v5ocVH20c=
 github.com/djherbis/times v1.6.0/go.mod h1:gOHeRAz2h+VJNZ5Gmc/o7iD9k4wW7NMVqieYCY99oc0=
-github.com/docker/cli v29.5.3+incompatible h1:nbEFfz774vBwQ5KRYv7c/AghjReqnGISvrRhzjV0evs=
-github.com/docker/cli v29.5.3+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
+github.com/docker/cli v29.4.0+incompatible h1:+IjXULMetlvWJiuSI0Nbor36lcJ5BTcVpUmB21KBoVM=
+github.com/docker/cli v29.4.0+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/docker v28.5.2+incompatible h1:DBX0Y0zAjZbSrm1uzOkdr1onVghKaftjlSWt4AFexzM=
 github.com/docker/docker v28.5.2+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
-github.com/docker/go-connections v0.7.0 h1:6SsRfJddP22WMrCkj19x9WKjEDTB+ahsdiGYf0mN39c=
-github.com/docker/go-connections v0.7.0/go.mod h1:no1qkHdjq7kLMGUXYAduOhYPSJxxvgWBh7ogVvptn3Q=
+github.com/docker/go-connections v0.6.0 h1:LlMG9azAe1TqfR7sO+NJttz1gy6KO7VJBh+pMmjSD94=
+github.com/docker/go-connections v0.6.0/go.mod h1:AahvXYshr6JgfUJGdDCs2b5EZG/vmaMAntpSFH5BFKE=
 github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
 github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
@@ -171,10 +174,10 @@ github.com/fogleman/gg v1.3.0 h1:/7zJX8F6AaYQc57WQCyN9cAIz+4bCJGO9B+dyW29am8=
 github.com/fogleman/gg v1.3.0/go.mod h1:R/bRT+9gY/C5z7JzPU0zXsXHKM4/ayA+zqcVNZzPa1k=
 github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8=
 github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0=
-github.com/fsnotify/fsnotify v1.10.1 h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho=
-github.com/fsnotify/fsnotify v1.10.1/go.mod h1:TLheqan6HD6GBK6PrDWyDPBaEV8LspOxvPSjC+bVfgo=
-github.com/fxamacker/cbor/v2 v2.9.1 h1:2rWm8B193Ll4VdjsJY28jxs70IdDsHRWgQYAI80+rMQ=
-github.com/fxamacker/cbor/v2 v2.9.1/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ=
+github.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k=
+github.com/fsnotify/fsnotify v1.9.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0=
+github.com/fxamacker/cbor/v2 v2.9.0 h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM=
+github.com/fxamacker/cbor/v2 v2.9.0/go.mod h1:vM4b+DJCtHn+zz7h3FFp/hDAI9WNWCsZj23V5ytsSxQ=
 github.com/gaissmai/bart v0.26.1 h1:+w4rnLGNlA2GDVn382Tfe3jOsK5vOr5n4KmigJ9lbTo=
 github.com/gaissmai/bart v0.26.1/go.mod h1:GREWQfTLRWz/c5FTOsIw+KkscuFkIV5t8Rp7Nd1Td5c=
 github.com/github/fakeca v0.1.0 h1:Km/MVOFvclqxPM9dZBC4+QE564nU4gz4iZ0D9pMw28I=
@@ -183,18 +186,18 @@ github.com/glebarez/go-sqlite v1.22.0 h1:uAcMJhaA6r3LHMTFgP0SifzgXg46yJkgxqyuyec
 github.com/glebarez/go-sqlite v1.22.0/go.mod h1:PlBIdHe0+aUEFn+r2/uthrWq4FxbzugL0L8Li6yQJbc=
 github.com/glebarez/sqlite v1.11.0 h1:wSG0irqzP6VurnMEpFGer5Li19RpIRi2qvQz++w0GMw=
 github.com/glebarez/sqlite v1.11.0/go.mod h1:h8/o8j5wiAsqSPoWELDUdJXhjAhsVliSn7bWZjOhrgQ=
-github.com/go-chi/chi/v5 v5.3.0 h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM=
-github.com/go-chi/chi/v5 v5.3.0/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto=
+github.com/go-chi/chi/v5 v5.2.5 h1:Eg4myHZBjyvJmAFjFvWgrqDTXFyOzjj7YIm3L3mu6Ug=
+github.com/go-chi/chi/v5 v5.2.5/go.mod h1:X7Gx4mteadT3eDOMTsXzmI4/rwUpOwBHLpAfupzFJP0=
 github.com/go-chi/metrics v0.1.1 h1:CXhbnkAVVjb0k73EBRQ6Z2YdWFnbXZgNtg1Mboguibk=
 github.com/go-chi/metrics v0.1.1/go.mod h1:mcGTM1pPalP7WCtb+akNYFO/lwNwBBLCuedepqjoPn4=
-github.com/go-gormigrate/gormigrate/v2 v2.1.6 h1:VtX+l1Stj2v5RGubVQk0LS/8EPGXR+ldcOyCmlmKoyg=
-github.com/go-gormigrate/gormigrate/v2 v2.1.6/go.mod h1:PZpedQc4tWaxn6kvXicwhinh3L0seLpMc5ReKRX5id4=
-github.com/go-jose/go-jose/v3 v3.0.5 h1:BLLJWbC4nMZOfuPVxoZIxeYsn6Nl2r1fITaJ78UQlVQ=
-github.com/go-jose/go-jose/v3 v3.0.5/go.mod h1:5b+7YgP7ZICgJDBdfjZaIt+H/9L9T/YQrVfLAMboGkQ=
+github.com/go-gormigrate/gormigrate/v2 v2.1.5 h1:1OyorA5LtdQw12cyJDEHuTrEV3GiXiIhS4/QTTa/SM8=
+github.com/go-gormigrate/gormigrate/v2 v2.1.5/go.mod h1:mj9ekk/7CPF3VjopaFvWKN2v7fN3D9d3eEOAXRhi/+M=
+github.com/go-jose/go-jose/v3 v3.0.4 h1:Wp5HA7bLQcKnf6YYao/4kpRpVMp/yf6+pJKV8WFSaNY=
+github.com/go-jose/go-jose/v3 v3.0.4/go.mod h1:5b+7YgP7ZICgJDBdfjZaIt+H/9L9T/YQrVfLAMboGkQ=
 github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA=
 github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
-github.com/go-json-experiment/json v0.0.0-20260601182631-00ed12fed2a6 h1:nxP4pPoyqOAgX8lYDFCfl3DyKeXErCvSvhcyzwGV9CE=
-github.com/go-json-experiment/json v0.0.0-20260601182631-00ed12fed2a6/go.mod h1:tphK2c80bpPhMOI4v6bIc2xWywPfbqi1Z06+RcrMkDg=
+github.com/go-json-experiment/json v0.0.0-20260214004413-d219187c3433 h1:vymEbVwYFP/L05h5TKQxvkXoKxNvTpjxYKdF1Nlwuao=
+github.com/go-json-experiment/json v0.0.0-20260214004413-d219187c3433/go.mod h1:tphK2c80bpPhMOI4v6bIc2xWywPfbqi1Z06+RcrMkDg=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
 github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
 github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
@@ -206,8 +209,6 @@ github.com/go-sql-driver/mysql v1.8.1 h1:LedoTUt/eveggdHS9qUFC1EFSa8bU2+1pZjSRpv
 github.com/go-sql-driver/mysql v1.8.1/go.mod h1:wEBSXgmK//2ZFJyE+qWnIsVGmvmEKlqwuVSjsCm7DZg=
 github.com/go-viper/mapstructure/v2 v2.5.0 h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro=
 github.com/go-viper/mapstructure/v2 v2.5.0/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
-github.com/go4org/hashtriemap v0.0.0-20251130024219-545ba229f689 h1:0psnKZ+N2IP43/SZC8SKx6OpFJwLmQb9m9QyV9BC2f8=
-github.com/go4org/hashtriemap v0.0.0-20251130024219-545ba229f689/go.mod h1:OGmRfY/9QEK2P5zCRtmqfbCF283xPkU2dvVA4MvbvpI=
 github.com/go4org/plan9netshell v0.0.0-20250324183649-788daa080737 h1:cf60tHxREO3g1nroKr2osU3JWZsJzkfi7rEg+oAB0Lo=
 github.com/go4org/plan9netshell v0.0.0-20250324183649-788daa080737/go.mod h1:MIS0jDzbU/vuM9MC4YnBITCv+RYuTRq8dJzmCrFsK9g=
 github.com/gobwas/httphead v0.1.0/go.mod h1:O/RXo79gxV8G+RqlR/otEwx4Q36zl9rqC5u12GKvMCM=
@@ -223,6 +224,8 @@ github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0 h1:DACJavvAHhabrF0
 github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0/go.mod h1:E/TSTwGwJL78qG/PmXZO1EjYhfJinVAhrmmHX6Z8B9k=
 github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8 h1:f+oWsMOmNPc8JmEHVZIycC7hBoQxHH9pNKQORJNozsQ=
 github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8/go.mod h1:wcDNUvekVysuuOpQKo3191zZyTpiI6se1N1ULghS0sw=
+github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek=
+github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps=
 github.com/google/btree v1.1.3 h1:CVpQJjYgC4VbzxeGVHfvZrv1ctoYCAI8vbl07Fcxlyg=
 github.com/google/btree v1.1.3/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4=
 github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
@@ -239,22 +242,26 @@ github.com/google/nftables v0.2.1-0.20240414091927-5e242ec57806 h1:wG8RYIyctLhdF
 github.com/google/nftables v0.2.1-0.20240414091927-5e242ec57806/go.mod h1:Beg6V6zZ3oEn0JuiUQ4wqwuyqqzasOltcoXPtgLbFp4=
 github.com/google/pprof v0.0.0-20211214055906-6f57359322fd/go.mod h1:KgnwoLYCZ8IQu3XUZ8Nc/bM9CCZFOyjUNOSygVozoDg=
 github.com/google/pprof v0.0.0-20240227163752-401108e1b7e7/go.mod h1:czg5+yv1E0ZGTi6S6vVK1mke0fV+FaUhNGcd6VRS9Ik=
-github.com/google/pprof v0.0.0-20260604005048-7023385849c0 h1:h1QTMDl6q9wDvDCJVpKQSjgleGFYnd2fOxmg2K+6BGE=
-github.com/google/pprof v0.0.0-20260604005048-7023385849c0/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
+github.com/google/pprof v0.0.0-20260202012954-cb029daf43ef h1:xpF9fUHpoIrrjX24DURVKiwHcFpw19ndIs+FwTSMbno=
+github.com/google/pprof v0.0.0-20260202012954-cb029daf43ef/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
 github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 h1:El6M4kTTCOh6aBiKaUGG7oYTSPP8MxqL4YI3kZKwcP4=
 github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510/go.mod h1:pupxD2MaaD3pAXIBCelhxNneeOaAeabZDe5s4K6zSpQ=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/gookit/assert v0.1.1 h1:lh3GcawXe/p+cU7ESTZ5Ui3Sm/x8JWpIis4/1aF0mY0=
 github.com/gookit/assert v0.1.1/go.mod h1:jS5bmIVQZTIwk42uXl4lyj4iaaxx32tqH16CFj0VX2E=
-github.com/gookit/color v1.6.1 h1:KoTnDxJPRgrL0SoX0f8rCFg2zI0t4E3GZZBMo2nN8LU=
-github.com/gookit/color v1.6.1/go.mod h1:9ACFc7/1IpHGBW8RwuDm/0YEnhg3dwwXpoMsmtyHfjs=
+github.com/gookit/color v1.4.2/go.mod h1:fqRyamkC1W8uxl+lxCQxOT09l/vYfZ+QeiX3rKQHCoQ=
+github.com/gookit/color v1.5.0/go.mod h1:43aQb+Zerm/BWh2GnrgOQm7ffz7tvQXEKV6BFMl7wAo=
+github.com/gookit/color v1.6.0 h1:JjJXBTk1ETNyqyilJhkTXJYYigHG24TM9Xa2M1xAhRA=
+github.com/gookit/color v1.6.0/go.mod h1:9ACFc7/1IpHGBW8RwuDm/0YEnhg3dwwXpoMsmtyHfjs=
+github.com/gorilla/mux v1.8.1 h1:TuBL49tXwgrFYWhqrNgrUNEY92u81SPhu7sTdzQEiWY=
+github.com/gorilla/mux v1.8.1/go.mod h1:AKf9I4AEqPTmMytcMc0KkNouC66V3BtZ4qD5fmWSiMQ=
 github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 h1:JeSE6pjso5THxAzdVpqr6/geYxZytqFMBCOtn/ujyeo=
 github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674/go.mod h1:r4w70xmWCQKmi1ONH4KIaBptdivuRPyosB9RmPlGEwA=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 h1:5VipnvEpbqr2gA2VbM+nYVbkIF28c5ZQfqCBQ5g2xfk=
-github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0/go.mod h1:Hyl3n6Twe1hvtd9XUXDec4pTvgMSEixRuQKPTMH2bNs=
-github.com/hashicorp/go-version v1.9.0 h1:CeOIz6k+LoN3qX9Z0tyQrPtiB1DFYRPfCIBtaXPSCnA=
-github.com/hashicorp/go-version v1.9.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 h1:HWRh5R2+9EifMyIHV7ZV+MIZqgz+PMpZ14Jynv3O2Zs=
+github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0/go.mod h1:JfhWUomR1baixubs02l85lZYYOm7LV6om4ceouMv45c=
+github.com/hashicorp/go-version v1.8.0 h1:KAkNb1HAiZd1ukkxDFGmokVZe1Xy9HG6NUp+bPle2i4=
+github.com/hashicorp/go-version v1.8.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA=
 github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k=
 github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
 github.com/hdevalence/ed25519consensus v0.2.0 h1:37ICyZqdyj0lAZ8P4D1d1id3HqbbG1N3iBb1Tb4rdcU=
@@ -273,8 +280,8 @@ github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsI
 github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg=
 github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo=
 github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM=
-github.com/jackc/pgx/v5 v5.10.0 h1:VhSvgU2jSli8o3AqIEOTJr7rZwAEUVo4E4XhR94Zfr0=
-github.com/jackc/pgx/v5 v5.10.0/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4=
+github.com/jackc/pgx/v5 v5.8.0 h1:TYPDoleBBme0xGSAX3/+NujXXtpZn9HBONkQC7IEZSo=
+github.com/jackc/pgx/v5 v5.8.0/go.mod h1:QVeDInX2m9VyzvNeiCJVjCkNFqzsNb43204HshNSZKw=
 github.com/jackc/puddle/v2 v2.2.2 h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo=
 github.com/jackc/puddle/v2 v2.2.2/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4=
 github.com/jagottsicher/termcolor v1.0.2 h1:fo0c51pQSuLBN1+yVX2ZE+hE+P7ULb/TY8eRowJnrsM=
@@ -292,38 +299,44 @@ github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfC
 github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
 github.com/jsimonetti/rtnetlink v1.4.2 h1:Df9w9TZ3npHTyDn0Ev9e1uzmN2odmXd0QX+J5GTEn90=
 github.com/jsimonetti/rtnetlink v1.4.2/go.mod h1:92s6LJdE+1iOrw+F2/RO7LYI2Qd8pPpFNNUYW06gcoM=
-github.com/juju/gnuflag v0.0.0-20171113085948-2ce1bb71843d/go.mod h1:2PavIy+JPciBPrBUjwbNvtwB6RQlve+hkpll6QSNmOE=
 github.com/kamstrup/intmap v0.5.2 h1:qnwBm1mh4XAnW9W9Ue9tZtTff8pS6+s6iKF6JRIV2Dk=
 github.com/kamstrup/intmap v0.5.2/go.mod h1:gWUVWHKzWj8xpJVFf5GC0O26bWmv3GqdnIX/LMT6Aq4=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 h1:Z9n2FFNUXsshfwJMBgNA0RU6/i7WVaAegv3PtuIHPMs=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
-github.com/klauspost/compress v1.18.6 h1:2jupLlAwFm95+YDR+NwD2MEfFO9d4z4Prjl1XXDjuao=
-github.com/klauspost/compress v1.18.6/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
-github.com/klauspost/cpuid/v2 v2.3.0 h1:S4CRMLnYUhGeDFDqkGriYKdfoFlDnMtqTiI/sFzhA9Y=
-github.com/klauspost/cpuid/v2 v2.3.0/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=
+github.com/klauspost/compress v1.18.5 h1:/h1gH5Ce+VWNLSWqPzOVn6XBO+vJbCNGvjoaGBFW2IE=
+github.com/klauspost/compress v1.18.5/go.mod h1:cwPg85FWrGar70rWktvGQj8/hthj3wpl0PGDogxkrSQ=
+github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
+github.com/klauspost/cpuid/v2 v2.0.10/go.mod h1:g2LTdtYhdyuGPqyWyv7qRAmj1WBqxuObKfj5c0PQa7c=
+github.com/klauspost/cpuid/v2 v2.0.12/go.mod h1:g2LTdtYhdyuGPqyWyv7qRAmj1WBqxuObKfj5c0PQa7c=
+github.com/klauspost/cpuid/v2 v2.2.3 h1:sxCkb+qR91z4vsqw4vGGZlDgPz3G7gjaLyK3V8y70BU=
+github.com/klauspost/cpuid/v2 v2.2.3/go.mod h1:RVVoqg1df56z8g3pUjL/3lE5UfnlrJX8tyFgg4nqhuY=
 github.com/kortschak/wol v0.0.0-20200729010619-da482cc4850a h1:+RR6SqnTkDLWyICxS1xpjCi/3dhyV+TgZwA6Ww3KncQ=
 github.com/kortschak/wol v0.0.0-20200729010619-da482cc4850a/go.mod h1:YTtCCM3ryyfiu4F7t8HQ1mxvp1UBdWM2r6Xa+nGWvDk=
 github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
 github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
+github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
 github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
 github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
 github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
 github.com/ledongthuc/pdf v0.0.0-20220302134840-0c2507a12d80/go.mod h1:imJHygn/1yfhB7XSJJKlFZKl/J+dCPAknuiaGOshXAs=
 github.com/lib/pq v1.8.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-github.com/lib/pq v1.12.3 h1:tTWxr2YLKwIvK90ZXEw8GP7UFHtcbTtty8zsI+YjrfQ=
-github.com/lib/pq v1.12.3/go.mod h1:/p+8NSbOcwzAEI7wiMXFlgydTwcgTr3OSKMsD2BitpA=
+github.com/lib/pq v1.11.1 h1:wuChtj2hfsGmmx3nf1m7xC2XpK6OtelS2shMY+bGMtI=
+github.com/lib/pq v1.11.1/go.mod h1:/p+8NSbOcwzAEI7wiMXFlgydTwcgTr3OSKMsD2BitpA=
 github.com/lithammer/fuzzysearch v1.1.8 h1:/HIuJnjHuXS8bKaiTMeeDlW2/AyIWk2brx1V8LFgLN4=
 github.com/lithammer/fuzzysearch v1.1.8/go.mod h1:IdqeyBClc3FFqSzYq/MXESsS4S0FsZ5ajtkr5xPLts4=
 github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
-github.com/mattn/go-colorable v0.1.15 h1:+u9SLTRGnXv73cEsnsmoZBom+dMU88B2M0aDcWy0/jY=
-github.com/mattn/go-colorable v0.1.15/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
-github.com/mattn/go-isatty v0.0.22 h1:j8l17JJ9i6VGPUFUYoTUKPSgKe/83EYU2zBC7YNKMw4=
-github.com/mattn/go-isatty v0.0.22/go.mod h1:ZXfXG4SQHsB/w3ZeOYbR0PrPwLy+n6xiMrJlRFqopa4=
-github.com/mattn/go-runewidth v0.0.24 h1:cpokDiIn0MGnhdHwuWnJBITySJ20QyNGnY2kR/ay2DU=
-github.com/mattn/go-runewidth v0.0.24/go.mod h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs=
+github.com/mattn/go-colorable v0.1.14 h1:9A9LHSqF/7dyVVX6g0U9cwm9pG3kP9gSzcuIPHPsaIE=
+github.com/mattn/go-colorable v0.1.14/go.mod h1:6LmQG8QLFO4G5z1gPvYEzlUgJ2wF+stgPZH1UqBm1s8=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
+github.com/mattn/go-runewidth v0.0.20 h1:WcT52H91ZUAwy8+HUkdM3THM6gXqXuLJi9O3rjcQQaQ=
+github.com/mattn/go-runewidth v0.0.20/go.mod h1:XBkDxAl56ILZc9knddidhrOlY5R/pDhgLpndooCuJAs=
 github.com/mdlayher/genetlink v1.3.2 h1:KdrNKe+CTu+IbZnm/GVUMXSqBBLqcGpRDa0xkQy56gw=
 github.com/mdlayher/genetlink v1.3.2/go.mod h1:tcC3pkCrPUGIKKsCsp0B3AdaaKuHtaxoJRz3cc+528o=
 github.com/mdlayher/netlink v1.8.0 h1:e7XNIYJKD7hUct3Px04RuIGJbBxy1/c4nX7D5YyvvlM=
@@ -338,10 +351,10 @@ github.com/mitchellh/go-ps v1.0.0 h1:i6ampVEEF4wQFF+bkYfwYgY+F/uYJDktmvLPf7qIgjc
 github.com/mitchellh/go-ps v1.0.0/go.mod h1:J4lOc8z8yJs6vUwklHw2XEIiT4z4C40KtWVN3nvg8Pg=
 github.com/moby/docker-image-spec v1.3.1 h1:jMKff3w6PgbfSa69GfNg+zN/XLhfXJGnEx3Nl2EsFP0=
 github.com/moby/docker-image-spec v1.3.1/go.mod h1:eKmb5VW8vQEh/BAr2yvVNvuiJuY6UIocYsFu/DxxRpo=
-github.com/moby/moby/api v1.54.2 h1:wiat9QAhnDQjA7wk1kh/TqHz2I1uUA7M7t9SAl/JNXg=
-github.com/moby/moby/api v1.54.2/go.mod h1:+RQ6wluLwtYaTd1WnPLykIDPekkuyD/ROWQClE83pzs=
-github.com/moby/moby/client v0.4.1 h1:DMQgisVoMkmMs7fp3ROSdiBnoAu8+vo3GggFl06M/wY=
-github.com/moby/moby/client v0.4.1/go.mod h1:z52C9O2POPOsnxZAy//WtKcQ32P+jT/NGeXu/7nfjGQ=
+github.com/moby/moby/api v1.54.1 h1:TqVzuJkOLsgLDDwNLmYqACUuTehOHRGKiPhvH8V3Nn4=
+github.com/moby/moby/api v1.54.1/go.mod h1:+RQ6wluLwtYaTd1WnPLykIDPekkuyD/ROWQClE83pzs=
+github.com/moby/moby/client v0.4.0 h1:S+2XegzHQrrvTCvF6s5HFzcrywWQmuVnhOXe2kiWjIw=
+github.com/moby/moby/client v0.4.0/go.mod h1:QWPbvWchQbxBNdaLSpoKpCdf5E+WxFAgNHogCWDoa7g=
 github.com/moby/sys/atomicwriter v0.1.0 h1:kw5D/EqkBwsBFi0ss9v1VG3wIkVhzGvLklJ+w3A14Sw=
 github.com/moby/sys/atomicwriter v0.1.0/go.mod h1:Ul8oqv2ZMNHOceF643P6FKPXeCmYtlQMvpizfsSoaWs=
 github.com/moby/sys/sequential v0.6.0 h1:qrx7XFUd/5DxtqcoH1h438hF5TmOvzC/lspjy7zgvCU=
@@ -358,10 +371,6 @@ github.com/ncruces/go-strftime v1.0.0 h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOF
 github.com/ncruces/go-strftime v1.0.0/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls=
 github.com/nfnt/resize v0.0.0-20180221191011-83c6a9932646 h1:zYyBkD/k9seD2A7fsi6Oo2LfFZAehjjQMERAvZLEDnQ=
 github.com/nfnt/resize v0.0.0-20180221191011-83c6a9932646/go.mod h1:jpp1/29i3P1S/RLdc7JQKbRpFeM1dOBd8T9ki5s+AY8=
-github.com/oapi-codegen/nullable v1.1.0 h1:eAh8JVc5430VtYVnq00Hrbpag9PFRGWLjxR1/3KntMs=
-github.com/oapi-codegen/nullable v1.1.0/go.mod h1:KUZ3vUzkmEKY90ksAmit2+5juDIhIZhfDl+0PwOQlFY=
-github.com/oapi-codegen/runtime v1.4.1 h1:9nwLoI+KrWxzbBcp0jO/R8uXqbik/HUyCvPeU68Y/qo=
-github.com/oapi-codegen/runtime v1.4.1/go.mod h1:GwV7hC2hviaMzj+ITfHVRESK5J2W/GefVwIND/bMGvU=
 github.com/oauth2-proxy/mockoidc v0.0.0-20240214162133-caebfff84d25 h1:9bCMuD3TcnjeqjPT2gSlha4asp8NvgcFRYExCaikCxk=
 github.com/oauth2-proxy/mockoidc v0.0.0-20240214162133-caebfff84d25/go.mod h1:eDjgYHYDJbPLBLsyZ6qRaugP0mX8vePOhZ5id1fdzJw=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
@@ -373,13 +382,15 @@ github.com/opencontainers/runc v1.3.2/go.mod h1:F7UQQEsxcjUNnFpT1qPLHZBKYP7yWwk6
 github.com/orisano/pixelmatch v0.0.0-20220722002657-fb0b55479cde/go.mod h1:nZgzbfBr3hhjoZnS66nKrHmduYNpc34ny7RK4z5/HM0=
 github.com/ory/dockertest/v3 v3.12.0 h1:3oV9d0sDzlSQfHtIaB5k6ghUCVMVLpAY8hwrqoCyRCw=
 github.com/ory/dockertest/v3 v3.12.0/go.mod h1:aKNDTva3cp8dwOWwb9cWuX84aH5akkxXRvO7KCwWVjE=
-github.com/pelletier/go-toml/v2 v2.3.1 h1:MYEvvGnQjeNkRF1qUuGolNtNExTDwct51yp7olPtrEc=
-github.com/pelletier/go-toml/v2 v2.3.1/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=
+github.com/pelletier/go-toml/v2 v2.2.4 h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4=
+github.com/pelletier/go-toml/v2 v2.2.4/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=
 github.com/peterbourgon/ff/v3 v3.4.0 h1:QBvM/rizZM1cB0p0lGMdmR7HxZeI/ZrBWB4DqLkMUBc=
 github.com/peterbourgon/ff/v3 v3.4.0/go.mod h1:zjJVUhx+twciwfDl0zBcFzl4dW8axCRyXE/eKY9RztQ=
 github.com/petermattis/goid v0.0.0-20250813065127-a731cc31b4fe/go.mod h1:pxMtw7cyUw6B2bRH0ZBANSPg+AoSud1I1iyJHI69jH4=
-github.com/petermattis/goid v0.0.0-20260330135022-df67b199bc81 h1:WDsQxOJDy0N1VRAjXLpi8sCEZRSGarLWQevDxpTBRrM=
-github.com/petermattis/goid v0.0.0-20260330135022-df67b199bc81/go.mod h1:pxMtw7cyUw6B2bRH0ZBANSPg+AoSud1I1iyJHI69jH4=
+github.com/petermattis/goid v0.0.0-20260113132338-7c7de50cc741 h1:KPpdlQLZcHfTMQRi6bFQ7ogNO0ltFT4PmtwTLW4W+14=
+github.com/petermattis/goid v0.0.0-20260113132338-7c7de50cc741/go.mod h1:pxMtw7cyUw6B2bRH0ZBANSPg+AoSud1I1iyJHI69jH4=
+github.com/philip-bui/grpc-zerolog v1.0.1 h1:EMacvLRUd2O1K0eWod27ZP5CY1iTNkhBDLSN+Q4JEvA=
+github.com/philip-bui/grpc-zerolog v1.0.1/go.mod h1:qXbiq/2X4ZUMMshsqlWyTHOcw7ns+GZmlqZZN05ZHcQ=
 github.com/pierrec/lz4/v4 v4.1.25 h1:kocOqRffaIbU5djlIBr7Wh+cx82C0vtFb0fOurZHqD0=
 github.com/pierrec/lz4/v4 v4.1.25/go.mod h1:EoQMVJgeeEOMsCqCzqFm2O0cJvljX2nGZjcRIPL34O4=
 github.com/pires/go-proxyproto v0.9.2 h1:H1UdHn695zUVVmB0lQ354lOWHOy6TZSpzBl3tgN0s1U=
@@ -393,26 +404,34 @@ github.com/pkg/sftp v1.13.6/go.mod h1:tz1ryNURKu77RL+GuCzmoJYxQczL3wLNNpPWagdg4Q
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
 github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/prometheus-community/pro-bing v0.7.0 h1:KFYFbxC2f2Fp6c+TyxbCOEarf7rbnzr9Gw8eIb0RfZA=
+github.com/prometheus-community/pro-bing v0.7.0/go.mod h1:Moob9dvlY50Bfq6i88xIwfyw7xLFHH69LUgx9n5zqCE=
 github.com/prometheus/client_golang v1.23.2 h1:Je96obch5RDVy3FDMndoUsjAhG5Edi49h0RJWRi/o0o=
 github.com/prometheus/client_golang v1.23.2/go.mod h1:Tb1a6LWHB3/SPIzCoaDXI4I8UHKeFTEQ1YCr+0Gyqmg=
 github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
 github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
-github.com/prometheus/common v0.68.1 h1:omjRRl4QP4komogpXuhfeOiisQg7xdy8VM1UY+pStaY=
-github.com/prometheus/common v0.68.1/go.mod h1:ZzL3f6u94qUxh9p+tJTrF+FvBS1XXbbRAZCQkytAL0Y=
-github.com/prometheus/procfs v0.20.1 h1:XwbrGOIplXW/AU3YhIhLODXMJYyC1isLFfYCsTEycfc=
-github.com/prometheus/procfs v0.20.1/go.mod h1:o9EMBZGRyvDrSPH1RqdxhojkuXstoe4UlK79eF5TGGo=
+github.com/prometheus/common v0.67.5 h1:pIgK94WWlQt1WLwAC5j2ynLaBRDiinoAb86HZHTUGI4=
+github.com/prometheus/common v0.67.5/go.mod h1:SjE/0MzDEEAyrdr5Gqc6G+sXI67maCxzaT3A2+HqjUw=
+github.com/prometheus/procfs v0.19.2 h1:zUMhqEW66Ex7OXIiDkll3tl9a1ZdilUOd/F6ZXw4Vws=
+github.com/prometheus/procfs v0.19.2/go.mod h1:M0aotyiemPhBCM0z5w87kL22CxfcH05ZpYlu+b4J7mw=
+github.com/pterm/pterm v0.12.27/go.mod h1:PhQ89w4i95rhgE+xedAoqous6K9X+r6aSOI2eFF7DZI=
+github.com/pterm/pterm v0.12.29/go.mod h1:WI3qxgvoQFFGKGjGnJR849gU0TsEOvKn5Q8LlY1U7lg=
+github.com/pterm/pterm v0.12.30/go.mod h1:MOqLIyMOgmTDz9yorcYbcw+HsgoZo3BQfg2wtl3HEFE=
+github.com/pterm/pterm v0.12.31/go.mod h1:32ZAWZVXD7ZfG0s8qqHXePte42kdz8ECtRyEejaWgXU=
+github.com/pterm/pterm v0.12.33/go.mod h1:x+h2uL+n7CP/rel9+bImHD5lF3nM9vJj80k9ybiiTTE=
+github.com/pterm/pterm v0.12.36/go.mod h1:NjiL09hFhT/vWjQHSj1athJpx6H8cjpHXNAK5bUw8T8=
+github.com/pterm/pterm v0.12.40/go.mod h1:ffwPLwlbXxP+rxT0GsgDTzS3y3rmpAO1NMjUkGTYf8s=
 github.com/pterm/pterm v0.12.83 h1:ie+YmGmA727VuhxBlyGr74Ks+7McV6kT99IB8EU80aA=
 github.com/pterm/pterm v0.12.83/go.mod h1:xlgc6bFWyJIMtmLJvGim+L7jhSReilOlOnodeIYe4Tk=
-github.com/puzpuzpuz/xsync/v4 v4.5.0 h1:vOSWu6b57/emh+L/Cw0BeQfvxa/cogFywXHeGUxQxAg=
-github.com/puzpuzpuz/xsync/v4 v4.5.0/go.mod h1:VJDmTCJMBt8igNxnkQd86r+8KUeN1quSfNKu5bLYFQo=
-github.com/realclientip/realclientip-go v1.0.0 h1:+yPxeC0mEaJzq1BfCt2h4BxlyrvIIBzR6suDc3BEF1U=
-github.com/realclientip/realclientip-go v1.0.0/go.mod h1:CXnUdVwFRcXFJIRb/dTYqbT7ud48+Pi2pFm80bxDmcI=
+github.com/puzpuzpuz/xsync/v4 v4.4.0 h1:vlSN6/CkEY0pY8KaB0yqo/pCLZvp9nhdbBdjipT4gWo=
+github.com/puzpuzpuz/xsync/v4 v4.4.0/go.mod h1:VJDmTCJMBt8igNxnkQd86r+8KUeN1quSfNKu5bLYFQo=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE=
 github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo=
+github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
 github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
-github.com/rs/zerolog v1.35.1 h1:m7xQeoiLIiV0BCEY4Hs+j2NG4Gp2o2KPKmhnnLiazKI=
-github.com/rs/zerolog v1.35.1/go.mod h1:EjML9kdfa/RMA7h/6z6pYmq1ykOuA8/mjWaEvGI+jcw=
+github.com/rs/zerolog v1.35.0 h1:VD0ykx7HMiMJytqINBsKcbLS+BJ4WYjz+05us+LRTdI=
+github.com/rs/zerolog v1.35.0/go.mod h1:EjML9kdfa/RMA7h/6z6pYmq1ykOuA8/mjWaEvGI+jcw=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/safchain/ethtool v0.7.0 h1:rlJzfDetsVvT61uz8x1YIcFn12akMfuPulHtZjtb7Is=
 github.com/safchain/ethtool v0.7.0/go.mod h1:MenQKEjXdfkjD3mp2QdCk8B/hwvkrlOTm/FD4gTpFxQ=
@@ -422,8 +441,9 @@ github.com/samber/lo v1.53.0 h1:t975lj2py4kJPQ6haz1QMgtId2gtmfktACxIXArw3HM=
 github.com/samber/lo v1.53.0/go.mod h1:4+MXEGsJzbKGaUEQFKBq2xtfuznW9oz/WrgyzMzRoM0=
 github.com/sasha-s/go-deadlock v0.3.9 h1:fiaT9rB7g5sr5ddNZvlwheclN9IP86eFW9WgqlEQV+w=
 github.com/sasha-s/go-deadlock v0.3.9/go.mod h1:KuZj51ZFmx42q/mPaYbRk0P1xcwe697zsJKE03vD4/Y=
-github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw=
-github.com/sergi/go-diff v1.4.0/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
+github.com/sergi/go-diff v1.2.0/go.mod h1:STckp+ISIX8hZLjrqAeVduY0gWCT9IjLuqbuNXdaHfM=
+github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=
+github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
 github.com/sirupsen/logrus v1.9.4 h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w=
 github.com/sirupsen/logrus v1.9.4/go.mod h1:ftWc9WdOfJ0a92nsE2jF5u5ZwH8Bv2zdeOC42RjbV2g=
 github.com/skip2/go-qrcode v0.0.0-20200617195104-da1b6568686e h1:MRM5ITcdelLK2j1vwZ3Je0FKVCfqOLp5zO6trqMLYs0=
@@ -439,10 +459,13 @@ github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
 github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU=
 github.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY=
-github.com/spkg/bom v0.0.0-20160624110644-59b7046e48ad/go.mod h1:qLr4V1qq6nMqFKkMo8ZTx3f+BZEkzsRUY10Xsm2mwU0=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.2 h1:xuMeJ0Sdp5ZMRXx/aWO6RZxdr3beISkG5/G/aIRr3pY=
+github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
@@ -464,18 +487,18 @@ github.com/tailscale/netlink v1.1.1-0.20240822203006-4d49adab4de7 h1:uFsXVBE9Qr4
 github.com/tailscale/netlink v1.1.1-0.20240822203006-4d49adab4de7/go.mod h1:NzVQi3Mleb+qzq8VmcWpSkcSYxXIg0DkI6XDzpVkhJ0=
 github.com/tailscale/peercred v0.0.0-20250107143737-35a0c7bd7edc h1:24heQPtnFR+yfntqhI3oAu9i27nEojcQ4NuBQOo5ZFA=
 github.com/tailscale/peercred v0.0.0-20250107143737-35a0c7bd7edc/go.mod h1:f93CXfllFsO9ZQVq+Zocb1Gp4G5Fz0b0rXHLOzt/Djc=
-github.com/tailscale/setec v0.0.0-20260310221408-dcd97e42f251 h1:kNnJlwxSzue+VRJuDdZ/yebcMM2q9KqFmK9xQqH1YRc=
-github.com/tailscale/setec v0.0.0-20260310221408-dcd97e42f251/go.mod h1:6NU8H/GLPVX2TnXAY1duyy9ylLaHwFpr0X93UPiYmNI=
-github.com/tailscale/squibble v0.0.0-20260411062017-141f5d618bc4 h1:1ghkd9YIC4J7umZuu9jZz8afWJSj1hCRSzfvdI2Q3Vo=
-github.com/tailscale/squibble v0.0.0-20260411062017-141f5d618bc4/go.mod h1:EVp9PDh7v69Do6aNzFfLvL0fdCph3XskGMi+WcS/uOM=
-github.com/tailscale/tailsql v0.0.0-20260522170732-77aec5aabc76 h1:o7mEEIci+U0H3Ddo0JRMOxm2VGcCKaVPro/F+f3qFbg=
-github.com/tailscale/tailsql v0.0.0-20260522170732-77aec5aabc76/go.mod h1:N2Dm+UzRWz01zPMDl5XHkSVq91kNPWU13uUUibcOm+c=
+github.com/tailscale/setec v0.0.0-20260115174028-19d190c5556d h1:N+TtzIaGYREbLbKZB0WU0vVnMSfaqUkSf3qMEi03hwE=
+github.com/tailscale/setec v0.0.0-20260115174028-19d190c5556d/go.mod h1:6NU8H/GLPVX2TnXAY1duyy9ylLaHwFpr0X93UPiYmNI=
+github.com/tailscale/squibble v0.0.0-20260303070345-3ac5157f405e h1:4yfp5/YDr+TzbUME/PalYJVXAsp7zA2Gv2xQMZ9Qors=
+github.com/tailscale/squibble v0.0.0-20260303070345-3ac5157f405e/go.mod h1:xJkMmR3t+thnUQhA3Q4m2VSlS5pcOq+CIjmU/xfKKx4=
+github.com/tailscale/tailsql v0.0.0-20260322172246-3ab0c1744d9c h1:7lJQ/zycbk1E9e0nUiMuwIDYprFTLpWXUwiPdi+tRlI=
+github.com/tailscale/tailsql v0.0.0-20260322172246-3ab0c1744d9c/go.mod h1:bpNmZdvZKmBstrZunT+NXL6hmrFw5AsuT7MGiYS8sRc=
 github.com/tailscale/web-client-prebuilt v0.0.0-20251127225136-f19339b67368 h1:0tpDdAj9sSfSZg4gMwNTdqMP592sBrq2Sm0w6ipnh7k=
 github.com/tailscale/web-client-prebuilt v0.0.0-20251127225136-f19339b67368/go.mod h1:agQPE6y6ldqCOui2gkIh7ZMztTkIQKH049tv8siLuNQ=
 github.com/tailscale/wf v0.0.0-20240214030419-6fbb0a674ee6 h1:l10Gi6w9jxvinoiq15g8OToDdASBni4CyJOdHY1Hr8M=
 github.com/tailscale/wf v0.0.0-20240214030419-6fbb0a674ee6/go.mod h1:ZXRML051h7o4OcI0d3AaILDIad/Xw0IkXaHM17dic1Y=
-github.com/tailscale/wireguard-go v0.0.0-20260527010701-b48af7099cad h1:Ky26FR5yZ5IKEB0xtm5A8xSTb06ImY7kxBFrvgOmJSg=
-github.com/tailscale/wireguard-go v0.0.0-20260527010701-b48af7099cad/go.mod h1:6SerzcvHWQchKO2BfNdmquA77CHSECZuFl+D9fp4RnI=
+github.com/tailscale/wireguard-go v0.0.0-20260304043104-4184faf59e56 h1:/R1vu+eNhg1eKstmVPEKvsJgkh4TUyb+J+Eadwv+d/I=
+github.com/tailscale/wireguard-go v0.0.0-20260304043104-4184faf59e56/go.mod h1:zvaAPQrjUBWufXgqpSQ1/BYu9ZFOKnsNWLFQe+E78cM=
 github.com/tailscale/xnet v0.0.0-20240729143630-8497ac4dab2e h1:zOGKqN5D5hHhiYUp091JqK7DPCqSARyUfduhGUY8Bek=
 github.com/tailscale/xnet v0.0.0-20240729143630-8497ac4dab2e/go.mod h1:orPd6JZXXRyuDusYilywte7k094d7dycXXU5YnWsrwg=
 github.com/tc-hib/winres v0.2.1 h1:YDE0FiP0VmtRaDn7+aaChp1KiF4owBiJa5l964l5ujA=
@@ -501,33 +524,34 @@ github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 h1:EzJWgHo
 github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ=
 github.com/xeipuuv/gojsonschema v1.2.0 h1:LhYJRs+L4fBtjZUfuSZIKGeVu0QRy8e5Xi7D17UxZ74=
 github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQluxsYJ78Id3Y=
+github.com/xo/terminfo v0.0.0-20210125001918-ca9a967f8778/go.mod h1:2MuV+tbUrU1zIOPMxZ5EncGwgmMJsa+9ucAQZXxsObs=
 github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e h1:JVG44RsyaB9T2KIHavMF/ppJZNG9ZpyihvCd0w101no=
 github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e/go.mod h1:RbqR21r5mrJuqunuUZ/Dhy/avygyECGrLceyNeo4LiM=
 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 h1:8tvICD4vSTOOsNrsI4Ljf6C+6UKvpTEH5XY3JMoyPoo=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0/go.mod h1:z9+yiacE0IHRqM4qFfkbt/JYlmYXgss8GY/jXoNuPJI=
-go.opentelemetry.io/otel v1.44.0 h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU=
-go.opentelemetry.io/otel v1.44.0/go.mod h1:BMgjTHL9WPRlRjL2oZCBTL4whCGtXch2H4BhOPIAyYc=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 h1:88Y4s2C8oTui1LGM6bTWkw0ICGcOLCAI5l6zsD1j20k=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0/go.mod h1:Vl1/iaggsuRlrHf/hfPJPvVag77kKyvrLeD10kpMl+A=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 h1:3iZJKlCZufyRzPzlQhUIWVmfltrXuGyfjREgGP3UUjc=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0/go.mod h1:/G+nUPfhq2e+qiXMGxMwumDrP5jtzU+mWN7/sjT2rak=
-go.opentelemetry.io/otel/metric v1.44.0 h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc=
-go.opentelemetry.io/otel/metric v1.44.0/go.mod h1:8O7hanEPBNgEMmybD3s2VBKcgWOCsA6tzHBPODAiquo=
-go.opentelemetry.io/otel/sdk v1.44.0 h1:nHYwb9lK+fJPU/dnT6s7W7Z8itMWyqrnVfbheVYrZ58=
-go.opentelemetry.io/otel/sdk v1.44.0/go.mod h1:Osuydd3Se74nqjAKxid74N5eC+jfEqfTegHRnq58oK0=
-go.opentelemetry.io/otel/sdk/metric v1.44.0 h1:3LlKgI+VjbVsjNRFZJZAJ30WjXC5VkNRks6si09iEfI=
-go.opentelemetry.io/otel/sdk/metric v1.44.0/go.mod h1:5B5pMARnXxKhltooO4xUuCBorl65a4EpnTalObqOigA=
-go.opentelemetry.io/otel/trace v1.44.0 h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk=
-go.opentelemetry.io/otel/trace v1.44.0/go.mod h1:oLl1jrMQAVo6v3GAggN+1VH9VIz9iUSvW53sW1Q8PIE=
-go.opentelemetry.io/proto/otlp v1.10.0 h1:IQRWgT5srOCYfiWnpqUYz9CVmbO8bFmKcwYxpuCSL2g=
-go.opentelemetry.io/proto/otlp v1.10.0/go.mod h1:/CV4QoCR/S9yaPj8utp3lvQPoqMtxXdzn7ozvvozVqk=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0 h1:7iP2uCb7sGddAr30RRS6xjKy7AZ2JtTOPA3oolgVSw8=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0/go.mod h1:c7hN3ddxs/z6q9xwvfLPk+UHlWRQyaeR1LdgfL/66l0=
+go.opentelemetry.io/otel v1.40.0 h1:oA5YeOcpRTXq6NN7frwmwFR0Cn3RhTVZvXsP4duvCms=
+go.opentelemetry.io/otel v1.40.0/go.mod h1:IMb+uXZUKkMXdPddhwAHm6UfOwJyh4ct1ybIlV14J0g=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0 h1:QKdN8ly8zEMrByybbQgv8cWBcdAarwmIPZ6FThrWXJs=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0/go.mod h1:bTdK1nhqF76qiPoCCdyFIV+N/sRHYXYCTQc+3VCi3MI=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0 h1:wVZXIWjQSeSmMoxF74LzAnpVQOAFDo3pPji9Y4SOFKc=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.40.0/go.mod h1:khvBS2IggMFNwZK/6lEeHg/W57h/IX6J4URh57fuI40=
+go.opentelemetry.io/otel/metric v1.40.0 h1:rcZe317KPftE2rstWIBitCdVp89A2HqjkxR3c11+p9g=
+go.opentelemetry.io/otel/metric v1.40.0/go.mod h1:ib/crwQH7N3r5kfiBZQbwrTge743UDc7DTFVZrrXnqc=
+go.opentelemetry.io/otel/sdk v1.40.0 h1:KHW/jUzgo6wsPh9At46+h4upjtccTmuZCFAc9OJ71f8=
+go.opentelemetry.io/otel/sdk v1.40.0/go.mod h1:Ph7EFdYvxq72Y8Li9q8KebuYUr2KoeyHx0DRMKrYBUE=
+go.opentelemetry.io/otel/sdk/metric v1.40.0 h1:mtmdVqgQkeRxHgRv4qhyJduP3fYJRMX4AtAlbuWdCYw=
+go.opentelemetry.io/otel/sdk/metric v1.40.0/go.mod h1:4Z2bGMf0KSK3uRjlczMOeMhKU2rhUqdWNoKcYrtcBPg=
+go.opentelemetry.io/otel/trace v1.40.0 h1:WA4etStDttCSYuhwvEa8OP8I5EWu24lkOzp+ZYblVjw=
+go.opentelemetry.io/otel/trace v1.40.0/go.mod h1:zeAhriXecNGP/s2SEG3+Y8X9ujcJOTqQ5RgdEJcawiA=
+go.opentelemetry.io/proto/otlp v1.9.0 h1:l706jCMITVouPOqEnii2fIAuO3IVGBRPV5ICjceRb/A=
+go.opentelemetry.io/proto/otlp v1.9.0/go.mod h1:xE+Cx5E/eEHw+ISFkwPLwCZefwVjY+pqKg1qcK03+/4=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
-go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
-go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
+go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
+go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 go4.org/mem v0.0.0-20240501181205-ae6ca9944745 h1:Tl++JLUCe4sxGu8cTpDzRLd3tN7US4hOxG5YpKCzkek=
@@ -537,39 +561,43 @@ go4.org/netipx v0.0.0-20231129151722-fdeea329fbba/go.mod h1:PLyyIXexvUFg3Owu6p/W
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
-golang.org/x/crypto v0.53.0 h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto=
-golang.org/x/crypto v0.53.0/go.mod h1:DNLU434OwVakk9PzuwV8w62mAJpRJL3vsgcfp4Qnsio=
-golang.org/x/exp v0.0.0-20260603202125-055de637280b h1:v1uXiEBHo8QA0LiGCo7UgHMzHT4Kdfpl2zmtH5vaP1Q=
-golang.org/x/exp v0.0.0-20260603202125-055de637280b/go.mod h1:d2fgXJLVs4dYDHUk5lwMIfzRzSrWCfGZb0ZqeLa/Vcw=
-golang.org/x/exp/typeparams v0.0.0-20260603202125-055de637280b h1:E7MAoHE/7prIY6tu29UATfH3hVHv6IWqOchjE48pTAU=
-golang.org/x/exp/typeparams v0.0.0-20260603202125-055de637280b/go.mod h1:PqrXSW65cXDZH0k4IeUbhmg/bcAZDbzNz3byBpKCsXo=
-golang.org/x/image v0.41.0 h1:8wS72eGJMJaBxK6okTzd4WaXumUlTVlb753MlsSvTCo=
-golang.org/x/image v0.41.0/go.mod h1:uIc348UZMSvS5Z65CVZ7iDPaNobNFEPeJ4kbqTOszmA=
+golang.org/x/crypto v0.50.0 h1:zO47/JPrL6vsNkINmLoo/PH1gcxpls50DNogFvB5ZGI=
+golang.org/x/crypto v0.50.0/go.mod h1:3muZ7vA7PBCE6xgPX7nkzzjiUq87kRItoJQM1Yo8S+Q=
+golang.org/x/exp v0.0.0-20260312153236-7ab1446f8b90 h1:jiDhWWeC7jfWqR9c/uplMOqJ0sbNlNWv0UkzE0vX1MA=
+golang.org/x/exp v0.0.0-20260312153236-7ab1446f8b90/go.mod h1:xE1HEv6b+1SCZ5/uscMRjUBKtIxworgEcEi+/n9NQDQ=
+golang.org/x/exp/typeparams v0.0.0-20240314144324-c7f7c6466f7f h1:phY1HzDcf18Aq9A8KkmRtY9WvOFIxN8wgfvy6Zm1DV8=
+golang.org/x/exp/typeparams v0.0.0-20240314144324-c7f7c6466f7f/go.mod h1:AbB0pIl9nAr9wVwH+Z2ZpaocVmF5I4GyWCDIsVjR0bk=
+golang.org/x/image v0.27.0 h1:C8gA4oWU/tKkdCfYT6T2u4faJu3MeNS5O8UPWlPF61w=
+golang.org/x/image v0.27.0/go.mod h1:xbdrClrAUway1MUTEZDq9mz/UpRwYAkFFNUslZtcB+g=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.36.0 h1:JJjpVx6myfUsUdAzZuOSTTmRE0PfZeNWzzvKrP7amb4=
-golang.org/x/mod v0.36.0/go.mod h1:moc6ELqsWcOw5Ef3xVprK5ul/MvtVvkIXLziUOICjUQ=
+golang.org/x/mod v0.35.0 h1:Ww1D637e6Pg+Zb2KrWfHQUnH2dQRLBQyAtpr/haaJeM=
+golang.org/x/mod v0.35.0/go.mod h1:+GwiRhIInF8wPm+4AoT6L0FA1QWAad3OMdTRx4tFYlU=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
-golang.org/x/net v0.56.0 h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o=
-golang.org/x/net v0.56.0/go.mod h1:D3Ku6r+V6JROoZK144D2XfMHFcMq/0zSfLelVTCFKec=
+golang.org/x/net v0.53.0 h1:d+qAbo5L0orcWAr0a9JweQpjXF19LMXJE8Ey7hwOdUA=
+golang.org/x/net v0.53.0/go.mod h1:JvMuJH7rrdiCfbeHoo3fCQU24Lf5JJwT9W3sJFulfgs=
 golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=
-golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
+golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4=
+golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211007075335-d3039528d8ac/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20211013075003-97ac67df715c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220310020820-b874c991c1a5/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220319134239-a9b59b0215f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -577,51 +605,59 @@ golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=
-golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI=
+golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
+golang.org/x/term v0.0.0-20210220032956-6a3ed077a48d/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
+golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
 golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
-golang.org/x/term v0.44.0 h1:0rLvDRCtNj0gZkyIXhCyOb2OAzEhLVqc4B+hrsBhrmc=
-golang.org/x/term v0.44.0/go.mod h1:7ze4MdzUzLXpSAoFP1H0bOI9aXDqveSvatT5vKcFh2Y=
+golang.org/x/term v0.42.0 h1:UiKe+zDFmJobeJ5ggPwOshJIVt6/Ft0rcfrXZDLWAWY=
+golang.org/x/term v0.42.0/go.mod h1:Dq/D+snpsbazcBG5+F9Q1n2rXV8Ma+71xEjTRufARgY=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
-golang.org/x/text v0.38.0 h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE=
-golang.org/x/text v0.38.0/go.mod h1:YXZt3QhHUKYT53r2lLKFIVi6Ao1jdzrTR/KQ09qyxF4=
+golang.org/x/text v0.36.0 h1:JfKh3XmcRPqZPKevfXVpI1wXPTqbkE5f7JA92a55Yxg=
+golang.org/x/text v0.36.0/go.mod h1:NIdBknypM8iqVmPiuco0Dh6P5Jcdk8lJL0CUebqK164=
 golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
 golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.45.0 h1:18qN3FAooORvApf5XjCXgsuayZOEtXf6JK18I3+ONa8=
-golang.org/x/tools v0.45.0/go.mod h1:LuUGqqaXcXMEFEruIVJVm5mgDD8vww/z/SR1gQ4uE/0=
+golang.org/x/tools v0.44.0 h1:UP4ajHPIcuMjT1GqzDWRlalUEoY+uzoZKnhOjbIPD2c=
+golang.org/x/tools v0.44.0/go.mod h1:KA0AfVErSdxRZIsOVipbv3rQhVXTnlU6UhKxHd1seDI=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.zx2c4.com/wintun v0.0.0-20230126152724-0fa3db229ce2 h1:B82qJJgjvYKsXS9jeunTOisW56dUokqW/FOteYJJ/yg=
 golang.zx2c4.com/wintun v0.0.0-20230126152724-0fa3db229ce2/go.mod h1:deeaetjYA+DHMHg+sMSMI58GrEteJUUzzw7en6TJQcI=
 golang.zx2c4.com/wireguard/windows v0.5.3 h1:On6j2Rpn3OEMXqBq00QEDC7bWSZrPIHKIus8eIuExIE=
 golang.zx2c4.com/wireguard/windows v0.5.3/go.mod h1:9TEe8TJmtwyQebdFwAkEWOPr3prrtqm+REGFifP60hI=
-google.golang.org/genproto/googleapis/api v0.0.0-20260610212136-7ab31c22f7ad h1:3iLyITS/sySRwbUKoC7ogfj2Yr1Cjs0pfaRKj5U5HEw=
-google.golang.org/genproto/googleapis/api v0.0.0-20260610212136-7ab31c22f7ad/go.mod h1:KdNqO+rCIWgFumrNBSEDlDNrkrQnpkax7Tv1WxNY8V4=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
-google.golang.org/grpc v1.81.1 h1:VnnIIZ88UzOOKLukQi+ImGz8O1Wdp8nAGGnvOfEIWQQ=
-google.golang.org/grpc v1.81.1/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
+gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
+gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
+google.golang.org/genproto/googleapis/api v0.0.0-20260406210006-6f92a3bedf2d h1:/aDRtSZJjyLQzm75d+a1wOJaqyKBMvIAfeQmoa3ORiI=
+google.golang.org/genproto/googleapis/api v0.0.0-20260406210006-6f92a3bedf2d/go.mod h1:etfGUgejTiadZAUaEP14NP97xi1RGeawqkjDARA/UOs=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 h1:m8qni9SQFH0tJc1X0vmnpw/0t+AImlSvp30sEupozUg=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
+google.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=
+google.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
 google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
 gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
 gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gorm.io/driver/postgres v1.6.0 h1:2dxzU8xJ+ivvqTRph34QX+WrRaJlmfyPqXmoGVjMBa4=
@@ -638,10 +674,10 @@ howett.net/plist v1.0.0 h1:7CrbWYbPPO/PyNy38b2EB/+gYbjCe2DXBxgtOOZbSQM=
 howett.net/plist v1.0.0/go.mod h1:lqaXoTrLY4hg8tnEzNru53gicrbv7rrk+2xJA/7hw9g=
 k8s.io/client-go v0.34.0 h1:YoWv5r7bsBfb0Hs2jh8SOvFbKzzxyNo0nSb0zC19KZo=
 k8s.io/client-go v0.34.0/go.mod h1:ozgMnEKXkRjeMvBZdV1AijMHLTh3pbACPvK7zFR+QQY=
-modernc.org/cc/v4 v4.28.2 h1:3tQ0lf2ADtoby2EtSP+J7IE2SHwEJdP8ioR59wx7XpY=
-modernc.org/cc/v4 v4.28.2/go.mod h1:OnovgIhbbMXMu1aISnJ0wvVD1KnW+cAUJkIrAWh+kVI=
-modernc.org/ccgo/v4 v4.34.0 h1:yRLPFZieg532OT4rp4JFNIVcquwalMX26G95WQDqwCQ=
-modernc.org/ccgo/v4 v4.34.0/go.mod h1:AS5WYMyBakQ+fhsHhtP8mWB82KTGPkNNJDGfGQCe0/A=
+modernc.org/cc/v4 v4.27.1 h1:9W30zRlYrefrDV2JE2O8VDtJ1yPGownxciz5rrbQZis=
+modernc.org/cc/v4 v4.27.1/go.mod h1:uVtb5OGqUKpoLWhqwNQo/8LwvoiEBLvZXIQ/SmO6mL0=
+modernc.org/ccgo/v4 v4.32.0 h1:hjG66bI/kqIPX1b2yT6fr/jt+QedtP2fqojG2VrFuVw=
+modernc.org/ccgo/v4 v4.32.0/go.mod h1:6F08EBCx5uQc38kMGl+0Nm0oWczoo1c7cgpzEry7Uc0=
 modernc.org/fileutil v1.4.0 h1:j6ZzNTftVS054gi281TyLjHPp6CPHr2KCxEXjEbD6SM=
 modernc.org/fileutil v1.4.0/go.mod h1:EqdKFDxiByqxLk8ozOxObDSfcVOv/54xDs/DUHdvCUU=
 modernc.org/gc/v2 v2.6.5 h1:nyqdV8q46KvTpZlsw66kWqwXRHdjIlJOhG6kxiV/9xI=
@@ -650,31 +686,29 @@ modernc.org/gc/v3 v3.1.2 h1:ZtDCnhonXSZexk/AYsegNRV1lJGgaNZJuKjJSWKyEqo=
 modernc.org/gc/v3 v3.1.2/go.mod h1:HFK/6AGESC7Ex+EZJhJ2Gni6cTaYpSMmU/cT9RmlfYY=
 modernc.org/goabi0 v0.2.0 h1:HvEowk7LxcPd0eq6mVOAEMai46V+i7Jrj13t4AzuNks=
 modernc.org/goabi0 v0.2.0/go.mod h1:CEFRnnJhKvWT1c1JTI3Avm+tgOWbkOu5oPA8eH8LnMI=
-modernc.org/libc v1.72.3 h1:ZnDF4tXn4NBXFutMMQC4vtbTFSXhhKzR73fv0beZEAU=
-modernc.org/libc v1.72.3/go.mod h1:dn0dZNnnn1clLyvRxLxYExxiKRZIRENOfqQ8XEeg4Qs=
+modernc.org/libc v1.70.0 h1:U58NawXqXbgpZ/dcdS9kMshu08aiA6b7gusEusqzNkw=
+modernc.org/libc v1.70.0/go.mod h1:OVmxFGP1CI/Z4L3E0Q3Mf1PDE0BucwMkcXjjLntvHJo=
 modernc.org/mathutil v1.7.1 h1:GCZVGXdaN8gTqB1Mf/usp1Y/hSqgI2vAGGP4jZMCxOU=
 modernc.org/mathutil v1.7.1/go.mod h1:4p5IwJITfppl0G4sUEDtCr4DthTaT47/N3aT6MhfgJg=
 modernc.org/memory v1.11.0 h1:o4QC8aMQzmcwCK3t3Ux/ZHmwFPzE6hf2Y5LbkRs+hbI=
 modernc.org/memory v1.11.0/go.mod h1:/JP4VbVC+K5sU2wZi9bHoq2MAkCnrt2r98UGeSK7Mjw=
-modernc.org/opt v0.2.0 h1:tGyef5ApycA7FSEOMraay9SaTk5zmbx7Tu+cJs4QKZg=
-modernc.org/opt v0.2.0/go.mod h1:03fq9lsNfvkYSfxrfUhZCWPk1lm4cq4N+Bh//bEtgns=
+modernc.org/opt v0.1.4 h1:2kNGMRiUjrp4LcaPuLY2PzUfqM/w9N23quVwhKt5Qm8=
+modernc.org/opt v0.1.4/go.mod h1:03fq9lsNfvkYSfxrfUhZCWPk1lm4cq4N+Bh//bEtgns=
 modernc.org/sortutil v1.2.1 h1:+xyoGf15mM3NMlPDnFqrteY07klSFxLElE2PVuWIJ7w=
 modernc.org/sortutil v1.2.1/go.mod h1:7ZI3a3REbai7gzCLcotuw9AC4VZVpYMjDzETGsSMqJE=
-modernc.org/sqlite v1.52.0 h1:p4dhYh2tXZCiyaqHwRVJDjIGKWyXayiQpThxgDzJaxo=
-modernc.org/sqlite v1.52.0/go.mod h1:tcNzv5p84E0skkmJn038y+hWJbLQXQqEnQfeh5r2JLM=
+modernc.org/sqlite v1.48.2 h1:5CnW4uP8joZtA0LedVqLbZV5GD7F/0x91AXeSyjoh5c=
+modernc.org/sqlite v1.48.2/go.mod h1:hWjRO6Tj/5Ik8ieqxQybiEOUXy0NJFNp2tpvVpKlvig=
 modernc.org/strutil v1.2.1 h1:UneZBkQA+DX2Rp35KcM69cSsNES9ly8mQWD71HKlOA0=
 modernc.org/strutil v1.2.1/go.mod h1:EHkiggD70koQxjVdSBM3JKM7k6L0FbGE5eymy9i3B9A=
 modernc.org/token v1.1.0 h1:Xl7Ap9dKaEs5kLoOQeQmPWevfnk/DM5qcLcYlA8ys6Y=
 modernc.org/token v1.1.0/go.mod h1:UGzOrNV1mAFSEB63lOFHIpNRUVMvYTc6yu1SMY/XTDM=
-pgregory.net/rapid v1.3.0 h1:vBvO0VSqti75J1jjYqpgPNBLKMd1+gxa9fYo7vk/Exc=
-pgregory.net/rapid v1.3.0/go.mod h1:dPlE4OBBxgXPqkP79flB6sJL1dx5azpI7HQ9MY9Z7uk=
+pgregory.net/rapid v1.2.0 h1:keKAYRcjm+e1F0oAuU5F5+YPAWcyxNNRK2wud503Gnk=
+pgregory.net/rapid v1.2.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04=
 sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=
 sigs.k8s.io/yaml v1.6.0/go.mod h1:796bPqUfzR/0jLAl6XjHl3Ck7MiyVv8dbTdyT3/pMf4=
 software.sslmate.com/src/go-pkcs12 v0.4.0 h1:H2g08FrTvSFKUj+D309j1DPfk5APnIdAQAB8aEykJ5k=
 software.sslmate.com/src/go-pkcs12 v0.4.0/go.mod h1:Qiz0EyvDRJjjxGyUQa2cCNZn/wMyzrRJ/qcDXOQazLI=
-tailscale.com v1.101.0-pre h1:q1eBWxryj7Lz5fMvi7npSbN/fJ3q6/crvbbfMkx89F8=
-tailscale.com v1.101.0-pre/go.mod h1:DQ9YBy85DpNlSyeU2XRIWzbAu3RsGp/frv+Khg57meE=
-tailscale.com/client/tailscale/v2 v2.9.0 h1:zBZIIeIYXL42qvvile7d29O2DKSr3AfNc2gzd1JCf2o=
-tailscale.com/client/tailscale/v2 v2.9.0/go.mod h1:FGjvGT3ThHelqo0gfdK3IN3k1dwNbRzYbQh2XO3C47U=
+tailscale.com v1.97.0-pre.0.20260429005429-40088602c960 h1:I56vAGia4DV24Dbv8N07F/Awtnguvmm7PAgWCxCIdqw=
+tailscale.com v1.97.0-pre.0.20260429005429-40088602c960/go.mod h1:8nwFkmNdNRtTIM2dkmr/DhbzSKeLmzusWOTacX1zVKk=
 zombiezen.com/go/postgrestest v1.0.1 h1:aXoADQAJmZDU3+xilYVut0pHhgc0sF8ZspPW9gFNwP4=
 zombiezen.com/go/postgrestest v1.0.1/go.mod h1:marlZezr+k2oSJrvXHnZUs1olHqpE9czlz8ZYkVxliQ=
diff --git a/hscontrol/api/v1/api.go b/hscontrol/api/v1/api.go
deleted file mode 100644
index 1ca866947..000000000
--- a/hscontrol/api/v1/api.go
+++ /dev/null
@@ -1,160 +0,0 @@
-// Package apiv1 is the code-first Huma implementation of the Headscale v1 API.
-// Handlers are a thin adapter over hscontrol/state; Huma emits the OpenAPI 3.1
-// spec from the Go definitions (see Spec), and that spec drives the client.
-//
-// It depends only on the domain layer (hscontrol/state, hscontrol/types) via
-// Backend, never on the hscontrol server package, so a future hscontrol/api/v2
-// can sit beside it without either importing the other.
-package apiv1
-
-import (
-	"context"
-	"net/http"
-	"strings"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/danielgtaylor/huma/v2/adapters/humachi"
-	"github.com/go-chi/chi/v5"
-	"github.com/juanfont/headscale/hscontrol/state"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/types/change"
-)
-
-// Backend is the dependency surface the v1 API needs from the control plane:
-// the state layer, the change-notification sink that distributes updates to
-// connected nodes, and the config (only Policy.Mode and Policy.Path are read).
-type Backend struct {
-	State  *state.State
-	Change func(...change.Change)
-	Cfg    *types.Config
-}
-
-// NewAPI builds the v1 Huma API on the given chi router and registers every
-// operation. Auth is enforced by a Huma middleware driven by each operation's
-// declared bearer security (see authMiddleware); locally-trusted requests
-// bypass it via WithLocalTrust.
-func NewAPI(router chi.Router, backend Backend) huma.API {
-	config := huma.DefaultConfig("Headscale API", "v1")
-	config.Info.Description = "Headscale control server API."
-
-	// Version the OpenAPI/docs routes under /api/v1 so a future v2 owns its own.
-	// These register as plain mux routes, not operations, so they never appear
-	// in the emitted spec or client.
-	config.OpenAPIPath = "/api/v1/openapi"
-	config.DocsPath = "/api/v1/docs"
-
-	// The v1 API does not emit "$schema".
-	config.SchemasPath = ""
-
-	// Drop the default schema-link create hook: it injects a "$schema" property
-	// and Link header into every response, which the v1 contract omits.
-	config.CreateHooks = nil
-
-	config.Components.SecuritySchemes = map[string]*huma.SecurityScheme{
-		"bearer": {
-			Type:   "http",
-			Scheme: "bearer",
-		},
-	}
-
-	api := humachi.New(router, config)
-
-	// Must run before register: Huma snapshots the middleware chain at operation
-	// registration, so a middleware added afterwards would silently never run.
-	api.UseMiddleware(authMiddleware(api, backend))
-
-	register(api, backend)
-
-	return api
-}
-
-// bearerAuth is the security requirement applied to every operation: all
-// /api/v1 routes require an API key.
-var bearerAuth = []map[string][]string{{"bearer": {}}}
-
-// registrations is populated by each resource file's init(), so adding a
-// resource group means adding a file rather than editing a shared point. Huma
-// sorts the emitted spec, so init order does not affect output.
-var registrations []func(huma.API, Backend)
-
-// register wires up every operation contributed by the resource files.
-func register(api huma.API, b Backend) {
-	for _, fn := range registrations {
-		fn(api, b)
-	}
-}
-
-// Spec emits the OpenAPI 3.1 document. The zero Backend is safe because
-// handlers are registered but never invoked during emission.
-func Spec() ([]byte, error) {
-	api := NewAPI(chi.NewMux(), Backend{})
-	return api.OpenAPI().YAML()
-}
-
-// Spec30 emits the document downgraded to OpenAPI 3.0.3, needed because the
-// client generator (oapi-codegen v2) cannot yet read the 3.1 spec.
-func Spec30() ([]byte, error) {
-	api := NewAPI(chi.NewMux(), Backend{})
-	return api.OpenAPI().DowngradeYAML()
-}
-
-// Handler builds the v1 API on a fresh mux and returns both. Callers mount the
-// mux and may use mux.Match to detect which paths this API serves.
-func Handler(backend Backend) (*chi.Mux, huma.API) {
-	mux := chi.NewMux()
-	api := NewAPI(mux, backend)
-
-	return mux, api
-}
-
-// localTrustKey marks a request as arriving over a locally-trusted transport;
-// the auth middleware skips authentication for such requests.
-type localTrustKey struct{}
-
-// WithLocalTrust wraps a handler so its requests bypass API-key authentication.
-// The unix socket uses this — access to the socket is the trust boundary — as
-// do in-process tests that exercise the mux directly.
-func WithLocalTrust(next http.Handler) http.Handler {
-	return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
-		next.ServeHTTP(w, req.WithContext(
-			context.WithValue(req.Context(), localTrustKey{}, struct{}{}),
-		))
-	})
-}
-
-// authMiddleware is a pure gate enforcing the bearer API key for any operation
-// that declares security; the v1 handlers do not read caller identity.
-// Locally-trusted requests and operations without declared security pass
-// through. b.State is nil only during spec emission, where no request is
-// served, so it is never dereferenced there.
-func authMiddleware(api huma.API, b Backend) func(huma.Context, func(huma.Context)) {
-	return func(ctx huma.Context, next func(huma.Context)) {
-		if ctx.Context().Value(localTrustKey{}) != nil {
-			next(ctx)
-
-			return
-		}
-
-		if len(ctx.Operation().Security) == 0 {
-			next(ctx)
-
-			return
-		}
-
-		token, ok := strings.CutPrefix(ctx.Header("Authorization"), "Bearer ")
-		if !ok {
-			_ = huma.WriteErr(api, ctx, http.StatusUnauthorized, "Unauthorized")
-
-			return
-		}
-
-		valid, err := b.State.ValidateAPIKey(token)
-		if err != nil || !valid {
-			_ = huma.WriteErr(api, ctx, http.StatusUnauthorized, "Unauthorized")
-
-			return
-		}
-
-		next(ctx)
-	}
-}
diff --git a/hscontrol/api/v1/apikeys.go b/hscontrol/api/v1/apikeys.go
deleted file mode 100644
index 2411d59d9..000000000
--- a/hscontrol/api/v1/apikeys.go
+++ /dev/null
@@ -1,245 +0,0 @@
-package apiv1
-
-import (
-	"cmp"
-	"context"
-	"net/http"
-	"slices"
-	"strconv"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-)
-
-func init() {
-	registrations = append(registrations, registerApiKeys)
-}
-
-// ApiKey is the v1 ApiKey message. Timestamps are pointers so a nil source is
-// emitted as JSON null, matching protojson's unset Timestamp (e.g. lastSeen on
-// a fresh key).
-type ApiKey struct {
-	ID         string     `format:"uint64"   json:"id"`
-	Prefix     string     `json:"prefix"`
-	Expiration *time.Time `json:"expiration" nullable:"true"`
-	CreatedAt  *time.Time `json:"createdAt"  nullable:"true"`
-	LastSeen   *time.Time `json:"lastSeen"   nullable:"true"`
-}
-
-// CreateApiKeyRequestBody is the v1.CreateApiKeyRequest body.
-type CreateApiKeyRequestBody struct {
-	Expiration *time.Time `json:"expiration,omitempty"`
-}
-
-// ExpireApiKeyRequestBody is the v1.ExpireApiKeyRequest body.
-type ExpireApiKeyRequestBody struct {
-	Prefix string `json:"prefix,omitempty"`
-	ID     string `format:"uint64"         json:"id,omitempty"`
-}
-
-type (
-	createApiKeyInput struct {
-		Body CreateApiKeyRequestBody
-	}
-	createApiKeyOutput struct {
-		Body struct {
-			APIKey string `json:"apiKey"`
-		}
-	}
-)
-
-type (
-	expireApiKeyInput struct {
-		Body ExpireApiKeyRequestBody
-	}
-	expireApiKeyOutput struct {
-		Body struct{}
-	}
-)
-
-type (
-	listApiKeysOutput struct {
-		Body struct {
-			APIKeys []ApiKey `json:"apiKeys" nullable:"false"`
-		}
-	}
-)
-
-type (
-	deleteApiKeyInput struct {
-		Prefix string `path:"prefix"`
-		ID     string `format:"uint64" query:"id"`
-	}
-	deleteApiKeyOutput struct {
-		Body struct{}
-	}
-)
-
-func registerApiKeys(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "createApiKey",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/apikey",
-		Summary:     "Create API key",
-		Tags:        []string{"ApiKeys"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *createApiKeyInput) (*createApiKeyOutput, error) {
-		// CreateAPIKey requires a non-nil pointer; default a missing expiration
-		// to the zero time as the gRPC handler does.
-		var expiration time.Time
-		if in.Body.Expiration != nil {
-			expiration = *in.Body.Expiration
-		}
-
-		keyStr, _, err := b.State.CreateAPIKey(&expiration)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("creating api key", err)
-		}
-
-		out := &createApiKeyOutput{}
-		out.Body.APIKey = keyStr
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "expireApiKey",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/apikey/expire",
-		Summary:     "Expire API key",
-		Tags:        []string{"ApiKeys"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *expireApiKeyInput) (*expireApiKeyOutput, error) {
-		key, err := lookupApiKey(b, in.Body.ID, in.Body.Prefix)
-		if err != nil {
-			return nil, err
-		}
-
-		err = b.State.ExpireAPIKey(key)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("expiring api key", err)
-		}
-
-		return &expireApiKeyOutput{}, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "listApiKeys",
-		Method:      http.MethodGet,
-		Path:        "/api/v1/apikey",
-		Summary:     "List API keys",
-		Tags:        []string{"ApiKeys"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, _ *struct{}) (*listApiKeysOutput, error) {
-		keys, err := b.State.ListAPIKeys()
-		if err != nil {
-			return nil, huma.Error500InternalServerError("listing api keys", err)
-		}
-
-		// Match the gRPC handler's ascending-ID ordering.
-		slices.SortFunc(keys, func(a, b types.APIKey) int {
-			return cmp.Compare(a.ID, b.ID)
-		})
-
-		out := &listApiKeysOutput{}
-
-		out.Body.APIKeys = make([]ApiKey, len(keys))
-		for i := range keys {
-			out.Body.APIKeys[i] = apiKeyFromState(&keys[i])
-		}
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "deleteApiKey",
-		Method:      http.MethodDelete,
-		Path:        "/api/v1/apikey/{prefix}",
-		Summary:     "Delete API key",
-		Tags:        []string{"ApiKeys"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *deleteApiKeyInput) (*deleteApiKeyOutput, error) {
-		key, err := lookupApiKey(b, in.ID, in.Prefix)
-		if err != nil {
-			return nil, err
-		}
-
-		err = b.State.DestroyAPIKey(*key)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("deleting api key", err)
-		}
-
-		return &deleteApiKeyOutput{}, nil
-	})
-}
-
-// lookupApiKey resolves an API key by id or prefix; exactly one must be
-// supplied. An empty or zero id counts as "no id". Unknown id/prefix maps to
-// 404 via mapError.
-func lookupApiKey(b Backend, idStr, prefix string) (*types.APIKey, error) {
-	id, err := parseApiKeyID(idStr)
-	if err != nil {
-		return nil, err
-	}
-
-	hasID := id != 0
-	hasPrefix := prefix != ""
-
-	switch {
-	case hasID && hasPrefix:
-		return nil, huma.Error400BadRequest("provide either id or prefix, not both")
-	case hasID:
-		key, err := b.State.GetAPIKeyByID(id)
-		if err != nil {
-			return nil, mapError("getting api key", err)
-		}
-
-		return key, nil
-	case hasPrefix:
-		key, err := b.State.GetAPIKey(prefix)
-		if err != nil {
-			return nil, mapError("getting api key", err)
-		}
-
-		return key, nil
-	default:
-		return nil, huma.Error400BadRequest("must provide id or prefix")
-	}
-}
-
-// parseApiKeyID decodes the optional uint64 id. Empty maps to zero; non-numeric
-// is rejected with 400.
-func parseApiKeyID(s string) (uint64, error) {
-	if s == "" {
-		return 0, nil
-	}
-
-	id, err := strconv.ParseUint(s, 10, 64)
-	if err != nil {
-		return 0, huma.Error400BadRequest("invalid api key id", err)
-	}
-
-	return id, nil
-}
-
-// apiKeyFromState converts a domain API key into the v1 response shape, masking
-// the prefix so the secret is never returned.
-func apiKeyFromState(k *types.APIKey) ApiKey {
-	return ApiKey{
-		ID:         formatID(k.ID),
-		Prefix:     apiKeyMaskedPrefix(k.Prefix),
-		Expiration: k.Expiration,
-		CreatedAt:  k.CreatedAt,
-		LastSeen:   k.LastSeen,
-	}
-}
-
-// apiKeyMaskedPrefix reproduces the unexported types.APIKey.maskedPrefix.
-func apiKeyMaskedPrefix(prefix string) string {
-	if len(prefix) == types.NewAPIKeyPrefixLength {
-		return "hskey-api-" + prefix + "-***"
-	}
-
-	return prefix + "***"
-}
diff --git a/hscontrol/api/v1/auth.go b/hscontrol/api/v1/auth.go
deleted file mode 100644
index e6ff980f7..000000000
--- a/hscontrol/api/v1/auth.go
+++ /dev/null
@@ -1,163 +0,0 @@
-package apiv1
-
-import (
-	"context"
-	"errors"
-	"net/http"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-)
-
-func init() {
-	registrations = append(registrations, registerAuth)
-}
-
-// errAuthRejected is the verdict handed to the waiting registration flow when
-// an auth session is rejected.
-var errAuthRejected = errors.New("auth request rejected")
-
-// AuthRegisterRequestBody is the v1.AuthRegisterRequest body.
-type AuthRegisterRequestBody struct {
-	User   string `json:"user,omitempty"`
-	AuthID string `json:"authId,omitempty"`
-}
-
-// AuthApproveRequestBody is the v1.AuthApproveRequest body.
-type AuthApproveRequestBody struct {
-	AuthID string `json:"authId,omitempty"`
-}
-
-// AuthRejectRequestBody is the v1.AuthRejectRequest body.
-type AuthRejectRequestBody struct {
-	AuthID string `json:"authId,omitempty"`
-}
-
-type (
-	authRegisterInput struct {
-		Body AuthRegisterRequestBody
-	}
-	authRegisterOutput struct {
-		Body struct {
-			Node Node `json:"node"`
-		}
-	}
-)
-
-type (
-	authApproveInput struct {
-		Body AuthApproveRequestBody
-	}
-	authApproveOutput struct {
-		Body struct{}
-	}
-)
-
-type (
-	authRejectInput struct {
-		Body AuthRejectRequestBody
-	}
-	authRejectOutput struct {
-		Body struct{}
-	}
-)
-
-func registerAuth(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "authRegister",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/auth/register",
-		Summary:     "Register node via auth flow",
-		Tags:        []string{"Auth"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *authRegisterInput) (*authRegisterOutput, error) {
-		// Malformed auth_id is 400; unknown user and missing pending session are
-		// 404 via mapError, matching the Approve/Reject handlers.
-		registrationID, err := types.AuthIDFromString(in.Body.AuthID)
-		if err != nil {
-			return nil, huma.Error400BadRequest("registering node", err)
-		}
-
-		user, err := b.State.GetUserByName(in.Body.User)
-		if err != nil {
-			return nil, mapError("looking up user", err)
-		}
-
-		node, nodeChange, err := b.State.HandleNodeFromAuthPath(
-			registrationID,
-			types.UserID(user.ID),
-			nil,
-			util.RegisterMethodCLI,
-		)
-		if err != nil {
-			return nil, mapError("registering node", err)
-		}
-
-		routeChange, err := b.State.AutoApproveRoutes(node)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("auto approving routes", err)
-		}
-
-		b.Change(nodeChange, routeChange)
-
-		out := &authRegisterOutput{}
-		out.Body.Node = nodeFromView(node)
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "authApprove",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/auth/approve",
-		Summary:     "Approve a pending auth session",
-		Tags:        []string{"Auth"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *authApproveInput) (*authApproveOutput, error) {
-		authReq, err := pendingAuthRequest(b, in.Body.AuthID)
-		if err != nil {
-			return nil, err
-		}
-
-		authReq.FinishAuth(types.AuthVerdict{})
-
-		return &authApproveOutput{}, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "authReject",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/auth/reject",
-		Summary:     "Reject a pending auth session",
-		Tags:        []string{"Auth"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *authRejectInput) (*authRejectOutput, error) {
-		authReq, err := pendingAuthRequest(b, in.Body.AuthID)
-		if err != nil {
-			return nil, err
-		}
-
-		authReq.FinishAuth(types.AuthVerdict{
-			Err: errAuthRejected,
-		})
-
-		return &authRejectOutput{}, nil
-	})
-}
-
-// pendingAuthRequest looks up the pending session for auth_id. Malformed
-// auth_id is 400, unknown is 404.
-func pendingAuthRequest(b Backend, rawID string) (*types.AuthRequest, error) {
-	authID, err := types.AuthIDFromString(rawID)
-	if err != nil {
-		return nil, huma.Error400BadRequest("invalid auth_id", err)
-	}
-
-	authReq, ok := b.State.GetAuthCacheEntry(authID)
-	if !ok {
-		return nil, huma.Error404NotFound("no pending auth session for auth_id " + authID.String())
-	}
-
-	return authReq, nil
-}
diff --git a/hscontrol/api/v1/errors.go b/hscontrol/api/v1/errors.go
deleted file mode 100644
index 478a0e450..000000000
--- a/hscontrol/api/v1/errors.go
+++ /dev/null
@@ -1,49 +0,0 @@
-package apiv1
-
-import (
-	"errors"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/juanfont/headscale/hscontrol/state"
-	"gorm.io/gorm"
-)
-
-// mapError translates a state/db-layer error into a Huma HTTP error
-// (NotFound→404, invalid input→400, conflict→409, everything else→500).
-// Handlers use this default mapping and may return a more specific huma.ErrorN
-// directly. msg is a human context prefix, e.g. "getting node".
-func mapError(msg string, err error) error {
-	if err == nil {
-		return nil
-	}
-
-	switch {
-	case errors.Is(err, gorm.ErrRecordNotFound),
-		errors.Is(err, state.ErrNodeNotFound),
-		errors.Is(err, state.ErrNodeNotInNodeStore),
-		errors.Is(err, db.ErrUserNotFound),
-		errors.Is(err, db.ErrNodeNotFoundRegistrationCache),
-		errors.Is(err, state.ErrRegistrationExpired):
-		return huma.Error404NotFound(msg, err)
-
-	case errors.Is(err, state.ErrGivenNameInvalid),
-		errors.Is(err, state.ErrGivenNameTaken),
-		errors.Is(err, state.ErrNodeNameNotUnique),
-		errors.Is(err, state.ErrNodeMarkedTaggedButHasNoTags),
-		errors.Is(err, state.ErrNodeHasNeitherUserNorTags),
-		errors.Is(err, state.ErrRequestedTagsInvalidOrNotPermitted),
-		errors.Is(err, db.ErrUserStillHasNodes),
-		errors.Is(err, db.ErrCannotChangeOIDCUser),
-		errors.Is(err, db.ErrPreAuthKeyNotTaggedOrOwned),
-		errors.Is(err, db.ErrSingleUseAuthKeyHasBeenUsed):
-		return huma.Error400BadRequest(msg, err)
-
-	case errors.Is(err, state.ErrNodeKeyInUse),
-		errors.Is(err, state.ErrAmbiguousNodeOwnership):
-		return huma.Error409Conflict(msg, err)
-
-	default:
-		return huma.Error500InternalServerError(msg, err)
-	}
-}
diff --git a/hscontrol/api/v1/health.go b/hscontrol/api/v1/health.go
deleted file mode 100644
index 7da72e708..000000000
--- a/hscontrol/api/v1/health.go
+++ /dev/null
@@ -1,41 +0,0 @@
-package apiv1
-
-import (
-	"context"
-	"net/http"
-
-	"github.com/danielgtaylor/huma/v2"
-)
-
-// HealthResponseBody mirrors the v1 HealthResponse message. database_connectivity
-// is reported true only when the database responds to a ping.
-type HealthResponseBody struct {
-	DatabaseConnectivity bool `json:"databaseConnectivity"`
-}
-
-type healthOutput struct {
-	Body HealthResponseBody
-}
-
-func init() {
-	registrations = append(registrations, registerHealth)
-}
-
-func registerHealth(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "health",
-		Method:      http.MethodGet,
-		Path:        "/api/v1/health",
-		Summary:     "Health check",
-		Description: "Reports server health, including database connectivity.",
-		Tags:        []string{"Health"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, _ *struct{}) (*healthOutput, error) {
-		err := b.State.PingDB(ctx)
-		if err != nil {
-			return nil, mapError("pinging database", err)
-		}
-
-		return &healthOutput{Body: HealthResponseBody{DatabaseConnectivity: true}}, nil
-	})
-}
diff --git a/hscontrol/api/v1/nodes.go b/hscontrol/api/v1/nodes.go
deleted file mode 100644
index dbc1adfc5..000000000
--- a/hscontrol/api/v1/nodes.go
+++ /dev/null
@@ -1,702 +0,0 @@
-package apiv1
-
-import (
-	"context"
-	"errors"
-	"net/http"
-	"net/netip"
-	"slices"
-	"strconv"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-	"tailscale.com/net/tsaddr"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
-)
-
-func init() {
-	registrations = append(registrations, registerNodes)
-}
-
-// errBackfillNotConfirmed guards BackfillNodeIPs behind explicit confirmed=true.
-var errBackfillNotConfirmed = errors.New("not confirmed, aborting")
-
-// registerMethodToV1Enum maps the stored register method onto the
-// SCREAMING_SNAKE enum string the v1 contract emits.
-var registerMethodToV1Enum = map[string]string{
-	util.RegisterMethodAuthKey: "REGISTER_METHOD_AUTH_KEY",
-	util.RegisterMethodOIDC:    "REGISTER_METHOD_OIDC",
-	util.RegisterMethodCLI:     "REGISTER_METHOD_CLI",
-}
-
-// Node mirrors the v1 Node message. The protojson contract emits unpopulated
-// fields: scalars and slices always (no omitempty), nested messages and optional
-// timestamps as JSON null when unset.
-type Node struct {
-	ID              string          `format:"uint64"                                                                                      json:"id"`
-	MachineKey      string          `json:"machineKey"`
-	NodeKey         string          `json:"nodeKey"`
-	DiscoKey        string          `json:"discoKey"`
-	IPAddresses     []string        `json:"ipAddresses"                                                                                   nullable:"false"`
-	Name            string          `json:"name"`
-	User            *User           `json:"user"`
-	LastSeen        *time.Time      `json:"lastSeen"                                                                                      nullable:"true"`
-	Expiry          *time.Time      `json:"expiry"                                                                                        nullable:"true"`
-	PreAuthKey      *NodePreAuthKey `json:"preAuthKey"`
-	CreatedAt       time.Time       `json:"createdAt"`
-	RegisterMethod  string          `enum:"REGISTER_METHOD_UNSPECIFIED,REGISTER_METHOD_AUTH_KEY,REGISTER_METHOD_CLI,REGISTER_METHOD_OIDC" json:"registerMethod"`
-	GivenName       string          `json:"givenName"`
-	Online          bool            `json:"online"`
-	ApprovedRoutes  []string        `json:"approvedRoutes"                                                                                nullable:"false"`
-	AvailableRoutes []string        `json:"availableRoutes"                                                                               nullable:"false"`
-	SubnetRoutes    []string        `json:"subnetRoutes"                                                                                  nullable:"false"`
-	Tags            []string        `json:"tags"                                                                                          nullable:"false"`
-}
-
-// NodePreAuthKey is the PreAuthKey shape embedded in a Node response. The
-// /preauthkey endpoints own the standalone request/response surface.
-type NodePreAuthKey struct {
-	User       *User      `json:"user"`
-	ID         string     `format:"uint64"   json:"id"`
-	Key        string     `json:"key"`
-	Reusable   bool       `json:"reusable"`
-	Ephemeral  bool       `json:"ephemeral"`
-	Used       bool       `json:"used"`
-	Expiration *time.Time `json:"expiration" nullable:"true"`
-	CreatedAt  *time.Time `json:"createdAt"  nullable:"true"`
-	AclTags    []string   `json:"aclTags"    nullable:"false"`
-}
-
-// SetTagsRequestBody mirrors v1.SetTagsRequest.
-type SetTagsRequestBody struct {
-	Tags []string `json:"tags,omitempty"`
-}
-
-// SetApprovedRoutesRequestBody mirrors v1.SetApprovedRoutesRequest.
-type SetApprovedRoutesRequestBody struct {
-	Routes []string `json:"routes,omitempty"`
-}
-
-// DebugCreateNodeRequestBody mirrors v1.DebugCreateNodeRequest.
-type DebugCreateNodeRequestBody struct {
-	User   string   `json:"user,omitempty"`
-	Key    string   `json:"key,omitempty"`
-	Name   string   `json:"name,omitempty"`
-	Routes []string `json:"routes,omitempty"`
-}
-
-type (
-	getNodeInput struct {
-		NodeID string `format:"uint64" path:"nodeId"`
-	}
-	nodeOutput struct {
-		Body struct {
-			Node Node `json:"node"`
-		}
-	}
-)
-
-type (
-	listNodesInput struct {
-		User string `query:"user"`
-	}
-	listNodesOutput struct {
-		Body struct {
-			Nodes []Node `json:"nodes" nullable:"false"`
-		}
-	}
-)
-
-type (
-	deleteNodeInput struct {
-		NodeID string `format:"uint64" path:"nodeId"`
-	}
-	deleteNodeOutput struct {
-		Body struct{}
-	}
-)
-
-// ExpireNodeRequestBody mirrors v1.ExpireNodeRequest. Both fields are optional;
-// an absent or all-zero body expires the node immediately, as gRPC does.
-type ExpireNodeRequestBody struct {
-	Expiry        *time.Time `json:"expiry,omitempty"`
-	DisableExpiry bool       `json:"disableExpiry,omitempty"`
-}
-
-type expireNodeInput struct {
-	NodeID string                 `format:"uint64"  path:"nodeId"`
-	Body   *ExpireNodeRequestBody `required:"false"`
-}
-
-type renameNodeInput struct {
-	NodeID  string `format:"uint64" path:"nodeId"`
-	NewName string `path:"newName"`
-}
-
-type setTagsInput struct {
-	NodeID string `format:"uint64" path:"nodeId"`
-	Body   SetTagsRequestBody
-}
-
-type setApprovedRoutesInput struct {
-	NodeID string `format:"uint64" path:"nodeId"`
-	Body   SetApprovedRoutesRequestBody
-}
-
-type registerNodeInput struct {
-	User string `query:"user"`
-	Key  string `query:"key"`
-}
-
-type backfillNodeIPsInput struct {
-	Confirmed bool `query:"confirmed"`
-}
-
-type backfillNodeIPsOutput struct {
-	Body struct {
-		Changes []string `json:"changes" nullable:"false"`
-	}
-}
-
-type debugCreateNodeInput struct {
-	Body DebugCreateNodeRequestBody
-}
-
-func registerNodes(api huma.API, b Backend) {
-	registerNodeReadOps(api, b)
-	registerNodeWriteOps(api, b)
-	registerNodeAdminOps(api, b)
-}
-
-func registerNodeReadOps(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "getNode",
-		Method:      http.MethodGet,
-		Path:        "/api/v1/node/{nodeId}",
-		Summary:     "Get node",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *getNodeInput) (*nodeOutput, error) {
-		nodeID, err := parseNodeID(in.NodeID)
-		if err != nil {
-			return nil, err
-		}
-
-		node, ok := b.State.GetNodeByID(nodeID)
-		if !ok {
-			return nil, huma.Error404NotFound("node not found")
-		}
-
-		out := &nodeOutput{}
-		out.Body.Node = nodeFromView(node)
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "listNodes",
-		Method:      http.MethodGet,
-		Path:        "/api/v1/node",
-		Summary:     "List nodes",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *listNodesInput) (*listNodesOutput, error) {
-		nodes := b.State.ListNodes()
-		if in.User != "" {
-			user, err := b.State.GetUserByName(in.User)
-			if err != nil {
-				return nil, mapError("listing nodes", err)
-			}
-
-			nodes = b.State.ListNodesByUser(types.UserID(user.ID))
-		}
-
-		out := &listNodesOutput{}
-		out.Body.Nodes = make([]Node, nodes.Len())
-
-		for i, node := range nodes.All() {
-			n := nodeFromView(node)
-
-			// Tags-as-identity: tagged nodes are presented as the special
-			// TaggedDevices user.
-			if node.IsTagged() {
-				user := userFromView(types.TaggedDevices.View())
-				n.User = &user
-			}
-
-			// SubnetRoutes is the routes actively served, exit routes included.
-			n.SubnetRoutes = util.PrefixesToString(
-				append(b.State.GetNodePrimaryRoutes(node.ID()), node.ExitRoutes()...),
-			)
-
-			out.Body.Nodes[i] = n
-		}
-
-		// Match the gRPC handler's ascending-ID ordering.
-		slices.SortFunc(out.Body.Nodes, func(a, b Node) int {
-			return cmpNodeID(a.ID, b.ID)
-		})
-
-		return out, nil
-	})
-}
-
-func registerNodeWriteOps(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "deleteNode",
-		Method:      http.MethodDelete,
-		Path:        "/api/v1/node/{nodeId}",
-		Summary:     "Delete node",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *deleteNodeInput) (*deleteNodeOutput, error) {
-		nodeID, err := parseNodeID(in.NodeID)
-		if err != nil {
-			return nil, err
-		}
-
-		node, ok := b.State.GetNodeByID(nodeID)
-		if !ok {
-			return nil, huma.Error404NotFound("node not found")
-		}
-
-		nodeChange, err := b.State.DeleteNode(node)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("deleting node", err)
-		}
-
-		b.Change(nodeChange)
-
-		return &deleteNodeOutput{}, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "expireNode",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/node/{nodeId}/expire",
-		Summary:     "Expire node",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *expireNodeInput) (*nodeOutput, error) {
-		nodeID, err := parseNodeID(in.NodeID)
-		if err != nil {
-			return nil, err
-		}
-
-		// gRPC parity: disableExpiry => nil expiry (never expires); explicit
-		// expiry honoured; absent/zero body expires now. Both set is a 400.
-		var (
-			disableExpiry bool
-			customExpiry  *time.Time
-		)
-
-		if in.Body != nil {
-			disableExpiry = in.Body.DisableExpiry
-			customExpiry = in.Body.Expiry
-		}
-
-		if disableExpiry && customExpiry != nil {
-			return nil, huma.Error400BadRequest("cannot set both disable_expiry and expiry")
-		}
-
-		expiry := time.Now()
-
-		switch {
-		case disableExpiry:
-			node, nodeChange, expErr := b.State.SetNodeExpiry(nodeID, nil)
-			if expErr != nil {
-				return nil, mapError("expiring node", expErr)
-			}
-
-			b.Change(nodeChange)
-
-			out := &nodeOutput{}
-			out.Body.Node = nodeFromView(node)
-
-			return out, nil
-		case customExpiry != nil:
-			expiry = *customExpiry
-		}
-
-		node, nodeChange, err := b.State.SetNodeExpiry(nodeID, &expiry)
-		if err != nil {
-			return nil, mapError("expiring node", err)
-		}
-
-		b.Change(nodeChange)
-
-		out := &nodeOutput{}
-		out.Body.Node = nodeFromView(node)
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "renameNode",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/node/{nodeId}/rename/{newName}",
-		Summary:     "Rename node",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *renameNodeInput) (*nodeOutput, error) {
-		nodeID, err := parseNodeID(in.NodeID)
-		if err != nil {
-			return nil, err
-		}
-
-		node, nodeChange, err := b.State.RenameNode(nodeID, in.NewName)
-		if err != nil {
-			return nil, mapError("renaming node", err)
-		}
-
-		b.Change(nodeChange)
-
-		out := &nodeOutput{}
-		out.Body.Node = nodeFromView(node)
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "setTags",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/node/{nodeId}/tags",
-		Summary:     "Set tags",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *setTagsInput) (*nodeOutput, error) {
-		nodeID, err := parseNodeID(in.NodeID)
-		if err != nil {
-			return nil, err
-		}
-
-		// Tagged nodes must keep at least one tag, so reject an empty set
-		// before touching state, as gRPC does.
-		if len(in.Body.Tags) == 0 {
-			return nil, huma.Error400BadRequest(
-				"cannot remove all tags from a node - tagged nodes must have at least one tag",
-			)
-		}
-
-		for _, tag := range in.Body.Tags {
-			tagErr := validateTag(tag)
-			if tagErr != nil {
-				return nil, huma.Error400BadRequest("setting tags", tagErr)
-			}
-		}
-
-		_, found := b.State.GetNodeByID(nodeID)
-		if !found {
-			return nil, huma.Error404NotFound("node not found")
-		}
-
-		node, nodeChange, err := b.State.SetNodeTags(nodeID, in.Body.Tags)
-		if err != nil {
-			return nil, huma.Error400BadRequest("setting tags", err)
-		}
-
-		b.Change(nodeChange)
-
-		out := &nodeOutput{}
-		out.Body.Node = nodeFromView(node)
-
-		return out, nil
-	})
-}
-
-func registerNodeAdminOps(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "setApprovedRoutes",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/node/{nodeId}/approve_routes",
-		Summary:     "Set approved routes",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *setApprovedRoutesInput) (*nodeOutput, error) {
-		nodeID, err := parseNodeID(in.NodeID)
-		if err != nil {
-			return nil, err
-		}
-
-		var newApproved []netip.Prefix
-
-		for _, route := range in.Body.Routes {
-			prefix, parseErr := netip.ParsePrefix(route)
-			if parseErr != nil {
-				return nil, huma.Error400BadRequest("parsing route", parseErr)
-			}
-
-			// One exit route implies both families, else the client won't
-			// annotate the node as an exit node.
-			if prefix == tsaddr.AllIPv4() || prefix == tsaddr.AllIPv6() {
-				newApproved = append(newApproved, tsaddr.AllIPv4(), tsaddr.AllIPv6())
-			} else {
-				newApproved = append(newApproved, prefix)
-			}
-		}
-
-		slices.SortFunc(newApproved, netip.Prefix.Compare)
-		newApproved = slices.Compact(newApproved)
-
-		node, nodeChange, err := b.State.SetApprovedRoutes(nodeID, newApproved)
-		if err != nil {
-			return nil, mapError("setting approved routes", err)
-		}
-
-		b.Change(nodeChange)
-
-		out := &nodeOutput{}
-		out.Body.Node = nodeFromView(node)
-		// SubnetRoutes here excludes exit routes, unlike the list handler.
-		out.Body.Node.SubnetRoutes = util.PrefixesToString(
-			b.State.GetNodePrimaryRoutes(node.ID()),
-		)
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "registerNode",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/node/register",
-		Summary:     "Register node",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *registerNodeInput) (*nodeOutput, error) {
-		registrationID, err := types.AuthIDFromString(in.Key)
-		if err != nil {
-			return nil, huma.Error400BadRequest("registering node", err)
-		}
-
-		user, err := b.State.GetUserByName(in.User)
-		if err != nil {
-			return nil, mapError("looking up user", err)
-		}
-
-		node, nodeChange, err := b.State.HandleNodeFromAuthPath(
-			registrationID,
-			types.UserID(user.ID),
-			nil,
-			util.RegisterMethodCLI,
-		)
-		if err != nil {
-			return nil, mapError("registering node", err)
-		}
-
-		routeChange, err := b.State.AutoApproveRoutes(node)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("auto approving routes", err)
-		}
-
-		// Empty changes are ignored by the change sink.
-		b.Change(nodeChange, routeChange)
-
-		out := &nodeOutput{}
-		out.Body.Node = nodeFromView(node)
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "backfillNodeIPs",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/node/backfillips",
-		Summary:     "Backfill node IPs",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *backfillNodeIPsInput) (*backfillNodeIPsOutput, error) {
-		if !in.Confirmed {
-			return nil, huma.Error400BadRequest("backfilling node IPs", errBackfillNotConfirmed)
-		}
-
-		changes, err := b.State.BackfillNodeIPs()
-		if err != nil {
-			return nil, huma.Error500InternalServerError("backfilling node IPs", err)
-		}
-
-		out := &backfillNodeIPsOutput{}
-		out.Body.Changes = changes
-
-		if out.Body.Changes == nil {
-			out.Body.Changes = []string{}
-		}
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "debugCreateNode",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/debug/node",
-		Summary:     "Debug create node",
-		Tags:        []string{"Nodes"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *debugCreateNodeInput) (*nodeOutput, error) {
-		user, err := b.State.GetUserByName(in.Body.User)
-		if err != nil {
-			return nil, mapError("looking up user", err)
-		}
-
-		routes, err := util.StringToIPPrefix(in.Body.Routes)
-		if err != nil {
-			return nil, huma.Error400BadRequest("parsing routes", err)
-		}
-
-		registrationID, err := types.AuthIDFromString(in.Body.Key)
-		if err != nil {
-			return nil, huma.Error400BadRequest("debug creating node", err)
-		}
-
-		regData := &types.RegistrationData{
-			NodeKey:    key.NewNode().Public(),
-			MachineKey: key.NewMachine().Public(),
-			Hostname:   in.Body.Name,
-			Expiry:     &time.Time{}, // zero time, not nil, to keep proto JSON round-trip semantics
-		}
-
-		authRegReq := types.NewRegisterAuthRequest(regData)
-		b.State.SetAuthCacheEntry(registrationID, authRegReq)
-
-		// Synthetic echo; the real node is created later via the auth path
-		// from the cached registration data.
-		echoNode := types.Node{
-			NodeKey:    regData.NodeKey,
-			MachineKey: regData.MachineKey,
-			Hostname:   regData.Hostname,
-			User:       user,
-			Expiry:     &time.Time{},
-			LastSeen:   &time.Time{},
-			Hostinfo: &tailcfg.Hostinfo{
-				Hostname:    in.Body.Name,
-				OS:          "TestOS",
-				RoutableIPs: routes,
-			},
-		}
-
-		out := &nodeOutput{}
-		out.Body.Node = nodeFromView(echoNode.View())
-
-		return out, nil
-	})
-}
-
-// nodeFromView builds the Node response from a NodeView, reading through the
-// view accessors. SubnetRoutes is left empty; callers that serve routes set it
-// explicitly.
-func nodeFromView(view types.NodeView) Node {
-	n := Node{
-		ID:              view.StringID(),
-		MachineKey:      view.MachineKey().String(),
-		NodeKey:         view.NodeKey().String(),
-		DiscoKey:        view.DiscoKey().String(),
-		IPAddresses:     nonNilStrings(view.IPsAsString()),
-		Name:            view.Hostname(),
-		CreatedAt:       view.CreatedAt(),
-		RegisterMethod:  registerMethodEnum(view.RegisterMethod()),
-		GivenName:       view.GivenName(),
-		Online:          view.IsOnline().Valid() && view.IsOnline().Get(),
-		ApprovedRoutes:  nonNilStrings(util.PrefixesToString(view.ApprovedRoutes().AsSlice())),
-		AvailableRoutes: nonNilStrings(util.PrefixesToString(view.AnnouncedRoutes())),
-		SubnetRoutes:    []string{},
-		Tags:            nonNilStrings(view.Tags().AsSlice()),
-	}
-
-	if view.User().Valid() {
-		user := userFromView(view.User())
-		n.User = &user
-	}
-
-	if view.AuthKey().Valid() {
-		n.PreAuthKey = nodePreAuthKeyFromView(view.AuthKey())
-	}
-
-	if view.LastSeen().Valid() {
-		ls := view.LastSeen().Get()
-		n.LastSeen = &ls
-	}
-
-	if view.Expiry().Valid() {
-		exp := view.Expiry().Get()
-		n.Expiry = &exp
-	}
-
-	return n
-}
-
-// nodePreAuthKeyFromView builds the embedded NodePreAuthKey, masking the key to
-// its prefix (legacy plaintext keys are shown in full).
-func nodePreAuthKeyFromView(key types.PreAuthKeyView) *NodePreAuthKey {
-	pak := &NodePreAuthKey{
-		ID:        formatID(key.ID()),
-		Key:       maskedPreAuthKey(key),
-		Reusable:  key.Reusable(),
-		Ephemeral: key.Ephemeral(),
-		Used:      key.Used(),
-		AclTags:   nonNilStrings(key.Tags().AsSlice()),
-	}
-
-	if key.User().Valid() {
-		user := userFromView(key.User())
-		pak.User = &user
-	}
-
-	if key.Expiration().Valid() {
-		exp := key.Expiration().Get()
-		pak.Expiration = &exp
-	}
-
-	if key.CreatedAt().Valid() {
-		created := key.CreatedAt().Get()
-		pak.CreatedAt = &created
-	}
-
-	return pak
-}
-
-// registerMethodEnum maps the stored register method onto the v1 enum string,
-// defaulting to REGISTER_METHOD_UNSPECIFIED for unknown values.
-func registerMethodEnum(method string) string {
-	if enum, ok := registerMethodToV1Enum[method]; ok {
-		return enum
-	}
-
-	return "REGISTER_METHOD_UNSPECIFIED"
-}
-
-func nonNilStrings(s []string) []string {
-	if s == nil {
-		return []string{}
-	}
-
-	return s
-}
-
-// cmpNodeID orders two decimal node-ID strings numerically, matching the gRPC
-// handler's ascending-ID ordering.
-func cmpNodeID(a, b string) int {
-	ai, _ := strconv.ParseUint(a, 10, 64)
-	bi, _ := strconv.ParseUint(b, 10, 64)
-
-	switch {
-	case ai < bi:
-		return -1
-	case ai > bi:
-		return 1
-	default:
-		return 0
-	}
-}
-
-func parseNodeID(s string) (types.NodeID, error) {
-	id, err := strconv.ParseUint(s, 10, 64)
-	if err != nil {
-		return 0, huma.Error400BadRequest(
-			"type mismatch, parameter: node_id, error: " + err.Error(),
-		)
-	}
-
-	return types.NodeID(id), nil
-}
diff --git a/hscontrol/api/v1/policy.go b/hscontrol/api/v1/policy.go
deleted file mode 100644
index 452148113..000000000
--- a/hscontrol/api/v1/policy.go
+++ /dev/null
@@ -1,191 +0,0 @@
-package apiv1
-
-import (
-	"context"
-	"fmt"
-	"io"
-	"net/http"
-	"os"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-)
-
-func init() {
-	registrations = append(registrations, registerPolicy)
-}
-
-// PolicyRequestBody carries the HuJSON policy document as a string, for both
-// v1.SetPolicyRequest and v1.CheckPolicyRequest.
-type PolicyRequestBody struct {
-	Policy string `json:"policy,omitempty"`
-}
-
-// PolicyResponseBody is the v1.GetPolicyResponse/SetPolicyResponse body. Fields
-// carry no omitempty so zero values are emitted (EmitUnpopulated parity).
-type PolicyResponseBody struct {
-	Policy    string    `json:"policy"`
-	UpdatedAt time.Time `json:"updatedAt"`
-}
-
-type (
-	getPolicyInput  struct{}
-	getPolicyOutput struct {
-		Body PolicyResponseBody
-	}
-
-	setPolicyInput struct {
-		Body PolicyRequestBody
-	}
-	setPolicyOutput struct {
-		Body PolicyResponseBody
-	}
-
-	checkPolicyInput struct {
-		Body PolicyRequestBody
-	}
-	checkPolicyOutput struct {
-		Body struct{}
-	}
-)
-
-func registerPolicy(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "getPolicy",
-		Method:      http.MethodGet,
-		Path:        "/api/v1/policy",
-		Summary:     "Get policy",
-		Tags:        []string{"Policy"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, _ *getPolicyInput) (*getPolicyOutput, error) {
-		switch b.Cfg.Policy.Mode {
-		case types.PolicyModeDB:
-			p, err := b.State.GetPolicy()
-			if err != nil {
-				return nil, huma.Error500InternalServerError("loading ACL from database", err)
-			}
-
-			out := &getPolicyOutput{}
-			out.Body.Policy = p.Data
-			out.Body.UpdatedAt = p.UpdatedAt
-
-			return out, nil
-		case types.PolicyModeFile:
-			absPath := util.AbsolutePathFromConfigPath(b.Cfg.Policy.Path)
-
-			f, err := os.Open(absPath)
-			if err != nil {
-				return nil, huma.Error500InternalServerError(
-					fmt.Sprintf("reading policy from path %q", absPath), err,
-				)
-			}
-			defer f.Close()
-
-			data, err := io.ReadAll(f)
-			if err != nil {
-				return nil, huma.Error500InternalServerError("reading policy from file", err)
-			}
-
-			out := &getPolicyOutput{}
-			out.Body.Policy = string(data)
-
-			return out, nil
-		}
-
-		return nil, huma.Error500InternalServerError(fmt.Sprintf(
-			"no supported policy mode found in configuration, policy.mode: %q",
-			b.Cfg.Policy.Mode,
-		), nil)
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "setPolicy",
-		Method:      http.MethodPut,
-		Path:        "/api/v1/policy",
-		Summary:     "Set policy",
-		Tags:        []string{"Policy"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *setPolicyInput) (*setPolicyOutput, error) {
-		if b.Cfg.Policy.Mode != types.PolicyModeDB {
-			// Policy updates are only valid in DB mode; otherwise 400.
-			return nil, huma.Error400BadRequest(
-				types.ErrPolicyUpdateIsDisabled.Error(), types.ErrPolicyUpdateIsDisabled,
-			)
-		}
-
-		p := in.Body.Policy
-
-		// Reject policy that would fail when building a map response. SSH rule
-		// validation needs a node, so a server with no nodes can't catch every
-		// case here.
-		nodes := b.State.ListNodes()
-
-		_, err := b.State.SetPolicy([]byte(p))
-		if err != nil {
-			return nil, huma.Error400BadRequest("setting policy", err)
-		}
-
-		if nodes.Len() > 0 {
-			_, err = b.State.SSHPolicy(nodes.At(0))
-			if err != nil {
-				return nil, huma.Error400BadRequest("verifying SSH rules", err)
-			}
-		}
-
-		updated, err := b.State.SetPolicyInDB(p)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("setting policy", err)
-		}
-
-		// Reload even when content is unchanged: routes manually disabled before
-		// may now qualify for auto-approval, so they must be re-evaluated.
-		cs, err := b.State.ReloadPolicy()
-		if err != nil {
-			return nil, huma.Error500InternalServerError("reloading policy", err)
-		}
-
-		if len(cs) > 0 {
-			b.Change(cs...)
-		}
-
-		out := &setPolicyOutput{}
-		out.Body.Policy = updated.Data
-		out.Body.UpdatedAt = updated.UpdatedAt
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "checkPolicy",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/policy/check",
-		Summary:     "Check policy",
-		Description: "Validates the given policy against the server's live users and nodes without persisting it.",
-		Tags:        []string{"Policy"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *checkPolicyInput) (*checkPolicyOutput, error) {
-		polB := []byte(in.Body.Policy)
-
-		users, err := b.State.ListAllUsers()
-		if err != nil {
-			return nil, huma.Error500InternalServerError("loading users", err)
-		}
-
-		nodes := b.State.ListNodes()
-
-		pm, err := policyv2.NewPolicyManager(polB, users, nodes)
-		if err != nil {
-			return nil, huma.Error400BadRequest(err.Error(), err)
-		}
-
-		_, err = pm.SetPolicy(polB)
-		if err != nil {
-			return nil, huma.Error400BadRequest(err.Error(), err)
-		}
-
-		return &checkPolicyOutput{}, nil
-	})
-}
diff --git a/hscontrol/api/v1/preauthkeys.go b/hscontrol/api/v1/preauthkeys.go
deleted file mode 100644
index 9afb0aa22..000000000
--- a/hscontrol/api/v1/preauthkeys.go
+++ /dev/null
@@ -1,318 +0,0 @@
-package apiv1
-
-import (
-	"cmp"
-	"context"
-	"net/http"
-	"slices"
-	"strconv"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-)
-
-func init() {
-	registrations = append(registrations, registerPreAuthKeys)
-}
-
-// PreAuthKey is the v1 PreAuthKey message. User is a pointer with no omitempty
-// so tagged (system-created) keys emit "user":null. Expiration and CreatedAt
-// are always emitted, zero-stamped when unset.
-type PreAuthKey struct {
-	User       *User     `json:"user"`
-	ID         string    `format:"uint64"   json:"id"`
-	Key        string    `json:"key"`
-	Reusable   bool      `json:"reusable"`
-	Ephemeral  bool      `json:"ephemeral"`
-	Used       bool      `json:"used"`
-	Expiration time.Time `json:"expiration"`
-	CreatedAt  time.Time `json:"createdAt"`
-	ACLTags    []string  `json:"aclTags"    nullable:"false"`
-}
-
-// CreatePreAuthKeyRequestBody is the v1.CreatePreAuthKeyRequest body. Every
-// field is optional, hence omitempty throughout.
-type CreatePreAuthKeyRequestBody struct {
-	User       string     `format:"uint64"             json:"user,omitempty"`
-	Reusable   bool       `json:"reusable,omitempty"`
-	Ephemeral  bool       `json:"ephemeral,omitempty"`
-	Expiration *time.Time `json:"expiration,omitempty"`
-	ACLTags    []string   `json:"aclTags,omitempty"`
-}
-
-// ExpirePreAuthKeyRequestBody is the v1.ExpirePreAuthKeyRequest body.
-type ExpirePreAuthKeyRequestBody struct {
-	ID string `format:"uint64" json:"id,omitempty"`
-}
-
-type (
-	createPreAuthKeyInput struct {
-		Body CreatePreAuthKeyRequestBody
-	}
-	preAuthKeyOutput struct {
-		Body struct {
-			PreAuthKey PreAuthKey `json:"preAuthKey"`
-		}
-	}
-)
-
-type (
-	expirePreAuthKeyInput struct {
-		Body ExpirePreAuthKeyRequestBody
-	}
-	expirePreAuthKeyOutput struct {
-		Body struct{}
-	}
-)
-
-type (
-	deletePreAuthKeyInput struct {
-		ID string `format:"uint64" query:"id"`
-	}
-	deletePreAuthKeyOutput struct {
-		Body struct{}
-	}
-)
-
-type listPreAuthKeysOutput struct {
-	Body struct {
-		PreAuthKeys []PreAuthKey `json:"preAuthKeys" nullable:"false"`
-	}
-}
-
-func registerPreAuthKeys(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "createPreAuthKey",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/preauthkey",
-		Summary:     "Create pre-auth key",
-		Tags:        []string{"PreAuthKeys"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *createPreAuthKeyInput) (*preAuthKeyOutput, error) {
-		user, err := parsePreAuthKeyUser(in.Body.User)
-		if err != nil {
-			return nil, err
-		}
-
-		for _, tag := range in.Body.ACLTags {
-			tagErr := validateTag(tag)
-			if tagErr != nil {
-				return nil, huma.Error400BadRequest("invalid tag", tagErr)
-			}
-		}
-
-		// CreatePreAuthKey requires a non-nil pointer; zero-stamp when unset.
-		var expiration time.Time
-		if in.Body.Expiration != nil {
-			expiration = *in.Body.Expiration
-		}
-
-		var userID *types.UserID
-
-		if user != 0 {
-			u, getErr := b.State.GetUserByID(user)
-			if getErr != nil {
-				return nil, mapError("creating pre-auth key", getErr)
-			}
-
-			userID = u.TypedID()
-		}
-
-		preAuthKey, err := b.State.CreatePreAuthKey(
-			userID,
-			in.Body.Reusable,
-			in.Body.Ephemeral,
-			&expiration,
-			in.Body.ACLTags,
-		)
-		if err != nil {
-			// A key that is neither tagged nor user-owned is invalid input (400).
-			return nil, mapError("creating pre-auth key", err)
-		}
-
-		out := &preAuthKeyOutput{}
-		out.Body.PreAuthKey = preAuthKeyNewToResponse(preAuthKey)
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "expirePreAuthKey",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/preauthkey/expire",
-		Summary:     "Expire pre-auth key",
-		Tags:        []string{"PreAuthKeys"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *expirePreAuthKeyInput) (*expirePreAuthKeyOutput, error) {
-		id, err := parsePreAuthKeyID(in.Body.ID)
-		if err != nil {
-			return nil, err
-		}
-
-		err = b.State.ExpirePreAuthKey(id)
-		if err != nil {
-			// An unknown key id maps to 404.
-			return nil, mapError("expiring pre-auth key", err)
-		}
-
-		return &expirePreAuthKeyOutput{}, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "deletePreAuthKey",
-		Method:      http.MethodDelete,
-		Path:        "/api/v1/preauthkey",
-		Summary:     "Delete pre-auth key",
-		Tags:        []string{"PreAuthKeys"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *deletePreAuthKeyInput) (*deletePreAuthKeyOutput, error) {
-		// DELETE has no body: id is bound from the query string.
-		id, err := parsePreAuthKeyID(in.ID)
-		if err != nil {
-			return nil, err
-		}
-
-		err = b.State.DeletePreAuthKey(id)
-		if err != nil {
-			// An unknown key id maps to 404.
-			return nil, mapError("deleting pre-auth key", err)
-		}
-
-		return &deletePreAuthKeyOutput{}, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "listPreAuthKeys",
-		Method:      http.MethodGet,
-		Path:        "/api/v1/preauthkey",
-		Summary:     "List pre-auth keys",
-		Tags:        []string{"PreAuthKeys"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, _ *struct{}) (*listPreAuthKeysOutput, error) {
-		preAuthKeys, err := b.State.ListPreAuthKeys()
-		if err != nil {
-			return nil, huma.Error500InternalServerError("listing pre-auth keys", err)
-		}
-
-		// Match the gRPC handler's ascending-ID ordering.
-		slices.SortFunc(preAuthKeys, func(a, b types.PreAuthKey) int {
-			return cmp.Compare(a.ID, b.ID)
-		})
-
-		out := &listPreAuthKeysOutput{}
-
-		out.Body.PreAuthKeys = make([]PreAuthKey, len(preAuthKeys))
-		for i := range preAuthKeys {
-			out.Body.PreAuthKeys[i] = preAuthKeyToResponse(&preAuthKeys[i])
-		}
-
-		return out, nil
-	})
-}
-
-// preAuthKeyNewToResponse builds the v1 response for a freshly created key. The
-// plaintext key is returned only here; Used is always false.
-func preAuthKeyNewToResponse(key *types.PreAuthKeyNew) PreAuthKey {
-	out := PreAuthKey{
-		ID:        formatID(key.ID),
-		Key:       key.Key,
-		Reusable:  key.Reusable,
-		Ephemeral: key.Ephemeral,
-		ACLTags:   nonNilTags(key.Tags),
-	}
-
-	if key.User != nil {
-		u := userFromView(key.User.View())
-		out.User = &u
-	}
-
-	if key.Expiration != nil {
-		out.Expiration = *key.Expiration
-	}
-
-	if key.CreatedAt != nil {
-		out.CreatedAt = *key.CreatedAt
-	}
-
-	return out
-}
-
-// preAuthKeyToResponse builds the v1 response for a stored key, with its key
-// field masked (see maskedPreAuthKey).
-func preAuthKeyToResponse(key *types.PreAuthKey) PreAuthKey {
-	out := PreAuthKey{
-		ID:        formatID(key.ID),
-		Key:       maskedPreAuthKey(key.View()),
-		Reusable:  key.Reusable,
-		Ephemeral: key.Ephemeral,
-		Used:      key.Used,
-		ACLTags:   nonNilTags(key.Tags),
-	}
-
-	if key.User != nil {
-		u := userFromView(key.User.View())
-		out.User = &u
-	}
-
-	if key.Expiration != nil {
-		out.Expiration = *key.Expiration
-	}
-
-	if key.CreatedAt != nil {
-		out.CreatedAt = *key.CreatedAt
-	}
-
-	return out
-}
-
-// maskedPreAuthKey masks new keys (those with a stored prefix) so the secret is
-// never returned; legacy plaintext keys are returned in full for backwards
-// compatibility.
-func maskedPreAuthKey(key types.PreAuthKeyView) string {
-	if key.Prefix() != "" {
-		return "hskey-auth-" + key.Prefix() + "-***"
-	}
-
-	return key.Key()
-}
-
-// nonNilTags ensures aclTags serializes as [] rather than null, matching
-// EmitUnpopulated output.
-func nonNilTags(tags []string) []string {
-	if tags == nil {
-		return []string{}
-	}
-
-	return tags
-}
-
-// parsePreAuthKeyUser parses the optional uint64 user field. Empty means "no
-// user" (user 0); non-numeric is rejected with 400.
-func parsePreAuthKeyUser(s string) (types.UserID, error) {
-	if s == "" {
-		return 0, nil
-	}
-
-	id, err := strconv.ParseUint(s, 10, 64)
-	if err != nil {
-		return 0, huma.Error400BadRequest("invalid user id", err)
-	}
-
-	return types.UserID(id), nil
-}
-
-// parsePreAuthKeyID parses the uint64 key id. Empty means id 0; non-numeric is
-// rejected with 400.
-func parsePreAuthKeyID(s string) (uint64, error) {
-	if s == "" {
-		return 0, nil
-	}
-
-	id, err := strconv.ParseUint(s, 10, 64)
-	if err != nil {
-		return 0, huma.Error400BadRequest("invalid pre-auth key id", err)
-	}
-
-	return id, nil
-}
diff --git a/hscontrol/api/v1/tags.go b/hscontrol/api/v1/tags.go
deleted file mode 100644
index bd3b4b94c..000000000
--- a/hscontrol/api/v1/tags.go
+++ /dev/null
@@ -1,29 +0,0 @@
-package apiv1
-
-import (
-	"errors"
-	"strings"
-)
-
-// ACL tag validation, shared by the node and pre-auth-key resources. These
-// reproduce the gRPC validateTag checks and messages.
-var (
-	errTagMissingPrefix = errors.New("tag must start with the string 'tag:'")
-	errTagNotLowercase  = errors.New("tag should be lowercase")
-	errTagHasSpaces     = errors.New("tags must not contain spaces")
-)
-
-// validateTag reports whether an ACL tag is well formed: it must start with
-// "tag:", be lowercase, and contain no spaces.
-func validateTag(tag string) error {
-	switch {
-	case !strings.HasPrefix(tag, "tag:"):
-		return errTagMissingPrefix
-	case strings.ToLower(tag) != tag:
-		return errTagNotLowercase
-	case len(strings.Fields(tag)) > 1:
-		return errTagHasSpaces
-	default:
-		return nil
-	}
-}
diff --git a/hscontrol/api/v1/types.go b/hscontrol/api/v1/types.go
deleted file mode 100644
index e8ffbd879..000000000
--- a/hscontrol/api/v1/types.go
+++ /dev/null
@@ -1,52 +0,0 @@
-package apiv1
-
-import (
-	"strconv"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-)
-
-// The v1 contract follows protojson: 64-bit integers are JSON strings (avoiding
-// precision loss above 2^53), timestamps are RFC 3339, and zero values are
-// emitted. Hence response fields carry NO omitempty; request types keep
-// omitempty so their fields stay optional in the spec.
-
-// formatID renders a uint64 identifier as the contract's decimal string.
-func formatID[T ~uint64 | ~uint](id T) string {
-	return strconv.FormatUint(uint64(id), 10)
-}
-
-// User mirrors the v1 User message.
-type User struct {
-	ID            string    `format:"uint64"      json:"id"`
-	Name          string    `json:"name"`
-	CreatedAt     time.Time `json:"createdAt"`
-	DisplayName   string    `json:"displayName"`
-	Email         string    `json:"email"`
-	ProviderID    string    `json:"providerId"`
-	Provider      string    `json:"provider"`
-	ProfilePicURL string    `json:"profilePicUrl"`
-}
-
-// userFromView converts a domain user into the v1 response shape, reading
-// through the [types.UserView] accessors: Name falls back to Username()
-// (email/provider/id) when the stored Name is empty, so OIDC users display
-// their email.
-func userFromView(u types.UserView) User {
-	name := u.Name()
-	if name == "" {
-		name = u.Username()
-	}
-
-	return User{
-		ID:            formatID(u.ID()),
-		Name:          name,
-		CreatedAt:     u.CreatedAt(),
-		DisplayName:   u.DisplayName(),
-		Email:         u.Email(),
-		ProviderID:    u.ProviderIdentifier().String,
-		Provider:      u.Provider(),
-		ProfilePicURL: u.ProfilePicURL(),
-	}
-}
diff --git a/hscontrol/api/v1/users.go b/hscontrol/api/v1/users.go
deleted file mode 100644
index 9468d67a1..000000000
--- a/hscontrol/api/v1/users.go
+++ /dev/null
@@ -1,233 +0,0 @@
-package apiv1
-
-import (
-	"cmp"
-	"context"
-	"net/http"
-	"slices"
-	"strconv"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"gorm.io/gorm"
-)
-
-func init() {
-	registrations = append(registrations, registerUsers)
-}
-
-// CreateUserRequestBody mirrors v1.CreateUserRequest.
-type CreateUserRequestBody struct {
-	Name        string `json:"name,omitempty"`
-	DisplayName string `json:"displayName,omitempty"`
-	Email       string `json:"email,omitempty"`
-	PictureURL  string `json:"pictureUrl,omitempty"`
-}
-
-type (
-	createUserInput struct {
-		Body CreateUserRequestBody
-	}
-	userOutput struct {
-		Body struct {
-			User User `json:"user"`
-		}
-	}
-)
-
-type (
-	renameUserInput struct {
-		OldID   string `format:"uint64" path:"oldId"`
-		NewName string `path:"newName"`
-	}
-
-	deleteUserInput struct {
-		ID string `format:"uint64" path:"id"`
-	}
-	deleteUserOutput struct {
-		Body struct{}
-	}
-)
-
-type (
-	listUsersInput struct {
-		ID    string `format:"uint64" query:"id"`
-		Name  string `query:"name"`
-		Email string `query:"email"`
-	}
-	listUsersOutput struct {
-		Body struct {
-			Users []User `json:"users" nullable:"false"`
-		}
-	}
-)
-
-func registerUsers(api huma.API, b Backend) {
-	huma.Register(api, huma.Operation{
-		OperationID: "createUser",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/user",
-		Summary:     "Create user",
-		Tags:        []string{"Users"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *createUserInput) (*userOutput, error) {
-		// Pre-check yields a 409 for the common case; the DB unique constraint
-		// is the real guard.
-		if in.Body.Name != "" {
-			_, err := b.State.GetUserByName(in.Body.Name)
-			if err == nil {
-				return nil, huma.Error409Conflict("user already exists")
-			}
-		}
-
-		user, policyChanged, err := b.State.CreateUser(types.User{
-			Name:          in.Body.Name,
-			DisplayName:   in.Body.DisplayName,
-			Email:         in.Body.Email,
-			ProfilePicURL: in.Body.PictureURL,
-		})
-		if err != nil {
-			return nil, mapError("creating user", err)
-		}
-
-		b.Change(policyChanged)
-
-		out := &userOutput{}
-		out.Body.User = userFromView(user.View())
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "renameUser",
-		Method:      http.MethodPost,
-		Path:        "/api/v1/user/{oldId}/rename/{newName}",
-		Summary:     "Rename user",
-		Tags:        []string{"Users"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *renameUserInput) (*userOutput, error) {
-		oldID, err := parseUserID(in.OldID)
-		if err != nil {
-			return nil, err
-		}
-
-		oldUser, err := b.State.GetUserByID(oldID)
-		if err != nil {
-			return nil, mapError("renaming user", err)
-		}
-
-		_, c, err := b.State.RenameUser(types.UserID(oldUser.ID), in.NewName)
-		if err != nil {
-			return nil, mapError("renaming user", err)
-		}
-
-		b.Change(c)
-
-		newUser, err := b.State.GetUserByName(in.NewName)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("renaming user", err)
-		}
-
-		out := &userOutput{}
-		out.Body.User = userFromView(newUser.View())
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "deleteUser",
-		Method:      http.MethodDelete,
-		Path:        "/api/v1/user/{id}",
-		Summary:     "Delete user",
-		Tags:        []string{"Users"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *deleteUserInput) (*deleteUserOutput, error) {
-		id, err := parseUserID(in.ID)
-		if err != nil {
-			return nil, err
-		}
-
-		user, err := b.State.GetUserByID(id)
-		if err != nil {
-			return nil, mapError("deleting user", err)
-		}
-
-		policyChanged, err := b.State.DeleteUser(types.UserID(user.ID))
-		if err != nil {
-			return nil, mapError("deleting user", err)
-		}
-
-		b.Change(policyChanged)
-
-		return &deleteUserOutput{}, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "listUsers",
-		Method:      http.MethodGet,
-		Path:        "/api/v1/user",
-		Summary:     "List users",
-		Tags:        []string{"Users"},
-		Security:    bearerAuth,
-	}, func(ctx context.Context, in *listUsersInput) (*listUsersOutput, error) {
-		// Gateway parity: a non-numeric id is a 400 even when other filters win.
-		if in.ID != "" {
-			_, err := strconv.ParseUint(in.ID, 10, 64)
-			if err != nil {
-				return nil, huma.Error400BadRequest("invalid id", err)
-			}
-		}
-
-		users, err := listUsersFiltered(b, in)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("listing users", err)
-		}
-
-		// Match the gRPC handler's ascending-ID ordering.
-		slices.SortFunc(users, func(a, b types.User) int {
-			return cmp.Compare(a.ID, b.ID)
-		})
-
-		out := &listUsersOutput{}
-
-		out.Body.Users = make([]User, len(users))
-		for i := range users {
-			out.Body.Users[i] = userFromView(users[i].View())
-		}
-
-		return out, nil
-	})
-}
-
-// listUsersFiltered reproduces the gRPC ListUsers precedence: name, then email,
-// then id, otherwise all users.
-func listUsersFiltered(b Backend, in *listUsersInput) ([]types.User, error) {
-	switch {
-	case in.Name != "":
-		return b.State.ListUsersWithFilter(&types.User{Name: in.Name})
-	case in.Email != "":
-		return b.State.ListUsersWithFilter(&types.User{Email: in.Email})
-	case in.ID != "":
-		id, err := strconv.ParseUint(in.ID, 10, 64)
-		if err != nil {
-			return nil, err
-		}
-
-		if id == 0 {
-			return b.State.ListAllUsers()
-		}
-
-		return b.State.ListUsersWithFilter(&types.User{Model: gorm.Model{ID: uint(id)}})
-	default:
-		return b.State.ListAllUsers()
-	}
-}
-
-func parseUserID(s string) (types.UserID, error) {
-	id, err := strconv.ParseUint(s, 10, 64)
-	if err != nil {
-		return 0, huma.Error400BadRequest("invalid user id", err)
-	}
-
-	return types.UserID(id), nil
-}
diff --git a/hscontrol/api/v2/README.md b/hscontrol/api/v2/README.md
deleted file mode 100644
index 90fad3638..000000000
--- a/hscontrol/api/v2/README.md
+++ /dev/null
@@ -1,124 +0,0 @@
-# API v2: Headscale's v2 API
-
-This is Headscale's v2 HTTP API, served at `/api/v2`. Some of its endpoints are
-**ported from Tailscale's API**, reusing Tailscale's wire shapes, so the
-Tailscale ecosystem that cannot talk to Headscale today works: the
-[Terraform/OpenTofu provider], [tscli], and the official [Go client]
-(`tailscale.com/client/tailscale/v2`).
-
-It is **not** a port of the whole Tailscale API. Ported endpoints are added one
-at a time, only as we need them; a headscale-native v2 endpoint may use
-headscale's own conventions. The headscale-native admin API stays at `/api/v1`
-(`hscontrol/api/v1`). This guide is for the endpoints **ported from Tailscale**.
-
-[Terraform/OpenTofu provider]: https://registry.terraform.io/providers/tailscale/tailscale/latest
-[tscli]: https://github.com/jaxxstorm/tscli
-[Go client]: https://pkg.go.dev/tailscale.com/client/tailscale/v2
-
-## Conventions
-
-- Operations derived from Tailscale carry the `Tailscale compat` tag.
-- The `{tailnet}` path segment must be `-` (the single Headscale tailnet);
-  anything else is `404`. See `requireDefaultTailnet`.
-- Errors use **Tailscale's** body (`{"message","data","status"}`), installed as
-  a per-API transform (`tailscaleErrorTransformer` in `errors.go`). A future
-  headscale-native v2 operation would keep Huma's RFC 9457 problem+json.
-- Auth accepts a credential as **HTTP Basic** (key as username, what the SDK
-  sends) or **Bearer**: an admin API key (`hskey-api-…`), or an OAuth access
-  token (`hskey-oauthtok-…`). See `authMiddleware`.
-- Each operation declares the Tailscale scope it requires (`auth_keys`,
-  `oauth_keys`, `devices:core`, `devices:routes`, `policy_file`,
-  `feature_settings`, each with a `:read` subset, plus `all`/`all:read`).
-  `requireScope` records it both for the middleware and in the generated
-  OpenAPI, as an `x-required-scope` extension and a sentence in the operation
-  description, so the scope shows up in the docs and spec. Enforcement: an
-  **admin API key is all-access** (scope checks skipped); an **OAuth access
-  token is scope-limited**, the middleware checks the operation's declared scope
-  against the token's grant (`scope.Grants`, where a write scope subsumes its
-  `:read` and `all`/`all:read` are super-scopes). The two are told apart by
-  credential prefix.
-- Resolve one entity by id with a typed getter (`GetNodeByID`, `GetUserByID`,
-  `GetAPIKeyByID`, `GetPreAuthKeyByID`); add one to state/db if it is missing
-  rather than scanning a `List`. Build responses from the view accessors
-  (`NodeView`/`UserView`/`PreAuthKeyView`), never `AsStruct()`.
-- Reuse upstream wire shapes, but declare the request/response structs here:
-  Huma reflects these to build the OpenAPI schema, and the upstream `Key`'s
-  `ExpirySeconds *time.Duration` marshals as nanoseconds, which the spec and
-  every client read as seconds.
-
-## OAuth clients & scopes
-
-Most of the Tailscale ecosystem (the Terraform provider, `tscli`, the Go client)
-accepts **either** an API key **or OAuth 2.0 client-credentials**; the Kubernetes
-operator is OAuth-only. Supporting OAuth lets all of them drive Headscale.
-
-- **OAuth clients** are not a separate resource; they are `keyType:"client"` on
-  the keys endpoint, exactly as Tailscale does it. Create
-  (`POST /api/v2/tailnet/-/keys` with `{"keyType":"client","scopes":[…],"tags":[…]}`)
-  returns a `Key` whose `id` is the client id and whose `key` is the secret,
-  **shown once**; get/list never re-expose it. The secret is
-  `hskey-client-<clientID>-<secret>`, embedding the client id so the token
-  endpoint derives it from the secret (Tailscale's `get-authkey` trick). See
-  `keys.go` (`createOAuthClient`) and `db/oauth.go`.
-- **Token endpoint** `POST /api/v2/oauth/token` (`oauth.go`) is a plain handler,
-  not a Huma operation: it takes `application/x-www-form-urlencoded` and emits
-  RFC 6749 OAuth2 error bodies (`{"error","error_description"}`). Credentials
-  arrive in the body or HTTP Basic; optional space-delimited `scope`/`tags`
-  narrow the token to a subset of the client's grant. It returns a 1-hour
-  `Bearer` access token (`hskey-oauthtok-…`).
-- **Scope enforcement** is the one seam in `authMiddleware`. **Tag enforcement**:
-  an auth key minted by a token may only carry tags the token holds, or tags
-  owned-by them via the policy `tagOwners` (`State.TagOwnedByTags` →
-  `policy/v2`), so e.g. an operator token tagged `tag:k8s-operator` may mint
-  `tag:k8s` keys.
-- Credentials/tokens are stored like API keys: a public id/prefix plus an
-  **Argon2id** hash of the secret (no JWT, no signing keys). `OAuthClient` and
-  `OAuthAccessToken` live in `types/oauth.go` and `db/oauth.go`.
-
-## Adding an endpoint
-
-Worked example: the keys resource (`keys.go`) = Tailscale auth keys = Headscale
-pre-auth keys.
-
-1. **Read the Tailscale spec.** Find the operation in the [Tailscale API
-   reference](https://tailscale.com/api) (OpenAPI 3.1). Note method, path,
-   request/response schema, and which variant(s) Headscale supports (auth keys
-   only, for keys).
-
-2. **Capture golden samples.** Pull the request + response JSON examples from the
-   spec, prune to the variant, and use them as the assertion in the contract
-   test. _Acceptance: the captured request and response are recorded in the
-   test._
-
-3. **Map to Headscale.** Write the field ↔ field ↔ `state` call mapping. Record
-   gaps and the decision for each (e.g. Tailscale `preauthorized` has no
-   Headscale equivalent: accepted, ignored, echoed back). _Acceptance: every
-   request field is consumed or deliberately ignored; every response field has a
-   source._
-
-4. **Implement the Huma operation.** Declare named request/response structs with
-   validation/`default`/`example`/`doc` tags; tag the operation `Tailscale
-compat`; declare its `Errors`; enforce the tailnet and scope. Map state
-   errors with `mapError`. _Acceptance: `go build ./hscontrol/api/v2/` and the
-   operation appears in `Spec()`._
-
-5. **Contract test (in-process, `humatest`).** Assert the server accepts the
-   golden request and returns the golden response shape, with secrets and
-   timestamps neutralised. Pin the wire facts (e.g. `expirySeconds` in seconds,
-   the list `{"keys":[...]}` envelope, the error `message`). See
-   `hscontrol/apiv2_keys_test.go`. _Acceptance: the test is green._
-
-6. **Roundtrip the real clients.** Add a `t.Run` subtest to `TestAPIv2`
-   (`hscontrol/servertest/apiv2_test.go`) for each of the Go client, tscli, and
-   OpenTofu, full create→read→list→delete against one shared server on a real
-   loopback port (`servertest.WithRealListener`). tscli and tofu come from the
-   nix dev shell; a missing binary fails the test. _Acceptance: `nix develop -c
-go test ./hscontrol/servertest/ -run TestAPIv2` is green._
-
-7. **Update the CLI** only if the v2 operation fully replaces a v1 one. Tailscale
-   has no separate key-expire verb (its `DELETE` _is_ the revoke), so v2 maps
-   `DELETE` to a soft revoke: the key stays retrievable with `invalid: true`
-   until the collector reaps it (`preauth_keys.revoked_retention`), the
-   equivalent of v1 `preauthkeys expire`. `headscale preauthkeys` still stays on
-   v1 for now (it is the cross-user admin surface), but the verb gap that
-   previously blocked migration is closed.
diff --git a/hscontrol/api/v2/acl.go b/hscontrol/api/v2/acl.go
deleted file mode 100644
index ff6917933..000000000
--- a/hscontrol/api/v2/acl.go
+++ /dev/null
@@ -1,229 +0,0 @@
-package apiv2
-
-import (
-	"context"
-	"crypto/sha256"
-	"encoding/hex"
-	"errors"
-	"net/http"
-	"os"
-	"strings"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/scope"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-)
-
-func init() {
-	registrations = append(registrations, registerACL)
-}
-
-const (
-	contentTypeJSON   = "application/json"
-	contentTypeHuJSON = "application/hujson"
-)
-
-// defaultPolicy is served by GET when no policy is set, and is what an If-Match
-// of "ts-default" matches against. Allow-all, matching the cluster's behaviour
-// with no configured policy.
-const defaultPolicy = `{
-	// Headscale default policy. Allows all communication.
-	"acls": [
-		{"action": "accept", "src": ["*"], "dst": ["*:*"]},
-	],
-}
-`
-
-type getACLInput struct {
-	Tailnet string `path:"tailnet"`
-	Accept  string `header:"Accept"`
-	Details bool   `doc:"Accepted for compatibility; ignored." query:"details"`
-}
-
-type setACLInput struct {
-	Tailnet string `path:"tailnet"`
-	IfMatch string `header:"If-Match"`
-	Accept  string `header:"Accept"`
-	// RawBody captures the raw HuJSON or JSON policy bytes; huma feeds them here
-	// regardless of Content-Type. The declared type only shapes the OpenAPI schema.
-	RawBody []byte `contentType:"application/json"`
-}
-
-func registerACL(api huma.API, b Backend) {
-	aclTags := []string{"Policy", "Tailscale compat"}
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID: "getACL",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/tailnet/{tailnet}/acl",
-		Summary:     "Get the policy file",
-		Tags:        aclTags,
-		Security:    security,
-		Errors:      []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound, http.StatusInternalServerError},
-	}, scope.PolicyFileRead), func(ctx context.Context, in *getACLInput) (*huma.StreamResponse, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		data, err := currentPolicy(b)
-		if err != nil {
-			return nil, err
-		}
-
-		return streamPolicy(data, aclContentType(in.Accept)), nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID:   "setACL",
-		Method:        http.MethodPost,
-		Path:          "/api/v2/tailnet/{tailnet}/acl",
-		Summary:       "Set the policy file",
-		Tags:          aclTags,
-		Security:      security,
-		DefaultStatus: http.StatusOK,
-		// The body is an opaque HuJSON document captured raw; skip huma's
-		// schema validation (which would expect a base64 string).
-		SkipValidateBody: true,
-		Errors: []int{
-			http.StatusBadRequest, http.StatusUnauthorized, http.StatusForbidden,
-			http.StatusNotFound, http.StatusPreconditionFailed, http.StatusInternalServerError,
-		},
-	}, scope.PolicyFile), func(ctx context.Context, in *setACLInput) (*huma.StreamResponse, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		if b.Cfg.Policy.Mode != types.PolicyModeDB {
-			return nil, huma.Error400BadRequest(
-				types.ErrPolicyUpdateIsDisabled.Error(), types.ErrPolicyUpdateIsDisabled,
-			)
-		}
-
-		if in.IfMatch != "" {
-			current, err := currentPolicy(b)
-			if err != nil {
-				return nil, err
-			}
-
-			if !etagMatches(in.IfMatch, current) {
-				return nil, huma.Error412PreconditionFailed("precondition failed, invalid old hash")
-			}
-		}
-
-		// Mirror the v1 setPolicy flow: validate, SSH-check, persist, reload.
-		nodes := b.State.ListNodes()
-
-		_, err = b.State.SetPolicy(in.RawBody)
-		if err != nil {
-			return nil, huma.Error400BadRequest("setting policy", err)
-		}
-
-		if nodes.Len() > 0 {
-			_, err = b.State.SSHPolicy(nodes.At(0))
-			if err != nil {
-				return nil, huma.Error400BadRequest("verifying SSH rules", err)
-			}
-		}
-
-		updated, err := b.State.SetPolicyInDB(string(in.RawBody))
-		if err != nil {
-			return nil, huma.Error500InternalServerError("setting policy", err)
-		}
-
-		cs, err := b.State.ReloadPolicy()
-		if err != nil {
-			return nil, huma.Error500InternalServerError("reloading policy", err)
-		}
-
-		if len(cs) > 0 {
-			b.Change(cs...)
-		}
-
-		return streamPolicy([]byte(updated.Data), aclContentType(in.Accept)), nil
-	})
-}
-
-// currentPolicy returns the stored policy bytes, or the allow-all default when
-// none is set. File mode reads the configured path; DB mode reads the database.
-func currentPolicy(b Backend) ([]byte, error) {
-	switch b.Cfg.Policy.Mode {
-	case types.PolicyModeDB:
-		p, err := b.State.GetPolicy()
-		if err != nil {
-			if errors.Is(err, types.ErrPolicyNotFound) {
-				return []byte(defaultPolicy), nil
-			}
-
-			return nil, huma.Error500InternalServerError("loading policy", err)
-		}
-
-		if p.Data == "" {
-			return []byte(defaultPolicy), nil
-		}
-
-		return []byte(p.Data), nil
-
-	case types.PolicyModeFile:
-		path := util.AbsolutePathFromConfigPath(b.Cfg.Policy.Path)
-		if path == "" {
-			return []byte(defaultPolicy), nil
-		}
-
-		data, err := os.ReadFile(path)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("reading policy file", err)
-		}
-
-		return data, nil
-	}
-
-	return nil, huma.Error500InternalServerError("unsupported policy mode", nil)
-}
-
-// streamPolicy writes the policy bytes as-is with the chosen content type and
-// a content-addressed ETag, bypassing huma's JSON marshaler so HuJSON survives.
-func streamPolicy(data []byte, contentType string) *huma.StreamResponse {
-	return &huma.StreamResponse{Body: func(ctx huma.Context) {
-		ctx.SetHeader("Content-Type", contentType)
-		ctx.SetHeader("ETag", policyETag(data))
-		ctx.SetStatus(http.StatusOK)
-		_, _ = ctx.BodyWriter().Write(data)
-	}}
-}
-
-// aclContentType serves HuJSON only when explicitly asked; everything else
-// (including an empty Accept) gets application/json. The bytes are identical.
-func aclContentType(accept string) string {
-	if strings.Contains(accept, contentTypeHuJSON) {
-		return contentTypeHuJSON
-	}
-
-	return contentTypeJSON
-}
-
-// policyETag is the quoted hex SHA-256 of the policy bytes: stable across reads,
-// changes iff the policy changes.
-func policyETag(data []byte) string {
-	sum := sha256.Sum256(data)
-
-	return `"` + hex.EncodeToString(sum[:]) + `"`
-}
-
-// etagMatches reports whether an If-Match header satisfies the current policy.
-// "*" always matches; "ts-default" matches only when no policy is set (an
-// approximation of Tailscale's untouched-default semantics).
-func etagMatches(ifMatch string, current []byte) bool {
-	ifMatch = strings.TrimSpace(ifMatch)
-
-	switch ifMatch {
-	case "*":
-		return true
-	case `"ts-default"`, "ts-default":
-		return string(current) == defaultPolicy
-	default:
-		return ifMatch == policyETag(current)
-	}
-}
diff --git a/hscontrol/api/v2/api.go b/hscontrol/api/v2/api.go
deleted file mode 100644
index e42c51b83..000000000
--- a/hscontrol/api/v2/api.go
+++ /dev/null
@@ -1,325 +0,0 @@
-// Package apiv2 is Headscale's v2 HTTP API, served at /api/v2.
-//
-// Where the v1 API (hscontrol/api/v1) is the headscale-native admin surface, v2
-// additionally ports selected endpoints from Tailscale's API, reusing
-// Tailscale's wire shapes (paths, request/response JSON, error body), so the
-// existing Tailscale ecosystem (the Terraform/OpenTofu provider, tscli, and
-// tailscale.com/client/tailscale/v2) can drive Headscale unchanged. Ported
-// operations carry the "Tailscale compat" tag; a headscale-native v2 operation
-// may use headscale's own conventions instead. See README.md for the porting
-// guide.
-//
-// It depends only on the domain layer (hscontrol/state, hscontrol/types, and
-// the db error sentinels), never on the hscontrol server package, so it sits
-// beside the v1 API without either importing the other.
-package apiv2
-
-import (
-	"context"
-	"encoding/base64"
-	"maps"
-	"net/http"
-	"strings"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/danielgtaylor/huma/v2/adapters/humachi"
-	"github.com/go-chi/chi/v5"
-	"github.com/juanfont/headscale/hscontrol/scope"
-	"github.com/juanfont/headscale/hscontrol/state"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/types/change"
-)
-
-// Backend is the dependency surface the v2 API needs from the control plane:
-// the state layer, the change-notification sink that distributes node/policy
-// updates to connected clients, and the config (Policy.Mode/Path, Node.Expiry,
-// and TLS are read by the ACL and settings handlers).
-type Backend struct {
-	State  *state.State
-	Change func(...change.Change)
-	Cfg    *types.Config
-}
-
-// security is the requirement applied to authenticated operations: an API key
-// presented as HTTP Basic (the key as username, what the Tailscale SDK sends)
-// or as a Bearer token.
-var security = []map[string][]string{{"basicAuth": {}}, {"bearerAuth": {}}}
-
-// registrations is populated by each resource file's init(), so adding a
-// resource means adding a file rather than editing a shared list.
-var registrations []func(huma.API, Backend)
-
-// Register wires up every operation contributed by the resource files. Exported
-// so tests can register the v2 operations onto a humatest API.
-func Register(api huma.API, b Backend) {
-	for _, fn := range registrations {
-		fn(api, b)
-	}
-}
-
-// Config returns the Huma configuration shared by the production API and tests:
-// the v2 OpenAPI/docs paths, the basic+bearer security schemes, and the
-// Tailscale error transform. Suppressing SchemasPath/CreateHooks keeps "$schema"
-// out of the emitted bodies, matching the Tailscale wire contract.
-func Config() huma.Config {
-	config := huma.DefaultConfig("Headscale API", "v2")
-	config.Info.Description = "Headscale v2 API. Some endpoints are ported from / compatible with the Tailscale API (tagged \"Tailscale compat\")."
-
-	config.OpenAPIPath = "/api/v2/openapi"
-	config.DocsPath = "/api/v2/docs"
-	config.SchemasPath = ""
-	config.CreateHooks = nil
-
-	config.Components.SecuritySchemes = map[string]*huma.SecurityScheme{
-		"basicAuth":  {Type: "http", Scheme: "basic"},
-		"bearerAuth": {Type: "http", Scheme: "bearer"},
-	}
-
-	config.Transformers = append(config.Transformers, tailscaleErrorTransformer)
-
-	// Accept application/hujson request bodies (the Tailscale SDK sends the
-	// policy file that way). The bytes are captured raw by the ACL handler, so
-	// reusing the JSON format is only to satisfy huma's content-type check.
-	// Clone first: config.Formats aliases huma's shared DefaultFormats map.
-	formats := maps.Clone(config.Formats)
-	formats["application/hujson"] = formats["application/json"]
-	config.Formats = formats
-
-	return config
-}
-
-// NewAPI builds the v2 Huma API on router, installs the auth+scope middleware,
-// and registers every operation.
-func NewAPI(router chi.Router, backend Backend) huma.API {
-	api := humachi.New(router, Config())
-
-	// Must run before Register: Huma snapshots the middleware chain at operation
-	// registration, so a middleware added afterwards would silently never run.
-	api.UseMiddleware(authMiddleware(api, backend))
-
-	Register(api, backend)
-
-	// The OAuth token endpoint is a plain route, not a Huma operation (see
-	// oauth.go); register it on the same router.
-	registerOAuthToken(router, backend)
-
-	return api
-}
-
-// Handler builds the v2 API on a fresh mux and returns both, for mounting.
-func Handler(backend Backend) (*chi.Mux, huma.API) {
-	mux := chi.NewMux()
-	api := NewAPI(mux, backend)
-
-	return mux, api
-}
-
-// Spec emits the OpenAPI 3.1 document. The zero Backend is safe because
-// handlers are registered but never invoked during emission.
-func Spec() ([]byte, error) {
-	api := NewAPI(chi.NewMux(), Backend{})
-
-	return api.OpenAPI().YAML()
-}
-
-// Spec30 emits the document downgraded to OpenAPI 3.0.3, needed because
-// oapi-codegen cannot yet read 3.1; the typed client is generated from this.
-func Spec30() ([]byte, error) {
-	api := NewAPI(chi.NewMux(), Backend{})
-
-	return api.OpenAPI().DowngradeYAML()
-}
-
-type contextKey int
-
-const (
-	localTrustKey contextKey = iota
-	ownerUserKey
-	principalScopesKey
-	principalTagsKey
-)
-
-// WithLocalTrust marks a request as arriving over a locally-trusted transport
-// (the unix socket), bypassing API-key authentication. Reserved for a future
-// v2 socket mount; the network listener always authenticates.
-func WithLocalTrust(next http.Handler) http.Handler {
-	return http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
-		next.ServeHTTP(w, req.WithContext(
-			context.WithValue(req.Context(), localTrustKey, struct{}{}),
-		))
-	})
-}
-
-// authMiddleware authenticates the API key (HTTP Basic with the key as the
-// username, what the Tailscale SDK sends, or Bearer), records the key's owning
-// user for handlers, and enforces the operation's required scope.
-func authMiddleware(api huma.API, b Backend) func(huma.Context, func(huma.Context)) {
-	return func(ctx huma.Context, next func(huma.Context)) {
-		if ctx.Context().Value(localTrustKey) != nil {
-			next(ctx)
-
-			return
-		}
-
-		if len(ctx.Operation().Security) == 0 {
-			next(ctx)
-
-			return
-		}
-
-		token, ok := bearerOrBasicToken(ctx.Header("Authorization"))
-		if !ok {
-			_ = huma.WriteErr(api, ctx, http.StatusUnauthorized, "unauthorized")
-
-			return
-		}
-
-		// An OAuth access token is scope-limited; an admin API key is all-access.
-		// They are told apart by prefix so a scoped token can never be mistaken
-		// for an all-access key.
-		if strings.HasPrefix(token, types.AccessTokenPrefix) {
-			at, err := b.State.AuthenticateAccessToken(token)
-			if err != nil {
-				_ = huma.WriteErr(api, ctx, http.StatusUnauthorized, "unauthorized")
-
-				return
-			}
-
-			if want, ok := requiredScope(ctx.Operation()); ok && !scope.Grants(scope.Parse(at.Scopes), want) {
-				_ = huma.WriteErr(api, ctx, http.StatusForbidden,
-					"token is missing the required scope "+string(want))
-
-				return
-			}
-
-			// The keys handler multiplexes on keyType, so its required scope and
-			// permitted tags depend on the body; carry the token's scopes and tags
-			// for it to finish the check the static middleware cannot.
-			ctx = huma.WithValue(ctx, principalScopesKey, at.Scopes)
-			ctx = huma.WithValue(ctx, principalTagsKey, at.Tags)
-
-			next(ctx)
-
-			return
-		}
-
-		key, err := b.State.AuthenticateAPIKey(token)
-		if err != nil {
-			_ = huma.WriteErr(api, ctx, http.StatusUnauthorized, "unauthorized")
-
-			return
-		}
-
-		// An admin API key is all-access: its operations are not scope-checked.
-		// Record its owning user (may be unset) so handlers can create user-owned
-		// keys on its behalf.
-		if key.UserID != nil {
-			ctx = huma.WithValue(ctx, ownerUserKey, types.UserID(*key.UserID))
-		}
-
-		next(ctx)
-	}
-}
-
-// bearerOrBasicToken extracts the API key from an Authorization header. The
-// Tailscale SDK sends the key as the Basic-auth username with an empty
-// password; curl and humans may use Bearer.
-func bearerOrBasicToken(header string) (string, bool) {
-	if token, ok := strings.CutPrefix(header, "Bearer "); ok {
-		return token, token != ""
-	}
-
-	if encoded, ok := strings.CutPrefix(header, "Basic "); ok {
-		raw, err := base64.StdEncoding.DecodeString(encoded)
-		if err != nil {
-			return "", false
-		}
-
-		username, _, _ := strings.Cut(string(raw), ":")
-
-		return username, username != ""
-	}
-
-	return "", false
-}
-
-// ownerUser returns the user the request's API key belongs to, if any.
-func ownerUser(ctx context.Context) (types.UserID, bool) {
-	uid, ok := ctx.Value(ownerUserKey).(types.UserID)
-
-	return uid, ok
-}
-
-// principalScopes returns the scopes granted to the request's OAuth access
-// token, and whether the request authenticated with one. ok is false for an
-// admin API key, which is all-access and not scope-checked.
-func principalScopes(ctx context.Context) ([]string, bool) {
-	scopes, ok := ctx.Value(principalScopesKey).([]string)
-
-	return scopes, ok
-}
-
-// principalTags returns the tags granted to the request's OAuth access token,
-// and whether the request authenticated with one. An admin API key is not an
-// OAuth token, so ok is false and its key creation is unrestricted by tags.
-func principalTags(ctx context.Context) ([]string, bool) {
-	tags, ok := ctx.Value(principalTagsKey).([]string)
-
-	return tags, ok
-}
-
-// requireDefaultTailnet rejects any tailnet other than "-". Headscale is
-// single-tailnet; the Tailscale SDK sends "-" (its default tailnet). A non-"-"
-// value is "no such tailnet", a 404, which lets the SDK's IsNotFound behave.
-func requireDefaultTailnet(tailnet string) error {
-	if tailnet != "-" {
-		return huma.Error404NotFound("tailnet not found")
-	}
-
-	return nil
-}
-
-// The scope vocabulary and the grant predicate live in the hscontrol/scope
-// package; this file only wires a required scope onto each huma operation and
-// reads it back in the middleware.
-
-// scopeMetaKey keys the per-operation required scope in huma.Operation.Metadata.
-const scopeMetaKey = "headscale.scope"
-
-// requireScope records op's required scope, both in its Metadata (where the auth
-// middleware reads it back) and in the generated OpenAPI document: an
-// x-required-scope extension for machine consumers and a Description line so the
-// rendered docs state what each operation needs.
-func requireScope(op huma.Operation, s scope.Scope) huma.Operation {
-	if op.Metadata == nil {
-		op.Metadata = map[string]any{}
-	}
-
-	op.Metadata[scopeMetaKey] = s
-
-	if op.Extensions == nil {
-		op.Extensions = map[string]any{}
-	}
-
-	op.Extensions["x-required-scope"] = string(s)
-
-	note := "Requires the `" + string(s) + "` OAuth scope (an admin API key is all-access)."
-	if op.Description == "" {
-		op.Description = note
-	} else {
-		op.Description += "\n\n" + note
-	}
-
-	return op
-}
-
-// requiredScope returns the scope an operation declared via requireScope, if any.
-func requiredScope(op *huma.Operation) (scope.Scope, bool) {
-	if op == nil || op.Metadata == nil {
-		return "", false
-	}
-
-	s, ok := op.Metadata[scopeMetaKey].(scope.Scope)
-
-	return s, ok
-}
diff --git a/hscontrol/api/v2/devices.go b/hscontrol/api/v2/devices.go
deleted file mode 100644
index 5bdb553f8..000000000
--- a/hscontrol/api/v2/devices.go
+++ /dev/null
@@ -1,486 +0,0 @@
-package apiv2
-
-import (
-	"context"
-	"net/http"
-	"net/netip"
-	"slices"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/scope"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-	"tailscale.com/net/tsaddr"
-)
-
-func init() {
-	registrations = append(registrations, registerDevices)
-}
-
-// Device is the Tailscale device response. Headscale nodes map onto it; fields
-// Headscale does not track are emitted as their zero value. The route slices
-// are only populated for the fields=all variant, matching Tailscale.
-type Device struct {
-	Addresses         []string   `json:"addresses"          nullable:"false"`
-	Name              string     `json:"name"`
-	ID                string     `json:"id"`
-	NodeID            string     `json:"nodeId"`
-	Authorized        bool       `json:"authorized"`
-	User              string     `json:"user"`
-	Tags              []string   `json:"tags"               nullable:"false"`
-	KeyExpiryDisabled bool       `json:"keyExpiryDisabled"`
-	Created           time.Time  `json:"created"`
-	Expires           *time.Time `json:"expires,omitempty"`
-	Hostname          string     `json:"hostname"`
-	IsEphemeral       bool       `json:"isEphemeral"`
-	LastSeen          *time.Time `json:"lastSeen,omitempty"`
-	MachineKey        string     `json:"machineKey"`
-	NodeKey           string     `json:"nodeKey"`
-	OS                string     `json:"os"`
-	ClientVersion     string     `json:"clientVersion"`
-	UpdateAvailable   bool       `json:"updateAvailable"`
-
-	// Populated only when fields=all is requested.
-	AdvertisedRoutes []string `json:"advertisedRoutes,omitempty"`
-	EnabledRoutes    []string `json:"enabledRoutes,omitempty"`
-}
-
-// DeviceRoutes is the GET /device/{id}/routes response: what the node announces
-// vs which of those are approved (Tailscale calls approved routes "enabled").
-type DeviceRoutes struct {
-	Advertised []string `json:"advertisedRoutes" nullable:"false"`
-	Enabled    []string `json:"enabledRoutes"    nullable:"false"`
-}
-
-// Request bodies match the Tailscale SDK wire shapes.
-type (
-	setAuthorizedRequest struct {
-		Authorized bool `json:"authorized"`
-	}
-	setNameRequest struct {
-		Name string `json:"name"`
-	}
-	// setTagsRequest.Tags is intentionally not nullable:"false": the SDK sends
-	// "tags":null for "make untagged", which the handler accepts as a no-op
-	// rather than failing to decode (Headscale cannot untag a node).
-	setTagsRequest struct {
-		Tags []string `json:"tags"`
-	}
-	setKeyRequest struct {
-		KeyExpiryDisabled bool `json:"keyExpiryDisabled"`
-	}
-	setSubnetRoutesRequest struct {
-		Routes []string `json:"routes" nullable:"false"`
-	}
-)
-
-type (
-	deviceByIDInput struct {
-		DeviceID string `doc:"Device id (the decimal node id)." path:"id"`
-		Fields   string `doc:"Set to \"all\" for route fields." query:"fields"`
-	}
-	listDevicesInput struct {
-		Tailnet string `doc:"Tailnet; must be \"-\"." path:"tailnet"`
-		Fields  string `query:"fields"`
-	}
-	setAuthorizedInput struct {
-		DeviceID string `path:"id"`
-		Body     setAuthorizedRequest
-	}
-	setNameInput struct {
-		DeviceID string `path:"id"`
-		Body     setNameRequest
-	}
-	setTagsInput struct {
-		DeviceID string `path:"id"`
-		Body     setTagsRequest
-	}
-	setKeyInput struct {
-		DeviceID string `path:"id"`
-		Body     setKeyRequest
-	}
-	setSubnetRoutesInput struct {
-		DeviceID string `path:"id"`
-		Body     setSubnetRoutesRequest
-	}
-
-	deviceOutput       struct{ Body Device }
-	deviceRoutesOutput struct{ Body DeviceRoutes }
-	listDevicesOutput  struct {
-		Body struct {
-			Devices []Device `json:"devices" nullable:"false"`
-		}
-	}
-	emptyOutput struct{ Body struct{} }
-)
-
-func registerDevices(api huma.API, b Backend) {
-	deviceTags := []string{"Devices", "Tailscale compat"}
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID: "getDevice",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/device/{id}",
-		Summary:     "Get a device",
-		Tags:        deviceTags,
-		Security:    security,
-		Errors:      []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesCoreRead), func(ctx context.Context, in *deviceByIDInput) (*deviceOutput, error) {
-		node, err := lookupNode(b, in.DeviceID)
-		if err != nil {
-			return nil, err
-		}
-
-		return &deviceOutput{Body: deviceFromView(node, in.Fields == "all")}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID: "listDevices",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/tailnet/{tailnet}/devices",
-		Summary:     "List devices",
-		Tags:        deviceTags,
-		Security:    security,
-		Errors:      []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesCoreRead), func(ctx context.Context, in *listDevicesInput) (*listDevicesOutput, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		nodes := b.State.ListNodes()
-		allFields := in.Fields == "all"
-
-		out := &listDevicesOutput{}
-		out.Body.Devices = make([]Device, 0, nodes.Len())
-
-		for _, node := range nodes.All() {
-			out.Body.Devices = append(out.Body.Devices, deviceFromView(node, allFields))
-		}
-
-		return out, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID:   "deleteDevice",
-		Method:        http.MethodDelete,
-		Path:          "/api/v2/device/{id}",
-		Summary:       "Delete a device",
-		Tags:          deviceTags,
-		Security:      security,
-		DefaultStatus: http.StatusOK,
-		Errors:        []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesCore), func(ctx context.Context, in *deviceByIDInput) (*emptyOutput, error) {
-		node, err := lookupNode(b, in.DeviceID)
-		if err != nil {
-			return nil, err
-		}
-
-		nodeChange, err := b.State.DeleteNode(node)
-		if err != nil {
-			return nil, mapError("deleting device", err)
-		}
-
-		b.Change(nodeChange)
-
-		return &emptyOutput{}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID:   "authorizeDevice",
-		Method:        http.MethodPost,
-		Path:          "/api/v2/device/{id}/authorized",
-		Summary:       "Authorize a device",
-		Tags:          deviceTags,
-		Security:      security,
-		DefaultStatus: http.StatusOK,
-		Errors:        []int{http.StatusBadRequest, http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesCore), func(ctx context.Context, in *setAuthorizedInput) (*emptyOutput, error) {
-		_, err := lookupNode(b, in.DeviceID)
-		if err != nil {
-			return nil, err
-		}
-
-		// Headscale nodes are authorized the moment they register; there is no
-		// de-authorize state. Accept authorized=true as a no-op; reject false so
-		// callers are not misled into thinking the device is fenced off.
-		if !in.Body.Authorized {
-			return nil, huma.Error400BadRequest(
-				"Headscale does not support de-authorizing a device; delete or expire it instead",
-			)
-		}
-
-		return &emptyOutput{}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID:   "setDeviceName",
-		Method:        http.MethodPost,
-		Path:          "/api/v2/device/{id}/name",
-		Summary:       "Set a device's name",
-		Tags:          deviceTags,
-		Security:      security,
-		DefaultStatus: http.StatusOK,
-		Errors:        []int{http.StatusBadRequest, http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesCore), func(ctx context.Context, in *setNameInput) (*emptyOutput, error) {
-		node, err := lookupNode(b, in.DeviceID)
-		if err != nil {
-			return nil, err
-		}
-
-		_, nodeChange, err := b.State.RenameNode(node.ID(), in.Body.Name)
-		if err != nil {
-			return nil, mapError("renaming device", err)
-		}
-
-		b.Change(nodeChange)
-
-		return &emptyOutput{}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID:   "setDeviceTags",
-		Method:        http.MethodPost,
-		Path:          "/api/v2/device/{id}/tags",
-		Summary:       "Set a device's tags",
-		Tags:          deviceTags,
-		Security:      security,
-		DefaultStatus: http.StatusOK,
-		Errors:        []int{http.StatusBadRequest, http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesCore), func(ctx context.Context, in *setTagsInput) (*emptyOutput, error) {
-		node, err := lookupNode(b, in.DeviceID)
-		if err != nil {
-			return nil, err
-		}
-
-		// Headscale cannot make a node untagged (tags-as-identity is one-way), so
-		// an empty/null tag set is accepted as a no-op rather than rejected. This
-		// keeps tooling lifecycles such as Terraform destroy working; the SDK
-		// sends "tags":null for "make untagged".
-		if len(in.Body.Tags) == 0 {
-			return &emptyOutput{}, nil
-		}
-
-		// An OAuth token may only assign tags within its grant (held directly or
-		// owned by a held tag per policy); an admin API key is unrestricted. The
-		// devices:core scope alone must not let a token stamp an arbitrary policy
-		// tag (e.g. tag:prod) onto any node. SetNodeTags still enforces that each
-		// tag exists in policy.
-		if tokenTags, isOAuth := principalTags(ctx); isOAuth {
-			for _, tag := range in.Body.Tags {
-				if !b.State.TagOwnedByTags(tag, tokenTags) {
-					return nil, huma.Error403Forbidden("token may not assign tag " + tag)
-				}
-			}
-		}
-
-		_, nodeChange, err := b.State.SetNodeTags(node.ID(), in.Body.Tags)
-		if err != nil {
-			return nil, mapError("setting device tags", err)
-		}
-
-		b.Change(nodeChange)
-
-		return &emptyOutput{}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID:   "setDeviceKey",
-		Method:        http.MethodPost,
-		Path:          "/api/v2/device/{id}/key",
-		Summary:       "Set a device's key settings",
-		Tags:          deviceTags,
-		Security:      security,
-		DefaultStatus: http.StatusOK,
-		Errors:        []int{http.StatusBadRequest, http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesCore), func(ctx context.Context, in *setKeyInput) (*emptyOutput, error) {
-		node, err := lookupNode(b, in.DeviceID)
-		if err != nil {
-			return nil, err
-		}
-
-		// Only disabling expiry maps cleanly (expiry=nil never expires).
-		// Re-enabling has no target expiry in the Tailscale request and Headscale
-		// stores no original, so it is accepted as a no-op (keeps Terraform
-		// destroy working) rather than guessing a lifetime.
-		if !in.Body.KeyExpiryDisabled {
-			return &emptyOutput{}, nil
-		}
-
-		_, nodeChange, err := b.State.SetNodeExpiry(node.ID(), nil)
-		if err != nil {
-			return nil, mapError("setting device key expiry", err)
-		}
-
-		b.Change(nodeChange)
-
-		return &emptyOutput{}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID:   "setDeviceRoutes",
-		Method:        http.MethodPost,
-		Path:          "/api/v2/device/{id}/routes",
-		Summary:       "Set a device's enabled subnet routes",
-		Tags:          deviceTags,
-		Security:      security,
-		DefaultStatus: http.StatusOK,
-		Errors:        []int{http.StatusBadRequest, http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesRoutes), func(ctx context.Context, in *setSubnetRoutesInput) (*deviceRoutesOutput, error) {
-		node, err := lookupNode(b, in.DeviceID)
-		if err != nil {
-			return nil, err
-		}
-
-		approved, err := parseRoutes(in.Body.Routes)
-		if err != nil {
-			return nil, err
-		}
-
-		updated, nodeChange, err := b.State.SetApprovedRoutes(node.ID(), approved)
-		if err != nil {
-			return nil, mapError("setting device routes", err)
-		}
-
-		b.Change(nodeChange)
-
-		return &deviceRoutesOutput{Body: routesFromView(updated)}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID: "getDeviceRoutes",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/device/{id}/routes",
-		Summary:     "Get a device's subnet routes",
-		Tags:        deviceTags,
-		Security:    security,
-		Errors:      []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.DevicesRoutesRead), func(ctx context.Context, in *deviceByIDInput) (*deviceRoutesOutput, error) {
-		node, err := lookupNode(b, in.DeviceID)
-		if err != nil {
-			return nil, err
-		}
-
-		return &deviceRoutesOutput{Body: routesFromView(node)}, nil
-	})
-}
-
-// lookupNode resolves a device id to its NodeView, mapping a malformed or
-// unknown id to 404 (the Tailscale SDK keys IsNotFound off the status code).
-func lookupNode(b Backend, rawID string) (types.NodeView, error) {
-	nodeID, err := parseNodeID(rawID)
-	if err != nil {
-		return types.NodeView{}, err
-	}
-
-	node, ok := b.State.GetNodeByID(nodeID)
-	if !ok {
-		return types.NodeView{}, huma.Error404NotFound("device not found")
-	}
-
-	return node, nil
-}
-
-// parseRoutes parses the enabled-route strings, expanding an exit route to both
-// families (else the node is not annotated as an exit node), then sorts/dedups.
-func parseRoutes(routes []string) ([]netip.Prefix, error) {
-	var approved []netip.Prefix
-
-	for _, route := range routes {
-		prefix, err := netip.ParsePrefix(route)
-		if err != nil {
-			return nil, huma.Error400BadRequest("parsing route", err)
-		}
-
-		if prefix == tsaddr.AllIPv4() || prefix == tsaddr.AllIPv6() {
-			approved = append(approved, tsaddr.AllIPv4(), tsaddr.AllIPv6())
-		} else {
-			approved = append(approved, prefix)
-		}
-	}
-
-	slices.SortFunc(approved, netip.Prefix.Compare)
-
-	return slices.Compact(approved), nil
-}
-
-// deviceFromView maps a Headscale node onto the Tailscale Device, reading
-// through the [types.NodeView] accessors. allFields gates the route slices,
-// which Tailscale only returns for fields=all.
-func deviceFromView(view types.NodeView, allFields bool) Device {
-	id := view.StringID()
-
-	d := Device{
-		Addresses:         emptyIfNil(view.IPsAsString()),
-		Name:              view.GivenName(),
-		ID:                id,
-		NodeID:            id,
-		Authorized:        true, // Headscale has no post-registration de-auth state.
-		User:              deviceUser(view),
-		Tags:              emptyIfNil(view.Tags().AsSlice()),
-		KeyExpiryDisabled: !view.Expiry().Valid(),
-		Created:           view.CreatedAt(),
-		Hostname:          view.Hostname(),
-		IsEphemeral:       view.IsEphemeral(),
-		MachineKey:        view.MachineKey().String(),
-		NodeKey:           view.NodeKey().String(),
-		OS:                hostinfoOS(view),
-		ClientVersion:     hostinfoVersion(view),
-	}
-
-	if view.Expiry().Valid() {
-		exp := view.Expiry().Get()
-		d.Expires = &exp
-	}
-
-	// LastSeen is reported only when the device is offline, matching tailcfg.
-	if view.LastSeen().Valid() && view.IsOnline().Valid() && !view.IsOnline().Get() {
-		ls := view.LastSeen().Get()
-		d.LastSeen = &ls
-	}
-
-	if allFields {
-		d.AdvertisedRoutes = emptyIfNil(util.PrefixesToString(view.AnnouncedRoutes()))
-		d.EnabledRoutes = emptyIfNil(util.PrefixesToString(view.ApprovedRoutes().AsSlice()))
-	}
-
-	return d
-}
-
-func routesFromView(view types.NodeView) DeviceRoutes {
-	return DeviceRoutes{
-		Advertised: emptyIfNil(util.PrefixesToString(view.AnnouncedRoutes())),
-		Enabled:    emptyIfNil(util.PrefixesToString(view.ApprovedRoutes().AsSlice())),
-	}
-}
-
-// deviceUser is the owning login. [types.NodeView.Owner] already resolves the
-// tags-as-identity rule: tagged nodes present the special TaggedDevices user,
-// user-owned nodes present their login, orphaned nodes present nothing.
-func deviceUser(view types.NodeView) string {
-	owner := view.Owner()
-	if owner.Valid() {
-		return owner.Username()
-	}
-
-	return ""
-}
-
-// hostinfoOS / hostinfoVersion read Hostinfo fields, returning "" when the node
-// has not reported Hostinfo yet.
-func hostinfoOS(view types.NodeView) string {
-	if hi := view.Hostinfo(); hi.Valid() {
-		return hi.OS()
-	}
-
-	return ""
-}
-
-func hostinfoVersion(view types.NodeView) string {
-	if hi := view.Hostinfo(); hi.Valid() {
-		return hi.IPNVersion()
-	}
-
-	return ""
-}
diff --git a/hscontrol/api/v2/errors.go b/hscontrol/api/v2/errors.go
deleted file mode 100644
index cf5110e2f..000000000
--- a/hscontrol/api/v2/errors.go
+++ /dev/null
@@ -1,84 +0,0 @@
-package apiv2
-
-import (
-	"errors"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/juanfont/headscale/hscontrol/state"
-	"gorm.io/gorm"
-)
-
-// apiError is the Tailscale API error body. The official Tailscale Go client
-// (and therefore the Terraform provider and tscli built on it) decodes 4xx/5xx
-// responses into this shape. Huma's default RFC 9457 problem+json would reach
-// them with an empty message, so tailscaleErrorTransformer rewrites every v2
-// error into this shape. The HTTP status is read from the response code, not
-// from the body's status field.
-type apiError struct {
-	Message string         `json:"message"`
-	Data    []apiErrorData `json:"data,omitempty"`
-	Status  int            `json:"status"`
-}
-
-type apiErrorData struct {
-	User   string   `json:"user,omitempty"`
-	Errors []string `json:"errors,omitempty"`
-}
-
-// tailscaleErrorTransformer rewrites Huma's RFC 9457 error model into the
-// Tailscale error shape. It is registered on the v2 API config only, so the
-// headscale-native v1 API keeps emitting problem+json. Non-error bodies pass
-// through untouched.
-func tailscaleErrorTransformer(_ huma.Context, _ string, v any) (any, error) {
-	em, ok := v.(*huma.ErrorModel)
-	if !ok {
-		return v, nil
-	}
-
-	message := em.Detail
-	if message == "" {
-		message = em.Title
-	}
-
-	out := apiError{Message: message, Status: em.Status}
-
-	if len(em.Errors) > 0 {
-		details := make([]string, 0, len(em.Errors))
-		for _, d := range em.Errors {
-			details = append(details, d.Error())
-		}
-
-		out.Data = []apiErrorData{{Errors: details}}
-	}
-
-	return out, nil
-}
-
-// mapError translates a state/db-layer error into a Huma HTTP error
-// (not-found→404, invalid input→400, everything else→500). The transformer
-// then reshapes it into the Tailscale body.
-func mapError(msg string, err error) error {
-	if err == nil {
-		return nil
-	}
-
-	switch {
-	case errors.Is(err, gorm.ErrRecordNotFound),
-		errors.Is(err, db.ErrPreAuthKeyNotFound),
-		errors.Is(err, db.ErrUserNotFound),
-		errors.Is(err, state.ErrNodeNotFound):
-		return huma.Error404NotFound(msg, err)
-
-	case errors.Is(err, db.ErrPreAuthKeyNotTaggedOrOwned),
-		errors.Is(err, db.ErrPreAuthKeyACLTagInvalid),
-		errors.Is(err, state.ErrGivenNameInvalid),
-		errors.Is(err, state.ErrGivenNameTaken),
-		errors.Is(err, state.ErrNodeNameNotUnique),
-		errors.Is(err, state.ErrRequestedTagsInvalidOrNotPermitted):
-		return huma.Error400BadRequest(msg, err)
-
-	default:
-		return huma.Error500InternalServerError(msg, err)
-	}
-}
diff --git a/hscontrol/api/v2/guard_test.go b/hscontrol/api/v2/guard_test.go
deleted file mode 100644
index 7d52e0c79..000000000
--- a/hscontrol/api/v2/guard_test.go
+++ /dev/null
@@ -1,58 +0,0 @@
-package apiv2
-
-import (
-	"testing"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/go-chi/chi/v5"
-	"github.com/juanfont/headscale/hscontrol/scope"
-)
-
-// selfEnforcedKeyOps are the authenticated operations that intentionally declare
-// NO static scope because they multiplex on keyType and authorize inside the
-// handler via requireKeyScope (see keys.go). Every other authenticated operation
-// must declare a scope.
-var selfEnforcedKeyOps = map[string]bool{
-	"POST /api/v2/tailnet/{tailnet}/keys":           true,
-	"GET /api/v2/tailnet/{tailnet}/keys":            true,
-	"GET /api/v2/tailnet/{tailnet}/keys/{keyId}":    true,
-	"DELETE /api/v2/tailnet/{tailnet}/keys/{keyId}": true,
-}
-
-// TestEveryAuthenticatedOperationDeclaresScope is the structural guarantee that no
-// v2 operation ships unprotected: any operation that requires authentication
-// (non-empty Security) must either declare a required scope via requireScope, or
-// be one of the keyType-multiplexed keys operations that self-enforce. A new
-// operation added without scope protection fails this test.
-func TestEveryAuthenticatedOperationDeclaresScope(t *testing.T) {
-	api := NewAPI(chi.NewMux(), Backend{})
-
-	for path, item := range api.OpenAPI().Paths {
-		for method, op := range humaOperations(item) {
-			if op == nil || len(op.Security) == 0 {
-				continue // unregistered method or a public operation
-			}
-
-			key := method + " " + path
-			if selfEnforcedKeyOps[key] {
-				continue
-			}
-
-			if _, ok := op.Metadata[scopeMetaKey].(scope.Scope); !ok {
-				t.Errorf("operation %q is authenticated but declares no required scope; "+
-					"wrap it in requireScope, or add it to selfEnforcedKeyOps if it "+
-					"authorizes inside the handler", key)
-			}
-		}
-	}
-}
-
-func humaOperations(item *huma.PathItem) map[string]*huma.Operation {
-	return map[string]*huma.Operation{
-		"GET":    item.Get,
-		"POST":   item.Post,
-		"PUT":    item.Put,
-		"DELETE": item.Delete,
-		"PATCH":  item.Patch,
-	}
-}
diff --git a/hscontrol/api/v2/helpers.go b/hscontrol/api/v2/helpers.go
deleted file mode 100644
index aad0392d0..000000000
--- a/hscontrol/api/v2/helpers.go
+++ /dev/null
@@ -1,69 +0,0 @@
-package apiv2
-
-import (
-	"math"
-	"strconv"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-)
-
-// emptyIfNil ensures a slice serializes as [] rather than null, which the
-// Tailscale clients expect for empty list fields.
-func emptyIfNil(s []string) []string {
-	if s == nil {
-		return []string{}
-	}
-
-	return s
-}
-
-// parseID parses a decimal entity id from a path segment. A non-numeric id is
-// simply an unknown entity, surfaced as a 404 naming subject (e.g. "auth key"),
-// so the Tailscale SDK's IsNotFound behaves.
-func parseID(rawID, subject string) (uint64, error) {
-	id, err := strconv.ParseUint(rawID, util.Base10, util.BitSize64)
-	if err != nil {
-		return 0, huma.Error404NotFound(subject + " not found")
-	}
-
-	return id, nil
-}
-
-// parseNodeID parses a device id path segment into a [types.NodeID].
-func parseNodeID(rawID string) (types.NodeID, error) {
-	id, err := parseID(rawID, "device")
-	if err != nil {
-		return 0, err
-	}
-
-	return types.NodeID(id), nil
-}
-
-// timeOrZero dereferences a time pointer, returning the zero time for nil.
-func timeOrZero(t *time.Time) time.Time {
-	if t == nil {
-		return time.Time{}
-	}
-
-	return *t
-}
-
-// expirySeconds reports the lifetime between created and expires in whole
-// seconds, the unit the Tailscale spec documents for the response field. The
-// lifetime is rounded because the stored expiration is stamped a hair before
-// CreatedAt, so an 86400s request would otherwise read back as 86399.
-func expirySeconds(created, expires *time.Time) int64 {
-	if created == nil || expires == nil {
-		return 0
-	}
-
-	secs := int64(math.Round(expires.Sub(*created).Seconds()))
-	if secs < 0 {
-		return 0
-	}
-
-	return secs
-}
diff --git a/hscontrol/api/v2/keys.go b/hscontrol/api/v2/keys.go
deleted file mode 100644
index 552109136..000000000
--- a/hscontrol/api/v2/keys.go
+++ /dev/null
@@ -1,593 +0,0 @@
-package apiv2
-
-import (
-	"context"
-	"net/http"
-	"strconv"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/scope"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-)
-
-func init() {
-	registrations = append(registrations, registerKeys)
-}
-
-// defaultExpiry is the auth-key lifetime when the request omits expirySeconds:
-// 90 days, matching Tailscale and the Terraform provider default.
-const defaultExpiry = 90 * 24 * time.Hour
-
-const (
-	// keyTypeAuth is a machine auth key (Headscale pre-auth key); the default.
-	keyTypeAuth = "auth"
-	// keyTypeClient is an OAuth client (client-credentials). Multiplexed onto the
-	// keys resource exactly as Tailscale does.
-	keyTypeClient = "client"
-)
-
-// KeyCapabilities maps a resource to the actions a key permits. Headscale
-// populates only devices.create (auth keys); the named types (vs Tailscale's
-// anonymous nesting) give Huma stable schema names.
-type KeyCapabilities struct {
-	Devices KeyDeviceCapabilities `json:"devices"`
-}
-
-type KeyDeviceCapabilities struct {
-	Create KeyDeviceCreateCapabilities `json:"create"`
-}
-
-type KeyDeviceCreateCapabilities struct {
-	Reusable      bool `json:"reusable"`
-	Ephemeral     bool `json:"ephemeral"`
-	Preauthorized bool `json:"preauthorized"`
-	// Tags is not nullable:"false": the Tailscale clients send "tags":null for
-	// an untagged key, which must be accepted. The response always emits [] via
-	// emptyIfNil.
-	Tags []string `json:"tags"`
-}
-
-// CreateKeyRequest is the POST body. It is multiplexed by keyType: "auth"
-// (default) creates a machine auth key from Capabilities; "client" creates an
-// OAuth client from the top-level Scopes and Tags. expirySeconds is plain
-// seconds (unlike the response, see Key).
-type CreateKeyRequest struct {
-	KeyType string `doc:"Key kind: \"auth\" (default) or \"client\" (OAuth client)." json:"keyType,omitempty"`
-	// Capabilities is optional: an auth key carries device-create capabilities,
-	// but an OAuth client (keyType:"client") has none and the Tailscale clients
-	// omit the field entirely, so it must not be required.
-	Capabilities  *KeyCapabilities `json:"capabilities,omitempty"`
-	ExpirySeconds int64            `doc:"Lifetime in seconds; defaults to 90 days. Auth keys only." json:"expirySeconds,omitempty"`
-	Description   string           `json:"description,omitempty"                                    maxLength:"50"`
-	// Scopes and Tags are top-level and apply only to keyType "client" (an OAuth
-	// client). Auth-key tags live under Capabilities.Devices.Create.Tags.
-	Scopes []string `doc:"OAuth scopes granted to the client. keyType=client only." json:"scopes,omitempty"`
-	Tags   []string `doc:"Tags the client may assign. keyType=client only."         json:"tags,omitempty"`
-}
-
-// Key is the Tailscale key response, shared by auth keys and OAuth clients.
-// expirySeconds is emitted in seconds to match the Tailscale spec; the secret
-// key is present only at creation.
-type Key struct {
-	ID            string          `json:"id"`
-	KeyType       string          `json:"keyType"`
-	Key           string          `json:"key,omitempty"`
-	Description   string          `json:"description,omitempty"`
-	ExpirySeconds int64           `json:"expirySeconds,omitempty"`
-	Created       time.Time       `json:"created"`
-	Expires       *time.Time      `json:"expires,omitempty"`
-	Revoked       *time.Time      `json:"revoked,omitempty"`
-	Invalid       bool            `json:"invalid"`
-	Capabilities  KeyCapabilities `json:"capabilities"`
-	Scopes        []string        `json:"scopes,omitempty"`
-	Tags          []string        `json:"tags,omitempty"`
-	UserID        string          `json:"userId,omitempty"`
-}
-
-type (
-	createKeyInput struct {
-		Tailnet string `doc:"Tailnet; must be \"-\" (the single Headscale tailnet)." path:"tailnet"`
-		Body    CreateKeyRequest
-	}
-
-	listKeysInput struct {
-		Tailnet string `path:"tailnet"`
-		All     bool   `doc:"Accepted for compatibility; Headscale returns all keys." query:"all"`
-	}
-
-	keyByIDInput struct {
-		Tailnet string `path:"tailnet"`
-		KeyID   string `path:"keyId"`
-	}
-
-	keyOutput struct {
-		Body Key
-	}
-
-	listKeysOutput struct {
-		Body struct {
-			Keys []Key `json:"keys" nullable:"false"`
-		}
-	}
-
-	deleteKeyOutput struct {
-		Body struct{}
-	}
-)
-
-// The keys resource is multiplexed by keyType (auth key vs OAuth client), so the
-// scope an operation requires depends on the request rather than being fixed.
-// requireScope (which the middleware enforces statically) is therefore omitted
-// here; each handler authorizes via requireKeyScope once the kind is known.
-func registerKeys(api huma.API, b Backend) {
-	keysTags := []string{"Keys", "Tailscale compat"}
-
-	huma.Register(api, huma.Operation{
-		OperationID: "createKey",
-		Method:      http.MethodPost,
-		Path:        "/api/v2/tailnet/{tailnet}/keys",
-		Summary:     "Create an auth key or OAuth client",
-		Description: "Requires the `auth_keys` scope for an auth key, or `oauth_keys` for an OAuth client (an admin API key is all-access).",
-		Tags:        keysTags,
-		Security:    security,
-		Errors: []int{
-			http.StatusBadRequest,
-			http.StatusUnauthorized,
-			http.StatusForbidden,
-			http.StatusNotFound,
-		},
-	}, func(ctx context.Context, in *createKeyInput) (*keyOutput, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		if in.Body.KeyType == keyTypeClient {
-			return createOAuthClient(ctx, b, in.Body)
-		}
-
-		return createAuthKey(ctx, b, in.Body)
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "listKeys",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/tailnet/{tailnet}/keys",
-		Summary:     "List auth keys and OAuth clients",
-		Description: "A token sees the kinds it can read: `auth_keys:read` for auth keys, `oauth_keys:read` for OAuth clients (an admin API key sees all).",
-		Tags:        keysTags,
-		Security:    security,
-		Errors: []int{
-			http.StatusUnauthorized,
-			http.StatusForbidden,
-			http.StatusNotFound,
-		},
-	}, func(ctx context.Context, in *listKeysInput) (*listKeysOutput, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		scopes, isOAuth := principalScopes(ctx)
-
-		out := &listKeysOutput{}
-		out.Body.Keys = []Key{}
-
-		// A token sees the key kinds it has read scope for; an admin key sees all.
-		if !isOAuth || scope.Grants(scope.Parse(scopes), scope.AuthKeysRead) {
-			keys, err := b.State.ListPreAuthKeys()
-			if err != nil {
-				return nil, huma.Error500InternalServerError("listing auth keys", err)
-			}
-
-			for i := range keys {
-				out.Body.Keys = append(out.Body.Keys, keyFromStored(&keys[i]))
-			}
-		}
-
-		if !isOAuth || scope.Grants(scope.Parse(scopes), scope.OAuthKeysRead) {
-			clients, err := b.State.ListOAuthClients()
-			if err != nil {
-				return nil, huma.Error500InternalServerError("listing oauth clients", err)
-			}
-
-			for i := range clients {
-				out.Body.Keys = append(out.Body.Keys, oauthClientToKey(&clients[i], ""))
-			}
-		}
-
-		return out, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID: "getKey",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/tailnet/{tailnet}/keys/{keyId}",
-		Summary:     "Get an auth key or OAuth client",
-		Description: "Requires `auth_keys:read` for an auth key, or `oauth_keys:read` for an OAuth client (an admin API key is all-access).",
-		Tags:        keysTags,
-		Security:    security,
-		Errors: []int{
-			http.StatusUnauthorized,
-			http.StatusForbidden,
-			http.StatusNotFound,
-		},
-	}, func(ctx context.Context, in *keyByIDInput) (*keyOutput, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		// An OAuth client id is a hex string distinct from a numeric auth-key id,
-		// so a client lookup that hits is authoritative; otherwise fall through to
-		// the auth-key path. The lookup is gated on the caller actually holding
-		// oauth_keys:read so a token without it cannot tell a real client id (403)
-		// from an unknown key (404) — i.e. no client-existence oracle.
-		if requireKeyScope(ctx, scope.OAuthKeysRead) == nil {
-			client, err := b.State.GetOAuthClientByClientID(in.KeyID)
-			if err == nil {
-				return &keyOutput{Body: oauthClientToKey(client, "")}, nil
-			}
-		}
-
-		err = requireKeyScope(ctx, scope.AuthKeysRead)
-		if err != nil {
-			return nil, err
-		}
-
-		key, err := findKeyByID(b, in.KeyID)
-		if err != nil {
-			return nil, err
-		}
-
-		return &keyOutput{Body: keyFromStored(key)}, nil
-	})
-
-	huma.Register(api, huma.Operation{
-		OperationID:   "deleteKey",
-		Method:        http.MethodDelete,
-		Path:          "/api/v2/tailnet/{tailnet}/keys/{keyId}",
-		Summary:       "Delete an auth key or OAuth client",
-		Description:   "Requires the `auth_keys` scope for an auth key, or `oauth_keys` for an OAuth client (an admin API key is all-access).",
-		Tags:          keysTags,
-		Security:      security,
-		DefaultStatus: http.StatusOK,
-		Errors: []int{
-			http.StatusUnauthorized,
-			http.StatusForbidden,
-			http.StatusNotFound,
-		},
-	}, func(ctx context.Context, in *keyByIDInput) (*deleteKeyOutput, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		// Gated on oauth_keys (write) for the same no-existence-oracle reason as
-		// getKey: a token without it must not learn that an id is an OAuth client.
-		if requireKeyScope(ctx, scope.OAuthKeys) == nil {
-			_, err = b.State.GetOAuthClientByClientID(in.KeyID)
-			if err == nil {
-				err = b.State.RevokeOAuthClient(in.KeyID)
-				if err != nil {
-					return nil, mapError("deleting oauth client", err)
-				}
-
-				return &deleteKeyOutput{}, nil
-			}
-		}
-
-		err = requireKeyScope(ctx, scope.AuthKeys)
-		if err != nil {
-			return nil, err
-		}
-
-		id, err := parseID(in.KeyID, "auth key")
-		if err != nil {
-			return nil, err
-		}
-
-		// Tailscale's DELETE revokes the key but keeps it retrievable (invalid)
-		// rather than destroying it; the collector reaps it after the retention
-		// window.
-		err = b.State.RevokePreAuthKey(id)
-		if err != nil {
-			return nil, mapError("revoking auth key", err)
-		}
-
-		return &deleteKeyOutput{}, nil
-	})
-}
-
-// requireKeyScope authorizes a keys operation for an OAuth access token. An admin
-// API key carries no OAuth scopes and is all-access, so it always passes.
-func requireKeyScope(ctx context.Context, need scope.Scope) error {
-	scopes, isOAuth := principalScopes(ctx)
-	if !isOAuth {
-		return nil
-	}
-
-	if !scope.Grants(scope.Parse(scopes), need) {
-		return huma.Error403Forbidden("token is missing the required scope " + string(need))
-	}
-
-	return nil
-}
-
-// createAuthKey creates a machine auth key (pre-auth key). Ownership: tags -> a
-// tagged key; no tags -> owned by the API key's user. An OAuth access token must
-// mint tagged keys, and each tag must be within the token's grant.
-func createAuthKey(ctx context.Context, b Backend, body CreateKeyRequest) (*keyOutput, error) {
-	err := requireKeyScope(ctx, scope.AuthKeys)
-	if err != nil {
-		return nil, err
-	}
-
-	var create KeyDeviceCreateCapabilities
-	if body.Capabilities != nil {
-		create = body.Capabilities.Devices.Create
-	}
-
-	tokenTags, isOAuth := principalTags(ctx)
-
-	var userID *types.UserID
-
-	switch {
-	case len(create.Tags) > 0:
-		// A key minted by an OAuth token may only carry tags within the token's
-		// grant (held directly, or owned by a held tag) and defined in policy,
-		// matching SetNodeTags. An admin key keeps the historical behaviour of
-		// validating only tag syntax (db.validateACLTags).
-		if isOAuth {
-			for _, tag := range create.Tags {
-				if !b.State.TagExists(tag) {
-					return nil, huma.Error400BadRequest("tag " + tag + " is not defined in policy")
-				}
-
-				if !b.State.TagOwnedByTags(tag, tokenTags) {
-					return nil, huma.Error403Forbidden(
-						"token may not assign tag " + tag,
-					)
-				}
-			}
-		}
-
-	case isOAuth:
-		// OAuth-minted keys are tailnet/tag-owned; an untagged (user-owned) key
-		// cannot be created from a token.
-		return nil, huma.Error403Forbidden("an OAuth client must create tagged auth keys")
-
-	default:
-		uid, ok := ownerUser(ctx)
-		if !ok {
-			return nil, huma.Error400BadRequest(
-				"an auth key without tags must be created with a user-owned API key",
-			)
-		}
-
-		userID = &uid
-	}
-
-	expiration := time.Now().Add(expiryDuration(body.ExpirySeconds))
-
-	pak, err := b.State.CreatePreAuthKey(
-		userID,
-		create.Reusable,
-		create.Ephemeral,
-		&expiration,
-		create.Tags,
-	)
-	if err != nil {
-		return nil, mapError("creating auth key", err)
-	}
-
-	if body.Description != "" {
-		err := b.State.SetPreAuthKeyDescription(pak.ID, body.Description)
-		if err != nil {
-			return nil, huma.Error500InternalServerError("setting auth key description", err)
-		}
-	}
-
-	return &keyOutput{Body: keyFromNew(pak, body)}, nil
-}
-
-// createOAuthClient creates an OAuth client (keyType:"client"). The client secret
-// is returned once, here.
-func createOAuthClient(ctx context.Context, b Backend, body CreateKeyRequest) (*keyOutput, error) {
-	err := requireKeyScope(ctx, scope.OAuthKeys)
-	if err != nil {
-		return nil, err
-	}
-
-	if len(body.Scopes) == 0 {
-		return nil, huma.Error400BadRequest("an OAuth client must declare at least one scope")
-	}
-
-	// Tailscale: tags are mandatory when the scopes include devices:core or
-	// auth_keys, because such a client mints tagged, tailnet-owned credentials.
-	if scope.RequiresTags(scope.Parse(body.Scopes)) && len(body.Tags) == 0 {
-		return nil, huma.Error400BadRequest(
-			"tags are required when scopes include devices:core or auth_keys",
-		)
-	}
-
-	// A client created by an OAuth token may not be granted authority the token
-	// lacks: its scopes must each be within the token's grant, and its tags within
-	// the token's tags and defined in policy (matching SetNodeTags). Otherwise an
-	// oauth_keys token could mint an all-access client and escalate. An admin API
-	// key (not an OAuth token) is unrestricted and keeps the historical tag
-	// behaviour (syntax-only validation).
-	if tokenScopes, isOAuth := principalScopes(ctx); isOAuth {
-		for _, s := range body.Scopes {
-			if !scope.Grants(scope.Parse(tokenScopes), scope.Scope(s)) {
-				return nil, huma.Error403Forbidden(
-					"client may not be granted scope " + s + " beyond the creating token",
-				)
-			}
-		}
-
-		tokenTags, _ := principalTags(ctx)
-
-		for _, tag := range body.Tags {
-			if !b.State.TagExists(tag) {
-				return nil, huma.Error400BadRequest("tag " + tag + " is not defined in policy")
-			}
-
-			if !b.State.TagOwnedByTags(tag, tokenTags) {
-				return nil, huma.Error403Forbidden(
-					"client may not be granted tag " + tag + " beyond the creating token",
-				)
-			}
-		}
-	}
-
-	var creator *uint
-
-	if uid, ok := ownerUser(ctx); ok {
-		u := uint(uid)
-		creator = &u
-	}
-
-	secret, client, err := b.State.CreateOAuthClient(body.Scopes, body.Tags, body.Description, creator)
-	if err != nil {
-		return nil, mapError("creating oauth client", err)
-	}
-
-	return &keyOutput{Body: oauthClientToKey(client, secret)}, nil
-}
-
-// findKeyByID looks up a stored pre-auth key by its (stringified) id with a
-// direct by-id query; an unknown id surfaces as gorm.ErrRecordNotFound, which
-// mapError turns into a 404.
-func findKeyByID(b Backend, rawID string) (*types.PreAuthKey, error) {
-	id, err := parseID(rawID, "auth key")
-	if err != nil {
-		return nil, err
-	}
-
-	pak, err := b.State.GetPreAuthKeyByID(id)
-	if err != nil {
-		return nil, mapError("looking up auth key", err)
-	}
-
-	return pak, nil
-}
-
-// keyFromNew builds the create response from the freshly created key. The
-// plaintext secret is returned only here. preauthorized is reported true to
-// match keyFromStored: Headscale always authorizes pre-auth-key nodes, so the
-// create and read paths must agree or the Terraform provider sees a diff.
-func keyFromNew(pak *types.PreAuthKeyNew, req CreateKeyRequest) Key {
-	var create KeyDeviceCreateCapabilities
-	if req.Capabilities != nil {
-		create = req.Capabilities.Devices.Create
-	}
-
-	key := Key{
-		ID:          pak.StringID(),
-		KeyType:     keyTypeAuth,
-		Key:         pak.Key,
-		Description: req.Description,
-		Created:     timeOrZero(pak.CreatedAt),
-		Capabilities: capabilities(
-			create.Reusable,
-			create.Ephemeral,
-			true,
-			pak.Tags,
-		),
-		Tags: pak.Tags,
-	}
-
-	if pak.Expiration != nil {
-		key.Expires = pak.Expiration
-		key.ExpirySeconds = expirySeconds(pak.CreatedAt, pak.Expiration)
-	}
-
-	// A tagged key presents no owner; a user-owned key reports its user id.
-	if len(pak.Tags) == 0 && pak.User != nil {
-		key.UserID = pak.User.StringID()
-	}
-
-	return key
-}
-
-// keyFromStored builds the get/list response from a stored key. The secret is
-// never returned here. preauthorized is reported true: Headscale has no separate
-// device-approval step, so every pre-auth key authorizes its nodes. Reporting it
-// stably keeps the Terraform provider from seeing a forced-replacement diff.
-func keyFromStored(pak *types.PreAuthKey) Key {
-	key := Key{
-		ID:           pak.StringID(),
-		KeyType:      keyTypeAuth,
-		Description:  pak.Description,
-		Created:      timeOrZero(pak.CreatedAt),
-		Invalid:      pak.Validate() != nil,
-		Capabilities: capabilities(pak.Reusable, pak.Ephemeral, true, pak.Tags),
-		Tags:         pak.Tags,
-	}
-
-	if pak.Expiration != nil {
-		key.Expires = pak.Expiration
-		key.ExpirySeconds = expirySeconds(pak.CreatedAt, pak.Expiration)
-	}
-
-	if pak.Revoked != nil {
-		key.Revoked = pak.Revoked
-	}
-
-	if len(pak.Tags) == 0 && pak.User != nil {
-		key.UserID = pak.User.StringID()
-	}
-
-	return key
-}
-
-// oauthClientToKey builds the keys response for an OAuth client. secret is the
-// plaintext client secret, set only on the create response and empty on get/list
-// (the secret is never re-exposed).
-func oauthClientToKey(client *types.OAuthClient, secret string) Key {
-	key := Key{
-		ID:          client.ClientID,
-		KeyType:     keyTypeClient,
-		Key:         secret,
-		Description: client.Description,
-		Created:     timeOrZero(client.CreatedAt),
-		Scopes:      emptyIfNil(client.Scopes),
-		Tags:        emptyIfNil(client.Tags),
-	}
-
-	if client.Revoked != nil {
-		key.Revoked = client.Revoked
-		key.Invalid = true
-	}
-
-	if client.UserID != nil {
-		key.UserID = strconv.FormatUint(uint64(*client.UserID), util.Base10)
-	}
-
-	return key
-}
-
-func capabilities(
-	reusable, ephemeral, preauthorized bool,
-	tags []string,
-) KeyCapabilities {
-	return KeyCapabilities{
-		Devices: KeyDeviceCapabilities{Create: KeyDeviceCreateCapabilities{
-			Reusable:      reusable,
-			Ephemeral:     ephemeral,
-			Preauthorized: preauthorized,
-			Tags:          emptyIfNil(tags),
-		}},
-	}
-}
-
-func expiryDuration(seconds int64) time.Duration {
-	if seconds <= 0 {
-		return defaultExpiry
-	}
-
-	return time.Duration(seconds) * time.Second
-}
diff --git a/hscontrol/api/v2/oauth.go b/hscontrol/api/v2/oauth.go
deleted file mode 100644
index 330c94f96..000000000
--- a/hscontrol/api/v2/oauth.go
+++ /dev/null
@@ -1,178 +0,0 @@
-package apiv2
-
-import (
-	"encoding/json"
-	"net/http"
-	"slices"
-	"strings"
-	"time"
-
-	"github.com/go-chi/chi/v5"
-	"github.com/juanfont/headscale/hscontrol/scope"
-	"github.com/juanfont/headscale/hscontrol/types"
-)
-
-// accessTokenTTL is the fixed lifetime of a minted access token, matching
-// Tailscale's non-configurable one hour.
-const accessTokenTTL = time.Hour
-
-// registerOAuthToken mounts POST /api/v2/oauth/token on the router. It is a plain
-// handler, not a Huma operation: it consumes application/x-www-form-urlencoded
-// and emits RFC 6749 OAuth2 error bodies ({"error","error_description"}), neither
-// of which fits Huma's JSON-in / Tailscale-error-out machinery.
-// ponytail: one bespoke OAuth endpoint isn't worth bending Huma around.
-func registerOAuthToken(router chi.Router, b Backend) {
-	router.Post("/api/v2/oauth/token", oauthTokenHandler(b))
-}
-
-// tokenResponse is the OAuth 2.0 client-credentials success body.
-type tokenResponse struct {
-	AccessToken string `json:"access_token"`
-	TokenType   string `json:"token_type"`
-	ExpiresIn   int    `json:"expires_in"`
-	Scope       string `json:"scope,omitempty"`
-}
-
-// oauthTokenHandler implements the client-credentials grant (RFC 6749 §4.4):
-// authenticate the client, optionally narrow the granted scopes/tags, and mint a
-// short-lived bearer token.
-func oauthTokenHandler(b Backend) http.HandlerFunc {
-	return func(w http.ResponseWriter, r *http.Request) {
-		err := r.ParseForm()
-		if err != nil {
-			writeOAuthError(w, http.StatusBadRequest, "invalid_request", "could not parse request body")
-
-			return
-		}
-
-		// grant_type defaults to client_credentials: Tailscale's documented curl
-		// omits it, and the x/oauth2 client always sends it.
-		if gt := r.PostForm.Get("grant_type"); gt != "" && gt != "client_credentials" {
-			writeOAuthError(w, http.StatusBadRequest, "unsupported_grant_type",
-				"only the client_credentials grant is supported")
-
-			return
-		}
-
-		// Credentials may arrive in the body or as HTTP Basic (the x/oauth2
-		// auto-detect probes Basic first). The secret embeds the client id, so a
-		// separate client_id is not required.
-		secret := r.PostForm.Get("client_secret")
-		if secret == "" {
-			if _, pass, ok := r.BasicAuth(); ok {
-				secret = pass
-			}
-		}
-
-		if secret == "" {
-			writeOAuthError(w, http.StatusUnauthorized, "invalid_client", "missing client credentials")
-
-			return
-		}
-
-		client, err := b.State.AuthenticateOAuthClient(secret)
-		if err != nil {
-			writeOAuthError(w, http.StatusUnauthorized, "invalid_client", "invalid client credentials")
-
-			return
-		}
-
-		// Optional space-delimited scope/tags narrow the token to a subset of the
-		// client's grant.
-		scopes, badScope, ok := narrowScopes(client.Scopes, strings.Fields(r.PostForm.Get("scope")))
-		if !ok {
-			writeOAuthError(w, http.StatusBadRequest, "invalid_scope",
-				"scope "+badScope+" is not granted to this client")
-
-			return
-		}
-
-		tags, badTag, ok := narrowTags(client, strings.Fields(r.PostForm.Get("tags")))
-		if !ok {
-			writeOAuthError(w, http.StatusBadRequest, "invalid_target",
-				"tag "+badTag+" is not granted to this client")
-
-			return
-		}
-
-		expiry := time.Now().Add(accessTokenTTL)
-
-		tokenStr, _, err := b.State.MintAccessToken(client.ClientID, scopes, tags, &expiry)
-		if err != nil {
-			writeOAuthError(w, http.StatusInternalServerError, "server_error", "could not mint access token")
-
-			return
-		}
-
-		writeJSON(w, http.StatusOK, tokenResponse{
-			AccessToken: tokenStr,
-			TokenType:   "Bearer",
-			ExpiresIn:   int(accessTokenTTL.Seconds()),
-			Scope:       strings.Join(scopes, " "),
-		})
-	}
-}
-
-// narrowScopes returns the requested scopes if each is granted by the client (an
-// empty request means "the client's full grant"), otherwise the offending scope
-// and false. A client holding a broad scope (e.g. "all") may mint a token limited
-// to a narrower one.
-func narrowScopes(granted, requested []string) ([]string, string, bool) {
-	if len(requested) == 0 {
-		return granted, "", true
-	}
-
-	for _, req := range requested {
-		if !scope.Grants(scope.Parse(granted), scope.Scope(req)) {
-			return nil, req, false
-		}
-	}
-
-	return requested, "", true
-}
-
-// narrowTags returns the requested tags if each is within the client's grant (an
-// empty request means "the client's full tag set"), otherwise the offending tag
-// and false. A client with the "all" scope may assign any tag, matching Tailscale.
-func narrowTags(client *types.OAuthClient, requested []string) ([]string, string, bool) {
-	if len(requested) == 0 {
-		return client.Tags, "", true
-	}
-
-	allScope := slices.Contains(client.Scopes, string(scope.All))
-
-	for _, req := range requested {
-		// Reject malformed tags at the trust boundary. A client's own tags are
-		// validated at creation, so this only matters for an "all"-scope client,
-		// whose tags would otherwise skip the membership check below and flow
-		// unvalidated into auth-key creation.
-		if !strings.HasPrefix(req, "tag:") {
-			return nil, req, false
-		}
-
-		if !allScope && !slices.Contains(client.Tags, req) {
-			return nil, req, false
-		}
-	}
-
-	return requested, "", true
-}
-
-func writeJSON(w http.ResponseWriter, status int, v any) {
-	w.Header().Set("Content-Type", "application/json")
-	// Token responses carry bearer credentials; RFC 6749 §5.1 forbids caching
-	// them. writeJSON serves only the token endpoint, so set it unconditionally.
-	w.Header().Set("Cache-Control", "no-store")
-	w.Header().Set("Pragma", "no-cache")
-	w.WriteHeader(status)
-	_ = json.NewEncoder(w).Encode(v) //nolint:errchkjson // best-effort response write of a known-safe value
-}
-
-// writeOAuthError emits an RFC 6749 §5.2 error body, which the x/oauth2 client
-// parses into its RetrieveError.
-func writeOAuthError(w http.ResponseWriter, status int, code, desc string) {
-	writeJSON(w, status, map[string]string{
-		"error":             code,
-		"error_description": desc,
-	})
-}
diff --git a/hscontrol/api/v2/oauth_test.go b/hscontrol/api/v2/oauth_test.go
deleted file mode 100644
index 1abbacf87..000000000
--- a/hscontrol/api/v2/oauth_test.go
+++ /dev/null
@@ -1,31 +0,0 @@
-package apiv2
-
-import (
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-)
-
-// TestNarrowTagsRejectsMalformed asserts the token endpoint validates tag
-// format at the trust boundary. An "all"-scope client may assign any tag, but a
-// malformed tag (missing the "tag:" prefix) must still be rejected rather than
-// flowing unvalidated into auth-key creation.
-func TestNarrowTagsRejectsMalformed(t *testing.T) {
-	all := &types.OAuthClient{Scopes: []string{"all"}}
-
-	_, bad, ok := narrowTags(all, []string{"not-a-tag"})
-	assert.False(t, ok, "malformed tag must be rejected even with all scope")
-	assert.Equal(t, "not-a-tag", bad)
-
-	got, _, ok := narrowTags(all, []string{"tag:anything"})
-	assert.True(t, ok, "all scope may assign any well-formed tag")
-	assert.Equal(t, []string{"tag:anything"}, got)
-
-	// A scoped client may only assign its own well-formed tags.
-	scoped := &types.OAuthClient{Scopes: []string{"auth_keys"}, Tags: []string{"tag:ci"}}
-
-	_, bad, ok = narrowTags(scoped, []string{"tag:other"})
-	assert.False(t, ok)
-	assert.Equal(t, "tag:other", bad)
-}
diff --git a/hscontrol/api/v2/settings.go b/hscontrol/api/v2/settings.go
deleted file mode 100644
index 262ec554c..000000000
--- a/hscontrol/api/v2/settings.go
+++ /dev/null
@@ -1,100 +0,0 @@
-package apiv2
-
-import (
-	"context"
-	"encoding/json"
-	"net/http"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/scope"
-	"github.com/juanfont/headscale/hscontrol/types"
-)
-
-func init() {
-	registrations = append(registrations, registerSettings)
-}
-
-// TailnetSettings is the Tailscale tailnet-settings response. Headscale's config
-// is file-based and mostly not runtime-mutable, so only a few fields carry a
-// real value; the rest report the default "off".
-type TailnetSettings struct {
-	ACLsExternallyManagedOn bool   `json:"aclsExternallyManagedOn"`
-	ACLsExternalLink        string `json:"aclsExternalLink"`
-
-	DevicesApprovalOn      bool `json:"devicesApprovalOn"`
-	DevicesAutoUpdatesOn   bool `json:"devicesAutoUpdatesOn"`
-	DevicesKeyDurationDays int  `json:"devicesKeyDurationDays"`
-
-	UsersApprovalOn                        bool   `json:"usersApprovalOn"`
-	UsersRoleAllowedToJoinExternalTailnets string `json:"usersRoleAllowedToJoinExternalTailnets"`
-
-	NetworkFlowLoggingOn        bool `json:"networkFlowLoggingOn"`
-	RegionalRoutingOn           bool `json:"regionalRoutingOn"`
-	PostureIdentityCollectionOn bool `json:"postureIdentityCollectionOn"`
-	HTTPSEnabled                bool `json:"httpsEnabled"`
-}
-
-type (
-	getSettingsInput struct {
-		Tailnet string `path:"tailnet"`
-	}
-	settingsOutput struct {
-		Body TailnetSettings
-	}
-	patchSettingsInput struct {
-		Tailnet string `path:"tailnet"`
-		// Accepted and ignored; updating settings is not supported.
-		Body json.RawMessage
-	}
-)
-
-func registerSettings(api huma.API, b Backend) {
-	settingsTags := []string{"TailnetSettings", "Tailscale compat"}
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID: "getTailnetSettings",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/tailnet/{tailnet}/settings",
-		Summary:     "Get tailnet settings",
-		Tags:        settingsTags,
-		Security:    security,
-		Errors:      []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.FeatureSettingsRead), func(ctx context.Context, in *getSettingsInput) (*settingsOutput, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		cfg := b.Cfg
-
-		return &settingsOutput{Body: TailnetSettings{
-			// File-mode policy is genuinely externally managed (read-only via API).
-			ACLsExternallyManagedOn:                cfg.Policy.Mode == types.PolicyModeFile,
-			DevicesKeyDurationDays:                 int(cfg.Node.Expiry / (24 * time.Hour)),
-			HTTPSEnabled:                           cfg.TLS.CertPath != "" || cfg.TLS.LetsEncrypt.Hostname != "",
-			UsersRoleAllowedToJoinExternalTailnets: "none",
-		}}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID: "updateTailnetSettings",
-		Method:      http.MethodPatch,
-		Path:        "/api/v2/tailnet/{tailnet}/settings",
-		Summary:     "Update tailnet settings",
-		Tags:        settingsTags,
-		Security:    security,
-		// The body is accepted but ignored; skip validation.
-		SkipValidateBody: true,
-		Errors:           []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound, http.StatusNotImplemented},
-	}, scope.FeatureSettings), func(ctx context.Context, in *patchSettingsInput) (*settingsOutput, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		return nil, huma.Error501NotImplemented(
-			"updating tailnet settings is not supported by Headscale",
-		)
-	})
-}
diff --git a/hscontrol/api/v2/users.go b/hscontrol/api/v2/users.go
deleted file mode 100644
index 2890f432e..000000000
--- a/hscontrol/api/v2/users.go
+++ /dev/null
@@ -1,176 +0,0 @@
-package apiv2
-
-import (
-	"context"
-	"net/http"
-	"strconv"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2"
-	"github.com/juanfont/headscale/hscontrol/scope"
-	"github.com/juanfont/headscale/hscontrol/types"
-)
-
-func init() {
-	registrations = append(registrations, registerUsers)
-}
-
-// Headscale models none of type/role/status and has a single tailnet, so these
-// fields are fixed strings. Every account is an active member.
-const (
-	userTypeMember   = "member"
-	userRoleMember   = "member"
-	userStatusActive = "active"
-	singleTailnetID  = "1"
-
-	// tagTailscaleCompat marks operations ported from the Tailscale API.
-	tagTailscaleCompat = "Tailscale compat"
-)
-
-// User is the Tailscale user response. Identity fields map from the Headscale
-// user; type/role/status/tailnetId are constants (see above); the device fields
-// are aggregated from the user's nodes.
-type User struct {
-	ID                 string    `json:"id"`
-	DisplayName        string    `json:"displayName"`
-	LoginName          string    `json:"loginName"`
-	ProfilePicURL      string    `json:"profilePicUrl"`
-	TailnetID          string    `json:"tailnetId"`
-	Created            time.Time `json:"created"`
-	Type               string    `json:"type"`
-	Role               string    `json:"role"`
-	Status             string    `json:"status"`
-	DeviceCount        int       `json:"deviceCount"`
-	LastSeen           time.Time `json:"lastSeen"`
-	CurrentlyConnected bool      `json:"currentlyConnected"`
-}
-
-type (
-	userByIDInput struct {
-		UserID string `doc:"User id (the decimal user id)." path:"id"`
-	}
-	listUsersInput struct {
-		Tailnet string `doc:"Tailnet; must be \"-\" (the single Headscale tailnet)."   path:"tailnet"`
-		Type    string `doc:"Filter by user type; Headscale users are all \"member\"." query:"type"`
-		Role    string `doc:"Filter by user role; Headscale users are all \"member\"." query:"role"`
-	}
-
-	userOutput      struct{ Body User }
-	listUsersOutput struct {
-		Body struct {
-			Users []User `json:"users" nullable:"false"`
-		}
-	}
-)
-
-func registerUsers(api huma.API, b Backend) {
-	usersTags := []string{"Users", tagTailscaleCompat}
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID: "getUser",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/users/{id}",
-		Summary:     "Get a user",
-		Tags:        usersTags,
-		Security:    security,
-		Errors:      []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.UsersRead), func(ctx context.Context, in *userByIDInput) (*userOutput, error) {
-		view, err := lookupUser(b, in.UserID)
-		if err != nil {
-			return nil, err
-		}
-
-		return &userOutput{Body: userFromView(b, view)}, nil
-	})
-
-	huma.Register(api, requireScope(huma.Operation{
-		OperationID: "listUsers",
-		Method:      http.MethodGet,
-		Path:        "/api/v2/tailnet/{tailnet}/users",
-		Summary:     "List users",
-		Tags:        usersTags,
-		Security:    security,
-		Errors:      []int{http.StatusUnauthorized, http.StatusForbidden, http.StatusNotFound},
-	}, scope.UsersRead), func(ctx context.Context, in *listUsersInput) (*listUsersOutput, error) {
-		err := requireDefaultTailnet(in.Tailnet)
-		if err != nil {
-			return nil, err
-		}
-
-		out := &listUsersOutput{}
-		out.Body.Users = []User{}
-
-		// Headscale has only "member" users. A filter for any other type/role
-		// matches nothing, so return the empty envelope.
-		if !matchesMember(in.Type) || !matchesMember(in.Role) {
-			return out, nil
-		}
-
-		users, err := b.State.ListAllUsers()
-		if err != nil {
-			return nil, huma.Error500InternalServerError("listing users", err)
-		}
-
-		out.Body.Users = make([]User, 0, len(users))
-		for i := range users {
-			out.Body.Users = append(out.Body.Users, userFromView(b, users[i].View()))
-		}
-
-		return out, nil
-	})
-}
-
-// lookupUser resolves a user id to its UserView, mapping a malformed or unknown
-// id to 404 (the Tailscale SDK keys IsNotFound off the status code), exactly as
-// lookupNode does for devices.
-func lookupUser(b Backend, rawID string) (types.UserView, error) {
-	id, err := parseID(rawID, "user")
-	if err != nil {
-		return types.UserView{}, err
-	}
-
-	user, err := b.State.GetUserByID(types.UserID(id))
-	if err != nil {
-		return types.UserView{}, mapError("looking up user", err)
-	}
-
-	return user.View(), nil
-}
-
-// matchesMember reports whether an optional type/role filter selects Headscale's
-// only user kind. An empty value means "no filter".
-func matchesMember(filter string) bool {
-	return filter == "" || filter == userTypeMember
-}
-
-// userFromView maps a Headscale user onto the Tailscale User through the
-// UserView accessors. deviceCount, lastSeen, and currentlyConnected are
-// aggregated from the user's nodes in the NodeStore.
-func userFromView(b Backend, view types.UserView) User {
-	u := User{
-		ID:            strconv.FormatUint(uint64(view.ID()), 10),
-		DisplayName:   view.Display(),
-		LoginName:     view.Username(),
-		ProfilePicURL: view.ProfilePicURL(),
-		TailnetID:     singleTailnetID,
-		Created:       view.CreatedAt(),
-		Type:          userTypeMember,
-		Role:          userRoleMember,
-		Status:        userStatusActive,
-	}
-
-	nodes := b.State.ListNodesByUser(types.UserID(view.ID()))
-	u.DeviceCount = nodes.Len()
-
-	for _, node := range nodes.All() {
-		if node.IsOnline().Valid() && node.IsOnline().Get() {
-			u.CurrentlyConnected = true
-		}
-
-		if ls := node.LastSeen(); ls.Valid() && ls.Get().After(u.LastSeen) {
-			u.LastSeen = ls.Get()
-		}
-	}
-
-	return u
-}
diff --git a/hscontrol/apiv1_apikeys_test.go b/hscontrol/apiv1_apikeys_test.go
deleted file mode 100644
index 74b4634ae..000000000
--- a/hscontrol/apiv1_apikeys_test.go
+++ /dev/null
@@ -1,212 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"strconv"
-	"testing"
-	"time"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// seedAPIKey creates a single API key and returns its database ID and the
-// masked display prefix the API exposes, so tests can address it by either.
-func seedAPIKey(t *testing.T, app *Headscale) (uint64, string) {
-	t.Helper()
-
-	_, key, err := app.state.CreateAPIKey(nil)
-	require.NoError(t, err)
-
-	return key.ID, "hskey-api-" + key.Prefix + "-***"
-}
-
-func TestAPIV1ApiKeyCreate(t *testing.T) {
-	t.Run("huma response shape", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/apikey", []byte(`{}`))
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			APIKey string `json:"apiKey"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		// The full secret is returned exactly once, on creation.
-		assert.NotEmpty(t, got.APIKey)
-		assert.Contains(t, got.APIKey, "hskey-api-")
-	})
-
-	t.Run("creates secret", func(t *testing.T) {
-		// The secret is random, so it can't be captured in a golden; just assert
-		// success and that a secret is returned.
-		humaApp := createTestApp(t)
-
-		hum := callHandler(newHumaTestHandler(humaApp), http.MethodPost, "/api/v1/apikey", []byte(`{}`))
-
-		assert.Equal(t, http.StatusOK, hum.status)
-
-		var humBody struct {
-			APIKey string `json:"apiKey"`
-		}
-		require.NoError(t, json.Unmarshal(hum.body, &humBody))
-		assert.NotEmpty(t, humBody.APIKey)
-	})
-}
-
-func TestAPIV1ApiKeyList(t *testing.T) {
-	t.Run("empty returns empty array", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		res := h.callHuma(http.MethodGet, "/api/v1/apikey", nil)
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{"apiKeys":[]}`, string(res.body))
-	})
-
-	t.Run("empty parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		h.assertParity(t, http.MethodGet, "/api/v1/apikey", nil)
-	})
-
-	t.Run("populated parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedAPIKey(t, h.app)
-		seedAPIKey(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/apikey", nil)
-	})
-
-	t.Run("nil timestamps emitted as null parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedAPIKey(t, h.app)
-		// Nil expiration: lastSeen and expiration are unset and must emit as
-		// JSON null.
-		res := h.assertParity(t, http.MethodGet, "/api/v1/apikey", nil)
-
-		var got struct {
-			APIKeys []map[string]any `json:"apiKeys"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-		require.Len(t, got.APIKeys, 1)
-		assert.Nil(t, got.APIKeys[0]["lastSeen"])
-		assert.Nil(t, got.APIKeys[0]["expiration"])
-		assert.Contains(t, got.APIKeys[0], "createdAt")
-		assert.Contains(t, got.APIKeys[0]["prefix"], "hskey-api-")
-	})
-
-	t.Run("zero expiration emitted as zero instant parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		// Non-nil zero expiration (as gRPC CreateApiKey does for a missing one)
-		// must render as the zero instant, not null.
-		var zero time.Time
-
-		_, _, err := h.app.state.CreateAPIKey(&zero)
-		require.NoError(t, err)
-
-		res := h.assertParity(t, http.MethodGet, "/api/v1/apikey", nil)
-
-		var got struct {
-			APIKeys []map[string]any `json:"apiKeys"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-		require.Len(t, got.APIKeys, 1)
-		assert.Equal(t, "0001-01-01T00:00:00Z", got.APIKeys[0]["expiration"])
-	})
-}
-
-func TestAPIV1ApiKeyExpire(t *testing.T) {
-	t.Run("by id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		id, _ := seedAPIKey(t, h.app)
-		h.assertParity(t, http.MethodPost, "/api/v1/apikey/expire",
-			[]byte(`{"id":"`+strconv.FormatUint(id, 10)+`"}`))
-	})
-
-	t.Run("by prefix parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		_, prefix := seedAPIKey(t, h.app)
-		h.assertParity(t, http.MethodPost, "/api/v1/apikey/expire",
-			[]byte(`{"prefix":"`+prefix+`"}`))
-	})
-
-	t.Run("neither id nor prefix parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/apikey/expire", []byte(`{}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("both id and prefix parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/apikey/expire",
-			[]byte(`{"id":"1","prefix":"abc"}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("not found by id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/apikey/expire", []byte(`{"id":"999"}`))
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("expires the key", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		id, _ := seedAPIKey(t, h.app)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/apikey/expire",
-			[]byte(`{"id":"`+strconv.FormatUint(id, 10)+`"}`))
-		require.Equal(t, http.StatusOK, res.status)
-
-		listRes := h.callHuma(http.MethodGet, "/api/v1/apikey", nil)
-
-		var got struct {
-			APIKeys []struct {
-				Expiration *time.Time `json:"expiration"`
-			} `json:"apiKeys"`
-		}
-		require.NoError(t, json.Unmarshal(listRes.body, &got))
-		require.Len(t, got.APIKeys, 1)
-		require.NotNil(t, got.APIKeys[0].Expiration)
-		assert.False(t, got.APIKeys[0].Expiration.IsZero(), "expiration should be set")
-	})
-}
-
-func TestAPIV1ApiKeyDelete(t *testing.T) {
-	t.Run("by prefix deletes the key", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		_, prefix := seedAPIKey(t, h.app)
-
-		res := h.callHuma(http.MethodDelete, "/api/v1/apikey/"+prefix, nil)
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{}`, string(res.body))
-
-		listRes := h.callHuma(http.MethodGet, "/api/v1/apikey", nil)
-		assert.JSONEq(t, `{"apiKeys":[]}`, string(listRes.body))
-	})
-
-	t.Run("path prefix with id query is both -> 400 parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		id, prefix := seedAPIKey(t, h.app)
-		res := h.assertParity(t, http.MethodDelete,
-			"/api/v1/apikey/"+prefix+"?id="+strconv.FormatUint(id, 10), nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("not found by prefix parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodDelete, "/api/v1/apikey/doesnotexist", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("both id and prefix parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodDelete, "/api/v1/apikey/abc?id=1", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodDelete, "/api/v1/apikey/abc?id=notanumber", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
diff --git a/hscontrol/apiv1_auth_test.go b/hscontrol/apiv1_auth_test.go
deleted file mode 100644
index 1f157f414..000000000
--- a/hscontrol/apiv1_auth_test.go
+++ /dev/null
@@ -1,187 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"fmt"
-	"net/http"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
-)
-
-// seedAuthRequest stores a pending registration auth cache entry under authID so
-// an AuthRegister/Approve/Reject call has a real session to act on. Capturing
-// the keys/authID at the call site keeps isolated apps identical.
-func seedAuthRequest(
-	user string,
-	authID types.AuthID,
-	machineKey key.MachinePublic,
-	nodeKey key.NodePublic,
-	discoKey key.DiscoPublic,
-	hostname string,
-) func(t *testing.T, app *Headscale) {
-	return func(t *testing.T, app *Headscale) {
-		t.Helper()
-
-		app.state.CreateUserForTest(user)
-
-		regData := &types.RegistrationData{
-			MachineKey: machineKey,
-			NodeKey:    nodeKey,
-			DiscoKey:   discoKey,
-			Hostname:   hostname,
-			Hostinfo:   &tailcfg.Hostinfo{Hostname: hostname},
-		}
-
-		app.state.SetAuthCacheEntry(authID, types.NewRegisterAuthRequest(regData))
-	}
-}
-
-func TestAPIV1AuthRegister(t *testing.T) {
-	t.Run("happy path parity", func(t *testing.T) {
-		// Capture keys/authID once so both isolated apps register the identical
-		// node and produce byte-equal bodies.
-		authID := types.MustAuthID()
-		machineKey := key.NewMachine().Public()
-		nodeKey := key.NewNode().Public()
-		discoKey := key.NewDisco().Public()
-
-		seed := seedAuthRequest("alice", authID, machineKey, nodeKey, discoKey, "regnode")
-		body := fmt.Appendf(nil, `{"user":"alice","authId":%q}`, authID.String())
-
-		assertParityIsolated(t, seed, http.MethodPost, "/api/v1/auth/register", body)
-	})
-
-	t.Run("happy path response shape", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		authID := types.MustAuthID()
-		seedAuthRequest(
-			"alice", authID,
-			key.NewMachine().Public(),
-			key.NewNode().Public(),
-			key.NewDisco().Public(),
-			"regnode",
-		)(t, h.app)
-
-		body := fmt.Appendf(nil, `{"user":"alice","authId":%q}`, authID.String())
-		res := h.callHuma(http.MethodPost, "/api/v1/auth/register", body)
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			Node map[string]any `json:"node"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Equal(t, "1", got.Node["id"])
-		assert.Equal(t, "REGISTER_METHOD_CLI", got.Node["registerMethod"])
-		// EmitUnpopulated parity: an unset expiry (we passed none) is null, an
-		// unset embedded pre-auth key is null, and repeated fields are []
-		// rather than omitted.
-		assert.Contains(t, got.Node, "expiry")
-		assert.Nil(t, got.Node["expiry"])
-		assert.Contains(t, got.Node, "preAuthKey")
-		assert.Nil(t, got.Node["preAuthKey"])
-		assert.Equal(t, []any{}, got.Node["subnetRoutes"])
-		assert.NotNil(t, got.Node["user"])
-	})
-
-	// A malformed auth_id is bad input (400), matching AuthApprove/AuthReject.
-	t.Run("invalid auth_id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedUsers("alice")(t, h.app)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/auth/register",
-			[]byte(`{"user":"alice","authId":"not-a-valid-auth-id"}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("unknown user parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		body := fmt.Appendf(nil, `{"user":"ghost","authId":%q}`, types.MustAuthID().String())
-		res := h.assertParity(t, http.MethodPost, "/api/v1/auth/register", body)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	// Valid auth_id but no cached session: HandleNodeFromAuthPath returns
-	// ErrNodeNotFoundRegistrationCache, which maps to 404.
-	t.Run("no pending session parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedUsers("alice")(t, h.app)
-
-		body := fmt.Appendf(nil, `{"user":"alice","authId":%q}`, types.MustAuthID().String())
-		res := h.assertParity(t, http.MethodPost, "/api/v1/auth/register", body)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-}
-
-func TestAPIV1AuthApprove(t *testing.T) {
-	t.Run("happy path", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		authID := types.MustAuthID()
-		authReq := types.NewAuthRequest()
-		h.app.state.SetAuthCacheEntry(authID, authReq)
-
-		body := fmt.Appendf(nil, `{"authId":%q}`, authID.String())
-		res := h.callHuma(http.MethodPost, "/api/v1/auth/approve", body)
-
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{}`, string(res.body))
-
-		verdict := <-authReq.WaitForAuth()
-		assert.True(t, verdict.Accept(), "approve must finish the session with a passing verdict")
-	})
-
-	// Malformed auth_id: AuthApprove returns codes.InvalidArgument → 400.
-	t.Run("invalid auth_id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/auth/approve",
-			[]byte(`{"authId":"not-a-valid-auth-id"}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	// Well-formed auth_id with no pending session: codes.NotFound → 404.
-	t.Run("no pending session parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		body := fmt.Appendf(nil, `{"authId":%q}`, types.MustAuthID().String())
-		res := h.assertParity(t, http.MethodPost, "/api/v1/auth/approve", body)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-}
-
-func TestAPIV1AuthReject(t *testing.T) {
-	t.Run("happy path", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		authID := types.MustAuthID()
-		authReq := types.NewAuthRequest()
-		h.app.state.SetAuthCacheEntry(authID, authReq)
-
-		body := fmt.Appendf(nil, `{"authId":%q}`, authID.String())
-		res := h.callHuma(http.MethodPost, "/api/v1/auth/reject", body)
-
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{}`, string(res.body))
-
-		verdict := <-authReq.WaitForAuth()
-		assert.False(t, verdict.Accept(), "reject must finish the session with a failing verdict")
-	})
-
-	t.Run("invalid auth_id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/auth/reject",
-			[]byte(`{"authId":"not-a-valid-auth-id"}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("no pending session parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		body := fmt.Appendf(nil, `{"authId":%q}`, types.MustAuthID().String())
-		res := h.assertParity(t, http.MethodPost, "/api/v1/auth/reject", body)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-}
diff --git a/hscontrol/apiv1_authmw_test.go b/hscontrol/apiv1_authmw_test.go
deleted file mode 100644
index 814f839d0..000000000
--- a/hscontrol/apiv1_authmw_test.go
+++ /dev/null
@@ -1,110 +0,0 @@
-package hscontrol
-
-import (
-	"context"
-	"encoding/json"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-	"time"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestAPIV1AuthMiddleware proves the v1 API, mounted on the real router, is
-// guarded by the Huma security middleware: missing or bad Bearer tokens are
-// rejected with 401 before reaching a handler; a valid key passes to 200. The
-// per-endpoint harness bypasses auth via WithLocalTrust, so this is the one
-// place the middleware itself is exercised.
-func TestAPIV1AuthMiddleware(t *testing.T) {
-	app := createTestApp(t)
-	handler := app.HTTPHandler()
-
-	expiry := time.Now().Add(time.Hour)
-	valid, _, err := app.state.CreateAPIKey(&expiry)
-	require.NoError(t, err)
-
-	tests := []struct {
-		name       string
-		authHeader string
-		wantStatus int
-	}{
-		{name: "missing bearer", authHeader: "", wantStatus: http.StatusUnauthorized},
-		{name: "no bearer prefix", authHeader: "tskey-invalid", wantStatus: http.StatusUnauthorized},
-		{name: "invalid bearer token", authHeader: "Bearer tskey-invalid", wantStatus: http.StatusUnauthorized},
-		{name: "valid api key", authHeader: "Bearer " + valid, wantStatus: http.StatusOK},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			req := httptest.NewRequestWithContext(
-				context.Background(), http.MethodGet, "/api/v1/node", nil,
-			)
-			if tt.authHeader != "" {
-				req.Header.Set("Authorization", tt.authHeader)
-			}
-
-			rec := httptest.NewRecorder()
-			handler.ServeHTTP(rec, req)
-
-			assert.Equalf(t, tt.wantStatus, rec.Code, "body: %s", rec.Body.String())
-		})
-	}
-}
-
-// TestAPIV1DocsArePublic proves the OpenAPI document and docs UI live under
-// /api/v1 and are reachable without an API key, while the operations beside them
-// stay key-gated. The docs page points at the versioned spec so a future
-// /api/v2 can carry its own.
-func TestAPIV1DocsArePublic(t *testing.T) {
-	app := createTestApp(t)
-	handler := app.HTTPHandler()
-
-	tests := []struct {
-		path     string
-		contains string
-	}{
-		{path: "/api/v1/openapi.yaml", contains: "openapi:"},
-		{path: "/api/v1/docs", contains: "/api/v1/openapi.yaml"},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.path, func(t *testing.T) {
-			// No Authorization header: these must be public.
-			req := httptest.NewRequestWithContext(
-				context.Background(), http.MethodGet, tt.path, nil,
-			)
-
-			rec := httptest.NewRecorder()
-			handler.ServeHTTP(rec, req)
-
-			require.Equalf(t, http.StatusOK, rec.Code, "%s should be public; body: %s", tt.path, rec.Body.String())
-			assert.Containsf(t, rec.Body.String(), tt.contains, "%s body", tt.path)
-		})
-	}
-}
-
-// TestAPIV1Unauthorized401 pins the 401 body: RFC 7807 JSON containing
-// "Unauthorized", under 100 bytes and leaking no data, as the integration
-// auth-bypass tests require.
-func TestAPIV1Unauthorized401(t *testing.T) {
-	app := createTestApp(t)
-	handler := app.HTTPHandler()
-
-	req := httptest.NewRequestWithContext(
-		context.Background(), http.MethodGet, "/api/v1/node", nil,
-	)
-	rec := httptest.NewRecorder()
-	handler.ServeHTTP(rec, req)
-
-	require.Equal(t, http.StatusUnauthorized, rec.Code)
-
-	body := rec.Body.Bytes()
-	assert.Contains(t, string(body), "Unauthorized")
-	assert.Lessf(t, len(body), 100, "401 body must stay small (no data leak): %s", body)
-
-	var problem map[string]any
-	require.NoError(t, json.Unmarshal(body, &problem), "401 body must be JSON: %s", body)
-	assert.NotContains(t, problem, "users")
-}
diff --git a/hscontrol/apiv1_client_test.go b/hscontrol/apiv1_client_test.go
deleted file mode 100644
index 536d6177d..000000000
--- a/hscontrol/apiv1_client_test.go
+++ /dev/null
@@ -1,50 +0,0 @@
-package hscontrol
-
-import (
-	"context"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestAPIV1GeneratedClient smoke-tests the generated client against the Huma
-// service over a real HTTP server, exercising the typed request/response path
-// end to end.
-func TestAPIV1GeneratedClient(t *testing.T) {
-	app := createTestApp(t)
-	srv := httptest.NewServer(newHumaTestHandler(app))
-	t.Cleanup(srv.Close)
-
-	client, err := clientv1.NewClientWithResponses(srv.URL)
-	require.NoError(t, err)
-
-	ctx := context.Background()
-
-	health, err := client.HealthWithResponse(ctx)
-	require.NoError(t, err)
-	require.Equal(t, http.StatusOK, health.StatusCode())
-	require.NotNil(t, health.JSON200)
-	assert.True(t, health.JSON200.DatabaseConnectivity)
-
-	name := "alice"
-	created, err := client.CreateUserWithResponse(ctx, clientv1.CreateUserJSONRequestBody{
-		Name: &name,
-	})
-	require.NoError(t, err)
-	require.Equal(t, http.StatusOK, created.StatusCode())
-	require.NotNil(t, created.JSON200)
-	require.NotNil(t, created.JSON200.User)
-	assert.Equal(t, "alice", created.JSON200.User.Name)
-	assert.Equal(t, "1", created.JSON200.User.Id)
-
-	listed, err := client.ListUsersWithResponse(ctx, &clientv1.ListUsersParams{})
-	require.NoError(t, err)
-	require.Equal(t, http.StatusOK, listed.StatusCode())
-	require.NotNil(t, listed.JSON200)
-	require.Len(t, listed.JSON200.Users, 1)
-	assert.Equal(t, "alice", listed.JSON200.Users[0].Name)
-}
diff --git a/hscontrol/apiv1_harness_test.go b/hscontrol/apiv1_harness_test.go
deleted file mode 100644
index 256ccf89b..000000000
--- a/hscontrol/apiv1_harness_test.go
+++ /dev/null
@@ -1,276 +0,0 @@
-package hscontrol
-
-import (
-	"bytes"
-	"context"
-	"encoding/json"
-	"io"
-	"net/http"
-	"net/http/httptest"
-	"os"
-	"path/filepath"
-	"regexp"
-	"strings"
-	"testing"
-	"time"
-
-	apiv1 "github.com/juanfont/headscale/hscontrol/api/v1"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// apiV1Harness drives a request through the Huma service and compares the result
-// against a golden keyed by the test name. Goldens neutralise timestamps so they
-// stay stable across runs; refresh with HEADSCALE_UPDATE_GOLDEN=1 after an
-// intentional contract change. assertParity suits reads/errors; mutations use
-// assertParityIsolated against a freshly-seeded app.
-type apiV1Harness struct {
-	app  *Headscale
-	huma http.Handler
-}
-
-func newAPIV1Harness(t *testing.T) *apiV1Harness {
-	t.Helper()
-
-	app := createTestApp(t)
-
-	return &apiV1Harness{
-		app:  app,
-		huma: newHumaTestHandler(app),
-	}
-}
-
-// newHumaTestHandler wraps the Huma handler in WithLocalTrust to bypass the
-// bearer-key middleware — the same local-trust the unix socket gets — so these
-// tests can exercise response shapes. Auth itself is covered against the full
-// router in TestAPIV1AuthMiddleware.
-func newHumaTestHandler(app *Headscale) http.Handler {
-	mux, _ := apiv1.Handler(apiv1.Backend{
-		State:  app.state,
-		Change: app.Change,
-		Cfg:    app.cfg,
-	})
-
-	return apiv1.WithLocalTrust(mux)
-}
-
-// httpResult is one HTTP exchange captured for comparison.
-type httpResult struct {
-	status int
-	body   []byte
-}
-
-func callHandler(handler http.Handler, method, path string, body []byte) httpResult {
-	var reader io.Reader
-	if body != nil {
-		reader = bytes.NewReader(body)
-	}
-
-	req := httptest.NewRequestWithContext(context.Background(), method, path, reader)
-	if body != nil {
-		req.Header.Set("Content-Type", "application/json")
-	}
-
-	rec := httptest.NewRecorder()
-	handler.ServeHTTP(rec, req)
-
-	return httpResult{status: rec.Code, body: rec.Body.Bytes()}
-}
-
-func (h *apiV1Harness) callHuma(method, path string, body []byte) httpResult {
-	return callHandler(h.huma, method, path, body)
-}
-
-// assertParity asserts the Huma response matches the golden: equal status, and
-// for success an equal JSON body (timestamps neutralised). Error bodies are not
-// compared — the shape deliberately deviates from legacy
-// ({code,message,details} vs Huma RFC7807).
-func (h *apiV1Harness) assertParity(t *testing.T, method, path string, body []byte) httpResult {
-	t.Helper()
-
-	hum := h.callHuma(method, path, body)
-
-	assertAgainstGolden(t, method, path, hum)
-
-	return hum
-}
-
-// assertParityIsolated runs the request against a fresh app seeded by seed (may
-// be nil) and compares to the golden. Use for mutations.
-func assertParityIsolated(
-	t *testing.T,
-	seed func(t *testing.T, app *Headscale),
-	method, path string,
-	body []byte,
-) httpResult {
-	t.Helper()
-
-	humaApp := createTestApp(t)
-	if seed != nil {
-		seed(t, humaApp)
-	}
-
-	hum := callHandler(newHumaTestHandler(humaApp), method, path, body)
-
-	assertAgainstGolden(t, method, path, hum)
-
-	return hum
-}
-
-// assertStatus pins the exact HTTP status independently of the golden, so a
-// regression fails even if the golden is blindly regenerated.
-func assertStatus(t *testing.T, got httpResult, want int) {
-	t.Helper()
-
-	assert.Equalf(t, want, got.status,
-		"unexpected HTTP status (golden-independent guard); body: %s", got.body)
-}
-
-func isSuccess(status int) bool {
-	return status >= 200 && status < 300
-}
-
-const goldenDir = "testdata/apiv1_golden"
-
-// goldenRecord is the persisted shape of a captured response: the HTTP status
-// and, when present, the normalised JSON body.
-type goldenRecord struct {
-	Status int             `json:"status"`
-	Body   json.RawMessage `json:"body"`
-}
-
-func goldenPath(t *testing.T) string {
-	t.Helper()
-
-	name := strings.NewReplacer("/", "_", " ", "_").Replace(t.Name())
-
-	return filepath.Join(goldenDir, name+".json")
-}
-
-// assertAgainstGolden compares the Huma response to the recorded golden: status
-// always, body only for success responses.
-func assertAgainstGolden(t *testing.T, method, path string, hum httpResult) {
-	t.Helper()
-
-	gpath := goldenPath(t)
-
-	if os.Getenv("HEADSCALE_UPDATE_GOLDEN") != "" {
-		writeGolden(t, gpath, hum)
-
-		return
-	}
-
-	raw, err := os.ReadFile(gpath)
-	require.NoErrorf(t, err,
-		"missing golden %s for %s %s — run with HEADSCALE_UPDATE_GOLDEN=1 to generate",
-		gpath, method, path)
-
-	var golden goldenRecord
-	require.NoErrorf(t, json.Unmarshal(raw, &golden), "decoding golden %s", gpath)
-
-	assert.Equalf(t, golden.Status, hum.status,
-		"status mismatch for %s %s\nhuma body: %s", method, path, hum.body)
-
-	if isSuccess(golden.Status) {
-		var goldenBody any
-		if len(golden.Body) > 0 {
-			goldenBody = normalizeJSON(t, golden.Body, true)
-		}
-
-		assert.Equalf(t, goldenBody, normalizeJSON(t, hum.body, true),
-			"body mismatch for %s %s", method, path)
-	}
-}
-
-// writeGolden persists the response under HEADSCALE_UPDATE_GOLDEN. Success
-// bodies are normalised the same way the comparison path does, so the file stays
-// stable across runs. Error responses are stored status-only, since the reader
-// never compares error bodies.
-func writeGolden(t *testing.T, gpath string, hum httpResult) {
-	t.Helper()
-
-	rec := goldenRecord{Status: hum.status}
-
-	if isSuccess(hum.status) {
-		if normalised := normalizeJSON(t, hum.body, true); normalised != nil {
-			raw, err := json.Marshal(normalised)
-			require.NoErrorf(t, err, "marshalling golden body for %s", gpath)
-
-			rec.Body = raw
-		}
-	}
-
-	out, err := json.MarshalIndent(rec, "", "  ")
-	require.NoErrorf(t, err, "marshalling golden record for %s", gpath)
-
-	require.NoErrorf(t, os.MkdirAll(filepath.Dir(gpath), 0o755),
-		"creating golden dir for %s", gpath)
-	require.NoErrorf(t, os.WriteFile(gpath, append(out, '\n'), 0o600),
-		"writing golden %s", gpath)
-
-	t.Logf("updated golden %s", gpath)
-}
-
-// nonDeterministicRe matches values that embed per-app random material and so
-// cannot match byte-for-byte across apps: masked key/secret prefixes
-// (hskey-auth-<prefix>-***, hskey-api-<prefix>-***) and Tailscale key material
-// (mkey:/nodekey:/discokey:<hex>). Neutralised to a sentinel when neutralise is
-// true.
-var nonDeterministicRe = regexp.MustCompile(
-	`^(hskey-(auth|api)-[0-9a-f]+-\*\*\*|(mkey|nodekey|discokey):[0-9a-f]+)$`,
-)
-
-// normalizeJSON decodes JSON for order-independent, type-aware comparison.
-// Numbers decode as json.Number so "5" and 5 are not conflated, surfacing
-// string-encoding differences. With neutralise, timestamps and per-app random
-// values (see nonDeterministicRe) become sentinels; otherwise timestamps are
-// canonicalised to a UTC instant.
-func normalizeJSON(t *testing.T, b []byte, neutralise bool) any {
-	t.Helper()
-
-	if len(bytes.TrimSpace(b)) == 0 {
-		return nil
-	}
-
-	dec := json.NewDecoder(bytes.NewReader(b))
-	dec.UseNumber()
-
-	var v any
-	require.NoErrorf(t, dec.Decode(&v), "decoding JSON: %s", b)
-
-	return canonicalizeTimestamps(v, neutralise)
-}
-
-func canonicalizeTimestamps(v any, neutralise bool) any {
-	switch val := v.(type) {
-	case map[string]any:
-		for k, child := range val {
-			val[k] = canonicalizeTimestamps(child, neutralise)
-		}
-
-		return val
-	case []any:
-		for i, child := range val {
-			val[i] = canonicalizeTimestamps(child, neutralise)
-		}
-
-		return val
-	case string:
-		if neutralise && nonDeterministicRe.MatchString(val) {
-			return "<secret>"
-		}
-
-		ts, err := time.Parse(time.RFC3339Nano, val)
-		if err != nil {
-			return val
-		}
-
-		if neutralise {
-			return "<timestamp>"
-		}
-
-		return ts.UTC().Format(time.RFC3339Nano)
-	default:
-		return v
-	}
-}
diff --git a/hscontrol/apiv1_health_test.go b/hscontrol/apiv1_health_test.go
deleted file mode 100644
index 6e25ddb24..000000000
--- a/hscontrol/apiv1_health_test.go
+++ /dev/null
@@ -1,24 +0,0 @@
-package hscontrol
-
-import (
-	"net/http"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-func TestAPIV1Health(t *testing.T) {
-	h := newAPIV1Harness(t)
-
-	t.Run("huma returns healthy with database connectivity", func(t *testing.T) {
-		res := h.callHuma(http.MethodGet, "/api/v1/health", nil)
-
-		assert.Equal(t, http.StatusOK, res.status)
-		require.JSONEq(t, `{"databaseConnectivity":true}`, string(res.body))
-	})
-
-	t.Run("parity with gateway", func(t *testing.T) {
-		h.assertParity(t, http.MethodGet, "/api/v1/health", nil)
-	})
-}
diff --git a/hscontrol/apiv1_nodes_test.go b/hscontrol/apiv1_nodes_test.go
deleted file mode 100644
index dc6e22228..000000000
--- a/hscontrol/apiv1_nodes_test.go
+++ /dev/null
@@ -1,416 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
-)
-
-// nodeSeed carries fixed key material so isolated apps in a mutation parity test
-// register byte-identical nodes; otherwise random keys would defeat body
-// comparison.
-type nodeSeed struct {
-	user       string
-	machineKey key.MachinePrivate
-	nodeKey    key.NodePrivate
-	hostname   string
-	tags       []string
-}
-
-func newNodeSeed(user, hostname string, tags ...string) nodeSeed {
-	return nodeSeed{
-		user:       user,
-		machineKey: key.NewMachine(),
-		nodeKey:    key.NewNode(),
-		hostname:   hostname,
-		tags:       tags,
-	}
-}
-
-// register inserts the user, a matching pre-auth key, and the node itself using
-// the seed's fixed keys, returning the created node ID.
-func (s nodeSeed) register(t *testing.T, app *Headscale) types.NodeID {
-	t.Helper()
-
-	user := app.state.CreateUserForTest(s.user)
-
-	pak, err := app.state.CreatePreAuthKey(user.TypedID(), false, false, nil, s.tags)
-	require.NoError(t, err)
-
-	req := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey:  s.nodeKey.Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: s.hostname},
-	}
-
-	_, err = app.handleRegisterWithAuthKey(req, s.machineKey.Public())
-	require.NoError(t, err)
-
-	node, found := app.state.GetNodeByNodeKey(s.nodeKey.Public())
-	require.True(t, found)
-
-	return node.ID()
-}
-
-func seedNodes(seeds ...nodeSeed) func(t *testing.T, app *Headscale) {
-	return func(t *testing.T, app *Headscale) {
-		t.Helper()
-
-		for _, s := range seeds {
-			s.register(t, app)
-		}
-	}
-}
-
-func TestAPIV1NodeGet(t *testing.T) {
-	t.Run("happy parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/node/1", nil)
-	})
-
-	t.Run("tagged node parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		// No tagOwners means policy won't authorise a tag, so register via the
-		// pre-auth key path, which forces tags regardless of policy.
-		seedNodes(newNodeSeed("bob", "node-b", "tag:initial"))(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/node/1", nil)
-	})
-
-	t.Run("not found parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodGet, "/api/v1/node/99999", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodGet, "/api/v1/node/abc", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("huma response shape", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("carol", "node-c"))(t, h.app)
-
-		res := h.callHuma(http.MethodGet, "/api/v1/node/1", nil)
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			Node map[string]any `json:"node"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Equal(t, "1", got.Node["id"])
-		assert.Equal(t, "node-c", got.Node["name"])
-		assert.Equal(t, "REGISTER_METHOD_AUTH_KEY", got.Node["registerMethod"])
-		// EmitUnpopulated parity: slices present as [], expiry as null.
-		assert.Equal(t, []any{}, got.Node["ipAddresses"])
-		assert.Equal(t, []any{}, got.Node["tags"])
-		assert.Nil(t, got.Node["expiry"])
-		assert.Contains(t, got.Node, "user")
-		assert.Contains(t, got.Node, "preAuthKey")
-		assert.Contains(t, got.Node, "createdAt")
-	})
-}
-
-func TestAPIV1NodeList(t *testing.T) {
-	t.Run("empty returns empty array", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		res := h.callHuma(http.MethodGet, "/api/v1/node", nil)
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{"nodes":[]}`, string(res.body))
-	})
-
-	t.Run("empty parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		h.assertParity(t, http.MethodGet, "/api/v1/node", nil)
-	})
-
-	t.Run("all parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(
-			newNodeSeed("alice", "node-a"),
-			newNodeSeed("bob", "node-b"),
-		)(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/node", nil)
-	})
-
-	t.Run("filter by user parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(
-			newNodeSeed("alice", "node-a"),
-			newNodeSeed("bob", "node-b"),
-		)(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/node?user=alice", nil)
-	})
-
-	t.Run("unknown user parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-		res := h.assertParity(t, http.MethodGet, "/api/v1/node?user=nope", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-}
-
-func TestAPIV1NodeDelete(t *testing.T) {
-	t.Run("happy parity", func(t *testing.T) {
-		assertParityIsolated(t, seedNodes(newNodeSeed("alice", "node-a")),
-			http.MethodDelete, "/api/v1/node/1", nil)
-	})
-
-	t.Run("not found parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodDelete, "/api/v1/node/99999", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodDelete, "/api/v1/node/abc", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1NodeExpire(t *testing.T) {
-	// The embedded pre-auth key's masked prefix is random per app, so isolated
-	// body comparison is impossible. GetNode/ListNodes prove full serialisation;
-	// here we just assert the mutation took effect.
-	t.Run("huma expires node", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/node/1/expire", nil)
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			Node map[string]any `json:"node"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Equal(t, "1", got.Node["id"])
-		// Expiry was nil before; expiring sets it to a concrete timestamp.
-		assert.NotNil(t, got.Node["expiry"])
-	})
-
-	t.Run("not found parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/99999/expire", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/abc/expire", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1NodeRename(t *testing.T) {
-	t.Run("huma renames node", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/node/1/rename/renamed-node", nil)
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			Node map[string]any `json:"node"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Equal(t, "renamed-node", got.Node["givenName"])
-	})
-
-	t.Run("not found parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/99999/rename/whatever", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/abc/rename/whatever", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1NodeSetTags(t *testing.T) {
-	t.Run("not found parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/99999/tags",
-			[]byte(`{"tags":["tag:foo"]}`))
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("empty tags parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/1/tags", []byte(`{"tags":[]}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("unauthorized tag parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-		// No tagOwners in policy → SetNodeTags rejects with InvalidArgument (400).
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/1/tags",
-			[]byte(`{"tags":["tag:server"]}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/abc/tags",
-			[]byte(`{"tags":["tag:foo"]}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1NodeSetApprovedRoutes(t *testing.T) {
-	t.Run("huma sets approved routes", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/node/1/approve_routes",
-			[]byte(`{"routes":[]}`))
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			Node map[string]any `json:"node"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Equal(t, "1", got.Node["id"])
-		// SubnetRoutes is recomputed from primary routes; empty here but present.
-		assert.Equal(t, []any{}, got.Node["approvedRoutes"])
-		assert.Equal(t, []any{}, got.Node["subnetRoutes"])
-	})
-
-	t.Run("not found parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/99999/approve_routes",
-			[]byte(`{"routes":["10.0.0.0/24"]}`))
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/abc/approve_routes",
-			[]byte(`{"routes":[]}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1NodeRegister(t *testing.T) {
-	t.Run("happy parity", func(t *testing.T) {
-		authID := types.MustAuthID()
-		mk := key.NewMachine()
-		nk := key.NewNode()
-
-		seed := func(t *testing.T, app *Headscale) {
-			t.Helper()
-
-			app.state.CreateUserForTest("alice")
-
-			regData := &types.RegistrationData{
-				NodeKey:    nk.Public(),
-				MachineKey: mk.Public(),
-				Hostname:   "registered-node",
-			}
-			app.state.SetAuthCacheEntry(authID, types.NewRegisterAuthRequest(regData))
-		}
-
-		assertParityIsolated(t, seed, http.MethodPost,
-			"/api/v1/node/register?user=alice&key="+authID.String(), nil)
-	})
-
-	t.Run("invalid key parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-		res := h.assertParity(t, http.MethodPost,
-			"/api/v1/node/register?user=alice&key=invalidkey", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("unknown user parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost,
-			"/api/v1/node/register?user=nope&key="+types.MustAuthID().String(), nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-}
-
-func TestAPIV1NodeBackfillIPs(t *testing.T) {
-	t.Run("confirmed empty parity", func(t *testing.T) {
-		assertParityIsolated(t, nil, http.MethodPost,
-			"/api/v1/node/backfillips?confirmed=true", nil)
-	})
-
-	t.Run("confirmed returns empty array", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/node/backfillips?confirmed=true", nil)
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{"changes":[]}`, string(res.body))
-	})
-
-	t.Run("unconfirmed parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/node/backfillips", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1NodeDebugCreate(t *testing.T) {
-	t.Run("unknown user parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		body := []byte(`{"user":"nope","key":"` + types.MustAuthID().String() +
-			`","name":"dbg","routes":[]}`)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/debug/node", body)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid key parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedNodes(newNodeSeed("alice", "node-a"))(t, h.app)
-
-		body := []byte(`{"user":"alice","key":"badkey","name":"dbg","routes":[]}`)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/debug/node", body)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	// The handler mints fresh key material per call, so isolated apps can't
-	// produce byte-identical bodies; assert the shape directly instead.
-	t.Run("huma response shape", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		h.app.state.CreateUserForTest("alice")
-
-		body := []byte(`{"user":"alice","key":"` + types.MustAuthID().String() +
-			`","name":"dbgnode","routes":["10.0.0.0/24"]}`)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/debug/node", body)
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			Node map[string]any `json:"node"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Equal(t, "dbgnode", got.Node["name"])
-		assert.Equal(t, "REGISTER_METHOD_UNSPECIFIED", got.Node["registerMethod"])
-		assert.Equal(t, []any{"10.0.0.0/24"}, got.Node["availableRoutes"])
-		// The synthetic echo node has no pre-auth key: emitted as null.
-		assert.Nil(t, got.Node["preAuthKey"])
-		// Zero-time expiry/lastSeen are emitted as the zero instant, not null.
-		assert.Equal(t, "0001-01-01T00:00:00Z", got.Node["expiry"])
-		assert.Equal(t, "0001-01-01T00:00:00Z", got.Node["lastSeen"])
-	})
-}
diff --git a/hscontrol/apiv1_policy_test.go b/hscontrol/apiv1_policy_test.go
deleted file mode 100644
index 0c4cfefa0..000000000
--- a/hscontrol/apiv1_policy_test.go
+++ /dev/null
@@ -1,186 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/mapper"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// validPolicy is a minimal policy that passes validation without nodes or users.
-const validPolicy = `{"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-
-// invalidPolicy is not valid HuJSON, so policy manager construction fails.
-const invalidPolicy = `{"acls": [`
-
-// seedPolicy stores a policy in the database so reads return it.
-func seedPolicy(policy string) func(t *testing.T, app *Headscale) {
-	return func(t *testing.T, app *Headscale) {
-		t.Helper()
-
-		_, err := app.state.SetPolicyInDB(policy)
-		require.NoError(t, err)
-	}
-}
-
-func TestAPIV1PolicyGet(t *testing.T) {
-	t.Run("empty parity", func(t *testing.T) {
-		// With no policy stored, the DB load fails; this is treated as a server
-		// fault (500), matching the legacy contract.
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodGet, "/api/v1/policy", nil)
-		assertStatus(t, res, http.StatusInternalServerError)
-	})
-
-	t.Run("set parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedPolicy(validPolicy)(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/policy", nil)
-	})
-
-	t.Run("huma response shape", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedPolicy(validPolicy)(t, h.app)
-
-		res := h.callHuma(http.MethodGet, "/api/v1/policy", nil)
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			Policy    string `json:"policy"`
-			UpdatedAt string `json:"updatedAt"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.JSONEq(t, validPolicy, got.Policy)
-		// updatedAt is emitted even though no omitempty is set.
-		assert.NotEmpty(t, got.UpdatedAt)
-	})
-}
-
-func TestAPIV1PolicySet(t *testing.T) {
-	t.Run("valid parity", func(t *testing.T) {
-		body, err := json.Marshal(map[string]string{"policy": validPolicy})
-		require.NoError(t, err)
-
-		assertParityIsolated(t, nil, http.MethodPut, "/api/v1/policy", body)
-	})
-
-	t.Run("invalid parity", func(t *testing.T) {
-		body, err := json.Marshal(map[string]string{"policy": invalidPolicy})
-		require.NoError(t, err)
-
-		res := assertParityIsolated(t, nil, http.MethodPut, "/api/v1/policy", body)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("huma response shape", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		body, err := json.Marshal(map[string]string{"policy": validPolicy})
-		require.NoError(t, err)
-
-		res := h.callHuma(http.MethodPut, "/api/v1/policy", body)
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			Policy    string `json:"policy"`
-			UpdatedAt string `json:"updatedAt"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.JSONEq(t, validPolicy, got.Policy)
-		assert.NotEmpty(t, got.UpdatedAt)
-	})
-
-	t.Run("not-db mode rejected", func(t *testing.T) {
-		// Policy updates are only valid in DB mode; file mode rejects with 400.
-		// createTestApp is DB mode, so build a file-mode app here.
-		humaApp := createFilePolicyApp(t)
-
-		body, err := json.Marshal(map[string]string{"policy": validPolicy})
-		require.NoError(t, err)
-
-		hum := callHandler(newHumaTestHandler(humaApp), http.MethodPut, "/api/v1/policy", body)
-
-		assert.Equal(t, http.StatusBadRequest, hum.status,
-			"huma body: %s", hum.body)
-	})
-}
-
-func TestAPIV1PolicyCheck(t *testing.T) {
-	t.Run("valid parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		body, err := json.Marshal(map[string]string{"policy": validPolicy})
-		require.NoError(t, err)
-
-		h.assertParity(t, http.MethodPost, "/api/v1/policy/check", body)
-	})
-
-	t.Run("invalid parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		body, err := json.Marshal(map[string]string{"policy": invalidPolicy})
-		require.NoError(t, err)
-
-		res := h.assertParity(t, http.MethodPost, "/api/v1/policy/check", body)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("valid returns empty object", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		body, err := json.Marshal(map[string]string{"policy": validPolicy})
-		require.NoError(t, err)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/policy/check", body)
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{}`, string(res.body))
-	})
-}
-
-// createFilePolicyApp mirrors createTestApp but with file-based policy mode so
-// the policy-update-disabled path can be exercised.
-func createFilePolicyApp(t *testing.T) *Headscale {
-	t.Helper()
-
-	tmpDir := t.TempDir()
-
-	cfg := types.Config{
-		ServerURL:           "http://localhost:8080",
-		NoisePrivateKeyPath: tmpDir + "/noise_private.key",
-		Database: types.DatabaseConfig{
-			Type: "sqlite3",
-			Sqlite: types.SqliteConfig{
-				Path: tmpDir + "/headscale_test.db",
-			},
-		},
-		OIDC: types.OIDCConfig{},
-		Policy: types.PolicyConfig{
-			Mode: types.PolicyModeFile,
-		},
-		Tuning: types.Tuning{
-			BatchChangeDelay: 100 * time.Millisecond,
-			BatcherWorkers:   1,
-		},
-	}
-
-	app, err := NewHeadscale(&cfg)
-	require.NoError(t, err)
-
-	app.mapBatcher = mapper.NewBatcherAndMapper(&cfg, app.state)
-	app.mapBatcher.Start()
-
-	t.Cleanup(func() {
-		if app.mapBatcher != nil {
-			app.mapBatcher.Close()
-		}
-	})
-
-	return app
-}
diff --git a/hscontrol/apiv1_preauthkeys_test.go b/hscontrol/apiv1_preauthkeys_test.go
deleted file mode 100644
index 2df5f8e6d..000000000
--- a/hscontrol/apiv1_preauthkeys_test.go
+++ /dev/null
@@ -1,163 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// seedPreAuthKeys creates a user-owned key and a tagged (system-created) key;
-// the tagged key exercises the user:null path.
-func seedPreAuthKeys() func(t *testing.T, app *Headscale) {
-	return func(t *testing.T, app *Headscale) {
-		t.Helper()
-
-		user := app.state.CreateUserForTest("alice")
-		uid := types.UserID(user.ID)
-		exp := time.Time{}
-
-		_, err := app.state.CreatePreAuthKey(&uid, true, false, &exp, nil)
-		require.NoError(t, err)
-
-		// Tagged, system-created: no user.
-		_, err = app.state.CreatePreAuthKey(nil, false, true, &exp, []string{"tag:test"})
-		require.NoError(t, err)
-	}
-}
-
-func TestAPIV1CreatePreAuthKey(t *testing.T) {
-	t.Run("huma response shape", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		h.app.state.CreateUserForTest("alice")
-
-		res := h.callHuma(http.MethodPost, "/api/v1/preauthkey",
-			[]byte(`{"user":"1","reusable":true}`))
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			PreAuthKey map[string]any `json:"preAuthKey"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Equal(t, "1", got.PreAuthKey["id"])
-		assert.Equal(t, true, got.PreAuthKey["reusable"])
-		// Zero-value fields are emitted (EmitUnpopulated parity).
-		assert.Equal(t, false, got.PreAuthKey["ephemeral"])
-		assert.Equal(t, false, got.PreAuthKey["used"])
-		assert.Contains(t, got.PreAuthKey, "expiration")
-		assert.Contains(t, got.PreAuthKey, "createdAt")
-		// Empty tags serialize as [], not null.
-		assert.Equal(t, []any{}, got.PreAuthKey["aclTags"])
-		// The freshly created key returns its full secret.
-		assert.NotEmpty(t, got.PreAuthKey["key"])
-		user, ok := got.PreAuthKey["user"].(map[string]any)
-		require.True(t, ok)
-		assert.Equal(t, "1", user["id"])
-	})
-
-	t.Run("tagged key has null user", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/preauthkey",
-			[]byte(`{"aclTags":["tag:test"]}`))
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			PreAuthKey map[string]any `json:"preAuthKey"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Nil(t, got.PreAuthKey["user"])
-		assert.Equal(t, []any{"tag:test"}, got.PreAuthKey["aclTags"])
-	})
-
-	t.Run("invalid tag parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		h.app.state.CreateUserForTest("alice")
-		res := h.assertParity(t, http.MethodPost, "/api/v1/preauthkey",
-			[]byte(`{"user":"1","aclTags":["badtag"]}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("nonexistent user parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/preauthkey", []byte(`{"user":"999"}`))
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid user id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/preauthkey", []byte(`{"user":"abc"}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-
-	t.Run("neither tagged nor owned parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/preauthkey", []byte(`{"reusable":true}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1ExpirePreAuthKey(t *testing.T) {
-	t.Run("parity", func(t *testing.T) {
-		assertParityIsolated(t, seedPreAuthKeys(), http.MethodPost,
-			"/api/v1/preauthkey/expire", []byte(`{"id":"1"}`))
-	})
-
-	t.Run("nonexistent parity", func(t *testing.T) {
-		res := assertParityIsolated(t, seedPreAuthKeys(), http.MethodPost,
-			"/api/v1/preauthkey/expire", []byte(`{"id":"99999"}`))
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/preauthkey/expire", []byte(`{"id":"abc"}`))
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1DeletePreAuthKey(t *testing.T) {
-	t.Run("parity", func(t *testing.T) {
-		assertParityIsolated(t, seedPreAuthKeys(), http.MethodDelete,
-			"/api/v1/preauthkey?id=1", nil)
-	})
-
-	t.Run("nonexistent parity", func(t *testing.T) {
-		res := assertParityIsolated(t, seedPreAuthKeys(), http.MethodDelete,
-			"/api/v1/preauthkey?id=99999", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodDelete, "/api/v1/preauthkey?id=abc", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1ListPreAuthKeys(t *testing.T) {
-	t.Run("empty returns empty array", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		res := h.callHuma(http.MethodGet, "/api/v1/preauthkey", nil)
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{"preAuthKeys":[]}`, string(res.body))
-	})
-
-	t.Run("empty parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		h.assertParity(t, http.MethodGet, "/api/v1/preauthkey", nil)
-	})
-
-	t.Run("all parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedPreAuthKeys()(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/preauthkey", nil)
-	})
-}
diff --git a/hscontrol/apiv1_socket_test.go b/hscontrol/apiv1_socket_test.go
deleted file mode 100644
index 0b6f53ec3..000000000
--- a/hscontrol/apiv1_socket_test.go
+++ /dev/null
@@ -1,61 +0,0 @@
-package hscontrol
-
-import (
-	"context"
-	"net"
-	"net/http"
-	"path/filepath"
-	"testing"
-
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestAPIV1SocketClient proves the CLI's local transport: the Huma handler over
-// a unix socket reached by an http.Client that dials it, the same wiring as the
-// server's socket listener and the CLI's newSocketClient, on local trust.
-func TestAPIV1SocketClient(t *testing.T) {
-	app := createTestApp(t)
-
-	socketPath := filepath.Join(t.TempDir(), "headscale.sock")
-
-	lis, err := new(net.ListenConfig).Listen(context.Background(), "unix", socketPath)
-	require.NoError(t, err)
-
-	srv := &http.Server{Handler: newHumaTestHandler(app)} //nolint:gosec
-	go func() { _ = srv.Serve(lis) }()
-
-	t.Cleanup(func() { _ = srv.Close() })
-
-	httpClient := &http.Client{
-		Transport: &http.Transport{
-			DialContext: func(ctx context.Context, _, _ string) (net.Conn, error) {
-				var d net.Dialer
-
-				return d.DialContext(ctx, "unix", socketPath)
-			},
-		},
-	}
-
-	client, err := clientv1.NewClientWithResponses(
-		"http://local",
-		clientv1.WithHTTPClient(httpClient),
-	)
-	require.NoError(t, err)
-
-	ctx := context.Background()
-
-	health, err := client.HealthWithResponse(ctx)
-	require.NoError(t, err)
-	require.Equal(t, http.StatusOK, health.StatusCode())
-	require.NotNil(t, health.JSON200)
-	assert.True(t, health.JSON200.DatabaseConnectivity)
-
-	name := "socket-user"
-	created, err := client.CreateUserWithResponse(ctx, clientv1.CreateUserJSONRequestBody{Name: &name})
-	require.NoError(t, err)
-	require.Equal(t, http.StatusOK, created.StatusCode())
-	require.NotNil(t, created.JSON200)
-	assert.Equal(t, "socket-user", created.JSON200.User.Name)
-}
diff --git a/hscontrol/apiv1_users_test.go b/hscontrol/apiv1_users_test.go
deleted file mode 100644
index 428ba21c6..000000000
--- a/hscontrol/apiv1_users_test.go
+++ /dev/null
@@ -1,123 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-func seedUsers(names ...string) func(t *testing.T, app *Headscale) {
-	return func(t *testing.T, app *Headscale) {
-		t.Helper()
-
-		for _, n := range names {
-			app.state.CreateUserForTest(n)
-		}
-	}
-}
-
-func TestAPIV1CreateUser(t *testing.T) {
-	t.Run("huma response shape", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		res := h.callHuma(http.MethodPost, "/api/v1/user", []byte(`{"name":"test"}`))
-		require.Equal(t, http.StatusOK, res.status)
-
-		var got struct {
-			User map[string]any `json:"user"`
-		}
-		require.NoError(t, json.Unmarshal(res.body, &got))
-
-		assert.Equal(t, "1", got.User["id"])
-		assert.Equal(t, "test", got.User["name"])
-		assert.Contains(t, got.User, "createdAt")
-		// Zero-value fields are emitted as empty strings (EmitUnpopulated parity).
-		assert.Empty(t, got.User["email"])
-		assert.Empty(t, got.User["displayName"])
-	})
-
-	t.Run("parity", func(t *testing.T) {
-		assertParityIsolated(t, nil, http.MethodPost, "/api/v1/user",
-			[]byte(`{"name":"test","displayName":"Test","email":"t@example.com"}`))
-	})
-
-	t.Run("duplicate name parity", func(t *testing.T) {
-		res := assertParityIsolated(t, seedUsers("dup"), http.MethodPost, "/api/v1/user",
-			[]byte(`{"name":"dup"}`))
-		assertStatus(t, res, http.StatusConflict)
-	})
-}
-
-func TestAPIV1RenameUser(t *testing.T) {
-	t.Run("parity", func(t *testing.T) {
-		assertParityIsolated(t, seedUsers("alice"), http.MethodPost,
-			"/api/v1/user/1/rename/bob", nil)
-	})
-
-	t.Run("nonexistent parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/user/999/rename/bob", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodPost, "/api/v1/user/abc/rename/bob", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
-
-func TestAPIV1DeleteUser(t *testing.T) {
-	t.Run("parity", func(t *testing.T) {
-		assertParityIsolated(t, seedUsers("alice"), http.MethodDelete, "/api/v1/user/1", nil)
-	})
-
-	t.Run("nonexistent parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		res := h.assertParity(t, http.MethodDelete, "/api/v1/user/999", nil)
-		assertStatus(t, res, http.StatusNotFound)
-	})
-}
-
-func TestAPIV1ListUsers(t *testing.T) {
-	t.Run("empty returns empty array", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-
-		res := h.callHuma(http.MethodGet, "/api/v1/user", nil)
-		require.Equal(t, http.StatusOK, res.status)
-		assert.JSONEq(t, `{"users":[]}`, string(res.body))
-	})
-
-	t.Run("empty parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		h.assertParity(t, http.MethodGet, "/api/v1/user", nil)
-	})
-
-	t.Run("all parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedUsers("alice", "bob", "carol")(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/user", nil)
-	})
-
-	t.Run("filter by name parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedUsers("alice", "bob")(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/user?name=alice", nil)
-	})
-
-	t.Run("filter by id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedUsers("alice", "bob")(t, h.app)
-		h.assertParity(t, http.MethodGet, "/api/v1/user?id=2", nil)
-	})
-
-	t.Run("invalid id parity", func(t *testing.T) {
-		h := newAPIV1Harness(t)
-		seedUsers("alice")(t, h.app)
-		res := h.assertParity(t, http.MethodGet, "/api/v1/user?id=abc", nil)
-		assertStatus(t, res, http.StatusBadRequest)
-	})
-}
diff --git a/hscontrol/apiv2_acl_test.go b/hscontrol/apiv2_acl_test.go
deleted file mode 100644
index def9af824..000000000
--- a/hscontrol/apiv2_acl_test.go
+++ /dev/null
@@ -1,239 +0,0 @@
-package hscontrol
-
-import (
-	"bytes"
-	"crypto/sha256"
-	"encoding/hex"
-	"errors"
-	"net/http"
-	"net/http/httptest"
-	"os"
-	"path/filepath"
-	"testing"
-
-	"github.com/danielgtaylor/huma/v2/humatest"
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-const allowAllPolicy = `{"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-
-// storedPolicy returns the HuJSON actually persisted in the DB (server-side
-// ground truth), or "" when none is set.
-func storedPolicy(t *testing.T, app *Headscale) string {
-	t.Helper()
-
-	p, err := app.state.GetPolicy()
-	if errors.Is(err, types.ErrPolicyNotFound) {
-		return ""
-	}
-
-	require.NoError(t, err)
-
-	return p.Data
-}
-
-// policyETagOf recomputes the expected ETag independently of the handler, so a
-// handler that hashed the wrong buffer is caught.
-func policyETagOf(data string) string {
-	sum := sha256.Sum256([]byte(data))
-
-	return `"` + hex.EncodeToString(sum[:]) + `"`
-}
-
-// setACL POSTs a raw policy body with the given content type and optional
-// headers (e.g. "If-Match: ...").
-func setACL(t *testing.T, api humatest.TestAPI, body, contentType string, headers ...string) *httptest.ResponseRecorder {
-	t.Helper()
-
-	args := make([]any, 0, 2+len(headers))
-	args = append(args, bytes.NewReader([]byte(body)), "Content-Type: "+contentType)
-
-	for _, h := range headers {
-		args = append(args, h)
-	}
-
-	return api.Post("/api/v2/tailnet/-/acl", args...)
-}
-
-func TestAPIv2ACLDefaultWhenUnset(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	resp := api.Get("/api/v2/tailnet/-/acl")
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-	assert.NotEmpty(t, resp.Header().Get("Etag"))
-	assert.Contains(t, resp.Body.String(), `"acls"`)
-
-	// GET did not materialize a stored policy.
-	assert.Empty(t, storedPolicy(t, app))
-
-	// Content-addressed: a second GET returns the same ETag.
-	assert.Equal(t, resp.Header().Get("Etag"), api.Get("/api/v2/tailnet/-/acl").Header().Get("Etag"))
-}
-
-func TestAPIv2ACLContentNegotiation(t *testing.T) {
-	api := registerAPIV2(t, createTestApp(t))
-
-	jsonResp := api.Get("/api/v2/tailnet/-/acl")
-	huResp := api.Get("/api/v2/tailnet/-/acl", "Accept: application/hujson")
-
-	assert.Equal(t, "application/json", jsonResp.Header().Get("Content-Type"))
-	assert.Equal(t, "application/hujson", huResp.Header().Get("Content-Type"))
-	// Same bytes, same ETag — the ETag is over content, not type.
-	assert.Equal(t, jsonResp.Body.Bytes(), huResp.Body.Bytes())
-	assert.Equal(t, jsonResp.Header().Get("Etag"), huResp.Header().Get("Etag"))
-}
-
-func TestAPIv2ACLSetCanonicalJSON(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	set := setACL(t, api, allowAllPolicy, "application/json")
-	require.Equalf(t, http.StatusOK, set.Code, "body: %s", set.Body)
-	setETag := set.Header().Get("Etag")
-	assert.NotEmpty(t, setETag)
-
-	// (a) tool's own get reflects it, same ETag.
-	get := api.Get("/api/v2/tailnet/-/acl")
-	assert.Contains(t, get.Body.String(), `"action":"accept"`)
-	assert.Equal(t, setETag, get.Header().Get("Etag"))
-
-	// (b) server-side: exact stored bytes.
-	assert.JSONEq(t, allowAllPolicy, storedPolicy(t, app))
-
-	// (c) ETag is the sha256 of those bytes.
-	assert.Equal(t, policyETagOf(allowAllPolicy), setETag)
-}
-
-func TestAPIv2ACLSetHuJSONWithComments(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	// Line comment + trailing comma: valid HuJSON, invalid strict JSON. The
-	// server accepts it (the SDK sends the policy file this way) and standardizes
-	// it on store; the ACL content survives even though comments are blanked.
-	policy := "{\n  // allow all\n  \"acls\": [{\"action\":\"accept\",\"src\":[\"*\"],\"dst\":[\"*:*\"]}],\n}"
-
-	set := setACL(t, api, policy, "application/hujson")
-	require.Equalf(t, http.StatusOK, set.Code, "body: %s", set.Body)
-
-	// Server-side: stored, parseable, ACL intact.
-	stored := storedPolicy(t, app)
-	assert.Contains(t, stored, `"action":"accept"`)
-
-	// GET round-trips the stored form and its content-addressed ETag.
-	raw := api.Get("/api/v2/tailnet/-/acl", "Accept: application/hujson")
-	assert.Equal(t, stored, raw.Body.String())
-	assert.Equal(t, policyETagOf(stored), raw.Header().Get("Etag"))
-}
-
-func TestAPIv2ACLETagChangesOnChangeStableOnNoop(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	etag1 := setACL(t, api, allowAllPolicy, "application/json").Header().Get("Etag")
-	stored1 := storedPolicy(t, app)
-
-	p2 := `{"hosts":{"h":"100.64.0.1"},"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-	etag2 := setACL(t, api, p2, "application/json").Header().Get("Etag")
-	assert.NotEqual(t, etag1, etag2, "etag changes when policy changes")
-	assert.NotEqual(t, stored1, storedPolicy(t, app))
-
-	// No-op re-set keeps the ETag stable.
-	etag3 := setACL(t, api, p2, "application/json").Header().Get("Etag")
-	assert.Equal(t, etag2, etag3)
-	assert.Equal(t, p2, storedPolicy(t, app))
-}
-
-func TestAPIv2ACLIfMatchPreconditions(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	etag := setACL(t, api, allowAllPolicy, "application/json").Header().Get("Etag")
-
-	p2 := `{"hosts":{"h":"100.64.0.1"},"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-
-	// Match -> 200, applies.
-	require.Equal(t, http.StatusOK, setACL(t, api, p2, "application/json", "If-Match: "+etag).Code)
-	assert.Equal(t, p2, storedPolicy(t, app))
-
-	// Mismatch -> 412, server unchanged.
-	before := storedPolicy(t, app)
-	assert.Equal(t, http.StatusPreconditionFailed,
-		setACL(t, api, allowAllPolicy, "application/json", `If-Match: "deadbeef"`).Code)
-	assert.Equal(t, before, storedPolicy(t, app), "rejected write left the policy untouched")
-
-	// Absent -> unconditional 200.
-	require.Equal(t, http.StatusOK, setACL(t, api, allowAllPolicy, "application/json").Code)
-	assert.JSONEq(t, allowAllPolicy, storedPolicy(t, app))
-}
-
-func TestAPIv2ACLIfMatchTsDefault(t *testing.T) {
-	// No policy set: ts-default matches the allow-all default -> 200.
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-	require.Equal(t, http.StatusOK,
-		setACL(t, api, allowAllPolicy, "application/json", `If-Match: "ts-default"`).Code)
-	assert.JSONEq(t, allowAllPolicy, storedPolicy(t, app))
-
-	// A non-default policy is set: ts-default no longer matches -> 412.
-	assert.Equal(t, http.StatusPreconditionFailed,
-		setACL(t, api, `{"hosts":{"h":"100.64.0.1"},"acls":[]}`, "application/json", `If-Match: "ts-default"`).Code)
-}
-
-func TestAPIv2ACLInvalidPolicyAtomicity(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	good := setACL(t, api, allowAllPolicy, "application/json")
-	require.Equal(t, http.StatusOK, good.Code)
-	goodETag := good.Header().Get("Etag")
-
-	// Malformed body -> 400, and the stored policy is unchanged (atomicity).
-	bad := setACL(t, api, `{ this is not valid`, "application/json")
-	assert.Equal(t, http.StatusBadRequest, bad.Code)
-	assert.Contains(t, bad.Body.String(), `"message"`)
-	assert.JSONEq(t, allowAllPolicy, storedPolicy(t, app))
-
-	// Wire-level: GET still serves the good policy + its ETag (no drift).
-	get := api.Get("/api/v2/tailnet/-/acl")
-	assert.Equal(t, goodETag, get.Header().Get("Etag"))
-	assert.JSONEq(t, allowAllPolicy, storedPolicy(t, app))
-}
-
-func TestAPIv2ACLNonDefaultTailnet404(t *testing.T) {
-	api := registerAPIV2(t, createTestApp(t))
-
-	assert.Equal(t, http.StatusNotFound, api.Get("/api/v2/tailnet/example.com/acl").Code)
-	assert.Equal(t, http.StatusNotFound,
-		api.Post("/api/v2/tailnet/example.com/acl", bytes.NewReader([]byte(allowAllPolicy))).Code)
-}
-
-func TestAPIv2ACLFileModeReadOnly(t *testing.T) {
-	dir := t.TempDir()
-	path := filepath.Join(dir, "acl.hujson")
-	fileBytes := "{\n  // file-managed\n  \"acls\": [{\"action\":\"accept\",\"src\":[\"*\"],\"dst\":[\"*:*\"]}],\n}"
-	require.NoError(t, os.WriteFile(path, []byte(fileBytes), 0o600))
-
-	cfg := &types.Config{Policy: types.PolicyConfig{Mode: types.PolicyModeFile, Path: path}}
-	_, api := humatest.New(t, apiv2.Config())
-	apiv2.Register(api, apiv2.Backend{Cfg: cfg})
-
-	// GET serves the file bytes + their ETag.
-	get := api.Get("/api/v2/tailnet/-/acl")
-	require.Equalf(t, http.StatusOK, get.Code, "body: %s", get.Body)
-	assert.Equal(t, fileBytes, get.Body.String())
-	assert.Equal(t, policyETagOf(fileBytes), get.Header().Get("Etag"))
-
-	// POST is rejected in file mode; the file is unchanged.
-	set := setACL(t, api, allowAllPolicy, "application/json")
-	assert.Equal(t, http.StatusBadRequest, set.Code)
-	assert.Contains(t, set.Body.String(), "database")
-
-	after, err := os.ReadFile(path)
-	require.NoError(t, err)
-	assert.Equal(t, fileBytes, string(after))
-}
diff --git a/hscontrol/apiv2_devices_test.go b/hscontrol/apiv2_devices_test.go
deleted file mode 100644
index 24c0d77a4..000000000
--- a/hscontrol/apiv2_devices_test.go
+++ /dev/null
@@ -1,343 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"strconv"
-	"testing"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2/humatest"
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// registerAPIV2 builds a humatest API with the v2 operations registered over the
-// app's state, with no auth middleware (the contract tests exercise wire shapes;
-// auth is covered by TestAPIv2). The full Backend (Change + Cfg) is wired so the
-// device/acl write handlers work.
-func registerAPIV2(t *testing.T, app *Headscale) humatest.TestAPI {
-	t.Helper()
-
-	_, api := humatest.New(t, apiv2.Config())
-	apiv2.Register(api, apiv2.Backend{State: app.state, Change: app.Change, Cfg: app.cfg})
-
-	return api
-}
-
-// deviceTestEnv is one seeded, registered, user-owned node plus the v2 API.
-type deviceTestEnv struct {
-	app      *Headscale
-	api      humatest.TestAPI
-	user     *types.User
-	nodeID   types.NodeID
-	deviceID string
-}
-
-// newDeviceTestEnv seeds a registered user-owned node into the NodeStore, with
-// tag:ci and tag:prod declared in policy so tagging is permitted.
-func newDeviceTestEnv(t *testing.T) deviceTestEnv {
-	t.Helper()
-
-	app := createTestApp(t)
-	user := app.state.CreateUserForTest("dut-user")
-
-	_, err := app.state.SetPolicy([]byte(
-		`{"tagOwners":{"tag:ci":["` + user.Name + `@"],"tag:prod":["` + user.Name + `@"]},` +
-			`"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`,
-	))
-	require.NoError(t, err)
-
-	node := app.state.CreateRegisteredNodeForTest(user, "contract-dut")
-	node.User = user
-	view := app.state.PutNodeInStoreForTest(*node)
-
-	return deviceTestEnv{
-		app:      app,
-		api:      registerAPIV2(t, app),
-		user:     user,
-		nodeID:   view.ID(),
-		deviceID: strconv.FormatUint(uint64(view.ID()), 10),
-	}
-}
-
-// srvNode reloads the node from the NodeStore — the server-side source of truth.
-func (e deviceTestEnv) srvNode(t *testing.T) types.NodeView {
-	t.Helper()
-
-	v, ok := e.app.state.GetNodeByID(e.nodeID)
-	require.True(t, ok, "node must exist in the NodeStore")
-	require.True(t, v.Valid())
-
-	return v
-}
-
-// seedExpiry stamps a future expiry so set-key(disable) is a real transition.
-func (e deviceTestEnv) seedExpiry(t *testing.T, at time.Time) {
-	t.Helper()
-
-	_, _, err := e.app.state.SetNodeExpiry(e.nodeID, &at)
-	require.NoError(t, err)
-}
-
-func getDevice(t *testing.T, api humatest.TestAPI, deviceID string) apiv2.Device {
-	t.Helper()
-
-	resp := api.Get("/api/v2/device/" + deviceID)
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var dev apiv2.Device
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &dev))
-
-	return dev
-}
-
-func getDeviceRoutes(t *testing.T, api humatest.TestAPI, deviceID string) apiv2.DeviceRoutes {
-	t.Helper()
-
-	resp := api.Get("/api/v2/device/" + deviceID + "/routes")
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var routes apiv2.DeviceRoutes
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &routes))
-
-	return routes
-}
-
-func approvedRouteStrings(nv types.NodeView) []string {
-	return util.PrefixesToString(nv.ApprovedRoutes().AsSlice())
-}
-
-func TestAPIv2Device_Get(t *testing.T) {
-	e := newDeviceTestEnv(t)
-
-	resp := e.api.Get("/api/v2/device/" + e.deviceID + "?fields=all")
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var dev apiv2.Device
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &dev))
-	assert.Equal(t, e.deviceID, dev.ID)
-	assert.Equal(t, e.deviceID, dev.NodeID)
-	assert.Equal(t, "contract-dut", dev.Hostname)
-	assert.Equal(t, "contract-dut", dev.Name)
-	assert.True(t, dev.Authorized)
-	assert.Equal(t, e.user.Username(), dev.User)
-	assert.NotNil(t, dev.Tags)
-	assert.True(t, dev.KeyExpiryDisabled, "seeded node has no expiry")
-	assert.NotEmpty(t, dev.Addresses)
-
-	// Server-side cross-check.
-	n := e.srvNode(t)
-	assert.Equal(t, n.GivenName(), dev.Name)
-	assert.False(t, n.IsTagged())
-	assert.True(t, n.User().Valid())
-	assert.False(t, n.Expiry().Valid())
-	assert.Equal(t, n.IPsAsString(), dev.Addresses)
-}
-
-func TestAPIv2Device_Get_UnknownID_404(t *testing.T) {
-	e := newDeviceTestEnv(t)
-
-	assert.Equal(t, http.StatusNotFound, e.api.Get("/api/v2/device/999999").Code)
-	assert.Equal(t, http.StatusNotFound, e.api.Get("/api/v2/device/not-a-number").Code)
-}
-
-func TestAPIv2Device_List(t *testing.T) {
-	e := newDeviceTestEnv(t)
-
-	list := func() []apiv2.Device {
-		t.Helper()
-
-		resp := e.api.Get("/api/v2/tailnet/-/devices")
-		require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-		var out struct {
-			Devices []apiv2.Device `json:"devices"`
-		}
-		require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &out))
-
-		return out.Devices
-	}
-
-	assert.True(t, containsDeviceID(list(), e.deviceID))
-	assert.Len(t, list(), e.app.state.ListNodes().Len(), "list count == ListNodes")
-
-	// A second node appears; deleting it removes it from both the list and state.
-	node2 := e.app.state.CreateRegisteredNodeForTest(e.user, "contract-dut-2")
-	node2.User = e.user
-	view2 := e.app.state.PutNodeInStoreForTest(*node2)
-	id2 := strconv.FormatUint(uint64(view2.ID()), 10)
-	assert.True(t, containsDeviceID(list(), id2))
-
-	require.Equal(t, http.StatusOK, e.api.Delete("/api/v2/device/"+id2).Code)
-	assert.False(t, containsDeviceID(list(), id2))
-
-	_, ok := e.app.state.GetNodeByID(view2.ID())
-	assert.False(t, ok)
-
-	assert.Equal(t, http.StatusNotFound, e.api.Get("/api/v2/tailnet/example.com/devices").Code)
-}
-
-func TestAPIv2Device_SetName(t *testing.T) {
-	e := newDeviceTestEnv(t)
-
-	require.Equal(t, http.StatusOK,
-		e.api.Post("/api/v2/device/"+e.deviceID+"/name", map[string]any{"name": "renamed-dut"}).Code)
-	assert.Equal(t, "renamed-dut", getDevice(t, e.api, e.deviceID).Name)
-	assert.Equal(t, "renamed-dut", e.srvNode(t).GivenName())
-
-	// Rename again.
-	require.Equal(t, http.StatusOK,
-		e.api.Post("/api/v2/device/"+e.deviceID+"/name", map[string]any{"name": "renamed-again"}).Code)
-	assert.Equal(t, "renamed-again", getDevice(t, e.api, e.deviceID).Name)
-	assert.Equal(t, "renamed-again", e.srvNode(t).GivenName())
-
-	// Invalid DNS label is rejected; the name is unchanged.
-	bad := e.api.Post("/api/v2/device/"+e.deviceID+"/name", map[string]any{"name": "Invalid_Name!"})
-	assert.Equal(t, http.StatusBadRequest, bad.Code)
-	assert.Contains(t, bad.Body.String(), `"message"`)
-	assert.Equal(t, "renamed-again", e.srvNode(t).GivenName())
-}
-
-func TestAPIv2Device_SetTags(t *testing.T) {
-	e := newDeviceTestEnv(t)
-
-	setTags := func(tags []string) int {
-		return e.api.Post("/api/v2/device/"+e.deviceID+"/tags", map[string]any{"tags": tags}).Code
-	}
-
-	// One tag flips the node to tag-owned.
-	require.Equal(t, http.StatusOK, setTags([]string{"tag:ci"}))
-	assert.Equal(t, []string{"tag:ci"}, getDevice(t, e.api, e.deviceID).Tags)
-	n := e.srvNode(t)
-	assert.True(t, n.IsTagged())
-	assert.Equal(t, []string{"tag:ci"}, n.Tags().AsSlice())
-	assert.False(t, n.User().Valid())
-	assert.Equal(t, types.TaggedDevices.Username(), getDevice(t, e.api, e.deviceID).User)
-
-	// Two tags (sorted).
-	require.Equal(t, http.StatusOK, setTags([]string{"tag:ci", "tag:prod"}))
-	assert.Equal(t, []string{"tag:ci", "tag:prod"}, getDevice(t, e.api, e.deviceID).Tags)
-	assert.Equal(t, []string{"tag:ci", "tag:prod"}, e.srvNode(t).Tags().AsSlice())
-
-	// A different single tag replaces the set.
-	require.Equal(t, http.StatusOK, setTags([]string{"tag:prod"}))
-	assert.Equal(t, []string{"tag:prod"}, e.srvNode(t).Tags().AsSlice())
-
-	// Remove-all is a no-op: tags survive.
-	require.Equal(t, http.StatusOK, setTags([]string{}))
-	assert.Equal(t, []string{"tag:prod"}, e.srvNode(t).Tags().AsSlice())
-	assert.True(t, e.srvNode(t).IsTagged())
-
-	// An undeclared tag is rejected with 400 (mapError now maps the sentinel),
-	// and the server-side tags are unchanged.
-	assert.Equal(t, http.StatusBadRequest, setTags([]string{"tag:nope"}))
-	assert.Equal(t, []string{"tag:prod"}, e.srvNode(t).Tags().AsSlice())
-}
-
-func TestAPIv2Device_SetKey(t *testing.T) {
-	e := newDeviceTestEnv(t)
-	e.seedExpiry(t, time.Now().Add(24*time.Hour))
-
-	require.True(t, e.srvNode(t).Expiry().Valid(), "precondition: node has an expiry")
-	assert.False(t, getDevice(t, e.api, e.deviceID).KeyExpiryDisabled)
-
-	require.Equal(t, http.StatusOK,
-		e.api.Post("/api/v2/device/"+e.deviceID+"/key", map[string]any{"keyExpiryDisabled": true}).Code)
-	assert.True(t, getDevice(t, e.api, e.deviceID).KeyExpiryDisabled)
-	assert.False(t, e.srvNode(t).Expiry().Valid(), "expiry cleared")
-
-	// Re-enable is accepted as a no-op; expiry stays cleared.
-	require.Equal(t, http.StatusOK,
-		e.api.Post("/api/v2/device/"+e.deviceID+"/key", map[string]any{"keyExpiryDisabled": false}).Code)
-	assert.True(t, getDevice(t, e.api, e.deviceID).KeyExpiryDisabled)
-	assert.False(t, e.srvNode(t).Expiry().Valid())
-}
-
-func TestAPIv2Device_SetRoutes(t *testing.T) {
-	e := newDeviceTestEnv(t)
-
-	setRoutes := func(routes []string) apiv2.DeviceRoutes {
-		t.Helper()
-
-		resp := e.api.Post("/api/v2/device/"+e.deviceID+"/routes", map[string]any{"routes": routes})
-		require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-		var dr apiv2.DeviceRoutes
-		require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &dr))
-
-		return dr
-	}
-
-	// One route: enabled reflects it; advertised stays empty (nothing announced).
-	dr := setRoutes([]string{"10.0.0.0/24"})
-	assert.Contains(t, dr.Enabled, "10.0.0.0/24")
-	assert.Empty(t, dr.Advertised)
-	assert.Contains(t, getDeviceRoutes(t, e.api, e.deviceID).Enabled, "10.0.0.0/24")
-	assert.Contains(t, approvedRouteStrings(e.srvNode(t)), "10.0.0.0/24")
-	assert.Empty(t, e.srvNode(t).AnnouncedRoutes())
-
-	// Two routes.
-	setRoutes([]string{"10.0.0.0/24", "192.168.0.0/24"})
-
-	approved := approvedRouteStrings(e.srvNode(t))
-	assert.Contains(t, approved, "10.0.0.0/24")
-	assert.Contains(t, approved, "192.168.0.0/24")
-
-	// Exit route expands to both families.
-	setRoutes([]string{"0.0.0.0/0"})
-
-	approved = approvedRouteStrings(e.srvNode(t))
-	assert.Contains(t, approved, "0.0.0.0/0")
-	assert.Contains(t, approved, "::/0")
-
-	// Clear.
-	dr = setRoutes([]string{})
-	assert.Empty(t, dr.Enabled)
-	assert.Empty(t, approvedRouteStrings(e.srvNode(t)))
-
-	// Malformed prefix is rejected; routes unchanged.
-	bad := e.api.Post("/api/v2/device/"+e.deviceID+"/routes", map[string]any{"routes": []string{"not-a-cidr"}})
-	assert.Equal(t, http.StatusBadRequest, bad.Code)
-	assert.Empty(t, approvedRouteStrings(e.srvNode(t)))
-}
-
-func TestAPIv2Device_SetAuthorized(t *testing.T) {
-	e := newDeviceTestEnv(t)
-
-	require.Equal(t, http.StatusOK,
-		e.api.Post("/api/v2/device/"+e.deviceID+"/authorized", map[string]any{"authorized": true}).Code)
-	assert.True(t, getDevice(t, e.api, e.deviceID).Authorized)
-
-	// De-authorize is rejected; the node stays present and authorized.
-	bad := e.api.Post("/api/v2/device/"+e.deviceID+"/authorized", map[string]any{"authorized": false})
-	assert.Equal(t, http.StatusBadRequest, bad.Code)
-	assert.Contains(t, bad.Body.String(), `"message"`)
-	assert.True(t, getDevice(t, e.api, e.deviceID).Authorized)
-}
-
-func TestAPIv2Device_Delete(t *testing.T) {
-	e := newDeviceTestEnv(t)
-
-	require.Equal(t, http.StatusOK, e.api.Delete("/api/v2/device/"+e.deviceID).Code)
-	assert.Equal(t, http.StatusNotFound, e.api.Get("/api/v2/device/"+e.deviceID).Code)
-
-	_, ok := e.app.state.GetNodeByID(e.nodeID)
-	assert.False(t, ok, "node gone from the NodeStore")
-
-	// Delete again is 404.
-	assert.Equal(t, http.StatusNotFound, e.api.Delete("/api/v2/device/"+e.deviceID).Code)
-}
-
-func containsDeviceID(devs []apiv2.Device, id string) bool {
-	for _, d := range devs {
-		if d.ID == id || d.NodeID == id {
-			return true
-		}
-	}
-
-	return false
-}
diff --git a/hscontrol/apiv2_keys_test.go b/hscontrol/apiv2_keys_test.go
deleted file mode 100644
index 5a296b2df..000000000
--- a/hscontrol/apiv2_keys_test.go
+++ /dev/null
@@ -1,322 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"strconv"
-	"testing"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2/humatest"
-	"github.com/google/go-cmp/cmp"
-	"github.com/google/go-cmp/cmp/cmpopts"
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// taggedCaps builds capabilities for a tagged auth key.
-func taggedCaps(tags ...string) *apiv2.KeyCapabilities {
-	return &apiv2.KeyCapabilities{
-		Devices: apiv2.KeyDeviceCapabilities{Create: apiv2.KeyDeviceCreateCapabilities{
-			Reusable:      true,
-			Preauthorized: true,
-			Tags:          tags,
-		}},
-	}
-}
-
-// newKeyTestAPI builds an app + v2 API with NO owner user in context. Without the
-// auth middleware ownerUser(ctx) is empty, so only the tagged-key path creates;
-// the user-owned path (which needs an owning API key) is covered by TestAPIv2.
-func newKeyTestAPI(t *testing.T) (*Headscale, humatest.TestAPI) {
-	t.Helper()
-
-	app := createTestApp(t)
-
-	_, api := humatest.New(t, apiv2.Config())
-	apiv2.Register(api, apiv2.Backend{State: app.state})
-
-	return app, api
-}
-
-// createKey POSTs a key and decodes the create response.
-func createKey(t *testing.T, api humatest.TestAPI, req apiv2.CreateKeyRequest) apiv2.Key {
-	t.Helper()
-
-	resp := api.Post("/api/v2/tailnet/-/keys", req)
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var key apiv2.Key
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &key))
-
-	return key
-}
-
-// getKey GETs a key by id and decodes it.
-func getKey(t *testing.T, api humatest.TestAPI, id string) apiv2.Key {
-	t.Helper()
-
-	resp := api.Get("/api/v2/tailnet/-/keys/" + id)
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var key apiv2.Key
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &key))
-
-	return key
-}
-
-// listKeys GETs the key list and returns the enveloped slice.
-func listKeys(t *testing.T, api humatest.TestAPI) []apiv2.Key {
-	t.Helper()
-
-	resp := api.Get("/api/v2/tailnet/-/keys")
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var list struct {
-		Keys []apiv2.Key `json:"keys"`
-	}
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &list))
-
-	return list.Keys
-}
-
-func containsKeyID(keys []apiv2.Key, id string) bool {
-	for _, k := range keys {
-		if k.ID == id {
-			return true
-		}
-	}
-
-	return false
-}
-
-// srvKey is the server-side ground truth: the stored PreAuthKey, found by its
-// stringified id through ListPreAuthKeys (User is preloaded).
-func srvKey(t *testing.T, app *Headscale, id string) types.PreAuthKey {
-	t.Helper()
-
-	want, err := strconv.ParseUint(id, 10, 64)
-	require.NoError(t, err)
-
-	keys, err := app.state.ListPreAuthKeys()
-	require.NoError(t, err)
-
-	for _, k := range keys {
-		if k.ID == want {
-			return k
-		}
-	}
-
-	t.Fatalf("pre-auth key %s not found server-side", id)
-
-	return types.PreAuthKey{}
-}
-
-func keyCount(t *testing.T, app *Headscale) int {
-	t.Helper()
-
-	keys, err := app.state.ListPreAuthKeys()
-	require.NoError(t, err)
-
-	return len(keys)
-}
-
-func TestAPIv2Key_Create_Tagged(t *testing.T) {
-	app, api := newKeyTestAPI(t)
-
-	created := createKey(t, api, apiv2.CreateKeyRequest{
-		Description:   "dev access",
-		ExpirySeconds: 86400,
-		Capabilities:  taggedCaps("tag:test"),
-	})
-
-	// (a) create response — Tailscale Key shape, exact seconds (int64 wire).
-	// ID/Key/Created/Expires are server-assigned; assert their presence apart.
-	want := apiv2.Key{
-		KeyType:       "auth",
-		Description:   "dev access",
-		ExpirySeconds: 86400,
-		Capabilities:  *taggedCaps("tag:test"),
-		Tags:          []string{"tag:test"},
-	}
-	if diff := cmp.Diff(want, created, cmpopts.IgnoreFields(apiv2.Key{}, "ID", "Key", "Created", "Expires")); diff != "" {
-		t.Errorf("created key mismatch (-want +got):\n%s", diff)
-	}
-
-	assert.NotEmpty(t, created.ID)
-	assert.NotEmpty(t, created.Key, "secret returned on create")
-	assert.NotNil(t, created.Expires)
-
-	// (c) server-side — the stored key.
-	pak := srvKey(t, app, created.ID)
-	assert.True(t, pak.Reusable)
-	assert.False(t, pak.Ephemeral)
-	assert.Equal(t, []string{"tag:test"}, pak.Tags)
-	assert.Equal(t, "dev access", pak.Description)
-	assert.Nil(t, pak.User, "tagged key has no owning user")
-	require.NotNil(t, pak.CreatedAt)
-	require.NotNil(t, pak.Expiration)
-	assert.InDelta(t, 86400, pak.Expiration.Sub(*pak.CreatedAt).Seconds(), 2)
-}
-
-func TestAPIv2Key_Create_Permutations(t *testing.T) {
-	tests := []struct {
-		name          string
-		req           apiv2.CreateKeyRequest
-		wantReusable  bool
-		wantEphemeral bool
-		wantDesc      string
-		wantSeconds   float64
-	}{
-		{
-			name: "single-use",
-			req: apiv2.CreateKeyRequest{Capabilities: &apiv2.KeyCapabilities{
-				Devices: apiv2.KeyDeviceCapabilities{Create: apiv2.KeyDeviceCreateCapabilities{Tags: []string{"tag:test"}}},
-			}},
-			wantSeconds: 7776000,
-		},
-		{
-			name:         "reusable",
-			req:          apiv2.CreateKeyRequest{Capabilities: taggedCaps("tag:test")},
-			wantReusable: true,
-			wantSeconds:  7776000,
-		},
-		{
-			name: "ephemeral",
-			req: apiv2.CreateKeyRequest{Capabilities: &apiv2.KeyCapabilities{
-				Devices: apiv2.KeyDeviceCapabilities{Create: apiv2.KeyDeviceCreateCapabilities{
-					Ephemeral: true,
-					Tags:      []string{"tag:test"},
-				}},
-			}},
-			wantEphemeral: true,
-			wantSeconds:   7776000,
-		},
-		{
-			name:         "with description",
-			req:          apiv2.CreateKeyRequest{Description: "ci", Capabilities: taggedCaps("tag:test")},
-			wantReusable: true,
-			wantDesc:     "ci",
-			wantSeconds:  7776000,
-		},
-		{
-			name:         "explicit expiry",
-			req:          apiv2.CreateKeyRequest{ExpirySeconds: 3600, Capabilities: taggedCaps("tag:test")},
-			wantReusable: true,
-			wantSeconds:  3600,
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			app, api := newKeyTestAPI(t)
-
-			created := createKey(t, api, tt.req)
-			assert.Equal(t, tt.wantReusable, created.Capabilities.Devices.Create.Reusable)
-			assert.Equal(t, tt.wantEphemeral, created.Capabilities.Devices.Create.Ephemeral)
-			assert.Equal(t, tt.wantDesc, created.Description)
-			assert.InDelta(t, tt.wantSeconds, float64(created.ExpirySeconds), 2)
-
-			pak := srvKey(t, app, created.ID)
-			assert.Equal(t, tt.wantReusable, pak.Reusable)
-			assert.Equal(t, tt.wantEphemeral, pak.Ephemeral)
-			assert.Equal(t, tt.wantDesc, pak.Description)
-			require.NotNil(t, pak.CreatedAt)
-			require.NotNil(t, pak.Expiration)
-			assert.InDelta(t, tt.wantSeconds, pak.Expiration.Sub(*pak.CreatedAt).Seconds(), 2)
-		})
-	}
-}
-
-func TestAPIv2Key_Get(t *testing.T) {
-	_, api := newKeyTestAPI(t)
-
-	created := createKey(t, api, apiv2.CreateKeyRequest{
-		Description:   "dev access",
-		ExpirySeconds: 86400,
-		Capabilities:  taggedCaps("tag:test"),
-	})
-
-	got := getKey(t, api, created.ID)
-	// Get omits the secret (empty Key) and is stable across the round-trip.
-	want := apiv2.Key{
-		ID:            created.ID,
-		KeyType:       "auth",
-		Description:   "dev access",
-		ExpirySeconds: 86400,
-		Capabilities:  *taggedCaps("tag:test"),
-		Tags:          []string{"tag:test"},
-	}
-	if diff := cmp.Diff(want, got, cmpopts.IgnoreFields(apiv2.Key{}, "Created", "Expires")); diff != "" {
-		t.Errorf("got key mismatch (-want +got):\n%s", diff)
-	}
-
-	// Unknown id and bad tailnet both 404 with the Tailscale error body.
-	assert.Equal(t, http.StatusNotFound, api.Get("/api/v2/tailnet/-/keys/999999").Code)
-	bad := api.Get("/api/v2/tailnet/example.com/keys/" + created.ID)
-	assert.Equal(t, http.StatusNotFound, bad.Code)
-	assert.Contains(t, bad.Body.String(), `"message"`)
-}
-
-func TestAPIv2Key_List(t *testing.T) {
-	app, api := newKeyTestAPI(t)
-
-	k1 := createKey(t, api, apiv2.CreateKeyRequest{Capabilities: taggedCaps("tag:test")})
-	k2 := createKey(t, api, apiv2.CreateKeyRequest{Capabilities: taggedCaps("tag:test")})
-
-	keys := listKeys(t, api)
-	assert.True(t, containsKeyID(keys, k1.ID))
-	assert.True(t, containsKeyID(keys, k2.ID))
-
-	// Server-side has both too.
-	assert.GreaterOrEqual(t, keyCount(t, app), 2)
-
-	bad := api.Get("/api/v2/tailnet/example.com/keys")
-	assert.Equal(t, http.StatusNotFound, bad.Code)
-	assert.Contains(t, bad.Body.String(), `"message"`)
-}
-
-func TestAPIv2Key_Delete(t *testing.T) {
-	app, api := newKeyTestAPI(t)
-
-	created := createKey(t, api, apiv2.CreateKeyRequest{Capabilities: taggedCaps("tag:test")})
-
-	require.Equal(t, http.StatusOK, api.Delete("/api/v2/tailnet/-/keys/"+created.ID).Code)
-
-	// DELETE soft-revokes (Tailscale-faithful): the key stays retrievable with
-	// invalid set and a revoked timestamp, and is still listed.
-	got := getKey(t, api, created.ID)
-	assert.True(t, got.Invalid, "revoked key reports invalid")
-	assert.NotNil(t, got.Revoked, "revoked timestamp is populated")
-	assert.True(t, containsKeyID(listKeys(t, api), created.ID), "revoked key still listed")
-
-	// Server-side: row kept, revoked stamped.
-	pak := srvKey(t, app, created.ID)
-	require.NotNil(t, pak.Revoked)
-	require.Error(t, pak.Validate(), "revoked key is invalid")
-
-	// Delete again -> 404 (already revoked).
-	assert.Equal(t, http.StatusNotFound, api.Delete("/api/v2/tailnet/-/keys/"+created.ID).Code)
-
-	// The collector hard-deletes keys revoked before the cutoff.
-	reaped, err := app.state.DestroyRevokedPreAuthKeysBefore(time.Now().Add(time.Minute))
-	require.NoError(t, err)
-	assert.GreaterOrEqual(t, reaped, 1)
-	assert.False(t, containsKeyID(listKeys(t, api), created.ID), "collector removed the revoked key")
-	assert.Equal(t, http.StatusNotFound, api.Get("/api/v2/tailnet/-/keys/"+created.ID).Code)
-}
-
-func TestAPIv2Key_Create_NoTags_NoOwner_400(t *testing.T) {
-	app, api := newKeyTestAPI(t)
-
-	before := keyCount(t, app)
-
-	resp := api.Post("/api/v2/tailnet/-/keys", apiv2.CreateKeyRequest{Capabilities: &apiv2.KeyCapabilities{}})
-	assert.Equal(t, http.StatusBadRequest, resp.Code)
-	assert.Contains(t, resp.Body.String(), `"message"`)
-
-	// No orphan key was created.
-	assert.Equal(t, before, keyCount(t, app))
-}
diff --git a/hscontrol/apiv2_oauth_matrix_test.go b/hscontrol/apiv2_oauth_matrix_test.go
deleted file mode 100644
index 3e71d730f..000000000
--- a/hscontrol/apiv2_oauth_matrix_test.go
+++ /dev/null
@@ -1,280 +0,0 @@
-package hscontrol
-
-import (
-	"bytes"
-	"encoding/json"
-	"fmt"
-	"io"
-	"net/http"
-	"strings"
-	"testing"
-	"time"
-
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
-	"github.com/juanfont/headscale/hscontrol/scope"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// apiReq issues an arbitrary-method request with an optional bearer token and JSON
-// body, returning the status and raw body. It owns the response body.
-func apiReq(t *testing.T, method, target, bearer string, body any) (int, []byte) {
-	t.Helper()
-
-	var r io.Reader
-
-	if body != nil {
-		b, err := json.Marshal(body)
-		require.NoError(t, err)
-
-		r = bytes.NewReader(b)
-	}
-
-	req, err := http.NewRequestWithContext(t.Context(), method, target, r)
-	require.NoError(t, err)
-
-	if body != nil {
-		req.Header.Set("Content-Type", "application/json")
-	}
-
-	if bearer != "" {
-		req.Header.Set("Authorization", "Bearer "+bearer)
-	}
-
-	resp, err := http.DefaultClient.Do(req)
-	require.NoError(t, err)
-
-	defer resp.Body.Close()
-
-	data, _ := io.ReadAll(resp.Body)
-
-	return resp.StatusCode, data
-}
-
-// scopeDenied reports whether a response is a scope-enforcement denial. The scope
-// gate runs in the middleware before the handler, so a denial is exactly a 403
-// carrying this message; any other status (200, or a 400/404 from the handler on
-// minimal input) means the request passed the scope gate.
-func scopeDenied(status int, body []byte) bool {
-	return status == http.StatusForbidden &&
-		strings.Contains(string(body), "missing the required scope")
-}
-
-// mintScopedToken creates an OAuth client holding exactly scope s (tagged tag:ci so
-// tag-requiring scopes are valid) and returns an access token for it.
-func mintScopedToken(t *testing.T, baseURL, admin string, s scope.Scope) string {
-	t.Helper()
-
-	_, secret := createClient(t, baseURL, admin, []string{string(s)}, []string{"tag:ci"})
-
-	return tokenFor(t, baseURL, secret)
-}
-
-// createAdminAuthKey creates a tagged auth key with the admin key and returns its id.
-func createAdminAuthKey(t *testing.T, baseURL, admin string) string {
-	t.Helper()
-
-	status, body := apiReq(t, http.MethodPost, baseURL+"/api/v2/tailnet/-/keys", admin, apiv2.CreateKeyRequest{
-		Capabilities: &apiv2.KeyCapabilities{Devices: apiv2.KeyDeviceCapabilities{
-			Create: apiv2.KeyDeviceCreateCapabilities{Reusable: true, Tags: []string{"tag:ci"}},
-		}},
-	})
-	require.Equalf(t, http.StatusOK, status, "create admin auth key: %s", body)
-
-	var key apiv2.Key
-	require.NoError(t, json.Unmarshal(body, &key))
-
-	return key.ID
-}
-
-type matrixOp struct {
-	name   string
-	method string
-	path   string
-	need   scope.Scope
-	body   any
-	// multiplexed marks the keyType-multiplexed keys ops. They self-enforce in
-	// the handler and, to avoid an existence oracle, deny an unauthorized token
-	// with a uniform not-found rather than the middleware's scope-403. So denial
-	// is "resource not returned" (status != 200), not a specific 403.
-	multiplexed bool
-}
-
-// TestAPIv2OAuthMatrix_Enforcement is the exhaustive operation×scope cross-product:
-// for every scope-gated operation and every scope in the vocabulary, a token
-// holding exactly that scope is allowed iff scope.Grants permits it (P3) and denied
-// otherwise (P2).
-func TestAPIv2OAuthMatrix_Enforcement(t *testing.T) {
-	app, baseURL, admin := newOAuthTestServer(t)
-
-	// Stable ids for the keyType-multiplexed get-by-id operations.
-	clientID, _ := createClient(t, baseURL, admin, []string{"oauth_keys:read"}, nil)
-	authKeyID := createAdminAuthKey(t, baseURL, admin)
-	_ = app
-
-	ops := []matrixOp{
-		{"getDevice", http.MethodGet, "/api/v2/device/1", scope.DevicesCoreRead, nil, false},
-		{"listDevices", http.MethodGet, "/api/v2/tailnet/-/devices", scope.DevicesCoreRead, nil, false},
-		{"deleteDevice", http.MethodDelete, "/api/v2/device/1", scope.DevicesCore, nil, false},
-		{"authorizeDevice", http.MethodPost, "/api/v2/device/1/authorized", scope.DevicesCore, map[string]any{}, false},
-		{"setDeviceName", http.MethodPost, "/api/v2/device/1/name", scope.DevicesCore, map[string]any{}, false},
-		{"setDeviceTags", http.MethodPost, "/api/v2/device/1/tags", scope.DevicesCore, map[string]any{}, false},
-		{"setDeviceKey", http.MethodPost, "/api/v2/device/1/key", scope.DevicesCore, map[string]any{}, false},
-		{"setDeviceRoutes", http.MethodPost, "/api/v2/device/1/routes", scope.DevicesRoutes, map[string]any{}, false},
-		{"getDeviceRoutes", http.MethodGet, "/api/v2/device/1/routes", scope.DevicesRoutesRead, nil, false},
-		{"getACL", http.MethodGet, "/api/v2/tailnet/-/acl", scope.PolicyFileRead, nil, false},
-		{"setACL", http.MethodPost, "/api/v2/tailnet/-/acl", scope.PolicyFile, map[string]any{}, false},
-		{"getSettings", http.MethodGet, "/api/v2/tailnet/-/settings", scope.FeatureSettingsRead, nil, false},
-		{"updateSettings", http.MethodPatch, "/api/v2/tailnet/-/settings", scope.FeatureSettings, map[string]any{}, false},
-		{"getKeyClient", http.MethodGet, "/api/v2/tailnet/-/keys/" + clientID, scope.OAuthKeysRead, nil, true},
-		{"getKeyAuth", http.MethodGet, "/api/v2/tailnet/-/keys/" + authKeyID, scope.AuthKeysRead, nil, true},
-	}
-
-	// One token per scope, reused across every operation.
-	tokens := make(map[scope.Scope]string, len(scope.Known()))
-	for _, s := range scope.Known() {
-		tokens[s] = mintScopedToken(t, baseURL, admin, s)
-	}
-
-	for _, op := range ops {
-		for _, s := range scope.Known() {
-			status, body := apiReq(t, op.method, baseURL+op.path, tokens[s], op.body)
-
-			wantDenied := !scope.Grants([]scope.Scope{s}, op.need)
-
-			// A multiplexed keys op denies via uniform not-found (no existence
-			// oracle), so denial is "resource not returned"; every other op
-			// denies with the middleware's scope-403.
-			denied := scopeDenied(status, body)
-			if op.multiplexed {
-				denied = status != http.StatusOK
-			}
-
-			assert.Equalf(t, wantDenied, denied,
-				"op %s with scope %q (needs %q): status=%d body=%s",
-				op.name, s, op.need, status, body)
-		}
-	}
-}
-
-// TestAPIv2OAuthMatrix_ScopeNarrowing proves P1 for token minting: a client may
-// only mint a token for scopes within its own grant. For every held scope X and
-// requested scope Y, the mint succeeds iff scope.Grants([X], Y).
-func TestAPIv2OAuthMatrix_ScopeNarrowing(t *testing.T) {
-	_, baseURL, admin := newOAuthTestServer(t)
-
-	for _, held := range scope.Known() {
-		_, secret := createClient(t, baseURL, admin, []string{string(held)}, []string{"tag:ci"})
-
-		for _, want := range scope.Known() {
-			status, m := mintToken(t, baseURL, "", secret, string(want), false)
-
-			wantOK := scope.Grants([]scope.Scope{held}, want)
-			if wantOK {
-				assert.Equalf(t, http.StatusOK, status, "held %q narrow to %q: %v", held, want, m)
-			} else {
-				assert.Equalf(t, http.StatusBadRequest, status,
-					"held %q must not mint %q: %v", held, want, m)
-				assert.Equal(t, "invalid_scope", m["error"])
-			}
-		}
-	}
-}
-
-// TestAPIv2OAuthMatrix_TagNarrowing proves P1 for tags at mint time: a client may
-// only mint a token for tags within its grant (closing the /oauth/token tags-param
-// path). A client with the "all" scope may request any tag.
-func TestAPIv2OAuthMatrix_TagNarrowing(t *testing.T) {
-	_, baseURL, admin := newOAuthTestServer(t)
-
-	_, secret := createClient(t, baseURL, admin, []string{"auth_keys"}, []string{"tag:a", "tag:b"})
-
-	// In-grant tags mint; an out-of-grant tag is rejected.
-	status, m := mintToken(t, baseURL, "", secret, "", false)
-	require.Equalf(t, http.StatusOK, status, "%v", m)
-
-	for _, tag := range []string{"tag:a", "tag:b"} {
-		st, mm := mintTokenWithTags(t, baseURL, secret, tag)
-		assert.Equalf(t, http.StatusOK, st, "in-grant tag %q: %v", tag, mm)
-	}
-
-	st, mm := mintTokenWithTags(t, baseURL, secret, "tag:c")
-	assert.Equal(t, http.StatusBadRequest, st, mm)
-	assert.Equal(t, "invalid_target", mm["error"])
-
-	// An all-scope client may request any tag.
-	_, allSecret := createClient(t, baseURL, admin, []string{"all"}, []string{"tag:a"})
-	stAll, mAll := mintTokenWithTags(t, baseURL, allSecret, "tag:anything")
-	assert.Equalf(t, http.StatusOK, stAll, "all-scope client may assign any tag: %v", mAll)
-}
-
-// TestAPIv2OAuthMatrix_Lifecycle proves expired and revoked credentials are denied
-// at the HTTP layer, and that an admin API key bypasses scope checks.
-func TestAPIv2OAuthMatrix_Lifecycle(t *testing.T) {
-	app, baseURL, admin := newOAuthTestServer(t)
-
-	devicesPath := baseURL + "/api/v2/tailnet/-/devices"
-
-	// Expired token → 401.
-	_, client, err := app.state.CreateOAuthClient([]string{"devices:core:read"}, []string{"tag:ci"}, "expired", nil)
-	require.NoError(t, err)
-
-	past := time.Now().Add(-time.Hour)
-	expiredTok, _, err := app.state.MintAccessToken(client.ClientID, []string{"devices:core:read"}, nil, &past)
-	require.NoError(t, err)
-
-	status, _ := apiReq(t, http.MethodGet, devicesPath, expiredTok, nil)
-	assert.Equal(t, http.StatusUnauthorized, status, "expired token must be rejected")
-
-	// Revoked client → its token is denied.
-	_, revClient, err := app.state.CreateOAuthClient([]string{"devices:core:read"}, []string{"tag:ci"}, "revoked", nil)
-	require.NoError(t, err)
-
-	future := time.Now().Add(time.Hour)
-	revTok, _, err := app.state.MintAccessToken(revClient.ClientID, []string{"devices:core:read"}, nil, &future)
-	require.NoError(t, err)
-
-	// Works before revocation.
-	okStatus, okBody := apiReq(t, http.MethodGet, devicesPath, revTok, nil)
-	assert.Falsef(t, scopeDenied(okStatus, okBody), "token should pass the scope gate before revoke: %d", okStatus)
-
-	require.NoError(t, app.state.RevokeOAuthClient(revClient.ClientID))
-
-	revStatus, _ := apiReq(t, http.MethodGet, devicesPath, revTok, nil)
-	assert.Equal(t, http.StatusUnauthorized, revStatus, "token of a revoked client must be rejected")
-
-	// Admin API key bypasses scope checks: it reaches a devices op that a minimal
-	// (feature_settings:read) token cannot.
-	minimalTok := mintScopedToken(t, baseURL, admin, scope.FeatureSettingsRead)
-	minStatus, minBody := apiReq(t, http.MethodGet, devicesPath, minimalTok, nil)
-	assert.True(t, scopeDenied(minStatus, minBody), "minimal token must be scope-denied on devices")
-
-	adminStatus, adminBody := apiReq(t, http.MethodGet, devicesPath, admin, nil)
-	assert.Falsef(t, scopeDenied(adminStatus, adminBody),
-		"admin key is all-access and must not be scope-denied: %d %s", adminStatus, adminBody)
-}
-
-// mintTokenWithTags mints with a tags narrowing parameter.
-func mintTokenWithTags(t *testing.T, baseURL, secret, tags string) (int, map[string]any) {
-	t.Helper()
-
-	form := fmt.Sprintf("grant_type=client_credentials&client_secret=%s&tags=%s", secret, tags)
-
-	req, err := http.NewRequestWithContext(t.Context(), http.MethodPost,
-		baseURL+"/api/v2/oauth/token", strings.NewReader(form))
-	require.NoError(t, err)
-	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-
-	resp, err := http.DefaultClient.Do(req)
-	require.NoError(t, err)
-
-	defer resp.Body.Close()
-
-	data, _ := io.ReadAll(resp.Body)
-
-	var m map[string]any
-
-	_ = json.Unmarshal(data, &m)
-
-	return resp.StatusCode, m
-}
diff --git a/hscontrol/apiv2_oauth_test.go b/hscontrol/apiv2_oauth_test.go
deleted file mode 100644
index c3f61043c..000000000
--- a/hscontrol/apiv2_oauth_test.go
+++ /dev/null
@@ -1,511 +0,0 @@
-package hscontrol
-
-import (
-	"bytes"
-	"encoding/json"
-	"io"
-	"net/http"
-	"net/http/httptest"
-	"net/url"
-	"strings"
-	"testing"
-
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// newOAuthTestServer builds the full v2 API (the auth+scope middleware and the
-// OAuth token endpoint, which the humatest harness in apiv2_keys_test.go does
-// not mount) over a real httptest server, returning the app, its base URL, and
-// an all-access admin API key.
-func newOAuthTestServer(t *testing.T) (*Headscale, string, string) {
-	t.Helper()
-
-	app := createTestApp(t)
-
-	// Tag creation now requires the tag to exist in policy (matching
-	// SetNodeTags), so define the tags these tests assign. Tests needing
-	// specific tag ownership (e.g. delegation) override this policy.
-	const policy = `{"tagOwners":{"tag:a":[],"tag:b":[],"tag:c":[],"tag:ci":[],"tag:k8s":[],"tag:k8s-operator":[],"tag:other":[],"tag:anything":[]},"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-
-	_, err := app.state.SetPolicy([]byte(policy))
-	require.NoError(t, err)
-	_, err = app.state.SetPolicyInDB(policy)
-	require.NoError(t, err)
-	_, err = app.state.ReloadPolicy()
-	require.NoError(t, err)
-
-	mux, _ := apiv2.Handler(apiv2.Backend{State: app.state, Change: app.Change, Cfg: app.cfg})
-	srv := httptest.NewServer(mux)
-	t.Cleanup(srv.Close)
-
-	adminKey, _, err := app.state.CreateAPIKey(nil)
-	require.NoError(t, err)
-
-	return app, srv.URL, adminKey
-}
-
-// apiPost POSTs a JSON body with an optional bearer token, returning the status
-// and raw body. It owns the response body so callers never leak it.
-func apiPost(t *testing.T, target, bearer string, body any) (int, []byte) {
-	t.Helper()
-
-	b, err := json.Marshal(body)
-	require.NoError(t, err)
-
-	req, err := http.NewRequestWithContext(t.Context(), http.MethodPost, target, bytes.NewReader(b))
-	require.NoError(t, err)
-	req.Header.Set("Content-Type", "application/json")
-
-	if bearer != "" {
-		req.Header.Set("Authorization", "Bearer "+bearer)
-	}
-
-	resp, err := http.DefaultClient.Do(req)
-	require.NoError(t, err)
-
-	defer resp.Body.Close()
-
-	data, _ := io.ReadAll(resp.Body)
-
-	return resp.StatusCode, data
-}
-
-// apiGet GETs a target with an optional bearer token, returning the status. It
-// drains and closes the response body so callers never leak it.
-func apiGet(t *testing.T, target, bearer string) int {
-	t.Helper()
-
-	req, err := http.NewRequestWithContext(t.Context(), http.MethodGet, target, nil)
-	require.NoError(t, err)
-
-	if bearer != "" {
-		req.Header.Set("Authorization", "Bearer "+bearer)
-	}
-
-	resp, err := http.DefaultClient.Do(req)
-	require.NoError(t, err)
-
-	defer resp.Body.Close()
-
-	_, _ = io.Copy(io.Discard, resp.Body)
-
-	return resp.StatusCode
-}
-
-// createClient creates an OAuth client through the v2 keys API as the bearer
-// credential, returning the client id and the once-shown secret.
-func createClient(t *testing.T, baseURL, bearer string, scopes, tags []string) (string, string) {
-	t.Helper()
-
-	status, body := apiPost(t, baseURL+"/api/v2/tailnet/-/keys", bearer, apiv2.CreateKeyRequest{
-		KeyType: "client",
-		Scopes:  scopes,
-		Tags:    tags,
-	})
-	require.Equalf(t, http.StatusOK, status, "create client: %s", body)
-
-	var key apiv2.Key
-	require.NoError(t, json.Unmarshal(body, &key))
-	assert.Equal(t, "client", key.KeyType)
-	require.NotEmpty(t, key.ID, "client id returned")
-	require.NotEmpty(t, key.Key, "secret returned once on create")
-
-	return key.ID, key.Key
-}
-
-// mintToken runs the client-credentials grant. scope is an optional space-delimited
-// narrowing of the client's scopes. credsInBasic sends the secret via HTTP Basic
-// instead of the body. Returns the status and decoded JSON body.
-func mintToken(t *testing.T, baseURL, clientID, secret, scope string, credsInBasic bool) (int, map[string]any) {
-	t.Helper()
-
-	form := url.Values{"grant_type": {"client_credentials"}}
-	if scope != "" {
-		form.Set("scope", scope)
-	}
-
-	if !credsInBasic {
-		form.Set("client_secret", secret)
-	}
-
-	req, err := http.NewRequestWithContext(t.Context(), http.MethodPost,
-		baseURL+"/api/v2/oauth/token", strings.NewReader(form.Encode()))
-	require.NoError(t, err)
-	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-
-	if credsInBasic {
-		req.SetBasicAuth(clientID, secret)
-	}
-
-	resp, err := http.DefaultClient.Do(req)
-	require.NoError(t, err)
-
-	defer resp.Body.Close()
-
-	data, _ := io.ReadAll(resp.Body)
-
-	var m map[string]any
-
-	_ = json.Unmarshal(data, &m)
-
-	return resp.StatusCode, m
-}
-
-// tokenFor mints and returns a bearer access token for the client.
-func tokenFor(t *testing.T, baseURL, secret string) string {
-	t.Helper()
-
-	status, m := mintToken(t, baseURL, "", secret, "", false)
-	require.Equalf(t, http.StatusOK, status, "mint token: %v", m)
-
-	tok, _ := m["access_token"].(string)
-	require.NotEmpty(t, tok)
-
-	return tok
-}
-
-// createTaggedKey attempts to create a tagged auth key and returns the HTTP
-// status, so allow/deny is asserted by the caller.
-func createTaggedKey(t *testing.T, baseURL, bearer string, tags []string) int {
-	t.Helper()
-
-	status, _ := apiPost(t, baseURL+"/api/v2/tailnet/-/keys", bearer, apiv2.CreateKeyRequest{
-		Capabilities: &apiv2.KeyCapabilities{Devices: apiv2.KeyDeviceCapabilities{
-			Create: apiv2.KeyDeviceCreateCapabilities{Reusable: true, Tags: tags},
-		}},
-	})
-
-	return status
-}
-
-func TestAPIv2OAuth_TokenEndpoint(t *testing.T) {
-	_, baseURL, admin := newOAuthTestServer(t)
-
-	clientID, secret := createClient(t, baseURL, admin, []string{"auth_keys"}, []string{"tag:ci"})
-
-	// The secret embeds the client id (Tailscale's derive-from-secret trick).
-	assert.Contains(t, secret, clientID)
-
-	// Mint via the request body.
-	status, m := mintToken(t, baseURL, clientID, secret, "", false)
-	require.Equalf(t, http.StatusOK, status, "%v", m)
-	assert.Equal(t, "Bearer", m["token_type"])
-	assert.InDelta(t, 3600, m["expires_in"], 0, "fixed 1h, in seconds")
-	tok, _ := m["access_token"].(string)
-	assert.Contains(t, tok, "hskey-oauthtok-", "distinct prefix from admin keys")
-
-	// Mint via HTTP Basic (x/oauth2 auto-detect probes Basic first).
-	statusBasic, mBasic := mintToken(t, baseURL, clientID, secret, "", true)
-	require.Equalf(t, http.StatusOK, statusBasic, "%v", mBasic)
-	assert.NotEmpty(t, mBasic["access_token"])
-
-	// Bad credentials → RFC 6749 invalid_client.
-	statusBad, mBad := mintToken(t, baseURL, clientID, "hskey-client-deadbeefdead-"+stringOf("0", 64), "", false)
-	assert.Equal(t, http.StatusUnauthorized, statusBad)
-	assert.Equal(t, "invalid_client", mBad["error"])
-
-	// The token response carries a bearer credential and must not be cached
-	// (RFC 6749 §5.1). mintToken consumes the body, so probe the header raw.
-	form := url.Values{"grant_type": {"client_credentials"}, "client_secret": {secret}}
-	req, err := http.NewRequestWithContext(t.Context(), http.MethodPost,
-		baseURL+"/api/v2/oauth/token", strings.NewReader(form.Encode()))
-	require.NoError(t, err)
-	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-	resp, err := http.DefaultClient.Do(req)
-	require.NoError(t, err)
-	resp.Body.Close()
-	assert.Equal(t, "no-store", resp.Header.Get("Cache-Control"))
-}
-
-func TestAPIv2OAuth_ScopeEnforcement(t *testing.T) {
-	_, baseURL, admin := newOAuthTestServer(t)
-
-	// A write-scoped token may create an auth key within its tag grant...
-	_, writeSecret := createClient(t, baseURL, admin, []string{"auth_keys"}, []string{"tag:ci"})
-	writeTok := tokenFor(t, baseURL, writeSecret)
-	assert.Equal(t, http.StatusOK, createTaggedKey(t, baseURL, writeTok, []string{"tag:ci"}),
-		"write scope + in-grant tag allowed")
-
-	// ...but not with a tag outside its grant.
-	assert.Equal(t, http.StatusForbidden, createTaggedKey(t, baseURL, writeTok, []string{"tag:other"}),
-		"tag outside grant denied")
-
-	// A read-only token is denied the write.
-	_, readSecret := createClient(t, baseURL, admin, []string{"auth_keys:read"}, []string{"tag:ci"})
-	readTok := tokenFor(t, baseURL, readSecret)
-	assert.Equal(t, http.StatusForbidden, createTaggedKey(t, baseURL, readTok, []string{"tag:ci"}),
-		"read scope denied write")
-
-	// The wrong write scope (devices:core) cannot create auth keys.
-	_, devSecret := createClient(t, baseURL, admin, []string{"devices:core"}, []string{"tag:ci"})
-	devTok := tokenFor(t, baseURL, devSecret)
-	assert.Equal(t, http.StatusForbidden, createTaggedKey(t, baseURL, devTok, []string{"tag:ci"}),
-		"wrong scope denied")
-
-	// The "all" super-scope grants auth_keys.
-	_, allSecret := createClient(t, baseURL, admin, []string{"all"}, []string{"tag:ci"})
-	allTok := tokenFor(t, baseURL, allSecret)
-	assert.Equal(t, http.StatusOK, createTaggedKey(t, baseURL, allTok, []string{"tag:ci"}),
-		"all grants auth_keys")
-
-	// A token minted from the all-powerful client but narrowed to read-only is
-	// itself denied writes: narrowing is enforced on the minted token.
-	statusNarrow, mNarrow := mintToken(t, baseURL, "", allSecret, "auth_keys:read", false)
-	require.Equalf(t, http.StatusOK, statusNarrow, "narrow mint: %v", mNarrow)
-	narrowed, _ := mNarrow["access_token"].(string)
-	assert.Equal(t, http.StatusForbidden, createTaggedKey(t, baseURL, narrowed, []string{"tag:ci"}),
-		"token narrowed to :read denied write")
-}
-
-func TestAPIv2OAuth_ClientManagementScopes(t *testing.T) {
-	_, baseURL, admin := newOAuthTestServer(t)
-
-	// An oauth_keys token may create a client within its own grant...
-	_, okSecret := createClient(t, baseURL, admin, []string{"oauth_keys"}, []string{"tag:ci"})
-	okTok := tokenFor(t, baseURL, okSecret)
-	status, body := apiPost(t, baseURL+"/api/v2/tailnet/-/keys", okTok, apiv2.CreateKeyRequest{
-		KeyType: "client", Scopes: []string{"oauth_keys:read"},
-	})
-	assert.Equalf(t, http.StatusOK, status, "oauth_keys creates an in-grant client: %s", body)
-
-	// ...but may NOT escalate by granting the new client a scope the token lacks.
-	statusEsc, _ := apiPost(t, baseURL+"/api/v2/tailnet/-/keys", okTok, apiv2.CreateKeyRequest{
-		KeyType: "client", Scopes: []string{"auth_keys"}, Tags: []string{"tag:ci"},
-	})
-	assert.Equal(t, http.StatusForbidden, statusEsc, "oauth_keys token cannot mint a broader client")
-
-	// A token without oauth_keys cannot manage clients at all.
-	_, akSecret := createClient(t, baseURL, admin, []string{"auth_keys"}, []string{"tag:ci"})
-	akTok := tokenFor(t, baseURL, akSecret)
-	statusDeny, _ := apiPost(t, baseURL+"/api/v2/tailnet/-/keys", akTok, apiv2.CreateKeyRequest{
-		KeyType: "client", Scopes: []string{"auth_keys"}, Tags: []string{"tag:ci"},
-	})
-	assert.Equal(t, http.StatusForbidden, statusDeny, "auth_keys (no oauth_keys) cannot create a client")
-}
-
-func TestAPIv2OAuth_TagOwnedBy(t *testing.T) {
-	app, baseURL, admin := newOAuthTestServer(t)
-
-	// tag:k8s is owned by tag:k8s-operator: the operator's tag delegation.
-	// tag:other exists but is owned by no one, so it tests grant denial (403)
-	// rather than tag-not-in-policy (400).
-	const policy = `{"tagOwners":{"tag:k8s-operator":[],"tag:k8s":["tag:k8s-operator"],"tag:other":[]},"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-
-	_, err := app.state.SetPolicy([]byte(policy))
-	require.NoError(t, err)
-	_, err = app.state.SetPolicyInDB(policy)
-	require.NoError(t, err)
-	_, err = app.state.ReloadPolicy()
-	require.NoError(t, err)
-
-	_, secret := createClient(t, baseURL, admin, []string{"auth_keys"}, []string{"tag:k8s-operator"})
-	tok := tokenFor(t, baseURL, secret)
-
-	// Exact-match tag: allowed.
-	assert.Equal(t, http.StatusOK, createTaggedKey(t, baseURL, tok, []string{"tag:k8s-operator"}),
-		"a token may use its own tag")
-
-	// Owned-by tag: allowed (tag:k8s is owned by tag:k8s-operator).
-	assert.Equal(t, http.StatusOK, createTaggedKey(t, baseURL, tok, []string{"tag:k8s"}),
-		"a token may use a tag owned by its tag")
-
-	// Unrelated tag: denied.
-	assert.Equal(t, http.StatusForbidden, createTaggedKey(t, baseURL, tok, []string{"tag:other"}),
-		"a token may not use an unowned tag")
-}
-
-// TestAPIv2OAuth_NoClientExistenceOracle asserts a token that cannot read OAuth
-// clients gets the same response for a real client id as for a missing key, so
-// it cannot enumerate which ids are OAuth clients.
-func TestAPIv2OAuth_NoClientExistenceOracle(t *testing.T) {
-	_, baseURL, admin := newOAuthTestServer(t)
-
-	clientID, _ := createClient(t, baseURL, admin, []string{"oauth_keys"}, []string{"tag:ci"})
-
-	// A token holding only auth_keys:read (no oauth_keys:read).
-	_, akSecret := createClient(t, baseURL, admin, []string{"auth_keys:read"}, []string{"tag:ci"})
-	akTok := tokenFor(t, baseURL, akSecret)
-
-	statusReal := apiGet(t, baseURL+"/api/v2/tailnet/-/keys/"+clientID, akTok)
-	statusMissing := apiGet(t, baseURL+"/api/v2/tailnet/-/keys/deadbeefdead", akTok)
-
-	assert.Equal(t, statusMissing, statusReal,
-		"a token without oauth_keys:read must not distinguish a real client id from a missing key")
-	assert.NotEqual(t, http.StatusOK, statusReal, "the client must not be readable")
-
-	// A token that does hold oauth_keys:read can read the client.
-	_, okSecret := createClient(t, baseURL, admin, []string{"oauth_keys:read"}, []string{"tag:ci"})
-	okTok := tokenFor(t, baseURL, okSecret)
-
-	statusOK := apiGet(t, baseURL+"/api/v2/tailnet/-/keys/"+clientID, okTok)
-	assert.Equal(t, http.StatusOK, statusOK, "oauth_keys:read may read the client")
-}
-
-// TestAPIv2OAuth_SetDeviceTagsGrant asserts a devices:core token may only set
-// tags within its grant on a device. Without the grant check, the scope alone
-// would let a token stamp any existing policy tag (e.g. tag:other) onto any node.
-func TestAPIv2OAuth_SetDeviceTagsGrant(t *testing.T) {
-	app, baseURL, admin := newOAuthTestServer(t)
-
-	// A registered, user-owned node to retag.
-	user := app.state.CreateUserForTest("dut")
-	node := app.state.CreateRegisteredNodeForTest(user, "dut")
-	node.User = user
-	view := app.state.PutNodeInStoreForTest(*node)
-	devURL := baseURL + "/api/v2/device/" + view.StringID() + "/tags"
-
-	// A devices:core token granted only tag:ci.
-	_, secret := createClient(t, baseURL, admin, []string{"devices:core"}, []string{"tag:ci"})
-	tok := tokenFor(t, baseURL, secret)
-
-	// In-grant tag is allowed.
-	st, body := apiPost(t, devURL, tok, map[string]any{"tags": []string{"tag:ci"}})
-	assert.Equalf(t, http.StatusOK, st, "in-grant tag: %s", body)
-
-	// An existing policy tag outside the token's grant is denied, not silently set.
-	st, _ = apiPost(t, devURL, tok, map[string]any{"tags": []string{"tag:other"}})
-	assert.Equal(t, http.StatusForbidden, st, "out-of-grant tag must be denied")
-
-	// An admin API key is unrestricted.
-	st, body = apiPost(t, devURL, admin, map[string]any{"tags": []string{"tag:other"}})
-	assert.Equalf(t, http.StatusOK, st, "admin may set any policy tag: %s", body)
-}
-
-// TestAPIv2OAuth_UndefinedTagRejected asserts an OAuth token cannot create a
-// client or auth key carrying a tag absent from policy (matching SetNodeTags),
-// while an admin key retains the historical syntax-only validation.
-func TestAPIv2OAuth_UndefinedTagRejected(t *testing.T) {
-	_, baseURL, admin := newOAuthTestServer(t)
-
-	// A token that may create clients and auth keys, holding tag:ci (in policy).
-	_, secret := createClient(t, baseURL, admin, []string{"oauth_keys", "auth_keys"}, []string{"tag:ci"})
-	tok := tokenFor(t, baseURL, secret)
-
-	// A token-created auth key with a tag not in policy is rejected.
-	assert.Equal(t, http.StatusBadRequest, createTaggedKey(t, baseURL, tok, []string{"tag:undefined"}),
-		"token may not create an auth key with an undefined tag")
-
-	// A token-created client with a tag not in policy is rejected.
-	st, _ := apiPost(t, baseURL+"/api/v2/tailnet/-/keys", tok, apiv2.CreateKeyRequest{
-		KeyType: "client", Scopes: []string{"auth_keys"}, Tags: []string{"tag:undefined"},
-	})
-	assert.Equal(t, http.StatusBadRequest, st, "token may not create a client with an undefined tag")
-
-	// An admin key keeps the historical behaviour: a syntactically valid but
-	// undefined tag is accepted (consistent with the v1/CLI pre-auth-key path).
-	assert.Equal(t, http.StatusOK, createTaggedKey(t, baseURL, admin, []string{"tag:adminhistorical"}),
-		"admin retains syntax-only tag validation")
-}
-
-// TestAPIv2OAuth_DenialBranches covers the token-endpoint and bearer-dispatch
-// failure paths: each must fail closed with the right status and no session.
-func TestAPIv2OAuth_DenialBranches(t *testing.T) {
-	_, baseURL, _ := newOAuthTestServer(t)
-	tokenURL := baseURL + "/api/v2/oauth/token"
-	keysURL := baseURL + "/api/v2/tailnet/-/keys"
-
-	post := func(form string) (int, map[string]any) {
-		req, err := http.NewRequestWithContext(t.Context(), http.MethodPost, tokenURL, strings.NewReader(form))
-		require.NoError(t, err)
-		req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-
-		resp, err := http.DefaultClient.Do(req)
-		require.NoError(t, err)
-
-		defer resp.Body.Close()
-
-		data, _ := io.ReadAll(resp.Body)
-
-		var m map[string]any
-
-		_ = json.Unmarshal(data, &m)
-
-		return resp.StatusCode, m
-	}
-
-	// No credentials → invalid_client.
-	st, m := post("grant_type=client_credentials")
-	assert.Equal(t, http.StatusUnauthorized, st)
-	assert.Equal(t, "invalid_client", m["error"])
-
-	// Wrong grant_type → unsupported_grant_type.
-	st, m = post("grant_type=authorization_code&client_secret=x")
-	assert.Equal(t, http.StatusBadRequest, st)
-	assert.Equal(t, "unsupported_grant_type", m["error"])
-
-	// Unknown secret → invalid_client.
-	st, m = post("grant_type=client_credentials&client_secret=not-a-real-secret")
-	assert.Equal(t, http.StatusUnauthorized, st)
-	assert.Equal(t, "invalid_client", m["error"])
-
-	// Bearer dispatch: every malformed/unknown bearer is unauthorized.
-	for _, bearer := range []string{
-		"hskey-oauthtok-deadbeefdead-" + stringOf("0", 64), // well-formed prefix, unknown token
-		"hskey-oauthtok-garbage",                           // malformed OAuth token
-		"hskey-client-deadbeefdead-" + stringOf("0", 64),   // client secret presented as API bearer
-		"totally-bogus",
-	} {
-		assert.Equalf(t, http.StatusUnauthorized, apiGet(t, keysURL, bearer),
-			"bearer %q must be unauthorized", bearer)
-	}
-}
-
-// TestAPIv2OAuth_KeysMultiplexIsolation asserts the multiplexed keys endpoint
-// keeps the two kinds isolated by scope: a token cannot list or delete a kind it
-// lacks the scope for, and an admin key sees both.
-func TestAPIv2OAuth_KeysMultiplexIsolation(t *testing.T) {
-	_, baseURL, admin := newOAuthTestServer(t)
-	keysURL := baseURL + "/api/v2/tailnet/-/keys"
-
-	clientID, _ := createClient(t, baseURL, admin, []string{"oauth_keys"}, []string{"tag:ci"})
-	require.Equal(t, http.StatusOK, createTaggedKey(t, baseURL, admin, []string{"tag:ci"}))
-
-	listKinds := func(bearer string) map[string]int {
-		st, body := apiReq(t, http.MethodGet, keysURL, bearer, nil)
-		require.Equalf(t, http.StatusOK, st, "%s", body)
-
-		var out struct {
-			Keys []apiv2.Key `json:"keys"`
-		}
-
-		require.NoError(t, json.Unmarshal(body, &out))
-
-		kinds := map[string]int{}
-		for _, k := range out.Keys {
-			kinds[k.KeyType]++
-		}
-
-		return kinds
-	}
-
-	_, akReadSecret := createClient(t, baseURL, admin, []string{"auth_keys:read"}, []string{"tag:ci"})
-	akKinds := listKinds(tokenFor(t, baseURL, akReadSecret))
-	assert.Zero(t, akKinds["client"], "auth_keys:read must not see OAuth clients")
-	assert.Positive(t, akKinds["auth"], "auth_keys:read sees auth keys")
-
-	_, okReadSecret := createClient(t, baseURL, admin, []string{"oauth_keys:read"}, []string{"tag:ci"})
-	okKinds := listKinds(tokenFor(t, baseURL, okReadSecret))
-	assert.Zero(t, okKinds["auth"], "oauth_keys:read must not see auth keys")
-	assert.Positive(t, okKinds["client"], "oauth_keys:read sees OAuth clients")
-
-	adminKinds := listKinds(admin)
-	assert.Positive(t, adminKinds["auth"])
-	assert.Positive(t, adminKinds["client"])
-
-	// An auth_keys (write) token cannot delete an OAuth client; it survives.
-	_, akWriteSecret := createClient(t, baseURL, admin, []string{"auth_keys"}, []string{"tag:ci"})
-	stDel, _ := apiReq(t, http.MethodDelete, keysURL+"/"+clientID, tokenFor(t, baseURL, akWriteSecret), nil)
-	assert.NotEqual(t, http.StatusOK, stDel, "auth_keys token must not delete an OAuth client")
-	assert.Positive(t, listKinds(admin)["client"], "client survives the denied delete")
-
-	// An oauth_keys (write) token deletes the client.
-	_, okWriteSecret := createClient(t, baseURL, admin, []string{"oauth_keys"}, []string{"tag:ci"})
-	stDel2, body2 := apiReq(t, http.MethodDelete, keysURL+"/"+clientID, tokenFor(t, baseURL, okWriteSecret), nil)
-	assert.Equalf(t, http.StatusOK, stDel2, "oauth_keys deletes the client: %s", body2)
-}
-
-func stringOf(s string, n int) string {
-	return strings.Repeat(s, n)
-}
diff --git a/hscontrol/apiv2_settings_test.go b/hscontrol/apiv2_settings_test.go
deleted file mode 100644
index 62b88bd75..000000000
--- a/hscontrol/apiv2_settings_test.go
+++ /dev/null
@@ -1,150 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"testing"
-	"time"
-
-	"github.com/danielgtaylor/huma/v2/humatest"
-	"github.com/google/go-cmp/cmp"
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// settingsAPIWithConfig registers the v2 API over a Backend carrying cfg and a
-// zero State — the settings GET reads only b.Cfg, so the other handlers (which
-// would need State) are simply never hit.
-func settingsAPIWithConfig(t *testing.T, cfg *types.Config) humatest.TestAPI {
-	t.Helper()
-
-	_, api := humatest.New(t, apiv2.Config())
-	apiv2.Register(api, apiv2.Backend{Cfg: cfg})
-
-	return api
-}
-
-func getSettings(t *testing.T, api humatest.TestAPI) apiv2.TailnetSettings {
-	t.Helper()
-
-	resp := api.Get("/api/v2/tailnet/-/settings")
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var s apiv2.TailnetSettings
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &s))
-
-	return s
-}
-
-// TestAPIv2SettingsComputedFields validates the GET mapping for each field that
-// is computed from config — the branches the default-config roundtrip never
-// exercises. Expectations live in struct fields, not name branches.
-func TestAPIv2SettingsComputedFields(t *testing.T) {
-	tests := []struct {
-		name                string
-		cfg                 types.Config
-		wantHTTPS           bool
-		wantKeyDurationDays int
-		wantACLsExtManaged  bool
-	}{
-		{
-			name: "defaults",
-			cfg:  types.Config{},
-		},
-		{
-			name:      "https via cert path",
-			cfg:       types.Config{TLS: types.TLSConfig{CertPath: "/x/cert.pem"}},
-			wantHTTPS: true,
-		},
-		{
-			name: "https via letsencrypt",
-			cfg: types.Config{
-				TLS: types.TLSConfig{LetsEncrypt: types.LetsEncryptConfig{Hostname: "hs.example.com"}},
-			},
-			wantHTTPS: true,
-		},
-		{
-			name:                "key duration 7d",
-			cfg:                 types.Config{Node: types.NodeConfig{Expiry: 7 * 24 * time.Hour}},
-			wantKeyDurationDays: 7,
-		},
-		{
-			name:                "key duration 90d",
-			cfg:                 types.Config{Node: types.NodeConfig{Expiry: 90 * 24 * time.Hour}},
-			wantKeyDurationDays: 90,
-		},
-		{
-			name:                "key duration truncates",
-			cfg:                 types.Config{Node: types.NodeConfig{Expiry: 36 * time.Hour}},
-			wantKeyDurationDays: 1,
-		},
-		{
-			name:               "acls externally managed in file mode",
-			cfg:                types.Config{Policy: types.PolicyConfig{Mode: types.PolicyModeFile}},
-			wantACLsExtManaged: true,
-		},
-		{
-			name: "acls db mode",
-			cfg:  types.Config{Policy: types.PolicyConfig{Mode: types.PolicyModeDB}},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			s := getSettings(t, settingsAPIWithConfig(t, &tt.cfg))
-
-			assert.Equal(t, tt.wantHTTPS, s.HTTPSEnabled)
-			assert.Equal(t, tt.wantKeyDurationDays, s.DevicesKeyDurationDays)
-			assert.Equal(t, tt.wantACLsExtManaged, s.ACLsExternallyManagedOn)
-			assert.Equal(t, "none", s.UsersRoleAllowedToJoinExternalTailnets)
-		})
-	}
-}
-
-// TestAPIv2SettingsConstantOffFields pins the hardcoded-off fields:
-// even with every config knob set, they must not pick up signal.
-func TestAPIv2SettingsConstantOffFields(t *testing.T) {
-	cfg := types.Config{
-		TLS:    types.TLSConfig{CertPath: "/x/cert.pem"},
-		Node:   types.NodeConfig{Expiry: 90 * 24 * time.Hour},
-		Policy: types.PolicyConfig{Mode: types.PolicyModeFile},
-	}
-
-	s := getSettings(t, settingsAPIWithConfig(t, &cfg))
-
-	// Only the four computed fields reflect cfg; everything else stays off.
-	want := apiv2.TailnetSettings{
-		ACLsExternallyManagedOn:                true,
-		DevicesKeyDurationDays:                 90,
-		HTTPSEnabled:                           true,
-		UsersRoleAllowedToJoinExternalTailnets: "none",
-	}
-	if diff := cmp.Diff(want, s); diff != "" {
-		t.Errorf("settings mismatch (-want +got):\n%s", diff)
-	}
-}
-
-// TestAPIv2SettingsPatchUnsupported confirms writes are rejected and inert.
-func TestAPIv2SettingsPatchUnsupported(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	patch := api.Patch("/api/v2/tailnet/-/settings", map[string]any{"devicesApprovalOn": true})
-	assert.Equal(t, http.StatusNotImplemented, patch.Code)
-	assert.Contains(t, patch.Body.String(), `"message"`)
-
-	// The rejected PATCH did not mutate anything.
-	assert.False(t, getSettings(t, api).DevicesApprovalOn)
-}
-
-// TestAPIv2SettingsNonDefaultTailnet404 — the tailnet check runs before the
-// 501, so a bad tailnet is 404 on both verbs.
-func TestAPIv2SettingsNonDefaultTailnet404(t *testing.T) {
-	api := settingsAPIWithConfig(t, &types.Config{})
-
-	assert.Equal(t, http.StatusNotFound, api.Get("/api/v2/tailnet/example.com/settings").Code)
-	assert.Equal(t, http.StatusNotFound,
-		api.Patch("/api/v2/tailnet/example.com/settings", map[string]any{}).Code)
-}
diff --git a/hscontrol/apiv2_users_test.go b/hscontrol/apiv2_users_test.go
deleted file mode 100644
index 38efd9a68..000000000
--- a/hscontrol/apiv2_users_test.go
+++ /dev/null
@@ -1,188 +0,0 @@
-package hscontrol
-
-import (
-	"encoding/json"
-	"net/http"
-	"strconv"
-	"testing"
-
-	"github.com/danielgtaylor/huma/v2/humatest"
-	"github.com/google/go-cmp/cmp"
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// userID stringifies a test user's id the way the API emits it.
-func userID(u *types.User) string {
-	return strconv.FormatUint(uint64(u.ID), 10)
-}
-
-// getUserByID GETs a user by id and decodes it.
-func getUserByID(t *testing.T, api humatest.TestAPI, id string) apiv2.User {
-	t.Helper()
-
-	resp := api.Get("/api/v2/users/" + id)
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var user apiv2.User
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &user))
-
-	return user
-}
-
-// listUsers GETs the user list (with an optional raw query string) and returns
-// the decoded slice plus the raw body, so tests can pin the envelope shape.
-func listUsers(t *testing.T, api humatest.TestAPI, query string) ([]apiv2.User, string) {
-	t.Helper()
-
-	resp := api.Get("/api/v2/tailnet/-/users" + query)
-	require.Equalf(t, http.StatusOK, resp.Code, "body: %s", resp.Body)
-
-	var env struct {
-		Users []apiv2.User `json:"users"`
-	}
-	require.NoError(t, json.Unmarshal(resp.Body.Bytes(), &env))
-
-	return env.Users, resp.Body.String()
-}
-
-func containsUserID(users []apiv2.User, id string) bool {
-	for _, u := range users {
-		if u.ID == id {
-			return true
-		}
-	}
-
-	return false
-}
-
-func TestAPIv2User_Get(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	user := app.state.CreateUserForTest("golden")
-
-	got := getUserByID(t, api, userID(user))
-
-	// Shape for a user with no devices: identity mapped, unmodelled fields fixed.
-	want := apiv2.User{
-		ID:          userID(user),
-		DisplayName: "golden",
-		LoginName:   "golden",
-		TailnetID:   "1",
-		Created:     user.CreatedAt,
-		Type:        "member",
-		Role:        "member",
-		Status:      "active",
-	}
-	if diff := cmp.Diff(want, got); diff != "" {
-		t.Errorf("user mismatch (-want +got):\n%s", diff)
-	}
-}
-
-func TestAPIv2User_Get_DeviceCount(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	user := app.state.CreateUserForTest("owner")
-
-	const wantDevices = 3
-	for i := range wantDevices {
-		node := app.state.CreateRegisteredNodeForTest(user, "dut-"+strconv.Itoa(i))
-		app.state.PutNodeInStoreForTest(*node)
-	}
-
-	got := getUserByID(t, api, userID(user))
-	assert.Equal(t, wantDevices, got.DeviceCount, "deviceCount aggregates the user's nodes")
-}
-
-func TestAPIv2User_Get_NotFound(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	tests := []struct {
-		name string
-		id   string
-	}{
-		{name: "unknown numeric id", id: "999999"},
-		{name: "non-numeric id", id: "not-a-number"},
-		// The tagged-devices pseudo-user is never a real DB row.
-		{name: "tagged-devices pseudo-user", id: strconv.Itoa(types.TaggedDevicesUserID)},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			resp := api.Get("/api/v2/users/" + tt.id)
-			assert.Equal(t, http.StatusNotFound, resp.Code)
-			assert.Contains(t, resp.Body.String(), `"message"`, "Tailscale error shape")
-		})
-	}
-}
-
-func TestAPIv2User_List(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	u1 := app.state.CreateUserForTest("alice")
-	u2 := app.state.CreateUserForTest("bob")
-
-	users, body := listUsers(t, api, "")
-	assert.Contains(t, body, `"users"`, "list is enveloped under users")
-	assert.True(t, containsUserID(users, userID(u1)))
-	assert.True(t, containsUserID(users, userID(u2)))
-	assert.False(t, containsUserID(users, strconv.Itoa(types.TaggedDevicesUserID)),
-		"tagged-devices pseudo-user is not listed")
-
-	for _, u := range users {
-		assert.NotEmpty(t, u.ID, "every user has an id")
-		assert.NotEmpty(t, u.LoginName, "every user has a login name")
-		assert.Equal(t, "member", u.Type)
-		assert.Equal(t, "active", u.Status)
-	}
-}
-
-func TestAPIv2User_List_Filters(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	app.state.CreateUserForTest("alice")
-	app.state.CreateUserForTest("bob")
-
-	tests := []struct {
-		name      string
-		query     string
-		wantEmpty bool
-	}{
-		{name: "no filter", query: "", wantEmpty: false},
-		{name: "type member", query: "?type=member", wantEmpty: false},
-		{name: "role member", query: "?role=member", wantEmpty: false},
-		{name: "member and member", query: "?type=member&role=member", wantEmpty: false},
-		{name: "type shared", query: "?type=shared", wantEmpty: true},
-		{name: "role admin", query: "?role=admin", wantEmpty: true},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			users, body := listUsers(t, api, tt.query)
-			assert.Contains(t, body, `"users"`)
-			assert.NotContains(t, body, "null", "empty list marshals as [] not null")
-
-			if tt.wantEmpty {
-				assert.Empty(t, users)
-			} else {
-				assert.NotEmpty(t, users)
-			}
-		})
-	}
-}
-
-func TestAPIv2User_List_BadTailnet(t *testing.T) {
-	app := createTestApp(t)
-	api := registerAPIV2(t, app)
-
-	resp := api.Get("/api/v2/tailnet/example.com/users")
-	assert.Equal(t, http.StatusNotFound, resp.Code)
-	assert.Contains(t, resp.Body.String(), `"message"`)
-}
diff --git a/hscontrol/app.go b/hscontrol/app.go
index fbbd6683e..30134ac61 100644
--- a/hscontrol/app.go
+++ b/hscontrol/app.go
@@ -24,8 +24,9 @@ import (
 	"github.com/go-chi/chi/v5"
 	"github.com/go-chi/chi/v5/middleware"
 	"github.com/go-chi/metrics"
-	apiv1 "github.com/juanfont/headscale/hscontrol/api/v1"
-	apiv2 "github.com/juanfont/headscale/hscontrol/api/v2"
+	grpcRuntime "github.com/grpc-ecosystem/grpc-gateway/v2/runtime"
+	"github.com/juanfont/headscale"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/capver"
 	"github.com/juanfont/headscale/hscontrol/db"
 	"github.com/juanfont/headscale/hscontrol/derp"
@@ -36,12 +37,22 @@ import (
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/types/change"
 	"github.com/juanfont/headscale/hscontrol/util"
+	zerolog "github.com/philip-bui/grpc-zerolog"
 	"github.com/pkg/profile"
+	zl "github.com/rs/zerolog"
 	"github.com/rs/zerolog/log"
 	"github.com/sasha-s/go-deadlock"
 	"golang.org/x/crypto/acme"
 	"golang.org/x/crypto/acme/autocert"
 	"golang.org/x/sync/errgroup"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/codes"
+	"google.golang.org/grpc/credentials"
+	"google.golang.org/grpc/credentials/insecure"
+	"google.golang.org/grpc/metadata"
+	"google.golang.org/grpc/peer"
+	"google.golang.org/grpc/reflection"
+	"google.golang.org/grpc/status"
 	"tailscale.com/envknob"
 	"tailscale.com/tailcfg"
 	"tailscale.com/types/dnstype"
@@ -73,6 +84,7 @@ func init() {
 }
 
 const (
+	AuthPrefix         = "Bearer "
 	updateInterval     = 5 * time.Second
 	privateKeyFileMode = 0o600
 	headscaleDirPerm   = 0o700
@@ -87,10 +99,6 @@ type Headscale struct {
 
 	DERPServer *derpServer.DERPServer
 
-	// realIPMiddleware is nil when cfg.TrustedProxies is empty; the
-	// router skips the mount and r.RemoteAddr stays as the TCP peer.
-	realIPMiddleware func(http.Handler) http.Handler
-
 	// Things that generate changes
 	extraRecordMan *dns.ExtraRecordsMan
 	authProvider   AuthProvider
@@ -132,13 +140,6 @@ func NewHeadscale(cfg *types.Config) (*Headscale, error) {
 		state:             s,
 	}
 
-	if len(cfg.TrustedProxies) > 0 {
-		app.realIPMiddleware, err = trustedProxyRealIP(cfg.TrustedProxies)
-		if err != nil {
-			return nil, fmt.Errorf("building trusted_proxies middleware: %w", err)
-		}
-	}
-
 	// Initialize ephemeral garbage collector
 	ephemeralGC := db.NewEphemeralGarbageCollector(func(ni types.NodeID) {
 		node, ok := app.state.GetNodeByID(ni)
@@ -192,15 +193,13 @@ func NewHeadscale(cfg *types.Config) (*Headscale, error) {
 		if cfg.PrefixV4 != nil {
 			magicDNSDomains = append(
 				magicDNSDomains,
-				util.GenerateIPv4DNSRootDomain(*cfg.PrefixV4)...,
-			)
+				util.GenerateIPv4DNSRootDomain(*cfg.PrefixV4)...)
 		}
 
 		if cfg.PrefixV6 != nil {
 			magicDNSDomains = append(
 				magicDNSDomains,
-				util.GenerateIPv6DNSRootDomain(*cfg.PrefixV6)...,
-			)
+				util.GenerateIPv6DNSRootDomain(*cfg.PrefixV6)...)
 		}
 
 		// we might have routes already from Split DNS
@@ -209,19 +208,7 @@ func NewHeadscale(cfg *types.Config) (*Headscale, error) {
 		}
 
 		for _, d := range magicDNSDomains {
-			// Empty non-nil slice rather than nil: tailcfg.DNSConfig.Clone
-			// and dns.Config.Clone in tailscale drop map entries whose
-			// value is nil (see tailscale.com/tailcfg/tailcfg_clone.go and
-			// tailscale.com/net/dns/dns_clone.go: `if sv == nil { continue }`).
-			// Sending nil here caused the client's wgengine LinkChange:major
-			// handler to clobber /etc/resolv.conf on every tunnel-IP rebind
-			// — the handler reapplies a Clone of lastDNSConfig and the magic
-			// DNS routes vanish, taking the resolver with them for ~6 min
-			// until the next route-changing netmap. Empty slice survives
-			// Clone and carries the same "resolve locally" semantics
-			// (tailscale.com/ipn/ipnlocal/node_backend.go:869 documents the
-			// empty-resolver Routes form for Issue 2706).
-			app.cfg.TailcfgDNSConfig.Routes[d.WithoutTrailingDot()] = []*dnstype.Resolver{}
+			app.cfg.TailcfgDNSConfig.Routes[d.WithoutTrailingDot()] = nil
 		}
 	}
 
@@ -264,7 +251,7 @@ func NewHeadscale(cfg *types.Config) (*Headscale, error) {
 // Redirect to our TLS url.
 func (h *Headscale) redirect(w http.ResponseWriter, req *http.Request) {
 	target := h.cfg.ServerURL + req.URL.RequestURI()
-	http.Redirect(w, req, target, http.StatusFound) //nolint:gosec // G710: target prefixed by trusted ServerURL
+	http.Redirect(w, req, target, http.StatusFound)
 }
 
 func (h *Headscale) scheduledTasks(ctx context.Context) {
@@ -273,7 +260,7 @@ func (h *Headscale) scheduledTasks(ctx context.Context) {
 
 	lastExpiryCheck := time.Unix(0, 0)
 
-	var derpTickerChan <-chan time.Time
+	derpTickerChan := make(<-chan time.Time)
 
 	if h.cfg.DERP.AutoUpdate && h.cfg.DERP.UpdateFrequency != 0 {
 		derpTicker := time.NewTicker(h.cfg.DERP.UpdateFrequency)
@@ -285,6 +272,8 @@ func (h *Headscale) scheduledTasks(ctx context.Context) {
 	var extraRecordsUpdate <-chan []tailcfg.DNSRecord
 	if h.extraRecordMan != nil {
 		extraRecordsUpdate = h.extraRecordMan.UpdateCh()
+	} else {
+		extraRecordsUpdate = make(chan []tailcfg.DNSRecord)
 	}
 
 	var (
@@ -308,46 +297,16 @@ func (h *Headscale) scheduledTasks(ctx context.Context) {
 			Dur("interval", h.cfg.Node.Routes.HA.ProbeInterval).
 			Dur("timeout", h.cfg.Node.Routes.HA.ProbeTimeout).
 			Msg("HA subnet router health probing enabled")
+	} else {
+		haHealthChan = make(<-chan time.Time)
 	}
 
-	var revokedKeyGCChan <-chan time.Time
-
-	if h.cfg.PreAuthKeys.RevokedRetention > 0 {
-		revokedKeyTicker := time.NewTicker(time.Hour)
-		defer revokedKeyTicker.Stop()
-
-		revokedKeyGCChan = revokedKeyTicker.C
-	}
-
-	// OAuth access tokens are short-lived (1h) and re-minted on demand; reap
-	// expired rows hourly so the table stays bounded.
-	accessTokenTicker := time.NewTicker(time.Hour)
-	defer accessTokenTicker.Stop()
-
 	for {
 		select {
 		case <-ctx.Done():
 			log.Info().Caller().Msg("scheduled task worker is shutting down.")
 			return
 
-		case <-revokedKeyGCChan:
-			cutoff := time.Now().Add(-h.cfg.PreAuthKeys.RevokedRetention)
-
-			reaped, err := h.state.DestroyRevokedPreAuthKeysBefore(cutoff)
-			if err != nil {
-				log.Error().Err(err).Msg("reaping revoked pre-auth keys")
-			} else if reaped > 0 {
-				log.Info().Int("count", reaped).Msg("reaped revoked pre-auth keys")
-			}
-
-		case <-accessTokenTicker.C:
-			reaped, err := h.state.DeleteExpiredAccessTokens(time.Now())
-			if err != nil {
-				log.Error().Err(err).Msg("reaping expired oauth access tokens")
-			} else if reaped > 0 {
-				log.Debug().Int64("count", reaped).Msg("reaped expired oauth access tokens")
-			}
-
 		case <-expireTicker.C:
 			var (
 				expiredNodeChanges []change.Change
@@ -395,7 +354,7 @@ func (h *Headscale) scheduledTasks(ctx context.Context) {
 				continue
 			}
 
-			h.cfg.SetExtraRecords(records)
+			h.cfg.TailcfgDNSConfig.ExtraRecords = records
 
 			h.Change(change.ExtraRecords())
 
@@ -405,6 +364,119 @@ func (h *Headscale) scheduledTasks(ctx context.Context) {
 	}
 }
 
+func (h *Headscale) grpcAuthenticationInterceptor(ctx context.Context,
+	req any,
+	info *grpc.UnaryServerInfo,
+	handler grpc.UnaryHandler,
+) (any, error) {
+	// Check if the request is coming from the on-server client.
+	// This is not secure, but it is to maintain maintainability
+	// with the "legacy" database-based client
+	// It is also needed for grpc-gateway to be able to connect to
+	// the server
+	client, _ := peer.FromContext(ctx)
+
+	log.Trace().
+		Caller().
+		Str("client_address", client.Addr.String()).
+		Msg("Client is trying to authenticate")
+
+	meta, ok := metadata.FromIncomingContext(ctx)
+	if !ok {
+		return ctx, status.Errorf(
+			codes.InvalidArgument,
+			"retrieving metadata",
+		)
+	}
+
+	authHeader, ok := meta["authorization"]
+	if !ok {
+		return ctx, status.Errorf(
+			codes.Unauthenticated,
+			"authorization token not supplied",
+		)
+	}
+
+	token := authHeader[0]
+
+	if !strings.HasPrefix(token, AuthPrefix) {
+		return ctx, status.Error(
+			codes.Unauthenticated,
+			`missing "Bearer " prefix in "Authorization" header`,
+		)
+	}
+
+	valid, err := h.state.ValidateAPIKey(strings.TrimPrefix(token, AuthPrefix))
+	if err != nil {
+		return ctx, status.Error(codes.Internal, "validating token")
+	}
+
+	if !valid {
+		log.Info().
+			Str("client_address", client.Addr.String()).
+			Msg("invalid token")
+
+		return ctx, status.Error(codes.Unauthenticated, "invalid token")
+	}
+
+	return handler(ctx, req)
+}
+
+func (h *Headscale) httpAuthenticationMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(
+		writer http.ResponseWriter,
+		req *http.Request,
+	) {
+		log.Trace().
+			Caller().
+			Str("client_address", req.RemoteAddr).
+			Msg("HTTP authentication invoked")
+
+		authHeader := req.Header.Get("Authorization")
+
+		writeUnauthorized := func(statusCode int) {
+			writer.WriteHeader(statusCode)
+
+			if _, err := writer.Write([]byte("Unauthorized")); err != nil { //nolint:noinlineerr
+				log.Error().Err(err).Msg("writing HTTP response failed")
+			}
+		}
+
+		if !strings.HasPrefix(authHeader, AuthPrefix) {
+			log.Error().
+				Caller().
+				Str("client_address", req.RemoteAddr).
+				Msg(`missing "Bearer " prefix in "Authorization" header`)
+			writeUnauthorized(http.StatusUnauthorized)
+
+			return
+		}
+
+		valid, err := h.state.ValidateAPIKey(strings.TrimPrefix(authHeader, AuthPrefix))
+		if err != nil {
+			log.Info().
+				Caller().
+				Err(err).
+				Str("client_address", req.RemoteAddr).
+				Msg("failed to validate token")
+			writeUnauthorized(http.StatusUnauthorized)
+
+			return
+		}
+
+		if !valid {
+			log.Info().
+				Str("client_address", req.RemoteAddr).
+				Msg("invalid token")
+			writeUnauthorized(http.StatusUnauthorized)
+
+			return
+		}
+
+		next.ServeHTTP(writer, req)
+	})
+}
+
 // ensureUnixSocketIsAbsent will check if the given path for headscales unix socket is clear
 // and will remove it if it is not.
 func (h *Headscale) ensureUnixSocketIsAbsent() error {
@@ -430,18 +502,7 @@ func securityHeaders(next http.Handler) http.Handler {
 	})
 }
 
-// serveHumaMux dispatches to a Huma mux mounted under the outer chi router.
-// Huma registers operations at absolute paths (/api/v1/...), so chi's route
-// context must be cleared for the inner mux to re-match against the original URL.
-func serveHumaMux(mux http.Handler) http.HandlerFunc {
-	return func(w http.ResponseWriter, req *http.Request) {
-		mux.ServeHTTP(w, req.WithContext(
-			context.WithValue(req.Context(), chi.RouteCtxKey, nil),
-		))
-	}
-}
-
-func (h *Headscale) createRouter(apiV1Mux, apiV2Mux http.Handler) *chi.Mux {
+func (h *Headscale) createRouter(grpcMux *grpcRuntime.ServeMux) *chi.Mux {
 	r := chi.NewRouter()
 	r.Use(metrics.Collector(metrics.CollectorOpts{
 		Host:  false,
@@ -451,20 +512,11 @@ func (h *Headscale) createRouter(apiV1Mux, apiV2Mux http.Handler) *chi.Mux {
 		},
 	}))
 	r.Use(middleware.RequestID)
-
-	if h.realIPMiddleware != nil {
-		r.Use(h.realIPMiddleware)
-	}
-
+	r.Use(middleware.RealIP)
 	r.Use(middleware.RequestLogger(&zerologRequestLogger{}))
 	r.Use(middleware.Recoverer)
 	r.Use(securityHeaders)
 
-	// TS2021 accepts both the native client's HTTP POST upgrade and the
-	// browser/WASM client's WebSocket GET upgrade; NoiseUpgradeHandler
-	// dispatches on the Upgrade header, not the method. Registering GET as
-	// well keeps the router from rejecting the WebSocket handshake with 405.
-	r.Get(ts2021UpgradePath, h.NoiseUpgradeHandler)
 	r.Post(ts2021UpgradePath, h.NoiseUpgradeHandler)
 
 	r.Get("/robots.txt", h.RobotsHandler)
@@ -483,6 +535,10 @@ func (h *Headscale) createRouter(apiV1Mux, apiV2Mux http.Handler) *chi.Mux {
 	r.Get("/apple/{platform}", h.ApplePlatformConfig)
 	r.Get("/windows", h.WindowsConfigMessage)
 
+	// TODO(kristoffer): move swagger into a package
+	r.Get("/swagger", headscale.SwaggerUI)
+	r.Get("/swagger/v1/openapiv2.json", headscale.SwaggerAPIv1)
+
 	r.Post("/verify", h.VerifyHandler)
 
 	if h.cfg.DERP.ServerEnabled {
@@ -492,16 +548,12 @@ func (h *Headscale) createRouter(apiV1Mux, apiV2Mux http.Handler) *chi.Mux {
 		r.HandleFunc("/bootstrap-dns", derpServer.DERPBootstrapDNSHandler(h.state.DERPMap()))
 	}
 
-	// Auth is enforced inside each Huma mux per-operation, so the whole API
-	// mounts as one handler per version: operations need an API key while the
-	// OpenAPI document and docs UI stay public. v1 is the headscale-native admin
-	// API; v2 is Headscale's v2 API, which ports some endpoints from Tailscale.
 	r.Route("/api", func(r chi.Router) {
-		r.Handle("/v1/*", serveHumaMux(apiV1Mux))
-		r.Handle("/v2/*", serveHumaMux(apiV2Mux))
+		r.Use(h.httpAuthenticationMiddleware)
+		r.HandleFunc("/v1/*", grpcMux.ServeHTTP)
 	})
 	// Ping response endpoint: receives HEAD from clients responding
-	// to a [tailcfg.PingRequest]. The unguessable ping ID serves as authentication.
+	// to a PingRequest. The unguessable ping ID serves as authentication.
 	r.Head("/machine/ping-response", h.PingResponseHandler)
 
 	r.Get("/favicon.ico", FaviconHandler)
@@ -510,7 +562,7 @@ func (h *Headscale) createRouter(apiV1Mux, apiV2Mux http.Handler) *chi.Mux {
 	return r
 }
 
-// Serve launches the HTTP servers that run Headscale and its API.
+// Serve launches the HTTP and gRPC server service Headscale and the API.
 //
 //nolint:gocyclo // complex server startup function
 func (h *Headscale) Serve() error {
@@ -588,7 +640,7 @@ func (h *Headscale) Serve() error {
 			return fmt.Errorf("setting up extrarecord manager: %w", err)
 		}
 
-		h.cfg.SetExtraRecords(h.extraRecordMan.Records())
+		h.cfg.TailcfgDNSConfig.ExtraRecords = h.extraRecordMan.Records()
 
 		go h.extraRecordMan.Run()
 		defer h.extraRecordMan.Close()
@@ -601,6 +653,12 @@ func (h *Headscale) Serve() error {
 
 	go h.scheduledTasks(scheduleCtx)
 
+	if zl.GlobalLevel() == zl.TraceLevel {
+		zerolog.RespLog = true
+	} else {
+		zerolog.RespLog = false
+	}
+
 	// Prepare group for running listeners
 	errorGroup := new(errgroup.Group)
 
@@ -628,47 +686,45 @@ func (h *Headscale) Serve() error {
 
 	socketListener, err := new(net.ListenConfig).Listen(context.Background(), "unix", h.cfg.UnixSocket)
 	if err != nil {
-		return fmt.Errorf("setting up socket: %w", err)
+		return fmt.Errorf("setting up gRPC socket: %w", err)
 	}
 
 	// Change socket permissions
 	if err := os.Chmod(h.cfg.UnixSocket, h.cfg.UnixSocketPermission); err != nil { //nolint:noinlineerr
-		return fmt.Errorf("changing socket permission: %w", err)
+		return fmt.Errorf("changing gRPC socket permission: %w", err)
 	}
 
-	// The Huma v1 API mux matches full /api/v1/... paths and is shared by
-	// the local unix socket (served without authentication, local trust)
-	// and the remote TCP router (served behind the API-key middleware).
-	humaMux, _ := apiv1.Handler(apiv1.Backend{
-		State:  h.state,
-		Change: h.Change,
-		Cfg:    h.cfg,
-	})
+	grpcGatewayMux := grpcRuntime.NewServeMux()
 
-	// The Headscale v2 API. Served behind Basic/Bearer auth on the remote
-	// listener, and over the local unix socket (local trust) so the CLI can
-	// manage OAuth clients through the same v2 keys handler the Tailscale
-	// ecosystem uses.
-	humaV2Mux, _ := apiv2.Handler(apiv2.Backend{
-		State:  h.state,
-		Change: h.Change,
-		Cfg:    h.cfg,
-	})
-
-	// Serve both Huma APIs over the unix socket without TLS or auth: socket
-	// access implies trust. WithLocalTrust marks these requests so each API's
-	// security middleware skips the credential check. v2 paths route to the v2
-	// mux; everything else (the v1 paths) to v1.
-	socketHandler := http.NewServeMux()
-	socketHandler.Handle("/api/v2/", apiv2.WithLocalTrust(humaV2Mux))
-	socketHandler.Handle("/", apiv1.WithLocalTrust(humaMux))
-
-	socketServer := &http.Server{
-		Handler:     socketHandler,
-		ReadTimeout: types.HTTPTimeout,
+	// Make the grpc-gateway connect to grpc over socket
+	grpcGatewayConn, err := grpc.Dial( //nolint:staticcheck // SA1019: deprecated but supported in 1.x
+		h.cfg.UnixSocket,
+		[]grpc.DialOption{
+			grpc.WithTransportCredentials(insecure.NewCredentials()),
+			grpc.WithContextDialer(util.GrpcSocketDialer),
+		}...,
+	)
+	if err != nil {
+		return fmt.Errorf("setting up gRPC gateway via socket: %w", err)
 	}
 
-	errorGroup.Go(func() error { return socketServer.Serve(socketListener) })
+	// Connect to the gRPC server over localhost to skip
+	// the authentication.
+	err = v1.RegisterHeadscaleServiceHandler(ctx, grpcGatewayMux, grpcGatewayConn)
+	if err != nil {
+		return fmt.Errorf("registering Headscale API service to gRPC: %w", err)
+	}
+
+	// Start the local gRPC server without TLS and without authentication
+	grpcSocket := grpc.NewServer(
+	// Uncomment to debug grpc communication.
+	// zerolog.UnaryInterceptor(),
+	)
+
+	v1.RegisterHeadscaleServiceServer(grpcSocket, newHeadscaleV1APIServer(h))
+	reflection.Register(grpcSocket)
+
+	errorGroup.Go(func() error { return grpcSocket.Serve(socketListener) })
 
 	//
 	//
@@ -680,13 +736,64 @@ func (h *Headscale) Serve() error {
 		return fmt.Errorf("configuring TLS settings: %w", err)
 	}
 
+	//
+	//
+	// gRPC setup
+	//
+
+	// We are sadly not able to run gRPC and HTTPS (2.0) on the same
+	// port because the connection mux does not support matching them
+	// since they are so similar. There is multiple issues open and we
+	// can revisit this if changes:
+	// https://github.com/soheilhy/cmux/issues/68
+	// https://github.com/soheilhy/cmux/issues/91
+
+	var (
+		grpcServer   *grpc.Server
+		grpcListener net.Listener
+	)
+
+	if tlsConfig != nil || h.cfg.GRPCAllowInsecure {
+		log.Info().Msgf("enabling remote gRPC at %s", h.cfg.GRPCAddr)
+
+		grpcOptions := []grpc.ServerOption{
+			grpc.ChainUnaryInterceptor(
+				h.grpcAuthenticationInterceptor,
+				// Uncomment to debug grpc communication.
+				// zerolog.NewUnaryServerInterceptor(),
+			),
+		}
+
+		if tlsConfig != nil {
+			grpcOptions = append(grpcOptions,
+				grpc.Creds(credentials.NewTLS(tlsConfig)),
+			)
+		} else {
+			log.Warn().Msg("gRPC is running without security")
+		}
+
+		grpcServer = grpc.NewServer(grpcOptions...)
+
+		v1.RegisterHeadscaleServiceServer(grpcServer, newHeadscaleV1APIServer(h))
+
+		grpcListener, err = new(net.ListenConfig).Listen(context.Background(), "tcp", h.cfg.GRPCAddr)
+		if err != nil {
+			return fmt.Errorf("binding to TCP address: %w", err)
+		}
+
+		errorGroup.Go(func() error { return grpcServer.Serve(grpcListener) })
+
+		log.Info().
+			Msgf("listening and serving gRPC on: %s", h.cfg.GRPCAddr)
+	}
+
 	//
 	//
 	// HTTP setup
 	//
 	// This is the regular router that we expose
 	// over our main Addr
-	router := h.createRouter(humaMux, humaV2Mux)
+	router := h.createRouter(grpcGatewayMux)
 
 	httpServer := &http.Server{
 		Addr:        h.cfg.Addr,
@@ -827,10 +934,13 @@ func (h *Headscale) Serve() error {
 				info("waiting for netmap stream to close")
 				h.clientStreamsOpen.Wait()
 
-				info("shutting down api server (socket)")
+				info("shutting down grpc server (socket)")
+				grpcSocket.GracefulStop()
 
-				if err := socketServer.Shutdown(shutdownCtx); err != nil { //nolint:noinlineerr
-					log.Error().Err(err).Msg("failed to shutdown socket server")
+				if grpcServer != nil {
+					info("shutting down grpc server (external)")
+					grpcServer.GracefulStop()
+					grpcListener.Close()
 				}
 
 				if tailsqlContext != nil {
@@ -846,6 +956,7 @@ func (h *Headscale) Serve() error {
 				}
 
 				httpListener.Close()
+				grpcGatewayConn.Close()
 
 				// Stop listening (and unlink the socket if unix type):
 				info("closing socket listener")
@@ -877,14 +988,14 @@ func (h *Headscale) Serve() error {
 }
 
 func (h *Headscale) getTLSSettings() (*tls.Config, error) {
-	tlsEnabled := h.cfg.TLS.LetsEncrypt.Hostname != "" || h.cfg.TLS.CertPath != ""
-	if tlsEnabled && !strings.HasPrefix(h.cfg.ServerURL, "https://") {
-		log.Warn().Msg("listening with TLS but ServerURL does not start with https://")
-	} else if !tlsEnabled && !strings.HasPrefix(h.cfg.ServerURL, "http://") {
-		log.Warn().Msg("listening without TLS but ServerURL does not start with http://")
-	}
+	var err error
 
 	if h.cfg.TLS.LetsEncrypt.Hostname != "" {
+		if !strings.HasPrefix(h.cfg.ServerURL, "https://") {
+			log.Warn().
+				Msg("Listening with TLS but ServerURL does not start with https://")
+		}
+
 		certManager := autocert.Manager{
 			Prompt:     autocert.AcceptTOS,
 			HostPolicy: autocert.HostWhitelist(h.cfg.TLS.LetsEncrypt.Hostname),
@@ -930,26 +1041,27 @@ func (h *Headscale) getTLSSettings() (*tls.Config, error) {
 		default:
 			return nil, errUnsupportedLetsEncryptChallengeType
 		}
-	}
+	} else if h.cfg.TLS.CertPath == "" {
+		if !strings.HasPrefix(h.cfg.ServerURL, "http://") {
+			log.Warn().Msg("listening without TLS but ServerURL does not start with http://")
+		}
 
-	if h.cfg.TLS.CertPath == "" {
-		return nil, nil //nolint:nilnil // intentional: no TLS config when neither LetsEncrypt nor a cert path is set
-	}
-
-	tlsConfig := &tls.Config{
-		NextProtos:   []string{"http/1.1"},
-		Certificates: make([]tls.Certificate, 1),
-		MinVersion:   tls.VersionTLS12,
-	}
-
-	cert, err := tls.LoadX509KeyPair(h.cfg.TLS.CertPath, h.cfg.TLS.KeyPath)
-	if err != nil {
 		return nil, err
+	} else {
+		if !strings.HasPrefix(h.cfg.ServerURL, "https://") {
+			log.Warn().Msg("listening with TLS but ServerURL does not start with https://")
+		}
+
+		tlsConfig := &tls.Config{
+			NextProtos:   []string{"http/1.1"},
+			Certificates: make([]tls.Certificate, 1),
+			MinVersion:   tls.VersionTLS12,
+		}
+
+		tlsConfig.Certificates[0], err = tls.LoadX509KeyPair(h.cfg.TLS.CertPath, h.cfg.TLS.KeyPath)
+
+		return tlsConfig, err
 	}
-
-	tlsConfig.Certificates[0] = cert
-
-	return tlsConfig, nil
 }
 
 func readOrCreatePrivateKey(path string) (*key.MachinePrivate, error) {
@@ -1005,23 +1117,11 @@ func (h *Headscale) Change(cs ...change.Change) {
 	h.mapBatcher.AddWork(cs...)
 }
 
-// HTTPHandler returns an [http.Handler] for the [Headscale] control server.
+// HTTPHandler returns an http.Handler for the Headscale control server.
 // The handler serves the Tailscale control protocol including the /key
 // endpoint and /ts2021 Noise upgrade path.
 func (h *Headscale) HTTPHandler() http.Handler {
-	humaMux, _ := apiv1.Handler(apiv1.Backend{
-		State:  h.state,
-		Change: h.Change,
-		Cfg:    h.cfg,
-	})
-
-	humaV2Mux, _ := apiv2.Handler(apiv2.Backend{
-		State:  h.state,
-		Change: h.Change,
-		Cfg:    h.cfg,
-	})
-
-	return h.createRouter(humaMux, humaV2Mux)
+	return h.createRouter(grpcRuntime.NewServeMux())
 }
 
 // NoisePublicKey returns the server's Noise protocol public key.
@@ -1097,7 +1197,7 @@ func (l *acmeLogger) RoundTrip(req *http.Request) (*http.Response, error) {
 	return resp, nil
 }
 
-// [zerologRequestLogger] implements chi's [middleware.LogFormatter]
+// zerologRequestLogger implements chi's middleware.LogFormatter
 // to route HTTP request logs through zerolog.
 type zerologRequestLogger struct{}
 
diff --git a/hscontrol/auth.go b/hscontrol/auth.go
index 81e620bfd..853df605e 100644
--- a/hscontrol/auth.go
+++ b/hscontrol/auth.go
@@ -23,18 +23,6 @@ type AuthProvider interface {
 	AuthURL(authID types.AuthID) string
 }
 
-// machineKeyMismatch fails closed when a node looked up by NodeKey was started
-// in a Noise session with a different machine key. Without this anyone holding a
-// target's NodeKey could open a session with a throwaway machine key and act on
-// the owner's node. Returns a 401 [HTTPError] on mismatch, nil otherwise.
-func machineKeyMismatch(node types.NodeView, machineKey key.MachinePublic) error {
-	if node.MachineKey() != machineKey {
-		return NewHTTPError(http.StatusUnauthorized, "node exists with a different machine key", nil)
-	}
-
-	return nil
-}
-
 func (h *Headscale) handleRegister(
 	ctx context.Context,
 	req tailcfg.RegisterRequest,
@@ -85,16 +73,20 @@ func (h *Headscale) handleRegister(
 			// the Noise session's machine key matches the cached node.
 			// Without this check anyone holding a target's NodeKey could
 			// open a Noise session with a throwaway machine key and read
-			// the owner's User/Login back through [nodeToRegisterResponse].
-			// [Headscale.handleLogout] enforces the same check on its own path.
-			err := machineKeyMismatch(node, machineKey)
-			if err != nil {
-				return nil, err
+			// the owner's User/Login back through nodeToRegisterResponse.
+			// handleLogout enforces the same check on its own path.
+			if node.MachineKey() != machineKey {
+				return nil, NewHTTPError(
+					http.StatusUnauthorized,
+					"node exists with a different machine key",
+					nil,
+				)
 			}
 
-			// When tailscaled restarts, it sends [tailcfg.RegisterRequest] with Auth=nil and Expiry=zero.
+			// When tailscaled restarts, it sends RegisterRequest with Auth=nil and Expiry=zero.
 			// Return the current node state without modification.
-			if req.Expiry.IsZero() && !node.IsExpired() {
+			// See: https://github.com/juanfont/headscale/issues/2862
+			if req.Expiry.IsZero() && node.Expiry().Valid() && !node.IsExpired() {
 				return nodeToRegisterResponse(node), nil
 			}
 
@@ -162,9 +154,8 @@ func (h *Headscale) handleLogout(
 	// Fail closed if it looks like this is an attempt to modify a node where
 	// the node key and the machine key the noise session was started with does
 	// not align.
-	err := machineKeyMismatch(node, machineKey)
-	if err != nil {
-		return nil, err
+	if node.MachineKey() != machineKey {
+		return nil, NewHTTPError(http.StatusUnauthorized, "node exist with different machine key", nil)
 	}
 
 	// Note: We do NOT return early if req.Auth is set, because Tailscale clients
@@ -201,7 +192,7 @@ func (h *Headscale) handleLogout(
 	}
 
 	// If the request expiry is in the past, we consider it a logout.
-	// Zero expiry is handled in [Headscale.handleRegister] before calling this function.
+	// Zero expiry is handled in handleRegister() before calling this function.
 	if req.Expiry.Before(time.Now()) {
 		log.Debug().
 			EmbedObject(node).
@@ -235,16 +226,7 @@ func (h *Headscale) handleLogout(
 
 	// Update the internal state with the nodes new expiry, meaning it is
 	// logged out.
-	//
-	// Clamp the client-supplied value to now: Tailscale sends the
-	// sentinel time.Unix(123, 0) on logout (controlclient/direct.go),
-	// and storing it verbatim propagates a 1970 KeyExpiry to every
-	// peer's netmap. Semantically identical (expired as of now), but
-	// sane in logs, debug dumps, and peer netmaps.
 	expiry := req.Expiry
-	if now := time.Now(); expiry.Before(now) {
-		expiry = now
-	}
 
 	updatedNode, c, err := h.state.SetNodeExpiry(node.ID(), &expiry)
 	if err != nil {
@@ -272,7 +254,7 @@ func nodeToRegisterResponse(node types.NodeView) *tailcfg.RegisterResponse {
 		MachineAuthorized: true,
 	}
 
-	// For tagged nodes, use the [types.TaggedDevices] special user
+	// For tagged nodes, use the TaggedDevices special user
 	// For user-owned nodes, include User and Login information from the actual user
 	if node.IsTagged() {
 		resp.User = types.TaggedDevices.View().TailscaleUser()
@@ -321,8 +303,8 @@ func (h *Headscale) waitForFollowup(
 }
 
 // reqToNewRegisterResponse refreshes the registration flow by creating a new
-// registration ID and returning the corresponding [tailcfg.RegisterResponse.AuthURL]
-// so the client can restart the authentication process.
+// registration ID and returning the corresponding AuthURL so the client can
+// restart the authentication process.
 func (h *Headscale) reqToNewRegisterResponse(
 	req tailcfg.RegisterRequest,
 	machineKey key.MachinePublic,
@@ -344,8 +326,8 @@ func (h *Headscale) reqToNewRegisterResponse(
 	}, nil
 }
 
-// registrationDataFromRequest builds the [types.RegistrationData] payload stored
-// in the auth cache for a pending registration. The original [tailcfg.Hostinfo] is
+// registrationDataFromRequest builds the RegistrationData payload stored
+// in the auth cache for a pending registration. The original Hostinfo is
 // retained so that consumers (auth callback, observability) see the
 // fields the client originally announced; the bounded-LRU cap on the
 // cache is what bounds the unauthenticated cache-fill DoS surface.
diff --git a/hscontrol/auth_tags_test.go b/hscontrol/auth_tags_test.go
index 3cea0cb0c..1c761b9bd 100644
--- a/hscontrol/auth_tags_test.go
+++ b/hscontrol/auth_tags_test.go
@@ -1,7 +1,6 @@
 package hscontrol
 
 import (
-	"context"
 	"testing"
 	"time"
 
@@ -60,7 +59,7 @@ func createTestAppWithNodeExpiry(t *testing.T, nodeExpiry time.Duration) *Headsc
 // a tagged node with:
 // - Tags from the PreAuthKey
 // - Nil UserID (tagged nodes are owned by tags, not a user)
-// - [types.Node.IsTagged] returns true.
+// - IsTagged() returns true.
 func TestTaggedPreAuthKeyCreatesTaggedNode(t *testing.T) {
 	app := createTestApp(t)
 
@@ -113,7 +112,7 @@ func TestTaggedPreAuthKeyCreatesTaggedNode(t *testing.T) {
 // authentication. This is critical for the container restart scenario (#2830).
 //
 // NOTE: This test verifies that re-authentication preserves the node's current tags
-// without testing tag modification via [state.State.SetNodeTags] (which requires ACL policy setup).
+// without testing tag modification via SetNodeTags (which requires ACL policy setup).
 func TestReAuthDoesNotReapplyTags(t *testing.T) {
 	app := createTestApp(t)
 
@@ -179,8 +178,9 @@ func TestReAuthDoesNotReapplyTags(t *testing.T) {
 	assert.Equal(t, 1, allNodes.Len(), "Should have exactly one node")
 }
 
-// NOTE: Converting user-owned nodes to tagged nodes while preserving UserID
-// is covered by the SetTags API tests, which properly handle ACL policy setup.
+// NOTE: TestSetTagsOnUserOwnedNode functionality is covered by gRPC tests in grpcv1_test.go
+// which properly handle ACL policy setup. The test verifies that SetTags can convert
+// user-owned nodes to tagged nodes while preserving UserID.
 
 // TestCannotRemoveAllTags tests that attempting to remove all tags from a
 // tagged node fails with ErrCannotRemoveAllTags. Once a node is tagged,
@@ -669,151 +669,10 @@ func TestTaggedNodeReauthPreservesDisabledExpiry(t *testing.T) {
 		"Tagged node should have expiry PRESERVED as disabled after re-auth")
 }
 
-// TestTaggedNodeRestartPreservesNilExpiry tests that a tagged node whose
-// tailscaled restarts (sending Auth=nil, Expiry=zero) keeps its nil expiry.
-//
-// The handleRegister guard required node.Expiry().Valid(), false for the
-// nil expiry tagged nodes are created with. The request fell through to
-// handleLogout, which wrote &time.Time{} over the original nil and flipped
-// the API representation from null to "0001-01-01T00:00:00Z".
-func TestTaggedNodeRestartPreservesNilExpiry(t *testing.T) {
-	app := createTestApp(t)
-
-	user := app.state.CreateUserForTest("tag-restart")
-	tags := []string{"tag:agent"}
-
-	pak, err := app.state.CreatePreAuthKey(user.TypedID(), true, false, nil, tags)
-	require.NoError(t, err)
-
-	machineKey := key.NewMachine()
-	nodeKey := key.NewNode()
-
-	regReq := tailcfg.RegisterRequest{
-		Auth: &tailcfg.RegisterResponseAuth{
-			AuthKey: pak.Key,
-		},
-		NodeKey: nodeKey.Public(),
-		Hostinfo: &tailcfg.Hostinfo{
-			Hostname: "tagged-restart-test",
-		},
-	}
-
-	resp, err := app.handleRegisterWithAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err)
-	require.True(t, resp.MachineAuthorized)
-
-	node, found := app.state.GetNodeByNodeKey(nodeKey.Public())
-	require.True(t, found)
-	require.True(t, node.IsTagged())
-	require.False(t, node.Expiry().Valid(), "tagged node should have nil expiry after registration")
-	require.False(t, node.IsExpired(), "tagged node with nil expiry should not be expired")
-
-	// tailscaled restart: RegisterRequest with Auth=nil and Expiry=time.Time{}
-	// (the Go zero value) is what the client sends when it restarts with
-	// persisted state.
-	restartReq := tailcfg.RegisterRequest{
-		Auth:    nil,
-		NodeKey: nodeKey.Public(),
-		Expiry:  time.Time{},
-	}
-
-	restartResp, err := app.handleRegister(context.Background(), restartReq, machineKey.Public())
-	require.NoError(t, err)
-
-	require.True(t, restartResp.MachineAuthorized,
-		"restart should not require re-authorization")
-	require.False(t, restartResp.NodeKeyExpired,
-		"restart should not mark node key as expired")
-	require.Equal(t, types.TaggedDevices.View().TailscaleUser(), restartResp.User,
-		"response should identify node as tagged device")
-
-	nodeAfterRestart, found := app.state.GetNodeByNodeKey(nodeKey.Public())
-	require.True(t, found)
-
-	assert.True(t, nodeAfterRestart.IsTagged(), "node should still be tagged")
-	assert.False(t, nodeAfterRestart.IsExpired(), "node should not be expired after restart")
-	assert.False(t, nodeAfterRestart.Expiry().Valid(),
-		"tagged node expiry must remain nil (not zero-time) after restart")
-
-	var dbNode types.Node
-	require.NoError(t,
-		app.state.DB().DB.First(&dbNode, nodeAfterRestart.ID().Uint64()).Error)
-	assert.Nil(t, dbNode.Expiry,
-		"database expiry column must be NULL after restart, not a pointer to zero-time")
-}
-
-// TestUntaggedNodeRestartPreservesNilExpiry tests that an untagged node
-// registered against a preauth key with no default node.expiry keeps its
-// nil expiry when tailscaled restarts. Same root cause as the tagged
-// variant: the dropped node.Expiry().Valid() check covers any nil-expiry
-// node, regardless of ownership.
-func TestUntaggedNodeRestartPreservesNilExpiry(t *testing.T) {
-	app := createTestAppWithNodeExpiry(t, 0)
-
-	user := app.state.CreateUserForTest("untagged-restart")
-
-	pak, err := app.state.CreatePreAuthKey(user.TypedID(), true, false, nil, nil)
-	require.NoError(t, err)
-
-	machineKey := key.NewMachine()
-	nodeKey := key.NewNode()
-
-	regReq := tailcfg.RegisterRequest{
-		Auth: &tailcfg.RegisterResponseAuth{
-			AuthKey: pak.Key,
-		},
-		NodeKey: nodeKey.Public(),
-		Hostinfo: &tailcfg.Hostinfo{
-			Hostname: "untagged-restart-test",
-		},
-		Expiry: time.Time{},
-	}
-
-	resp, err := app.handleRegisterWithAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err)
-	require.True(t, resp.MachineAuthorized)
-
-	node, found := app.state.GetNodeByNodeKey(nodeKey.Public())
-	require.True(t, found)
-	require.False(t, node.IsTagged(), "node should be user-owned, not tagged")
-	require.False(t, node.Expiry().Valid(),
-		"untagged node with no default expiry should have nil expiry after registration")
-	require.False(t, node.IsExpired())
-
-	restartReq := tailcfg.RegisterRequest{
-		Auth:    nil,
-		NodeKey: nodeKey.Public(),
-		Expiry:  time.Time{},
-	}
-
-	restartResp, err := app.handleRegister(context.Background(), restartReq, machineKey.Public())
-	require.NoError(t, err)
-
-	require.True(t, restartResp.MachineAuthorized,
-		"restart should not require re-authorization")
-	require.False(t, restartResp.NodeKeyExpired,
-		"restart should not mark node key as expired")
-
-	nodeAfterRestart, found := app.state.GetNodeByNodeKey(nodeKey.Public())
-	require.True(t, found)
-
-	assert.False(t, nodeAfterRestart.IsTagged(), "node should still be user-owned")
-	assert.False(t, nodeAfterRestart.IsExpired(), "node should not be expired after restart")
-	assert.False(t, nodeAfterRestart.Expiry().Valid(),
-		"untagged node expiry must remain nil (not zero-time) after restart")
-
-	var dbNode types.Node
-	require.NoError(t,
-		app.state.DB().DB.First(&dbNode, nodeAfterRestart.ID().Uint64()).Error)
-	assert.Nil(t, dbNode.Expiry,
-		"database expiry column must be NULL after restart, not a pointer to zero-time "+
-			"(this is what `sqlite3 ... 'select expiry from nodes'` sees)")
-}
-
 // TestExpiryDuringPersonalToTaggedConversion tests that when a personal node
 // is converted to tagged via reauth with RequestTags, the expiry is cleared to nil.
-// Previously expiry was NOT cleared because expiry handling ran
-// BEFORE [state.State.processReauthTags].
+// BUG #3048: Previously expiry was NOT cleared because expiry handling ran
+// BEFORE processReauthTags.
 func TestExpiryDuringPersonalToTaggedConversion(t *testing.T) {
 	app := createTestApp(t)
 	user := app.state.CreateUserForTest("expiry-test-user")
@@ -885,8 +744,8 @@ func TestExpiryDuringPersonalToTaggedConversion(t *testing.T) {
 // TestExpiryDuringTaggedToPersonalConversion tests that when a tagged node
 // is converted to personal via reauth with empty RequestTags, expiry is set
 // from the client request.
-// Previously expiry was NOT set because expiry handling ran
-// BEFORE [state.State.processReauthTags] (node was still tagged at check time).
+// BUG #3048: Previously expiry was NOT set because expiry handling ran
+// BEFORE processReauthTags (node was still tagged at check time).
 func TestExpiryDuringTaggedToPersonalConversion(t *testing.T) {
 	app := createTestApp(t)
 	user := app.state.CreateUserForTest("expiry-test-user2")
@@ -1007,24 +866,16 @@ func TestReAuthWithDifferentMachineKey(t *testing.T) {
 		Expiry: time.Now().Add(24 * time.Hour),
 	}
 
-	// A NodeKey is bound 1:1 to a MachineKey (getAndValidateNode enforces
-	// this at poll time). A different machine claiming an existing NodeKey is
-	// a hijack: it would poison the NodeStore NodeKey index so the original
-	// node fails the poll-time MachineKey check and is denied service.
-	// Registration now rejects it (see f8f08cf7). Real Tailscale clients
-	// never reuse a NodeKey across machine keys, so no legitimate flow is
-	// affected.
-	_, err = app.handleRegisterWithAuthKey(regReq2, machineKey2.Public())
-	require.Error(t, err,
-		"a different machine claiming an existing NodeKey must be rejected")
+	resp2, err := app.handleRegisterWithAuthKey(regReq2, machineKey2.Public())
+	require.NoError(t, err)
+	require.True(t, resp2.MachineAuthorized)
 
-	// The original node is unaffected: still present, tagged, same identity.
+	// Verify the node still exists and has tags
+	// Note: Depending on implementation, this might be the same node or a new node
 	node2, found := app.state.GetNodeByNodeKey(nodeKey.Public())
 	require.True(t, found)
 	assert.True(t, node2.IsTagged())
 	assert.ElementsMatch(t, tags, node2.Tags().AsSlice())
-	assert.Equal(t, node1.ID(), node2.ID(),
-		"original node must survive; the hijacking registration was rejected")
 }
 
 // TestUntaggedAuthKeyZeroExpiryGetsDefault tests that when node.expiry is configured
@@ -1152,7 +1003,7 @@ func TestNodeExpiryZeroDisablesDefault(t *testing.T) {
 	assert.False(t, node.IsExpired(), "node should not be expired")
 
 	// With node.expiry=0 and zero client expiry, the node gets a zero expiry
-	// which [types.Node.IsExpired] treats as "never expires" — backwards compatible.
+	// which IsExpired() treats as "never expires" — backwards compatible.
 	if node.Expiry().Valid() {
 		assert.True(t, node.Expiry().Get().IsZero(),
 			"with node.expiry=0 and zero client expiry, expiry should be zero time")
@@ -1273,11 +1124,11 @@ func TestReregistrationAppliesDefaultExpiry(t *testing.T) {
 // re-registers with zero client expiry and node.expiry is disabled (0),
 // the node's expiry stays nil rather than being set to a pointer to zero
 // time. Regression test for the else branch introduced in commit 6337a3db
-// which assigned `&regReq.Expiry` (pointer to [time.Time]{}) instead of nil,
+// which assigned `&regReq.Expiry` (pointer to time.Time{}) instead of nil,
 // causing the database row to hold `0001-01-01 00:00:00` instead of NULL.
 //
 // The same !regReq.Expiry.IsZero() gate at state.go:2221-2228 is shared by
-// the tags-only PreAuthKey path ([state.State.createAndSaveNewNode] also receives nil
+// the tags-only PreAuthKey path (createAndSaveNewNode also receives nil
 // when the client sends zero expiry), so this regression is covered for
 // tagged nodes by inspection.
 func TestReregistrationZeroExpiryStaysNil(t *testing.T) {
diff --git a/hscontrol/auth_test.go b/hscontrol/auth_test.go
index ed294f3ca..5e13a4d71 100644
--- a/hscontrol/auth_test.go
+++ b/hscontrol/auth_test.go
@@ -31,7 +31,7 @@ type interactiveStep struct {
 	stepType         string // stepTypeInitialRequest, stepTypeAuthCompletion, or stepTypeFollowupRequest
 	expectAuthURL    bool
 	expectCacheEntry bool
-	callAuthPath     bool // Real call to [state.State.HandleNodeFromAuthPath], not mocked
+	callAuthPath     bool // Real call to HandleNodeFromAuthPath, not mocked
 }
 
 //nolint:gocyclo // comprehensive test function with many scenarios
@@ -140,7 +140,7 @@ func TestAuthenticationFlows(t *testing.T) {
 					return "", err
 				}
 
-				// Wait for node to be available in [state.NodeStore]
+				// Wait for node to be available in NodeStore
 				require.EventuallyWithT(t, func(c *assert.CollectT) {
 					_, found := app.state.GetNodeByNodeKey(nodeKey1.Public())
 					assert.True(c, found, "node should be available in NodeStore")
@@ -209,7 +209,7 @@ func TestAuthenticationFlows(t *testing.T) {
 					return "", err
 				}
 
-				// Wait for node to be available in [state.NodeStore]
+				// Wait for node to be available in NodeStore
 				require.EventuallyWithT(t, func(c *assert.CollectT) {
 					_, found := app.state.GetNodeByNodeKey(nodeKey1.Public())
 					assert.True(c, found, "node should be available in NodeStore")
@@ -409,7 +409,7 @@ func TestAuthenticationFlows(t *testing.T) {
 
 				t.Logf("Setup registered node: %+v", resp)
 
-				// Wait for node to be available in [state.NodeStore] with debug info
+				// Wait for node to be available in NodeStore with debug info
 				var attemptCount int
 
 				require.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -470,7 +470,7 @@ func TestAuthenticationFlows(t *testing.T) {
 					return "", err
 				}
 
-				// Wait for node to be available in [state.NodeStore]
+				// Wait for node to be available in NodeStore
 				require.EventuallyWithT(t, func(c *assert.CollectT) {
 					_, found := app.state.GetNodeByNodeKey(nodeKey1.Public())
 					assert.True(c, found, "node should be available in NodeStore")
@@ -520,7 +520,7 @@ func TestAuthenticationFlows(t *testing.T) {
 					return "", err
 				}
 
-				// Wait for node to be available in [state.NodeStore]
+				// Wait for node to be available in NodeStore
 				require.EventuallyWithT(t, func(c *assert.CollectT) {
 					_, found := app.state.GetNodeByNodeKey(nodeKey1.Public())
 					assert.True(c, found, "node should be available in NodeStore")
@@ -637,7 +637,7 @@ func TestAuthenticationFlows(t *testing.T) {
 					return "", err
 				}
 
-				// Wait for node to be available in [state.NodeStore]
+				// Wait for node to be available in NodeStore
 				require.EventuallyWithT(t, func(c *assert.CollectT) {
 					_, found := app.state.GetNodeByNodeKey(nodeKey1.Public())
 					assert.True(c, found, "node should be available in NodeStore")
@@ -687,7 +687,7 @@ func TestAuthenticationFlows(t *testing.T) {
 				app.state.SetAuthCacheEntry(regID, nodeToRegister)
 
 				// Simulate successful registration
-				// [Headscale.handleRegister] will receive the value when it starts waiting
+				// handleRegister will receive the value when it starts waiting
 				go func() {
 					user := app.state.CreateUserForTest("followup-user")
 
@@ -826,7 +826,7 @@ func TestAuthenticationFlows(t *testing.T) {
 		},
 		// TEST: Nil hostinfo is handled with defensive code
 		// WHAT: Tests that nil hostinfo in register request is handled gracefully
-		// INPUT: Register request with [tailcfg.Hostinfo] field set to nil
+		// INPUT: Register request with Hostinfo field set to nil
 		// EXPECTED: Node registers successfully with generated hostname starting with "node-"
 		// WHY: Defensive code prevents nil pointer panics; creates valid default hostinfo
 		{
@@ -856,7 +856,7 @@ func TestAuthenticationFlows(t *testing.T) {
 			validate: func(t *testing.T, resp *tailcfg.RegisterResponse, app *Headscale) { //nolint:thelper //nolint:thelper
 				assert.True(t, resp.MachineAuthorized)
 
-				// With nil [tailcfg.Hostinfo] the raw hostname stays empty and GivenName
+				// With nil Hostinfo the raw hostname stays empty and GivenName
 				// falls back to the literal "node" per the SaaS spec.
 				node, found := app.state.GetNodeByNodeKey(nodeKey1.Public())
 				assert.True(t, found)
@@ -954,7 +954,7 @@ func TestAuthenticationFlows(t *testing.T) {
 
 		// TEST: PreAuthKey registration rejects client-provided RequestTags
 		// WHAT: Tests that PreAuthKey registrations cannot use client-provided tags
-		// INPUT: PreAuthKey registration with [tailcfg.Hostinfo.RequestTags] set
+		// INPUT: PreAuthKey registration with RequestTags in Hostinfo
 		// EXPECTED: Registration fails with "requested tags [...] are invalid or not permitted" error
 		// WHY: PreAuthKey nodes get their tags from the key itself, not from client requests
 		{
@@ -1240,7 +1240,7 @@ func TestAuthenticationFlows(t *testing.T) {
 
 		// TEST: Zero-time expiry is handled correctly
 		// WHAT: Tests registration with expiry set to zero time value
-		// INPUT: Register request with Expiry set to [time.Time]{} (zero value)
+		// INPUT: Register request with Expiry set to time.Time{} (zero value)
 		// EXPECTED: Node registers successfully; zero time treated as no expiry
 		// WHY: Zero time is valid Go default; should be handled gracefully
 		{
@@ -1280,7 +1280,7 @@ func TestAuthenticationFlows(t *testing.T) {
 		},
 		// TEST: Malformed hostinfo with very long hostname is truncated
 		// WHAT: Tests that excessively long hostname is truncated to DNS label limit
-		// INPUT: [tailcfg.Hostinfo] with 110-character hostname (exceeds 63-char DNS limit)
+		// INPUT: Hostinfo with 110-character hostname (exceeds 63-char DNS limit)
 		// EXPECTED: Node registers successfully; hostname truncated to 63 characters
 		// WHY: Defensive code enforces DNS label limit (RFC 1123); prevents errors
 		{
@@ -1699,7 +1699,7 @@ func TestAuthenticationFlows(t *testing.T) {
 				assert.False(t, resp.NodeKeyExpired)
 
 				// Verify NEW node was created for user2
-				node2, found := app.state.GetNodesByMachineKeyAllUsers(machineKey1.Public())[types.UserID(2)]
+				node2, found := app.state.GetNodeByMachineKey(machineKey1.Public(), types.UserID(2))
 				require.True(t, found, "new node should exist for user2")
 				assert.Equal(t, uint(2), node2.UserID().Get(), "new node should belong to user2")
 
@@ -1707,7 +1707,7 @@ func TestAuthenticationFlows(t *testing.T) {
 				assert.Equal(t, "user2-context", user.Name(), "new node should show user2 username")
 
 				// Verify original node still exists for user1
-				node1, found := app.state.GetNodesByMachineKeyAllUsers(machineKey1.Public())[types.UserID(1)]
+				node1, found := app.state.GetNodeByMachineKey(machineKey1.Public(), types.UserID(1))
 				require.True(t, found, "original node should still exist for user1")
 				assert.Equal(t, uint(1), node1.UserID().Get(), "original node should still belong to user1")
 
@@ -1775,13 +1775,13 @@ func TestAuthenticationFlows(t *testing.T) {
 			validateCompleteResponse: true,
 			validate: func(t *testing.T, resp *tailcfg.RegisterResponse, app *Headscale) { //nolint:thelper
 				// User1's original node should STILL exist (not transferred)
-				node1, found1 := app.state.GetNodesByMachineKeyAllUsers(machineKey1.Public())[types.UserID(1)]
+				node1, found1 := app.state.GetNodeByMachineKey(machineKey1.Public(), types.UserID(1))
 				require.True(t, found1, "user1's original node should still exist")
 				assert.Equal(t, uint(1), node1.UserID().Get(), "user1's node should still belong to user1")
 				assert.Equal(t, nodeKey1.Public(), node1.NodeKey(), "user1's node should have original node key")
 
 				// User2 should have a NEW node created
-				node2, found2 := app.state.GetNodesByMachineKeyAllUsers(machineKey1.Public())[types.UserID(2)]
+				node2, found2 := app.state.GetNodeByMachineKey(machineKey1.Public(), types.UserID(2))
 				require.True(t, found2, "user2 should have new node created")
 				assert.Equal(t, uint(2), node2.UserID().Get(), "user2's node should belong to user2")
 
@@ -1845,7 +1845,7 @@ func TestAuthenticationFlows(t *testing.T) {
 		},
 		// TEST: Logout with expiry exactly at current time
 		// WHAT: Tests logout when expiry is set to exact current time (boundary case)
-		// INPUT: Existing node sends request with expiry=[time.Now]() (not past, not future)
+		// INPUT: Existing node sends request with expiry=time.Now() (not past, not future)
 		// EXPECTED: Node is logged out (treated as expired)
 		// WHY: Edge case: current time should be treated as expired
 		{
@@ -2225,7 +2225,7 @@ func TestAuthenticationFlows(t *testing.T) {
 		},
 		// TEST: Interactive workflow with nil hostinfo
 		// WHAT: Tests interactive registration when request has nil hostinfo
-		// INPUT: Interactive registration request with [tailcfg.Hostinfo]=nil
+		// INPUT: Interactive registration request with Hostinfo=nil
 		// EXPECTED: Node registers successfully with generated default hostname
 		// WHY: Defensive code handles nil hostinfo in interactive flow
 		{
@@ -2761,7 +2761,7 @@ func TestNodeStoreLookup(t *testing.T) {
 
 	t.Logf("Registered node successfully: %+v", resp)
 
-	// Wait for node to be available in [state.NodeStore]
+	// Wait for node to be available in NodeStore
 	var node types.NodeView
 
 	require.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -2914,7 +2914,7 @@ func TestPreAuthKeyLogoutAndReloginDifferentUser(t *testing.T) {
 	for i := range 2 {
 		node := nodes[i]
 		// User1's original nodes should still be owned by user1
-		registeredNode, found := app.state.GetNodesByMachineKeyAllUsers(node.machineKey.Public())[types.UserID(user1.ID)]
+		registeredNode, found := app.state.GetNodeByMachineKey(node.machineKey.Public(), types.UserID(user1.ID))
 		require.True(t, found, "User1's original node %s should still exist", node.hostname)
 		require.Equal(t, user1.ID, registeredNode.UserID().Get(), "Node %s should still belong to user1", node.hostname)
 		t.Logf("✓ User1's original node %s (ID=%d) still owned by user1", node.hostname, registeredNode.ID().Uint64())
@@ -2923,7 +2923,7 @@ func TestPreAuthKeyLogoutAndReloginDifferentUser(t *testing.T) {
 	for i := 2; i < 4; i++ {
 		node := nodes[i]
 		// User2's original nodes should still be owned by user2
-		registeredNode, found := app.state.GetNodesByMachineKeyAllUsers(node.machineKey.Public())[types.UserID(user2.ID)]
+		registeredNode, found := app.state.GetNodeByMachineKey(node.machineKey.Public(), types.UserID(user2.ID))
 		require.True(t, found, "User2's original node %s should still exist", node.hostname)
 		require.Equal(t, user2.ID, registeredNode.UserID().Get(), "Node %s should still belong to user2", node.hostname)
 		t.Logf("✓ User2's original node %s (ID=%d) still owned by user2", node.hostname, registeredNode.ID().Uint64())
@@ -2935,7 +2935,7 @@ func TestPreAuthKeyLogoutAndReloginDifferentUser(t *testing.T) {
 	for i := 2; i < 4; i++ {
 		node := nodes[i]
 		// Should be able to find a node with user1 and this machine key (the new one)
-		newNode, found := app.state.GetNodesByMachineKeyAllUsers(node.machineKey.Public())[types.UserID(user1.ID)]
+		newNode, found := app.state.GetNodeByMachineKey(node.machineKey.Public(), types.UserID(user1.ID))
 		require.True(t, found, "Should have created new node for user1 with machine key from %s", node.hostname)
 		require.Equal(t, user1.ID, newNode.UserID().Get(), "New node should belong to user1")
 		t.Logf("✓ New node created for user1 with machine key from %s (ID=%d)", node.hostname, newNode.ID().Uint64())
@@ -2984,7 +2984,7 @@ func TestWebFlowReauthDifferentUser(t *testing.T) {
 	require.True(t, resp1.MachineAuthorized, "Should be authorized via pre-auth key")
 
 	// Verify node exists for user1
-	user1Node, found := app.state.GetNodesByMachineKeyAllUsers(machineKey.Public())[types.UserID(user1.ID)]
+	user1Node, found := app.state.GetNodeByMachineKey(machineKey.Public(), types.UserID(user1.ID))
 	require.True(t, found, "Node should exist for user1")
 	require.Equal(t, user1.ID, user1Node.UserID().Get(), "Node should belong to user1")
 	user1NodeID := user1Node.ID()
@@ -3000,7 +3000,7 @@ func TestWebFlowReauthDifferentUser(t *testing.T) {
 	require.NoError(t, err)
 
 	// Verify node is expired
-	user1Node, found = app.state.GetNodesByMachineKeyAllUsers(machineKey.Public())[types.UserID(user1.ID)]
+	user1Node, found = app.state.GetNodeByMachineKey(machineKey.Public(), types.UserID(user1.ID))
 	require.True(t, found, "Node should still exist after logout")
 	require.True(t, user1Node.IsExpired(), "Node should be expired after logout")
 	t.Logf("✓ User1 node expired (logged out)")
@@ -3041,7 +3041,7 @@ func TestWebFlowReauthDifferentUser(t *testing.T) {
 
 	t.Run("user1_original_node_still_exists", func(t *testing.T) {
 		// User1's original node should STILL exist (not transferred to user2)
-		user1NodeAfter, found1 := app.state.GetNodesByMachineKeyAllUsers(machineKey.Public())[types.UserID(user1.ID)]
+		user1NodeAfter, found1 := app.state.GetNodeByMachineKey(machineKey.Public(), types.UserID(user1.ID))
 		assert.True(t, found1, "User1's original node should still exist (not transferred)")
 
 		if !found1 {
@@ -3056,7 +3056,7 @@ func TestWebFlowReauthDifferentUser(t *testing.T) {
 
 	t.Run("user2_has_new_node_created", func(t *testing.T) {
 		// User2 should have a NEW node created (not transfer from user1)
-		user2Node, found2 := app.state.GetNodesByMachineKeyAllUsers(machineKey.Public())[types.UserID(user2.ID)]
+		user2Node, found2 := app.state.GetNodeByMachineKey(machineKey.Public(), types.UserID(user2.ID))
 		assert.True(t, found2, "User2 should have a new node created")
 
 		if !found2 {
@@ -3072,7 +3072,7 @@ func TestWebFlowReauthDifferentUser(t *testing.T) {
 	})
 
 	t.Run("returned_node_is_user2_new_node", func(t *testing.T) {
-		// The node returned from [state.State.HandleNodeFromAuthPath] should be user2's NEW node
+		// The node returned from HandleNodeFromAuthPath should be user2's NEW node
 		assert.Equal(t, user2.ID, node.UserID().Get(), "Returned node should belong to user2")
 		assert.NotEqual(t, user1NodeID, node.ID(), "Returned node should be NEW, not transferred from user1")
 		t.Logf("✓ HandleNodeFromAuthPath returned user2's new node (ID: %d)", node.ID())
@@ -3080,8 +3080,8 @@ func TestWebFlowReauthDifferentUser(t *testing.T) {
 
 	t.Run("both_nodes_share_machine_key", func(t *testing.T) {
 		// Both nodes should have the same machine key (same physical device)
-		user1NodeFinal, found1 := app.state.GetNodesByMachineKeyAllUsers(machineKey.Public())[types.UserID(user1.ID)]
-		user2NodeFinal, found2 := app.state.GetNodesByMachineKeyAllUsers(machineKey.Public())[types.UserID(user2.ID)]
+		user1NodeFinal, found1 := app.state.GetNodeByMachineKey(machineKey.Public(), types.UserID(user1.ID))
+		user2NodeFinal, found2 := app.state.GetNodeByMachineKey(machineKey.Public(), types.UserID(user2.ID))
 
 		require.True(t, found1, "User1 node should exist")
 		require.True(t, found2, "User2 node should exist")
@@ -3166,7 +3166,7 @@ func createTestApp(t *testing.T) *Headscale {
 // 1. Node registers successfully with a single-use pre-auth key
 // 2. Node is running fine
 // 3. Node restarts (e.g., after headscale upgrade or tailscale container restart)
-// 4. Node sends [tailcfg.RegisterRequest] with the same pre-auth key
+// 4. Node sends RegisterRequest with the same pre-auth key
 // 5. BUG: Headscale rejects the request with "authkey expired" or "authkey already used"
 //
 // Expected behavior:
@@ -3223,7 +3223,7 @@ func TestGitHubIssue2830_NodeRestartWithUsedPreAuthKey(t *testing.T) {
 	require.NoError(t, err)
 	assert.True(t, usedPak.Used, "pre-auth key should be marked as used after initial registration")
 
-	// STEP 2: Simulate node restart - node sends [tailcfg.RegisterRequest] again with same pre-auth key
+	// STEP 2: Simulate node restart - node sends RegisterRequest again with same pre-auth key
 	// This happens when:
 	// - Tailscale container restarts
 	// - Tailscaled service restarts
@@ -3508,7 +3508,7 @@ func TestGitHubIssue2830_ExistingNodeCanReregisterWithUsedPreAuthKey(t *testing.
 	// WITHOUT THE FIX: This would fail with "authkey already used" error
 	// WITH THE FIX: This succeeds because it's the same node re-registering with its own key
 
-	// Simulate sending the same [tailcfg.RegisterRequest] again (same MachineKey, same AuthKey)
+	// Simulate sending the same RegisterRequest again (same MachineKey, same AuthKey)
 	// This is exactly what happens when a container restarts
 	reregisterReq := tailcfg.RegisterRequest{
 		Auth: &tailcfg.RegisterResponseAuth{
@@ -3787,15 +3787,15 @@ func TestAuthKeyTaggedToUserOwnedViaReauth(t *testing.T) {
 		nodeAfterReauth.IsTagged(), nodeAfterReauth.UserID().Get())
 }
 
-// TestDeletedPreAuthKeyNotRecreatedOnNodeUpdate tests that when a [types.PreAuthKey] is deleted,
-// subsequent node updates (like those triggered by [tailcfg.MapRequest]s) do not recreate the key.
+// TestDeletedPreAuthKeyNotRecreatedOnNodeUpdate tests that when a PreAuthKey is deleted,
+// subsequent node updates (like those triggered by MapRequests) do not recreate the key.
 //
 // This reproduces the bug where:
 //  1. Create a tagged preauthkey and register a node
 //  2. Delete the preauthkey (confirmed gone from pre_auth_keys DB table)
-//  3. Node sends [tailcfg.MapRequest] (e.g., after tailscaled restart)
+//  3. Node sends MapRequest (e.g., after tailscaled restart)
 //  4. BUG: The preauthkey reappears because GORM's Updates() upserts the stale AuthKey
-//     data that still exists in the [state.NodeStore]'s in-memory cache.
+//     data that still exists in the NodeStore's in-memory cache.
 //
 // The fix is to use Omit("AuthKey") on all node Updates() calls to prevent GORM
 // from touching the AuthKey association.
@@ -3864,11 +3864,11 @@ func TestDeletedPreAuthKeyNotRecreatedOnNodeUpdate(t *testing.T) {
 	require.Nil(t, dbNode.AuthKeyID, "node's AuthKeyID should be NULL after PreAuthKey deletion")
 	t.Log("Node's AuthKeyID is NULL in database")
 
-	// The [state.NodeStore] may still have stale AuthKey data in memory.
-	// Now simulate what happens when the node sends a [tailcfg.MapRequest] after a tailscaled restart.
-	// This triggers [state.State.persistNodeToDB] which calls GORM's Updates().
+	// The NodeStore may still have stale AuthKey data in memory.
+	// Now simulate what happens when the node sends a MapRequest after a tailscaled restart.
+	// This triggers persistNodeToDB which calls GORM's Updates().
 
-	// Simulate a [tailcfg.MapRequest] by updating the node through the state layer
+	// Simulate a MapRequest by updating the node through the state layer
 	// This mimics what poll.go does when processing MapRequests
 	mapReq := tailcfg.MapRequest{
 		NodeKey:  nodeKey.Public(),
@@ -3879,8 +3879,8 @@ func TestDeletedPreAuthKeyNotRecreatedOnNodeUpdate(t *testing.T) {
 		},
 	}
 
-	// Process the [tailcfg.MapRequest]-like update
-	// This calls [state.State.UpdateNodeFromMapRequest] which eventually calls [state.State.persistNodeToDB]
+	// Process the MapRequest-like update
+	// This calls UpdateNodeFromMapRequest which eventually calls persistNodeToDB
 	_, err = app.state.UpdateNodeFromMapRequest(node.ID(), mapReq)
 	require.NoError(t, err, "UpdateNodeFromMapRequest should succeed")
 	t.Log("Simulated MapRequest update completed")
@@ -3943,7 +3943,7 @@ func TestTaggedNodeWithoutUserToDifferentUser(t *testing.T) {
 	alice := app.state.CreateUserForTest("alice")
 	require.NotNil(t, alice, "Alice user should be created")
 
-	// Step 4: Re-register the node to alice via [state.State.HandleNodeFromAuthPath]
+	// Step 4: Re-register the node to alice via HandleNodeFromAuthPath
 	// This is what happens when running: headscale auth register --auth-id <id> --user alice
 	nodeKey2 := key.NewNode()
 	registrationID := types.MustAuthID()
@@ -3960,7 +3960,7 @@ func TestTaggedNodeWithoutUserToDifferentUser(t *testing.T) {
 
 	// This should NOT panic - before the fix, this would panic with:
 	// panic: runtime error: invalid memory address or nil pointer dereference
-	// at [types.UserView.Name] because the existing node has no User
+	// at UserView.Name() because the existing node has no User
 	nodeAfterReauth, _, err := app.state.HandleNodeFromAuthPath(
 		registrationID,
 		types.UserID(alice.ID),
@@ -3977,8 +3977,8 @@ func TestTaggedNodeWithoutUserToDifferentUser(t *testing.T) {
 	require.False(t, nodeAfterReauth.IsTagged(), "Node should no longer be tagged")
 	require.Empty(t, nodeAfterReauth.Tags().AsSlice(), "Node should have no tags")
 
-	// Verify [types.NodeView.Owner] works without panicking - this is what the mapper's
-	// [generateUserProfiles] calls, and it would panic with a nil pointer
+	// Verify Owner() works without panicking - this is what the mapper's
+	// generateUserProfiles calls, and it would panic with a nil pointer
 	// dereference if node.User was not set during the tag→user conversion.
 	owner := nodeAfterReauth.Owner()
 	require.True(t, owner.Valid(), "Owner should be valid after conversion (mapper would panic if nil)")
diff --git a/hscontrol/capver/capver.go b/hscontrol/capver/capver.go
index a4c535e88..61d674447 100644
--- a/hscontrol/capver/capver.go
+++ b/hscontrol/capver/capver.go
@@ -3,38 +3,55 @@ package capver
 //go:generate go run ../../tools/capver/main.go
 
 import (
-	"maps"
 	"slices"
+	"sort"
 	"strings"
 
+	xmaps "golang.org/x/exp/maps"
 	"tailscale.com/tailcfg"
-	"tailscale.com/util/cmpver"
 	"tailscale.com/util/set"
 )
 
-// minVersionParts is the minimum number of version parts needed for major.minor.
-const minVersionParts = 2
+const (
+	// minVersionParts is the minimum number of version parts needed for major.minor.
+	minVersionParts = 2
 
-// CanOldCodeBeCleanedUp is called at server startup to panic when
-// [MinSupportedCapabilityVersion] has crossed a threshold at which a
-// backwards-compat emit path can be deleted. Each entry pairs a
-// [tailcfg.CapabilityVersion] threshold with the message identifying
-// the code to remove; today there are none.
+	// legacyDERPCapVer is the capability version when LegacyDERP can be cleaned up.
+	legacyDERPCapVer = 111
+)
+
+// CanOldCodeBeCleanedUp is intended to be called on startup to see if
+// there are old code that can ble cleaned up, entries should contain
+// a CapVer where something can be cleaned up and a panic if it can.
+// This is only intended to catch things in tests.
 //
-// All capability-version-gated cleanups should be registered here.
+// All uses of Capability version checks should be listed here.
 func CanOldCodeBeCleanedUp() {
+	if MinSupportedCapabilityVersion >= legacyDERPCapVer {
+		panic("LegacyDERP can be cleaned up in tail.go")
+	}
 }
 
 func tailscaleVersSorted() []string {
-	return slices.Sorted(maps.Keys(tailscaleToCapVer))
+	vers := xmaps.Keys(tailscaleToCapVer)
+	sort.Strings(vers)
+
+	return vers
 }
 
-// TailscaleVersion returns the Tailscale version for the given [tailcfg.CapabilityVersion].
+func capVersSorted() []tailcfg.CapabilityVersion {
+	capVers := xmaps.Keys(capVerToTailscaleVer)
+	slices.Sort(capVers)
+
+	return capVers
+}
+
+// TailscaleVersion returns the Tailscale version for the given CapabilityVersion.
 func TailscaleVersion(ver tailcfg.CapabilityVersion) string {
 	return capVerToTailscaleVer[ver]
 }
 
-// CapabilityVersion returns the [tailcfg.CapabilityVersion] for the given Tailscale version.
+// CapabilityVersion returns the CapabilityVersion for the given Tailscale version.
 // It accepts both full versions (v1.90.1) and minor versions (v1.90).
 func CapabilityVersion(ver string) tailcfg.CapabilityVersion {
 	if !strings.HasPrefix(ver, "v") {
@@ -56,6 +73,21 @@ func CapabilityVersion(ver string) tailcfg.CapabilityVersion {
 	return 0
 }
 
+// TailscaleLatest returns the n latest Tailscale versions.
+func TailscaleLatest(n int) []string {
+	if n <= 0 {
+		return nil
+	}
+
+	tsSorted := tailscaleVersSorted()
+
+	if n > len(tsSorted) {
+		return tsSorted
+	}
+
+	return tsSorted[len(tsSorted)-n:]
+}
+
 // TailscaleLatestMajorMinor returns the n latest Tailscale versions (e.g. 1.80).
 func TailscaleLatestMajorMinor(n int, stripV bool) []string {
 	if n <= 0 {
@@ -74,9 +106,7 @@ func TailscaleLatestMajorMinor(n int, stripV bool) []string {
 	}
 
 	majorSl := majors.Slice()
-	// cmpver orders versions numerically, so v1.100 sorts after v1.98 rather than
-	// lexically before it.
-	slices.SortFunc(majorSl, cmpver.Compare)
+	sort.Strings(majorSl)
 
 	if n > len(majorSl) {
 		return majorSl
@@ -84,3 +114,18 @@ func TailscaleLatestMajorMinor(n int, stripV bool) []string {
 
 	return majorSl[len(majorSl)-n:]
 }
+
+// CapVerLatest returns the n latest CapabilityVersions.
+func CapVerLatest(n int) []tailcfg.CapabilityVersion {
+	if n <= 0 {
+		return nil
+	}
+
+	s := capVersSorted()
+
+	if n > len(s) {
+		return s
+	}
+
+	return s[len(s)-n:]
+}
diff --git a/hscontrol/capver/capver_generated.go b/hscontrol/capver/capver_generated.go
index 1091f42b6..72318ae58 100644
--- a/hscontrol/capver/capver_generated.go
+++ b/hscontrol/capver/capver_generated.go
@@ -42,7 +42,6 @@ var tailscaleToCapVer = map[string]tailcfg.CapabilityVersion{
 	"v1.92": 131,
 	"v1.94": 131,
 	"v1.96": 133,
-	"v1.98": 138,
 }
 
 var capVerToTailscaleVer = map[tailcfg.CapabilityVersion]string{
@@ -78,7 +77,6 @@ var capVerToTailscaleVer = map[tailcfg.CapabilityVersion]string{
 	130: "v1.90",
 	131: "v1.92",
 	133: "v1.96",
-	138: "v1.98",
 }
 
 // SupportedMajorMinorVersions is the number of major.minor Tailscale versions supported.
@@ -86,4 +84,4 @@ const SupportedMajorMinorVersions = 10
 
 // MinSupportedCapabilityVersion represents the minimum capability version
 // supported by this Headscale instance (latest 10 minor versions)
-const MinSupportedCapabilityVersion tailcfg.CapabilityVersion = 113
+const MinSupportedCapabilityVersion tailcfg.CapabilityVersion = 109
diff --git a/hscontrol/capver/capver_test_data.go b/hscontrol/capver/capver_test_data.go
index 7309459ac..83bccc08d 100644
--- a/hscontrol/capver/capver_test_data.go
+++ b/hscontrol/capver/capver_test_data.go
@@ -9,9 +9,10 @@ var tailscaleLatestMajorMinorTests = []struct {
 	stripV   bool
 	expected []string
 }{
-	{3, false, []string{"v1.94", "v1.96", "v1.98"}},
-	{2, true, []string{"1.96", "1.98"}},
+	{3, false, []string{"v1.92", "v1.94", "v1.96"}},
+	{2, true, []string{"1.94", "1.96"}},
 	{10, true, []string{
+		"1.78",
 		"1.80",
 		"1.82",
 		"1.84",
@@ -21,7 +22,6 @@ var tailscaleLatestMajorMinorTests = []struct {
 		"1.92",
 		"1.94",
 		"1.96",
-		"1.98",
 	}},
 	{0, false, nil},
 }
@@ -30,7 +30,7 @@ var capVerMinimumTailscaleVersionTests = []struct {
 	input    tailcfg.CapabilityVersion
 	expected string
 }{
-	{113, "v1.80"},
+	{109, "v1.78"},
 	{32, "v1.24"},
 	{41, "v1.30"},
 	{46, "v1.32"},
diff --git a/hscontrol/db/api_key.go b/hscontrol/db/api_key.go
index b56f1c188..9eeaf7e61 100644
--- a/hscontrol/db/api_key.go
+++ b/hscontrol/db/api_key.go
@@ -7,9 +7,9 @@ import (
 	"time"
 
 	"github.com/juanfont/headscale/hscontrol/types"
+	"github.com/juanfont/headscale/hscontrol/util"
 	"golang.org/x/crypto/bcrypt"
 	"gorm.io/gorm"
-	"tailscale.com/util/rands"
 )
 
 const (
@@ -23,20 +23,44 @@ const (
 )
 
 var (
-	ErrAPIKeyFailedToParse    = errors.New("failed to parse ApiKey")
-	ErrAPIKeyGenerationFailed = errors.New("failed to generate API key")
-	ErrAPIKeyExpired          = errors.New("API key expired")
+	ErrAPIKeyFailedToParse     = errors.New("failed to parse ApiKey")
+	ErrAPIKeyGenerationFailed  = errors.New("failed to generate API key")
+	ErrAPIKeyInvalidGeneration = errors.New("generated API key failed validation")
 )
 
-// CreateAPIKey creates a new [types.APIKey] in a user, and returns it.
+// CreateAPIKey creates a new ApiKey in a user, and returns it.
 func (hsdb *HSDatabase) CreateAPIKey(
 	expiration *time.Time,
 ) (string, *types.APIKey, error) {
 	// Generate public prefix (12 chars)
-	prefix := rands.HexString(apiKeyPrefixLength)
+	prefix, err := util.GenerateRandomStringURLSafe(apiKeyPrefixLength)
+	if err != nil {
+		return "", nil, err
+	}
+
+	// Validate prefix
+	if len(prefix) != apiKeyPrefixLength {
+		return "", nil, fmt.Errorf("%w: generated prefix has invalid length: expected %d, got %d", ErrAPIKeyInvalidGeneration, apiKeyPrefixLength, len(prefix))
+	}
+
+	if !isValidBase64URLSafe(prefix) {
+		return "", nil, fmt.Errorf("%w: generated prefix contains invalid characters", ErrAPIKeyInvalidGeneration)
+	}
 
 	// Generate secret (64 chars)
-	secret := rands.HexString(apiKeyHashLength)
+	secret, err := util.GenerateRandomStringURLSafe(apiKeyHashLength)
+	if err != nil {
+		return "", nil, err
+	}
+
+	// Validate secret
+	if len(secret) != apiKeyHashLength {
+		return "", nil, fmt.Errorf("%w: generated secret has invalid length: expected %d, got %d", ErrAPIKeyInvalidGeneration, apiKeyHashLength, len(secret))
+	}
+
+	if !isValidBase64URLSafe(secret) {
+		return "", nil, fmt.Errorf("%w: generated secret contains invalid characters", ErrAPIKeyInvalidGeneration)
+	}
 
 	// Full key string (shown ONCE to user)
 	keyStr := apiKeyPrefix + prefix + "-" + secret
@@ -60,7 +84,7 @@ func (hsdb *HSDatabase) CreateAPIKey(
 	return keyStr, &key, nil
 }
 
-// ListAPIKeys returns the list of [types.APIKey] values for a user.
+// ListAPIKeys returns the list of ApiKeys for a user.
 func (hsdb *HSDatabase) ListAPIKeys() ([]types.APIKey, error) {
 	keys := []types.APIKey{}
 
@@ -72,7 +96,7 @@ func (hsdb *HSDatabase) ListAPIKeys() ([]types.APIKey, error) {
 	return keys, nil
 }
 
-// GetAPIKey returns a [types.APIKey] for a given key.
+// GetAPIKey returns a ApiKey for a given key.
 func (hsdb *HSDatabase) GetAPIKey(prefix string) (*types.APIKey, error) {
 	key := types.APIKey{}
 	if result := hsdb.DB.First(&key, "prefix = ?", prefix); result.Error != nil {
@@ -82,20 +106,17 @@ func (hsdb *HSDatabase) GetAPIKey(prefix string) (*types.APIKey, error) {
 	return &key, nil
 }
 
-// GetAPIKeyByID returns a [types.APIKey] for a given id.
+// GetAPIKeyByID returns a ApiKey for a given id.
 func (hsdb *HSDatabase) GetAPIKeyByID(id uint64) (*types.APIKey, error) {
 	key := types.APIKey{}
-	// Query on an explicit primary-key clause: a struct condition would drop a
-	// zero-valued ID, making the lookup unconditional and returning the first
-	// row instead of not-found.
-	if result := hsdb.DB.First(&key, "id = ?", id); result.Error != nil {
+	if result := hsdb.DB.Find(&types.APIKey{ID: id}).First(&key); result.Error != nil {
 		return nil, result.Error
 	}
 
 	return &key, nil
 }
 
-// DestroyAPIKey destroys a [types.APIKey]. Returns error if the [types.APIKey]
+// DestroyAPIKey destroys a ApiKey. Returns error if the ApiKey
 // does not exist.
 func (hsdb *HSDatabase) DestroyAPIKey(key types.APIKey) error {
 	if result := hsdb.DB.Unscoped().Delete(key); result.Error != nil {
@@ -105,7 +126,7 @@ func (hsdb *HSDatabase) DestroyAPIKey(key types.APIKey) error {
 	return nil
 }
 
-// ExpireAPIKey marks a [types.APIKey] as expired.
+// ExpireAPIKey marks a ApiKey as expired.
 func (hsdb *HSDatabase) ExpireAPIKey(key *types.APIKey) error {
 	err := hsdb.DB.Model(&key).Update("Expiration", time.Now()).Error
 	if err != nil {
@@ -128,31 +149,6 @@ func (hsdb *HSDatabase) ValidateAPIKey(keyStr string) (bool, error) {
 	return true, nil
 }
 
-// AuthenticateAPIKey validates keyStr and returns the matching, unexpired
-// [types.APIKey] (with its owning UserID populated). Unlike ValidateAPIKey it
-// returns the key itself, so the v2 API can act as the key's owning user. A
-// non-nil error means the key is missing, malformed, or expired.
-func (hsdb *HSDatabase) AuthenticateAPIKey(keyStr string) (*types.APIKey, error) {
-	key, err := validateAPIKey(hsdb.DB, keyStr)
-	if err != nil {
-		return nil, err
-	}
-
-	if key.Expiration != nil && key.Expiration.Before(time.Now()) {
-		return nil, ErrAPIKeyExpired
-	}
-
-	return key, nil
-}
-
-// SetAPIKeyUser sets the owning user of an API key. Used when an admin mints a
-// key on behalf of a user (headscale apikeys create --user).
-func (hsdb *HSDatabase) SetAPIKeyUser(keyID uint64, userID types.UserID) error {
-	return hsdb.DB.Model(&types.APIKey{}).
-		Where("id = ?", keyID).
-		Update("user_id", uint(userID)).Error
-}
-
 // ParseAPIKeyPrefix extracts the database prefix from a display prefix.
 // Handles formats: "hskey-api-{12chars}-***", "hskey-api-{12chars}", or just "{12chars}".
 // Returns the 12-character prefix suitable for database lookup.
@@ -206,20 +202,61 @@ func validateAPIKey(db *gorm.DB, keyStr string) (*types.APIKey, error) {
 	}
 
 	// New format: parse and verify
-	prefix, secret, err := parsePrefixedKey(
-		prefixAndSecret,
-		apiKeyPrefixLength,
-		apiKeyHashLength,
-		ErrAPIKeyFailedToParse,
-	)
-	if err != nil {
-		return nil, err
+	const expectedMinLength = apiKeyPrefixLength + 1 + apiKeyHashLength
+	if len(prefixAndSecret) < expectedMinLength {
+		return nil, fmt.Errorf(
+			"%w: key too short, expected at least %d chars after prefix, got %d",
+			ErrAPIKeyFailedToParse,
+			expectedMinLength,
+			len(prefixAndSecret),
+		)
+	}
+
+	// Use fixed-length parsing
+	prefix := prefixAndSecret[:apiKeyPrefixLength]
+
+	// Validate separator at expected position
+	if prefixAndSecret[apiKeyPrefixLength] != '-' {
+		return nil, fmt.Errorf(
+			"%w: expected separator '-' at position %d, got '%c'",
+			ErrAPIKeyFailedToParse,
+			apiKeyPrefixLength,
+			prefixAndSecret[apiKeyPrefixLength],
+		)
+	}
+
+	secret := prefixAndSecret[apiKeyPrefixLength+1:]
+
+	// Validate secret length
+	if len(secret) != apiKeyHashLength {
+		return nil, fmt.Errorf(
+			"%w: secret length mismatch, expected %d chars, got %d",
+			ErrAPIKeyFailedToParse,
+			apiKeyHashLength,
+			len(secret),
+		)
+	}
+
+	// Validate prefix contains only base64 URL-safe characters
+	if !isValidBase64URLSafe(prefix) {
+		return nil, fmt.Errorf(
+			"%w: prefix contains invalid characters (expected base64 URL-safe: A-Za-z0-9_-)",
+			ErrAPIKeyFailedToParse,
+		)
+	}
+
+	// Validate secret contains only base64 URL-safe characters
+	if !isValidBase64URLSafe(secret) {
+		return nil, fmt.Errorf(
+			"%w: secret contains invalid characters (expected base64 URL-safe: A-Za-z0-9_-)",
+			ErrAPIKeyFailedToParse,
+		)
 	}
 
 	// Look up by prefix (indexed)
 	var key types.APIKey
 
-	err = db.First(&key, "prefix = ?", prefix).Error
+	err := db.First(&key, "prefix = ?", prefix).Error
 	if err != nil {
 		return nil, fmt.Errorf("API key not found: %w", err)
 	}
diff --git a/hscontrol/db/api_key_byid_test.go b/hscontrol/db/api_key_byid_test.go
deleted file mode 100644
index 05822c0b2..000000000
--- a/hscontrol/db/api_key_byid_test.go
+++ /dev/null
@@ -1,28 +0,0 @@
-package db
-
-import (
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestGetAPIKeyByIDZeroReturnsError ensures GetAPIKeyByID(0) reports not-found
-// rather than returning the lowest-ID key. GORM drops a zero-valued primary key
-// from a struct condition, which would otherwise make the lookup unconditional.
-func TestGetAPIKeyByIDZeroReturnsError(t *testing.T) {
-	db, err := newSQLiteTestDB()
-	require.NoError(t, err)
-
-	_, key1, err := db.CreateAPIKey(nil)
-	require.NoError(t, err)
-	require.NotNil(t, key1)
-
-	_, key2, err := db.CreateAPIKey(nil)
-	require.NoError(t, err)
-	require.NotNil(t, key2)
-
-	key, err := db.GetAPIKeyByID(0)
-	require.Error(t, err, "GetAPIKeyByID(0) should be not-found, got key=%+v", key)
-	assert.Nil(t, key)
-}
diff --git a/hscontrol/db/db.go b/hscontrol/db/db.go
index c9b94ef6c..d95b7496e 100644
--- a/hscontrol/db/db.go
+++ b/hscontrol/db/db.go
@@ -38,9 +38,9 @@ var errDatabaseNotSupported = errors.New("database type not supported")
 var errForeignKeyConstraintsViolated = errors.New("foreign key constraints violated")
 
 const (
-	maxIdleConns   = 100
-	maxOpenConns   = 100
-	contextTimeout = 10 * time.Second
+	maxIdleConns       = 100
+	maxOpenConns       = 100
+	contextTimeoutSecs = 10
 )
 
 type HSDatabase struct {
@@ -220,7 +220,7 @@ AND auth_key_id NOT IN (
 			{
 				ID: "202505141324",
 				Migrate: func(tx *gorm.DB) error {
-					users, err := ListUsers(tx, nil)
+					users, err := ListUsers(tx)
 					if err != nil {
 						return fmt.Errorf("listing users: %w", err)
 					}
@@ -617,7 +617,7 @@ AND auth_key_id NOT IN (
 					}
 
 					// 2. Load users and nodes to create PolicyManager
-					users, err := ListUsers(tx, nil)
+					users, err := ListUsers(tx)
 					if err != nil {
 						return fmt.Errorf("loading users for RequestTags migration: %w", err)
 					}
@@ -706,20 +706,13 @@ AND auth_key_id NOT IN (
 				// but this prevents deleting users whose nodes have been
 				// tagged, and the ON DELETE CASCADE FK would destroy the
 				// tagged nodes if the user were deleted.
-				//
-				// A nil tags slice marshals to the JSON literal 'null', so
-				// untagged nodes can carry tags='null'. That spelling must be
-				// excluded alongside '[]' and '' or untagged nodes lose their
-				// user. Nodes already detached by the earlier version of this
-				// migration are repaired by the recovery migration below.
 				// Fixes: https://github.com/juanfont/headscale/issues/3077
-				// Fixes: https://github.com/juanfont/headscale/issues/3323
 				ID: "202602201200-clear-tagged-node-user-id",
 				Migrate: func(tx *gorm.DB) error {
 					err := tx.Exec(`
 UPDATE nodes
 SET user_id = NULL
-WHERE tags IS NOT NULL AND tags != '[]' AND tags != '' AND tags != 'null';
+WHERE tags IS NOT NULL AND tags != '[]' AND tags != '';
 						`).Error
 					if err != nil {
 						return fmt.Errorf("clearing user_id on tagged nodes: %w", err)
@@ -729,177 +722,6 @@ WHERE tags IS NOT NULL AND tags != '[]' AND tags != '' AND tags != 'null';
 				},
 				Rollback: func(db *gorm.DB) error { return nil },
 			},
-			{
-				// Clear zero-time node expiry values to NULL.
-				// Versions before 0.28 persisted a pointer to a zero
-				// time.Time as '0001-01-01 00:00:00+00:00' rather than
-				// NULL, which 0.29 reports as an expired node. This
-				// normalises the existing rows so the column once
-				// again means "no expiry" when unset.
-				ID: "202605221435-clear-zero-time-node-expiry",
-				Migrate: func(tx *gorm.DB) error {
-					err := tx.Exec(`
-UPDATE nodes
-SET expiry = NULL
-WHERE expiry IS NOT NULL AND expiry < '1900-01-01';
-						`).Error
-					if err != nil {
-						return fmt.Errorf("clearing zero-time node expiry: %w", err)
-					}
-
-					return nil
-				},
-				Rollback: func(db *gorm.DB) error { return nil },
-			},
-			{
-				// Recover user_id on untagged nodes detached by the earlier
-				// version of 202602201200-clear-tagged-node-user-id, which
-				// treated tags='null' as tagged and cleared the user. This
-				// repairs databases that already upgraded to 0.29.0; fresh
-				// upgrades are protected by the fixed migration above and find
-				// nothing to repair. Recovery is best-effort: the owner is
-				// re-derived from the node's pre-auth key, so nodes registered
-				// via CLI/OIDC (no pre-auth key) cannot be recovered and must
-				// be reassigned manually.
-				// Fixes: https://github.com/juanfont/headscale/issues/3323
-				ID: "202606181200-recover-null-tags-node-user-id",
-				Migrate: func(tx *gorm.DB) error {
-					err := tx.Exec(`
-UPDATE nodes
-SET user_id = (
-	SELECT pak.user_id FROM pre_auth_keys pak WHERE pak.id = nodes.auth_key_id
-)
-WHERE user_id IS NULL
-	AND auth_key_id IS NOT NULL
-	AND (tags IS NULL OR tags = '' OR tags = '[]' OR tags = 'null');
-						`).Error
-					if err != nil {
-						return fmt.Errorf("recovering user_id on untagged nodes: %w", err)
-					}
-
-					return nil
-				},
-				Rollback: func(db *gorm.DB) error { return nil },
-			},
-			{
-				// Add an optional owning user to API keys so the v2 API can
-				// create user-owned (untagged) auth keys, mirroring Tailscale's
-				// "key owned by the creating identity".
-				ID: "202606191500-api-key-user-id",
-				Migrate: func(tx *gorm.DB) error {
-					if !tx.Migrator().HasColumn(&types.APIKey{}, "user_id") {
-						err := tx.Migrator().AddColumn(&types.APIKey{}, "user_id")
-						if err != nil {
-							return fmt.Errorf("adding user_id to api_keys: %w", err)
-						}
-					}
-
-					return nil
-				},
-				Rollback: func(db *gorm.DB) error { return nil },
-			},
-			{
-				// Add a free-text description to pre-auth keys, set via the
-				// v2 keys API.
-				ID: "202606191501-pre-auth-key-description",
-				Migrate: func(tx *gorm.DB) error {
-					if !tx.Migrator().HasColumn(&types.PreAuthKey{}, "description") {
-						err := tx.Migrator().AddColumn(&types.PreAuthKey{}, "description")
-						if err != nil {
-							return fmt.Errorf("adding description to pre_auth_keys: %w", err)
-						}
-					}
-
-					return nil
-				},
-				Rollback: func(db *gorm.DB) error { return nil },
-			},
-			{
-				// Add a revoked timestamp to pre-auth keys. The v2 API's DELETE
-				// soft-revokes a key (set revoked = now) rather than destroying
-				// it; the row is reaped later by the background collector.
-				ID: "202606201200-pre-auth-key-revoked",
-				Migrate: func(tx *gorm.DB) error {
-					if !tx.Migrator().HasColumn(&types.PreAuthKey{}, "revoked") {
-						err := tx.Migrator().AddColumn(&types.PreAuthKey{}, "revoked")
-						if err != nil {
-							return fmt.Errorf("adding revoked to pre_auth_keys: %w", err)
-						}
-					}
-
-					return nil
-				},
-				Rollback: func(db *gorm.DB) error { return nil },
-			},
-			{
-				// Add the OAuth client + access token tables backing the v2 API's
-				// OAuth client-credentials flow. They mirror the api_keys /
-				// pre_auth_keys security model: a public id/prefix plus an Argon2id
-				// hash of the secret.
-				//
-				// SQLite uses explicit DDL that matches schema.sql byte-for-byte
-				// (the squibble digest is the SQLite source of truth). Postgres,
-				// which has no digest and rejects SQLite-isms like AUTOINCREMENT,
-				// uses dialect-aware AutoMigrate, mirroring InitSchema's fresh-DB
-				// table creation so an existing Postgres deployment can upgrade.
-				ID: "202606211200-oauth-clients-and-tokens",
-				Migrate: func(tx *gorm.DB) error {
-					if tx.Migrator().HasTable(&types.OAuthClient{}) &&
-						tx.Migrator().HasTable(&types.OAuthAccessToken{}) {
-						return nil
-					}
-
-					if tx.Name() != "sqlite" {
-						return tx.AutoMigrate(&types.OAuthClient{}, &types.OAuthAccessToken{})
-					}
-
-					if !tx.Migrator().HasTable(&types.OAuthClient{}) {
-						err := tx.Exec(`CREATE TABLE oauth_clients(
-  id integer PRIMARY KEY AUTOINCREMENT,
-  client_id text,
-  secret_hash blob,
-  scopes text,
-  tags text,
-  description text,
-  user_id integer,
-  created_at datetime,
-  revoked datetime
-)`).Error
-						if err != nil {
-							return fmt.Errorf("creating oauth_clients table: %w", err)
-						}
-
-						err = tx.Exec(`CREATE UNIQUE INDEX idx_oauth_clients_client_id ON oauth_clients(client_id)`).Error
-						if err != nil {
-							return fmt.Errorf("creating oauth_clients index: %w", err)
-						}
-					}
-
-					if !tx.Migrator().HasTable(&types.OAuthAccessToken{}) {
-						err := tx.Exec(`CREATE TABLE oauth_access_tokens(
-  id integer PRIMARY KEY AUTOINCREMENT,
-  prefix text,
-  hash blob,
-  client_id text,
-  scopes text,
-  tags text,
-  expiration datetime,
-  created_at datetime
-)`).Error
-						if err != nil {
-							return fmt.Errorf("creating oauth_access_tokens table: %w", err)
-						}
-
-						err = tx.Exec(`CREATE UNIQUE INDEX idx_oauth_access_tokens_prefix ON oauth_access_tokens(prefix)`).Error
-						if err != nil {
-							return fmt.Errorf("creating oauth_access_tokens index: %w", err)
-						}
-					}
-
-					return nil
-				},
-				Rollback: func(db *gorm.DB) error { return nil },
-			},
 		},
 	)
 
@@ -911,8 +733,6 @@ WHERE user_id IS NULL
 			&types.APIKey{},
 			&types.Node{},
 			&types.Policy{},
-			&types.OAuthClient{},
-			&types.OAuthAccessToken{},
 		)
 		if err != nil {
 			return err
@@ -928,8 +748,6 @@ WHERE user_id IS NULL
 			`DROP INDEX IF EXISTS "idx_name_provider_identifier"`,
 			`DROP INDEX IF EXISTS "idx_name_no_provider_identifier"`,
 			`DROP INDEX IF EXISTS "idx_pre_auth_keys_prefix"`,
-			`DROP INDEX IF EXISTS "idx_oauth_clients_client_id"`,
-			`DROP INDEX IF EXISTS "idx_oauth_access_tokens_prefix"`,
 		}
 
 		for _, dropSQL := range dropIndexes {
@@ -948,8 +766,6 @@ WHERE user_id IS NULL
 			`CREATE UNIQUE INDEX idx_name_provider_identifier ON users(name, provider_identifier)`,
 			`CREATE UNIQUE INDEX idx_name_no_provider_identifier ON users(name) WHERE provider_identifier IS NULL`,
 			`CREATE UNIQUE INDEX idx_pre_auth_keys_prefix ON pre_auth_keys(prefix) WHERE prefix IS NOT NULL AND prefix != ''`,
-			`CREATE UNIQUE INDEX idx_oauth_clients_client_id ON oauth_clients(client_id)`,
-			`CREATE UNIQUE INDEX idx_oauth_access_tokens_prefix ON oauth_access_tokens(prefix)`,
 		}
 
 		for _, indexSQL := range indexes {
@@ -998,7 +814,7 @@ WHERE user_id IS NULL
 		defer sqlConn.SetMaxIdleConns(1)
 		defer sqlConn.SetMaxOpenConns(1)
 
-		ctx, cancel := context.WithTimeout(context.Background(), contextTimeout)
+		ctx, cancel := context.WithTimeout(context.Background(), contextTimeoutSecs*time.Second)
 		defer cancel()
 
 		opts := squibble.DigestOptions{
@@ -1132,20 +948,65 @@ func openDB(cfg types.DatabaseConfig) (*gorm.DB, error) {
 
 func runMigrations(cfg types.DatabaseConfig, dbConn *gorm.DB, migrations *gormigrate.Gormigrate) error {
 	if cfg.Type == types.DatabaseSqlite {
-		// SQLite: Run the early migrations that GORM cannot handle safely with
-		// foreign keys enabled (route and pre-auth-key automigrations) with FK
-		// disabled, then run everything else with FK enabled.
-		//
-		// NO NEW MIGRATIONS SHOULD RUN WITH FK DISABLED. As of 2025-07-02, all
-		// new migrations must run with foreign keys enabled via the
-		// migrations.Migrate() call below.
-		if err := dbConn.Exec("PRAGMA foreign_keys = OFF").Error; err != nil { //nolint:noinlineerr
-			return fmt.Errorf("disabling foreign keys: %w", err)
+		// SQLite: Run migrations step-by-step, only disabling foreign keys when necessary
+
+		// List of migration IDs that require foreign keys to be disabled
+		// These are migrations that perform complex schema changes that GORM cannot handle safely with FK enabled
+		// NO NEW MIGRATIONS SHOULD BE ADDED HERE. ALL NEW MIGRATIONS MUST RUN WITH FOREIGN KEYS ENABLED.
+		migrationsRequiringFKDisabled := map[string]bool{
+			"202501221827": true, // Route table automigration with FK constraint issues
+			"202501311657": true, // PreAuthKey table automigration with FK constraint issues
+			// Add other migration IDs here as they are identified to need FK disabled
 		}
 
-		// Run up to and including the last migration that requires FK disabled.
-		if err := migrations.MigrateTo("202501311657"); err != nil { //nolint:noinlineerr
-			return fmt.Errorf("running migration 202501311657: %w", err)
+		// Get the current foreign key status
+		var fkOriginallyEnabled int
+		if err := dbConn.Raw("PRAGMA foreign_keys").Scan(&fkOriginallyEnabled).Error; err != nil { //nolint:noinlineerr
+			return fmt.Errorf("checking foreign key status: %w", err)
+		}
+
+		// Get all migration IDs in order from the actual migration definitions
+		// Only IDs that are in the migrationsRequiringFKDisabled map will be processed with FK disabled
+		// any other new migrations are ran after.
+		migrationIDs := []string{
+			// v0.25.0
+			"202501221827",
+			"202501311657",
+			"202502070949",
+
+			// v0.26.0
+			"202502131714",
+			"202502171819",
+			"202505091439",
+			"202505141324",
+
+			// As of 2025-07-02, no new IDs should be added here.
+			// They will be ran by the migrations.Migrate() call below.
+		}
+
+		for _, migrationID := range migrationIDs {
+			log.Trace().Caller().Str("migration_id", migrationID).Msg("running migration")
+			needsFKDisabled := migrationsRequiringFKDisabled[migrationID]
+
+			if needsFKDisabled {
+				// Disable foreign keys for this migration
+				err := dbConn.Exec("PRAGMA foreign_keys = OFF").Error
+				if err != nil {
+					return fmt.Errorf("disabling foreign keys for migration %s: %w", migrationID, err)
+				}
+			} else {
+				// Ensure foreign keys are enabled for this migration
+				err := dbConn.Exec("PRAGMA foreign_keys = ON").Error
+				if err != nil {
+					return fmt.Errorf("enabling foreign keys for migration %s: %w", migrationID, err)
+				}
+			}
+
+			// Run up to this specific migration (will only run the next pending migration)
+			err := migrations.MigrateTo(migrationID)
+			if err != nil {
+				return fmt.Errorf("running migration %s: %w", migrationID, err)
+			}
 		}
 
 		if err := dbConn.Exec("PRAGMA foreign_keys = ON").Error; err != nil { //nolint:noinlineerr
diff --git a/hscontrol/db/db_test.go b/hscontrol/db/db_test.go
index 88d282c46..ee88d4aef 100644
--- a/hscontrol/db/db_test.go
+++ b/hscontrol/db/db_test.go
@@ -36,7 +36,7 @@ func TestSQLiteMigrationAndDataValidation(t *testing.T) {
 
 				// Verify users data preservation
 				users, err := Read(hsdb.DB, func(rx *gorm.DB) ([]types.User, error) {
-					return ListUsers(rx, nil)
+					return ListUsers(rx)
 				})
 				require.NoError(t, err)
 				assert.Len(t, users, 1, "should preserve all 1 user from original schema")
@@ -122,7 +122,7 @@ func TestSQLiteMigrationAndDataValidation(t *testing.T) {
 				// Expected: tags = ["tag:server"] (no duplicates)
 				node4 := findNode("node4")
 				require.NotNil(t, node4, "node4 should exist")
-				assert.Equal(t, []string{"tag:server"}, node4.Tags.List(), "node4 should have tag:server without duplicates") //nolint:goconst // descriptive test assertions read better with the literal inline
+				assert.Equal(t, []string{"tag:server"}, node4.Tags, "node4 should have tag:server without duplicates")
 
 				// Node 5: user2 has no RequestTags
 				// Expected: tags = [] (unchanged)
@@ -144,157 +144,6 @@ func TestSQLiteMigrationAndDataValidation(t *testing.T) {
 				assert.NotContains(t, node7.Tags, "tag:forbidden", "node7 should NOT have tag:forbidden (unauthorized)")
 			},
 		},
-		// Test for the zero-time node expiry migration
-		// (202605221435-clear-zero-time-node-expiry). Pre-0.28 versions
-		// stored a zero time.Time as '0001-01-01 00:00:00+00:00' rather
-		// than NULL, which caused 0.29 to report those nodes as expired.
-		// Fixes: https://github.com/juanfont/headscale/issues/3284
-		{
-			dbPath: "testdata/sqlite/zero_time_expiry_migration_test.sql",
-			wantFunc: func(t *testing.T, hsdb *HSDatabase) {
-				t.Helper()
-
-				nodes, err := Read(hsdb.DB, func(rx *gorm.DB) (types.Nodes, error) {
-					return ListNodes(rx)
-				})
-				require.NoError(t, err)
-				require.Len(t, nodes, 5, "should have all 5 nodes")
-
-				byHostname := make(map[string]*types.Node, len(nodes))
-				for _, n := range nodes {
-					byHostname[n.Hostname] = n
-				}
-
-				// Node 1 had a zero-time expiry; should be cleared.
-				node1 := byHostname["node1"]
-				require.NotNil(t, node1, "node1 should exist")
-				assert.Nil(t, node1.Expiry, "node1 zero-time expiry should be cleared to NULL")
-				assert.False(t, node1.IsExpired(), "node1 should not be reported as expired")
-
-				// Node 2 already had NULL expiry; should still be NULL.
-				node2 := byHostname["node2"]
-				require.NotNil(t, node2, "node2 should exist")
-				assert.Nil(t, node2.Expiry, "node2 NULL expiry should be preserved")
-				assert.False(t, node2.IsExpired(), "node2 should not be reported as expired")
-
-				// Node 3 had a real future expiry; should be preserved.
-				node3 := byHostname["node3"]
-				require.NotNil(t, node3, "node3 should exist")
-				require.NotNil(t, node3.Expiry, "node3 future expiry should be preserved")
-				assert.Equal(t, 2099, node3.Expiry.UTC().Year(), "node3 expiry year should be 2099")
-				assert.False(t, node3.IsExpired(), "node3 with future expiry should not be expired")
-
-				// Node 4 had a real past expiry; should be preserved.
-				node4 := byHostname["node4"]
-				require.NotNil(t, node4, "node4 should exist")
-				require.NotNil(t, node4.Expiry, "node4 past expiry should be preserved")
-				assert.Equal(t, 2020, node4.Expiry.UTC().Year(), "node4 expiry year should be 2020")
-				assert.True(t, node4.IsExpired(), "node4 with past expiry should still be expired")
-
-				// Node 5 also had a zero-time expiry; should be cleared.
-				node5 := byHostname["node5"]
-				require.NotNil(t, node5, "node5 should exist")
-				assert.Nil(t, node5.Expiry, "node5 zero-time expiry should be cleared to NULL")
-				assert.False(t, node5.IsExpired(), "node5 should not be reported as expired")
-			},
-		},
-		// Test for the clear-tagged-node-user-id migration
-		// (202602201200-clear-tagged-node-user-id). A nil tags slice
-		// marshals to the JSON literal 'null', so untagged nodes can carry
-		// tags='null' in the database. The migration must only clear
-		// user_id on genuinely tagged nodes, not on these untagged ones.
-		// Fixes: https://github.com/juanfont/headscale/issues/3323
-		{
-			dbPath: "testdata/sqlite/null_tags_user_id_migration_test.sql",
-			wantFunc: func(t *testing.T, hsdb *HSDatabase) {
-				t.Helper()
-
-				nodes, err := Read(hsdb.DB, func(rx *gorm.DB) (types.Nodes, error) {
-					return ListNodes(rx)
-				})
-				require.NoError(t, err)
-				require.Len(t, nodes, 4, "should have all 4 nodes")
-
-				byHostname := make(map[string]*types.Node, len(nodes))
-				for _, n := range nodes {
-					byHostname[n.Hostname] = n
-				}
-
-				// Node 1 had tags='null' (untagged) and belonged to user2.
-				// The migration must NOT clear its user_id.
-				node1 := byHostname["node1"]
-				require.NotNil(t, node1, "node1 should exist")
-				assert.False(t, node1.IsTagged(), "node1 with tags='null' should be untagged")
-				require.NotNil(t, node1.UserID, "node1 should keep its user assigned")
-				assert.Equal(t, uint(2), *node1.UserID, "node1 should still belong to user2")
-
-				// Node 2 is genuinely tagged; user_id must be cleared.
-				node2 := byHostname["node2"]
-				require.NotNil(t, node2, "node2 should exist")
-				assert.True(t, node2.IsTagged(), "node2 should be tagged")
-				assert.Nil(t, node2.UserID, "node2 (tagged) should have user_id cleared")
-
-				// Node 3 had tags='[]' (untagged); user_id preserved.
-				node3 := byHostname["node3"]
-				require.NotNil(t, node3, "node3 should exist")
-				assert.False(t, node3.IsTagged(), "node3 with tags='[]' should be untagged")
-				require.NotNil(t, node3.UserID, "node3 should keep its user assigned")
-				assert.Equal(t, uint(1), *node3.UserID, "node3 should still belong to user1")
-
-				// Node 4 had tags='' (untagged); user_id preserved.
-				node4 := byHostname["node4"]
-				require.NotNil(t, node4, "node4 should exist")
-				assert.False(t, node4.IsTagged(), "node4 with tags='' should be untagged")
-				require.NotNil(t, node4.UserID, "node4 should keep its user assigned")
-				assert.Equal(t, uint(1), *node4.UserID, "node4 should still belong to user1")
-			},
-		},
-		// Test for the null-tags user_id recovery migration. Databases that
-		// already upgraded to 0.29.0 had user_id wrongly cleared on untagged
-		// nodes with tags='null'. The recovery migration re-derives user_id
-		// from the node's pre-auth key where one exists.
-		// Fixes: https://github.com/juanfont/headscale/issues/3323
-		{
-			dbPath: "testdata/sqlite/recover_null_tags_user_id_migration_test.sql",
-			wantFunc: func(t *testing.T, hsdb *HSDatabase) {
-				t.Helper()
-
-				nodes, err := Read(hsdb.DB, func(rx *gorm.DB) (types.Nodes, error) {
-					return ListNodes(rx)
-				})
-				require.NoError(t, err)
-				require.Len(t, nodes, 4, "should have all 4 nodes")
-
-				byHostname := make(map[string]*types.Node, len(nodes))
-				for _, n := range nodes {
-					byHostname[n.Hostname] = n
-				}
-
-				// Node 1: authkey-registered, orphaned by the bug. The recovery
-				// migration restores user_id from its pre-auth key (user2).
-				node1 := byHostname["node1"]
-				require.NotNil(t, node1, "node1 should exist")
-				require.NotNil(t, node1.UserID, "node1 user_id should be recovered")
-				assert.Equal(t, uint(2), *node1.UserID, "node1 should be recovered to user2")
-
-				// Node 2: genuinely tagged, correctly cleared. Must stay cleared.
-				node2 := byHostname["node2"]
-				require.NotNil(t, node2, "node2 should exist")
-				assert.True(t, node2.IsTagged(), "node2 should be tagged")
-				assert.Nil(t, node2.UserID, "node2 (tagged) must remain cleared")
-
-				// Node 3: CLI-registered, no pre-auth key. Unrecoverable.
-				node3 := byHostname["node3"]
-				require.NotNil(t, node3, "node3 should exist")
-				assert.Nil(t, node3.UserID, "node3 has no pre-auth key to recover from")
-
-				// Node 4: never orphaned; user_id must be untouched.
-				node4 := byHostname["node4"]
-				require.NotNil(t, node4, "node4 should exist")
-				require.NotNil(t, node4.UserID, "node4 user_id should be untouched")
-				assert.Equal(t, uint(1), *node4.UserID, "node4 should still belong to user1")
-			},
-		},
 	}
 
 	for _, tt := range tests {
diff --git a/hscontrol/db/ephemeral_garbage_collector_test.go b/hscontrol/db/ephemeral_garbage_collector_test.go
index a04c2103f..10bb235a7 100644
--- a/hscontrol/db/ephemeral_garbage_collector_test.go
+++ b/hscontrol/db/ephemeral_garbage_collector_test.go
@@ -2,7 +2,6 @@ package db
 
 import (
 	"runtime"
-	"slices"
 	"sync"
 	"sync/atomic"
 	"testing"
@@ -10,7 +9,6 @@ import (
 
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
 )
 
 const (
@@ -19,8 +17,8 @@ const (
 	fifty       = 50 * time.Millisecond
 )
 
-// TestEphemeralGarbageCollectorGoRoutineLeak is a test for a goroutine leak in [EphemeralGarbageCollector].
-// It creates a new [EphemeralGarbageCollector], schedules several nodes for deletion with a short expiry,
+// TestEphemeralGarbageCollectorGoRoutineLeak is a test for a goroutine leak in EphemeralGarbageCollector().
+// It creates a new EphemeralGarbageCollector, schedules several nodes for deletion with a short expiry,
 // and verifies that the nodes are deleted when the expiry time passes, and then
 // for any leaked goroutines after the garbage collector is closed.
 func TestEphemeralGarbageCollectorGoRoutineLeak(t *testing.T) {
@@ -91,84 +89,8 @@ func TestEphemeralGarbageCollectorGoRoutineLeak(t *testing.T) {
 	t.Logf("Final number of goroutines: %d", runtime.NumGoroutine())
 }
 
-// TestEphemeralGarbageCollectorCancelReapsGoroutine verifies that Cancel (and
-// reschedule) reaps the per-node watcher goroutine while the collector is still
-// running, rather than leaking it until Close. The production churn path is an
-// ephemeral node disconnecting (Schedule) then reconnecting (Cancel) before the
-// long expiry timer fires; a stopped timer never fires, so a watcher parked
-// only on <-timer.C would otherwise leak on every cycle.
-func TestEphemeralGarbageCollectorCancelReapsGoroutine(t *testing.T) {
-	gc := NewEphemeralGarbageCollector(func(types.NodeID) {})
-
-	go gc.Start()
-	defer gc.Close()
-
-	baseline := runtime.NumGoroutine()
-
-	const (
-		iterations = 1000
-		nodeID     = types.NodeID(42)
-	)
-
-	for range iterations {
-		gc.Schedule(nodeID, time.Hour) // disconnect: long timer, will not fire
-		gc.Cancel(nodeID)              // reconnect: must reap the watcher
-	}
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assert.LessOrEqual(c, runtime.NumGoroutine(), baseline+10,
-			"per-node goroutines leaked on Cancel/reschedule")
-	}, 2*time.Second, 20*time.Millisecond, "watcher goroutines should be reaped")
-}
-
-// TestEphemeralGarbageCollectorCancelBeatsQueuedDeletion verifies that a node
-// reconnecting (Cancel) after its deletion has already been queued on the
-// internal channel is not deleted. The timer fires and enqueues the deletion;
-// Cancel then runs before Start drains it. Start must drop the now-superseded
-// deletion rather than removing the freshly reconnected node.
-func TestEphemeralGarbageCollectorCancelBeatsQueuedDeletion(t *testing.T) {
-	const targetNode types.NodeID = 42
-
-	var (
-		mu      sync.Mutex
-		deleted []types.NodeID
-	)
-
-	e := NewEphemeralGarbageCollector(func(ni types.NodeID) {
-		mu.Lock()
-		defer mu.Unlock()
-
-		deleted = append(deleted, ni)
-	})
-
-	// Schedule with a tiny expiry but do not drain yet: the watcher fires and
-	// enqueues the deletion onto the buffered channel.
-	e.Schedule(targetNode, time.Millisecond)
-	require.Eventually(t, func() bool {
-		return len(e.deleteCh) == 1
-	}, time.Second, time.Millisecond, "deletion should be queued")
-
-	// Node reconnects before the queue is drained.
-	e.Cancel(targetNode)
-
-	go e.Start()
-	defer e.Close()
-
-	require.Eventually(t, func() bool {
-		return len(e.deleteCh) == 0
-	}, time.Second, time.Millisecond, "Start should drain the queued deletion")
-
-	assert.Never(t, func() bool {
-		mu.Lock()
-		defer mu.Unlock()
-
-		return slices.Contains(deleted, targetNode)
-	}, 200*time.Millisecond, 10*time.Millisecond,
-		"cancelled node must not be deleted")
-}
-
-// TestEphemeralGarbageCollectorReschedule is a test for the rescheduling of nodes in [EphemeralGarbageCollector].
-// It creates a new [EphemeralGarbageCollector], schedules a node for deletion with a longer expiry,
+// TestEphemeralGarbageCollectorReschedule is a test for the rescheduling of nodes in EphemeralGarbageCollector().
+// It creates a new EphemeralGarbageCollector, schedules a node for deletion with a longer expiry,
 // and then reschedules it with a shorter expiry, and verifies that the node is deleted only once.
 func TestEphemeralGarbageCollectorReschedule(t *testing.T) {
 	// Deletion tracking mechanism
@@ -223,8 +145,8 @@ func TestEphemeralGarbageCollectorReschedule(t *testing.T) {
 	deleteMutex.Unlock()
 }
 
-// TestEphemeralGarbageCollectorCancelAndReschedule is a test for the cancellation and rescheduling of nodes in [EphemeralGarbageCollector].
-// It creates a new [EphemeralGarbageCollector], schedules a node for deletion, cancels it, and then reschedules it,
+// TestEphemeralGarbageCollectorCancelAndReschedule is a test for the cancellation and rescheduling of nodes in EphemeralGarbageCollector().
+// It creates a new EphemeralGarbageCollector, schedules a node for deletion, cancels it, and then reschedules it,
 // and verifies that the node is deleted only once.
 func TestEphemeralGarbageCollectorCancelAndReschedule(t *testing.T) {
 	// Deletion tracking mechanism
@@ -292,8 +214,8 @@ func TestEphemeralGarbageCollectorCancelAndReschedule(t *testing.T) {
 	deleteMutex.Unlock()
 }
 
-// TestEphemeralGarbageCollectorCloseBeforeTimerFires is a test for the closing of the [EphemeralGarbageCollector] before the timer fires.
-// It creates a new [EphemeralGarbageCollector], schedules a node for deletion, closes the GC, and verifies that the node is not deleted.
+// TestEphemeralGarbageCollectorCloseBeforeTimerFires is a test for the closing of the EphemeralGarbageCollector before the timer fires.
+// It creates a new EphemeralGarbageCollector, schedules a node for deletion, closes the GC, and verifies that the node is not deleted.
 func TestEphemeralGarbageCollectorCloseBeforeTimerFires(t *testing.T) {
 	// Deletion tracking
 	var (
@@ -342,7 +264,7 @@ func TestEphemeralGarbageCollectorCloseBeforeTimerFires(t *testing.T) {
 	deleteMutex.Unlock()
 }
 
-// TestEphemeralGarbageCollectorScheduleAfterClose verifies that calling [EphemeralGarbageCollector.Schedule] after [EphemeralGarbageCollector.Close]
+// TestEphemeralGarbageCollectorScheduleAfterClose verifies that calling Schedule after Close
 // is a no-op and doesn't cause any panics, goroutine leaks, or other issues.
 func TestEphemeralGarbageCollectorScheduleAfterClose(t *testing.T) {
 	// Count initial goroutines to check for leaks
@@ -417,7 +339,7 @@ func TestEphemeralGarbageCollectorScheduleAfterClose(t *testing.T) {
 }
 
 // TestEphemeralGarbageCollectorConcurrentScheduleAndClose tests the behavior of the garbage collector
-// when [EphemeralGarbageCollector.Schedule] and [EphemeralGarbageCollector.Close] are called concurrently from multiple goroutines.
+// when Schedule and Close are called concurrently from multiple goroutines.
 func TestEphemeralGarbageCollectorConcurrentScheduleAndClose(t *testing.T) {
 	// Count initial goroutines
 	initialGoroutines := runtime.NumGoroutine()
diff --git a/hscontrol/db/ip.go b/hscontrol/db/ip.go
index fede11b7f..7402f4737 100644
--- a/hscontrol/db/ip.go
+++ b/hscontrol/db/ip.go
@@ -49,7 +49,7 @@ type IPAllocator struct {
 	usedIPs netipx.IPSetBuilder
 }
 
-// NewIPAllocator returns a new [IPAllocator] singleton which
+// NewIPAllocator returns a new IPAllocator singleton which
 // can be used to hand out unique IP addresses within the
 // provided IPv4 and IPv6 prefix. It needs to be created
 // when headscale starts and needs to finish its read
@@ -138,6 +138,9 @@ func NewIPAllocator(
 }
 
 func (i *IPAllocator) Next() (*netip.Addr, *netip.Addr, error) {
+	i.mu.Lock()
+	defer i.mu.Unlock()
+
 	var (
 		err  error
 		ret4 *netip.Addr
@@ -145,17 +148,21 @@ func (i *IPAllocator) Next() (*netip.Addr, *netip.Addr, error) {
 	)
 
 	if i.prefix4 != nil {
-		ret4, err = i.allocateNext(&i.prev4, i.prefix4)
+		ret4, err = i.next(i.prev4, i.prefix4)
 		if err != nil {
 			return nil, nil, fmt.Errorf("allocating IPv4 address: %w", err)
 		}
+
+		i.prev4 = *ret4
 	}
 
 	if i.prefix6 != nil {
-		ret6, err = i.allocateNext(&i.prev6, i.prefix6)
+		ret6, err = i.next(i.prev6, i.prefix6)
 		if err != nil {
 			return nil, nil, fmt.Errorf("allocating IPv6 address: %w", err)
 		}
+
+		i.prev6 = *ret6
 	}
 
 	return ret4, ret6, nil
@@ -163,22 +170,11 @@ func (i *IPAllocator) Next() (*netip.Addr, *netip.Addr, error) {
 
 var ErrCouldNotAllocateIP = errors.New("failed to allocate IP")
 
-// allocateNext allocates the next address from prefix under i.mu, advancing
-// prev so a run of allocations (e.g. BackfillNodeIPs) does not rescan
-// already-issued addresses, and so prev is read under the lock rather than in
-// the caller's frame.
-func (i *IPAllocator) allocateNext(prev *netip.Addr, prefix *netip.Prefix) (*netip.Addr, error) {
+func (i *IPAllocator) nextLocked(prev netip.Addr, prefix *netip.Prefix) (*netip.Addr, error) {
 	i.mu.Lock()
 	defer i.mu.Unlock()
 
-	ret, err := i.next(*prev, prefix)
-	if err != nil {
-		return nil, err
-	}
-
-	*prev = *ret
-
-	return ret, nil
+	return i.next(prev, prefix)
 }
 
 func (i *IPAllocator) next(prev netip.Addr, prefix *netip.Prefix) (*netip.Addr, error) {
@@ -204,40 +200,30 @@ func (i *IPAllocator) next(prev netip.Addr, prefix *netip.Prefix) (*netip.Addr,
 		return nil, err
 	}
 
-	// Walk forward from the starting address until a free, non-reserved
-	// address inside the prefix is found. The random strategy only picks the
-	// starting point at random and then scans deterministically: this keeps
-	// the loop finite, so an exhausted prefix returns ErrCouldNotAllocateIP
-	// instead of re-drawing in-prefix addresses forever under i.mu.
-	start := ip
 	for {
-		if prefix.Contains(ip) && !set.Contains(ip) && !isTailscaleReservedIP(ip) {
-			i.usedIPs.Add(ip)
-
-			return &ip, nil
+		if !prefix.Contains(ip) {
+			return nil, ErrCouldNotAllocateIP
 		}
 
-		ip = ip.Next()
-
-		switch i.strategy {
-		case types.IPAllocationStrategySequential:
-			// Sequential allocation never wraps: walking past the end of
-			// the prefix means the pool is exhausted.
-			if !prefix.Contains(ip) {
-				return nil, ErrCouldNotAllocateIP
-			}
-		case types.IPAllocationStrategyRandom:
-			// Random allocation wraps within the prefix so every address is
-			// examined exactly once; returning to the start means the prefix
-			// is exhausted.
-			if !prefix.Contains(ip) {
-				ip = prefix.Masked().Addr()
+		// Check if the IP has already been allocated
+		// or if it is a IP reserved by Tailscale.
+		if set.Contains(ip) || isTailscaleReservedIP(ip) {
+			switch i.strategy {
+			case types.IPAllocationStrategySequential:
+				ip = ip.Next()
+			case types.IPAllocationStrategyRandom:
+				ip, err = randomNext(*prefix)
+				if err != nil {
+					return nil, fmt.Errorf("getting random IP: %w", err)
+				}
 			}
 
-			if ip == start {
-				return nil, ErrCouldNotAllocateIP
-			}
+			continue
 		}
+
+		i.usedIPs.Add(ip)
+
+		return &ip, nil
 	}
 }
 
@@ -255,12 +241,6 @@ func randomNext(pfx netip.Prefix) (netip.Addr, error) {
 	// after.
 	tempMax := big.NewInt(0).Sub(&to, &from)
 
-	// A single-address prefix (/32 or /128) has from == to, so tempMax is 0 and
-	// rand.Int would panic on a non-positive bound. Return the sole address.
-	if tempMax.Sign() <= 0 {
-		return fromIP, nil
-	}
-
 	out, err := rand.Int(rand.Reader, tempMax)
 	if err != nil {
 		return netip.Addr{}, fmt.Errorf("generating random IP: %w", err)
@@ -268,10 +248,7 @@ func randomNext(pfx netip.Prefix) (netip.Addr, error) {
 
 	valInRange := big.NewInt(0).Add(&from, out)
 
-	// big.Int.Bytes() strips leading zero bytes, so a value with a zero high
-	// byte yields a too-short slice that AddrFromSlice rejects. Pad to the
-	// prefix's address width.
-	ip, ok := netip.AddrFromSlice(valInRange.FillBytes(make([]byte, len(fromIP.AsSlice()))))
+	ip, ok := netip.AddrFromSlice(valInRange.Bytes())
 	if !ok {
 		return netip.Addr{}, errGeneratedIPBytesInvalid
 	}
@@ -295,7 +272,7 @@ func isTailscaleReservedIP(ip netip.Addr) bool {
 }
 
 // BackfillNodeIPs will take a database transaction, and
-// iterate through all of the current nodes ([types.Node]) in headscale
+// iterate through all of the current nodes in headscale
 // and ensure it has IP addresses according to the current
 // configuration.
 // This means that if both IPv4 and IPv6 is set in the
@@ -327,7 +304,7 @@ func (db *HSDatabase) BackfillNodeIPs(i *IPAllocator) ([]string, error) {
 			changed := false
 			// IPv4 prefix is set, but node ip is missing, alloc
 			if i.prefix4 != nil && node.IPv4 == nil {
-				ret4, err := i.allocateNext(&i.prev4, i.prefix4)
+				ret4, err := i.nextLocked(i.prev4, i.prefix4)
 				if err != nil {
 					return fmt.Errorf("allocating IPv4 for node(%d): %w", node.ID, err)
 				}
@@ -340,7 +317,7 @@ func (db *HSDatabase) BackfillNodeIPs(i *IPAllocator) ([]string, error) {
 
 			// IPv6 prefix is set, but node ip is missing, alloc
 			if i.prefix6 != nil && node.IPv6 == nil {
-				ret6, err := i.allocateNext(&i.prev6, i.prefix6)
+				ret6, err := i.nextLocked(i.prev6, i.prefix6)
 				if err != nil {
 					return fmt.Errorf("allocating IPv6 for node(%d): %w", node.ID, err)
 				}
@@ -369,6 +346,7 @@ func (db *HSDatabase) BackfillNodeIPs(i *IPAllocator) ([]string, error) {
 				// Use Updates() with Select() to only update IP fields, avoiding overwriting
 				// other fields like Expiry. We need Select() because Updates() alone skips
 				// zero values, but we DO want to update IPv4/IPv6 to nil when removing them.
+				// See issue #2862.
 				err := tx.Model(node).Select("ipv4", "ipv6").Updates(node).Error
 				if err != nil {
 					return fmt.Errorf("saving node(%d) after adding IPs: %w", node.ID, err)
diff --git a/hscontrol/db/ip_backfill_race_test.go b/hscontrol/db/ip_backfill_race_test.go
deleted file mode 100644
index 25c7ad197..000000000
--- a/hscontrol/db/ip_backfill_race_test.go
+++ /dev/null
@@ -1,52 +0,0 @@
-package db
-
-import (
-	"net/netip"
-	"sync"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/require"
-)
-
-// TestAllocatorConcurrentNextAndBackfillNoRace exercises the registration path
-// (Next) concurrently with the backfill allocation path (allocateNext) on
-// the same allocator. Backfill used to read prev4/prev6 in the caller's frame
-// without the lock, racing Next's writes; both must now take i.mu. Run with
-// -race.
-func TestAllocatorConcurrentNextAndBackfillNoRace(t *testing.T) {
-	p4 := netip.MustParsePrefix("100.64.0.0/10")
-	p6 := netip.MustParsePrefix("fd7a:115c:a1e0::/48")
-
-	alloc, err := NewIPAllocator(nil, &p4, &p6, types.IPAllocationStrategySequential)
-	require.NoError(t, err)
-
-	const iterations = 2000
-
-	var wg sync.WaitGroup
-
-	wg.Go(func() {
-		for range iterations {
-			_, _, err := alloc.Next()
-			if err != nil {
-				return
-			}
-		}
-	})
-
-	wg.Go(func() {
-		for range iterations {
-			_, err := alloc.allocateNext(&alloc.prev4, alloc.prefix4)
-			if err != nil {
-				return
-			}
-
-			_, err = alloc.allocateNext(&alloc.prev6, alloc.prefix6)
-			if err != nil {
-				return
-			}
-		}
-	})
-
-	wg.Wait()
-}
diff --git a/hscontrol/db/ip_random_exhaustion_test.go b/hscontrol/db/ip_random_exhaustion_test.go
deleted file mode 100644
index 350ad9ba8..000000000
--- a/hscontrol/db/ip_random_exhaustion_test.go
+++ /dev/null
@@ -1,52 +0,0 @@
-package db
-
-import (
-	"errors"
-	"net/netip"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-)
-
-// TestIPAllocatorRandomExhaustionReturnsError ensures the random allocation
-// strategy terminates when its prefix is exhausted. randomNext only ever
-// returns in-prefix addresses, so the allocation loop's exhaustion exit must
-// not depend on producing an out-of-prefix candidate; otherwise Next() spins
-// forever under the allocator mutex, wedging all registration and IP release.
-//
-// 100.64.0.0/30 has four addresses: .0 (network) and .3 (broadcast) are
-// reserved, leaving .1 and .2. After two allocations the pool is exhausted and
-// the third Next() must return ErrCouldNotAllocateIP promptly.
-func TestIPAllocatorRandomExhaustionReturnsError(t *testing.T) {
-	prefix4 := netip.MustParsePrefix("100.64.0.0/30")
-
-	alloc, err := NewIPAllocator(nil, &prefix4, nil, types.IPAllocationStrategyRandom)
-	if err != nil {
-		t.Fatalf("NewIPAllocator: %v", err)
-	}
-
-	for i := range 2 {
-		_, _, err := alloc.Next()
-		if err != nil {
-			t.Fatalf("Next() #%d unexpectedly failed: %v", i+1, err)
-		}
-	}
-
-	done := make(chan error, 1)
-
-	go func() {
-		_, _, err := alloc.Next()
-		done <- err
-	}()
-
-	select {
-	case err := <-done:
-		if !errors.Is(err, ErrCouldNotAllocateIP) {
-			t.Fatalf("expected ErrCouldNotAllocateIP on exhausted prefix, got: %v", err)
-		}
-	case <-time.After(2 * time.Second):
-		t.Fatal("Next() on an exhausted random-strategy prefix did not return " +
-			"within 2s; it is spinning forever under the allocator mutex")
-	}
-}
diff --git a/hscontrol/db/node.go b/hscontrol/db/node.go
index 002bde590..e6bd9cf0d 100644
--- a/hscontrol/db/node.go
+++ b/hscontrol/db/node.go
@@ -1,11 +1,12 @@
 package db
 
 import (
-	"cmp"
+	"encoding/json"
 	"errors"
 	"fmt"
 	"net/netip"
 	"slices"
+	"sort"
 	"strconv"
 	"sync"
 	"testing"
@@ -16,6 +17,7 @@ import (
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
 	"github.com/rs/zerolog/log"
 	"gorm.io/gorm"
+	"tailscale.com/net/tsaddr"
 	"tailscale.com/types/key"
 	"tailscale.com/util/dnsname"
 )
@@ -31,15 +33,6 @@ const (
 // ErrNodeNameNotUnique is returned when a node name is not unique.
 var ErrNodeNameNotUnique = errors.New("node name is not unique")
 
-// preloadNode returns a session that eager-loads a node's AuthKey, the
-// AuthKey's User, and the node's User.
-func preloadNode(tx *gorm.DB) *gorm.DB {
-	return tx.
-		Preload("AuthKey").
-		Preload("AuthKey.User").
-		Preload("User")
-}
-
 var (
 	ErrNodeNotFound                  = errors.New("node not found")
 	ErrNodeRouteIsNotAvailable       = errors.New("route is not available on node")
@@ -62,14 +55,17 @@ func (hsdb *HSDatabase) ListPeers(nodeID types.NodeID, peerIDs ...types.NodeID)
 func ListPeers(tx *gorm.DB, nodeID types.NodeID, peerIDs ...types.NodeID) (types.Nodes, error) {
 	nodes := types.Nodes{}
 
-	err := preloadNode(tx).
+	err := tx.
+		Preload("AuthKey").
+		Preload("AuthKey.User").
+		Preload("User").
 		Where("id <> ?", nodeID).
 		Where(peerIDs).Find(&nodes).Error
 	if err != nil {
 		return types.Nodes{}, err
 	}
 
-	slices.SortFunc(nodes, func(a, b *types.Node) int { return cmp.Compare(a.ID, b.ID) })
+	sort.Slice(nodes, func(i, j int) bool { return nodes[i].ID < nodes[j].ID })
 
 	return nodes, nil
 }
@@ -85,7 +81,10 @@ func (hsdb *HSDatabase) ListNodes(nodeIDs ...types.NodeID) (types.Nodes, error)
 func ListNodes(tx *gorm.DB, nodeIDs ...types.NodeID) (types.Nodes, error) {
 	nodes := types.Nodes{}
 
-	err := preloadNode(tx).
+	err := tx.
+		Preload("AuthKey").
+		Preload("AuthKey.User").
+		Preload("User").
 		Where(nodeIDs).Find(&nodes).Error
 	if err != nil {
 		return nil, err
@@ -113,35 +112,55 @@ func (hsdb *HSDatabase) getNode(uid types.UserID, name string) (*types.Node, err
 	})
 }
 
-// getNode finds a [types.Node] by name and user and returns the [types.Node] struct.
+// getNode finds a Node by name and user and returns the Node struct.
 func getNode(tx *gorm.DB, uid types.UserID, name string) (*types.Node, error) {
-	uidPtr := uint(uid)
-
-	node := types.Node{}
-
-	err := preloadNode(tx).
-		Where(&types.Node{UserID: &uidPtr, Hostname: name}).
-		First(&node).Error
+	nodes, err := ListNodesByUser(tx, uid)
 	if err != nil {
-		if errors.Is(err, gorm.ErrRecordNotFound) {
-			return nil, ErrNodeNotFound
-		}
-
 		return nil, err
 	}
 
-	return &node, nil
+	for _, m := range nodes {
+		if m.Hostname == name {
+			return m, nil
+		}
+	}
+
+	return nil, ErrNodeNotFound
 }
 
 func (hsdb *HSDatabase) GetNodeByID(id types.NodeID) (*types.Node, error) {
 	return GetNodeByID(hsdb.DB, id)
 }
 
-// GetNodeByID finds a [types.Node] by ID and returns the [types.Node] struct.
+// GetNodeByID finds a Node by ID and returns the Node struct.
 func GetNodeByID(tx *gorm.DB, id types.NodeID) (*types.Node, error) {
 	mach := types.Node{}
-	if result := preloadNode(tx).
-		First(&mach, "id = ?", id); result.Error != nil {
+	if result := tx.
+		Preload("AuthKey").
+		Preload("AuthKey.User").
+		Preload("User").
+		Find(&types.Node{ID: id}).First(&mach); result.Error != nil {
+		return nil, result.Error
+	}
+
+	return &mach, nil
+}
+
+func (hsdb *HSDatabase) GetNodeByMachineKey(machineKey key.MachinePublic) (*types.Node, error) {
+	return GetNodeByMachineKey(hsdb.DB, machineKey)
+}
+
+// GetNodeByMachineKey finds a Node by its MachineKey and returns the Node struct.
+func GetNodeByMachineKey(
+	tx *gorm.DB,
+	machineKey key.MachinePublic,
+) (*types.Node, error) {
+	mach := types.Node{}
+	if result := tx.
+		Preload("AuthKey").
+		Preload("AuthKey.User").
+		Preload("User").
+		First(&mach, "machine_key = ?", machineKey.String()); result.Error != nil {
 		return nil, result.Error
 	}
 
@@ -152,13 +171,16 @@ func (hsdb *HSDatabase) GetNodeByNodeKey(nodeKey key.NodePublic) (*types.Node, e
 	return GetNodeByNodeKey(hsdb.DB, nodeKey)
 }
 
-// GetNodeByNodeKey finds a [types.Node] by its [key.NodePublic] and returns the [types.Node] struct.
+// GetNodeByNodeKey finds a Node by its NodeKey and returns the Node struct.
 func GetNodeByNodeKey(
 	tx *gorm.DB,
 	nodeKey key.NodePublic,
 ) (*types.Node, error) {
 	mach := types.Node{}
-	if result := preloadNode(tx).
+	if result := tx.
+		Preload("AuthKey").
+		Preload("AuthKey.User").
+		Preload("User").
 		First(&mach, "node_key = ?", nodeKey.String()); result.Error != nil {
 		return nil, result.Error
 	}
@@ -166,6 +188,87 @@ func GetNodeByNodeKey(
 	return &mach, nil
 }
 
+func (hsdb *HSDatabase) SetTags(
+	nodeID types.NodeID,
+	tags []string,
+) error {
+	return hsdb.Write(func(tx *gorm.DB) error {
+		return SetTags(tx, nodeID, tags)
+	})
+}
+
+// SetTags takes a NodeID and update the forced tags.
+// It will overwrite any tags with the new list.
+func SetTags(
+	tx *gorm.DB,
+	nodeID types.NodeID,
+	tags []string,
+) error {
+	if len(tags) == 0 {
+		// if no tags are provided, we remove all tags
+		err := tx.Model(&types.Node{}).Where("id = ?", nodeID).Update("tags", "[]").Error
+		if err != nil {
+			return fmt.Errorf("removing tags: %w", err)
+		}
+
+		return nil
+	}
+
+	slices.Sort(tags)
+	tags = slices.Compact(tags)
+
+	b, err := json.Marshal(tags)
+	if err != nil {
+		return err
+	}
+
+	err = tx.Model(&types.Node{}).Where("id = ?", nodeID).Update("tags", string(b)).Error
+	if err != nil {
+		return fmt.Errorf("updating tags: %w", err)
+	}
+
+	return nil
+}
+
+// SetApprovedRoutes takes a Node struct pointer and updates the approved routes.
+func SetApprovedRoutes(
+	tx *gorm.DB,
+	nodeID types.NodeID,
+	routes []netip.Prefix,
+) error {
+	if len(routes) == 0 {
+		// if no routes are provided, we remove all
+		err := tx.Model(&types.Node{}).Where("id = ?", nodeID).Update("approved_routes", "[]").Error
+		if err != nil {
+			return fmt.Errorf("removing approved routes: %w", err)
+		}
+
+		return nil
+	}
+
+	// When approving exit routes, ensure both IPv4 and IPv6 are included
+	// If either 0.0.0.0/0 or ::/0 is being approved, both should be approved
+	hasIPv4Exit := slices.Contains(routes, tsaddr.AllIPv4())
+	hasIPv6Exit := slices.Contains(routes, tsaddr.AllIPv6())
+
+	if hasIPv4Exit && !hasIPv6Exit {
+		routes = append(routes, tsaddr.AllIPv6())
+	} else if hasIPv6Exit && !hasIPv4Exit {
+		routes = append(routes, tsaddr.AllIPv4())
+	}
+
+	b, err := json.Marshal(routes)
+	if err != nil {
+		return err
+	}
+
+	if err := tx.Model(&types.Node{}).Where("id = ?", nodeID).Update("approved_routes", string(b)).Error; err != nil { //nolint:noinlineerr
+		return fmt.Errorf("updating approved routes: %w", err)
+	}
+
+	return nil
+}
+
 // SetLastSeen sets a node's last seen field indicating that we
 // have recently communicating with this node.
 func (hsdb *HSDatabase) SetLastSeen(nodeID types.NodeID, lastSeen time.Time) error {
@@ -180,7 +283,7 @@ func SetLastSeen(tx *gorm.DB, nodeID types.NodeID, lastSeen time.Time) error {
 	return tx.Model(&types.Node{}).Where("id = ?", nodeID).Update("last_seen", lastSeen).Error
 }
 
-// RenameNode takes a [types.Node] struct and a new [types.Node.GivenName] for the nodes
+// RenameNode takes a Node struct and a new GivenName for the nodes
 // and renames it. Validation should be done in the state layer before calling this function.
 func RenameNode(tx *gorm.DB,
 	nodeID types.NodeID, newName string,
@@ -226,7 +329,7 @@ func (hsdb *HSDatabase) DeleteNode(node *types.Node) error {
 	})
 }
 
-// DeleteNode deletes a [types.Node] from the database.
+// DeleteNode deletes a Node from the database.
 // Caller is responsible for notifying all of change.
 func DeleteNode(tx *gorm.DB,
 	node *types.Node,
@@ -240,7 +343,7 @@ func DeleteNode(tx *gorm.DB,
 	return nil
 }
 
-// DeleteEphemeralNode deletes a [types.Node] from the database, note that this method
+// DeleteEphemeralNode deletes a Node from the database, note that this method
 // will remove it straight, and not notify any changes or consider any routes.
 // It is intended for Ephemeral nodes.
 func (hsdb *HSDatabase) DeleteEphemeralNode(
@@ -257,7 +360,7 @@ func (hsdb *HSDatabase) DeleteEphemeralNode(
 }
 
 // RegisterNodeForTest is used only for testing purposes to register a node directly in the database.
-// Production code should use [state.State.HandleNodeFromAuthPath] or [state.State.HandleNodeFromPreAuthKey].
+// Production code should use state.HandleNodeFromAuthPath or state.HandleNodeFromPreAuthKey.
 func RegisterNodeForTest(tx *gorm.DB, node types.Node, ipv4 *netip.Addr, ipv6 *netip.Addr) (*types.Node, error) {
 	if !testing.Testing() {
 		panic("RegisterNodeForTest can only be called during tests")
@@ -278,16 +381,12 @@ func RegisterNodeForTest(tx *gorm.DB, node types.Node, ipv4 *netip.Addr, ipv6 *n
 
 	logEvent.Msg("registering test node")
 
-	// Reuse the existing node's identity only when the same machine
-	// re-registers for the same user; a different user is a new node. Match on
-	// (machine_key, user_id) precisely - a machine key can map to several nodes
-	// (one per user), so a machine-key-only lookup would be ambiguous.
-	var oldNode types.Node
-
-	err := tx.
-		Where("machine_key = ? AND user_id = ?", node.MachineKey.String(), node.UserID).
-		First(&oldNode).Error
-	if err == nil {
+	// If the a new node is registered with the same machine key, to the same user,
+	// update the existing node.
+	// If the same node is registered again, but to a new user, then that is considered
+	// a new node.
+	oldNode, _ := GetNodeByMachineKey(tx, node.MachineKey)
+	if oldNode != nil && oldNode.UserID == node.UserID {
 		node.ID = oldNode.ID
 		node.GivenName = oldNode.GivenName
 		node.ApprovedRoutes = oldNode.ApprovedRoutes
@@ -372,45 +471,24 @@ func NodeSetMachineKey(
 
 // EphemeralGarbageCollector is a garbage collector that will delete nodes after
 // a certain amount of time.
-// It is used to delete ephemeral nodes ([types.Node.IsEphemeral]) that have disconnected and should be
+// It is used to delete ephemeral nodes that have disconnected and should be
 // cleaned up.
 type EphemeralGarbageCollector struct {
 	mu sync.Mutex
 
 	deleteFunc  func(types.NodeID)
-	toBeDeleted map[types.NodeID]ephemeralTimer
-	// gen is bumped for every scheduled deletion so a queued deletion that
-	// was superseded by a Cancel or reschedule can be recognised and dropped.
-	gen uint64
+	toBeDeleted map[types.NodeID]*time.Timer
 
-	deleteCh chan pendingDeletion
+	deleteCh chan types.NodeID
 	cancelCh chan struct{}
 }
 
-// ephemeralTimer pairs a node's pending-deletion timer with a done channel
-// used to reap its watcher goroutine on Cancel or reschedule, plus the
-// generation identifying this particular scheduling. Without the done channel
-// a stopped timer never fires and the goroutine leaks until Close.
-type ephemeralTimer struct {
-	timer *time.Timer
-	done  chan struct{}
-	gen   uint64
-}
-
-// pendingDeletion is the generation-stamped deletion a watcher enqueues when
-// its timer fires. Start drops it if the node's current generation no longer
-// matches, i.e. it was cancelled or rescheduled in the meantime.
-type pendingDeletion struct {
-	nodeID types.NodeID
-	gen    uint64
-}
-
-// NewEphemeralGarbageCollector creates a new [EphemeralGarbageCollector], it takes
+// NewEphemeralGarbageCollector creates a new EphemeralGarbageCollector, it takes
 // a deleteFunc that will be called when a node is scheduled for deletion.
 func NewEphemeralGarbageCollector(deleteFunc func(types.NodeID)) *EphemeralGarbageCollector {
 	return &EphemeralGarbageCollector{
-		toBeDeleted: make(map[types.NodeID]ephemeralTimer),
-		deleteCh:    make(chan pendingDeletion, 10),
+		toBeDeleted: make(map[types.NodeID]*time.Timer),
+		deleteCh:    make(chan types.NodeID, 10),
 		cancelCh:    make(chan struct{}),
 		deleteFunc:  deleteFunc,
 	}
@@ -422,8 +500,8 @@ func (e *EphemeralGarbageCollector) Close() {
 	defer e.mu.Unlock()
 
 	// Stop all timers
-	for _, t := range e.toBeDeleted {
-		t.timer.Stop()
+	for _, timer := range e.toBeDeleted {
+		timer.Stop()
 	}
 
 	// Close the cancel channel to signal all goroutines to exit
@@ -446,18 +524,13 @@ func (e *EphemeralGarbageCollector) Schedule(nodeID types.NodeID, expiry time.Du
 		// Continue with scheduling
 	}
 
-	// If a timer already exists for this node, stop it and reap its
-	// watcher goroutine before scheduling a fresh one.
-	if old, exists := e.toBeDeleted[nodeID]; exists {
-		old.timer.Stop()
-		close(old.done)
+	// If a timer already exists for this node, stop it first
+	if oldTimer, exists := e.toBeDeleted[nodeID]; exists {
+		oldTimer.Stop()
 	}
 
-	e.gen++
-	gen := e.gen
 	timer := time.NewTimer(expiry)
-	done := make(chan struct{})
-	e.toBeDeleted[nodeID] = ephemeralTimer{timer: timer, done: done, gen: gen}
+	e.toBeDeleted[nodeID] = timer
 	// Start a goroutine to handle the timer completion
 	go func() {
 		select {
@@ -467,18 +540,12 @@ func (e *EphemeralGarbageCollector) Schedule(nodeID types.NodeID, expiry time.Du
 			// i.e. We don't want to send to deleteCh if the GC is shutting down
 			// So, we try to send to deleteCh, but also watch for cancelCh
 			select {
-			case e.deleteCh <- pendingDeletion{nodeID: nodeID, gen: gen}:
+			case e.deleteCh <- nodeID:
 				// Successfully sent to deleteCh
 			case <-e.cancelCh:
 				// GC is shutting down, don't send to deleteCh
 				return
-			case <-done:
-				// Cancelled or rescheduled before the send landed.
-				return
 			}
-		case <-done:
-			// Cancelled or rescheduled before the timer fired.
-			return
 		case <-e.cancelCh:
 			// If the GC is closed, exit the goroutine
 			return
@@ -491,9 +558,8 @@ func (e *EphemeralGarbageCollector) Cancel(nodeID types.NodeID) {
 	e.mu.Lock()
 	defer e.mu.Unlock()
 
-	if t, ok := e.toBeDeleted[nodeID]; ok {
-		t.timer.Stop()
-		close(t.done)
+	if timer, ok := e.toBeDeleted[nodeID]; ok {
+		timer.Stop()
 		delete(e.toBeDeleted, nodeID)
 	}
 }
@@ -504,35 +570,16 @@ func (e *EphemeralGarbageCollector) Start() {
 		select {
 		case <-e.cancelCh:
 			return
-		case pd := <-e.deleteCh:
+		case nodeID := <-e.deleteCh:
 			e.mu.Lock()
-
-			entry, ok := e.toBeDeleted[pd.nodeID]
-			if !ok || entry.gen != pd.gen {
-				// Cancelled or rescheduled after this deletion was queued;
-				// drop it so a reconnected node is not removed.
-				e.mu.Unlock()
-
-				continue
-			}
-
-			delete(e.toBeDeleted, pd.nodeID)
+			delete(e.toBeDeleted, nodeID)
 			e.mu.Unlock()
 
-			go e.deleteFunc(pd.nodeID)
+			go e.deleteFunc(nodeID)
 		}
 	}
 }
 
-// firstOr returns the first non-empty option, or def if none is provided.
-func firstOr(def string, opt []string) string {
-	if len(opt) > 0 && opt[0] != "" {
-		return opt[0]
-	}
-
-	return def
-}
-
 func (hsdb *HSDatabase) CreateNodeForTest(user *types.User, hostname ...string) *types.Node {
 	if !testing.Testing() {
 		panic("CreateNodeForTest can only be called during tests")
@@ -542,7 +589,10 @@ func (hsdb *HSDatabase) CreateNodeForTest(user *types.User, hostname ...string)
 		panic("CreateNodeForTest requires a valid user")
 	}
 
-	nodeName := firstOr(defaultTestNodePrefix, hostname)
+	nodeName := defaultTestNodePrefix
+	if len(hostname) > 0 && hostname[0] != "" {
+		nodeName = hostname[0]
+	}
 
 	// Create a preauth key for the node
 	pak, err := hsdb.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
@@ -612,7 +662,10 @@ func (hsdb *HSDatabase) CreateNodesForTest(user *types.User, count int, hostname
 		panic("CreateNodesForTest requires a valid user")
 	}
 
-	prefix := firstOr(defaultTestNodePrefix, hostnamePrefix)
+	prefix := defaultTestNodePrefix
+	if len(hostnamePrefix) > 0 && hostnamePrefix[0] != "" {
+		prefix = hostnamePrefix[0]
+	}
 
 	nodes := make([]*types.Node, count)
 	for i := range count {
@@ -632,7 +685,10 @@ func (hsdb *HSDatabase) CreateRegisteredNodesForTest(user *types.User, count int
 		panic("CreateRegisteredNodesForTest requires a valid user")
 	}
 
-	prefix := firstOr(defaultTestNodePrefix, hostnamePrefix)
+	prefix := defaultTestNodePrefix
+	if len(hostnamePrefix) > 0 && hostnamePrefix[0] != "" {
+		prefix = hostnamePrefix[0]
+	}
 
 	nodes := make([]*types.Node, count)
 	for i := range count {
diff --git a/hscontrol/db/node_test.go b/hscontrol/db/node_test.go
index b628bf71f..f9ba7b36e 100644
--- a/hscontrol/db/node_test.go
+++ b/hscontrol/db/node_test.go
@@ -178,6 +178,55 @@ func TestDisableNodeExpiry(t *testing.T) {
 	assert.Nil(t, nodeFromDB.Expiry, "expiry should be nil after disabling")
 }
 
+func TestSetTags(t *testing.T) {
+	db, err := newSQLiteTestDB()
+	require.NoError(t, err)
+
+	user, err := db.CreateUser(types.User{Name: "test"})
+	require.NoError(t, err)
+
+	pak, err := db.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
+	require.NoError(t, err)
+
+	pakID := pak.ID
+
+	_, err = db.getNode(types.UserID(user.ID), "testnode")
+	require.Error(t, err)
+
+	nodeKey := key.NewNode()
+	machineKey := key.NewMachine()
+
+	node := &types.Node{
+		ID:             0,
+		MachineKey:     machineKey.Public(),
+		NodeKey:        nodeKey.Public(),
+		Hostname:       "testnode",
+		UserID:         &user.ID,
+		RegisterMethod: util.RegisterMethodAuthKey,
+		AuthKeyID:      &pakID,
+	}
+
+	trx := db.DB.Save(node)
+	require.NoError(t, trx.Error)
+
+	// assign simple tags
+	sTags := []string{"tag:test", "tag:foo"}
+	err = db.SetTags(node.ID, sTags)
+	require.NoError(t, err)
+	node, err = db.getNode(types.UserID(user.ID), "testnode")
+	require.NoError(t, err)
+	assert.Equal(t, sTags, node.Tags)
+
+	// assign duplicate tags, expect no errors but no doubles in DB
+	eTags := []string{"tag:bar", "tag:test", "tag:unknown", "tag:test"}
+	err = db.SetTags(node.ID, eTags)
+	require.NoError(t, err)
+	node, err = db.getNode(types.UserID(user.ID), "testnode")
+	require.NoError(t, err)
+	assert.Equal(t, []string{"tag:bar", "tag:test", "tag:unknown"}, node.Tags)
+}
+
+
 func TestAutoApproveRoutes(t *testing.T) {
 	tests := []struct {
 		name         string
@@ -346,7 +395,7 @@ func TestAutoApproveRoutes(t *testing.T) {
 				err = adb.DB.Save(&nodeTagged).Error
 				require.NoError(t, err)
 
-				users, err := adb.ListUsers(nil)
+				users, err := adb.ListUsers()
 				require.NoError(t, err)
 
 				nodes, err := adb.ListNodes()
@@ -360,15 +409,13 @@ func TestAutoApproveRoutes(t *testing.T) {
 				assert.Equal(t, tt.expectChange, changed1)
 
 				if changed1 {
-					node.ApprovedRoutes = types.Prefixes(newRoutes1)
-					err = adb.DB.Save(&node).Error
+					err = SetApprovedRoutes(adb.DB, node.ID, newRoutes1)
 					require.NoError(t, err)
 				}
 
 				newRoutes2, changed2 := policy.ApproveRoutesWithPolicy(pm, nodeTagged.View(), nodeTagged.ApprovedRoutes, tt.routes)
 				if changed2 {
-					nodeTagged.ApprovedRoutes = types.Prefixes(newRoutes2)
-					err = adb.DB.Save(&nodeTagged).Error
+					err = SetApprovedRoutes(adb.DB, nodeTagged.ID, newRoutes2)
 					require.NoError(t, err)
 				}
 
@@ -578,6 +625,7 @@ func TestListEphemeralNodes(t *testing.T) {
 	assert.Equal(t, nodeEph.Hostname, ephemeralNodes[0].Hostname)
 }
 
+
 func TestListPeers(t *testing.T) {
 	// Setup test database
 	db, err := newSQLiteTestDB()
diff --git a/hscontrol/db/oauth.go b/hscontrol/db/oauth.go
deleted file mode 100644
index 6ce757bc7..000000000
--- a/hscontrol/db/oauth.go
+++ /dev/null
@@ -1,385 +0,0 @@
-package db
-
-import (
-	"crypto/rand"
-	"crypto/subtle"
-	"encoding/base64"
-	"errors"
-	"fmt"
-	"runtime"
-	"slices"
-	"strings"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"golang.org/x/crypto/argon2"
-	"gorm.io/gorm"
-	"tailscale.com/util/rands"
-	"tailscale.com/util/set"
-)
-
-const (
-	// OAuth client secret: hskey-client-<clientID(12)>-<secret(64)>. The clientID
-	// is the public, indexed lookup key (the analogue of an API key's prefix) and
-	// is embedded in the secret so the token endpoint can derive it. The prefix
-	// itself lives in the types package ([types.OAuthClientPrefix]).
-	oauthClientIDLength     = 12
-	oauthClientSecretLength = 64
-
-	// OAuth access token: hskey-oauthtok-<prefix(12)>-<secret(64)>. The distinct
-	// prefix (vs hskey-api- admin keys, [types.AccessTokenPrefix]) lets the auth
-	// middleware dispatch a scoped token from an all-access admin key alone.
-	accessTokenPrefixLength = 12
-	accessTokenSecretLength = 64
-)
-
-var (
-	ErrOAuthClientNotFound      = fmt.Errorf("oauth client not found: %w", gorm.ErrRecordNotFound)
-	ErrOAuthClientFailedToParse = errors.New("failed to parse oauth client secret")
-	ErrOAuthClientRevoked       = errors.New("oauth client revoked")
-
-	ErrAccessTokenNotFound      = fmt.Errorf("oauth access token not found: %w", gorm.ErrRecordNotFound)
-	ErrAccessTokenFailedToParse = errors.New("failed to parse oauth access token")
-	ErrAccessTokenExpired       = errors.New("oauth access token expired")
-	ErrAccessTokenClientRevoked = errors.New("oauth access token issuing client revoked or deleted")
-
-	errSecretHashMalformed = errors.New("malformed secret hash")
-	errSecretMismatch      = errors.New("secret does not match hash")
-)
-
-// Argon2id parameters, OWASP's minimum recommendation (19 MiB, 2 iterations, 1
-// lane). They are encoded into every stored hash, so raising them later still
-// verifies credentials stored under the old cost.
-const (
-	argon2Time    = 2
-	argon2Memory  = 19 * 1024
-	argon2Threads = 1
-	argon2KeyLen  = 32
-	argon2SaltLen = 16
-)
-
-// argon2Limiter bounds concurrent Argon2id computations. Each costs ~19 MiB and
-// the unauthenticated OAuth token endpoint runs one per attempt, so an unbounded
-// flood could exhaust memory. ponytail: a global semaphore sized to GOMAXPROCS;
-// revisit only if credential hashing ever becomes a throughput bottleneck.
-var argon2Limiter = make(chan struct{}, max(2, runtime.GOMAXPROCS(0)))
-
-// hashSecret hashes a credential secret with Argon2id, encoded in PHC string
-// form so the parameters travel with the hash. Argon2id is the current OWASP
-// recommendation, replacing bcrypt for new credential storage.
-func hashSecret(secret string) ([]byte, error) {
-	salt := make([]byte, argon2SaltLen)
-
-	_, err := rand.Read(salt)
-	if err != nil {
-		return nil, fmt.Errorf("generating salt: %w", err)
-	}
-
-	hash := argon2.IDKey([]byte(secret), salt, argon2Time, argon2Memory, argon2Threads, argon2KeyLen)
-
-	encoded := fmt.Sprintf("$argon2id$v=%d$m=%d,t=%d,p=%d$%s$%s",
-		argon2.Version, argon2Memory, argon2Time, argon2Threads,
-		base64.RawStdEncoding.EncodeToString(salt),
-		base64.RawStdEncoding.EncodeToString(hash),
-	)
-
-	return []byte(encoded), nil
-}
-
-// verifySecret reports whether secret matches a hashSecret-encoded hash. It
-// reads the cost parameters from the stored hash and compares in constant time
-// so a mismatch leaks no timing signal.
-func verifySecret(encoded []byte, secret string) error {
-	parts := strings.Split(string(encoded), "$")
-	if len(parts) != 6 || parts[1] != "argon2id" {
-		return errSecretHashMalformed
-	}
-
-	var version int
-	if _, err := fmt.Sscanf(parts[2], "v=%d", &version); err != nil || version != argon2.Version { //nolint:noinlineerr
-		return errSecretHashMalformed
-	}
-
-	var (
-		memory, time uint32
-		threads      uint8
-	)
-
-	if _, err := fmt.Sscanf(parts[3], "m=%d,t=%d,p=%d", &memory, &time, &threads); err != nil { //nolint:noinlineerr
-		return errSecretHashMalformed
-	}
-
-	salt, err := base64.RawStdEncoding.DecodeString(parts[4])
-	if err != nil {
-		return errSecretHashMalformed
-	}
-
-	want, err := base64.RawStdEncoding.DecodeString(parts[5])
-	if err != nil {
-		return errSecretHashMalformed
-	}
-
-	argon2Limiter <- struct{}{}
-	//nolint:gosec // want is a 32-byte hash read back from storage, no overflow
-	got := argon2.IDKey([]byte(secret), salt, time, memory, threads, uint32(len(want)))
-
-	<-argon2Limiter
-
-	if subtle.ConstantTimeCompare(got, want) != 1 {
-		return errSecretMismatch
-	}
-
-	return nil
-}
-
-// CreateOAuthClient creates a new [types.OAuthClient] and returns the plaintext
-// secret (shown ONCE) alongside the stored client. creatorUserID is the user who
-// created it (informational), or nil.
-func (hsdb *HSDatabase) CreateOAuthClient(
-	scopes, tags []string,
-	description string,
-	creatorUserID *uint,
-) (string, *types.OAuthClient, error) {
-	tags, err := validateACLTags(tags)
-	if err != nil {
-		return "", nil, err
-	}
-
-	scopes = set.SetOf(scopes).Slice()
-	slices.Sort(scopes)
-
-	clientID := rands.HexString(oauthClientIDLength)
-	secret := rands.HexString(oauthClientSecretLength)
-	secretStr := types.OAuthClientPrefix + clientID + "-" + secret
-
-	hash, err := hashSecret(secret)
-	if err != nil {
-		return "", nil, err
-	}
-
-	now := time.Now().UTC()
-	client := types.OAuthClient{
-		ClientID:    clientID,
-		SecretHash:  hash,
-		Scopes:      scopes,
-		Tags:        tags,
-		Description: description,
-		UserID:      creatorUserID,
-		CreatedAt:   &now,
-	}
-
-	err = hsdb.Write(func(tx *gorm.DB) error {
-		return tx.Save(&client).Error
-	})
-	if err != nil {
-		return "", nil, fmt.Errorf("saving oauth client: %w", err)
-	}
-
-	return secretStr, &client, nil
-}
-
-// AuthenticateOAuthClient validates a presented client secret and returns the
-// matching, unrevoked [types.OAuthClient]. The client id is derived from the
-// secret (its middle segment), so any separately-supplied client_id is
-// redundant, matching Tailscale, where get-authkey passes a dummy id and the
-// server derives the real one from the secret.
-func (hsdb *HSDatabase) AuthenticateOAuthClient(secretStr string) (*types.OAuthClient, error) {
-	if secretStr == "" {
-		return nil, ErrOAuthClientFailedToParse
-	}
-
-	// Tailscale allows the secret to carry optional ?key=value attributes when
-	// used directly as an auth key; strip them before parsing.
-	secretStr, _, _ = strings.Cut(secretStr, "?")
-
-	_, rest, found := strings.Cut(secretStr, types.OAuthClientPrefix)
-	if !found {
-		return nil, ErrOAuthClientFailedToParse
-	}
-
-	clientID, secret, err := parsePrefixedKey(
-		rest,
-		oauthClientIDLength,
-		oauthClientSecretLength,
-		ErrOAuthClientFailedToParse,
-	)
-	if err != nil {
-		return nil, err
-	}
-
-	var client types.OAuthClient
-	if err := hsdb.DB.First(&client, "client_id = ?", clientID).Error; err != nil { //nolint:noinlineerr
-		return nil, ErrOAuthClientNotFound
-	}
-
-	if err := verifySecret(client.SecretHash, secret); err != nil { //nolint:noinlineerr
-		return nil, fmt.Errorf("invalid oauth client secret: %w", err)
-	}
-
-	if client.Revoked != nil {
-		return nil, ErrOAuthClientRevoked
-	}
-
-	return &client, nil
-}
-
-// GetOAuthClientByClientID returns a [types.OAuthClient] by its public client id.
-func (hsdb *HSDatabase) GetOAuthClientByClientID(clientID string) (*types.OAuthClient, error) {
-	var client types.OAuthClient
-	if result := hsdb.DB.First(&client, "client_id = ?", clientID); result.Error != nil {
-		return nil, result.Error
-	}
-
-	return &client, nil
-}
-
-// ListOAuthClients returns every [types.OAuthClient].
-func (hsdb *HSDatabase) ListOAuthClients() ([]types.OAuthClient, error) {
-	clients := []types.OAuthClient{}
-
-	err := hsdb.DB.Find(&clients).Error
-	if err != nil {
-		return nil, err
-	}
-
-	return clients, nil
-}
-
-// RevokeOAuthClient deletes a client and all access tokens it issued. An unknown
-// client id returns [ErrOAuthClientNotFound], so a repeated DELETE is a clean
-// 404. Unlike pre-auth keys (which soft-revoke for node-registration history), an
-// OAuth client has no such history and is removed outright, matching Tailscale.
-func (hsdb *HSDatabase) RevokeOAuthClient(clientID string) error {
-	return hsdb.Write(func(tx *gorm.DB) error {
-		err := tx.Where("client_id = ?", clientID).
-			Delete(&types.OAuthAccessToken{}).Error
-		if err != nil {
-			return fmt.Errorf("deleting oauth access tokens: %w", err)
-		}
-
-		res := tx.Where("client_id = ?", clientID).Delete(&types.OAuthClient{})
-		if res.Error != nil {
-			return res.Error
-		}
-
-		if res.RowsAffected == 0 {
-			return ErrOAuthClientNotFound
-		}
-
-		return nil
-	})
-}
-
-// MintAccessToken stores a new [types.OAuthAccessToken] for clientID with the
-// given (already narrowed) scopes/tags and expiration, returning the plaintext
-// token (shown ONCE).
-func (hsdb *HSDatabase) MintAccessToken(
-	clientID string,
-	scopes, tags []string,
-	expiration *time.Time,
-) (string, *types.OAuthAccessToken, error) {
-	prefix := rands.HexString(accessTokenPrefixLength)
-	secret := rands.HexString(accessTokenSecretLength)
-	tokenStr := types.AccessTokenPrefix + prefix + "-" + secret
-
-	hash, err := hashSecret(secret)
-	if err != nil {
-		return "", nil, err
-	}
-
-	now := time.Now().UTC()
-	token := types.OAuthAccessToken{
-		Prefix:     prefix,
-		Hash:       hash,
-		ClientID:   clientID,
-		Scopes:     scopes,
-		Tags:       tags,
-		Expiration: expiration,
-		CreatedAt:  &now,
-	}
-
-	// Mint inside a transaction that re-checks the client still exists and is
-	// not revoked, so a mint cannot complete against a client being deleted.
-	err = hsdb.Write(func(tx *gorm.DB) error {
-		var client types.OAuthClient
-
-		err := tx.First(&client, "client_id = ?", clientID).Error
-		if err != nil {
-			return ErrOAuthClientNotFound
-		}
-
-		if client.Revoked != nil {
-			return ErrOAuthClientRevoked
-		}
-
-		return tx.Save(&token).Error
-	})
-	if err != nil {
-		return "", nil, fmt.Errorf("saving oauth access token: %w", err)
-	}
-
-	return tokenStr, &token, nil
-}
-
-// AuthenticateAccessToken validates a presented bearer token and returns the
-// matching, unexpired [types.OAuthAccessToken] (carrying its granted scopes and
-// tags). A non-nil error means the token is missing, malformed, or expired.
-func (hsdb *HSDatabase) AuthenticateAccessToken(tokenStr string) (*types.OAuthAccessToken, error) {
-	if tokenStr == "" {
-		return nil, ErrAccessTokenFailedToParse
-	}
-
-	_, rest, found := strings.Cut(tokenStr, types.AccessTokenPrefix)
-	if !found {
-		return nil, ErrAccessTokenFailedToParse
-	}
-
-	prefix, secret, err := parsePrefixedKey(
-		rest,
-		accessTokenPrefixLength,
-		accessTokenSecretLength,
-		ErrAccessTokenFailedToParse,
-	)
-	if err != nil {
-		return nil, err
-	}
-
-	var token types.OAuthAccessToken
-	if err := hsdb.DB.First(&token, "prefix = ?", prefix).Error; err != nil { //nolint:noinlineerr
-		return nil, ErrAccessTokenNotFound
-	}
-
-	if err := verifySecret(token.Hash, secret); err != nil { //nolint:noinlineerr
-		return nil, fmt.Errorf("invalid oauth access token: %w", err)
-	}
-
-	if token.Expiration != nil && token.Expiration.Before(time.Now()) {
-		return nil, ErrAccessTokenExpired
-	}
-
-	// Bind validity to the issuing client: a token whose client has been
-	// revoked or deleted is rejected. This closes a mint/revoke race (where a
-	// token could be inserted after the client's tokens were purged) and any
-	// orphan left by manual deletion or a future soft-revoke path.
-	var client types.OAuthClient
-	if err := hsdb.DB.First(&client, "client_id = ?", token.ClientID).Error; err != nil { //nolint:noinlineerr
-		return nil, ErrAccessTokenClientRevoked
-	}
-
-	if client.Revoked != nil {
-		return nil, ErrAccessTokenClientRevoked
-	}
-
-	return &token, nil
-}
-
-// DeleteExpiredAccessTokens hard-deletes every access token that expired before
-// cutoff, returning how many were removed. Auth-time checks already reject
-// expired tokens; the hourly reaper (see app.go) calls this only to keep the
-// table from growing unbounded.
-func (hsdb *HSDatabase) DeleteExpiredAccessTokens(cutoff time.Time) (int64, error) {
-	res := hsdb.DB.Where("expiration IS NOT NULL AND expiration < ?", cutoff).
-		Delete(&types.OAuthAccessToken{})
-
-	return res.RowsAffected, res.Error
-}
diff --git a/hscontrol/db/oauth_test.go b/hscontrol/db/oauth_test.go
deleted file mode 100644
index 1bf8c72d4..000000000
--- a/hscontrol/db/oauth_test.go
+++ /dev/null
@@ -1,204 +0,0 @@
-package db
-
-import (
-	"strings"
-	"sync"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestVerifySecretConcurrent runs more concurrent verifications than the Argon2
-// concurrency semaphore admits, asserting the limiter releases correctly (no
-// deadlock) and stays correct under contention. Run with -race.
-func TestVerifySecretConcurrent(t *testing.T) {
-	hash, err := hashSecret("s3cr3t")
-	require.NoError(t, err)
-
-	const n = 64
-
-	var wg sync.WaitGroup
-
-	errs := make([]error, n)
-
-	for i := range n {
-		wg.Add(1)
-
-		go func(i int) {
-			defer wg.Done()
-
-			if i%2 == 0 {
-				errs[i] = verifySecret(hash, "s3cr3t")
-			} else {
-				errs[i] = verifySecret(hash, "wrong")
-			}
-		}(i)
-	}
-
-	wg.Wait()
-
-	for i, e := range errs {
-		if i%2 == 0 {
-			assert.NoError(t, e, "correct secret must verify")
-		} else {
-			assert.Error(t, e, "wrong secret must fail")
-		}
-	}
-}
-
-func TestOAuthClientCreateAndAuthenticate(t *testing.T) {
-	db, err := newSQLiteTestDB()
-	require.NoError(t, err)
-
-	secret, client, err := db.CreateOAuthClient(
-		[]string{"auth_keys", "devices:core"},
-		[]string{"tag:ci"},
-		"my client",
-		nil,
-	)
-	require.NoError(t, err)
-	require.NotNil(t, client)
-
-	// Secret carries the public client id as its middle segment, so it can be
-	// derived from the secret alone (the Tailscale get-authkey trick).
-	assert.True(t, strings.HasPrefix(secret, "hskey-client-"+client.ClientID+"-"))
-	// Scopes/tags are deduplicated and sorted for stable storage.
-	assert.Equal(t, []string{"auth_keys", "devices:core"}, client.Scopes)
-	assert.Equal(t, []string{"tag:ci"}, client.Tags)
-	// Only the Argon2id hash is stored, never the plaintext.
-	assert.NotEmpty(t, client.SecretHash)
-	assert.True(t, strings.HasPrefix(string(client.SecretHash), "$argon2id$"))
-
-	// The secret authenticates, deriving the client id from the secret itself.
-	got, err := db.AuthenticateOAuthClient(secret)
-	require.NoError(t, err)
-	assert.Equal(t, client.ClientID, got.ClientID)
-
-	// A truncated/garbage secret does not.
-	_, err = db.AuthenticateOAuthClient("hskey-client-deadbeef-nope")
-	require.Error(t, err)
-
-	// Wrong secret for a real client id is rejected by the constant-time compare.
-	_, err = db.AuthenticateOAuthClient("hskey-client-" + client.ClientID + "-" + strings.Repeat("0", 64))
-	require.Error(t, err)
-}
-
-func TestHashSecretRoundTrip(t *testing.T) {
-	const secret = "a-high-entropy-credential-secret"
-
-	encoded, err := hashSecret(secret)
-	require.NoError(t, err)
-	assert.True(t, strings.HasPrefix(string(encoded), "$argon2id$v="))
-
-	// The same secret hashes to a different value each time (random salt) yet
-	// still verifies.
-	encoded2, err := hashSecret(secret)
-	require.NoError(t, err)
-	assert.NotEqual(t, encoded, encoded2)
-
-	require.NoError(t, verifySecret(encoded, secret))
-	require.ErrorIs(t, verifySecret(encoded, "wrong-secret"), errSecretMismatch)
-	require.ErrorIs(t, verifySecret([]byte("not-a-phc-string"), secret), errSecretHashMalformed)
-}
-
-func TestOAuthClientRevoke(t *testing.T) {
-	db, err := newSQLiteTestDB()
-	require.NoError(t, err)
-
-	secret, client, err := db.CreateOAuthClient([]string{"auth_keys"}, []string{"tag:ci"}, "", nil)
-	require.NoError(t, err)
-
-	// A token minted by the client survives only until the client is revoked.
-	_, _, err = db.MintAccessToken(client.ClientID, client.Scopes, client.Tags, nil)
-	require.NoError(t, err)
-
-	require.NoError(t, db.RevokeOAuthClient(client.ClientID))
-
-	// The client no longer authenticates and a repeated revoke is a clean 404.
-	_, err = db.AuthenticateOAuthClient(secret)
-	require.Error(t, err)
-	require.ErrorIs(t, db.RevokeOAuthClient(client.ClientID), ErrOAuthClientNotFound)
-}
-
-func TestOAuthAccessTokenMintAuthenticateExpire(t *testing.T) {
-	db, err := newSQLiteTestDB()
-	require.NoError(t, err)
-
-	_, client, err := db.CreateOAuthClient([]string{"auth_keys"}, []string{"tag:ci"}, "", nil)
-	require.NoError(t, err)
-
-	future := time.Now().Add(time.Hour)
-	tokenStr, token, err := db.MintAccessToken(
-		client.ClientID,
-		[]string{"auth_keys"},
-		[]string{"tag:ci"},
-		&future,
-	)
-	require.NoError(t, err)
-	assert.True(t, strings.HasPrefix(tokenStr, "hskey-oauthtok-"))
-
-	got, err := db.AuthenticateAccessToken(tokenStr)
-	require.NoError(t, err)
-	assert.Equal(t, client.ClientID, got.ClientID)
-	assert.Equal(t, []string{"auth_keys"}, got.Scopes)
-	assert.Equal(t, []string{"tag:ci"}, got.Tags)
-
-	// An expired token is rejected even though the row still exists.
-	past := time.Now().Add(-time.Hour)
-	expiredStr, _, err := db.MintAccessToken(client.ClientID, nil, nil, &past)
-	require.NoError(t, err)
-	_, err = db.AuthenticateAccessToken(expiredStr)
-	require.ErrorIs(t, err, ErrAccessTokenExpired)
-
-	// The reaper deletes the expired row; the live token is untouched.
-	n, err := db.DeleteExpiredAccessTokens(time.Now())
-	require.NoError(t, err)
-	assert.Equal(t, int64(1), n)
-
-	_ = token
-
-	_, err = db.AuthenticateAccessToken(tokenStr)
-	require.NoError(t, err)
-}
-
-// TestAccessTokenRejectedWhenClientGone asserts a token whose issuing client no
-// longer exists (orphaned by a delete/revoke race) is rejected, even though the
-// token row itself is valid and unexpired.
-func TestAccessTokenRejectedWhenClientGone(t *testing.T) {
-	db, err := newSQLiteTestDB()
-	require.NoError(t, err)
-
-	_, client, err := db.CreateOAuthClient([]string{"auth_keys"}, []string{"tag:ci"}, "", nil)
-	require.NoError(t, err)
-
-	future := time.Now().Add(time.Hour)
-	tokenStr, _, err := db.MintAccessToken(client.ClientID, []string{"auth_keys"}, []string{"tag:ci"}, &future)
-	require.NoError(t, err)
-
-	_, err = db.AuthenticateAccessToken(tokenStr)
-	require.NoError(t, err)
-
-	// Delete only the client row, leaving the token orphaned (the state a
-	// mint/revoke race or manual deletion would produce).
-	require.NoError(t, db.DB.Where("client_id = ?", client.ClientID).Delete(&types.OAuthClient{}).Error)
-
-	_, err = db.AuthenticateAccessToken(tokenStr)
-	require.ErrorIs(t, err, ErrAccessTokenClientRevoked)
-
-	// A soft-revoked client (row present, Revoked set) is likewise rejected.
-	_, client2, err := db.CreateOAuthClient([]string{"auth_keys"}, []string{"tag:ci"}, "", nil)
-	require.NoError(t, err)
-
-	tokenStr2, _, err := db.MintAccessToken(client2.ClientID, []string{"auth_keys"}, []string{"tag:ci"}, &future)
-	require.NoError(t, err)
-
-	now := time.Now()
-	require.NoError(t, db.DB.Model(&types.OAuthClient{}).
-		Where("client_id = ?", client2.ClientID).Update("revoked", now).Error)
-
-	_, err = db.AuthenticateAccessToken(tokenStr2)
-	require.ErrorIs(t, err, ErrAccessTokenClientRevoked)
-}
diff --git a/hscontrol/db/policy.go b/hscontrol/db/policy.go
index 3c60534d6..83bb48122 100644
--- a/hscontrol/db/policy.go
+++ b/hscontrol/db/policy.go
@@ -31,7 +31,7 @@ func (hsdb *HSDatabase) GetPolicy() (*types.Policy, error) {
 }
 
 // GetPolicy returns the latest policy from the database.
-// This standalone function can be used in contexts where [HSDatabase] is not available,
+// This standalone function can be used in contexts where HSDatabase is not available,
 // such as during migrations.
 func GetPolicy(tx *gorm.DB) (*types.Policy, error) {
 	var p types.Policy
@@ -55,7 +55,7 @@ func GetPolicy(tx *gorm.DB) (*types.Policy, error) {
 
 // PolicyBytes loads policy configuration from file or database based on the configured mode.
 // Returns nil if no policy is configured, which is valid.
-// This standalone function can be used in contexts where [HSDatabase] is not available,
+// This standalone function can be used in contexts where HSDatabase is not available,
 // such as during migrations.
 func PolicyBytes(tx *gorm.DB, cfg *types.Config) ([]byte, error) {
 	switch cfg.Policy.Mode {
diff --git a/hscontrol/db/preauth_keys.go b/hscontrol/db/preauth_keys.go
index e839ff507..d2fb0265a 100644
--- a/hscontrol/db/preauth_keys.go
+++ b/hscontrol/db/preauth_keys.go
@@ -8,43 +8,20 @@ import (
 	"time"
 
 	"github.com/juanfont/headscale/hscontrol/types"
+	"github.com/juanfont/headscale/hscontrol/util"
 	"golang.org/x/crypto/bcrypt"
 	"gorm.io/gorm"
-	"tailscale.com/util/rands"
 	"tailscale.com/util/set"
 )
 
 var (
-	// ErrPreAuthKeyNotFound wraps gorm.ErrRecordNotFound so an unknown or
-	// deleted key is treated as a missing record by callers, which the
-	// registration handler maps to a 401 rather than a raw server error.
-	ErrPreAuthKeyNotFound          = fmt.Errorf("auth-key not found: %w", gorm.ErrRecordNotFound)
+	ErrPreAuthKeyNotFound          = errors.New("auth-key not found")
 	ErrPreAuthKeyExpired           = errors.New("auth-key expired")
 	ErrSingleUseAuthKeyHasBeenUsed = errors.New("auth-key has already been used")
 	ErrUserMismatch                = errors.New("user mismatch")
 	ErrPreAuthKeyACLTagInvalid     = errors.New("auth-key tag is invalid")
 )
 
-// validateACLTags deduplicates, sorts, and checks that every tag carries the
-// "tag:" prefix. Shared by the pre-auth-key and OAuth credential paths so both
-// enforce the same tag shape.
-func validateACLTags(tags []string) ([]string, error) {
-	tags = set.SetOf(tags).Slice()
-	slices.Sort(tags)
-
-	for _, tag := range tags {
-		if !strings.HasPrefix(tag, "tag:") {
-			return nil, fmt.Errorf(
-				"%w: '%s' did not begin with 'tag:'",
-				ErrPreAuthKeyACLTagInvalid,
-				tag,
-			)
-		}
-	}
-
-	return tags, nil
-}
-
 func (hsdb *HSDatabase) CreatePreAuthKey(
 	uid *types.UserID,
 	reusable bool,
@@ -63,7 +40,7 @@ const (
 	authKeyLength       = 64
 )
 
-// CreatePreAuthKey creates a new [types.PreAuthKey] in a user, and returns it.
+// CreatePreAuthKey creates a new PreAuthKey in a user, and returns it.
 // The uid parameter can be nil for system-created tagged keys.
 // For tagged keys, uid tracks "created by" (who created the key).
 // For user-owned keys, uid tracks the node owner.
@@ -96,16 +73,51 @@ func CreatePreAuthKey(
 		userID = &user.ID
 	}
 
-	aclTags, err := validateACLTags(aclTags)
-	if err != nil {
-		return nil, err
+	// Remove duplicates and sort for consistency
+	aclTags = set.SetOf(aclTags).Slice()
+	slices.Sort(aclTags)
+
+	// TODO(kradalby): factor out and create a reusable tag validation,
+	// check if there is one in Tailscale's lib.
+	for _, tag := range aclTags {
+		if !strings.HasPrefix(tag, "tag:") {
+			return nil, fmt.Errorf(
+				"%w: '%s' did not begin with 'tag:'",
+				ErrPreAuthKeyACLTagInvalid,
+				tag,
+			)
+		}
 	}
 
 	now := time.Now().UTC()
 
-	prefix := rands.HexString(authKeyPrefixLength)
+	prefix, err := util.GenerateRandomStringURLSafe(authKeyPrefixLength)
+	if err != nil {
+		return nil, err
+	}
 
-	toBeHashed := rands.HexString(authKeyLength)
+	// Validate generated prefix (should always be valid, but be defensive)
+	if len(prefix) != authKeyPrefixLength {
+		return nil, fmt.Errorf("%w: generated prefix has invalid length: expected %d, got %d", ErrPreAuthKeyFailedToParse, authKeyPrefixLength, len(prefix))
+	}
+
+	if !isValidBase64URLSafe(prefix) {
+		return nil, fmt.Errorf("%w: generated prefix contains invalid characters", ErrPreAuthKeyFailedToParse)
+	}
+
+	toBeHashed, err := util.GenerateRandomStringURLSafe(authKeyLength)
+	if err != nil {
+		return nil, err
+	}
+
+	// Validate generated hash (should always be valid, but be defensive)
+	if len(toBeHashed) != authKeyLength {
+		return nil, fmt.Errorf("%w: generated hash has invalid length: expected %d, got %d", ErrPreAuthKeyFailedToParse, authKeyLength, len(toBeHashed))
+	}
+
+	if !isValidBase64URLSafe(toBeHashed) {
+		return nil, fmt.Errorf("%w: generated hash contains invalid characters", ErrPreAuthKeyFailedToParse)
+	}
 
 	keyStr := authKeyPrefix + prefix + "-" + toBeHashed
 
@@ -142,20 +154,11 @@ func CreatePreAuthKey(
 	}, nil
 }
 
-// SetPreAuthKeyDescription sets the free-text description on a pre-auth key.
-// The v2 keys API sets it after creation rather than threading it through the
-// many-armed CreatePreAuthKey signature shared by every other caller.
-func (hsdb *HSDatabase) SetPreAuthKeyDescription(id uint64, description string) error {
-	return hsdb.DB.Model(&types.PreAuthKey{}).
-		Where("id = ?", id).
-		Update("description", description).Error
-}
-
 func (hsdb *HSDatabase) ListPreAuthKeys() ([]types.PreAuthKey, error) {
 	return Read(hsdb.DB, ListPreAuthKeys)
 }
 
-// ListPreAuthKeys returns all [types.PreAuthKey] values in the database.
+// ListPreAuthKeys returns all PreAuthKeys in the database.
 func ListPreAuthKeys(tx *gorm.DB) ([]types.PreAuthKey, error) {
 	var keys []types.PreAuthKey
 
@@ -167,7 +170,7 @@ func ListPreAuthKeys(tx *gorm.DB) ([]types.PreAuthKey, error) {
 	return keys, nil
 }
 
-// ListPreAuthKeysByUser returns all [types.PreAuthKey] values belonging to a specific user.
+// ListPreAuthKeysByUser returns all PreAuthKeys belonging to a specific user.
 func ListPreAuthKeysByUser(tx *gorm.DB, uid types.UserID) ([]types.PreAuthKey, error) {
 	var keys []types.PreAuthKey
 
@@ -205,18 +208,60 @@ func findAuthKey(tx *gorm.DB, keyStr string) (*types.PreAuthKey, error) {
 	}
 
 	// New format: hskey-auth-{12-char-prefix}-{64-char-hash}
-	prefix, hash, err := parsePrefixedKey(
-		prefixAndHash,
-		authKeyPrefixLength,
-		authKeyLength,
-		ErrPreAuthKeyFailedToParse,
-	)
-	if err != nil {
-		return nil, err
+	// Expected minimum length: 12 (prefix) + 1 (separator) + 64 (hash) = 77
+	const expectedMinLength = authKeyPrefixLength + 1 + authKeyLength
+	if len(prefixAndHash) < expectedMinLength {
+		return nil, fmt.Errorf(
+			"%w: key too short, expected at least %d chars after prefix, got %d",
+			ErrPreAuthKeyFailedToParse,
+			expectedMinLength,
+			len(prefixAndHash),
+		)
+	}
+
+	// Use fixed-length parsing instead of separator-based to handle dashes in base64 URL-safe
+	prefix := prefixAndHash[:authKeyPrefixLength]
+
+	// Validate separator at expected position
+	if prefixAndHash[authKeyPrefixLength] != '-' {
+		return nil, fmt.Errorf(
+			"%w: expected separator '-' at position %d, got '%c'",
+			ErrPreAuthKeyFailedToParse,
+			authKeyPrefixLength,
+			prefixAndHash[authKeyPrefixLength],
+		)
+	}
+
+	hash := prefixAndHash[authKeyPrefixLength+1:]
+
+	// Validate hash length
+	if len(hash) != authKeyLength {
+		return nil, fmt.Errorf(
+			"%w: hash length mismatch, expected %d chars, got %d",
+			ErrPreAuthKeyFailedToParse,
+			authKeyLength,
+			len(hash),
+		)
+	}
+
+	// Validate prefix contains only base64 URL-safe characters
+	if !isValidBase64URLSafe(prefix) {
+		return nil, fmt.Errorf(
+			"%w: prefix contains invalid characters (expected base64 URL-safe: A-Za-z0-9_-)",
+			ErrPreAuthKeyFailedToParse,
+		)
+	}
+
+	// Validate hash contains only base64 URL-safe characters
+	if !isValidBase64URLSafe(hash) {
+		return nil, fmt.Errorf(
+			"%w: hash contains invalid characters (expected base64 URL-safe: A-Za-z0-9_-)",
+			ErrPreAuthKeyFailedToParse,
+		)
 	}
 
 	// Look up key by prefix
-	err = tx.Preload("User").First(&pak, "prefix = ?", prefix).Error
+	err := tx.Preload("User").First(&pak, "prefix = ?", prefix).Error
 	if err != nil {
 		return nil, ErrPreAuthKeyNotFound
 	}
@@ -230,105 +275,28 @@ func findAuthKey(tx *gorm.DB, keyStr string) (*types.PreAuthKey, error) {
 	return &pak, nil
 }
 
-// parsePrefixedKey splits the prefix-and-secret portion of a new-format key
-// (the part after the "hskey-*-" prefix) into its fixed-length prefix and
-// secret components, validating the length, separator position, and that both
-// components are base64 URL-safe. Fixed-length parsing is used instead of
-// separator-based to handle dashes in base64 URL-safe characters.
-func parsePrefixedKey(
-	prefixAndSecret string,
-	//nolint:unparam // kept explicit though every credential kind uses a 12-char prefix and 64-char secret today
-	prefixLen, secretLen int,
-	parseErr error,
-) (string, string, error) {
-	expectedMinLength := prefixLen + 1 + secretLen
-	if len(prefixAndSecret) < expectedMinLength {
-		return "", "", fmt.Errorf(
-			"%w: key too short, expected at least %d chars after prefix, got %d",
-			parseErr,
-			expectedMinLength,
-			len(prefixAndSecret),
-		)
-	}
-
-	prefix := prefixAndSecret[:prefixLen]
-
-	// Validate separator at expected position
-	if prefixAndSecret[prefixLen] != '-' {
-		return "", "", fmt.Errorf(
-			"%w: expected separator '-' at position %d, got '%c'",
-			parseErr,
-			prefixLen,
-			prefixAndSecret[prefixLen],
-		)
-	}
-
-	secret := prefixAndSecret[prefixLen+1:]
-
-	// Validate secret length
-	if len(secret) != secretLen {
-		return "", "", fmt.Errorf(
-			"%w: secret length mismatch, expected %d chars, got %d",
-			parseErr,
-			secretLen,
-			len(secret),
-		)
-	}
-
-	// Validate prefix contains only base64 URL-safe characters
-	if !isValidBase64URLSafe(prefix) {
-		return "", "", fmt.Errorf(
-			"%w: prefix contains invalid characters (expected base64 URL-safe: A-Za-z0-9_-)",
-			parseErr,
-		)
-	}
-
-	// Validate secret contains only base64 URL-safe characters
-	if !isValidBase64URLSafe(secret) {
-		return "", "", fmt.Errorf(
-			"%w: secret contains invalid characters (expected base64 URL-safe: A-Za-z0-9_-)",
-			parseErr,
-		)
-	}
-
-	return prefix, secret, nil
-}
-
-// isValidBase64URLSafe reports whether s contains only base64 URL-safe
-// characters (A-Za-z0-9-_). Key material is now generated as hex, a subset of
-// this alphabet, so this accepts both current hex keys and any legacy keys
-// still stored in the database.
+// isValidBase64URLSafe checks if a string contains only base64 URL-safe characters.
 func isValidBase64URLSafe(s string) bool {
-	return !strings.ContainsFunc(s, func(c rune) bool {
-		return (c < 'A' || c > 'Z') && (c < 'a' || c > 'z') && (c < '0' || c > '9') && c != '-' && c != '_'
-	})
+	for _, c := range s {
+		if (c < 'A' || c > 'Z') && (c < 'a' || c > 'z') && (c < '0' || c > '9') && c != '-' && c != '_' {
+			return false
+		}
+	}
+
+	return true
 }
 
 func (hsdb *HSDatabase) GetPreAuthKey(key string) (*types.PreAuthKey, error) {
 	return GetPreAuthKey(hsdb.DB, key)
 }
 
-// GetPreAuthKey returns a [types.PreAuthKey] for a given key. The caller is responsible
+// GetPreAuthKey returns a PreAuthKey for a given key. The caller is responsible
 // for checking if the key is usable (expired or used).
 func GetPreAuthKey(tx *gorm.DB, key string) (*types.PreAuthKey, error) {
 	return findAuthKey(tx, key)
 }
 
-// GetPreAuthKeyByID returns a [types.PreAuthKey] by its primary key, with the
-// owning user preloaded.
-func (hsdb *HSDatabase) GetPreAuthKeyByID(id uint64) (*types.PreAuthKey, error) {
-	pak := types.PreAuthKey{}
-	// Explicit primary-key clause: a struct condition would drop a zero-valued
-	// ID, making the lookup unconditional and returning the first row instead
-	// of not-found.
-	if result := hsdb.DB.Preload("User").First(&pak, "id = ?", id); result.Error != nil {
-		return nil, result.Error
-	}
-
-	return &pak, nil
-}
-
-// DestroyPreAuthKey destroys a preauthkey. Returns error if the [types.PreAuthKey]
+// DestroyPreAuthKey destroys a preauthkey. Returns error if the PreAuthKey
 // does not exist. This also clears the auth_key_id on any nodes that reference
 // this key.
 func DestroyPreAuthKey(tx *gorm.DB, id uint64) error {
@@ -342,13 +310,9 @@ func DestroyPreAuthKey(tx *gorm.DB, id uint64) error {
 		}
 
 		// Then delete the pre-auth key
-		res := tx.Unscoped().Delete(&types.PreAuthKey{}, id)
-		if res.Error != nil {
-			return res.Error
-		}
-
-		if res.RowsAffected == 0 {
-			return ErrPreAuthKeyNotFound
+		err = tx.Unscoped().Delete(&types.PreAuthKey{}, id).Error
+		if err != nil {
+			return err
 		}
 
 		return nil
@@ -367,67 +331,10 @@ func (hsdb *HSDatabase) DeletePreAuthKey(id uint64) error {
 	})
 }
 
-func (hsdb *HSDatabase) RevokePreAuthKey(id uint64) error {
-	return hsdb.Write(func(tx *gorm.DB) error {
-		return RevokePreAuthKey(tx, id)
-	})
-}
-
-// RevokePreAuthKey soft-revokes a key (the v2 API's DELETE): the row is kept and
-// stays retrievable with its invalid flag set, but the key can no longer
-// authorize nodes. The background collector hard-deletes it after the retention
-// window. An already-revoked or unknown id returns [ErrPreAuthKeyNotFound], so a
-// repeated DELETE is a clean 404.
-func RevokePreAuthKey(tx *gorm.DB, id uint64) error {
-	res := tx.Model(&types.PreAuthKey{}).
-		Where("id = ? AND revoked IS NULL", id).
-		Update("revoked", time.Now())
-	if res.Error != nil {
-		return res.Error
-	}
-
-	if res.RowsAffected == 0 {
-		return ErrPreAuthKeyNotFound
-	}
-
-	return nil
-}
-
-// DestroyRevokedPreAuthKeysBefore hard-deletes every key revoked before cutoff,
-// returning how many were removed. The background collector calls this to reap
-// soft-revoked keys after the retention window.
-func (hsdb *HSDatabase) DestroyRevokedPreAuthKeysBefore(cutoff time.Time) (int, error) {
-	var count int
-
-	err := hsdb.Write(func(tx *gorm.DB) error {
-		var ids []uint64
-
-		err := tx.Model(&types.PreAuthKey{}).
-			Where("revoked IS NOT NULL AND revoked < ?", cutoff).
-			Pluck("id", &ids).Error
-		if err != nil {
-			return err
-		}
-
-		for _, id := range ids {
-			err := DestroyPreAuthKey(tx, id)
-			if err != nil {
-				return err
-			}
-		}
-
-		count = len(ids)
-
-		return nil
-	})
-
-	return count, err
-}
-
-// UsePreAuthKey atomically marks a [types.PreAuthKey] as used. The UPDATE is
+// UsePreAuthKey atomically marks a PreAuthKey as used. The UPDATE is
 // guarded by `used = false` so two concurrent registrations racing for
 // the same single-use key cannot both succeed: the first commits and
-// the second returns [types.PAKError]("authkey already used"). Without the
+// the second returns PAKError("authkey already used"). Without the
 // guard the previous code (Update("used", true) with no WHERE) would
 // silently let both transactions claim the key.
 func UsePreAuthKey(tx *gorm.DB, k *types.PreAuthKey) error {
@@ -447,19 +354,8 @@ func UsePreAuthKey(tx *gorm.DB, k *types.PreAuthKey) error {
 	return nil
 }
 
-// ExpirePreAuthKey marks a [types.PreAuthKey] as expired, returning
-// [ErrPreAuthKeyNotFound] rather than succeeding silently when no such key exists.
+// ExpirePreAuthKey marks a PreAuthKey as expired.
 func ExpirePreAuthKey(tx *gorm.DB, id uint64) error {
 	now := time.Now()
-
-	res := tx.Model(&types.PreAuthKey{}).Where("id = ?", id).Update("expiration", now)
-	if res.Error != nil {
-		return res.Error
-	}
-
-	if res.RowsAffected == 0 {
-		return ErrPreAuthKeyNotFound
-	}
-
-	return nil
+	return tx.Model(&types.PreAuthKey{}).Where("id = ?", id).Update("expiration", now).Error
 }
diff --git a/hscontrol/db/preauth_keys_test.go b/hscontrol/db/preauth_keys_test.go
index 5835758f3..25bec17e9 100644
--- a/hscontrol/db/preauth_keys_test.go
+++ b/hscontrol/db/preauth_keys_test.go
@@ -96,7 +96,7 @@ func TestPreAuthKeyACLTags(t *testing.T) {
 				require.NoError(t, err)
 				require.Len(t, listedPaks, 1)
 
-				gotTags := slices.Clone(listedPaks[0].Tags)
+				gotTags := listedPaks[0].Proto().GetAclTags()
 				slices.Sort(gotTags)
 				assert.Equal(t, expectedTags, gotTags)
 			},
@@ -487,16 +487,3 @@ func TestUsePreAuthKeyAtomicCAS(t *testing.T) {
 		"second UsePreAuthKey error must be a PAKError, got: %v", err)
 	assert.Equal(t, "authkey already used", pakErr.Error())
 }
-
-// TestGetPreAuthKeyUnknownMapsToRecordNotFound ensures an unknown (or deleted)
-// pre-auth key resolves to a record-not-found error, which the registration
-// handler maps to a 401 rather than a raw server error.
-func TestGetPreAuthKeyUnknownMapsToRecordNotFound(t *testing.T) {
-	db, err := newSQLiteTestDB()
-	require.NoError(t, err)
-
-	_, err = db.GetPreAuthKey("nonexistent-key")
-	require.Error(t, err)
-	require.ErrorIs(t, err, gorm.ErrRecordNotFound,
-		"unknown pre-auth key must map to record-not-found (handled as 401)")
-}
diff --git a/hscontrol/db/randomnext_test.go b/hscontrol/db/randomnext_test.go
deleted file mode 100644
index d20ecf416..000000000
--- a/hscontrol/db/randomnext_test.go
+++ /dev/null
@@ -1,35 +0,0 @@
-package db
-
-import (
-	"net/netip"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestRandomNextSingleAddressPrefix ensures a single-address prefix (/32 or
-// /128) does not panic. from == to makes the random range zero, and rand.Int
-// panics on a non-positive bound; the sole address must be returned instead.
-func TestRandomNextSingleAddressPrefix(t *testing.T) {
-	for _, p := range []string{"100.64.0.1/32", "fd7a:115c:a1e0::1/128"} {
-		pfx := netip.MustParsePrefix(p)
-		require.NotPanics(t, func() {
-			ip, err := randomNext(pfx)
-			require.NoError(t, err)
-			assert.Equal(t, pfx.Addr(), ip)
-		}, "prefix %s", p)
-	}
-}
-
-// TestRandomNextLeadingZeroBytes ensures prefixes whose addresses have a zero
-// high byte allocate successfully. big.Int.Bytes() strips leading zeros, so the
-// drawn value would be too short for netip.AddrFromSlice without padding.
-func TestRandomNextLeadingZeroBytes(t *testing.T) {
-	pfx := netip.MustParsePrefix("0.0.0.0/16")
-	for range 100 {
-		ip, err := randomNext(pfx)
-		require.NoError(t, err)
-		assert.True(t, pfx.Contains(ip), "ip %s not in %s", ip, pfx)
-	}
-}
diff --git a/hscontrol/db/schema.sql b/hscontrol/db/schema.sql
index 59b601601..781446c00 100644
--- a/hscontrol/db/schema.sql
+++ b/hscontrol/db/schema.sql
@@ -44,13 +44,11 @@ CREATE TABLE pre_auth_keys(
   prefix text,
   hash blob,
   user_id integer,
-  description text,
   reusable numeric,
   ephemeral numeric DEFAULT false,
   used numeric DEFAULT false,
   tags text,
   expiration datetime,
-  revoked datetime,
 
   created_at datetime,
 
@@ -62,7 +60,6 @@ CREATE TABLE api_keys(
   id integer PRIMARY KEY AUTOINCREMENT,
   prefix text,
   hash blob,
-  user_id integer,
   expiration datetime,
   last_seen datetime,
 
@@ -70,36 +67,6 @@ CREATE TABLE api_keys(
 );
 CREATE UNIQUE INDEX idx_api_keys_prefix ON api_keys(prefix);
 
--- OAuth 2.0 client-credentials clients for the v2 API. client_id is public and
--- embedded in the secret (hskey-client-<client_id>-<secret>); only the bcrypt
--- hash of the secret is stored. Mirrors the api_keys security model.
-CREATE TABLE oauth_clients(
-  id integer PRIMARY KEY AUTOINCREMENT,
-  client_id text,
-  secret_hash blob,
-  scopes text,
-  tags text,
-  description text,
-  user_id integer,
-  created_at datetime,
-  revoked datetime
-);
-CREATE UNIQUE INDEX idx_oauth_clients_client_id ON oauth_clients(client_id);
-
--- Short-lived bearer access tokens minted by an oauth_client. Stored as a bcrypt
--- hash of the secret, looked up by prefix.
-CREATE TABLE oauth_access_tokens(
-  id integer PRIMARY KEY AUTOINCREMENT,
-  prefix text,
-  hash blob,
-  client_id text,
-  scopes text,
-  tags text,
-  expiration datetime,
-  created_at datetime
-);
-CREATE UNIQUE INDEX idx_oauth_access_tokens_prefix ON oauth_access_tokens(prefix);
-
 CREATE TABLE nodes(
   id integer PRIMARY KEY AUTOINCREMENT,
   machine_key text,
diff --git a/hscontrol/db/sqliteconfig/config.go b/hscontrol/db/sqliteconfig/config.go
index 9d818ae1b..b4c807955 100644
--- a/hscontrol/db/sqliteconfig/config.go
+++ b/hscontrol/db/sqliteconfig/config.go
@@ -5,7 +5,6 @@ package sqliteconfig
 import (
 	"errors"
 	"fmt"
-	"slices"
 	"strings"
 )
 
@@ -91,15 +90,20 @@ const (
 	JournalModeOff JournalMode = "OFF"
 )
 
-// validJournalModes lists the accepted JournalMode values.
-var validJournalModes = []JournalMode{
-	JournalModeWAL, JournalModeDelete, JournalModeTruncate,
-	JournalModePersist, JournalModeMemory, JournalModeOff,
-}
-
 // IsValid returns true if the JournalMode is valid.
 func (j JournalMode) IsValid() bool {
-	return slices.Contains(validJournalModes, j)
+	switch j {
+	case JournalModeWAL, JournalModeDelete, JournalModeTruncate,
+		JournalModePersist, JournalModeMemory, JournalModeOff:
+		return true
+	default:
+		return false
+	}
+}
+
+// String returns the string representation.
+func (j JournalMode) String() string {
+	return string(j)
 }
 
 // AutoVacuum represents SQLite auto_vacuum pragma values.
@@ -143,14 +147,19 @@ const (
 	AutoVacuumIncremental AutoVacuum = "INCREMENTAL"
 )
 
-// validAutoVacuums lists the accepted AutoVacuum values.
-var validAutoVacuums = []AutoVacuum{
-	AutoVacuumNone, AutoVacuumFull, AutoVacuumIncremental,
-}
-
 // IsValid returns true if the AutoVacuum is valid.
 func (a AutoVacuum) IsValid() bool {
-	return slices.Contains(validAutoVacuums, a)
+	switch a {
+	case AutoVacuumNone, AutoVacuumFull, AutoVacuumIncremental:
+		return true
+	default:
+		return false
+	}
+}
+
+// String returns the string representation.
+func (a AutoVacuum) String() string {
+	return string(a)
 }
 
 // Synchronous represents SQLite synchronous pragma values.
@@ -202,14 +211,19 @@ const (
 	SynchronousExtra Synchronous = "EXTRA"
 )
 
-// validSynchronous lists the accepted Synchronous values.
-var validSynchronous = []Synchronous{
-	SynchronousOff, SynchronousNormal, SynchronousFull, SynchronousExtra,
-}
-
 // IsValid returns true if the Synchronous is valid.
 func (s Synchronous) IsValid() bool {
-	return slices.Contains(validSynchronous, s)
+	switch s {
+	case SynchronousOff, SynchronousNormal, SynchronousFull, SynchronousExtra:
+		return true
+	default:
+		return false
+	}
+}
+
+// String returns the string representation.
+func (s Synchronous) String() string {
+	return string(s)
 }
 
 // TxLock represents SQLite transaction lock mode.
@@ -253,15 +267,19 @@ const (
 	TxLockExclusive TxLock = "exclusive"
 )
 
-// validTxLocks lists the accepted TxLock values; the empty string is valid
-// and selects the driver default.
-var validTxLocks = []TxLock{
-	TxLockDeferred, TxLockImmediate, TxLockExclusive, "",
-}
-
 // IsValid returns true if the TxLock is valid.
 func (t TxLock) IsValid() bool {
-	return slices.Contains(validTxLocks, t)
+	switch t {
+	case TxLockDeferred, TxLockImmediate, TxLockExclusive, "":
+		return true
+	default:
+		return false
+	}
+}
+
+// String returns the string representation.
+func (t TxLock) String() string {
+	return string(t)
 }
 
 // Config holds SQLite database configuration with type-safe enums.
@@ -349,6 +367,33 @@ func (c *Config) ToURL() (string, error) {
 		return "", fmt.Errorf("invalid config: %w", err)
 	}
 
+	var pragmas []string
+
+	// Add pragma parameters only if they're set (non-zero/non-empty)
+	if c.BusyTimeout > 0 {
+		pragmas = append(pragmas, fmt.Sprintf("busy_timeout=%d", c.BusyTimeout))
+	}
+
+	if c.JournalMode != "" {
+		pragmas = append(pragmas, fmt.Sprintf("journal_mode=%s", c.JournalMode))
+	}
+
+	if c.AutoVacuum != "" {
+		pragmas = append(pragmas, fmt.Sprintf("auto_vacuum=%s", c.AutoVacuum))
+	}
+
+	if c.WALAutocheckpoint >= 0 {
+		pragmas = append(pragmas, fmt.Sprintf("wal_autocheckpoint=%d", c.WALAutocheckpoint))
+	}
+
+	if c.Synchronous != "" {
+		pragmas = append(pragmas, fmt.Sprintf("synchronous=%s", c.Synchronous))
+	}
+
+	if c.ForeignKeys {
+		pragmas = append(pragmas, "foreign_keys=ON")
+	}
+
 	// Handle different database types
 	var baseURL string
 	if c.Path == ":memory:" {
@@ -358,36 +403,16 @@ func (c *Config) ToURL() (string, error) {
 	}
 
 	// Build query parameters
-	var queryParts []string
+	queryParts := make([]string, 0, 1+len(pragmas))
 
 	// Add _txlock first (it's a connection parameter, not a pragma)
 	if c.TxLock != "" {
 		queryParts = append(queryParts, "_txlock="+string(c.TxLock))
 	}
 
-	// Add pragma parameters only if they're set (non-zero/non-empty)
-	if c.BusyTimeout > 0 {
-		queryParts = append(queryParts, fmt.Sprintf("_pragma=busy_timeout=%d", c.BusyTimeout))
-	}
-
-	if c.JournalMode != "" {
-		queryParts = append(queryParts, fmt.Sprintf("_pragma=journal_mode=%s", c.JournalMode))
-	}
-
-	if c.AutoVacuum != "" {
-		queryParts = append(queryParts, fmt.Sprintf("_pragma=auto_vacuum=%s", c.AutoVacuum))
-	}
-
-	if c.WALAutocheckpoint >= 0 {
-		queryParts = append(queryParts, fmt.Sprintf("_pragma=wal_autocheckpoint=%d", c.WALAutocheckpoint))
-	}
-
-	if c.Synchronous != "" {
-		queryParts = append(queryParts, fmt.Sprintf("_pragma=synchronous=%s", c.Synchronous))
-	}
-
-	if c.ForeignKeys {
-		queryParts = append(queryParts, "_pragma=foreign_keys=ON")
+	// Add pragma parameters
+	for _, pragma := range pragmas {
+		queryParts = append(queryParts, "_pragma="+pragma)
 	}
 
 	if len(queryParts) > 0 {
diff --git a/hscontrol/db/sqliteconfig/config_test.go b/hscontrol/db/sqliteconfig/config_test.go
index 9f233902e..7829d9e92 100644
--- a/hscontrol/db/sqliteconfig/config_test.go
+++ b/hscontrol/db/sqliteconfig/config_test.go
@@ -98,6 +98,25 @@ func TestTxLock(t *testing.T) {
 	}
 }
 
+func TestTxLockString(t *testing.T) {
+	tests := []struct {
+		mode TxLock
+		want string
+	}{
+		{TxLockDeferred, "deferred"},
+		{TxLockImmediate, "immediate"},
+		{TxLockExclusive, "exclusive"},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.want, func(t *testing.T) {
+			if got := tt.mode.String(); got != tt.want {
+				t.Errorf("TxLock.String() = %q, want %q", got, tt.want)
+			}
+		})
+	}
+}
+
 func TestConfigValidate(t *testing.T) {
 	tests := []struct {
 		name    string
diff --git a/hscontrol/db/testdata/sqlite/null_tags_user_id_migration_test.sql b/hscontrol/db/testdata/sqlite/null_tags_user_id_migration_test.sql
deleted file mode 100644
index c45d0ff59..000000000
--- a/hscontrol/db/testdata/sqlite/null_tags_user_id_migration_test.sql
+++ /dev/null
@@ -1,85 +0,0 @@
--- Test SQL dump for the clear-tagged-node-user-id migration
--- (202602201200-clear-tagged-node-user-id) against nodes whose tags
--- column holds the JSON literal 'null'.
---
--- A nil Strings slice marshals to the JSON literal `null`, so pre-0.29
--- databases contain untagged nodes with tags='null'. The migration's
--- WHERE clause (tags IS NOT NULL AND tags != '[]' AND tags != '') treats
--- the 4-character string 'null' as "tagged" and wrongly clears user_id,
--- detaching the node from its owning user on upgrade.
--- Fixes: https://github.com/juanfont/headscale/issues/3323
-
-PRAGMA foreign_keys=OFF;
-BEGIN TRANSACTION;
-
--- Migrations table: every entry BEFORE clear-tagged-node-user-id has been
--- applied. That migration is intentionally absent so it runs against this dump.
-CREATE TABLE `migrations` (`id` text,PRIMARY KEY (`id`));
-INSERT INTO migrations VALUES('202312101416');
-INSERT INTO migrations VALUES('202312101430');
-INSERT INTO migrations VALUES('202402151347');
-INSERT INTO migrations VALUES('2024041121742');
-INSERT INTO migrations VALUES('202406021630');
-INSERT INTO migrations VALUES('202409271400');
-INSERT INTO migrations VALUES('202407191627');
-INSERT INTO migrations VALUES('202408181235');
-INSERT INTO migrations VALUES('202501221827');
-INSERT INTO migrations VALUES('202501311657');
-INSERT INTO migrations VALUES('202502070949');
-INSERT INTO migrations VALUES('202502131714');
-INSERT INTO migrations VALUES('202502171819');
-INSERT INTO migrations VALUES('202505091439');
-INSERT INTO migrations VALUES('202505141324');
-INSERT INTO migrations VALUES('202507021200');
-INSERT INTO migrations VALUES('202510311551');
-INSERT INTO migrations VALUES('202511101554-drop-old-idx');
-INSERT INTO migrations VALUES('202511011637-preauthkey-bcrypt');
-INSERT INTO migrations VALUES('202511122344-remove-newline-index');
-INSERT INTO migrations VALUES('202511131445-node-forced-tags-to-tags');
-INSERT INTO migrations VALUES('202601121700-migrate-hostinfo-request-tags');
-
--- Users table
-CREATE TABLE `users` (`id` integer PRIMARY KEY AUTOINCREMENT,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,`name` text,`display_name` text,`email` text,`provider_identifier` text,`provider` text,`profile_pic_url` text);
-INSERT INTO users VALUES(1,'2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL,'user1','User One','user1@example.com',NULL,NULL,NULL);
-INSERT INTO users VALUES(2,'2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL,'user2','User Two','user2@example.com',NULL,NULL,NULL);
-
--- Pre-auth keys table
-CREATE TABLE `pre_auth_keys` (`id` integer PRIMARY KEY AUTOINCREMENT,`key` text,`user_id` integer,`reusable` numeric,`ephemeral` numeric DEFAULT false,`used` numeric DEFAULT false,`tags` text,`created_at` datetime,`expiration` datetime,`prefix` text,`hash` blob,CONSTRAINT `fk_pre_auth_keys_user` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE SET NULL);
-
--- API keys table
-CREATE TABLE `api_keys` (`id` integer PRIMARY KEY AUTOINCREMENT,`prefix` text,`hash` blob,`created_at` datetime,`expiration` datetime,`last_seen` datetime);
-
--- Nodes table - current schema (after the tags rename + last_seen/expiry reordering)
-CREATE TABLE IF NOT EXISTS "nodes" (`id` integer PRIMARY KEY AUTOINCREMENT,`machine_key` text,`node_key` text,`disco_key` text,`endpoints` text,`host_info` text,`ipv4` text,`ipv6` text,`hostname` text,`given_name` varchar(63),`user_id` integer,`register_method` text,`tags` text,`auth_key_id` integer,`last_seen` datetime,`expiry` datetime,`approved_routes` text,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,CONSTRAINT `fk_nodes_user` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE,CONSTRAINT `fk_nodes_auth_key` FOREIGN KEY (`auth_key_id`) REFERENCES `pre_auth_keys`(`id`));
-
--- Node 1: tags='null' (untagged, nil slice marshalled to JSON null), owned by user2.
--- After migration: user_id MUST be preserved (this is the bug).
-INSERT INTO nodes VALUES(1,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e01','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605501','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57701','[]','{}','100.64.0.1','fd7a:115c:a1e0::1','node1','node1',2,'cli','null',NULL,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 2: genuinely tagged, owned by user1.
--- After migration: user_id MUST be cleared to NULL (tagged nodes are owned by tags).
-INSERT INTO nodes VALUES(2,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e02','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605502','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57702','[]','{}','100.64.0.2','fd7a:115c:a1e0::2','node2','node2',1,'cli','["tag:server"]',NULL,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 3: empty-array tags (untagged), owned by user1.
--- After migration: user_id MUST be preserved.
-INSERT INTO nodes VALUES(3,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e03','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605503','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57703','[]','{}','100.64.0.3','fd7a:115c:a1e0::3','node3','node3',1,'cli','[]',NULL,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 4: empty-string tags (untagged), owned by user1.
--- After migration: user_id MUST be preserved.
-INSERT INTO nodes VALUES(4,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e04','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605504','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57704','[]','{}','100.64.0.4','fd7a:115c:a1e0::4','node4','node4',1,'cli','',NULL,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Policies table (empty)
-CREATE TABLE `policies` (`id` integer PRIMARY KEY AUTOINCREMENT,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,`data` text);
-
-DELETE FROM sqlite_sequence;
-INSERT INTO sqlite_sequence VALUES('users',2);
-INSERT INTO sqlite_sequence VALUES('nodes',4);
-CREATE INDEX idx_users_deleted_at ON users(deleted_at);
-CREATE UNIQUE INDEX idx_api_keys_prefix ON api_keys(prefix);
-CREATE INDEX idx_policies_deleted_at ON policies(deleted_at);
-CREATE UNIQUE INDEX idx_provider_identifier ON users(provider_identifier) WHERE provider_identifier IS NOT NULL;
-CREATE UNIQUE INDEX idx_name_provider_identifier ON users(name, provider_identifier);
-CREATE UNIQUE INDEX idx_name_no_provider_identifier ON users(name) WHERE provider_identifier IS NULL;
-CREATE UNIQUE INDEX IF NOT EXISTS idx_pre_auth_keys_prefix ON pre_auth_keys(prefix) WHERE prefix IS NOT NULL AND prefix != '';
-
-COMMIT;
diff --git a/hscontrol/db/testdata/sqlite/recover_null_tags_user_id_migration_test.sql b/hscontrol/db/testdata/sqlite/recover_null_tags_user_id_migration_test.sql
deleted file mode 100644
index 163dcd352..000000000
--- a/hscontrol/db/testdata/sqlite/recover_null_tags_user_id_migration_test.sql
+++ /dev/null
@@ -1,87 +0,0 @@
--- Test SQL dump for the null-tags user_id RECOVERY migration.
---
--- Represents a database that already upgraded to 0.29.0, where the buggy
--- clear-tagged-node-user-id migration (202602201200) already cleared
--- user_id on untagged nodes whose tags column held 'null'. The recovery
--- migration runs against this state and re-derives user_id from the node's
--- pre-auth key where possible.
--- Fixes: https://github.com/juanfont/headscale/issues/3323
-
-PRAGMA foreign_keys=OFF;
-BEGIN TRANSACTION;
-
--- Migrations table: everything through the current last migration has been
--- applied (this DB already ran the buggy clear-tagged migration). The new
--- recovery migration is intentionally absent so it runs against this dump.
-CREATE TABLE `migrations` (`id` text,PRIMARY KEY (`id`));
-INSERT INTO migrations VALUES('202312101416');
-INSERT INTO migrations VALUES('202312101430');
-INSERT INTO migrations VALUES('202402151347');
-INSERT INTO migrations VALUES('2024041121742');
-INSERT INTO migrations VALUES('202406021630');
-INSERT INTO migrations VALUES('202409271400');
-INSERT INTO migrations VALUES('202407191627');
-INSERT INTO migrations VALUES('202408181235');
-INSERT INTO migrations VALUES('202501221827');
-INSERT INTO migrations VALUES('202501311657');
-INSERT INTO migrations VALUES('202502070949');
-INSERT INTO migrations VALUES('202502131714');
-INSERT INTO migrations VALUES('202502171819');
-INSERT INTO migrations VALUES('202505091439');
-INSERT INTO migrations VALUES('202505141324');
-INSERT INTO migrations VALUES('202507021200');
-INSERT INTO migrations VALUES('202510311551');
-INSERT INTO migrations VALUES('202511101554-drop-old-idx');
-INSERT INTO migrations VALUES('202511011637-preauthkey-bcrypt');
-INSERT INTO migrations VALUES('202511122344-remove-newline-index');
-INSERT INTO migrations VALUES('202511131445-node-forced-tags-to-tags');
-INSERT INTO migrations VALUES('202601121700-migrate-hostinfo-request-tags');
-INSERT INTO migrations VALUES('202602201200-clear-tagged-node-user-id');
-INSERT INTO migrations VALUES('202605221435-clear-zero-time-node-expiry');
-
--- Users table
-CREATE TABLE `users` (`id` integer PRIMARY KEY AUTOINCREMENT,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,`name` text,`display_name` text,`email` text,`provider_identifier` text,`provider` text,`profile_pic_url` text);
-INSERT INTO users VALUES(1,'2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL,'user1','User One','user1@example.com',NULL,NULL,NULL);
-INSERT INTO users VALUES(2,'2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL,'user2','User Two','user2@example.com',NULL,NULL,NULL);
-
--- Pre-auth keys table. Key 1 belongs to user2, key 2 to user1.
-CREATE TABLE `pre_auth_keys` (`id` integer PRIMARY KEY AUTOINCREMENT,`key` text,`user_id` integer,`reusable` numeric,`ephemeral` numeric DEFAULT false,`used` numeric DEFAULT false,`tags` text,`created_at` datetime,`expiration` datetime,`prefix` text,`hash` blob,CONSTRAINT `fk_pre_auth_keys_user` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE SET NULL);
-INSERT INTO pre_auth_keys VALUES(1,NULL,2,1,false,true,NULL,'2024-01-01 00:00:00+00:00',NULL,'pak1',NULL);
-INSERT INTO pre_auth_keys VALUES(2,NULL,1,1,false,true,NULL,'2024-01-01 00:00:00+00:00',NULL,'pak2',NULL);
-
--- API keys table
-CREATE TABLE `api_keys` (`id` integer PRIMARY KEY AUTOINCREMENT,`prefix` text,`hash` blob,`created_at` datetime,`expiration` datetime,`last_seen` datetime);
-
--- Nodes table
-CREATE TABLE IF NOT EXISTS "nodes" (`id` integer PRIMARY KEY AUTOINCREMENT,`machine_key` text,`node_key` text,`disco_key` text,`endpoints` text,`host_info` text,`ipv4` text,`ipv6` text,`hostname` text,`given_name` varchar(63),`user_id` integer,`register_method` text,`tags` text,`auth_key_id` integer,`last_seen` datetime,`expiry` datetime,`approved_routes` text,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,CONSTRAINT `fk_nodes_user` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE,CONSTRAINT `fk_nodes_auth_key` FOREIGN KEY (`auth_key_id`) REFERENCES `pre_auth_keys`(`id`));
-
--- Node 1: authkey-registered, tags='null', already orphaned (user_id NULL) by
--- the buggy migration. auth_key_id=1 (user2). Recovery: user_id -> 2.
-INSERT INTO nodes VALUES(1,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e01','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605501','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57701','[]','{}','100.64.0.1','fd7a:115c:a1e0::1','node1','node1',NULL,'authkey','null',1,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 2: genuinely tagged, user_id correctly cleared. Must stay NULL.
-INSERT INTO nodes VALUES(2,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e02','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605502','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57702','[]','{}','100.64.0.2','fd7a:115c:a1e0::2','node2','node2',NULL,'authkey','["tag:server"]',2,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 3: CLI-registered, tags='null', orphaned, no auth_key_id.
--- Unrecoverable: must stay NULL.
-INSERT INTO nodes VALUES(3,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e03','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605503','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57703','[]','{}','100.64.0.3','fd7a:115c:a1e0::3','node3','node3',NULL,'cli','null',NULL,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 4: authkey-registered, untouched (user_id still set). Must stay user1.
-INSERT INTO nodes VALUES(4,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e04','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605504','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57704','[]','{}','100.64.0.4','fd7a:115c:a1e0::4','node4','node4',1,'authkey','null',2,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Policies table (empty)
-CREATE TABLE `policies` (`id` integer PRIMARY KEY AUTOINCREMENT,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,`data` text);
-
-DELETE FROM sqlite_sequence;
-INSERT INTO sqlite_sequence VALUES('users',2);
-INSERT INTO sqlite_sequence VALUES('pre_auth_keys',2);
-INSERT INTO sqlite_sequence VALUES('nodes',4);
-CREATE INDEX idx_users_deleted_at ON users(deleted_at);
-CREATE UNIQUE INDEX idx_api_keys_prefix ON api_keys(prefix);
-CREATE INDEX idx_policies_deleted_at ON policies(deleted_at);
-CREATE UNIQUE INDEX idx_provider_identifier ON users(provider_identifier) WHERE provider_identifier IS NOT NULL;
-CREATE UNIQUE INDEX idx_name_provider_identifier ON users(name, provider_identifier);
-CREATE UNIQUE INDEX idx_name_no_provider_identifier ON users(name) WHERE provider_identifier IS NULL;
-CREATE UNIQUE INDEX IF NOT EXISTS idx_pre_auth_keys_prefix ON pre_auth_keys(prefix) WHERE prefix IS NOT NULL AND prefix != '';
-
-COMMIT;
diff --git a/hscontrol/db/testdata/sqlite/zero_time_expiry_migration_test.sql b/hscontrol/db/testdata/sqlite/zero_time_expiry_migration_test.sql
deleted file mode 100644
index 9a6d31856..000000000
--- a/hscontrol/db/testdata/sqlite/zero_time_expiry_migration_test.sql
+++ /dev/null
@@ -1,82 +0,0 @@
--- Test SQL dump for zero-time node expiry migration
--- (202605221435-clear-zero-time-node-expiry)
---
--- Pre-0.28 versions of Headscale persisted a zero time.Time as the string
--- '0001-01-01 00:00:00+00:00' in nodes.expiry instead of NULL. Upgrading
--- to 0.29 surfaces those rows as "expired" because they look like a
--- timestamp at year 1. This dump exercises the data fix.
--- Fixes: https://github.com/juanfont/headscale/issues/3284
-
-PRAGMA foreign_keys=OFF;
-BEGIN TRANSACTION;
-
--- Migrations table: all entries BEFORE the zero-time fix have been applied.
--- The new migration is intentionally absent so it runs against this dump.
-CREATE TABLE `migrations` (`id` text,PRIMARY KEY (`id`));
-INSERT INTO migrations VALUES('202312101416');
-INSERT INTO migrations VALUES('202312101430');
-INSERT INTO migrations VALUES('202402151347');
-INSERT INTO migrations VALUES('2024041121742');
-INSERT INTO migrations VALUES('202406021630');
-INSERT INTO migrations VALUES('202409271400');
-INSERT INTO migrations VALUES('202407191627');
-INSERT INTO migrations VALUES('202408181235');
-INSERT INTO migrations VALUES('202501221827');
-INSERT INTO migrations VALUES('202501311657');
-INSERT INTO migrations VALUES('202502070949');
-INSERT INTO migrations VALUES('202502131714');
-INSERT INTO migrations VALUES('202502171819');
-INSERT INTO migrations VALUES('202505091439');
-INSERT INTO migrations VALUES('202505141324');
-INSERT INTO migrations VALUES('202507021200');
-INSERT INTO migrations VALUES('202510311551');
-INSERT INTO migrations VALUES('202511101554-drop-old-idx');
-INSERT INTO migrations VALUES('202511011637-preauthkey-bcrypt');
-INSERT INTO migrations VALUES('202511122344-remove-newline-index');
-INSERT INTO migrations VALUES('202511131445-node-forced-tags-to-tags');
-INSERT INTO migrations VALUES('202601121700-migrate-hostinfo-request-tags');
-INSERT INTO migrations VALUES('202602201200-clear-tagged-node-user-id');
-
--- Users table
-CREATE TABLE `users` (`id` integer PRIMARY KEY AUTOINCREMENT,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,`name` text,`display_name` text,`email` text,`provider_identifier` text,`provider` text,`profile_pic_url` text);
-INSERT INTO users VALUES(1,'2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL,'user1','User One','user1@example.com',NULL,NULL,NULL);
-
--- Pre-auth keys table
-CREATE TABLE `pre_auth_keys` (`id` integer PRIMARY KEY AUTOINCREMENT,`key` text,`user_id` integer,`reusable` numeric,`ephemeral` numeric DEFAULT false,`used` numeric DEFAULT false,`tags` text,`created_at` datetime,`expiration` datetime,`prefix` text,`hash` blob,CONSTRAINT `fk_pre_auth_keys_user` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE SET NULL);
-
--- API keys table
-CREATE TABLE `api_keys` (`id` integer PRIMARY KEY AUTOINCREMENT,`prefix` text,`hash` blob,`created_at` datetime,`expiration` datetime,`last_seen` datetime);
-
--- Nodes table - current schema (after the tags rename + last_seen/expiry reordering)
-CREATE TABLE IF NOT EXISTS "nodes" (`id` integer PRIMARY KEY AUTOINCREMENT,`machine_key` text,`node_key` text,`disco_key` text,`endpoints` text,`host_info` text,`ipv4` text,`ipv6` text,`hostname` text,`given_name` varchar(63),`user_id` integer,`register_method` text,`tags` text,`auth_key_id` integer,`last_seen` datetime,`expiry` datetime,`approved_routes` text,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,CONSTRAINT `fk_nodes_user` FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE,CONSTRAINT `fk_nodes_auth_key` FOREIGN KEY (`auth_key_id`) REFERENCES `pre_auth_keys`(`id`));
-
--- Node 1: zero-time expiry. After migration: expiry IS NULL.
-INSERT INTO nodes VALUES(1,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e01','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605501','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57701','[]','{}','100.64.0.1','fd7a:115c:a1e0::1','node1','node1',1,'cli','[]',NULL,'2024-01-01 00:00:00+00:00','0001-01-01 00:00:00+00:00','[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 2: NULL expiry already. After migration: still NULL.
-INSERT INTO nodes VALUES(2,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e02','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605502','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57702','[]','{}','100.64.0.2','fd7a:115c:a1e0::2','node2','node2',1,'cli','[]',NULL,'2024-01-01 00:00:00+00:00',NULL,'[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 3: real future expiry. After migration: preserved.
-INSERT INTO nodes VALUES(3,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e03','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605503','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57703','[]','{}','100.64.0.3','fd7a:115c:a1e0::3','node3','node3',1,'cli','[]',NULL,'2024-01-01 00:00:00+00:00','2099-01-01 00:00:00+00:00','[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 4: real past expiry (legitimately expired). After migration: preserved.
-INSERT INTO nodes VALUES(4,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e04','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605504','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57704','[]','{}','100.64.0.4','fd7a:115c:a1e0::4','node4','node4',1,'cli','[]',NULL,'2024-01-01 00:00:00+00:00','2020-01-01 00:00:00+00:00','[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Node 5: another zero-time row to confirm the WHERE clause matches multiple rows.
-INSERT INTO nodes VALUES(5,'mkey:a0ab77456320823945ae0331823e3c0d516fae9585bd42698dfa1ac3d7679e05','nodekey:7c84167ab68f494942de14deb83587fd841843de2bac105b6c670048c1605505','discokey:53075b3c6cad3b62a2a29caea61beeb93f66b8c75cb89dac465236a5bbf57705','[]','{}','100.64.0.5','fd7a:115c:a1e0::5','node5','node5',1,'cli','[]',NULL,'2024-01-01 00:00:00+00:00','0001-01-01 00:00:00+00:00','[]','2024-01-01 00:00:00+00:00','2024-01-01 00:00:00+00:00',NULL);
-
--- Policies table (empty)
-CREATE TABLE `policies` (`id` integer PRIMARY KEY AUTOINCREMENT,`created_at` datetime,`updated_at` datetime,`deleted_at` datetime,`data` text);
-
-DELETE FROM sqlite_sequence;
-INSERT INTO sqlite_sequence VALUES('users',1);
-INSERT INTO sqlite_sequence VALUES('nodes',5);
-CREATE INDEX idx_users_deleted_at ON users(deleted_at);
-CREATE UNIQUE INDEX idx_api_keys_prefix ON api_keys(prefix);
-CREATE INDEX idx_policies_deleted_at ON policies(deleted_at);
-CREATE UNIQUE INDEX idx_provider_identifier ON users(provider_identifier) WHERE provider_identifier IS NOT NULL;
-CREATE UNIQUE INDEX idx_name_provider_identifier ON users(name, provider_identifier);
-CREATE UNIQUE INDEX idx_name_no_provider_identifier ON users(name) WHERE provider_identifier IS NULL;
-CREATE UNIQUE INDEX IF NOT EXISTS idx_pre_auth_keys_prefix ON pre_auth_keys(prefix) WHERE prefix IS NOT NULL AND prefix != '';
-
-COMMIT;
diff --git a/hscontrol/db/text_serialiser.go b/hscontrol/db/text_serialiser.go
index c315772bc..06a898d09 100644
--- a/hscontrol/db/text_serialiser.go
+++ b/hscontrol/db/text_serialiser.go
@@ -24,7 +24,7 @@ func isTextUnmarshaler(rv reflect.Value) bool {
 }
 
 func maybeInstantiatePtr(rv reflect.Value) {
-	if rv.Kind() == reflect.Pointer && rv.IsNil() {
+	if rv.Kind() == reflect.Ptr && rv.IsNil() {
 		np := reflect.New(rv.Type().Elem())
 		rv.Set(np)
 	}
@@ -34,8 +34,8 @@ func decodingError(name string, err error) error {
 	return fmt.Errorf("decoding to %s: %w", name, err)
 }
 
-// TextSerialiser implements the [schema.SerializerInterface] for fields that
-// have a type that implements [encoding.TextUnmarshaler].
+// TextSerialiser implements the Serialiser interface for fields that
+// have a type that implements encoding.TextUnmarshaler.
 type TextSerialiser struct{}
 
 func (TextSerialiser) Scan(ctx context.Context, field *schema.Field, dst reflect.Value, dbValue any) error {
@@ -43,49 +43,49 @@ func (TextSerialiser) Scan(ctx context.Context, field *schema.Field, dst reflect
 
 	// If the field is a pointer, we need to dereference it to get the actual type
 	// so we do not end with a second pointer.
-	if fieldValue.Elem().Kind() == reflect.Pointer {
+	if fieldValue.Elem().Kind() == reflect.Ptr {
 		fieldValue = fieldValue.Elem()
 	}
 
-	if dbValue == nil {
-		return nil
-	}
+	if dbValue != nil {
+		var bytes []byte
 
-	var bytes []byte
-
-	switch v := dbValue.(type) {
-	case []byte:
-		bytes = v
-	case string:
-		bytes = []byte(v)
-	default:
-		return fmt.Errorf("%w: %#v", errUnmarshalTextValue, dbValue)
-	}
-
-	if !isTextUnmarshaler(fieldValue) {
-		return fmt.Errorf("%w: %T", errUnsupportedType, fieldValue.Interface())
-	}
-
-	maybeInstantiatePtr(fieldValue)
-	f := fieldValue.MethodByName("UnmarshalText")
-	args := []reflect.Value{reflect.ValueOf(bytes)}
-
-	ret := f.Call(args)
-	if !ret[0].IsNil() {
-		if err, ok := ret[0].Interface().(error); ok {
-			return decodingError(field.Name, err)
+		switch v := dbValue.(type) {
+		case []byte:
+			bytes = v
+		case string:
+			bytes = []byte(v)
+		default:
+			return fmt.Errorf("%w: %#v", errUnmarshalTextValue, dbValue)
 		}
-	}
 
-	// If the underlying field is to a pointer type, we need to
-	// assign the value as a pointer to it.
-	// If it is not a pointer, we need to assign the value to the
-	// field.
-	dstField := field.ReflectValueOf(ctx, dst)
-	if dstField.Kind() == reflect.Pointer {
-		dstField.Set(fieldValue)
-	} else {
-		dstField.Set(fieldValue.Elem())
+		if isTextUnmarshaler(fieldValue) {
+			maybeInstantiatePtr(fieldValue)
+			f := fieldValue.MethodByName("UnmarshalText")
+			args := []reflect.Value{reflect.ValueOf(bytes)}
+
+			ret := f.Call(args)
+			if !ret[0].IsNil() {
+				if err, ok := ret[0].Interface().(error); ok {
+					return decodingError(field.Name, err)
+				}
+			}
+
+			// If the underlying field is to a pointer type, we need to
+			// assign the value as a pointer to it.
+			// If it is not a pointer, we need to assign the value to the
+			// field.
+			dstField := field.ReflectValueOf(ctx, dst)
+			if dstField.Kind() == reflect.Ptr {
+				dstField.Set(fieldValue)
+			} else {
+				dstField.Set(fieldValue.Elem())
+			}
+
+			return nil
+		} else {
+			return fmt.Errorf("%w: %T", errUnsupportedType, fieldValue.Interface())
+		}
 	}
 
 	return nil
@@ -97,7 +97,7 @@ func (TextSerialiser) Value(ctx context.Context, field *schema.Field, dst reflec
 		// If the value is nil, we return nil, however, go nil values are not
 		// always comparable, particularly when reflection is involved:
 		// https://dev.to/arxeiss/in-go-nil-is-not-equal-to-nil-sometimes-jn8
-		if v == nil || (reflect.ValueOf(v).Kind() == reflect.Pointer && reflect.ValueOf(v).IsNil()) {
+		if v == nil || (reflect.ValueOf(v).Kind() == reflect.Ptr && reflect.ValueOf(v).IsNil()) {
 			return nil, nil //nolint:nilnil // intentional: nil value for GORM serializer
 		}
 
diff --git a/hscontrol/db/users.go b/hscontrol/db/users.go
index 86ee936fe..b8bb01afb 100644
--- a/hscontrol/db/users.go
+++ b/hscontrol/db/users.go
@@ -12,10 +12,11 @@ import (
 )
 
 var (
-	ErrUserExists        = errors.New("user already exists")
-	ErrUserNotFound      = errors.New("user not found")
-	ErrUserStillHasNodes = errors.New("user not empty: node(s) found")
-	ErrUserNotUnique     = errors.New("expected exactly one user")
+	ErrUserExists            = errors.New("user already exists")
+	ErrUserNotFound          = errors.New("user not found")
+	ErrUserStillHasNodes     = errors.New("user not empty: node(s) found")
+	ErrUserWhereInvalidCount = errors.New("expect 0 or 1 where User structs")
+	ErrUserNotUnique         = errors.New("expected exactly one user")
 )
 
 func (hsdb *HSDatabase) CreateUser(user types.User) (*types.User, error) {
@@ -24,7 +25,7 @@ func (hsdb *HSDatabase) CreateUser(user types.User) (*types.User, error) {
 	})
 }
 
-// CreateUser creates a new [types.User]. Returns error if could not be created
+// CreateUser creates a new User. Returns error if could not be created
 // or another user already exists.
 func CreateUser(tx *gorm.DB, user types.User) (*types.User, error) {
 	err := util.ValidateUsername(user.Name)
@@ -46,7 +47,7 @@ func (hsdb *HSDatabase) DestroyUser(uid types.UserID) error {
 	})
 }
 
-// DestroyUser destroys a [types.User]. Returns error if the [types.User] does
+// DestroyUser destroys a User. Returns error if the User does
 // not exist or if there are user-owned nodes associated with it.
 // Tagged nodes have user_id = NULL so they do not block deletion.
 func DestroyUser(tx *gorm.DB, uid types.UserID) error {
@@ -91,9 +92,11 @@ func (hsdb *HSDatabase) RenameUser(uid types.UserID, newName string) error {
 
 var ErrCannotChangeOIDCUser = errors.New("cannot edit OIDC user")
 
-// RenameUser renames a [types.User]. Returns error if the [types.User] does
-// not exist or if another [types.User] exists with the new name.
+// RenameUser renames a User. Returns error if the User does
+// not exist or if another User exists with the new name.
 func RenameUser(tx *gorm.DB, uid types.UserID, newName string) error {
+	var err error
+
 	oldUser, err := GetUserByID(tx, uid)
 	if err != nil {
 		return err
@@ -151,15 +154,24 @@ func GetUserByOIDCIdentifier(tx *gorm.DB, id string) (*types.User, error) {
 	return &user, nil
 }
 
-func (hsdb *HSDatabase) ListUsers(filter *types.User) ([]types.User, error) {
-	return ListUsers(hsdb.DB, filter)
+func (hsdb *HSDatabase) ListUsers(where ...*types.User) ([]types.User, error) {
+	return ListUsers(hsdb.DB, where...)
 }
 
-// ListUsers gets all the existing users, optionally filtered by a non-nil filter.
-func ListUsers(tx *gorm.DB, filter *types.User) ([]types.User, error) {
+// ListUsers gets all the existing users.
+func ListUsers(tx *gorm.DB, where ...*types.User) ([]types.User, error) {
+	if len(where) > 1 {
+		return nil, fmt.Errorf("%w, got %d", ErrUserWhereInvalidCount, len(where))
+	}
+
+	var user *types.User
+	if len(where) == 1 {
+		user = where[0]
+	}
+
 	users := []types.User{}
 
-	err := tx.Where(filter).Find(&users).Error
+	err := tx.Where(user).Find(&users).Error
 	if err != nil {
 		return nil, err
 	}
@@ -192,7 +204,7 @@ func ListNodesByUser(tx *gorm.DB, uid types.UserID) (types.Nodes, error) {
 
 	uidPtr := uint(uid)
 
-	err := preloadNode(tx).Where(&types.Node{UserID: &uidPtr}).Find(&nodes).Error
+	err := tx.Preload("AuthKey").Preload("AuthKey.User").Preload("User").Where(&types.Node{UserID: &uidPtr}).Find(&nodes).Error
 	if err != nil {
 		return nil, err
 	}
@@ -205,7 +217,10 @@ func (hsdb *HSDatabase) CreateUserForTest(name ...string) *types.User {
 		panic("CreateUserForTest can only be called during tests")
 	}
 
-	userName := firstOr("testuser", name)
+	userName := "testuser"
+	if len(name) > 0 && name[0] != "" {
+		userName = name[0]
+	}
 
 	user, err := hsdb.CreateUser(types.User{Name: userName})
 	if err != nil {
@@ -220,7 +235,10 @@ func (hsdb *HSDatabase) CreateUsersForTest(count int, namePrefix ...string) []*t
 		panic("CreateUsersForTest can only be called during tests")
 	}
 
-	prefix := firstOr("testuser", namePrefix)
+	prefix := "testuser"
+	if len(namePrefix) > 0 && namePrefix[0] != "" {
+		prefix = namePrefix[0]
+	}
 
 	users := make([]*types.User, count)
 	for i := range count {
diff --git a/hscontrol/db/users_test.go b/hscontrol/db/users_test.go
index 2a755ff3c..cbb1c3cee 100644
--- a/hscontrol/db/users_test.go
+++ b/hscontrol/db/users_test.go
@@ -17,7 +17,7 @@ func TestCreateAndDestroyUser(t *testing.T) {
 	user := db.CreateUserForTest("test")
 	assert.Equal(t, "test", user.Name)
 
-	users, err := db.ListUsers(nil)
+	users, err := db.ListUsers()
 	require.NoError(t, err)
 	assert.Len(t, users, 1)
 
@@ -123,7 +123,7 @@ func TestDestroyUserErrors(t *testing.T) {
 				result := db.DB.First(&survivingNode, "id = ?", node.ID)
 				require.NoError(t, result.Error)
 				assert.Nil(t, survivingNode.UserID)
-				assert.Equal(t, []string{"tag:server"}, survivingNode.Tags.List())
+				assert.Equal(t, []string{"tag:server"}, survivingNode.Tags)
 			},
 		},
 		{
@@ -227,7 +227,7 @@ func TestRenameUser(t *testing.T) {
 				userTest := db.CreateUserForTest("test")
 				assert.Equal(t, "test", userTest.Name)
 
-				users, err := db.ListUsers(nil)
+				users, err := db.ListUsers()
 				require.NoError(t, err)
 				assert.Len(t, users, 1)
 
diff --git a/hscontrol/db/versioncheck.go b/hscontrol/db/versioncheck.go
index 199b5964d..d78b00d31 100644
--- a/hscontrol/db/versioncheck.go
+++ b/hscontrol/db/versioncheck.go
@@ -3,7 +3,6 @@ package db
 import (
 	"errors"
 	"fmt"
-	"regexp"
 	"strconv"
 	"strings"
 	"time"
@@ -11,7 +10,6 @@ import (
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/rs/zerolog/log"
 	"gorm.io/gorm"
-	"gorm.io/gorm/clause"
 )
 
 var errVersionUpgrade = errors.New("version upgrade not supported")
@@ -67,24 +65,26 @@ func parseVersion(s string) (semver, error) {
 		return semver{}, fmt.Errorf("%q: %w", s, errVersionFormat)
 	}
 
-	var out [3]int
-
-	names := [...]string{"major", "minor", "patch"}
-
-	for i, p := range parts {
-		n, err := strconv.Atoi(p)
-		if err != nil {
-			return semver{}, fmt.Errorf("invalid %s version in %q: %w", names[i], s, err)
-		}
-
-		out[i] = n
+	major, err := strconv.Atoi(parts[0])
+	if err != nil {
+		return semver{}, fmt.Errorf("invalid major version in %q: %w", s, err)
 	}
 
-	return semver{Major: out[0], Minor: out[1], Patch: out[2]}, nil
+	minor, err := strconv.Atoi(parts[1])
+	if err != nil {
+		return semver{}, fmt.Errorf("invalid minor version in %q: %w", s, err)
+	}
+
+	patch, err := strconv.Atoi(parts[2])
+	if err != nil {
+		return semver{}, fmt.Errorf("invalid patch version in %q: %w", s, err)
+	}
+
+	return semver{Major: major, Minor: minor, Patch: patch}, nil
 }
 
 // ensureDatabaseVersionTable creates the database_versions table if it
-// does not already exist. Uses [gorm.DB.AutoMigrate] to handle dialect
+// does not already exist. Uses GORM AutoMigrate to handle dialect
 // differences between SQLite (datetime) and PostgreSQL (timestamp).
 // This runs before gormigrate migrations.
 func ensureDatabaseVersionTable(db *gorm.DB) error {
@@ -117,60 +117,32 @@ func getDatabaseVersion(db *gorm.DB) (string, error) {
 func setDatabaseVersion(db *gorm.DB, version string) error {
 	now := time.Now().UTC()
 
-	err := db.Clauses(clause.OnConflict{
-		Columns:   []clause.Column{{Name: "id"}},
-		DoUpdates: clause.AssignmentColumns([]string{"version", "updated_at"}),
-	}).Create(&DatabaseVersion{ID: 1, Version: version, UpdatedAt: now}).Error
-	if err != nil {
-		return fmt.Errorf("upserting database version: %w", err)
+	// Try update first, then insert if no rows affected.
+	result := db.Exec(
+		"UPDATE database_versions SET version = ?, updated_at = ? WHERE id = 1",
+		version, now,
+	)
+	if result.Error != nil {
+		return fmt.Errorf("updating database version: %w", result.Error)
+	}
+
+	if result.RowsAffected == 0 {
+		err := db.Exec(
+			"INSERT INTO database_versions (id, version, updated_at) VALUES (1, ?, ?)",
+			version, now,
+		).Error
+		if err != nil {
+			return fmt.Errorf("inserting database version: %w", err)
+		}
 	}
 
 	return nil
 }
 
-// pseudoVersionTimeLayout is Go's pseudo-version timestamp layout
-// (golang.org/ref/mod#pseudo-versions): UTC yyyymmddhhmmss.
-const pseudoVersionTimeLayout = "20060102150405"
-
-// pseudoVersionSuffix matches the trailing "<sep><14 digits>-<12
-// lowercase hex>" of a Go module pseudo-version. The base form
-// (vX.0.0-<date>-<hash>) uses "-" before the timestamp; the
-// pre-release-ancestor and release-ancestor forms
-// (vX.Y.Z-pre.0.<date>-<hash> and vX.Y.(Z+1)-0.<date>-<hash>) use "."
-// because the digit-only "0" marker precedes the timestamp.
-var pseudoVersionSuffix = regexp.MustCompile(`[-.](\d{14})-[0-9a-f]{12}$`)
-
-// pseudoVersionTime returns the embedded commit time when v is a
-// syntactically and semantically valid Go module pseudo-version. The
-// timestamp must parse as a real UTC time; lookalikes with malformed
-// dates (e.g. month 13, day 30 in February) are rejected.
-func pseudoVersionTime(v string) (time.Time, bool) {
-	m := pseudoVersionSuffix.FindStringSubmatch(v)
-	if m == nil {
-		return time.Time{}, false
-	}
-
-	t, err := time.Parse(pseudoVersionTimeLayout, m[1])
-	if err != nil {
-		return time.Time{}, false
-	}
-
-	return t, true
-}
-
 // isDev reports whether a version string represents a development build
-// that should skip version checking. Go module pseudo-versions (used by
-// untagged main-sha builds, where runtime/debug.BuildInfo falls back to
-// vX.Y.Z-<timestamp>-<commit>) are treated as dev to avoid poisoning
-// database_versions with synthetic baselines.
+// that should skip version checking.
 func isDev(version string) bool {
-	if version == "" || version == "dev" || version == "(devel)" {
-		return true
-	}
-
-	_, ok := pseudoVersionTime(version)
-
-	return ok
+	return version == "" || version == "dev" || version == "(devel)"
 }
 
 // checkVersionUpgradePath verifies that the running headscale version
diff --git a/hscontrol/db/versioncheck_test.go b/hscontrol/db/versioncheck_test.go
index 87089ca51..83c9ab5cf 100644
--- a/hscontrol/db/versioncheck_test.go
+++ b/hscontrol/db/versioncheck_test.go
@@ -3,7 +3,6 @@ package db
 import (
 	"fmt"
 	"testing"
-	"time"
 
 	"github.com/glebarez/sqlite"
 	"github.com/stretchr/testify/assert"
@@ -57,206 +56,12 @@ func TestSemverString(t *testing.T) {
 	assert.Equal(t, "v0.28.3", s.String())
 }
 
-func TestPseudoVersionTime(t *testing.T) {
-	parseTS := func(s string) time.Time {
-		t.Helper()
-
-		ts, err := time.Parse(pseudoVersionTimeLayout, s)
-		require.NoError(t, err)
-
-		return ts
-	}
-
-	tests := []struct {
-		name     string
-		input    string
-		wantOK   bool
-		wantTime time.Time
-	}{
-		// Accept: all three Go pseudo-version shapes.
-		{
-			name:     "no ancestor tag (v0.0.0 base)",
-			input:    "v0.0.0-20260522092201-58a85b68b3d9",
-			wantOK:   true,
-			wantTime: parseTS("20260522092201"),
-		},
-		{
-			name:     "ancestor is pre-release tag",
-			input:    "v0.29.0-beta.1.0.20260522092201-58a85b68b3d9",
-			wantOK:   true,
-			wantTime: parseTS("20260522092201"),
-		},
-		{
-			name:     "ancestor is release tag",
-			input:    "v0.29.1-0.20260522092201-58a85b68b3d9",
-			wantOK:   true,
-			wantTime: parseTS("20260522092201"),
-		},
-		{
-			name:     "earliest realistic Go module date",
-			input:    "v0.0.0-20180101000000-000000000000",
-			wantOK:   true,
-			wantTime: parseTS("20180101000000"),
-		},
-
-		// Reject: real release tags must not look like pseudo-versions.
-		{name: "release tag", input: "v0.29.0"},
-		{name: "pre-release tag", input: "v0.29.0-beta.1"},
-		{name: "rc tag", input: "v0.29.0-rc1"},
-		{name: "tag with build metadata", input: "v0.29.0+build123"},
-
-		// Reject: literals handled elsewhere.
-		{name: "empty", input: ""},
-		{name: "dev literal", input: "dev"},
-		{name: "devel literal", input: "(devel)"},
-
-		// Reject: malformed hash.
-		{name: "hash too short", input: "v0.0.0-20260522092201-58a85b6"},
-		{name: "hash too long", input: "v0.0.0-20260522092201-58a85b68b3d9aa"},
-		{name: "hash uppercase hex", input: "v0.0.0-20260522092201-58A85B68B3D9"},
-		{name: "hash non-hex", input: "v0.0.0-20260522092201-zzzzzzzzzzzz"},
-
-		// Reject: malformed timestamp.
-		{name: "timestamp too short", input: "v0.0.0-2026052209220-58a85b68b3d9"},
-		{name: "timestamp too long", input: "v0.0.0-202605220922010-58a85b68b3d9"},
-		{name: "invalid month", input: "v0.0.0-20261322092201-58a85b68b3d9"},
-		{name: "invalid day", input: "v0.0.0-20260230092201-58a85b68b3d9"},
-		{name: "invalid hour", input: "v0.0.0-20260522252201-58a85b68b3d9"},
-		{name: "invalid minute", input: "v0.0.0-20260522096001-58a85b68b3d9"},
-		{name: "invalid second", input: "v0.0.0-20260522092260-58a85b68b3d9"},
-		{name: "leap day on non-leap year", input: "v0.0.0-20230229000000-58a85b68b3d9"},
-
-		// Reject: missing components.
-		{name: "missing date and hash", input: "v0.0.0-"},
-		{name: "missing hash", input: "v0.0.0-20260522092201-"},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			got, ok := pseudoVersionTime(tt.input)
-			assert.Equal(t, tt.wantOK, ok)
-
-			if tt.wantOK {
-				assert.True(t, got.Equal(tt.wantTime),
-					"want %s, got %s", tt.wantTime, got)
-			}
-		})
-	}
-}
-
 func TestIsDev(t *testing.T) {
-	tests := []struct {
-		name  string
-		input string
-		want  bool
-	}{
-		// Existing literals.
-		{name: "empty", input: "", want: true},
-		{name: "dev", input: "dev", want: true},
-		{name: "devel", input: "(devel)", want: true},
-		{name: "release tag", input: "v0.28.0", want: false},
-		{name: "release tag no v", input: "0.28.0", want: false},
-		{name: "pre-release tag", input: "v0.29.0-beta.1", want: false},
-
-		// Go module pseudo-versions — all three shapes Go emits per
-		// golang.org/ref/mod#pseudo-versions. Untagged commits
-		// (such as main-sha docker builds) must be treated as dev
-		// so they neither poison database_versions nor trip the
-		// upgrade-path guard.
-		{
-			name:  "pseudo v0.0.0 base",
-			input: "v0.0.0-20260522092201-58a85b68b3d9",
-			want:  true,
-		},
-		{
-			name:  "pseudo from pre-release ancestor",
-			input: "v0.29.0-beta.1.0.20260522092201-58a85b68b3d9",
-			want:  true,
-		},
-		{
-			name:  "pseudo from release ancestor",
-			input: "v0.29.1-0.20260522092201-58a85b68b3d9",
-			want:  true,
-		},
-
-		// Malformed pseudo-version lookalikes must NOT be treated
-		// as dev — they fall through to the semver parser.
-		{
-			name:  "malformed timestamp not dev",
-			input: "v0.0.0-20261322092201-58a85b68b3d9",
-			want:  false,
-		},
-		{
-			name:  "hash wrong length not dev",
-			input: "v0.0.0-20260522092201-58a85b6",
-			want:  false,
-		},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			assert.Equal(t, tt.want, isDev(tt.input))
-		})
-	}
-}
-
-// TestCheckVersionUpgradePath_StoredPseudoVersion exercises the
-// upgrade path when database_versions holds a Go module pseudo-version
-// written by an untagged main-sha build. Without dev handling, the
-// stored pseudo-version parses as v0.0.0 and the next real release
-// trips the multi-minor guard.
-func TestCheckVersionUpgradePath_StoredPseudoVersion(t *testing.T) {
-	tests := []struct {
-		name           string
-		stored         string
-		currentVersion string
-	}{
-		{
-			name:           "v0.0.0 base pseudo to real release",
-			stored:         "v0.0.0-20260520093041-e4e742c776ee",
-			currentVersion: "v0.29.0-beta.1",
-		},
-		{
-			name:           "pseudo from pre-release ancestor",
-			stored:         "v0.29.0-beta.1.0.20260520093041-e4e742c776ee",
-			currentVersion: "v0.29.0",
-		},
-		{
-			name:           "pseudo from release ancestor",
-			stored:         "v0.28.1-0.20260520093041-e4e742c776ee",
-			currentVersion: "v0.29.0",
-		},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			db := versionTestDB(t)
-			require.NoError(t, setDatabaseVersion(db, tt.stored))
-			err := checkVersionUpgradePathFromVersions(db, tt.currentVersion)
-			assert.NoError(t, err)
-		})
-	}
-}
-
-// TestCheckVersionUpgradePath_CurrentPseudoDoesNotPoison locks the
-// contract that a main-sha (pseudo-version) binary must preserve the
-// stored real release so the next real release can upgrade cleanly.
-// Mirrors the gating in db.go around setDatabaseVersion.
-func TestCheckVersionUpgradePath_CurrentPseudoDoesNotPoison(t *testing.T) {
-	db := versionTestDB(t)
-	require.NoError(t, setDatabaseVersion(db, "v0.28.0"))
-
-	current := "v0.0.0-20260522092201-58a85b68b3d9"
-	err := checkVersionUpgradePathFromVersions(db, current)
-	require.NoError(t, err)
-
-	// Mirror db.go: only write the current version when !isDev.
-	if !isDev(current) {
-		require.NoError(t, setDatabaseVersion(db, current))
-	}
-
-	stored, err := getDatabaseVersion(db)
-	require.NoError(t, err)
-	assert.Equal(t, "v0.28.0", stored,
-		"pseudo-version run must not overwrite stored release")
+	assert.True(t, isDev(""))
+	assert.True(t, isDev("dev"))
+	assert.True(t, isDev("(devel)"))
+	assert.False(t, isDev("v0.28.0"))
+	assert.False(t, isDev("0.28.0"))
 }
 
 // versionTestDB creates an in-memory SQLite database with the
diff --git a/hscontrol/debug.go b/hscontrol/debug.go
index cc2a360bf..73eeb154c 100644
--- a/hscontrol/debug.go
+++ b/hscontrol/debug.go
@@ -1,14 +1,12 @@
 package hscontrol
 
 import (
-	"cmp"
 	"context"
 	"encoding/json"
 	"fmt"
 	"net"
 	"net/http"
 	"net/netip"
-	"slices"
 	"strings"
 	"time"
 
@@ -21,9 +19,9 @@ import (
 	"tailscale.com/tsweb"
 )
 
-// protectedDebugHandler wraps an [http.Handler] with an access check that
+// protectedDebugHandler wraps an http.Handler with an access check that
 // allows requests from loopback, Tailscale CGNAT IPs, and private
-// (RFC 1918 / RFC 4193) addresses. This extends [tsweb.Protected] which
+// (RFC 1918 / RFC 4193) addresses. This extends tsweb.Protected which
 // only allows loopback and Tailscale IPs.
 func protectedDebugHandler(h http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
@@ -33,7 +31,7 @@ func protectedDebugHandler(h http.Handler) http.Handler {
 			return
 		}
 
-		// [tsweb.AllowDebugAccess] rejects X-Forwarded-For and non-TS IPs.
+		// tsweb.AllowDebugAccess rejects X-Forwarded-For and non-TS IPs.
 		// Additionally allow private/LAN addresses so operators can reach
 		// debug endpoints from their local network without tailscaled.
 		ipStr, _, err := net.SplitHostPort(r.RemoteAddr)
@@ -50,45 +48,51 @@ func protectedDebugHandler(h http.Handler) http.Handler {
 	})
 }
 
-// writeJSON marshals v with indentation and writes it as a 200 JSON response.
-func writeJSON(w http.ResponseWriter, v any) {
-	b, err := json.MarshalIndent(v, "", "  ")
-	if err != nil {
-		httpError(w, err)
-		return
-	}
-
-	w.Header().Set("Content-Type", "application/json")
-	w.WriteHeader(http.StatusOK)
-	_, _ = w.Write(b)
-}
-
-// writeDebug renders a debug endpoint as JSON or text/plain depending on the
-// request's Accept header. JSON is produced only when explicitly requested;
-// text/plain is the default for backward compatibility.
-func writeDebug(w http.ResponseWriter, r *http.Request, jsonVal func() any, textVal func() string) {
-	if strings.Contains(r.Header.Get("Accept"), "application/json") {
-		writeJSON(w, jsonVal())
-		return
-	}
-
-	w.Header().Set("Content-Type", "text/plain")
-	w.WriteHeader(http.StatusOK)
-	_, _ = w.Write([]byte(textVal()))
-}
-
 func (h *Headscale) debugHTTPServer() *http.Server {
 	debugMux := http.NewServeMux()
 	debug := tsweb.Debugger(debugMux)
 
 	// State overview endpoint
 	debug.Handle("overview", "State overview", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeDebug(w, r, func() any { return h.state.DebugOverviewJSON() }, h.state.DebugOverview)
+		// Check Accept header to determine response format
+		acceptHeader := r.Header.Get("Accept")
+		wantsJSON := strings.Contains(acceptHeader, "application/json")
+
+		if wantsJSON {
+			overview := h.state.DebugOverviewJSON()
+
+			overviewJSON, err := json.MarshalIndent(overview, "", "  ")
+			if err != nil {
+				httpError(w, err)
+				return
+			}
+
+			w.Header().Set("Content-Type", "application/json")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write(overviewJSON)
+		} else {
+			// Default to text/plain for backward compatibility
+			overview := h.state.DebugOverview()
+
+			w.Header().Set("Content-Type", "text/plain")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write([]byte(overview))
+		}
 	}))
 
 	// Configuration endpoint
 	debug.Handle("config", "Current configuration", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeJSON(w, h.state.DebugConfig())
+		config := h.state.DebugConfig()
+
+		configJSON, err := json.MarshalIndent(config, "", "  ")
+		if err != nil {
+			httpError(w, err)
+			return
+		}
+
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		_, _ = w.Write(configJSON)
 	}))
 
 	// Policy endpoint
@@ -119,37 +123,157 @@ func (h *Headscale) debugHTTPServer() *http.Server {
 			return
 		}
 
-		writeJSON(w, filter)
+		filterJSON, err := json.MarshalIndent(filter, "", "  ")
+		if err != nil {
+			httpError(w, err)
+			return
+		}
+
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		_, _ = w.Write(filterJSON)
 	}))
 
 	// SSH policies endpoint
 	debug.Handle("ssh", "SSH policies per node", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeJSON(w, h.state.DebugSSHPolicies())
+		sshPolicies := h.state.DebugSSHPolicies()
+
+		sshJSON, err := json.MarshalIndent(sshPolicies, "", "  ")
+		if err != nil {
+			httpError(w, err)
+			return
+		}
+
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		_, _ = w.Write(sshJSON)
 	}))
 
 	// DERP map endpoint
 	debug.Handle("derp", "DERP map configuration", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeDebug(w, r, func() any { return h.state.DebugDERPJSON() }, h.state.DebugDERPMap)
+		// Check Accept header to determine response format
+		acceptHeader := r.Header.Get("Accept")
+		wantsJSON := strings.Contains(acceptHeader, "application/json")
+
+		if wantsJSON {
+			derpInfo := h.state.DebugDERPJSON()
+
+			derpJSON, err := json.MarshalIndent(derpInfo, "", "  ")
+			if err != nil {
+				httpError(w, err)
+				return
+			}
+
+			w.Header().Set("Content-Type", "application/json")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write(derpJSON)
+		} else {
+			// Default to text/plain for backward compatibility
+			derpInfo := h.state.DebugDERPMap()
+
+			w.Header().Set("Content-Type", "text/plain")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write([]byte(derpInfo))
+		}
 	}))
 
-	// [state.NodeStore] endpoint
+	// NodeStore endpoint
 	debug.Handle("nodestore", "NodeStore information", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeDebug(w, r, func() any { return h.state.DebugNodeStoreJSON() }, h.state.DebugNodeStore)
+		// Check Accept header to determine response format
+		acceptHeader := r.Header.Get("Accept")
+		wantsJSON := strings.Contains(acceptHeader, "application/json")
+
+		if wantsJSON {
+			nodeStoreNodes := h.state.DebugNodeStoreJSON()
+
+			nodeStoreJSON, err := json.MarshalIndent(nodeStoreNodes, "", "  ")
+			if err != nil {
+				httpError(w, err)
+				return
+			}
+
+			w.Header().Set("Content-Type", "application/json")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write(nodeStoreJSON)
+		} else {
+			// Default to text/plain for backward compatibility
+			nodeStoreInfo := h.state.DebugNodeStore()
+
+			w.Header().Set("Content-Type", "text/plain")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write([]byte(nodeStoreInfo))
+		}
 	}))
 
 	// Registration cache endpoint
 	debug.Handle("registration-cache", "Registration cache information", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeJSON(w, h.state.DebugRegistrationCache())
+		cacheInfo := h.state.DebugRegistrationCache()
+
+		cacheJSON, err := json.MarshalIndent(cacheInfo, "", "  ")
+		if err != nil {
+			httpError(w, err)
+			return
+		}
+
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		_, _ = w.Write(cacheJSON)
 	}))
 
 	// Routes endpoint
 	debug.Handle("routes", "Primary routes", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeDebug(w, r, func() any { return h.state.DebugRoutes() }, h.state.DebugRoutesString)
+		// Check Accept header to determine response format
+		acceptHeader := r.Header.Get("Accept")
+		wantsJSON := strings.Contains(acceptHeader, "application/json")
+
+		if wantsJSON {
+			routes := h.state.DebugRoutes()
+
+			routesJSON, err := json.MarshalIndent(routes, "", "  ")
+			if err != nil {
+				httpError(w, err)
+				return
+			}
+
+			w.Header().Set("Content-Type", "application/json")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write(routesJSON)
+		} else {
+			// Default to text/plain for backward compatibility
+			routes := h.state.DebugRoutesString()
+
+			w.Header().Set("Content-Type", "text/plain")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write([]byte(routes))
+		}
 	}))
 
 	// Policy manager endpoint
 	debug.Handle("policy-manager", "Policy manager state", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeDebug(w, r, func() any { return h.state.DebugPolicyManagerJSON() }, h.state.DebugPolicyManager)
+		// Check Accept header to determine response format
+		acceptHeader := r.Header.Get("Accept")
+		wantsJSON := strings.Contains(acceptHeader, "application/json")
+
+		if wantsJSON {
+			policyManagerInfo := h.state.DebugPolicyManagerJSON()
+
+			policyManagerJSON, err := json.MarshalIndent(policyManagerInfo, "", "  ")
+			if err != nil {
+				httpError(w, err)
+				return
+			}
+
+			w.Header().Set("Content-Type", "application/json")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write(policyManagerJSON)
+		} else {
+			// Default to text/plain for backward compatibility
+			policyManagerInfo := h.state.DebugPolicyManager()
+
+			w.Header().Set("Content-Type", "text/plain")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write([]byte(policyManagerInfo))
+		}
 	}))
 
 	debug.Handle("mapresponses", "Map responses for all nodes", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
@@ -166,15 +290,46 @@ func (h *Headscale) debugHTTPServer() *http.Server {
 			return
 		}
 
-		writeJSON(w, res)
+		resJSON, err := json.MarshalIndent(res, "", "  ")
+		if err != nil {
+			httpError(w, err)
+			return
+		}
+
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		_, _ = w.Write(resJSON)
 	}))
 
-	// [mapper.Batcher] endpoint
+	// Batcher endpoint
 	debug.Handle("batcher", "Batcher connected nodes", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		writeDebug(w, r, func() any { return h.debugBatcherJSON() }, h.debugBatcher)
+		// Check Accept header to determine response format
+		acceptHeader := r.Header.Get("Accept")
+		wantsJSON := strings.Contains(acceptHeader, "application/json")
+
+		if wantsJSON {
+			batcherInfo := h.debugBatcherJSON()
+
+			batcherJSON, err := json.MarshalIndent(batcherInfo, "", "  ")
+			if err != nil {
+				httpError(w, err)
+				return
+			}
+
+			w.Header().Set("Content-Type", "application/json")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write(batcherJSON)
+		} else {
+			// Default to text/plain for backward compatibility
+			batcherInfo := h.debugBatcher()
+
+			w.Header().Set("Content-Type", "text/plain")
+			w.WriteHeader(http.StatusOK)
+			_, _ = w.Write([]byte(batcherInfo))
+		}
 	}))
 
-	// Ping endpoint: sends a [tailcfg.PingRequest] to a node and waits for it to respond.
+	// Ping endpoint: sends a PingRequest to a node and waits for it to respond.
 	// Supports POST (form submit) and GET with ?node= (clickable quick-ping links).
 	debug.Handle("ping", "Ping a node to check connectivity", http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		var (
@@ -206,12 +361,12 @@ func (h *Headscale) debugHTTPServer() *http.Server {
 
 		w.Header().Set("Content-Type", "text/html; charset=utf-8")
 		w.WriteHeader(http.StatusOK)
-		_, _ = w.Write([]byte(templates.PingPage(query, result, nodes).Render())) //nolint:gosec // G705: templ component auto-escapes
+		_, _ = w.Write([]byte(templates.PingPage(query, result, nodes).Render()))
 	}))
 
-	// [statsviz.Register] would mount handlers directly on the raw mux,
+	// statsviz.Register would mount handlers directly on the raw mux,
 	// bypassing the access gate. Build the server by hand and wrap
-	// each handler with [protectedDebugHandler].
+	// each handler with protectedDebugHandler.
 	statsvizSrv, err := statsviz.NewServer()
 	if err == nil {
 		debugMux.Handle("/debug/statsviz/", protectedDebugHandler(statsvizSrv.Index()))
@@ -247,9 +402,9 @@ func (h *Headscale) debugBatcher() string {
 		activeConnections int
 	}
 
-	debugInfo := h.mapBatcher.Debug()
-	nodes := make([]nodeStatus, 0, len(debugInfo))
+	var nodes []nodeStatus
 
+	debugInfo := h.mapBatcher.Debug()
 	for nodeID, info := range debugInfo {
 		nodes = append(nodes, nodeStatus{
 			id:                nodeID,
@@ -264,9 +419,13 @@ func (h *Headscale) debugBatcher() string {
 	}
 
 	// Sort by node ID
-	slices.SortFunc(nodes, func(a, b nodeStatus) int {
-		return cmp.Compare(a.id, b.id)
-	})
+	for i := 0; i < len(nodes); i++ {
+		for j := i + 1; j < len(nodes); j++ {
+			if nodes[i].id > nodes[j].id {
+				nodes[i], nodes[j] = nodes[j], nodes[i]
+			}
+		}
+	}
 
 	// Output sorted nodes
 	for _, node := range nodes {
@@ -351,7 +510,7 @@ func (h *Headscale) connectedNodesList() []templates.ConnectedNode {
 
 const pingTimeout = 30 * time.Second
 
-// doPing sends a [tailcfg.PingRequest] to the node identified by query and waits for a response.
+// doPing sends a PingRequest to the node identified by query and waits for a response.
 func (h *Headscale) doPing(ctx context.Context, query string) *templates.PingResult {
 	if query == "" {
 		return &templates.PingResult{
diff --git a/hscontrol/derp/derp.go b/hscontrol/derp/derp.go
index beeb66ada..3dc06d07d 100644
--- a/hscontrol/derp/derp.go
+++ b/hscontrol/derp/derp.go
@@ -6,6 +6,7 @@ import (
 	"encoding/json"
 	"hash/crc64"
 	"io"
+	"maps"
 	"math/rand"
 	"net/http"
 	"net/url"
@@ -22,13 +23,19 @@ import (
 )
 
 func loadDERPMapFromPath(path string) (*tailcfg.DERPMap, error) {
-	b, err := os.ReadFile(path)
+	derpFile, err := os.Open(path)
 	if err != nil {
 		return nil, err
 	}
+	defer derpFile.Close()
 
 	var derpMap tailcfg.DERPMap
 
+	b, err := io.ReadAll(derpFile)
+	if err != nil {
+		return nil, err
+	}
+
 	err = yaml.Unmarshal(b, &derpMap)
 
 	return &derpMap, err
@@ -66,11 +73,11 @@ func loadDERPMapFromURL(addr url.URL) (*tailcfg.DERPMap, error) {
 	return &derpMap, err
 }
 
-// mergeDERPMaps naively merges a list of [tailcfg.DERPMap] values into a single
-// [tailcfg.DERPMap], it will _only_ look at the Regions, an integer.
-// If a region exists in two of the given [tailcfg.DERPMap] values, the region
-// form the _last_ [tailcfg.DERPMap] will be preserved.
-// An empty [tailcfg.DERPMap] list will result in a [tailcfg.DERPMap] with no regions.
+// mergeDERPMaps naively merges a list of DERPMaps into a single
+// DERPMap, it will _only_ look at the Regions, an integer.
+// If a region exists in two of the given DERPMaps, the region
+// form the _last_ DERPMap will be preserved.
+// An empty DERPMap list will result in a DERPMap with no regions.
 func mergeDERPMaps(derpMaps []*tailcfg.DERPMap) *tailcfg.DERPMap {
 	result := tailcfg.DERPMap{
 		OmitDefaultRegions: false,
@@ -78,13 +85,12 @@ func mergeDERPMaps(derpMaps []*tailcfg.DERPMap) *tailcfg.DERPMap {
 	}
 
 	for _, derpMap := range derpMaps {
-		// Clone each region: copying the pointer would let a later in-place
-		// shuffle alias regions shared with the source map or a previously
-		// served map, racing concurrent readers.
-		for id, region := range derpMap.Regions {
-			if cloned := region.Clone(); cloned != nil {
-				result.Regions[id] = cloned
-			}
+		maps.Copy(result.Regions, derpMap.Regions)
+	}
+
+	for id, region := range result.Regions {
+		if region == nil {
+			delete(result.Regions, id)
 		}
 	}
 
@@ -142,13 +148,14 @@ func shuffleDERPMap(dm *tailcfg.DERPMap) {
 			continue
 		}
 
-		derpRandom().Shuffle(len(region.Nodes), reflect.Swapper(region.Nodes))
+		dm.Regions[id] = shuffleRegionNoClone(region)
 	}
 }
 
 var crc64Table = crc64.MakeTable(crc64.ISO)
 
 var (
+	derpRandomOnce sync.Once
 	derpRandomInst *rand.Rand
 	derpRandomMu   sync.Mutex
 )
@@ -157,10 +164,12 @@ func derpRandom() *rand.Rand {
 	derpRandomMu.Lock()
 	defer derpRandomMu.Unlock()
 
-	if derpRandomInst == nil {
+	derpRandomOnce.Do(func() {
 		seed := cmp.Or(viper.GetString("dns.base_domain"), time.Now().String())
-		derpRandomInst = rand.New(rand.NewSource(int64(crc64.Checksum([]byte(seed), crc64Table)))) //nolint:gosec // weak random is fine for DERP scrambling
-	}
+		rnd := rand.New(rand.NewSource(0))                        //nolint:gosec // weak random is fine for DERP scrambling
+		rnd.Seed(int64(crc64.Checksum([]byte(seed), crc64Table))) //nolint:gosec // safe conversion
+		derpRandomInst = rnd
+	})
 
 	return derpRandomInst
 }
@@ -169,5 +178,11 @@ func resetDerpRandomForTesting() {
 	derpRandomMu.Lock()
 	defer derpRandomMu.Unlock()
 
+	derpRandomOnce = sync.Once{}
 	derpRandomInst = nil
 }
+
+func shuffleRegionNoClone(r *tailcfg.DERPRegion) *tailcfg.DERPRegion {
+	derpRandom().Shuffle(len(r.Nodes), reflect.Swapper(r.Nodes))
+	return r
+}
diff --git a/hscontrol/derp/derp_merge_test.go b/hscontrol/derp/derp_merge_test.go
deleted file mode 100644
index e1ac41200..000000000
--- a/hscontrol/derp/derp_merge_test.go
+++ /dev/null
@@ -1,28 +0,0 @@
-package derp
-
-import (
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"tailscale.com/tailcfg"
-)
-
-// TestMergeDERPMapsClonesRegions ensures merged DERP maps own their regions
-// rather than aliasing the source pointers, so a later in-place node shuffle
-// cannot mutate a shared or previously served map.
-func TestMergeDERPMapsClonesRegions(t *testing.T) {
-	src := &tailcfg.DERPMap{
-		Regions: map[int]*tailcfg.DERPRegion{
-			1: {RegionID: 1, Nodes: []*tailcfg.DERPNode{{Name: "a"}, {Name: "b"}}},
-		},
-	}
-
-	merged := mergeDERPMaps([]*tailcfg.DERPMap{src})
-
-	assert.NotSame(t, src.Regions[1], merged.Regions[1],
-		"merged region must not alias the source region pointer")
-
-	merged.Regions[1].Nodes[0] = &tailcfg.DERPNode{Name: "mutated"}
-	assert.Equal(t, "a", src.Regions[1].Nodes[0].Name,
-		"source region was mutated through a shared pointer")
-}
diff --git a/hscontrol/derp/server/derp_server.go b/hscontrol/derp/server/derp_server.go
index e164c608e..fdca651a2 100644
--- a/hscontrol/derp/server/derp_server.go
+++ b/hscontrol/derp/server/derp_server.go
@@ -76,16 +76,20 @@ func (d *DERPServer) GenerateRegion() (tailcfg.DERPRegion, error) {
 		return tailcfg.DERPRegion{}, err
 	}
 
+	var (
+		host    string
+		port    int
+		portStr string
+	)
+
 	// Extract hostname and port from URL
-	host, portStr, err := net.SplitHostPort(serverURL.Host)
-
-	var port int
-
+	host, portStr, err = net.SplitHostPort(serverURL.Host)
 	if err != nil {
-		host = serverURL.Host
 		if serverURL.Scheme == "https" {
+			host = serverURL.Host
 			port = 443
 		} else {
+			host = serverURL.Host
 			port = 80
 		}
 	} else {
@@ -367,10 +371,15 @@ func (d *DERPServer) ServeSTUN() {
 }
 
 func serverSTUNListener(ctx context.Context, packetConn *net.UDPConn) {
-	var buf [64 << 10]byte
+	var (
+		buf       [64 << 10]byte
+		bytesRead int
+		udpAddr   *net.UDPAddr
+		err       error
+	)
 
 	for {
-		bytesRead, udpAddr, err := packetConn.ReadFromUDP(buf[:])
+		bytesRead, udpAddr, err = packetConn.ReadFromUDP(buf[:])
 		if err != nil {
 			if ctx.Err() != nil {
 				return
diff --git a/hscontrol/dns/extrarecords.go b/hscontrol/dns/extrarecords.go
index 05f42bc9d..b02a3c270 100644
--- a/hscontrol/dns/extrarecords.go
+++ b/hscontrol/dns/extrarecords.go
@@ -27,10 +27,10 @@ type ExtraRecordsMan struct {
 
 	updateCh chan []tailcfg.DNSRecord
 	closeCh  chan struct{}
-	hash     [32]byte
+	hashes   map[string][32]byte
 }
 
-// NewExtraRecordsManager creates a new [ExtraRecordsMan] and starts watching the file at the given path.
+// NewExtraRecordsManager creates a new ExtraRecordsMan and starts watching the file at the given path.
 func NewExtraRecordsManager(path string) (*ExtraRecordsMan, error) {
 	watcher, err := fsnotify.NewWatcher()
 	if err != nil {
@@ -52,10 +52,12 @@ func NewExtraRecordsManager(path string) (*ExtraRecordsMan, error) {
 	}
 
 	er := &ExtraRecordsMan{
-		watcher:  watcher,
-		path:     path,
-		records:  set.SetOf(records),
-		hash:     hash,
+		watcher: watcher,
+		path:    path,
+		records: set.SetOf(records),
+		hashes: map[string][32]byte{
+			path: hash,
+		},
 		closeCh:  make(chan struct{}),
 		updateCh: make(chan []tailcfg.DNSRecord),
 	}
@@ -156,54 +158,44 @@ func (e *ExtraRecordsMan) updateRecords() {
 	}
 
 	e.mu.Lock()
+	defer e.mu.Unlock()
 
 	// If there has not been any change, ignore the update.
-	if newHash == e.hash {
-		e.mu.Unlock()
-
-		return
+	if oldHash, ok := e.hashes[e.path]; ok {
+		if newHash == oldHash {
+			return
+		}
 	}
 
 	oldCount := e.records.Len()
 
 	e.records = set.SetOf(records)
-	e.hash = newHash
-	toSend := e.records.Slice()
+	e.hashes[e.path] = newHash
 
 	log.Trace().Caller().Interface("records", e.records).Msgf("extra records updated from path, count old: %d, new: %d", oldCount, e.records.Len())
 
-	// Release the lock before the (potentially blocking) send so a slow or
-	// absent consumer cannot stall Records() readers, and abort the send on
-	// shutdown instead of leaking this goroutine on the closed-down channel.
-	e.mu.Unlock()
-
-	select {
-	case e.updateCh <- toSend:
-	case <-e.closeCh:
-	}
+	e.updateCh <- e.records.Slice()
 }
 
-// readExtraRecordsFromPath reads a JSON file of [tailcfg.DNSRecord]
+// readExtraRecordsFromPath reads a JSON file of tailcfg.DNSRecord
 // and returns the records and the hash of the file.
 func readExtraRecordsFromPath(path string) ([]tailcfg.DNSRecord, [32]byte, error) {
-	var zero [32]byte
-
 	b, err := os.ReadFile(path)
 	if err != nil {
-		return nil, zero, fmt.Errorf("reading path: %s, err: %w", path, err)
+		return nil, [32]byte{}, fmt.Errorf("reading path: %s, err: %w", path, err)
 	}
 
 	// If the read was triggered too fast, and the file is not complete, ignore the update
 	// if the file is empty. A consecutive update will be triggered when the file is complete.
 	if len(b) == 0 {
-		return nil, zero, nil
+		return nil, [32]byte{}, nil
 	}
 
 	var records []tailcfg.DNSRecord
 
 	err = json.Unmarshal(b, &records)
 	if err != nil {
-		return nil, zero, fmt.Errorf("unmarshalling records, content: %q: %w", string(b), err)
+		return nil, [32]byte{}, fmt.Errorf("unmarshalling records, content: %q: %w", string(b), err)
 	}
 
 	hash := sha256.Sum256(b)
diff --git a/hscontrol/dns/extrarecords_shutdown_test.go b/hscontrol/dns/extrarecords_shutdown_test.go
deleted file mode 100644
index 457d58c5e..000000000
--- a/hscontrol/dns/extrarecords_shutdown_test.go
+++ /dev/null
@@ -1,45 +0,0 @@
-package dns
-
-import (
-	"os"
-	"path/filepath"
-	"testing"
-	"time"
-
-	"github.com/stretchr/testify/require"
-)
-
-// TestUpdateRecordsDoesNotBlockShutdown ensures updateRecords does not park
-// forever on the update channel during shutdown. The send must release the
-// write lock first and abort on closeCh, otherwise the Run goroutine leaks and
-// holds the lock indefinitely when no consumer is draining the channel.
-func TestUpdateRecordsDoesNotBlockShutdown(t *testing.T) {
-	path := filepath.Join(t.TempDir(), "extra.json")
-	require.NoError(t, os.WriteFile(path,
-		[]byte(`[{"name":"a.example.com","type":"A","value":"100.64.0.1"}]`), 0o600))
-
-	er, err := NewExtraRecordsManager(path)
-	require.NoError(t, err)
-
-	defer er.watcher.Close()
-
-	// Change the file so updateRecords passes the unchanged-hash guard and
-	// reaches the send with no consumer draining UpdateCh.
-	require.NoError(t, os.WriteFile(path,
-		[]byte(`[{"name":"b.example.com","type":"A","value":"100.64.0.2"}]`), 0o600))
-
-	done := make(chan struct{})
-
-	go func() {
-		er.updateRecords()
-		close(done)
-	}()
-
-	er.Close()
-
-	select {
-	case <-done:
-	case <-time.After(2 * time.Second):
-		t.Fatal("updateRecords parked on a blocking send and did not return after Close")
-	}
-}
diff --git a/hscontrol/grpcv1.go b/hscontrol/grpcv1.go
new file mode 100644
index 000000000..953ae0d72
--- /dev/null
+++ b/hscontrol/grpcv1.go
@@ -0,0 +1,950 @@
+//go:generate buf generate --template ../buf.gen.yaml -o .. ../proto
+
+// nolint
+package hscontrol
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"io"
+	"net/netip"
+	"os"
+	"slices"
+	"sort"
+	"strings"
+	"time"
+
+	"github.com/rs/zerolog/log"
+	"google.golang.org/grpc/codes"
+	"google.golang.org/grpc/status"
+	"google.golang.org/protobuf/types/known/timestamppb"
+	"gorm.io/gorm"
+	"tailscale.com/net/tsaddr"
+	"tailscale.com/tailcfg"
+	"tailscale.com/types/key"
+	"tailscale.com/types/views"
+
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
+	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
+	"github.com/juanfont/headscale/hscontrol/state"
+	"github.com/juanfont/headscale/hscontrol/types"
+	"github.com/juanfont/headscale/hscontrol/util"
+	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
+)
+
+type headscaleV1APIServer struct { // v1.HeadscaleServiceServer
+	v1.UnimplementedHeadscaleServiceServer
+	h *Headscale
+}
+
+func newHeadscaleV1APIServer(h *Headscale) v1.HeadscaleServiceServer {
+	return headscaleV1APIServer{
+		h: h,
+	}
+}
+
+func (api headscaleV1APIServer) CreateUser(
+	ctx context.Context,
+	request *v1.CreateUserRequest,
+) (*v1.CreateUserResponse, error) {
+	newUser := types.User{
+		Name:          request.GetName(),
+		DisplayName:   request.GetDisplayName(),
+		Email:         request.GetEmail(),
+		ProfilePicURL: request.GetPictureUrl(),
+	}
+	user, policyChanged, err := api.h.state.CreateUser(newUser)
+	if err != nil {
+		return nil, status.Errorf(codes.Internal, "creating user: %s", err)
+	}
+
+	// CreateUser returns a policy change response if the user creation affected policy.
+	// This triggers a full policy re-evaluation for all connected nodes.
+	api.h.Change(policyChanged)
+
+	return &v1.CreateUserResponse{User: user.Proto()}, nil
+}
+
+func (api headscaleV1APIServer) RenameUser(
+	ctx context.Context,
+	request *v1.RenameUserRequest,
+) (*v1.RenameUserResponse, error) {
+	oldUser, err := api.h.state.GetUserByID(types.UserID(request.GetOldId()))
+	if err != nil {
+		return nil, err
+	}
+
+	_, c, err := api.h.state.RenameUser(types.UserID(oldUser.ID), request.GetNewName())
+	if err != nil {
+		return nil, err
+	}
+
+	// Send policy update notifications if needed
+	api.h.Change(c)
+
+	newUser, err := api.h.state.GetUserByName(request.GetNewName())
+	if err != nil {
+		return nil, err
+	}
+
+	return &v1.RenameUserResponse{User: newUser.Proto()}, nil
+}
+
+func (api headscaleV1APIServer) DeleteUser(
+	ctx context.Context,
+	request *v1.DeleteUserRequest,
+) (*v1.DeleteUserResponse, error) {
+	user, err := api.h.state.GetUserByID(types.UserID(request.GetId()))
+	if err != nil {
+		return nil, err
+	}
+
+	policyChanged, err := api.h.state.DeleteUser(types.UserID(user.ID))
+	if err != nil {
+		return nil, err
+	}
+
+	// Use the change returned from DeleteUser which includes proper policy updates
+	api.h.Change(policyChanged)
+
+	return &v1.DeleteUserResponse{}, nil
+}
+
+func (api headscaleV1APIServer) ListUsers(
+	ctx context.Context,
+	request *v1.ListUsersRequest,
+) (*v1.ListUsersResponse, error) {
+	var err error
+	var users []types.User
+
+	switch {
+	case request.GetName() != "":
+		users, err = api.h.state.ListUsersWithFilter(&types.User{Name: request.GetName()})
+	case request.GetEmail() != "":
+		users, err = api.h.state.ListUsersWithFilter(&types.User{Email: request.GetEmail()})
+	case request.GetId() != 0:
+		users, err = api.h.state.ListUsersWithFilter(&types.User{Model: gorm.Model{ID: uint(request.GetId())}})
+	default:
+		users, err = api.h.state.ListAllUsers()
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	response := make([]*v1.User, len(users))
+	for index, user := range users {
+		response[index] = user.Proto()
+	}
+
+	sort.Slice(response, func(i, j int) bool {
+		return response[i].Id < response[j].Id
+	})
+
+	return &v1.ListUsersResponse{Users: response}, nil
+}
+
+func (api headscaleV1APIServer) CreatePreAuthKey(
+	ctx context.Context,
+	request *v1.CreatePreAuthKeyRequest,
+) (*v1.CreatePreAuthKeyResponse, error) {
+	var expiration time.Time
+	if request.GetExpiration() != nil {
+		expiration = request.GetExpiration().AsTime()
+	}
+
+	for _, tag := range request.AclTags {
+		err := validateTag(tag)
+		if err != nil {
+			return &v1.CreatePreAuthKeyResponse{
+				PreAuthKey: nil,
+			}, status.Error(codes.InvalidArgument, err.Error())
+		}
+	}
+
+	var userID *types.UserID
+	if request.GetUser() != 0 {
+		user, err := api.h.state.GetUserByID(types.UserID(request.GetUser()))
+		if err != nil {
+			return nil, err
+		}
+		userID = user.TypedID()
+	}
+
+	preAuthKey, err := api.h.state.CreatePreAuthKey(
+		userID,
+		request.GetReusable(),
+		request.GetEphemeral(),
+		&expiration,
+		request.AclTags,
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	return &v1.CreatePreAuthKeyResponse{PreAuthKey: preAuthKey.Proto()}, nil
+}
+
+func (api headscaleV1APIServer) ExpirePreAuthKey(
+	ctx context.Context,
+	request *v1.ExpirePreAuthKeyRequest,
+) (*v1.ExpirePreAuthKeyResponse, error) {
+	err := api.h.state.ExpirePreAuthKey(request.GetId())
+	if err != nil {
+		return nil, err
+	}
+
+	return &v1.ExpirePreAuthKeyResponse{}, nil
+}
+
+func (api headscaleV1APIServer) DeletePreAuthKey(
+	ctx context.Context,
+	request *v1.DeletePreAuthKeyRequest,
+) (*v1.DeletePreAuthKeyResponse, error) {
+	err := api.h.state.DeletePreAuthKey(request.GetId())
+	if err != nil {
+		return nil, err
+	}
+
+	return &v1.DeletePreAuthKeyResponse{}, nil
+}
+
+func (api headscaleV1APIServer) ListPreAuthKeys(
+	ctx context.Context,
+	request *v1.ListPreAuthKeysRequest,
+) (*v1.ListPreAuthKeysResponse, error) {
+	preAuthKeys, err := api.h.state.ListPreAuthKeys()
+	if err != nil {
+		return nil, err
+	}
+
+	response := make([]*v1.PreAuthKey, len(preAuthKeys))
+	for index, key := range preAuthKeys {
+		response[index] = key.Proto()
+	}
+
+	sort.Slice(response, func(i, j int) bool {
+		return response[i].Id < response[j].Id
+	})
+
+	return &v1.ListPreAuthKeysResponse{PreAuthKeys: response}, nil
+}
+
+func (api headscaleV1APIServer) RegisterNode(
+	ctx context.Context,
+	request *v1.RegisterNodeRequest,
+) (*v1.RegisterNodeResponse, error) {
+	// Generate ephemeral registration key for tracking this registration flow in logs
+	registrationKey, err := util.GenerateRegistrationKey()
+	if err != nil {
+		log.Warn().Err(err).Msg("failed to generate registration key")
+		registrationKey = "" // Continue without key if generation fails
+	}
+
+	log.Trace().
+		Caller().
+		Str(zf.UserName, request.GetUser()).
+		Str(zf.RegistrationID, request.GetKey()).
+		Str(zf.RegistrationKey, registrationKey).
+		Msg("registering node")
+
+	registrationId, err := types.AuthIDFromString(request.GetKey())
+	if err != nil {
+		return nil, err
+	}
+
+	user, err := api.h.state.GetUserByName(request.GetUser())
+	if err != nil {
+		return nil, fmt.Errorf("looking up user: %w", err)
+	}
+
+	node, nodeChange, err := api.h.state.HandleNodeFromAuthPath(
+		registrationId,
+		types.UserID(user.ID),
+		nil,
+		util.RegisterMethodCLI,
+	)
+	if err != nil {
+		log.Error().
+			Str(zf.RegistrationKey, registrationKey).
+			Err(err).
+			Msg("failed to register node")
+		return nil, err
+	}
+
+	log.Info().
+		Str(zf.RegistrationKey, registrationKey).
+		EmbedObject(node).
+		Msg("node registered successfully")
+
+	// This is a bit of a back and forth, but we have a bit of a chicken and egg
+	// dependency here.
+	// Because the way the policy manager works, we need to have the node
+	// in the database, then add it to the policy manager and then we can
+	// approve the route. This means we get this dance where the node is
+	// first added to the database, then we add it to the policy manager via
+	// SaveNode (which automatically updates the policy manager) and then we can auto approve the routes.
+	// As that only approves the struct object, we need to save it again and
+	// ensure we send an update.
+	// This works, but might be another good candidate for doing some sort of
+	// eventbus.
+	routeChange, err := api.h.state.AutoApproveRoutes(node)
+	if err != nil {
+		return nil, fmt.Errorf("auto approving routes: %w", err)
+	}
+
+	// Send both changes. Empty changes are ignored by Change().
+	api.h.Change(nodeChange, routeChange)
+
+	return &v1.RegisterNodeResponse{Node: node.Proto()}, nil
+}
+
+func (api headscaleV1APIServer) GetNode(
+	ctx context.Context,
+	request *v1.GetNodeRequest,
+) (*v1.GetNodeResponse, error) {
+	node, ok := api.h.state.GetNodeByID(types.NodeID(request.GetNodeId()))
+	if !ok {
+		return nil, status.Errorf(codes.NotFound, "node not found")
+	}
+
+	resp := node.Proto()
+
+	return &v1.GetNodeResponse{Node: resp}, nil
+}
+
+func (api headscaleV1APIServer) SetTags(
+	ctx context.Context,
+	request *v1.SetTagsRequest,
+) (*v1.SetTagsResponse, error) {
+	// Validate tags not empty - tagged nodes must have at least one tag
+	if len(request.GetTags()) == 0 {
+		return &v1.SetTagsResponse{
+				Node: nil,
+			}, status.Error(
+				codes.InvalidArgument,
+				"cannot remove all tags from a node - tagged nodes must have at least one tag",
+			)
+	}
+
+	// Validate tag format
+	for _, tag := range request.GetTags() {
+		err := validateTag(tag)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	// User XOR Tags: nodes are either tagged or user-owned, never both.
+	// Setting tags on a user-owned node converts it to a tagged node.
+	// Once tagged, a node cannot be converted back to user-owned.
+	_, found := api.h.state.GetNodeByID(types.NodeID(request.GetNodeId()))
+	if !found {
+		return &v1.SetTagsResponse{
+			Node: nil,
+		}, status.Error(codes.NotFound, "node not found")
+	}
+
+	node, nodeChange, err := api.h.state.SetNodeTags(types.NodeID(request.GetNodeId()), request.GetTags())
+	if err != nil {
+		return &v1.SetTagsResponse{
+			Node: nil,
+		}, status.Error(codes.InvalidArgument, err.Error())
+	}
+
+	api.h.Change(nodeChange)
+
+	log.Trace().
+		Caller().
+		EmbedObject(node).
+		Strs("tags", request.GetTags()).
+		Msg("changing tags of node")
+
+	return &v1.SetTagsResponse{Node: node.Proto()}, nil
+}
+
+func (api headscaleV1APIServer) SetApprovedRoutes(
+	ctx context.Context,
+	request *v1.SetApprovedRoutesRequest,
+) (*v1.SetApprovedRoutesResponse, error) {
+	log.Debug().
+		Caller().
+		Uint64(zf.NodeID, request.GetNodeId()).
+		Strs("requestedRoutes", request.GetRoutes()).
+		Msg("gRPC SetApprovedRoutes called")
+
+	var newApproved []netip.Prefix
+	for _, route := range request.GetRoutes() {
+		prefix, err := netip.ParsePrefix(route)
+		if err != nil {
+			return nil, fmt.Errorf("parsing route: %w", err)
+		}
+
+		// If the prefix is an exit route, add both. The client expect both
+		// to annotate the node as an exit node.
+		if prefix == tsaddr.AllIPv4() || prefix == tsaddr.AllIPv6() {
+			newApproved = append(newApproved, tsaddr.AllIPv4(), tsaddr.AllIPv6())
+		} else {
+			newApproved = append(newApproved, prefix)
+		}
+	}
+	slices.SortFunc(newApproved, netip.Prefix.Compare)
+	newApproved = slices.Compact(newApproved)
+
+	node, nodeChange, err := api.h.state.SetApprovedRoutes(types.NodeID(request.GetNodeId()), newApproved)
+	if err != nil {
+		return nil, status.Error(codes.InvalidArgument, err.Error())
+	}
+
+	// Always propagate node changes from SetApprovedRoutes
+	api.h.Change(nodeChange)
+
+	proto := node.Proto()
+	// Populate SubnetRoutes with PrimaryRoutes to ensure it includes only the
+	// routes that are actively served from the node (per architectural requirement in types/node.go)
+	primaryRoutes := api.h.state.GetNodePrimaryRoutes(node.ID())
+	proto.SubnetRoutes = util.PrefixesToString(primaryRoutes)
+
+	log.Debug().
+		Caller().
+		EmbedObject(node).
+		Strs("approvedRoutes", util.PrefixesToString(node.ApprovedRoutes().AsSlice())).
+		Strs("primaryRoutes", util.PrefixesToString(primaryRoutes)).
+		Strs("finalSubnetRoutes", proto.SubnetRoutes).
+		Msg("gRPC SetApprovedRoutes completed")
+
+	return &v1.SetApprovedRoutesResponse{Node: proto}, nil
+}
+
+func validateTag(tag string) error {
+	if strings.Index(tag, "tag:") != 0 {
+		return errors.New("tag must start with the string 'tag:'")
+	}
+	if strings.ToLower(tag) != tag {
+		return errors.New("tag should be lowercase")
+	}
+	if len(strings.Fields(tag)) > 1 {
+		return errors.New("tags must not contain spaces")
+	}
+	return nil
+}
+
+func (api headscaleV1APIServer) DeleteNode(
+	ctx context.Context,
+	request *v1.DeleteNodeRequest,
+) (*v1.DeleteNodeResponse, error) {
+	node, ok := api.h.state.GetNodeByID(types.NodeID(request.GetNodeId()))
+	if !ok {
+		return nil, status.Errorf(codes.NotFound, "node not found")
+	}
+
+	nodeChange, err := api.h.state.DeleteNode(node)
+	if err != nil {
+		return nil, err
+	}
+
+	api.h.Change(nodeChange)
+
+	return &v1.DeleteNodeResponse{}, nil
+}
+
+func (api headscaleV1APIServer) ExpireNode(
+	ctx context.Context,
+	request *v1.ExpireNodeRequest,
+) (*v1.ExpireNodeResponse, error) {
+	if request.GetDisableExpiry() && request.GetExpiry() != nil {
+		return nil, status.Error(
+			codes.InvalidArgument,
+			"cannot set both disable_expiry and expiry",
+		)
+	}
+
+	// Handle disable expiry request - node will never expire.
+	if request.GetDisableExpiry() {
+		node, nodeChange, err := api.h.state.SetNodeExpiry(
+			types.NodeID(request.GetNodeId()), nil,
+		)
+		if err != nil {
+			return nil, err
+		}
+
+		api.h.Change(nodeChange)
+
+		log.Trace().
+			Caller().
+			EmbedObject(node).
+			Msg("node expiry disabled")
+
+		return &v1.ExpireNodeResponse{Node: node.Proto()}, nil
+	}
+
+	expiry := time.Now()
+	if request.GetExpiry() != nil {
+		expiry = request.GetExpiry().AsTime()
+	}
+
+	node, nodeChange, err := api.h.state.SetNodeExpiry(
+		types.NodeID(request.GetNodeId()), &expiry,
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	// TODO(kradalby): Ensure that both the selfupdate and peer updates are sent
+	api.h.Change(nodeChange)
+
+	log.Trace().
+		Caller().
+		EmbedObject(node).
+		Time(zf.ExpiresAt, expiry).
+		Msg("node expired")
+
+	return &v1.ExpireNodeResponse{Node: node.Proto()}, nil
+}
+
+func (api headscaleV1APIServer) RenameNode(
+	ctx context.Context,
+	request *v1.RenameNodeRequest,
+) (*v1.RenameNodeResponse, error) {
+	node, nodeChange, err := api.h.state.RenameNode(types.NodeID(request.GetNodeId()), request.GetNewName())
+	if err != nil {
+		return nil, err
+	}
+
+	// TODO(kradalby): investigate if we need selfupdate
+	api.h.Change(nodeChange)
+
+	log.Trace().
+		Caller().
+		EmbedObject(node).
+		Str(zf.NewName, request.GetNewName()).
+		Msg("node renamed")
+
+	return &v1.RenameNodeResponse{Node: node.Proto()}, nil
+}
+
+func (api headscaleV1APIServer) ListNodes(
+	ctx context.Context,
+	request *v1.ListNodesRequest,
+) (*v1.ListNodesResponse, error) {
+	// TODO(kradalby): it looks like this can be simplified a lot,
+	// the filtering of nodes by user, vs nodes as a whole can
+	// probably be done once.
+	// TODO(kradalby): This should be done in one tx.
+	if request.GetUser() != "" {
+		user, err := api.h.state.GetUserByName(request.GetUser())
+		if err != nil {
+			return nil, err
+		}
+
+		nodes := api.h.state.ListNodesByUser(types.UserID(user.ID))
+
+		response := nodesToProto(api.h.state, nodes)
+		return &v1.ListNodesResponse{Nodes: response}, nil
+	}
+
+	nodes := api.h.state.ListNodes()
+
+	response := nodesToProto(api.h.state, nodes)
+	return &v1.ListNodesResponse{Nodes: response}, nil
+}
+
+func nodesToProto(state *state.State, nodes views.Slice[types.NodeView]) []*v1.Node {
+	response := make([]*v1.Node, nodes.Len())
+	for index, node := range nodes.All() {
+		resp := node.Proto()
+
+		// Tags-as-identity: tagged nodes show as TaggedDevices user in API responses
+		// (UserID may be set internally for "created by" tracking)
+		if node.IsTagged() {
+			resp.User = types.TaggedDevices.Proto()
+		}
+
+		resp.SubnetRoutes = util.PrefixesToString(append(state.GetNodePrimaryRoutes(node.ID()), node.ExitRoutes()...))
+		response[index] = resp
+	}
+
+	sort.Slice(response, func(i, j int) bool {
+		return response[i].Id < response[j].Id
+	})
+
+	return response
+}
+
+func (api headscaleV1APIServer) BackfillNodeIPs(
+	ctx context.Context,
+	request *v1.BackfillNodeIPsRequest,
+) (*v1.BackfillNodeIPsResponse, error) {
+	log.Trace().Caller().Msg("backfill called")
+
+	if !request.Confirmed {
+		return nil, errors.New("not confirmed, aborting")
+	}
+
+	changes, err := api.h.state.BackfillNodeIPs()
+	if err != nil {
+		return nil, err
+	}
+
+	return &v1.BackfillNodeIPsResponse{Changes: changes}, nil
+}
+
+func (api headscaleV1APIServer) CreateApiKey(
+	ctx context.Context,
+	request *v1.CreateApiKeyRequest,
+) (*v1.CreateApiKeyResponse, error) {
+	var expiration time.Time
+	if request.GetExpiration() != nil {
+		expiration = request.GetExpiration().AsTime()
+	}
+
+	apiKey, _, err := api.h.state.CreateAPIKey(&expiration)
+	if err != nil {
+		return nil, err
+	}
+
+	return &v1.CreateApiKeyResponse{ApiKey: apiKey}, nil
+}
+
+// apiKeyIdentifier is implemented by requests that identify an API key.
+type apiKeyIdentifier interface {
+	GetId() uint64
+	GetPrefix() string
+}
+
+// getAPIKey retrieves an API key by ID or prefix from the request.
+// Returns InvalidArgument if neither or both are provided.
+func (api headscaleV1APIServer) getAPIKey(req apiKeyIdentifier) (*types.APIKey, error) {
+	hasID := req.GetId() != 0
+	hasPrefix := req.GetPrefix() != ""
+
+	switch {
+	case hasID && hasPrefix:
+		return nil, status.Error(codes.InvalidArgument, "provide either id or prefix, not both")
+	case hasID:
+		return api.h.state.GetAPIKeyByID(req.GetId())
+	case hasPrefix:
+		return api.h.state.GetAPIKey(req.GetPrefix())
+	default:
+		return nil, status.Error(codes.InvalidArgument, "must provide id or prefix")
+	}
+}
+
+func (api headscaleV1APIServer) ExpireApiKey(
+	ctx context.Context,
+	request *v1.ExpireApiKeyRequest,
+) (*v1.ExpireApiKeyResponse, error) {
+	apiKey, err := api.getAPIKey(request)
+	if err != nil {
+		return nil, err
+	}
+
+	err = api.h.state.ExpireAPIKey(apiKey)
+	if err != nil {
+		return nil, err
+	}
+
+	return &v1.ExpireApiKeyResponse{}, nil
+}
+
+func (api headscaleV1APIServer) ListApiKeys(
+	ctx context.Context,
+	request *v1.ListApiKeysRequest,
+) (*v1.ListApiKeysResponse, error) {
+	apiKeys, err := api.h.state.ListAPIKeys()
+	if err != nil {
+		return nil, err
+	}
+
+	response := make([]*v1.ApiKey, len(apiKeys))
+	for index, key := range apiKeys {
+		response[index] = key.Proto()
+	}
+
+	sort.Slice(response, func(i, j int) bool {
+		return response[i].Id < response[j].Id
+	})
+
+	return &v1.ListApiKeysResponse{ApiKeys: response}, nil
+}
+
+func (api headscaleV1APIServer) DeleteApiKey(
+	ctx context.Context,
+	request *v1.DeleteApiKeyRequest,
+) (*v1.DeleteApiKeyResponse, error) {
+	apiKey, err := api.getAPIKey(request)
+	if err != nil {
+		return nil, err
+	}
+
+	if err := api.h.state.DestroyAPIKey(*apiKey); err != nil {
+		return nil, err
+	}
+
+	return &v1.DeleteApiKeyResponse{}, nil
+}
+
+func (api headscaleV1APIServer) GetPolicy(
+	_ context.Context,
+	_ *v1.GetPolicyRequest,
+) (*v1.GetPolicyResponse, error) {
+	switch api.h.cfg.Policy.Mode {
+	case types.PolicyModeDB:
+		p, err := api.h.state.GetPolicy()
+		if err != nil {
+			return nil, fmt.Errorf("loading ACL from database: %w", err)
+		}
+
+		return &v1.GetPolicyResponse{
+			Policy:    p.Data,
+			UpdatedAt: timestamppb.New(p.UpdatedAt),
+		}, nil
+	case types.PolicyModeFile:
+		// Read the file and return the contents as-is.
+		absPath := util.AbsolutePathFromConfigPath(api.h.cfg.Policy.Path)
+		f, err := os.Open(absPath)
+		if err != nil {
+			return nil, fmt.Errorf("reading policy from path %q: %w", absPath, err)
+		}
+
+		defer f.Close()
+
+		b, err := io.ReadAll(f)
+		if err != nil {
+			return nil, fmt.Errorf("reading policy from file: %w", err)
+		}
+
+		return &v1.GetPolicyResponse{Policy: string(b)}, nil
+	}
+
+	return nil, fmt.Errorf("no supported policy mode found in configuration, policy.mode: %q", api.h.cfg.Policy.Mode)
+}
+
+func (api headscaleV1APIServer) SetPolicy(
+	_ context.Context,
+	request *v1.SetPolicyRequest,
+) (*v1.SetPolicyResponse, error) {
+	if api.h.cfg.Policy.Mode != types.PolicyModeDB {
+		return nil, types.ErrPolicyUpdateIsDisabled
+	}
+
+	p := request.GetPolicy()
+
+	// Validate and reject configuration that would error when applied
+	// when creating a map response. This requires nodes, so there is still
+	// a scenario where they might be allowed if the server has no nodes
+	// yet, but it should help for the general case and for hot reloading
+	// configurations.
+	nodes := api.h.state.ListNodes()
+
+	_, err := api.h.state.SetPolicy([]byte(p))
+	if err != nil {
+		return nil, fmt.Errorf("setting policy: %w", err)
+	}
+
+	if nodes.Len() > 0 {
+		_, err = api.h.state.SSHPolicy(nodes.At(0))
+		if err != nil {
+			return nil, fmt.Errorf("verifying SSH rules: %w", err)
+		}
+	}
+
+	updated, err := api.h.state.SetPolicyInDB(p)
+	if err != nil {
+		return nil, err
+	}
+
+	// Always reload policy to ensure route re-evaluation, even if policy content hasn't changed.
+	// This ensures that routes are re-evaluated for auto-approval in cases where routes
+	// were manually disabled but could now be auto-approved with the current policy.
+	cs, err := api.h.state.ReloadPolicy()
+	if err != nil {
+		return nil, fmt.Errorf("reloading policy: %w", err)
+	}
+
+	if len(cs) > 0 {
+		api.h.Change(cs...)
+	} else {
+		log.Debug().
+			Caller().
+			Msg("No policy changes to distribute because ReloadPolicy returned empty changeset")
+	}
+
+	response := &v1.SetPolicyResponse{
+		Policy:    updated.Data,
+		UpdatedAt: timestamppb.New(updated.UpdatedAt),
+	}
+
+	log.Debug().
+		Caller().
+		Msg("gRPC SetPolicy completed successfully because response prepared")
+
+	return response, nil
+}
+
+// CheckPolicy validates the given policy against the server's live users
+// and nodes, running its `tests` block as a sandbox. Nothing is persisted
+// and the live PolicyManager is not touched. Works regardless of
+// policy.mode so operators can validate a policy file before storing it.
+func (api headscaleV1APIServer) CheckPolicy(
+	_ context.Context,
+	request *v1.CheckPolicyRequest,
+) (*v1.CheckPolicyResponse, error) {
+	polB := []byte(request.GetPolicy())
+
+	users, err := api.h.state.ListAllUsers()
+	if err != nil {
+		return nil, status.Errorf(codes.Internal, "loading users: %s", err)
+	}
+
+	nodes := api.h.state.ListNodes()
+
+	pm, err := policyv2.NewPolicyManager(polB, users, nodes)
+	if err != nil {
+		return nil, status.Error(codes.InvalidArgument, err.Error())
+	}
+
+	if _, err := pm.SetPolicy(polB); err != nil {
+		return nil, status.Error(codes.InvalidArgument, err.Error())
+	}
+
+	return &v1.CheckPolicyResponse{}, nil
+}
+
+// The following service calls are for testing and debugging
+func (api headscaleV1APIServer) DebugCreateNode(
+	ctx context.Context,
+	request *v1.DebugCreateNodeRequest,
+) (*v1.DebugCreateNodeResponse, error) {
+	user, err := api.h.state.GetUserByName(request.GetUser())
+	if err != nil {
+		return nil, err
+	}
+
+	routes, err := util.StringToIPPrefix(request.GetRoutes())
+	if err != nil {
+		return nil, err
+	}
+
+	log.Trace().
+		Caller().
+		Interface("route-prefix", routes).
+		Interface("route-str", request.GetRoutes()).
+		Msg("Creating routes for node")
+
+	registrationId, err := types.AuthIDFromString(request.GetKey())
+	if err != nil {
+		return nil, err
+	}
+
+	regData := &types.RegistrationData{
+		NodeKey:    key.NewNode().Public(),
+		MachineKey: key.NewMachine().Public(),
+		Hostname:   request.GetName(),
+		Expiry:     &time.Time{}, // zero time, not nil — preserves proto JSON round-trip semantics
+	}
+
+	log.Debug().
+		Caller().
+		Str("registration_id", registrationId.String()).
+		Msg("adding debug machine via CLI, appending to registration cache")
+
+	authRegReq := types.NewRegisterAuthRequest(regData)
+	api.h.state.SetAuthCacheEntry(registrationId, authRegReq)
+
+	// Echo back a synthetic Node so the debug response surface stays
+	// stable. The actual node is created later by AuthApprove via
+	// HandleNodeFromAuthPath using the cached RegistrationData.
+	echoNode := types.Node{
+		NodeKey:    regData.NodeKey,
+		MachineKey: regData.MachineKey,
+		Hostname:   regData.Hostname,
+		User:       user,
+		Expiry:     &time.Time{},
+		LastSeen:   &time.Time{},
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname:    request.GetName(),
+			OS:          "TestOS",
+			RoutableIPs: routes,
+		},
+	}
+
+	return &v1.DebugCreateNodeResponse{Node: echoNode.Proto()}, nil
+}
+
+func (api headscaleV1APIServer) Health(
+	ctx context.Context,
+	request *v1.HealthRequest,
+) (*v1.HealthResponse, error) {
+	var healthErr error
+	response := &v1.HealthResponse{}
+
+	if err := api.h.state.PingDB(ctx); err != nil {
+		healthErr = fmt.Errorf("pinging database: %w", err)
+	} else {
+		response.DatabaseConnectivity = true
+	}
+
+	if healthErr != nil {
+		log.Error().Err(healthErr).Msg("health check failed")
+	}
+
+	return response, healthErr
+}
+
+func (api headscaleV1APIServer) AuthRegister(
+	ctx context.Context,
+	request *v1.AuthRegisterRequest,
+) (*v1.AuthRegisterResponse, error) {
+	resp, err := api.RegisterNode(ctx, &v1.RegisterNodeRequest{
+		Key:  request.GetAuthId(),
+		User: request.GetUser(),
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	return &v1.AuthRegisterResponse{Node: resp.GetNode()}, nil
+}
+
+func (api headscaleV1APIServer) AuthApprove(
+	ctx context.Context,
+	request *v1.AuthApproveRequest,
+) (*v1.AuthApproveResponse, error) {
+	authID, err := types.AuthIDFromString(request.GetAuthId())
+	if err != nil {
+		return nil, status.Errorf(codes.InvalidArgument, "invalid auth_id: %v", err)
+	}
+
+	authReq, ok := api.h.state.GetAuthCacheEntry(authID)
+	if !ok {
+		return nil, status.Errorf(codes.NotFound, "no pending auth session for auth_id %s", authID)
+	}
+
+	authReq.FinishAuth(types.AuthVerdict{})
+
+	return &v1.AuthApproveResponse{}, nil
+}
+
+func (api headscaleV1APIServer) AuthReject(
+	ctx context.Context,
+	request *v1.AuthRejectRequest,
+) (*v1.AuthRejectResponse, error) {
+	authID, err := types.AuthIDFromString(request.GetAuthId())
+	if err != nil {
+		return nil, status.Errorf(codes.InvalidArgument, "invalid auth_id: %v", err)
+	}
+
+	authReq, ok := api.h.state.GetAuthCacheEntry(authID)
+	if !ok {
+		return nil, status.Errorf(codes.NotFound, "no pending auth session for auth_id %s", authID)
+	}
+
+	authReq.FinishAuth(types.AuthVerdict{
+		Err: fmt.Errorf("auth request rejected"),
+	})
+
+	return &v1.AuthRejectResponse{}, nil
+}
+
+func (api headscaleV1APIServer) mustEmbedUnimplementedHeadscaleServiceServer() {}
diff --git a/hscontrol/grpcv1_test.go b/hscontrol/grpcv1_test.go
new file mode 100644
index 000000000..bd4289cb7
--- /dev/null
+++ b/hscontrol/grpcv1_test.go
@@ -0,0 +1,823 @@
+package hscontrol
+
+import (
+	"context"
+	"testing"
+	"time"
+
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
+	"github.com/juanfont/headscale/hscontrol/types"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"google.golang.org/grpc/codes"
+	"google.golang.org/grpc/status"
+	"tailscale.com/tailcfg"
+	"tailscale.com/types/key"
+)
+
+func Test_validateTag(t *testing.T) {
+	type args struct {
+		tag string
+	}
+
+	tests := []struct {
+		name    string
+		args    args
+		wantErr bool
+	}{
+		{
+			name:    "valid tag",
+			args:    args{tag: "tag:test"},
+			wantErr: false,
+		},
+		{
+			name:    "tag without tag prefix",
+			args:    args{tag: "test"},
+			wantErr: true,
+		},
+		{
+			name:    "uppercase tag",
+			args:    args{tag: "tag:tEST"},
+			wantErr: true,
+		},
+		{
+			name:    "tag that contains space",
+			args:    args{tag: "tag:this is a spaced tag"},
+			wantErr: true,
+		},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := validateTag(tt.args.tag)
+			if (err != nil) != tt.wantErr {
+				t.Errorf("validateTag() error = %v, wantErr %v", err, tt.wantErr)
+			}
+		})
+	}
+}
+
+// TestSetTags_Conversion tests the conversion of user-owned nodes to tagged nodes.
+// The tags-as-identity model allows one-way conversion from user-owned to tagged.
+// Tag authorization is checked via the policy manager - unauthorized tags are rejected.
+func TestSetTags_Conversion(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	// Create test user and nodes
+	user := app.state.CreateUserForTest("test-user")
+
+	// Create a pre-auth key WITHOUT tags for user-owned node
+	pak, err := app.state.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
+	require.NoError(t, err)
+
+	machineKey1 := key.NewMachine()
+	nodeKey1 := key.NewNode()
+
+	// Register a user-owned node (via untagged PreAuthKey)
+	userOwnedReq := tailcfg.RegisterRequest{
+		Auth: &tailcfg.RegisterResponseAuth{
+			AuthKey: pak.Key,
+		},
+		NodeKey: nodeKey1.Public(),
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname: "user-owned-node",
+		},
+	}
+	_, err = app.handleRegisterWithAuthKey(userOwnedReq, machineKey1.Public())
+	require.NoError(t, err)
+
+	// Get the created node
+	userOwnedNode, found := app.state.GetNodeByNodeKey(nodeKey1.Public())
+	require.True(t, found)
+
+	// Create API server instance
+	apiServer := newHeadscaleV1APIServer(app)
+
+	tests := []struct {
+		name           string
+		nodeID         uint64
+		tags           []string
+		wantErr        bool
+		wantCode       codes.Code
+		wantErrMessage string
+	}{
+		{
+			// Conversion is allowed, but tag authorization fails without tagOwners
+			name:           "reject unauthorized tags on user-owned node",
+			nodeID:         uint64(userOwnedNode.ID()),
+			tags:           []string{"tag:server"},
+			wantErr:        true,
+			wantCode:       codes.InvalidArgument,
+			wantErrMessage: "requested tags",
+		},
+		{
+			// Conversion is allowed, but tag authorization fails without tagOwners
+			name:           "reject multiple unauthorized tags",
+			nodeID:         uint64(userOwnedNode.ID()),
+			tags:           []string{"tag:server", "tag:database"},
+			wantErr:        true,
+			wantCode:       codes.InvalidArgument,
+			wantErrMessage: "requested tags",
+		},
+		{
+			name:           "reject non-existent node",
+			nodeID:         99999,
+			tags:           []string{"tag:server"},
+			wantErr:        true,
+			wantCode:       codes.NotFound,
+			wantErrMessage: "node not found",
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			t.Parallel()
+
+			resp, err := apiServer.SetTags(context.Background(), &v1.SetTagsRequest{
+				NodeId: tt.nodeID,
+				Tags:   tt.tags,
+			})
+
+			if tt.wantErr {
+				require.Error(t, err)
+				st, ok := status.FromError(err)
+				require.True(t, ok, "error should be a gRPC status error")
+				assert.Equal(t, tt.wantCode, st.Code())
+				assert.Contains(t, st.Message(), tt.wantErrMessage)
+				assert.Nil(t, resp.GetNode())
+			} else {
+				require.NoError(t, err)
+				assert.NotNil(t, resp)
+				assert.NotNil(t, resp.GetNode())
+			}
+		})
+	}
+}
+
+// TestSetTags_TaggedNode tests that SetTags correctly identifies tagged nodes
+// and doesn't reject them with the "user-owned nodes" error.
+// Note: This test doesn't validate ACL tag authorization - that's tested elsewhere.
+func TestSetTags_TaggedNode(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	// Create test user and tagged pre-auth key
+	user := app.state.CreateUserForTest("test-user")
+	pak, err := app.state.CreatePreAuthKey(user.TypedID(), false, false, nil, []string{"tag:initial"})
+	require.NoError(t, err)
+
+	machineKey := key.NewMachine()
+	nodeKey := key.NewNode()
+
+	// Register a tagged node (via tagged PreAuthKey)
+	taggedReq := tailcfg.RegisterRequest{
+		Auth: &tailcfg.RegisterResponseAuth{
+			AuthKey: pak.Key,
+		},
+		NodeKey: nodeKey.Public(),
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname: "tagged-node",
+		},
+	}
+	_, err = app.handleRegisterWithAuthKey(taggedReq, machineKey.Public())
+	require.NoError(t, err)
+
+	// Get the created node
+	taggedNode, found := app.state.GetNodeByNodeKey(nodeKey.Public())
+	require.True(t, found)
+	assert.True(t, taggedNode.IsTagged(), "Node should be tagged")
+	assert.False(t, taggedNode.UserID().Valid(), "Tagged node should not have UserID")
+
+	// Create API server instance
+	apiServer := newHeadscaleV1APIServer(app)
+
+	// Test: SetTags should work on tagged nodes.
+	resp, err := apiServer.SetTags(context.Background(), &v1.SetTagsRequest{
+		NodeId: uint64(taggedNode.ID()),
+		Tags:   []string{"tag:initial"}, // Keep existing tag to avoid ACL validation issues
+	})
+
+	// The call should NOT fail with "cannot set tags on user-owned nodes"
+	if err != nil {
+		st, ok := status.FromError(err)
+		require.True(t, ok)
+		// If error is about unauthorized tags, that's fine - ACL validation is working
+		// If error is about user-owned nodes, that's the bug we're testing for
+		assert.NotContains(t, st.Message(), "user-owned nodes", "Should not reject tagged nodes as user-owned")
+	} else {
+		// Success is also fine
+		assert.NotNil(t, resp)
+	}
+}
+
+// TestSetTags_CannotRemoveAllTags tests that SetTags rejects attempts to remove
+// all tags from a tagged node, enforcing Tailscale's requirement that tagged
+// nodes must have at least one tag.
+func TestSetTags_CannotRemoveAllTags(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	// Create test user and tagged pre-auth key
+	user := app.state.CreateUserForTest("test-user")
+	pak, err := app.state.CreatePreAuthKey(user.TypedID(), false, false, nil, []string{"tag:server"})
+	require.NoError(t, err)
+
+	machineKey := key.NewMachine()
+	nodeKey := key.NewNode()
+
+	// Register a tagged node
+	taggedReq := tailcfg.RegisterRequest{
+		Auth: &tailcfg.RegisterResponseAuth{
+			AuthKey: pak.Key,
+		},
+		NodeKey: nodeKey.Public(),
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname: "tagged-node",
+		},
+	}
+	_, err = app.handleRegisterWithAuthKey(taggedReq, machineKey.Public())
+	require.NoError(t, err)
+
+	// Get the created node
+	taggedNode, found := app.state.GetNodeByNodeKey(nodeKey.Public())
+	require.True(t, found)
+	assert.True(t, taggedNode.IsTagged())
+
+	// Create API server instance
+	apiServer := newHeadscaleV1APIServer(app)
+
+	// Attempt to remove all tags (empty array)
+	resp, err := apiServer.SetTags(context.Background(), &v1.SetTagsRequest{
+		NodeId: uint64(taggedNode.ID()),
+		Tags:   []string{}, // Empty - attempting to remove all tags
+	})
+
+	// Should fail with InvalidArgument error
+	require.Error(t, err)
+	st, ok := status.FromError(err)
+	require.True(t, ok, "error should be a gRPC status error")
+	assert.Equal(t, codes.InvalidArgument, st.Code())
+	assert.Contains(t, st.Message(), "cannot remove all tags")
+	assert.Nil(t, resp.GetNode())
+}
+
+// TestSetTags_ClearsUserIDInDatabase tests that converting a user-owned node
+// to a tagged node via SetTags correctly persists user_id = NULL in the
+// database, not just in-memory.
+// https://github.com/juanfont/headscale/issues/3161
+func TestSetTags_ClearsUserIDInDatabase(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	user := app.state.CreateUserForTest("tag-owner")
+	err := app.state.UpdatePolicyManagerUsersForTest()
+	require.NoError(t, err)
+
+	_, err = app.state.SetPolicy([]byte(`{
+		"tagOwners": {"tag:server": ["tag-owner@"]},
+		"acls": [{"action": "accept", "src": ["*"], "dst": ["*:*"]}]
+	}`))
+	require.NoError(t, err)
+
+	// Register a user-owned node (untagged PreAuthKey).
+	pak, err := app.state.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
+	require.NoError(t, err)
+
+	machineKey := key.NewMachine()
+	nodeKey := key.NewNode()
+
+	regReq := tailcfg.RegisterRequest{
+		Auth: &tailcfg.RegisterResponseAuth{
+			AuthKey: pak.Key,
+		},
+		NodeKey: nodeKey.Public(),
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname: "user-owned-node",
+		},
+	}
+	_, err = app.handleRegisterWithAuthKey(regReq, machineKey.Public())
+	require.NoError(t, err)
+
+	node, found := app.state.GetNodeByNodeKey(nodeKey.Public())
+	require.True(t, found)
+	require.False(t, node.IsTagged(), "node should start as user-owned")
+	require.True(t, node.UserID().Valid(), "user-owned node must have UserID")
+
+	nodeID := node.ID()
+
+	// Convert to tagged via SetTags API.
+	apiServer := newHeadscaleV1APIServer(app)
+	_, err = apiServer.SetTags(context.Background(), &v1.SetTagsRequest{
+		NodeId: uint64(nodeID),
+		Tags:   []string{"tag:server"},
+	})
+	require.NoError(t, err)
+
+	// Verify in-memory state is correct.
+	nsNode, found := app.state.GetNodeByID(nodeID)
+	require.True(t, found)
+	assert.True(t, nsNode.IsTagged(), "NodeStore: node should be tagged")
+	assert.False(t, nsNode.UserID().Valid(),
+		"NodeStore: UserID should be nil for tagged node")
+
+	// THE CRITICAL CHECK: verify database has user_id = NULL.
+	dbNode, err := app.state.DB().GetNodeByID(nodeID)
+	require.NoError(t, err)
+	assert.Nil(t, dbNode.UserID,
+		"Database: user_id must be NULL after converting to tagged node")
+	assert.True(t, dbNode.IsTagged(),
+		"Database: tags must be set")
+}
+
+// TestSetTags_NodeDisappearsFromUserListing tests issue #3161:
+// after converting a user-owned node to tagged, it must no longer appear
+// when listing nodes filtered by the original user.
+// https://github.com/juanfont/headscale/issues/3161
+func TestSetTags_NodeDisappearsFromUserListing(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	user := app.state.CreateUserForTest("list-user")
+	err := app.state.UpdatePolicyManagerUsersForTest()
+	require.NoError(t, err)
+
+	_, err = app.state.SetPolicy([]byte(`{
+		"tagOwners": {"tag:web": ["list-user@"]},
+		"acls": [{"action": "accept", "src": ["*"], "dst": ["*:*"]}]
+	}`))
+	require.NoError(t, err)
+
+	// Register a user-owned node.
+	pak, err := app.state.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
+	require.NoError(t, err)
+
+	machineKey := key.NewMachine()
+	nodeKey := key.NewNode()
+
+	regReq := tailcfg.RegisterRequest{
+		Auth: &tailcfg.RegisterResponseAuth{
+			AuthKey: pak.Key,
+		},
+		NodeKey: nodeKey.Public(),
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname: "web-server",
+		},
+	}
+	_, err = app.handleRegisterWithAuthKey(regReq, machineKey.Public())
+	require.NoError(t, err)
+
+	node, found := app.state.GetNodeByNodeKey(nodeKey.Public())
+	require.True(t, found)
+
+	// Verify node appears under user before tagging.
+	apiServer := newHeadscaleV1APIServer(app)
+	resp, err := apiServer.ListNodes(context.Background(), &v1.ListNodesRequest{
+		User: "list-user",
+	})
+	require.NoError(t, err)
+	assert.Len(t, resp.GetNodes(), 1, "user-owned node should appear under user")
+
+	// Convert to tagged.
+	_, err = apiServer.SetTags(context.Background(), &v1.SetTagsRequest{
+		NodeId: uint64(node.ID()),
+		Tags:   []string{"tag:web"},
+	})
+	require.NoError(t, err)
+
+	// Node must NOT appear when listing by original user.
+	resp, err = apiServer.ListNodes(context.Background(), &v1.ListNodesRequest{
+		User: "list-user",
+	})
+	require.NoError(t, err)
+	assert.Empty(t, resp.GetNodes(),
+		"tagged node must not appear when listing nodes for original user")
+
+	// Node must still appear in unfiltered listing.
+	allResp, err := apiServer.ListNodes(context.Background(), &v1.ListNodesRequest{})
+	require.NoError(t, err)
+	require.Len(t, allResp.GetNodes(), 1)
+	assert.Contains(t, allResp.GetNodes()[0].GetTags(), "tag:web")
+}
+
+// TestSetTags_NodeStoreAndDBConsistency verifies that after SetTags, the
+// in-memory NodeStore and the database agree on the node's ownership state.
+// https://github.com/juanfont/headscale/issues/3161
+func TestSetTags_NodeStoreAndDBConsistency(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	user := app.state.CreateUserForTest("consistency-user")
+	err := app.state.UpdatePolicyManagerUsersForTest()
+	require.NoError(t, err)
+
+	_, err = app.state.SetPolicy([]byte(`{
+		"tagOwners": {"tag:db": ["consistency-user@"]},
+		"acls": [{"action": "accept", "src": ["*"], "dst": ["*:*"]}]
+	}`))
+	require.NoError(t, err)
+
+	pak, err := app.state.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
+	require.NoError(t, err)
+
+	machineKey := key.NewMachine()
+	nodeKey := key.NewNode()
+
+	regReq := tailcfg.RegisterRequest{
+		Auth: &tailcfg.RegisterResponseAuth{
+			AuthKey: pak.Key,
+		},
+		NodeKey: nodeKey.Public(),
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname: "db-node",
+		},
+	}
+	_, err = app.handleRegisterWithAuthKey(regReq, machineKey.Public())
+	require.NoError(t, err)
+
+	node, found := app.state.GetNodeByNodeKey(nodeKey.Public())
+	require.True(t, found)
+
+	nodeID := node.ID()
+
+	// Convert to tagged.
+	apiServer := newHeadscaleV1APIServer(app)
+	_, err = apiServer.SetTags(context.Background(), &v1.SetTagsRequest{
+		NodeId: uint64(nodeID),
+		Tags:   []string{"tag:db"},
+	})
+	require.NoError(t, err)
+
+	// In-memory state.
+	nsNode, found := app.state.GetNodeByID(nodeID)
+	require.True(t, found)
+
+	// Database state.
+	dbNode, err := app.state.DB().GetNodeByID(nodeID)
+	require.NoError(t, err)
+
+	// Both must agree: tagged, no UserID.
+	assert.True(t, nsNode.IsTagged(), "NodeStore: should be tagged")
+	assert.True(t, dbNode.IsTagged(), "Database: should be tagged")
+
+	assert.False(t, nsNode.UserID().Valid(),
+		"NodeStore: UserID should be nil")
+	assert.Nil(t, dbNode.UserID,
+		"Database: user_id should be NULL")
+
+	assert.Equal(t,
+		nsNode.UserID().Valid(),
+		dbNode.UserID != nil,
+		"NodeStore and database must agree on UserID state")
+}
+
+// TestSetTags_UserDeletionDoesNotCascadeToTaggedNode tests that deleting the
+// original user does not cascade-delete a node that was converted to tagged
+// via SetTags. This catches the real-world consequence of stale user_id:
+// ON DELETE CASCADE would destroy the tagged node.
+// https://github.com/juanfont/headscale/issues/3161
+func TestSetTags_UserDeletionDoesNotCascadeToTaggedNode(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	user := app.state.CreateUserForTest("doomed-user")
+	err := app.state.UpdatePolicyManagerUsersForTest()
+	require.NoError(t, err)
+
+	_, err = app.state.SetPolicy([]byte(`{
+		"tagOwners": {"tag:survivor": ["doomed-user@"]},
+		"acls": [{"action": "accept", "src": ["*"], "dst": ["*:*"]}]
+	}`))
+	require.NoError(t, err)
+
+	pak, err := app.state.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
+	require.NoError(t, err)
+
+	machineKey := key.NewMachine()
+	nodeKey := key.NewNode()
+
+	regReq := tailcfg.RegisterRequest{
+		Auth: &tailcfg.RegisterResponseAuth{
+			AuthKey: pak.Key,
+		},
+		NodeKey: nodeKey.Public(),
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname: "survivor-node",
+		},
+	}
+	_, err = app.handleRegisterWithAuthKey(regReq, machineKey.Public())
+	require.NoError(t, err)
+
+	node, found := app.state.GetNodeByNodeKey(nodeKey.Public())
+	require.True(t, found)
+
+	nodeID := node.ID()
+
+	// Convert to tagged.
+	apiServer := newHeadscaleV1APIServer(app)
+	_, err = apiServer.SetTags(context.Background(), &v1.SetTagsRequest{
+		NodeId: uint64(nodeID),
+		Tags:   []string{"tag:survivor"},
+	})
+	require.NoError(t, err)
+
+	// Delete the original user.
+	_, err = app.state.DeleteUser(*user.TypedID())
+	require.NoError(t, err)
+
+	// The tagged node must survive in both NodeStore and database.
+	nsNode, found := app.state.GetNodeByID(nodeID)
+	require.True(t, found, "tagged node must survive user deletion in NodeStore")
+	assert.True(t, nsNode.IsTagged())
+
+	dbNode, err := app.state.DB().GetNodeByID(nodeID)
+	require.NoError(t, err, "tagged node must survive user deletion in database")
+	assert.True(t, dbNode.IsTagged())
+	assert.Nil(t, dbNode.UserID)
+}
+
+// TestDeleteUser_ReturnsProperChangeSignal tests issue #2967 fix:
+// When a user is deleted, the state should return a non-empty change signal
+// to ensure policy manager is updated and clients are notified immediately.
+func TestDeleteUser_ReturnsProperChangeSignal(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	// Create a user
+	user := app.state.CreateUserForTest("test-user-to-delete")
+	require.NotNil(t, user)
+
+	// Delete the user and verify a non-empty change is returned
+	// Issue #2967: Without the fix, DeleteUser returned an empty change,
+	// causing stale policy state until another user operation triggered an update.
+	changeSignal, err := app.state.DeleteUser(*user.TypedID())
+	require.NoError(t, err, "DeleteUser should succeed")
+	assert.False(t, changeSignal.IsEmpty(), "DeleteUser should return a non-empty change signal (issue #2967)")
+}
+
+// TestDeleteUser_TaggedNodeSurvives tests that deleting a user succeeds when
+// the user's only nodes are tagged, and that those nodes remain in the
+// NodeStore with nil UserID.
+// https://github.com/juanfont/headscale/issues/3077
+func TestDeleteUser_TaggedNodeSurvives(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+
+	user := app.state.CreateUserForTest("legacy-user")
+
+	// Register a tagged node via the full auth flow.
+	tags := []string{"tag:server"}
+	pak, err := app.state.CreatePreAuthKey(user.TypedID(), true, false, nil, tags)
+	require.NoError(t, err)
+
+	machineKey := key.NewMachine()
+	nodeKey := key.NewNode()
+
+	regReq := tailcfg.RegisterRequest{
+		Auth: &tailcfg.RegisterResponseAuth{
+			AuthKey: pak.Key,
+		},
+		NodeKey: nodeKey.Public(),
+		Hostinfo: &tailcfg.Hostinfo{
+			Hostname: "tagged-server",
+		},
+		Expiry: time.Now().Add(24 * time.Hour),
+	}
+
+	resp, err := app.handleRegisterWithAuthKey(regReq, machineKey.Public())
+	require.NoError(t, err)
+	require.True(t, resp.MachineAuthorized)
+
+	// Verify the registered node has nil UserID (enforced at registration).
+	node, found := app.state.GetNodeByNodeKey(nodeKey.Public())
+	require.True(t, found)
+	require.True(t, node.IsTagged())
+	assert.False(t, node.UserID().Valid(),
+		"tagged node should have nil UserID after registration")
+
+	nodeID := node.ID()
+
+	// NodeStore should not list the tagged node under any user.
+	nodesForUser := app.state.ListNodesByUser(types.UserID(user.ID))
+	assert.Equal(t, 0, nodesForUser.Len(),
+		"tagged nodes should not appear in nodesByUser index")
+
+	// Delete the user.
+	changeSignal, err := app.state.DeleteUser(*user.TypedID())
+	require.NoError(t, err)
+	assert.False(t, changeSignal.IsEmpty())
+
+	// Tagged node survives in the NodeStore.
+	nodeAfter, found := app.state.GetNodeByID(nodeID)
+	require.True(t, found, "tagged node should survive user deletion")
+	assert.True(t, nodeAfter.IsTagged())
+	assert.False(t, nodeAfter.UserID().Valid())
+
+	// Tagged node appears in the global list.
+	allNodes := app.state.ListNodes()
+	foundInAll := false
+
+	for _, n := range allNodes.All() {
+		if n.ID() == nodeID {
+			foundInAll = true
+
+			break
+		}
+	}
+
+	assert.True(t, foundInAll, "tagged node should appear in the global node list")
+}
+
+// TestExpireApiKey_ByID tests that API keys can be expired by ID.
+func TestExpireApiKey_ByID(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+	apiServer := newHeadscaleV1APIServer(app)
+
+	// Create an API key
+	createResp, err := apiServer.CreateApiKey(context.Background(), &v1.CreateApiKeyRequest{})
+	require.NoError(t, err)
+	require.NotEmpty(t, createResp.GetApiKey())
+
+	// List keys to get the ID
+	listResp, err := apiServer.ListApiKeys(context.Background(), &v1.ListApiKeysRequest{})
+	require.NoError(t, err)
+	require.Len(t, listResp.GetApiKeys(), 1)
+
+	keyID := listResp.GetApiKeys()[0].GetId()
+
+	// Expire by ID
+	_, err = apiServer.ExpireApiKey(context.Background(), &v1.ExpireApiKeyRequest{
+		Id: keyID,
+	})
+	require.NoError(t, err)
+
+	// Verify key is expired (expiration is set to now or in the past)
+	listResp, err = apiServer.ListApiKeys(context.Background(), &v1.ListApiKeysRequest{})
+	require.NoError(t, err)
+	require.Len(t, listResp.GetApiKeys(), 1)
+	assert.NotNil(t, listResp.GetApiKeys()[0].GetExpiration(), "expiration should be set")
+}
+
+// TestExpireApiKey_ByPrefix tests that API keys can still be expired by prefix.
+func TestExpireApiKey_ByPrefix(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+	apiServer := newHeadscaleV1APIServer(app)
+
+	// Create an API key
+	createResp, err := apiServer.CreateApiKey(context.Background(), &v1.CreateApiKeyRequest{})
+	require.NoError(t, err)
+	require.NotEmpty(t, createResp.GetApiKey())
+
+	// List keys to get the prefix
+	listResp, err := apiServer.ListApiKeys(context.Background(), &v1.ListApiKeysRequest{})
+	require.NoError(t, err)
+	require.Len(t, listResp.GetApiKeys(), 1)
+
+	keyPrefix := listResp.GetApiKeys()[0].GetPrefix()
+
+	// Expire by prefix
+	_, err = apiServer.ExpireApiKey(context.Background(), &v1.ExpireApiKeyRequest{
+		Prefix: keyPrefix,
+	})
+	require.NoError(t, err)
+}
+
+// TestDeleteApiKey_ByID tests that API keys can be deleted by ID.
+func TestDeleteApiKey_ByID(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+	apiServer := newHeadscaleV1APIServer(app)
+
+	// Create an API key
+	createResp, err := apiServer.CreateApiKey(context.Background(), &v1.CreateApiKeyRequest{})
+	require.NoError(t, err)
+	require.NotEmpty(t, createResp.GetApiKey())
+
+	// List keys to get the ID
+	listResp, err := apiServer.ListApiKeys(context.Background(), &v1.ListApiKeysRequest{})
+	require.NoError(t, err)
+	require.Len(t, listResp.GetApiKeys(), 1)
+
+	keyID := listResp.GetApiKeys()[0].GetId()
+
+	// Delete by ID
+	_, err = apiServer.DeleteApiKey(context.Background(), &v1.DeleteApiKeyRequest{
+		Id: keyID,
+	})
+	require.NoError(t, err)
+
+	// Verify key is deleted
+	listResp, err = apiServer.ListApiKeys(context.Background(), &v1.ListApiKeysRequest{})
+	require.NoError(t, err)
+	assert.Empty(t, listResp.GetApiKeys())
+}
+
+// TestDeleteApiKey_ByPrefix tests that API keys can still be deleted by prefix.
+func TestDeleteApiKey_ByPrefix(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+	apiServer := newHeadscaleV1APIServer(app)
+
+	// Create an API key
+	createResp, err := apiServer.CreateApiKey(context.Background(), &v1.CreateApiKeyRequest{})
+	require.NoError(t, err)
+	require.NotEmpty(t, createResp.GetApiKey())
+
+	// List keys to get the prefix
+	listResp, err := apiServer.ListApiKeys(context.Background(), &v1.ListApiKeysRequest{})
+	require.NoError(t, err)
+	require.Len(t, listResp.GetApiKeys(), 1)
+
+	keyPrefix := listResp.GetApiKeys()[0].GetPrefix()
+
+	// Delete by prefix
+	_, err = apiServer.DeleteApiKey(context.Background(), &v1.DeleteApiKeyRequest{
+		Prefix: keyPrefix,
+	})
+	require.NoError(t, err)
+
+	// Verify key is deleted
+	listResp, err = apiServer.ListApiKeys(context.Background(), &v1.ListApiKeysRequest{})
+	require.NoError(t, err)
+	assert.Empty(t, listResp.GetApiKeys())
+}
+
+// TestExpireApiKey_NoIdentifier tests that an error is returned when neither ID nor prefix is provided.
+func TestExpireApiKey_NoIdentifier(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+	apiServer := newHeadscaleV1APIServer(app)
+
+	_, err := apiServer.ExpireApiKey(context.Background(), &v1.ExpireApiKeyRequest{})
+	require.Error(t, err)
+	st, ok := status.FromError(err)
+	require.True(t, ok, "error should be a gRPC status error")
+	assert.Equal(t, codes.InvalidArgument, st.Code())
+	assert.Contains(t, st.Message(), "must provide id or prefix")
+}
+
+// TestDeleteApiKey_NoIdentifier tests that an error is returned when neither ID nor prefix is provided.
+func TestDeleteApiKey_NoIdentifier(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+	apiServer := newHeadscaleV1APIServer(app)
+
+	_, err := apiServer.DeleteApiKey(context.Background(), &v1.DeleteApiKeyRequest{})
+	require.Error(t, err)
+	st, ok := status.FromError(err)
+	require.True(t, ok, "error should be a gRPC status error")
+	assert.Equal(t, codes.InvalidArgument, st.Code())
+	assert.Contains(t, st.Message(), "must provide id or prefix")
+}
+
+// TestExpireApiKey_BothIdentifiers tests that an error is returned when both ID and prefix are provided.
+func TestExpireApiKey_BothIdentifiers(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+	apiServer := newHeadscaleV1APIServer(app)
+
+	_, err := apiServer.ExpireApiKey(context.Background(), &v1.ExpireApiKeyRequest{
+		Id:     1,
+		Prefix: "test",
+	})
+	require.Error(t, err)
+	st, ok := status.FromError(err)
+	require.True(t, ok, "error should be a gRPC status error")
+	assert.Equal(t, codes.InvalidArgument, st.Code())
+	assert.Contains(t, st.Message(), "provide either id or prefix, not both")
+}
+
+// TestDeleteApiKey_BothIdentifiers tests that an error is returned when both ID and prefix are provided.
+func TestDeleteApiKey_BothIdentifiers(t *testing.T) {
+	t.Parallel()
+
+	app := createTestApp(t)
+	apiServer := newHeadscaleV1APIServer(app)
+
+	_, err := apiServer.DeleteApiKey(context.Background(), &v1.DeleteApiKeyRequest{
+		Id:     1,
+		Prefix: "test",
+	})
+	require.Error(t, err)
+	st, ok := status.FromError(err)
+	require.True(t, ok, "error should be a gRPC status error")
+	assert.Equal(t, codes.InvalidArgument, st.Code())
+	assert.Contains(t, st.Message(), "provide either id or prefix, not both")
+}
diff --git a/hscontrol/handlers.go b/hscontrol/handlers.go
index 242673b38..881079038 100644
--- a/hscontrol/handlers.go
+++ b/hscontrol/handlers.go
@@ -129,7 +129,7 @@ func parseCapabilityVersion(req *http.Request) (tailcfg.CapabilityVersion, error
 }
 
 // verifyBodyLimit caps the request body for /verify. The DERP verify
-// protocol payload ([tailcfg.DERPAdmitClientRequest]) is a few hundred
+// protocol payload (tailcfg.DERPAdmitClientRequest) is a few hundred
 // bytes; 4 KiB is generous and prevents an unauthenticated client from
 // OOMing the public router with arbitrarily large POSTs.
 const verifyBodyLimit int64 = 4 * 1024
@@ -148,12 +148,20 @@ func (h *Headscale) handleVerifyRequest(
 		return NewHTTPError(http.StatusBadRequest, "Bad Request: invalid JSON", fmt.Errorf("parsing DERP client request: %w", err))
 	}
 
-	allow := h.state.ListNodes().ContainsFunc(func(n types.NodeView) bool {
-		return n.NodeKey() == derpAdmitClientRequest.NodePublic
-	})
+	nodes := h.state.ListNodes()
+
+	// Check if any node has the requested NodeKey
+	var nodeKeyFound bool
+
+	for _, node := range nodes.All() {
+		if node.NodeKey() == derpAdmitClientRequest.NodePublic {
+			nodeKeyFound = true
+			break
+		}
+	}
 
 	resp := &tailcfg.DERPAdmitClientResponse{
-		Allow: allow,
+		Allow: nodeKeyFound,
 	}
 
 	return json.NewEncoder(writer).Encode(resp)
@@ -172,18 +180,13 @@ func (h *Headscale) VerifyHandler(
 
 	req.Body = http.MaxBytesReader(writer, req.Body, verifyBodyLimit)
 
-	// Set the Content-Type before any body byte is written. The first
-	// Write in handleVerifyRequest triggers an implicit WriteHeader that
-	// snapshots the header map, so setting it afterwards is a no-op. The
-	// error path resets the Content-Type via http.Error, so error
-	// responses remain text/plain.
-	writer.Header().Set("Content-Type", "application/json")
-
 	err := h.handleVerifyRequest(req, writer)
 	if err != nil {
 		httpError(writer, err)
 		return
 	}
+
+	writer.Header().Set("Content-Type", "application/json")
 }
 
 // KeyHandler provides the Headscale pub key
@@ -297,23 +300,18 @@ func NewAuthProviderWeb(serverURL string) *AuthProviderWeb {
 	}
 }
 
-// authPathURL builds an auth-flow URL of the form
-// "<serverURL>/<kind>/<id>", trimming a trailing slash from serverURL.
-func authPathURL(serverURL, kind string, authID types.AuthID) string {
-	return fmt.Sprintf(
-		"%s/%s/%s",
-		strings.TrimSuffix(serverURL, "/"),
-		kind,
-		authID.String(),
-	)
-}
-
 func (a *AuthProviderWeb) RegisterURL(authID types.AuthID) string {
-	return authPathURL(a.serverURL, "register", authID)
+	return fmt.Sprintf(
+		"%s/register/%s",
+		strings.TrimSuffix(a.serverURL, "/"),
+		authID.String())
 }
 
 func (a *AuthProviderWeb) AuthURL(authID types.AuthID) string {
-	return authPathURL(a.serverURL, "auth", authID)
+	return fmt.Sprintf(
+		"%s/auth/%s",
+		strings.TrimSuffix(a.serverURL, "/"),
+		authID.String())
 }
 
 func (a *AuthProviderWeb) AuthHandler(
@@ -340,7 +338,7 @@ func (a *AuthProviderWeb) AuthHandler(
 }
 
 func authIDFromRequest(req *http.Request) (types.AuthID, error) {
-	raw, err := stringParam(req, "auth_id")
+	raw, err := urlParam[string](req, "auth_id")
 	if err != nil {
 		return "", NewHTTPError(http.StatusBadRequest, "invalid auth id", fmt.Errorf("parsing auth_id from URL: %w", err))
 	}
@@ -360,7 +358,7 @@ func authIDFromRequest(req *http.Request) (types.AuthID, error) {
 // Listens in /register/:registration_id.
 //
 // This is not part of the Tailscale control API, as we could send whatever URL
-// in the [tailcfg.RegisterResponse.AuthURL] field.
+// in the RegisterResponse.AuthURL field.
 func (a *AuthProviderWeb) RegisterHandler(
 	writer http.ResponseWriter,
 	req *http.Request,
diff --git a/hscontrol/handlers_test.go b/hscontrol/handlers_test.go
index 9fe315c28..12ab7f96c 100644
--- a/hscontrol/handlers_test.go
+++ b/hscontrol/handlers_test.go
@@ -3,26 +3,20 @@ package hscontrol
 import (
 	"bytes"
 	"context"
-	"encoding/json"
 	"errors"
 	"net/http"
 	"net/http/httptest"
-	"net/netip"
 	"strings"
 	"testing"
 
-	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
 )
 
 var errTestUnexpected = errors.New("unexpected failure")
 
 // TestHandleVerifyRequest_OversizedBodyRejected verifies that the
-// /verify handler refuses POST bodies larger than [verifyBodyLimit].
-// The [http.MaxBytesReader] is applied in [Headscale.VerifyHandler], so we simulate
+// /verify handler refuses POST bodies larger than verifyBodyLimit.
+// The MaxBytesReader is applied in VerifyHandler, so we simulate
 // the same wrapping here.
 func TestHandleVerifyRequest_OversizedBodyRejected(t *testing.T) {
 	t.Parallel()
@@ -53,70 +47,7 @@ func TestHandleVerifyRequest_OversizedBodyRejected(t *testing.T) {
 		"oversized body must surface 413")
 }
 
-// TestVerifyHandler_SuccessSetsJSONContentType verifies that a successful
-// POST to /verify advertises Content-Type: application/json. The header
-// must be set before the JSON body is written, otherwise the implicit
-// WriteHeader on first Write locks in a sniffed content type and the
-// later Header().Set becomes a no-op.
-func TestVerifyHandler_SuccessSetsJSONContentType(t *testing.T) {
-	tmpDir := t.TempDir()
-
-	prefixV4 := netip.MustParsePrefix("100.64.0.0/10")
-	prefixV6 := netip.MustParsePrefix("fd7a:115c:a1e0::/48")
-
-	cfg := &types.Config{
-		ServerURL:           "http://localhost:0",
-		NoisePrivateKeyPath: tmpDir + "/noise_private.key",
-		PrefixV4:            &prefixV4,
-		PrefixV6:            &prefixV6,
-		IPAllocation:        types.IPAllocationStrategySequential,
-		Database: types.DatabaseConfig{
-			Type: "sqlite3",
-			Sqlite: types.SqliteConfig{
-				Path: tmpDir + "/headscale_test.db",
-			},
-		},
-		Policy: types.PolicyConfig{
-			Mode: types.PolicyModeDB,
-		},
-	}
-
-	h, err := NewHeadscale(cfg)
-	require.NoError(t, err)
-
-	reqBody, err := json.Marshal(tailcfg.DERPAdmitClientRequest{
-		NodePublic: key.NewNode().Public(),
-	})
-	require.NoError(t, err)
-
-	// A real HTTP server is required to observe the bug: the first body
-	// Write triggers an implicit WriteHeader that snapshots the header
-	// map, so a Content-Type set afterwards never reaches the wire.
-	// An httptest.ResponseRecorder does not snapshot, so it would hide
-	// the defect.
-	srv := httptest.NewServer(http.HandlerFunc(h.VerifyHandler))
-	defer srv.Close()
-
-	httpReq, err := http.NewRequestWithContext(
-		context.Background(),
-		http.MethodPost,
-		srv.URL+"/verify",
-		bytes.NewReader(reqBody),
-	)
-	require.NoError(t, err)
-	httpReq.Header.Set("Content-Type", "application/json")
-
-	resp, err := http.DefaultClient.Do(httpReq)
-	require.NoError(t, err)
-
-	defer resp.Body.Close()
-
-	assert.Equal(t, http.StatusOK, resp.StatusCode)
-	assert.Equal(t, "application/json", resp.Header.Get("Content-Type"),
-		"successful /verify response must advertise application/json")
-}
-
-// errorAsHTTPError is a small local helper that unwraps an [HTTPError]
+// errorAsHTTPError is a small local helper that unwraps an HTTPError
 // from an error chain.
 func errorAsHTTPError(err error) (HTTPError, bool) {
 	var h HTTPError
diff --git a/hscontrol/mapper/batch_coalesce_test.go b/hscontrol/mapper/batch_coalesce_test.go
deleted file mode 100644
index d89a48766..000000000
--- a/hscontrol/mapper/batch_coalesce_test.go
+++ /dev/null
@@ -1,47 +0,0 @@
-package mapper
-
-import (
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/types/change"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestProcessBatchedChangesCoalescesWhenInFlight verifies that at most one
-// batched bundle per node is queued at a time. While a node's bundle is in
-// flight, a new tick's changes must stay in pending (coalesced) rather than
-// being queued as a second bundle that a non-FIFO worker could deliver out of
-// order.
-func TestProcessBatchedChangesCoalescesWhenInFlight(t *testing.T) {
-	b := NewBatcher(50*time.Millisecond, 2, nil) // not started: no ticker, no workers
-
-	id := types.NodeID(1)
-	nc := newMultiChannelNodeConn(id, nil)
-	b.nodes.Store(id, nc)
-
-	// A bundle is in flight: the new change must be retained, not queued.
-	nc.inFlight.Store(true)
-	nc.appendPending(change.PolicyChange())
-	b.processBatchedChanges()
-
-	nc.pendingMu.Lock()
-	retained := len(nc.pending)
-	nc.pendingMu.Unlock()
-	assert.Equal(t, 1, retained, "pending must be retained while a bundle is in flight")
-
-	// No bundle in flight: the pending change is queued and the node marked
-	// in-flight.
-	nc.inFlight.Store(false)
-	b.processBatchedChanges()
-
-	nc.pendingMu.Lock()
-	drained := len(nc.pending)
-	nc.pendingMu.Unlock()
-	assert.Equal(t, 0, drained, "pending must be drained once queued")
-	assert.True(t, nc.inFlight.Load(), "queued bundle must mark the node in-flight")
-
-	require.NotNil(t, b)
-}
diff --git a/hscontrol/mapper/batcher.go b/hscontrol/mapper/batcher.go
index 078ebd8b5..ce5697322 100644
--- a/hscontrol/mapper/batcher.go
+++ b/hscontrol/mapper/batcher.go
@@ -27,7 +27,7 @@ var (
 )
 
 // offlineNodeCleanupThreshold is how long a node must be disconnected
-// before [Batcher.cleanupOfflineNodes] removes its in-memory state.
+// before cleanupOfflineNodes removes its in-memory state.
 const offlineNodeCleanupThreshold = 15 * time.Minute
 
 var mapResponseGenerated = promauto.NewCounterVec(prometheus.CounterOpts{
@@ -49,7 +49,7 @@ func NewBatcher(batchTime time.Duration, workers int, mapper *mapper) *Batcher {
 	}
 }
 
-// NewBatcherAndMapper creates a new [Batcher] with its [mapper].
+// NewBatcherAndMapper creates a new Batcher with its mapper.
 func NewBatcherAndMapper(cfg *types.Config, state *state.State) *Batcher {
 	m := newMapper(cfg, state)
 	b := NewBatcher(cfg.Tuning.BatchChangeDelay, cfg.Tuning.BatcherWorkers, m)
@@ -69,7 +69,7 @@ type nodeConnection interface {
 	updateSentPeers(resp *tailcfg.MapResponse)
 }
 
-// generateMapResponse generates a [tailcfg.MapResponse] for the given [types.NodeID] based on the provided [change.Change].
+// generateMapResponse generates a [tailcfg.MapResponse] for the given NodeID based on the provided [change.Change].
 func generateMapResponse(nc nodeConnection, mapper *mapper, r change.Change) (*tailcfg.MapResponse, error) {
 	nodeID := nc.nodeID()
 	version := nc.version()
@@ -130,19 +130,17 @@ func generateMapResponse(nc nodeConnection, mapper *mapper, r change.Change) (*t
 
 	// When a full update (SendAllPeers=true) produces zero visible peers
 	// (e.g., a restrictive policy isolates this node), the resulting
-	// [tailcfg.MapResponse] has Peers: []*tailcfg.Node{} (empty non-nil slice).
+	// MapResponse has Peers: []*tailcfg.Node{} (empty non-nil slice).
 	//
 	// The Tailscale client only treats Peers as a full authoritative
 	// replacement when len(Peers) > 0 (controlclient/map.go:462).
 	// An empty Peers slice is indistinguishable from a delta response,
 	// so the client silently preserves its existing peer state.
 	//
-	// This matters when a [change.FullUpdate] replaces a pending
-	// [change.PolicyChange] in the batcher ([Batcher.addToBatch]
-	// short-circuits on [change.HasFull]). The [change.PolicyChange]
-	// would have computed PeersRemoved via
-	// [multiChannelNodeConn.computePeerDiff], but the [change.FullUpdate]
-	// path uses [MapResponseBuilder.WithPeers] which sets Peers: [].
+	// This matters when a FullUpdate() replaces a pending PolicyChange()
+	// in the batcher (addToBatch short-circuits on HasFull). The
+	// PolicyChange would have computed PeersRemoved via computePeerDiff,
+	// but the FullUpdate path uses WithPeers which sets Peers: [].
 	//
 	// Fix: when a full update results in zero peers, compute the diff
 	// against lastSentPeers and add explicit PeersRemoved entries so
@@ -208,7 +206,7 @@ type workResult struct {
 // work represents a unit of work to be processed by workers.
 // All pending changes for a node are bundled into a single work item
 // so that one worker processes them sequentially. This prevents
-// out-of-order [tailcfg.MapResponse] delivery and races on lastSentPeers
+// out-of-order MapResponse delivery and races on lastSentPeers
 // that occur when multiple workers process changes for the same node.
 type work struct {
 	changes  []change.Change
@@ -227,9 +225,9 @@ var (
 // Batcher batches and distributes map responses to connected nodes.
 // It uses concurrent maps, per-node mutexes, and a worker pool.
 //
-// Lifecycle: Call [Batcher.Start] to spawn workers, then [Batcher.Close]
-// to shut down. [Batcher.Close] blocks until all workers have exited.
-// A [Batcher] must not be reused after [Batcher.Close].
+// Lifecycle: Call Start() to spawn workers, then Close() to shut down.
+// Close() blocks until all workers have exited. A Batcher must not
+// be reused after Close().
 type Batcher struct {
 	tick    *time.Ticker
 	mapper  *mapper
@@ -280,42 +278,28 @@ func (b *Batcher) AddNode(
 		created: now,
 		stop:    stop,
 	}
-	// Block broadcast sends to this connection until its initial map
-	// is delivered below, so a delta cannot become the stream's first
-	// frame — clients reject streams whose first frame lacks the self
-	// node.
-	newEntry.pendingInitial.Store(true)
 	// Initialize last used timestamp
 	newEntry.lastUsed.Store(now.Unix())
 
-	// Get or create the multiChannelNodeConn and register this connection in a
-	// single Compute so the new connection is visible atomically. Doing the
-	// LoadOrStore and addConnection as separate steps let cleanupOfflineNodes
-	// (which deletes via Compute when hasActiveConnections() is false) observe a
-	// reused offline conn with zero connections mid-reconnect and delete it,
-	// orphaning the live connection.
-	var nodeConn *multiChannelNodeConn
+	// Get or create multiChannelNodeConn - this reuses existing offline nodes for rapid reconnection
+	nodeConn, loaded := b.nodes.LoadOrStore(id, newMultiChannelNodeConn(id, b.mapper))
 
-	b.nodes.Compute(
-		id,
-		func(existing *multiChannelNodeConn, loaded bool) (*multiChannelNodeConn, xsync.ComputeOp) {
-			if !loaded || existing == nil {
-				existing = newMultiChannelNodeConn(id, b.mapper)
-				b.totalNodes.Add(1)
-			}
+	if !loaded {
+		b.totalNodes.Add(1)
+	}
 
-			existing.addConnection(newEntry)
-			nodeConn = existing
-
-			return existing, xsync.UpdateOp
-		},
-	)
+	// Add connection to the list (lock-free)
+	nodeConn.addConnection(newEntry)
 
 	// Use the worker pool for controlled concurrency instead of direct generation
 	initialMap, err := b.MapResponseFromChange(id, change.FullSelf(id))
 	if err != nil {
 		nlog.Error().Err(err).Msg("initial map generation failed")
-		nodeConn.detach(c)
+		nodeConn.removeConnectionByChannel(c)
+
+		if !nodeConn.hasActiveConnections() {
+			nodeConn.markDisconnected()
+		}
 
 		return fmt.Errorf("generating initial map for node %d: %w", id, err)
 	}
@@ -324,22 +308,16 @@ func (b *Batcher) AddNode(
 	// and we want to avoid the race condition where the receiver isn't ready yet
 	select {
 	case c <- initialMap:
-		// Record sent peers only after confirmed delivery, mirroring the async
-		// path, and under workMu so a concurrent async bundle for this node
-		// cannot interleave its own lastSentPeers update.
-		nodeConn.workMu.Lock()
-		nodeConn.updateSentPeers(initialMap)
-		nodeConn.workMu.Unlock()
-
-		// Open the connection for broadcast sends now that the initial
-		// map is the stream's first frame; send() requeued any changes
-		// that arrived in the meantime.
-		newEntry.pendingInitial.Store(false)
+		// Success
 	case <-time.After(5 * time.Second): //nolint:mnd
 		nlog.Error().Err(ErrInitialMapSendTimeout).Msg("initial map send timeout")
 		nlog.Debug().Caller().Dur("timeout.duration", 5*time.Second). //nolint:mnd
 										Msg("initial map send timed out because channel was blocked or receiver not ready")
-		nodeConn.detach(c)
+		nodeConn.removeConnectionByChannel(c)
+
+		if !nodeConn.hasActiveConnections() {
+			nodeConn.markDisconnected()
+		}
 
 		return fmt.Errorf("%w for node %d", ErrInitialMapSendTimeout, id)
 	}
@@ -503,11 +481,9 @@ func (b *Batcher) worker(workerID int) {
 							Uint64(zf.NodeID, w.nodeID.Uint64()).
 							Str(zf.Reason, w.changes[0].Reason).
 							Msg("failed to generate map response for synchronous work")
+					} else if result.mapResponse != nil {
+						nc.updateSentPeers(result.mapResponse)
 					}
-					// Peer tracking is recorded by the caller (AddNode) only
-					// after the initial map is actually delivered; recording it
-					// here, before delivery, would leave phantom lastSentPeers
-					// if the send times out.
 
 					nc.workMu.Unlock()
 				} else {
@@ -534,24 +510,9 @@ func (b *Batcher) worker(workerID int) {
 			// finish — preventing out-of-order delivery and races
 			// on lastSentPeers (Clear+Store vs Range).
 			if nc, exists := b.nodes.Load(w.nodeID); exists && nc != nil {
-				// Changes that found only connections still awaiting
-				// their initial map are retried next tick: the
-				// in-flight initial map may have been generated from
-				// a snapshot older than the change, so dropping them
-				// would lose updates. Collected and prepended as a
-				// group to keep their order ahead of newer pending
-				// changes — order matters for stateful patches like
-				// online/offline.
-				var retry []change.Change
-
 				nc.workMu.Lock()
 				for _, ch := range w.changes {
 					err := nc.change(ch)
-					if errors.Is(err, errNoReadyConnections) {
-						retry = append(retry, ch)
-						continue
-					}
-
 					if err != nil {
 						b.workErrors.Add(1)
 						wlog.Error().Err(err).
@@ -561,13 +522,6 @@ func (b *Batcher) worker(workerID int) {
 					}
 				}
 				nc.workMu.Unlock()
-
-				if len(retry) > 0 {
-					nc.prependPending(retry...)
-				}
-
-				// Bundle delivered; allow the next tick's bundle to queue.
-				nc.inFlight.Store(false)
 			}
 		case <-b.done:
 			wlog.Debug().Msg("batcher shutting down, exiting worker")
@@ -597,11 +551,11 @@ func (b *Batcher) addToBatch(changes ...change.Change) {
 	// still has it registered. By cleaning up here, we prevent "node not found"
 	// errors when workers try to generate map responses for deleted nodes.
 	//
-	// Safety: [change.Change.PeersRemoved] is ONLY populated when nodes are actually
-	// deleted from the system (via [change.NodeRemoved] in [state.State.DeleteNode]).
-	// Policy changes that affect peer visibility do NOT use this field - they set
+	// Safety: change.Change.PeersRemoved is ONLY populated when nodes are actually
+	// deleted from the system (via change.NodeRemoved in state.DeleteNode). Policy
+	// changes that affect peer visibility do NOT use this field - they set
 	// RequiresRuntimePeerComputation=true and compute removed peers at runtime,
-	// putting them in [tailcfg.MapResponse.PeersRemoved] (a different struct).
+	// putting them in tailcfg.MapResponse.PeersRemoved (a different struct).
 	// Therefore, this cleanup only removes nodes that are truly being deleted,
 	// not nodes that are still connected but have lost visibility of certain peers.
 	//
@@ -669,24 +623,14 @@ func (b *Batcher) processBatchedChanges() {
 			return true
 		}
 
-		// Only one batched bundle per node may be in flight at a time. If the
-		// previous tick's bundle is still queued or processing, leave this
-		// tick's changes in pending; they are picked up once it completes. This
-		// keeps delivery ordered even when the worker pool is saturated.
-		if nc.inFlight.Load() {
-			return true
-		}
-
 		pending := nc.drainPending()
 		if len(pending) == 0 {
 			return true
 		}
 
-		// One policy recompute rebuilds the whole netmap; drop same-tick repeats.
-		pending = change.DedupePolicyChanges(pending)
-
 		// Queue a single work item containing all pending changes.
-		nc.inFlight.Store(true)
+		// One item per node ensures a single worker processes them
+		// sequentially, preventing out-of-order delivery.
 		b.queueWork(work{changes: pending, nodeID: nodeID, resultCh: nil})
 
 		return true
@@ -694,8 +638,8 @@ func (b *Batcher) processBatchedChanges() {
 }
 
 // cleanupOfflineNodes removes nodes that have been offline for too long to prevent memory leaks.
-// Uses xsync.Map.Compute for atomic check-and-delete to prevent TOCTOU races where a node
-// reconnects between the hasActiveConnections check and the Delete call.
+// Uses Compute() for atomic check-and-delete to prevent TOCTOU races where a node
+// reconnects between the hasActiveConnections() check and the Delete() call.
 func (b *Batcher) cleanupOfflineNodes() {
 	var nodesToCleanup []types.NodeID
 
diff --git a/hscontrol/mapper/batcher_test.go b/hscontrol/mapper/batcher_test.go
index 2e36d5aa0..c84c3d9f3 100644
--- a/hscontrol/mapper/batcher_test.go
+++ b/hscontrol/mapper/batcher_test.go
@@ -66,7 +66,7 @@ func (t *testBatcherWrapper) AddNode(id types.NodeID, c chan<- *tailcfg.MapRespo
 		return fmt.Errorf("%w: %d", errNodeNotFoundAfterAdd, id)
 	}
 
-	t.AddWork(change.NodeOnline(node.ID()))
+	t.AddWork(change.NodeOnlineFor(node))
 
 	return nil
 }
@@ -90,7 +90,7 @@ func (t *testBatcherWrapper) RemoveNode(id types.NodeID, c chan<- *tailcfg.MapRe
 	// Do this BEFORE removing from batcher so the change can be processed
 	node, ok := t.state.GetNodeByID(id)
 	if ok {
-		t.AddWork(change.NodeOffline(node.ID()))
+		t.AddWork(change.NodeOfflineFor(node))
 	}
 
 	// Finally remove from the real batcher
@@ -158,14 +158,14 @@ type node struct {
 //
 // Returns TestData struct containing all created entities and a cleanup function.
 func setupBatcherWithTestData(
-	tb testing.TB,
+	t testing.TB,
 	bf batcherFunc,
 	userCount, nodesPerUser, bufferSize int,
 ) (*TestData, func()) {
-	tb.Helper()
+	t.Helper()
 
 	// Create database and populate with test data first
-	tmpDir := tb.TempDir()
+	tmpDir := t.TempDir()
 	dbPath := tmpDir + "/headscale_test.db"
 
 	prefixV4 := netip.MustParsePrefix("100.64.0.0/10")
@@ -206,7 +206,7 @@ func setupBatcherWithTestData(
 	// Create database and populate it with test data
 	database, err := db.NewHeadscaleDatabase(cfg)
 	if err != nil {
-		tb.Fatalf("setting up database: %s", err)
+		t.Fatalf("setting up database: %s", err)
 	}
 
 	// Create test users and nodes in the database
@@ -226,12 +226,12 @@ func setupBatcherWithTestData(
 	// Now create state using the same database
 	state, err := state.NewState(cfg)
 	if err != nil {
-		tb.Fatalf("Failed to create state: %v", err)
+		t.Fatalf("Failed to create state: %v", err)
 	}
 
 	derpMap, err := derp.GetDERPMap(cfg.DERP)
-	require.NoError(tb, err)
-	require.NotNil(tb, derpMap)
+	require.NoError(t, err)
+	require.NotNil(t, derpMap)
 
 	state.SetDERPMap(derpMap)
 
@@ -248,7 +248,7 @@ func setupBatcherWithTestData(
 
 	_, err = state.SetPolicy([]byte(allowAllPolicy))
 	if err != nil {
-		tb.Fatalf("Failed to set allow-all policy: %v", err)
+		t.Fatalf("Failed to set allow-all policy: %v", err)
 	}
 
 	// Create batcher with the state and wrap it for testing
@@ -1104,72 +1104,6 @@ func TestBatcherWorkQueueBatching(t *testing.T) {
 	}
 }
 
-// TestBatcherCoalescesPolicyRecomputesPerTick proves that many identical
-// broadcast policy changes arriving in a single batcher tick collapse to one
-// runtime peer recompute per node. Without coalescing, each PolicyChange drives
-// a separate full netmap rebuild for every connected node (the reconnect-storm
-// fan-out); with it, a node sees at most one recompute per tick.
-func TestBatcherCoalescesPolicyRecomputesPerTick(t *testing.T) {
-	for _, bf := range allBatcherFunctions {
-		t.Run(bf.name, func(t *testing.T) {
-			const (
-				nodesPerUser         = 4
-				policyChangesPerTick = 8
-			)
-
-			testData, cleanup := setupBatcherWithTestData(t, bf.fn, 1, nodesPerUser, 100)
-			defer cleanup()
-
-			batcher := testData.Batcher
-			for i := range testData.Nodes {
-				n := &testData.Nodes[i]
-				require.NoError(t, batcher.AddNode(n.n.ID, n.ch, tailcfg.CapabilityVersion(100), nil))
-			}
-
-			// Many identical broadcast policy changes, then a DERP-map change as
-			// a sentinel. All land in one tick; the sentinel rides the same work
-			// item after the recompute(s), so its arrival marks the end of this
-			// tick's policy responses for a node.
-			for range policyChangesPerTick {
-				batcher.AddWork(change.PolicyChange())
-			}
-
-			batcher.AddWork(change.DERPMap())
-
-			for i := range testData.Nodes {
-				id := testData.Nodes[i].n.ID
-				ch := testData.Nodes[i].ch
-
-				policyResponses := 0
-				deadline := time.After(2 * time.Second)
-
-			drain:
-				for {
-					select {
-					case resp := <-ch:
-						switch {
-						case resp.DERPMap != nil && len(resp.Peers) == 0:
-							// Sentinel: every policy recompute for this tick has
-							// already been delivered to this node.
-							break drain
-						case len(resp.PacketFilters) > 0 && len(resp.Peers) == 0:
-							// A runtime peer recompute (policyChangeResponse):
-							// packet filters and incremental peers, no full list.
-							policyResponses++
-						}
-					case <-deadline:
-						t.Fatalf("node %d never received the DERP sentinel", id)
-					}
-				}
-
-				assert.LessOrEqualf(t, policyResponses, 1,
-					"node %d received %d policy recomputes in one tick; identical recomputes must coalesce to one",
-					id, policyResponses)
-			}
-		})
-	}
-}
-
 // TestBatcherWorkerChannelSafety tests that worker goroutines handle closed
 // channels safely without panicking when processing work items.
 //
diff --git a/hscontrol/mapper/builder.go b/hscontrol/mapper/builder.go
index eaf4dde44..2a3add8ea 100644
--- a/hscontrol/mapper/builder.go
+++ b/hscontrol/mapper/builder.go
@@ -1,22 +1,19 @@
 package mapper
 
 import (
-	"cmp"
 	"net/netip"
 	"slices"
+	"sort"
 	"time"
 
 	"github.com/juanfont/headscale/hscontrol/policy"
-	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
-	"github.com/rs/zerolog/log"
 	"tailscale.com/tailcfg"
 	"tailscale.com/types/views"
 	"tailscale.com/util/multierr"
 )
 
-// MapResponseBuilder provides a fluent interface for building [tailcfg.MapResponse].
+// MapResponseBuilder provides a fluent interface for building tailcfg.MapResponse.
 type MapResponseBuilder struct {
 	resp   *tailcfg.MapResponse
 	mapper *mapper
@@ -63,16 +60,6 @@ func (b *MapResponseBuilder) hasErrors() bool {
 	return len(b.errs) > 0
 }
 
-// node looks up the requesting node, recording ErrNodeNotFoundMapper on miss.
-func (b *MapResponseBuilder) node() (types.NodeView, bool) {
-	nv, ok := b.mapper.state.GetNodeByID(b.nodeID)
-	if !ok {
-		b.addError(ErrNodeNotFoundMapper)
-	}
-
-	return nv, ok
-}
-
 // WithCapabilityVersion sets the capability version for the response.
 func (b *MapResponseBuilder) WithCapabilityVersion(capVer tailcfg.CapabilityVersion) *MapResponseBuilder {
 	b.capVer = capVer
@@ -81,8 +68,9 @@ func (b *MapResponseBuilder) WithCapabilityVersion(capVer tailcfg.CapabilityVers
 
 // WithSelfNode adds the requesting node to the response.
 func (b *MapResponseBuilder) WithSelfNode() *MapResponseBuilder {
-	nv, ok := b.node()
+	nv, ok := b.mapper.state.GetNodeByID(b.nodeID)
 	if !ok {
+		b.addError(ErrNodeNotFoundMapper)
 		return b
 	}
 
@@ -96,9 +84,7 @@ func (b *MapResponseBuilder) WithSelfNode() *MapResponseBuilder {
 
 			return slices.Concat(primaries, nv.ExitRoutes())
 		},
-		b.mapper.cfg,
-		b.mapper.state.NodeCapMap(nv.ID()),
-	)
+		b.mapper.cfg)
 	if err != nil {
 		b.addError(err)
 		return b
@@ -147,22 +133,15 @@ func (b *MapResponseBuilder) WithDebugConfig() *MapResponseBuilder {
 
 // WithSSHPolicy adds SSH policy configuration for the requesting node.
 func (b *MapResponseBuilder) WithSSHPolicy() *MapResponseBuilder {
-	node, ok := b.node()
+	node, ok := b.mapper.state.GetNodeByID(b.nodeID)
 	if !ok {
+		b.addError(ErrNodeNotFoundMapper)
 		return b
 	}
 
 	sshPolicy, err := b.mapper.state.SSHPolicy(node)
 	if err != nil {
-		// SSH policy is optional for a node to function. Rather than fail the
-		// whole map (leaving the node unable to connect), log and continue
-		// without it; the node still receives a usable netmap.
-		log.Warn().Caller().
-			Err(err).
-			Uint64(zf.NodeID, node.ID().Uint64()).
-			Str(zf.NodeHostname, node.Hostname()).
-			Msg("building map response: skipping SSH policy for node; node will receive a map without SSH rules")
-
+		b.addError(err)
 		return b
 	}
 
@@ -173,20 +152,22 @@ func (b *MapResponseBuilder) WithSSHPolicy() *MapResponseBuilder {
 
 // WithDNSConfig adds DNS configuration for the requesting node.
 func (b *MapResponseBuilder) WithDNSConfig() *MapResponseBuilder {
-	node, ok := b.node()
+	node, ok := b.mapper.state.GetNodeByID(b.nodeID)
 	if !ok {
+		b.addError(ErrNodeNotFoundMapper)
 		return b
 	}
 
-	b.resp.DNSConfig = generateDNSConfig(b.mapper.cfg, node, b.mapper.state.NodeCapMap(node.ID()))
+	b.resp.DNSConfig = generateDNSConfig(b.mapper.cfg, node)
 
 	return b
 }
 
 // WithUserProfiles adds user profiles for the requesting node and given peers.
 func (b *MapResponseBuilder) WithUserProfiles(peers views.Slice[types.NodeView]) *MapResponseBuilder {
-	node, ok := b.node()
+	node, ok := b.mapper.state.GetNodeByID(b.nodeID)
 	if !ok {
+		b.addError(ErrNodeNotFoundMapper)
 		return b
 	}
 
@@ -196,16 +177,16 @@ func (b *MapResponseBuilder) WithUserProfiles(peers views.Slice[types.NodeView])
 }
 
 // WithPacketFilters adds packet filter rules based on policy.
-//
-// [State.FilterForNode] returns rules already reduced to only those relevant for this node.
-// For autogroup:self policies, it returns per-node compiled rules.
-// For global policies, it returns the global filter reduced for this node.
 func (b *MapResponseBuilder) WithPacketFilters() *MapResponseBuilder {
-	node, ok := b.node()
+	node, ok := b.mapper.state.GetNodeByID(b.nodeID)
 	if !ok {
+		b.addError(ErrNodeNotFoundMapper)
 		return b
 	}
 
+	// FilterForNode returns rules already reduced to only those relevant for this node.
+	// For autogroup:self policies, it returns per-node compiled rules.
+	// For global policies, it returns the global filter reduced for this node.
 	filter, err := b.mapper.state.FilterForNode(node)
 	if err != nil {
 		b.addError(err)
@@ -249,8 +230,7 @@ func (b *MapResponseBuilder) WithPeerChanges(peers views.Slice[types.NodeView])
 	return b
 }
 
-// buildTailPeers converts [views.Slice] of [types.NodeView] to a slice of [tailcfg.Node]
-// with policy filtering and sorting.
+// buildTailPeers converts views.Slice[types.NodeView] to []tailcfg.Node with policy filtering and sorting.
 func (b *MapResponseBuilder) buildTailPeers(peers views.Slice[types.NodeView]) ([]*tailcfg.Node, error) {
 	node, ok := b.mapper.state.GetNodeByID(b.nodeID)
 	if !ok {
@@ -258,10 +238,9 @@ func (b *MapResponseBuilder) buildTailPeers(peers views.Slice[types.NodeView]) (
 	}
 
 	// Get unreduced matchers for peer relationship determination.
-	// [State.MatchersForNode] returns unreduced matchers that include all rules where the
-	// node could be either source or destination. This is different from
-	// [State.FilterForNode] which returns reduced rules for packet filtering (only rules
-	// where node is destination).
+	// MatchersForNode returns unreduced matchers that include all rules where the node
+	// could be either source or destination. This is different from FilterForNode which
+	// returns reduced rules for packet filtering (only rules where node is destination).
 	matchers, err := b.mapper.state.MatchersForNode(node)
 	if err != nil {
 		return nil, err
@@ -276,55 +255,23 @@ func (b *MapResponseBuilder) buildTailPeers(peers views.Slice[types.NodeView]) (
 		changedViews = peers
 	}
 
-	// Snapshot the per-node policy CapMap once per peer-list build
-	// instead of locking the policy manager per peer. The per-call
-	// path used to take pm.mu N times for an N-peer response.
-	allCapMaps := b.mapper.state.NodeCapMaps()
-
 	// Build tail nodes with per-peer via-aware route function.
 	tailPeers := make([]*tailcfg.Node, 0, changedViews.Len())
 
 	for _, peer := range changedViews.All() {
-		// Pass the peer's policy CapMap as selfPolicyCaps so per-peer
-		// address-shape rules (today: disable-ipv4) apply consistently
-		// in the viewer's netmap. The CapMap merge into tn.CapMap is
-		// overwritten by the PeerCapMap call below; only the address
-		// filtering side-effect inside TailNode survives.
 		tn, err := peer.TailNode(b.capVer, func(_ types.NodeID) []netip.Prefix {
 			return b.mapper.state.RoutesForPeer(node, peer, matchers)
-		}, b.mapper.cfg, allCapMaps[peer.ID()])
+		}, b.mapper.cfg)
 		if err != nil {
-			// One peer with invalid data (e.g. an empty or over-long
-			// GivenName that fails GetFQDN) must not blank out the map for
-			// every node that can see it. Drop the offending peer, log it
-			// with the identity an operator needs to fix it, and keep
-			// building from the remaining valid peers.
-			log.Warn().Caller().
-				Err(err).
-				Uint64(zf.NodeID, peer.ID().Uint64()).
-				Str(zf.NodeHostname, peer.Hostname()).
-				Uint64("map.viewer.node.id", b.nodeID.Uint64()).
-				Msgf("dropping peer %d from map response: invalid node data; fix with `headscale nodes rename %d <name>`", peer.ID(), peer.ID())
-
-			continue
+			return nil, err
 		}
 
-		// [tailcfg.Node.CapMap] on a peer carries the small set of
-		// caps the Tailscale client reads from the peer view rather
-		// than the self view (suggest-exit-node, dns-subdomain-resolve
-		// — see ipn/ipnlocal/local.go:7534 and node_backend.go:745).
-		// The Tailscale-hosted control plane stamps these only when
-		// the peer satisfies the cap's emission condition; every other
-		// cap stays off the peer view, leaving CapMap empty for most
-		// peers. [policyv2.PeerCapMap] encodes those conditions.
-		tn.CapMap = policyv2.PeerCapMap(peer, allCapMaps[peer.ID()])
-
 		tailPeers = append(tailPeers, tn)
 	}
 
 	// Peers is always returned sorted by Node.ID.
-	slices.SortStableFunc(tailPeers, func(a, b *tailcfg.Node) int {
-		return cmp.Compare(a.ID, b.ID)
+	sort.SliceStable(tailPeers, func(x, y int) bool {
+		return tailPeers[x].ID < tailPeers[y].ID
 	})
 
 	return tailPeers, nil
diff --git a/hscontrol/mapper/dns_extrarecords_race_test.go b/hscontrol/mapper/dns_extrarecords_race_test.go
deleted file mode 100644
index 424f7fde1..000000000
--- a/hscontrol/mapper/dns_extrarecords_race_test.go
+++ /dev/null
@@ -1,60 +0,0 @@
-package mapper
-
-import (
-	"sync"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"tailscale.com/tailcfg"
-)
-
-// TestExtraRecordsConcurrentUpdateNoRace exercises the extra-records watcher
-// write path (Config.SetExtraRecords) concurrently with per-client DNS config
-// builds (generateDNSConfig -> Config.CloneTailcfgDNSConfig). Both must go
-// through the shared lock so the run is race-free under -race.
-func TestExtraRecordsConcurrentUpdateNoRace(t *testing.T) {
-	uid := uint(1)
-	cfg := &types.Config{
-		TailcfgDNSConfig: &tailcfg.DNSConfig{
-			ExtraRecords: []tailcfg.DNSRecord{
-				{Name: "initial.example.com", Type: "A", Value: "100.64.0.1"},
-			},
-		},
-	}
-
-	node := (&types.Node{
-		Hostname: "race-node",
-		UserID:   &uid,
-		User:     &types.User{Name: "racer"},
-	}).View()
-
-	const iterations = 2000
-
-	var wg sync.WaitGroup
-
-	// Writer: the extra-records update path.
-	wg.Go(func() {
-		for i := range iterations {
-			recs := []tailcfg.DNSRecord{{Name: "a.example.com", Type: "A", Value: "100.64.0.2"}}
-			if i%2 == 0 {
-				recs = append(recs, tailcfg.DNSRecord{Name: "b.example.com", Type: "A", Value: "100.64.0.3"})
-			}
-
-			cfg.SetExtraRecords(recs)
-		}
-	})
-
-	// Readers: the per-client map build path.
-	const readers = 8
-	for range readers {
-		wg.Go(func() {
-			for range iterations {
-				if d := generateDNSConfig(cfg, node, nil); d != nil {
-					_ = len(d.ExtraRecords)
-				}
-			}
-		})
-	}
-
-	wg.Wait()
-}
diff --git a/hscontrol/mapper/initialmap_phantom_test.go b/hscontrol/mapper/initialmap_phantom_test.go
deleted file mode 100644
index 362bd4f1a..000000000
--- a/hscontrol/mapper/initialmap_phantom_test.go
+++ /dev/null
@@ -1,132 +0,0 @@
-package mapper
-
-import (
-	"errors"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/types/change"
-	"tailscale.com/tailcfg"
-)
-
-// TestUnreadyConnectionDefersBroadcastsUntilInitialMap pins the ordering fix
-// for the "initial MapResponse lacked Node" client failure: a connection
-// registered by [Batcher.AddNode] but still waiting for its initial map must
-// not receive broadcast deltas — a delta as the stream's first frame makes the
-// Tailscale client tear down the poll. The change is requeued, not dropped,
-// because the in-flight initial map may have been generated from a snapshot
-// older than the change.
-func TestUnreadyConnectionDefersBroadcastsUntilInitialMap(t *testing.T) {
-	testData, cleanup := setupBatcherWithTestData(t, NewBatcherAndMapper, 1, 2, normalBufferSize)
-	defer cleanup()
-
-	batcher := testData.Batcher.Batcher
-	peerNode := &testData.Nodes[0]
-	targetNode := &testData.Nodes[1]
-
-	// Register the target's connection by hand in the state AddNode leaves it
-	// in between registering the channel and delivering the initial map.
-	nc := newMultiChannelNodeConn(targetNode.n.ID, batcher.mapper)
-	entry := &connectionEntry{
-		id:      "test-unready",
-		c:       targetNode.ch,
-		version: tailcfg.CapabilityVersion(100),
-		created: time.Now(),
-	}
-	entry.pendingInitial.Store(true)
-	nc.addConnection(entry)
-	batcher.nodes.Store(targetNode.n.ID, nc)
-
-	// A broadcast lands while the initial map is still in flight: nothing may
-	// reach the channel, and the caller must be told to retry
-	// (the worker prepends such changes back onto pending).
-	retryChange := change.NodeAdded(peerNode.n.ID)
-
-	err := nc.change(retryChange)
-	if !errors.Is(err, errNoReadyConnections) {
-		t.Fatalf("change on unready connection: want errNoReadyConnections, got %v", err)
-	}
-
-	select {
-	case resp := <-targetNode.ch:
-		t.Fatalf("unready connection received a frame before its initial map: %+v", resp)
-	default:
-	}
-
-	// Once the initial map is delivered, the retried change goes out.
-	entry.pendingInitial.Store(false)
-
-	err = nc.change(retryChange)
-	if err != nil {
-		t.Fatalf("change on ready connection: %v", err)
-	}
-
-	select {
-	case resp := <-targetNode.ch:
-		if len(resp.PeersChanged) == 0 {
-			t.Fatalf("expected PeersChanged delta after readiness, got %+v", resp)
-		}
-	default:
-		t.Fatal("ready connection did not receive the retried change")
-	}
-}
-
-// TestSyncInitialMapNoPhantomPeersOnTimeout ensures the synchronous initial-map
-// path does not record peers as sent until the map is actually delivered. When
-// the AddNode channel send times out, the client received nothing, so
-// lastSentPeers must stay empty; otherwise future computePeerDiff calculations
-// miss peer additions or removals after reconnect.
-func TestSyncInitialMapNoPhantomPeersOnTimeout(t *testing.T) {
-	testData, cleanup := setupBatcherWithTestData(t, NewBatcherAndMapper, 1, 2, normalBufferSize)
-	defer cleanup()
-
-	batcher := testData.Batcher.Batcher
-	state := testData.State
-
-	peerNode := &testData.Nodes[0]
-	targetNode := &testData.Nodes[1]
-
-	state.Connect(peerNode.n.ID)
-
-	err := batcher.AddNode(peerNode.n.ID, peerNode.ch, tailcfg.CapabilityVersion(100), nil)
-	if err != nil {
-		t.Fatalf("adding peer node: %v", err)
-	}
-
-	go func() {
-		for range peerNode.ch {
-		}
-	}()
-
-	state.Connect(targetNode.n.ID)
-
-	// Unbuffered channel that nobody reads: AddNode blocks on the initial-map
-	// send and times out.
-	unreadCh := make(chan *tailcfg.MapResponse)
-
-	err = batcher.AddNode(targetNode.n.ID, unreadCh, tailcfg.CapabilityVersion(100), nil)
-	if err == nil {
-		t.Fatal("expected initial-map send timeout error, got nil")
-	}
-
-	nc, exists := batcher.nodes.Load(targetNode.n.ID)
-	if !exists || nc == nil {
-		t.Fatalf("expected node %d to be retained in b.nodes", targetNode.n.ID)
-	}
-
-	if nc.hasActiveConnections() {
-		t.Fatalf("expected node %d to have no active connections after timeout", targetNode.n.ID)
-	}
-
-	var phantom []tailcfg.NodeID
-
-	nc.lastSentPeers.Range(func(id tailcfg.NodeID, _ struct{}) bool {
-		phantom = append(phantom, id)
-		return true
-	})
-
-	if len(phantom) != 0 {
-		t.Errorf("lastSentPeers must be empty after a failed initial-map delivery, got %d: %v",
-			len(phantom), phantom)
-	}
-}
diff --git a/hscontrol/mapper/initialmap_storm_test.go b/hscontrol/mapper/initialmap_storm_test.go
deleted file mode 100644
index 877a8d97b..000000000
--- a/hscontrol/mapper/initialmap_storm_test.go
+++ /dev/null
@@ -1,189 +0,0 @@
-//go:build !race
-
-// This is a timing-sensitive performance regression test; the race detector's
-// ~10x slowdown makes its wall-clock assertion meaningless, so it is excluded
-// from -race builds. The concurrency correctness of the policy lock change it
-// guards is covered under -race by TestPolicyManagerConcurrentReads in
-// hscontrol/policy/v2.
-
-package mapper
-
-import (
-	"net/netip"
-	"runtime"
-	"slices"
-	"sync"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/juanfont/headscale/hscontrol/derp"
-	"github.com/juanfont/headscale/hscontrol/state"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-// setupStormBatcher builds a real state+batcher with production-default
-// NodeStore batching so the reconnect-storm contention is realistic. It mirrors
-// setupBatcherWithTestData but lets the test control BatcherWorkers and the
-// policy.
-func setupStormBatcher(tb testing.TB, nodeCount, workers int, policy string) (*TestData, func()) {
-	tb.Helper()
-
-	tmpDir := tb.TempDir()
-	prefixV4 := netip.MustParsePrefix("100.64.0.0/10")
-	prefixV6 := netip.MustParsePrefix("fd7a:115c:a1e0::/48")
-
-	cfg := &types.Config{
-		Database: types.DatabaseConfig{
-			Type:   types.DatabaseSqlite,
-			Sqlite: types.SqliteConfig{Path: tmpDir + "/headscale_test.db"},
-		},
-		PrefixV4:     &prefixV4,
-		PrefixV6:     &prefixV6,
-		IPAllocation: types.IPAllocationStrategySequential,
-		BaseDomain:   "headscale.test",
-		Policy:       types.PolicyConfig{Mode: types.PolicyModeDB},
-		DERP: types.DERPConfig{
-			ServerEnabled: false,
-			DERPMap: &tailcfg.DERPMap{
-				Regions: map[int]*tailcfg.DERPRegion{999: {RegionID: 999}},
-			},
-		},
-		Tuning: types.Tuning{
-			BatchChangeDelay: 10 * time.Millisecond,
-			BatcherWorkers:   workers,
-			// Production defaults: coalesce writes so the storm is not
-			// exaggerated by an unrealistically small NodeStore batch.
-			NodeStoreBatchSize:    100,
-			NodeStoreBatchTimeout: 500 * time.Millisecond,
-		},
-	}
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(tb, err)
-
-	users := database.CreateUsersForTest(1, "testuser")
-	dbNodes := database.CreateRegisteredNodesForTest(users[0], nodeCount, "node")
-
-	allNodes := make([]node, 0, nodeCount)
-	for i := range dbNodes {
-		allNodes = append(allNodes, node{
-			n:  dbNodes[i],
-			ch: make(chan *tailcfg.MapResponse, normalBufferSize),
-		})
-	}
-
-	st, err := state.NewState(cfg)
-	require.NoError(tb, err)
-
-	derpMap, err := derp.GetDERPMap(cfg.DERP)
-	require.NoError(tb, err)
-	st.SetDERPMap(derpMap)
-
-	_, err = st.SetPolicy([]byte(policy))
-	require.NoError(tb, err)
-
-	batcher := wrapBatcherForTest(NewBatcherAndMapper(cfg, st), st)
-	batcher.Start()
-
-	td := &TestData{
-		Database: database,
-		Users:    users,
-		Nodes:    allNodes,
-		State:    st,
-		Config:   cfg,
-		Batcher:  batcher,
-	}
-
-	return td, func() {
-		batcher.Close()
-		st.Close()
-		database.Close()
-	}
-}
-
-// TestInitialMapNotStarvedByReconnectStorm reproduces juanfont/headscale#3346.
-//
-// When every node redials at once (e.g. after a server upgrade restart), each
-// connection writes the NodeStore (UpdateNodeFromMapRequest + Connect) and the
-// batcher generates its initial map. All of that reads the policy through the
-// PolicyManager. Before the fix the PolicyManager guarded every read with a
-// single exclusive mutex, so the NodeStore writer's O(n^2) BuildPeerMap and
-// every node's FilterForNode serialised against each other. On a per-node
-// filter policy (autogroup:self, via, relay grants) each hold is expensive, so
-// under the storm time-to-initial-map grew without bound.
-//
-// On the production server in #3346 this drove the batcher's per-node
-// total.duration from ~4s to ~76s; tailscale clients aborted the map POST
-// first and reported
-//
-//	PollNetMap: Post ".../machine/map": unexpected EOF
-//
-// then redialled, feeding the storm so it never converged. An allow-all policy
-// does NOT reproduce this — BuildPeerMap is cheap there; the per-node filter
-// path is what makes it expensive, matching a real deployment's ACLs.
-//
-// The fix makes PolicyManager reads take a shared RLock so map generation runs
-// concurrently. AddNode blocks until the initial map is generated and handed to
-// the node channel, so its wall-clock duration is the time-to-initial-map the
-// client experiences. Without the fix this test's slowest node takes ~10s+ at
-// this scale (lock-bound, and more workers do not help); with it, generation
-// parallelises across workers and stays well within a client's patience.
-func TestInitialMapNotStarvedByReconnectStorm(t *testing.T) {
-	if testing.Short() {
-		t.Skip("timing-sensitive storm regression; skipped in -short")
-	}
-
-	const (
-		nodeCount = 300
-
-		// A per-node-filter policy: forces BuildPeerMap and FilterForNode onto
-		// the slow path that recompiles filter rules per node, the same shape
-		// as a real ACL using autogroup:self / via / relay grants.
-		perNodeFilterPolicy = `{"acls":[{"action":"accept","src":["autogroup:member"],"dst":["autogroup:self:*"]}]}`
-
-		// Deliberately roomy so it passes on CI's few-core runners, where the
-		// single-writer BuildPeerMap sets the floor (~10s) whatever the reads
-		// do. It still trips on a hang or a return to the ~76s serialised
-		// behaviour; the fine-grained concurrency is verified separately by
-		// TestPolicyManagerConcurrentReads under -race.
-		maxAcceptableLatency = 30 * time.Second
-	)
-
-	// Use the real available parallelism, as production does.
-	workers := runtime.NumCPU()
-
-	td, cleanup := setupStormBatcher(t, nodeCount, workers, perNodeFilterPolicy)
-	defer cleanup()
-
-	latencies := make([]time.Duration, nodeCount)
-
-	var wg sync.WaitGroup
-
-	for i := range td.Nodes {
-		wg.Go(func() {
-			n := &td.Nodes[i]
-
-			start := time.Now()
-			err := td.Batcher.AddNode(n.n.ID, n.ch, tailcfg.CapabilityVersion(100), nil)
-			latencies[i] = time.Since(start)
-
-			assert.NoError(t, err) //nolint:testifylint // assert (not require) is correct off the test goroutine
-		})
-	}
-
-	wg.Wait()
-
-	slices.Sort(latencies)
-	p50 := latencies[len(latencies)/2]
-	p95 := latencies[len(latencies)*95/100]
-	maxLatency := latencies[len(latencies)-1]
-	t.Logf("initial-map latency over %d nodes (workers=%d): p50=%s p95=%s max=%s",
-		nodeCount, workers, p50, p95, maxLatency)
-
-	require.Less(t, maxLatency, maxAcceptableLatency,
-		"slowest initial map took %s: policy reads are serialising instead of running concurrently (issue #3346)", maxLatency)
-}
diff --git a/hscontrol/mapper/mapper.go b/hscontrol/mapper/mapper.go
index bd04d2e73..4df739339 100644
--- a/hscontrol/mapper/mapper.go
+++ b/hscontrol/mapper/mapper.go
@@ -4,17 +4,14 @@ import (
 	"encoding/json"
 	"fmt"
 	"io/fs"
-	"maps"
 	"net/url"
 	"os"
 	"path"
-	"regexp"
 	"slices"
 	"strconv"
 	"strings"
 	"time"
 
-	"github.com/juanfont/headscale/hscontrol/policy"
 	"github.com/juanfont/headscale/hscontrol/state"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/types/change"
@@ -52,6 +49,12 @@ type mapper struct {
 	created time.Time
 }
 
+//nolint:unused
+type patch struct {
+	timestamp time.Time
+	change    *tailcfg.PeerChange
+}
+
 func newMapper(
 	cfg *types.Config,
 	state *state.State,
@@ -65,12 +68,13 @@ func newMapper(
 	}
 }
 
-// generateUserProfiles creates user profiles for [tailcfg.MapResponse].
+// generateUserProfiles creates user profiles for MapResponse.
 func generateUserProfiles(
 	node types.NodeView,
 	peers views.Slice[types.NodeView],
 ) []tailcfg.UserProfile {
 	userMap := make(map[uint]*types.UserView)
+	ids := make([]uint, 0, len(userMap))
 
 	user := node.Owner()
 	if !user.Valid() {
@@ -81,7 +85,9 @@ func generateUserProfiles(
 		return nil
 	}
 
-	userMap[user.Model().ID] = &user
+	userID := user.Model().ID
+	userMap[userID] = &user
+	ids = append(ids, userID)
 
 	for _, peer := range peers.All() {
 		peerUser := peer.Owner()
@@ -89,176 +95,65 @@ func generateUserProfiles(
 			continue
 		}
 
-		userMap[peerUser.Model().ID] = &peerUser
+		peerUserID := peerUser.Model().ID
+		userMap[peerUserID] = &peerUser
+		ids = append(ids, peerUserID)
 	}
 
+	slices.Sort(ids)
+	ids = slices.Compact(ids)
+
 	var profiles []tailcfg.UserProfile
 
-	for _, id := range slices.Sorted(maps.Keys(userMap)) {
-		profiles = append(profiles, userMap[id].TailscaleUserProfile())
+	for _, id := range ids {
+		if userMap[id] != nil {
+			profiles = append(profiles, userMap[id].TailscaleUserProfile())
+		}
 	}
 
 	return profiles
 }
 
-// nextDNSAttrPrefix is the form Tailscale uses for per-node NextDNS profile
-// selection: an "attr" entry of "nextdns:<profile-id>" overrides the resolver
-// path, and "nextdns:no-device-info" suppresses the metadata-appending step.
-// See https://tailscale.com/docs/integrations/nextdns.
-const (
-	nextDNSAttrPrefix                        = "nextdns:"
-	nextDNSAttrNoInfo tailcfg.NodeCapability = "nextdns:no-device-info"
-)
-
-// nextDNSProfileRE bounds the characters accepted in a `nextdns:<profile>`
-// suffix. NextDNS profile IDs are short alphanumeric strings; restricting
-// to that charset prevents a policy author from injecting `?`, `/`, `@`,
-// or `..` into the resolver URL via a crafted cap name.
-var nextDNSProfileRE = regexp.MustCompile(`^[A-Za-z0-9._-]{1,64}$`)
-
 func generateDNSConfig(
 	cfg *types.Config,
 	node types.NodeView,
-	capMap tailcfg.NodeCapMap,
 ) *tailcfg.DNSConfig {
-	dnsConfig := cfg.CloneTailcfgDNSConfig()
-	if dnsConfig == nil {
+	if cfg.TailcfgDNSConfig == nil {
 		return nil
 	}
 
-	profile := nextDNSProfileFromCapMap(capMap)
-	if profile != "" {
-		applyNextDNSProfile(dnsConfig.Resolvers, profile)
-		applyNextDNSProfile(dnsConfig.FallbackResolvers, profile)
+	dnsConfig := cfg.TailcfgDNSConfig.Clone()
 
-		for suffix, rs := range dnsConfig.Routes {
-			applyNextDNSProfile(rs, profile)
-			dnsConfig.Routes[suffix] = rs
-		}
-	}
-
-	if _, suppressMetadata := capMap[nextDNSAttrNoInfo]; !suppressMetadata {
-		addNextDNSMetadata(dnsConfig.Resolvers, node)
-		addNextDNSMetadata(dnsConfig.FallbackResolvers, node)
-
-		for suffix, rs := range dnsConfig.Routes {
-			addNextDNSMetadata(rs, node)
-			dnsConfig.Routes[suffix] = rs
-		}
-	}
+	addNextDNSMetadata(dnsConfig.Resolvers, node)
 
 	return dnsConfig
 }
 
-// nextDNSProfileFromCapMap returns the policy-selected
-// `nextdns:<profile>` value on the node, or the empty string when none
-// is set or the cap is malformed. The reserved
-// `nextdns:no-device-info` string is not a profile — it controls
-// metadata appending and is handled separately.
+// If any nextdns DoH resolvers are present in the list of resolvers it will
+// take metadata from the node metadata and instruct tailscale to add it
+// to the requests. This makes it possible to identify from which device the
+// requests come in the NextDNS dashboard.
 //
-// The profile pick is deterministic across reloads: cap keys are
-// gathered, sorted, and the first valid profile wins. Map iteration
-// order in Go is randomised, so taking the literal first match would
-// cause the chosen profile to flip between reloads when a node has
-// multiple `nextdns:` caps. The profile string is also validated
-// against [nextDNSProfileRE] so a crafted cap cannot inject path or
-// query characters into the resolver URL.
-func nextDNSProfileFromCapMap(capMap tailcfg.NodeCapMap) string {
-	if len(capMap) == 0 {
-		return ""
-	}
-
-	candidates := make([]string, 0, len(capMap))
-
-	for cap := range capMap {
-		if cap == nextDNSAttrNoInfo {
-			continue
-		}
-
-		profile, ok := strings.CutPrefix(string(cap), nextDNSAttrPrefix)
-		if !ok || profile == "" {
-			continue
-		}
-
-		if !nextDNSProfileRE.MatchString(profile) {
-			log.Warn().
-				Str("cap", string(cap)).
-				Msg("nextdns profile rejected: must match [A-Za-z0-9._-]{1,64}")
-
-			continue
-		}
-
-		candidates = append(candidates, profile)
-	}
-
-	if len(candidates) == 0 {
-		return ""
-	}
-
-	slices.Sort(candidates)
-
-	return candidates[0]
-}
-
-// nextDNSDoHHost matches a NextDNS DoH resolver address. The check is
-// anchored on the host segment so a typo-squatted operator-configured
-// resolver such as `https://dns.nextdns.io.attacker.example/x` does
-// not slip through.
-func nextDNSDoHHost(addr string) bool {
-	return addr == nextDNSDoHPrefix ||
-		strings.HasPrefix(addr, nextDNSDoHPrefix+"/") ||
-		strings.HasPrefix(addr, nextDNSDoHPrefix+"?")
-}
-
-// applyNextDNSProfile rewrites every NextDNS DoH resolver to point at
-// the given profile, dropping any existing profile path or query. Per
-// the Tailscale spec the per-node profile overrides the global value,
-// so the rewrite is unconditional rather than additive.
-func applyNextDNSProfile(resolvers []*dnstype.Resolver, profile string) {
-	for _, resolver := range resolvers {
-		if !nextDNSDoHHost(resolver.Addr) {
-			continue
-		}
-
-		resolver.Addr = nextDNSDoHPrefix + "/" + profile
-	}
-}
-
-// addNextDNSMetadata appends device metadata as a query string to
-// every NextDNS DoH resolver. Existing query parameters on the
-// resolver address are preserved by parsing the URL and merging into
-// its [url.URL.RawQuery] rather than concatenating with `?`.
+// This will produce a resolver like:
+// `https://dns.nextdns.io/<nextdns-id>?device_name=node-name&device_model=linux&device_ip=100.64.0.1`
 func addNextDNSMetadata(resolvers []*dnstype.Resolver, node types.NodeView) {
 	for _, resolver := range resolvers {
-		if !nextDNSDoHHost(resolver.Addr) {
-			continue
+		if strings.HasPrefix(resolver.Addr, nextDNSDoHPrefix) {
+			attrs := url.Values{
+				"device_name":  []string{node.Hostname()},
+				"device_model": []string{node.Hostinfo().OS()},
+			}
+
+			if len(node.IPs()) > 0 {
+				attrs.Add("device_ip", node.IPs()[0].String())
+			}
+
+			resolver.Addr = fmt.Sprintf("%s?%s", resolver.Addr, attrs.Encode())
 		}
-
-		u, err := url.Parse(resolver.Addr)
-		if err != nil {
-			continue
-		}
-
-		q := u.Query()
-		q.Set("device_name", node.Hostname())
-
-		// Guard Hostinfo().Valid() before dereferencing OS(): a node loaded
-		// from a legacy NULL host_info row has a nil Hostinfo, and OS() would
-		// panic. Mirrors the .Valid() guard in RequestTags/TailNode.
-		if node.Hostinfo().Valid() {
-			q.Set("device_model", node.Hostinfo().OS())
-		}
-
-		if ips := node.IPs(); len(ips) > 0 {
-			q.Set("device_ip", ips[0].String())
-		}
-
-		u.RawQuery = q.Encode()
-		resolver.Addr = u.String()
 	}
 }
 
-// fullMapResponse returns a [tailcfg.MapResponse] for the given node.
+// fullMapResponse returns a MapResponse for the given node.
 //
 //nolint:unused
 func (m *mapper) fullMapResponse(
@@ -303,20 +198,13 @@ func (m *mapper) selfMapResponse(
 	return ma, err
 }
 
-// policyChangeResponse creates a [tailcfg.MapResponse] for policy changes.
+// policyChangeResponse creates a MapResponse for policy changes.
 // It sends:
-//   - PeersRemoved for peers that are no longer visible after the policy change
-//   - PeersChanged for remaining peers (their AllowedIPs may have changed due to policy)
-//   - Updated PacketFilters
-//   - Updated SSHPolicy (SSH rules may reference users/groups that changed)
-//   - DNSConfig so the client's resolver state stays anchored even when a
-//     policy-triggered wgengine reconfigure races a netmon LinkChange (the
-//     LinkChange handler reapplies dns.Manager.Set with the engine's
-//     lastDNSConfig; if that snapshot is stale, the OS resolver loses the
-//     MagicDNS reverse-DNS routes and Nameservers and curl-by-FQDN stops
-//     resolving for the rest of the policy window).
-//   - Optionally, the node's own self info (when includeSelf is true)
-//
+// - PeersRemoved for peers that are no longer visible after the policy change
+// - PeersChanged for remaining peers (their AllowedIPs may have changed due to policy)
+// - Updated PacketFilters
+// - Updated SSHPolicy (SSH rules may reference users/groups that changed)
+// - Optionally, the node's own self info (when includeSelf is true)
 // This avoids the issue where an empty Peers slice is interpreted by Tailscale
 // clients as "no change" rather than "no peers".
 // When includeSelf is true, the node's self info is included so that a node
@@ -332,7 +220,6 @@ func (m *mapper) policyChangeResponse(
 	builder := m.NewMapResponseBuilder(nodeID).
 		WithDebugType(policyResponseDebug).
 		WithCapabilityVersion(capVer).
-		WithDNSConfig().
 		WithPacketFilters().
 		WithSSHPolicy()
 
@@ -341,7 +228,7 @@ func (m *mapper) policyChangeResponse(
 	}
 
 	if len(removedPeers) > 0 {
-		// Convert [tailcfg.NodeID] to [types.NodeID] for [MapResponseBuilder.WithPeersRemoved]
+		// Convert tailcfg.NodeID to types.NodeID for WithPeersRemoved
 		removedIDs := make([]types.NodeID, len(removedPeers))
 		for i, id := range removedPeers {
 			removedIDs[i] = types.NodeID(id) //nolint:gosec // NodeID types are equivalent
@@ -362,7 +249,7 @@ func (m *mapper) policyChangeResponse(
 	return builder.Build()
 }
 
-// buildFromChange builds a [tailcfg.MapResponse] from a [change.Change] specification.
+// buildFromChange builds a MapResponse from a change.Change specification.
 // This provides fine-grained control over what gets included in the response.
 func (m *mapper) buildFromChange(
 	nodeID types.NodeID,
@@ -411,7 +298,7 @@ func (m *mapper) buildFromChange(
 	} else {
 		if len(resp.PeersChanged) > 0 {
 			peers := m.state.ListPeers(nodeID, resp.PeersChanged...)
-			builder.WithUserProfiles(m.filterVisibleNodes(nodeID, peers))
+			builder.WithUserProfiles(peers)
 			builder.WithPeerChanges(peers)
 		}
 
@@ -420,9 +307,8 @@ func (m *mapper) buildFromChange(
 		}
 	}
 
-	patches := m.filterVisiblePeerPatches(nodeID, resp.PeerPatches)
-	if len(patches) > 0 {
-		builder.WithPeerChangedPatch(patches)
+	if len(resp.PeerPatches) > 0 {
+		builder.WithPeerChangedPatch(resp.PeerPatches)
 	}
 
 	if resp.PingRequest != nil {
@@ -432,106 +318,6 @@ func (m *mapper) buildFromChange(
 	return builder.Build()
 }
 
-// visiblePeerIDs returns the set of peer node IDs the recipient may see under
-// the current policy. It is the single visibility decision shared by the
-// incremental peer-change and user-profile paths, computed from the same live
-// per-node matchers and [policy.ReduceNodes] filter that
-// [MapResponseBuilder.buildTailPeers] applies to full peer objects, so the
-// paths cannot drift. The snapshot peer map ([NodeStore.ListPeers]) is used
-// only as the candidate set, matching buildTailPeers; the live policy decides
-// visibility because the snapshot is not rebuilt on policy changes.
-//
-// ok is false when the node or its matchers cannot be resolved; callers must
-// then fail closed (emit nothing) rather than risk leaking forbidden peers.
-func (m *mapper) visiblePeerIDs(nodeID types.NodeID) (map[tailcfg.NodeID]struct{}, bool) {
-	node, ok := m.state.GetNodeByID(nodeID)
-	if !ok {
-		return nil, false
-	}
-
-	matchers, err := m.state.MatchersForNode(node)
-	if err != nil {
-		return nil, false
-	}
-
-	peers := m.state.ListPeers(nodeID)
-
-	// No matchers means no policy restrictions, so every peer is visible —
-	// the same default buildTailPeers applies.
-	if len(matchers) > 0 {
-		peers = policy.ReduceNodes(node, peers, matchers)
-	}
-
-	// Key by tailcfg.NodeID so the peer-patch path can look up by patch.NodeID
-	// directly, avoiding an unchecked int64->uint64 conversion.
-	visible := make(map[tailcfg.NodeID]struct{}, peers.Len())
-	for _, peer := range peers.All() {
-		visible[peer.ID().NodeID()] = struct{}{}
-	}
-
-	return visible, true
-}
-
-// filterVisiblePeerPatches drops peer-change patches whose target peer the
-// recipient cannot see under the ACL policy. Without it, online/offline,
-// endpoint, and key-expiry patches disclose the existence, presence, and
-// addresses of peers the recipient's policy forbids it from accessing.
-func (m *mapper) filterVisiblePeerPatches(
-	nodeID types.NodeID,
-	patches []*tailcfg.PeerChange,
-) []*tailcfg.PeerChange {
-	if len(patches) == 0 {
-		return patches
-	}
-
-	visible, ok := m.visiblePeerIDs(nodeID)
-	if !ok {
-		// Fail closed: if visibility cannot be resolved, send no patches.
-		return nil
-	}
-
-	return filterByVisible(visible, patches, func(p *tailcfg.PeerChange) tailcfg.NodeID {
-		return p.NodeID
-	})
-}
-
-// filterVisibleNodes restricts a peer slice to the nodes the recipient can see
-// under the ACL policy. It guards UserProfiles on the incremental PeersChanged
-// path, which receives an unfiltered node slice and would otherwise leak the
-// identities of users whose nodes the recipient cannot access.
-func (m *mapper) filterVisibleNodes(
-	nodeID types.NodeID,
-	peers views.Slice[types.NodeView],
-) views.Slice[types.NodeView] {
-	visible, ok := m.visiblePeerIDs(nodeID)
-	if !ok {
-		// Fail closed: emit no peer user profiles rather than risk a leak.
-		return views.SliceOf([]types.NodeView{})
-	}
-
-	return views.SliceOf(filterByVisible(visible, peers.AsSlice(), func(p types.NodeView) tailcfg.NodeID {
-		return p.ID().NodeID()
-	}))
-}
-
-// filterByVisible keeps only the items whose key resolves to a NodeID present
-// in the visible set, preserving input order.
-func filterByVisible[T any](
-	visible map[tailcfg.NodeID]struct{},
-	items []T,
-	key func(T) tailcfg.NodeID,
-) []T {
-	var filtered []T
-
-	for _, it := range items {
-		if _, ok := visible[key(it)]; ok {
-			filtered = append(filtered, it)
-		}
-	}
-
-	return filtered
-}
-
 func writeDebugMapResponse(
 	resp *tailcfg.MapResponse,
 	t debugType,
diff --git a/hscontrol/mapper/mapper_test.go b/hscontrol/mapper/mapper_test.go
index 9b19c9498..3349a155d 100644
--- a/hscontrol/mapper/mapper_test.go
+++ b/hscontrol/mapper/mapper_test.go
@@ -3,17 +3,11 @@ package mapper
 import (
 	"fmt"
 	"net/netip"
-	"strings"
 	"testing"
 
 	"github.com/google/go-cmp/cmp"
 	"github.com/google/go-cmp/cmp/cmpopts"
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/juanfont/headscale/hscontrol/state"
 	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/types/change"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
 	"tailscale.com/tailcfg"
 	"tailscale.com/types/dnstype"
 )
@@ -74,7 +68,6 @@ func TestDNSConfigMapResponse(t *testing.T) {
 					TailcfgDNSConfig: &dnsConfigOrig,
 				},
 				nodeInShared1.View(),
-				nil,
 			)
 
 			if diff := cmp.Diff(tt.want, got, cmpopts.EquateEmpty()); diff != "" {
@@ -83,568 +76,3 @@ func TestDNSConfigMapResponse(t *testing.T) {
 		})
 	}
 }
-
-func TestNextDNSCapMapRendering(t *testing.T) {
-	t.Parallel()
-
-	mkConfig := func(addrs ...string) *types.Config {
-		resolvers := make([]*dnstype.Resolver, len(addrs))
-		for i, a := range addrs {
-			resolvers[i] = &dnstype.Resolver{Addr: a}
-		}
-
-		return &types.Config{
-			TailcfgDNSConfig: &tailcfg.DNSConfig{
-				Resolvers: resolvers,
-			},
-		}
-	}
-
-	mkNode := func() types.NodeView {
-		return (&types.Node{
-			ID:       1,
-			Hostname: "node1",
-			IPv4:     iap("100.64.0.1"),
-			Hostinfo: &tailcfg.Hostinfo{OS: "linux"},
-		}).View()
-	}
-
-	// resolverAddr extracts the first resolver's address with a
-	// bounds check. Without it, a regression that drops the
-	// resolver list would nil-panic instead of failing cleanly.
-	resolverAddr := func(t *testing.T, got *tailcfg.DNSConfig) string {
-		t.Helper()
-
-		if got == nil {
-			t.Fatalf("generateDNSConfig returned nil")
-		}
-
-		if len(got.Resolvers) == 0 {
-			t.Fatalf("generateDNSConfig returned no Resolvers")
-		}
-
-		return got.Resolvers[0].Addr
-	}
-
-	t.Run("no_capmap_metadata_appended", func(t *testing.T) {
-		t.Parallel()
-
-		got := generateDNSConfig(
-			mkConfig("https://dns.nextdns.io/abc"),
-			mkNode(),
-			nil,
-		)
-
-		want := "https://dns.nextdns.io/abc?device_ip=100.64.0.1&device_model=linux&device_name=node1"
-		if addr := resolverAddr(t, got); addr != want {
-			t.Errorf("addr = %q, want %q", addr, want)
-		}
-	})
-
-	t.Run("profile_overrides_global", func(t *testing.T) {
-		t.Parallel()
-
-		capMap := tailcfg.NodeCapMap{
-			"nextdns:override": []tailcfg.RawMessage{},
-		}
-
-		got := generateDNSConfig(
-			mkConfig("https://dns.nextdns.io/global"),
-			mkNode(),
-			capMap,
-		)
-
-		want := "https://dns.nextdns.io/override?device_ip=100.64.0.1&device_model=linux&device_name=node1"
-		if addr := resolverAddr(t, got); addr != want {
-			t.Errorf("addr = %q, want %q", addr, want)
-		}
-	})
-
-	t.Run("no_device_info_skips_metadata", func(t *testing.T) {
-		t.Parallel()
-
-		capMap := tailcfg.NodeCapMap{
-			"nextdns:abc":            []tailcfg.RawMessage{},
-			"nextdns:no-device-info": []tailcfg.RawMessage{},
-		}
-
-		got := generateDNSConfig(
-			mkConfig("https://dns.nextdns.io/global"),
-			mkNode(),
-			capMap,
-		)
-
-		want := "https://dns.nextdns.io/abc"
-		if addr := resolverAddr(t, got); addr != want {
-			t.Errorf("addr = %q, want %q", addr, want)
-		}
-	})
-
-	t.Run("non_nextdns_resolver_untouched", func(t *testing.T) {
-		t.Parallel()
-
-		capMap := tailcfg.NodeCapMap{
-			"nextdns:abc": []tailcfg.RawMessage{},
-		}
-
-		got := generateDNSConfig(
-			mkConfig("https://dns.example.org/dns-query"),
-			mkNode(),
-			capMap,
-		)
-
-		want := "https://dns.example.org/dns-query"
-		if addr := resolverAddr(t, got); addr != want {
-			t.Errorf("non-nextdns resolver was rewritten: %q", addr)
-		}
-	})
-}
-
-// TestBuildFromChangeFiltersPeerPatchesByVisibility proves that incremental
-// peer-change patches (online/offline, endpoint, key-expiry) are restricted to
-// the recipient's ACL-visible peer set, the same way buildTailPeers filters
-// full peer objects via policy.ReduceNodes. Without it, a node receives the
-// existence, presence, and addresses of peers its policy forbids accessing.
-func TestBuildFromChangeFiltersPeerPatchesByVisibility(t *testing.T) {
-	tmp := t.TempDir()
-
-	p4 := netip.MustParsePrefix("100.64.0.0/10")
-	p6 := netip.MustParsePrefix("fd7a:115c:a1e0::/48")
-
-	cfg := &types.Config{
-		Database: types.DatabaseConfig{
-			Type:   types.DatabaseSqlite,
-			Sqlite: types.SqliteConfig{Path: tmp + "/h.db"},
-		},
-		PrefixV4:     &p4,
-		PrefixV6:     &p6,
-		IPAllocation: types.IPAllocationStrategySequential,
-		BaseDomain:   "headscale.test",
-		Policy:       types.PolicyConfig{Mode: types.PolicyModeDB},
-		DERP: types.DERPConfig{
-			DERPMap: &tailcfg.DERPMap{
-				Regions: map[int]*tailcfg.DERPRegion{999: {RegionID: 999}},
-			},
-		},
-		Tuning: types.Tuning{
-			NodeStoreBatchSize:    state.TestBatchSize,
-			NodeStoreBatchTimeout: state.TestBatchTimeout,
-		},
-	}
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user1 := database.CreateUserForTest("u1")
-	user2 := database.CreateUserForTest("u2")
-	n1 := database.CreateRegisteredNodeForTest(user1, "n1")
-	n1b := database.CreateRegisteredNodeForTest(user1, "n1b")
-	n2 := database.CreateRegisteredNodeForTest(user2, "n2")
-	require.NoError(t, database.Close())
-
-	s, err := state.NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	// Each user may reach only its own devices, so n1 cannot access n2.
-	policy := `{"acls":[
-		{"action":"accept","src":["u1@"],"dst":["u1@:*"]},
-		{"action":"accept","src":["u2@"],"dst":["u2@:*"]}
-	]}`
-	_, err = s.SetPolicy([]byte(policy))
-	require.NoError(t, err)
-
-	m := &mapper{state: s, cfg: cfg}
-
-	// n2 (user2) comes online; n1 (user1) must NOT receive its patch.
-	leakChange := change.NodeOnline(n2.ID)
-	resp, err := m.buildFromChange(n1.ID, tailcfg.CurrentCapabilityVersion, &leakChange)
-	require.NoError(t, err)
-	require.NotNil(t, resp)
-
-	for _, p := range resp.PeersChangedPatch {
-		assert.NotEqual(t, n2.ID.NodeID(), p.NodeID,
-			"n1 must not receive an online patch for n2, which its policy forbids accessing")
-	}
-
-	// Control: n1b (same user) coming online IS visible to n1.
-	okChange := change.NodeOnline(n1b.ID)
-	resp2, err := m.buildFromChange(n1.ID, tailcfg.CurrentCapabilityVersion, &okChange)
-	require.NoError(t, err)
-	require.NotNil(t, resp2)
-
-	var gotVisible bool
-
-	for _, p := range resp2.PeersChangedPatch {
-		if p.NodeID == n1b.ID.NodeID() {
-			gotVisible = true
-		}
-	}
-
-	assert.True(t, gotVisible,
-		"n1 must receive the online patch for visible same-user peer n1b")
-}
-
-// TestBuildFromChangeFiltersUserProfilesByVisibility proves the incremental
-// PeersChanged path restricts UserProfiles to the recipient's ACL-visible
-// peers, like the full-map path (whose ListPeers returns the
-// BuildPeerMap-filtered set). Without it, a changed node broadcast to all
-// nodes leaks its owner's identity (login name, display name, avatar) to
-// recipients whose policy forbids accessing that node.
-func TestBuildFromChangeFiltersUserProfilesByVisibility(t *testing.T) {
-	tmp := t.TempDir()
-
-	p4 := netip.MustParsePrefix("100.64.0.0/10")
-	p6 := netip.MustParsePrefix("fd7a:115c:a1e0::/48")
-
-	cfg := &types.Config{
-		Database: types.DatabaseConfig{
-			Type:   types.DatabaseSqlite,
-			Sqlite: types.SqliteConfig{Path: tmp + "/h.db"},
-		},
-		PrefixV4:     &p4,
-		PrefixV6:     &p6,
-		IPAllocation: types.IPAllocationStrategySequential,
-		BaseDomain:   "headscale.test",
-		Policy:       types.PolicyConfig{Mode: types.PolicyModeDB},
-		DERP: types.DERPConfig{
-			DERPMap: &tailcfg.DERPMap{
-				Regions: map[int]*tailcfg.DERPRegion{999: {RegionID: 999}},
-			},
-		},
-		Tuning: types.Tuning{
-			NodeStoreBatchSize:    state.TestBatchSize,
-			NodeStoreBatchTimeout: state.TestBatchTimeout,
-		},
-	}
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user1 := database.CreateUserForTest("u1")
-	user2 := database.CreateUserForTest("u2")
-	n1 := database.CreateRegisteredNodeForTest(user1, "n1")
-	n2 := database.CreateRegisteredNodeForTest(user2, "n2")
-	require.NoError(t, database.Close())
-
-	s, err := state.NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	// Each user may reach only its own devices, so n1 cannot access n2.
-	policy := `{"acls":[
-		{"action":"accept","src":["u1@"],"dst":["u1@:*"]},
-		{"action":"accept","src":["u2@"],"dst":["u2@:*"]}
-	]}`
-	_, err = s.SetPolicy([]byte(policy))
-	require.NoError(t, err)
-
-	m := &mapper{state: s, cfg: cfg}
-
-	// n2 (user2) is added and broadcast. n1 (user1) cannot access it, so n1
-	// must NOT receive user2's profile.
-	c := change.NodeAdded(n2.ID)
-	resp, err := m.buildFromChange(n1.ID, tailcfg.CurrentCapabilityVersion, &c)
-	require.NoError(t, err)
-	require.NotNil(t, resp)
-
-	for _, up := range resp.UserProfiles {
-		assert.NotEqual(t, user2.TailscaleUserProfile().ID, up.ID,
-			"n1 must not receive user2's profile; n2 is not ACL-visible to n1")
-	}
-}
-
-// TestBuildFromChangeVisibilityMatchesFullMap is the consolidation guard for
-// PR #3304: the incremental change paths (peer patches via NodeOnline, changed
-// peers via NodeAdded) must expose exactly the same ACL-visible peer set as the
-// full-map path under every policy shape, and a cross-user UserProfile must not
-// leak. If a future refactor lets one path drift from another, this fails.
-//
-// It pins two behaviours the scattered per-path filters get wrong today and the
-// consolidation onto the snapshot peer map must fix: deny-all (empty matchers)
-// must hide every peer on the incremental path rather than fall open to "no
-// matchers => all visible", and per-node policies (autogroup:self) must agree
-// across paths.
-func TestBuildFromChangeVisibilityMatchesFullMap(t *testing.T) {
-	tmp := t.TempDir()
-	p4 := netip.MustParsePrefix("100.64.0.0/10")
-	p6 := netip.MustParsePrefix("fd7a:115c:a1e0::/48")
-	cfg := &types.Config{
-		Database: types.DatabaseConfig{
-			Type:   types.DatabaseSqlite,
-			Sqlite: types.SqliteConfig{Path: tmp + "/h.db"},
-		},
-		PrefixV4:     &p4,
-		PrefixV6:     &p6,
-		IPAllocation: types.IPAllocationStrategySequential,
-		BaseDomain:   "headscale.test",
-		Policy:       types.PolicyConfig{Mode: types.PolicyModeDB},
-		DERP: types.DERPConfig{
-			DERPMap: &tailcfg.DERPMap{
-				Regions: map[int]*tailcfg.DERPRegion{999: {RegionID: 999}},
-			},
-		},
-		Tuning: types.Tuning{
-			NodeStoreBatchSize:    state.TestBatchSize,
-			NodeStoreBatchTimeout: state.TestBatchTimeout,
-		},
-	}
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user1 := database.CreateUserForTest("u1")
-	user2 := database.CreateUserForTest("u2")
-	n1 := database.CreateRegisteredNodeForTest(user1, "n1")
-	n1b := database.CreateRegisteredNodeForTest(user1, "n1b")
-	n2 := database.CreateRegisteredNodeForTest(user2, "n2")
-	require.NoError(t, database.Close())
-
-	s, err := state.NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	m := &mapper{state: s, cfg: cfg}
-	capVer := tailcfg.CurrentCapabilityVersion
-
-	// fullVisible returns the peer IDs n1 sees in the full map.
-	fullVisible := func(t *testing.T) map[tailcfg.NodeID]bool {
-		t.Helper()
-
-		resp, err := m.fullMapResponse(n1.ID, capVer)
-		require.NoError(t, err)
-
-		got := map[tailcfg.NodeID]bool{}
-		for _, p := range resp.Peers {
-			got[p.ID] = true
-		}
-
-		return got
-	}
-	// patchReaches reports whether a NodeOnline patch for id is delivered to n1.
-	patchReaches := func(t *testing.T, id types.NodeID) bool {
-		t.Helper()
-
-		c := change.NodeOnline(id)
-		resp, err := m.buildFromChange(n1.ID, capVer, &c)
-		require.NoError(t, err)
-
-		if resp == nil {
-			return false
-		}
-
-		for _, p := range resp.PeersChangedPatch {
-			if p.NodeID == id.NodeID() {
-				return true
-			}
-		}
-
-		return false
-	}
-	// changedReaches reports whether a NodeAdded changed-peer for id reaches n1.
-	changedReaches := func(t *testing.T, id types.NodeID) bool {
-		t.Helper()
-
-		c := change.NodeAdded(id)
-		resp, err := m.buildFromChange(n1.ID, capVer, &c)
-		require.NoError(t, err)
-
-		if resp == nil {
-			return false
-		}
-
-		for _, p := range resp.PeersChanged {
-			if p.ID == id.NodeID() {
-				return true
-			}
-		}
-
-		return false
-	}
-	// profileReaches reports whether want's profile is delivered to n1 when n
-	// is added. Use a cross-user node so the result is not masked by n1's own
-	// always-present user profile.
-	profileReaches := func(t *testing.T, n *types.Node, want tailcfg.UserID) bool {
-		t.Helper()
-
-		c := change.NodeAdded(n.ID)
-		resp, err := m.buildFromChange(n1.ID, capVer, &c)
-		require.NoError(t, err)
-
-		if resp == nil {
-			return false
-		}
-
-		for _, up := range resp.UserProfiles {
-			if up.ID == want {
-				return true
-			}
-		}
-
-		return false
-	}
-
-	// wantFull pins the actual peer-visibility semantics so the invariant below
-	// cannot pass vacuously (e.g. if every path broke to zero identically).
-	// Note deny_all: an empty ACL set compiles to zero matchers, which headscale
-	// treats as "no visibility restriction" — all peers are visible on every
-	// path (the packet filter denies traffic separately). user_isolation and
-	// autogroup_self are the discriminating cases that prove filtering works.
-	tests := []struct {
-		name     string
-		policy   string
-		wantFull int
-	}{
-		{"allow_all", `{"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`, 2},
-		{
-			"user_isolation",
-			`{"acls":[
-				{"action":"accept","src":["u1@"],"dst":["u1@:*"]},
-				{"action":"accept","src":["u2@"],"dst":["u2@:*"]}
-			]}`,
-			1,
-		},
-		{"deny_all", `{"acls":[]}`, 2},
-		{
-			"autogroup_self",
-			`{"acls":[{"action":"accept","src":["autogroup:member"],"dst":["autogroup:self:*"]}]}`,
-			1,
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			_, err := s.SetPolicy([]byte(tt.policy))
-			require.NoError(t, err)
-
-			full := fullVisible(t)
-			require.Lenf(t, full, tt.wantFull,
-				"%s: unexpected full-map visible peer count", tt.name)
-
-			for _, peer := range []*types.Node{n1b, n2} {
-				want := full[peer.ID.NodeID()]
-				assert.Equalf(t, want, patchReaches(t, peer.ID),
-					"%s: NodeOnline patch for %s must reach n1 iff full-map shows it",
-					tt.name, peer.Hostname)
-				assert.Equalf(t, want, changedReaches(t, peer.ID),
-					"%s: NodeAdded changed-peer for %s must reach n1 iff full-map shows it",
-					tt.name, peer.Hostname)
-			}
-			// Cross-user profile (user2) must appear iff n2 is visible to n1.
-			assert.Equalf(t, full[n2.ID.NodeID()], profileReaches(t, n2, user2.TailscaleUserProfile().ID),
-				"%s: user2 profile must be sent iff n2 is visible to n1", tt.name)
-		})
-	}
-}
-
-// TestFullMapResponseSurvivesPeerWithInvalidName proves a single node with an
-// FQDN-invalid GivenName must not break map generation for its peers.
-//
-// A node whose stored GivenName is empty (ErrNodeHasNoGivenName) or yields an
-// FQDN longer than MaxHostnameLength (ErrHostnameTooLong) makes GetFQDN, and
-// therefore TailNode, return an error. buildTailPeers used to abort the entire
-// peer list on the first such error, so MapResponseBuilder.Build() failed for
-// every node that could see the bad peer; on the initial-connection path that
-// surfaced as "PollNetMap: ... unexpected EOF" and the "Unable to connect to
-// the Tailscale coordination server" health warning. A legacy DB row loads
-// verbatim (NewNodeStore reads db.ListNodes() without re-sanitising names), so
-// the bad peer persists across restart. The build for an unaffected viewer
-// must succeed: the bad peer is dropped, valid peers and self survive.
-func TestFullMapResponseSurvivesPeerWithInvalidName(t *testing.T) {
-	for _, tt := range []struct {
-		name    string
-		badName string
-	}{
-		{"empty given name", ""},
-		{"over-long fqdn", strings.Repeat("a", types.MaxHostnameLength+1)},
-	} {
-		t.Run(tt.name, func(t *testing.T) {
-			tmp := t.TempDir()
-			p4 := netip.MustParsePrefix("100.64.0.0/10")
-			p6 := netip.MustParsePrefix("fd7a:115c:a1e0::/48")
-			cfg := &types.Config{
-				Database: types.DatabaseConfig{
-					Type:   types.DatabaseSqlite,
-					Sqlite: types.SqliteConfig{Path: tmp + "/h.db"},
-				},
-				PrefixV4:     &p4,
-				PrefixV6:     &p6,
-				IPAllocation: types.IPAllocationStrategySequential,
-				BaseDomain:   "headscale.test",
-				Policy:       types.PolicyConfig{Mode: types.PolicyModeDB},
-				DERP: types.DERPConfig{
-					DERPMap: &tailcfg.DERPMap{
-						Regions: map[int]*tailcfg.DERPRegion{999: {RegionID: 999}},
-					},
-				},
-				Tuning: types.Tuning{
-					NodeStoreBatchSize:    state.TestBatchSize,
-					NodeStoreBatchTimeout: state.TestBatchTimeout,
-				},
-			}
-
-			database, err := db.NewHeadscaleDatabase(cfg)
-			require.NoError(t, err)
-
-			user := database.CreateUserForTest("u1")
-			n1 := database.CreateRegisteredNodeForTest(user, "n1")     // viewer, valid
-			bad := database.CreateRegisteredNodeForTest(user, "bad")   // peer, name corrupted below
-			good := database.CreateRegisteredNodeForTest(user, "good") // peer, valid control
-
-			// Simulate a legacy/corrupt row that v29 loads verbatim.
-			require.NoError(t, database.DB.
-				Model(&types.Node{}).
-				Where("id = ?", bad.ID).
-				Update("given_name", tt.badName).Error)
-			require.NoError(t, database.Close())
-
-			s, err := state.NewState(cfg)
-			require.NoError(t, err)
-			t.Cleanup(func() { _ = s.Close() })
-
-			// Allow-all so n1 sees both peers; the bad one must still be dropped.
-			_, err = s.SetPolicy([]byte(`{"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`))
-			require.NoError(t, err)
-
-			m := &mapper{state: s, cfg: cfg}
-			capVer := tailcfg.CurrentCapabilityVersion
-
-			resp, err := m.fullMapResponse(n1.ID, capVer)
-			require.NoError(t, err, "n1's map must build despite a peer with an invalid name")
-			require.NotNil(t, resp)
-			require.NotNil(t, resp.Node, "n1 must receive its own self node")
-
-			peers := map[tailcfg.NodeID]bool{}
-			for _, p := range resp.Peers {
-				peers[p.ID] = true
-			}
-
-			assert.False(t, peers[bad.ID.NodeID()], "the peer with an invalid name must be dropped")
-			assert.True(t, peers[good.ID.NodeID()], "valid peers must remain in the map")
-		})
-	}
-}
-
-// TestGenerateDNSConfigNilHostinfoNoPanic proves generateDNSConfig does not
-// panic when a node's Hostinfo is nil (e.g. a legacy DB row with a NULL
-// host_info column). addNextDNSMetadata dereferenced node.Hostinfo().OS()
-// without the .Valid() guard its siblings (RequestTags, TailNode) apply, so
-// building such a node's map crashed the server whenever a NextDNS resolver
-// was configured.
-func TestGenerateDNSConfigNilHostinfoNoPanic(t *testing.T) {
-	node := (&types.Node{
-		Hostname: "legacy-node",
-		IPv4:     iap("100.64.0.1"),
-		// Hostinfo intentionally nil, as a legacy NULL host_info row loads.
-	}).View()
-
-	cfg := &types.Config{
-		TailcfgDNSConfig: &tailcfg.DNSConfig{
-			Resolvers: []*dnstype.Resolver{{Addr: "https://dns.nextdns.io/abc"}},
-		},
-	}
-
-	require.NotPanics(t, func() {
-		generateDNSConfig(cfg, node, nil)
-	}, "generateDNSConfig must not panic when a node has nil Hostinfo")
-}
diff --git a/hscontrol/mapper/node_conn.go b/hscontrol/mapper/node_conn.go
index 97d024a85..faa893faa 100644
--- a/hscontrol/mapper/node_conn.go
+++ b/hscontrol/mapper/node_conn.go
@@ -3,7 +3,6 @@ package mapper
 import (
 	"errors"
 	"fmt"
-	"slices"
 	"strconv"
 	"sync"
 	"sync/atomic"
@@ -18,22 +17,12 @@ import (
 	"tailscale.com/tailcfg"
 )
 
-// errNoActiveConnections is returned by [multiChannelNodeConn.send] when a node
-// has no active connections (disconnected but kept in the batcher for rapid
-// reconnection). Callers must not update peer tracking state (lastSentPeers)
-// after this error because the data was never delivered to any client.
+// errNoActiveConnections is returned by send when a node has no active
+// connections (disconnected but kept in the batcher for rapid reconnection).
+// Callers must not update peer tracking state (lastSentPeers) after this
+// error because the data was never delivered to any client.
 var errNoActiveConnections = errors.New("no active connections")
 
-// errNoReadyConnections is returned by [multiChannelNodeConn.send] when the
-// node's only connections are still waiting for their initial map
-// ([Batcher.AddNode] has registered them but not yet delivered the first full
-// response). Sending a delta now would make it the stream's first frame, which
-// Tailscale clients reject ("initial MapResponse lacked Node") — tearing down
-// the poll. Unlike [errNoActiveConnections], the change must be retried: the
-// in-flight initial map may have been generated from a snapshot older than
-// the change, so dropping it would lose the update.
-var errNoReadyConnections = errors.New("no connections ready for updates")
-
 // connectionEntry represents a single connection to a node.
 type connectionEntry struct {
 	id       string // unique connection ID
@@ -43,13 +32,6 @@ type connectionEntry struct {
 	stop     func()
 	lastUsed atomic.Int64 // Unix timestamp of last successful send
 	closed   atomic.Bool  // Indicates if this connection has been closed
-
-	// pendingInitial is set by [Batcher.AddNode] while this
-	// connection's initial map is still in flight, and cleared once it
-	// is delivered. Broadcast sends skip such connections so a delta
-	// can never become the stream's first frame ahead of the initial
-	// map. The zero value means the connection is ready.
-	pendingInitial atomic.Bool
 }
 
 // multiChannelNodeConn manages multiple concurrent connections for a single node.
@@ -69,25 +51,18 @@ type multiChannelNodeConn struct {
 
 	// workMu serializes change processing for this node across batch ticks.
 	// Without this, two workers could process consecutive ticks' bundles
-	// concurrently, causing out-of-order [tailcfg.MapResponse] delivery and races
-	// on lastSentPeers (Clear+Store in [multiChannelNodeConn.updateSentPeers] vs
-	// Range in [multiChannelNodeConn.computePeerDiff]).
+	// concurrently, causing out-of-order MapResponse delivery and races
+	// on lastSentPeers (Clear+Store in updateSentPeers vs Range in
+	// computePeerDiff).
 	workMu sync.Mutex
 
-	// inFlight is true while a batched work bundle for this node is queued or
-	// being processed. processBatchedChanges refuses to queue a second bundle
-	// while one is in flight (the new changes wait in pending), so a saturated
-	// worker pool cannot deliver tick N+1 before tick N: a non-FIFO workMu
-	// cannot reorder bundles that never coexist.
-	inFlight atomic.Bool
-
 	closeOnce   sync.Once
 	updateCount atomic.Int64
 
 	// disconnectedAt records when the last connection was removed.
 	// nil means the node is considered connected (or newly created);
 	// non-nil means the node disconnected at the stored timestamp.
-	// Used by [Batcher.cleanupOfflineNodes] to evict stale entries.
+	// Used by cleanupOfflineNodes to evict stale entries.
 	disconnectedAt atomic.Pointer[time.Time]
 
 	// lastSentPeers tracks which peers were last sent to this node.
@@ -143,7 +118,9 @@ func (mc *multiChannelNodeConn) stopConnection(conn *connectionEntry) {
 // Caller must hold mc.mutex.
 func (mc *multiChannelNodeConn) removeConnectionAtIndexLocked(i int, stopConnection bool) *connectionEntry {
 	conn := mc.connections[i]
-	mc.connections = slices.Delete(mc.connections, i, i+1)
+	copy(mc.connections[i:], mc.connections[i+1:])
+	mc.connections[len(mc.connections)-1] = nil // release pointer for GC
+	mc.connections = mc.connections[:len(mc.connections)-1]
 
 	if stopConnection {
 		mc.stopConnection(conn)
@@ -182,16 +159,6 @@ func (mc *multiChannelNodeConn) removeConnectionByChannel(c chan<- *tailcfg.MapR
 	return false
 }
 
-// detach removes the connection for the given channel and marks the node
-// disconnected if no active connections remain.
-func (mc *multiChannelNodeConn) detach(c chan<- *tailcfg.MapResponse) {
-	mc.removeConnectionByChannel(c)
-
-	if !mc.hasActiveConnections() {
-		mc.markDisconnected()
-	}
-}
-
 // hasActiveConnections checks if the node has any active connections.
 func (mc *multiChannelNodeConn) hasActiveConnections() bool {
 	mc.mutex.RLock()
@@ -215,8 +182,8 @@ func (mc *multiChannelNodeConn) markConnected() {
 }
 
 // markDisconnected records the current time as the moment the node
-// lost its last connection. Used by [Batcher.cleanupOfflineNodes] to
-// determine how long the node has been offline.
+// lost its last connection. Used by cleanupOfflineNodes to determine
+// how long the node has been offline.
 func (mc *multiChannelNodeConn) markDisconnected() {
 	now := time.Now()
 	mc.disconnectedAt.Store(&now)
@@ -251,17 +218,6 @@ func (mc *multiChannelNodeConn) appendPending(changes ...change.Change) {
 	mc.pendingMu.Unlock()
 }
 
-// prependPending puts changes at the head of the pending list, ahead of
-// anything queued since. Used to retry changes that could not be
-// delivered yet (initial map in flight): they were emitted before the
-// currently pending ones, and order matters for stateful patches like
-// online/offline.
-func (mc *multiChannelNodeConn) prependPending(changes ...change.Change) {
-	mc.pendingMu.Lock()
-	mc.pending = append(changes, mc.pending...)
-	mc.pendingMu.Unlock()
-}
-
 // drainPending atomically removes and returns all pending changes.
 // Returns nil if there are no pending changes.
 func (mc *multiChannelNodeConn) drainPending() []change.Change {
@@ -279,8 +235,8 @@ func (mc *multiChannelNodeConn) drainPending() []change.Change {
 // connection can block for up to 50ms), the method snapshots connections under
 // a read lock, sends without any lock held, then write-locks only to remove
 // failures. New connections added between the snapshot and cleanup are safe:
-// they receive a full initial map via [Batcher.AddNode], so missing this update
-// causes no data loss.
+// they receive a full initial map via AddNode, so missing this update causes
+// no data loss.
 func (mc *multiChannelNodeConn) send(data *tailcfg.MapResponse) error {
 	if data == nil {
 		return nil
@@ -297,28 +253,11 @@ func (mc *multiChannelNodeConn) send(data *tailcfg.MapResponse) error {
 		return errNoActiveConnections
 	}
 
-	// Copy only connections whose initial map has been delivered.
-	// A connection still awaiting its initial map receives one
-	// (generated from the current snapshot) from [Batcher.AddNode];
-	// pushing this update at it now would deliver a delta as the
-	// stream's first frame.
-	snapshot := make([]*connectionEntry, 0, len(mc.connections))
-
-	for _, conn := range mc.connections {
-		if !conn.pendingInitial.Load() {
-			snapshot = append(snapshot, conn)
-		}
-	}
-
+	// Copy the slice so we can release the read lock before sending.
+	snapshot := make([]*connectionEntry, len(mc.connections))
+	copy(snapshot, mc.connections)
 	mc.mutex.RUnlock()
 
-	if len(snapshot) == 0 {
-		mc.log.Trace().
-			Msg("send: connections present but none ready, requeue")
-
-		return errNoReadyConnections
-	}
-
 	mc.log.Trace().
 		Int("total_connections", len(snapshot)).
 		Msg("send: broadcasting")
@@ -353,22 +292,32 @@ func (mc *multiChannelNodeConn) send(data *tailcfg.MapResponse) error {
 		// Remove by pointer identity: only remove entries that still exist
 		// in the current connections slice and match a failed pointer.
 		// New connections added since the snapshot are not affected.
-		// DeleteFunc preserves order and zeroes trailing slots so removed
-		// *connectionEntry values are not retained by the backing array.
-		mc.connections = slices.DeleteFunc(mc.connections, func(conn *connectionEntry) bool {
-			if !slices.Contains(failed, conn) {
-				return false
+		failedSet := make(map[*connectionEntry]struct{}, len(failed))
+		for _, f := range failed {
+			failedSet[f] = struct{}{}
+		}
+
+		clean := mc.connections[:0]
+		for _, conn := range mc.connections {
+			if _, isFailed := failedSet[conn]; !isFailed {
+				clean = append(clean, conn)
+			} else {
+				mc.log.Debug().
+					Str(zf.ConnID, conn.id).
+					Msg("send: removing failed connection")
+				// Tear down the owning session so the old serveLongPoll
+				// goroutine exits instead of lingering as a stale session.
+				mc.stopConnection(conn)
 			}
+		}
 
-			mc.log.Debug().
-				Str(zf.ConnID, conn.id).
-				Msg("send: removing failed connection")
-			// Tear down the owning session so the old serveLongPoll
-			// goroutine exits instead of lingering as a stale session.
-			mc.stopConnection(conn)
+		// Nil out trailing slots so removed *connectionEntry values
+		// are not retained by the backing array.
+		for i := len(clean); i < len(mc.connections); i++ {
+			mc.connections[i] = nil
+		}
 
-			return true
-		})
+		mc.connections = clean
 		mc.mutex.Unlock()
 	}
 
@@ -440,7 +389,7 @@ func (mc *multiChannelNodeConn) version() tailcfg.CapabilityVersion {
 	return mc.connections[0].version
 }
 
-// updateSentPeers updates the tracked peer state based on a sent [tailcfg.MapResponse].
+// updateSentPeers updates the tracked peer state based on a sent MapResponse.
 // This must be called after successfully sending a response to keep track of
 // what the client knows about, enabling accurate diffs for future updates.
 func (mc *multiChannelNodeConn) updateSentPeers(resp *tailcfg.MapResponse) {
diff --git a/hscontrol/mapper/reconnect_cleanup_test.go b/hscontrol/mapper/reconnect_cleanup_test.go
deleted file mode 100644
index 4d97a1e85..000000000
--- a/hscontrol/mapper/reconnect_cleanup_test.go
+++ /dev/null
@@ -1,59 +0,0 @@
-package mapper
-
-import (
-	"sync"
-	"testing"
-	"time"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-// TestAddNodeReconnectNotOrphanedByCleanup ensures a node reconnecting via
-// AddNode is not deleted from b.nodes by a concurrent cleanupOfflineNodes pass.
-// AddNode must register the connection atomically with the get-or-create, so
-// the offline-cleanup Compute either sees the active connection (and cancels)
-// or runs first and AddNode recreates the entry — never leaving a live
-// connection orphaned outside b.nodes.
-func TestAddNodeReconnectNotOrphanedByCleanup(t *testing.T) {
-	testData, cleanup := setupBatcherWithTestData(t, NewBatcherAndMapper, 1, 1, normalBufferSize)
-	defer cleanup()
-
-	b := testData.Batcher.Batcher
-	node := &testData.Nodes[0]
-
-	testData.State.Connect(node.n.ID)
-
-	go func() {
-		for range node.ch {
-		}
-	}()
-
-	require.NoError(t, b.AddNode(node.n.ID, node.ch, tailcfg.CapabilityVersion(100), nil))
-
-	// Model a long-offline conn awaiting cleanup or a rapid reconnect.
-	nc, ok := b.nodes.Load(node.n.ID)
-	require.True(t, ok)
-
-	nc.removeConnectionByChannel(node.ch)
-
-	past := time.Now().Add(-(offlineNodeCleanupThreshold + time.Minute))
-	nc.disconnectedAt.Store(&past)
-	require.False(t, nc.hasActiveConnections())
-
-	var wg sync.WaitGroup
-
-	wg.Go(func() {
-		_ = b.AddNode(node.n.ID, node.ch, tailcfg.CapabilityVersion(100), nil)
-	})
-
-	wg.Go(func() {
-		b.cleanupOfflineNodes()
-	})
-
-	wg.Wait()
-
-	assert.True(t, b.IsConnected(node.n.ID),
-		"reconnecting node was orphaned: live connection absent from b.nodes")
-}
diff --git a/hscontrol/mapper/tail_test.go b/hscontrol/mapper/tail_test.go
index ee5da85c9..505c9de01 100644
--- a/hscontrol/mapper/tail_test.go
+++ b/hscontrol/mapper/tail_test.go
@@ -16,8 +16,6 @@ import (
 )
 
 func TestTailNode(t *testing.T) {
-	t.Parallel()
-
 	mustNK := func(str string) key.NodePublic {
 		var k key.NodePublic
 
@@ -53,6 +51,7 @@ func TestTailNode(t *testing.T) {
 	tests := []struct {
 		name       string
 		node       *types.Node
+		pol        []byte
 		dnsConfig  *tailcfg.DNSConfig
 		baseDomain string
 		want       *tailcfg.Node
@@ -70,14 +69,16 @@ func TestTailNode(t *testing.T) {
 				Name:              "empty",
 				StableID:          "0",
 				HomeDERP:          0,
+				LegacyDERPString:  "127.3.3.40:0",
 				Hostinfo:          hiview(tailcfg.Hostinfo{}),
 				MachineAuthorized: true,
 
 				CapMap: tailcfg.NodeCapMap{
-					tailcfg.CapabilityAdmin:           []tailcfg.RawMessage{},
-					tailcfg.CapabilitySSH:             []tailcfg.RawMessage{},
-					tailcfg.CapabilityFileSharing:     []tailcfg.RawMessage{},
-					tailcfg.NodeAttrDefaultAutoUpdate: []tailcfg.RawMessage{tailcfg.RawMessage("false")},
+					tailcfg.CapabilityFileSharing:    []tailcfg.RawMessage{},
+					tailcfg.CapabilityAdmin:          []tailcfg.RawMessage{},
+					tailcfg.CapabilitySSH:            []tailcfg.RawMessage{},
+					tailcfg.NodeAttrsTaildriveShare:  []tailcfg.RawMessage{},
+					tailcfg.NodeAttrsTaildriveAccess: []tailcfg.RawMessage{},
 				},
 			},
 			wantErr: false,
@@ -147,7 +148,8 @@ func TestTailNode(t *testing.T) {
 				PrimaryRoutes: []netip.Prefix{
 					netip.MustParsePrefix("192.168.0.0/24"),
 				},
-				HomeDERP: 0,
+				HomeDERP:         0,
+				LegacyDERPString: "127.3.3.40:0",
 				Hostinfo: hiview(tailcfg.Hostinfo{
 					RoutableIPs: []netip.Prefix{
 						tsaddr.AllIPv4(),
@@ -163,10 +165,11 @@ func TestTailNode(t *testing.T) {
 				MachineAuthorized: true,
 
 				CapMap: tailcfg.NodeCapMap{
-					tailcfg.CapabilityAdmin:           []tailcfg.RawMessage{},
-					tailcfg.CapabilitySSH:             []tailcfg.RawMessage{},
-					tailcfg.CapabilityFileSharing:     []tailcfg.RawMessage{},
-					tailcfg.NodeAttrDefaultAutoUpdate: []tailcfg.RawMessage{tailcfg.RawMessage("false")},
+					tailcfg.CapabilityFileSharing:    []tailcfg.RawMessage{},
+					tailcfg.CapabilityAdmin:          []tailcfg.RawMessage{},
+					tailcfg.CapabilitySSH:            []tailcfg.RawMessage{},
+					tailcfg.NodeAttrsTaildriveShare:  []tailcfg.RawMessage{},
+					tailcfg.NodeAttrsTaildriveAccess: []tailcfg.RawMessage{},
 				},
 			},
 			wantErr: false,
@@ -184,14 +187,16 @@ func TestTailNode(t *testing.T) {
 				Name:              "minimal.example.com.",
 				StableID:          "0",
 				HomeDERP:          0,
+				LegacyDERPString:  "127.3.3.40:0",
 				Hostinfo:          hiview(tailcfg.Hostinfo{}),
 				MachineAuthorized: true,
 
 				CapMap: tailcfg.NodeCapMap{
-					tailcfg.CapabilityAdmin:           []tailcfg.RawMessage{},
-					tailcfg.CapabilitySSH:             []tailcfg.RawMessage{},
-					tailcfg.CapabilityFileSharing:     []tailcfg.RawMessage{},
-					tailcfg.NodeAttrDefaultAutoUpdate: []tailcfg.RawMessage{tailcfg.RawMessage("false")},
+					tailcfg.CapabilityFileSharing:    []tailcfg.RawMessage{},
+					tailcfg.CapabilityAdmin:          []tailcfg.RawMessage{},
+					tailcfg.CapabilitySSH:            []tailcfg.RawMessage{},
+					tailcfg.NodeAttrsTaildriveShare:  []tailcfg.RawMessage{},
+					tailcfg.NodeAttrsTaildriveAccess: []tailcfg.RawMessage{},
 				},
 			},
 			wantErr: false,
@@ -203,12 +208,11 @@ func TestTailNode(t *testing.T) {
 
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-
 			cfg := &types.Config{
-				BaseDomain:       tt.baseDomain,
-				TailcfgDNSConfig: tt.dnsConfig,
-				Taildrop:         types.TaildropConfig{Enabled: true},
+				BaseDomain:          tt.baseDomain,
+				TailcfgDNSConfig:    tt.dnsConfig,
+				RandomizeClientPort: false,
+				Taildrop:            types.TaildropConfig{Enabled: true},
 			}
 
 			// Stub primary-route lookup: tt.node owns its SubnetRoutes,
@@ -230,7 +234,6 @@ func TestTailNode(t *testing.T) {
 					return slices.Concat(primaries[id], nv.ExitRoutes())
 				},
 				cfg,
-				nil,
 			)
 
 			if (err != nil) != tt.wantErr {
@@ -246,208 +249,6 @@ func TestTailNode(t *testing.T) {
 	}
 }
 
-// TestTailNodeBaselineGates focuses on the cfg-driven baseline cap
-// emission: cfg.Taildrop.Enabled gates [tailcfg.CapabilityFileSharing]
-// and cfg.AutoUpdate.Enabled controls the value of
-// [tailcfg.NodeAttrDefaultAutoUpdate]. Admin and SSH are unconditional
-// baseline.
-func TestTailNodeBaselineGates(t *testing.T) {
-	t.Parallel()
-
-	autoUpdate := func(b bool) []tailcfg.RawMessage {
-		if b {
-			return []tailcfg.RawMessage{tailcfg.RawMessage("true")}
-		}
-
-		return []tailcfg.RawMessage{tailcfg.RawMessage("false")}
-	}
-
-	tests := []struct {
-		name string
-		cfg  *types.Config
-		want tailcfg.NodeCapMap
-	}{
-		{
-			name: "taildrop_on_autoupdate_off",
-			cfg: &types.Config{
-				Taildrop:   types.TaildropConfig{Enabled: true},
-				AutoUpdate: types.AutoUpdateConfig{Enabled: false},
-			},
-			want: tailcfg.NodeCapMap{
-				tailcfg.CapabilityAdmin:           []tailcfg.RawMessage{},
-				tailcfg.CapabilitySSH:             []tailcfg.RawMessage{},
-				tailcfg.CapabilityFileSharing:     []tailcfg.RawMessage{},
-				tailcfg.NodeAttrDefaultAutoUpdate: autoUpdate(false),
-			},
-		},
-		{
-			name: "taildrop_off_autoupdate_off",
-			cfg: &types.Config{
-				Taildrop:   types.TaildropConfig{Enabled: false},
-				AutoUpdate: types.AutoUpdateConfig{Enabled: false},
-			},
-			want: tailcfg.NodeCapMap{
-				tailcfg.CapabilityAdmin:           []tailcfg.RawMessage{},
-				tailcfg.CapabilitySSH:             []tailcfg.RawMessage{},
-				tailcfg.NodeAttrDefaultAutoUpdate: autoUpdate(false),
-			},
-		},
-		{
-			name: "taildrop_on_autoupdate_on",
-			cfg: &types.Config{
-				Taildrop:   types.TaildropConfig{Enabled: true},
-				AutoUpdate: types.AutoUpdateConfig{Enabled: true},
-			},
-			want: tailcfg.NodeCapMap{
-				tailcfg.CapabilityAdmin:           []tailcfg.RawMessage{},
-				tailcfg.CapabilitySSH:             []tailcfg.RawMessage{},
-				tailcfg.CapabilityFileSharing:     []tailcfg.RawMessage{},
-				tailcfg.NodeAttrDefaultAutoUpdate: autoUpdate(true),
-			},
-		},
-		{
-			name: "taildrop_off_autoupdate_on",
-			cfg: &types.Config{
-				Taildrop:   types.TaildropConfig{Enabled: false},
-				AutoUpdate: types.AutoUpdateConfig{Enabled: true},
-			},
-			want: tailcfg.NodeCapMap{
-				tailcfg.CapabilityAdmin:           []tailcfg.RawMessage{},
-				tailcfg.CapabilitySSH:             []tailcfg.RawMessage{},
-				tailcfg.NodeAttrDefaultAutoUpdate: autoUpdate(true),
-			},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-
-			node := &types.Node{GivenName: "baseline-node", Hostinfo: &tailcfg.Hostinfo{}}
-
-			got, err := node.View().TailNode(
-				0,
-				func(types.NodeID) []netip.Prefix { return nil },
-				tt.cfg,
-				nil,
-			)
-			if err != nil {
-				t.Fatalf("TailNode: %v", err)
-			}
-
-			if diff := cmp.Diff(tt.want, got.CapMap, cmpopts.EquateEmpty()); diff != "" {
-				t.Errorf("CapMap mismatch (-want +got):\n%s", diff)
-			}
-		})
-	}
-}
-
-// TestTailNodeDisableIPv4 asserts that a node with the disable-ipv4
-// nodeAttr has its own IPv4 (the CGNAT /32) stripped from Addresses
-// and AllowedIPs, while subnet routes the node advertises -- even
-// IPv4 ones -- remain in AllowedIPs and PrimaryRoutes. Matches the
-// SaaS behaviour captured in
-// hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c1{5,6}-disable-ipv4*.hujson.
-func TestTailNodeDisableIPv4(t *testing.T) {
-	t.Parallel()
-
-	const NodeAttrDisableIPv4 tailcfg.NodeCapability = "disable-ipv4"
-
-	v4 := iap("100.64.0.1")
-	v6Addr := netip.MustParseAddr("fd7a:115c:a1e0::1")
-	v6 := &v6Addr
-	subnet := netip.MustParsePrefix("10.33.0.0/16")
-
-	tests := []struct {
-		name        string
-		hasCap      bool
-		approved    []netip.Prefix
-		wantAllowed []netip.Prefix
-		wantPrimary []netip.Prefix
-		wantAddrs   []netip.Prefix
-	}{
-		{
-			name:        "no-cap_emits_both_families",
-			hasCap:      false,
-			wantAllowed: []netip.Prefix{netip.MustParsePrefix("100.64.0.1/32"), netip.MustParsePrefix("fd7a:115c:a1e0::1/128")},
-			wantAddrs:   []netip.Prefix{netip.MustParsePrefix("100.64.0.1/32"), netip.MustParsePrefix("fd7a:115c:a1e0::1/128")},
-		},
-		{
-			name:        "cap_strips_own_ipv4",
-			hasCap:      true,
-			wantAllowed: []netip.Prefix{netip.MustParsePrefix("fd7a:115c:a1e0::1/128")},
-			wantAddrs:   []netip.Prefix{netip.MustParsePrefix("fd7a:115c:a1e0::1/128")},
-		},
-		{
-			name:     "cap_keeps_advertised_subnet_route",
-			hasCap:   true,
-			approved: []netip.Prefix{subnet},
-			// AllowedIPs is sorted by netip.Prefix.Compare so IPv4
-			// sorts before IPv6.
-			wantAllowed: []netip.Prefix{
-				subnet,
-				netip.MustParsePrefix("fd7a:115c:a1e0::1/128"),
-			},
-			wantPrimary: []netip.Prefix{subnet},
-			wantAddrs:   []netip.Prefix{netip.MustParsePrefix("fd7a:115c:a1e0::1/128")},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-
-			node := &types.Node{
-				GivenName: "ipv4-disabled-node",
-				IPv4:      v4,
-				IPv6:      v6,
-				Hostinfo: &tailcfg.Hostinfo{
-					RoutableIPs: tt.approved,
-				},
-				ApprovedRoutes: tt.approved,
-			}
-
-			var selfCaps tailcfg.NodeCapMap
-			if tt.hasCap {
-				selfCaps = tailcfg.NodeCapMap{NodeAttrDisableIPv4: nil}
-			}
-
-			got, err := node.View().TailNode(
-				0,
-				func(types.NodeID) []netip.Prefix {
-					return tt.approved
-				},
-				&types.Config{Taildrop: types.TaildropConfig{Enabled: true}},
-				selfCaps,
-			)
-			if err != nil {
-				t.Fatalf("TailNode: %v", err)
-			}
-
-			prefStrings := func(ps []netip.Prefix) []string {
-				out := make([]string, len(ps))
-				for i, p := range ps {
-					out[i] = p.String()
-				}
-
-				return out
-			}
-
-			if diff := cmp.Diff(prefStrings(tt.wantAddrs), prefStrings(got.Addresses), cmpopts.EquateEmpty()); diff != "" {
-				t.Errorf("Addresses (-want +got):\n%s", diff)
-			}
-
-			if diff := cmp.Diff(prefStrings(tt.wantAllowed), prefStrings(got.AllowedIPs), cmpopts.EquateEmpty()); diff != "" {
-				t.Errorf("AllowedIPs (-want +got):\n%s", diff)
-			}
-
-			if diff := cmp.Diff(prefStrings(tt.wantPrimary), prefStrings(got.PrimaryRoutes), cmpopts.EquateEmpty()); diff != "" {
-				t.Errorf("PrimaryRoutes (-want +got):\n%s", diff)
-			}
-		})
-	}
-}
-
 func TestNodeExpiry(t *testing.T) {
 	tp := func(t time.Time) *time.Time {
 		return &t
@@ -489,7 +290,6 @@ func TestNodeExpiry(t *testing.T) {
 					return []netip.Prefix{}
 				},
 				&types.Config{Taildrop: types.TaildropConfig{Enabled: true}},
-				nil,
 			)
 			if err != nil {
 				t.Fatalf("nodeExpiry() error = %v", err)
diff --git a/hscontrol/metrics.go b/hscontrol/metrics.go
index eb4fbf8c5..09cbc3930 100644
--- a/hscontrol/metrics.go
+++ b/hscontrol/metrics.go
@@ -1,6 +1,10 @@
 package hscontrol
 
 import (
+	"net/http"
+	"strconv"
+
+	"github.com/gorilla/mux"
 	"github.com/prometheus/client_golang/prometheus"
 	"github.com/prometheus/client_golang/prometheus/promauto"
 	"tailscale.com/envknob"
@@ -38,4 +42,63 @@ var (
 		Name:      "mapresponse_ended_total",
 		Help:      "total count of new mapsessions ended",
 	}, []string{"reason"})
+	httpDuration = promauto.NewHistogramVec(prometheus.HistogramOpts{
+		Namespace: prometheusNamespace,
+		Name:      "http_duration_seconds",
+		Help:      "Duration of HTTP requests.",
+	}, []string{"path"})
+	httpCounter = promauto.NewCounterVec(prometheus.CounterOpts{
+		Namespace: prometheusNamespace,
+		Name:      "http_requests_total",
+		Help:      "Total number of http requests processed",
+	}, []string{"code", "method", "path"},
+	)
 )
+
+// prometheusMiddleware implements mux.MiddlewareFunc.
+func prometheusMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		route := mux.CurrentRoute(r)
+		path, _ := route.GetPathTemplate()
+
+		// Ignore streaming and noise sessions
+		// it has its own router further down.
+		if path == "/ts2021" || path == "/machine/map" || path == "/derp" || path == "/derp/probe" || path == "/derp/latency-check" || path == "/bootstrap-dns" {
+			next.ServeHTTP(w, r)
+			return
+		}
+
+		rw := &respWriterProm{ResponseWriter: w}
+
+		timer := prometheus.NewTimer(httpDuration.WithLabelValues(path))
+
+		next.ServeHTTP(rw, r)
+		timer.ObserveDuration()
+		httpCounter.WithLabelValues(strconv.Itoa(rw.status), r.Method, path).Inc()
+	})
+}
+
+type respWriterProm struct {
+	http.ResponseWriter
+
+	status      int
+	written     int64
+	wroteHeader bool
+}
+
+func (r *respWriterProm) WriteHeader(code int) {
+	r.status = code
+	r.wroteHeader = true
+	r.ResponseWriter.WriteHeader(code)
+}
+
+func (r *respWriterProm) Write(b []byte) (int, error) {
+	if !r.wroteHeader {
+		r.WriteHeader(http.StatusOK)
+	}
+
+	n, err := r.ResponseWriter.Write(b)
+	r.written += int64(n)
+
+	return n, err
+}
diff --git a/hscontrol/noise.go b/hscontrol/noise.go
index 3c6bb6e2a..d8a26cb1e 100644
--- a/hscontrol/noise.go
+++ b/hscontrol/noise.go
@@ -31,6 +31,9 @@ var ErrUnsupportedClientVersion = errors.New("unsupported client version")
 // ErrMissingURLParameter is returned when a required URL parameter is not provided.
 var ErrMissingURLParameter = errors.New("missing URL parameter")
 
+// ErrUnsupportedURLParameterType is returned when a URL parameter has an unsupported type.
+var ErrUnsupportedURLParameterType = errors.New("unsupported URL parameter type")
+
 // ErrNoAuthSession is returned when an auth_id does not match any active auth session.
 var ErrNoAuthSession = errors.New("no auth session found")
 
@@ -62,14 +65,14 @@ const (
 
 	// The first 9 bytes from the server to client over Noise are either an HTTP/2
 	// settings frame (a normal HTTP/2 setup) or, as Tailscale added later, an "early payload"
-	// header that's also 9 bytes long: 5 bytes ([earlyPayloadMagic]) followed by 4 bytes
-	// of length. Then that many bytes of JSON-encoded [tailcfg.EarlyNoise].
+	// header that's also 9 bytes long: 5 bytes (earlyPayloadMagic) followed by 4 bytes
+	// of length. Then that many bytes of JSON-encoded tailcfg.EarlyNoise.
 	// The early payload is optional. Some servers may not send it... But we do!
 	earlyPayloadMagic = "\xff\xff\xffTS"
 
 	// noiseBodyLimit is the maximum allowed request body size for Noise protocol
-	// handlers. This prevents unauthenticated OOM attacks via unbounded [io.ReadAll].
-	// No legitimate Noise request ([tailcfg.MapRequest], [tailcfg.RegisterRequest], etc.) comes close
+	// handlers. This prevents unauthenticated OOM attacks via unbounded io.ReadAll.
+	// No legitimate Noise request (MapRequest, RegisterRequest, etc.) comes close
 	// to this limit; typical payloads are a few KB.
 	noiseBodyLimit int64 = 1048576 // 1 MiB
 )
@@ -81,13 +84,14 @@ type noiseServer struct {
 	http2Server    *http2.Server
 	conn           *controlbase.Conn
 	machineKey     key.MachinePublic
+	nodeKey        key.NodePublic
 
-	// [tailcfg.EarlyNoise]-related stuff
+	// EarlyNoise-related stuff
 	challenge       key.ChallengePrivate
 	protocolVersion int
 }
 
-// NoiseUpgradeHandler is to upgrade the connection and hijack the [net.Conn]
+// NoiseUpgradeHandler is to upgrade the connection and hijack the net.Conn
 // in order to use the Noise-based TS2021 protocol. Listens in /ts2021.
 func (h *Headscale) NoiseUpgradeHandler(
 	writer http.ResponseWriter,
@@ -132,7 +136,7 @@ func (h *Headscale) NoiseUpgradeHandler(
 	// This router is served only over the Noise connection, and exposes only the new API.
 	//
 	// The HTTP2 server that exposes this router is created for
-	// a single hijacked connection from /ts2021, using [netutil.NewOneConnListener]
+	// a single hijacked connection from /ts2021, using netutil.NewOneConnListener
 
 	r := chi.NewRouter()
 
@@ -154,12 +158,7 @@ func (h *Headscale) NoiseUpgradeHandler(
 		},
 	}))
 	r.Use(middleware.RequestID)
-
-	// The outer router resolved trusted_proxies on req before the
-	// upgrade; pin that value across the hijack so /machine/* logs the
-	// client IP instead of the reverse proxy's loopback peer.
-	r.Use(overrideRemoteAddr(req.RemoteAddr))
-
+	r.Use(middleware.RealIP)
 	r.Use(middleware.RequestLogger(&zerologRequestLogger{}))
 	r.Use(middleware.Recoverer)
 
@@ -291,27 +290,13 @@ func rejectUnsupported(
 	return false
 }
 
-// overrideRemoteAddr returns middleware that pins r.RemoteAddr to addr.
-// Used inside the Noise tunnel: the HTTP/2 server derives r.RemoteAddr
-// from the hijacked TCP socket (the reverse proxy's loopback peer), so
-// the outer request's resolved client IP must be carried across the
-// hijack boundary by hand.
-func overrideRemoteAddr(addr string) func(http.Handler) http.Handler {
-	return func(next http.Handler) http.Handler {
-		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-			r.RemoteAddr = addr
-			next.ServeHTTP(w, r)
-		})
-	}
-}
-
 func (ns *noiseServer) NotImplementedHandler(writer http.ResponseWriter, req *http.Request) {
 	log.Trace().Caller().Str("path", req.URL.String()).Msg("not implemented handler hit")
 	http.Error(writer, "Not implemented yet", http.StatusNotImplemented)
 }
 
 // PingResponseHandler handles HEAD requests from clients responding to a
-// [tailcfg.PingRequest]. The client calls this endpoint to prove connectivity.
+// PingRequest. The client calls this endpoint to prove connectivity.
 // The unguessable ping ID serves as authentication.
 func (h *Headscale) PingResponseHandler(
 	writer http.ResponseWriter,
@@ -335,27 +320,40 @@ func (h *Headscale) PingResponseHandler(
 	}
 }
 
-func stringParam(req *http.Request, key string) (string, error) {
+func urlParam[T any](req *http.Request, key string) (T, error) {
+	var zero T
+
 	param := chi.URLParam(req, key)
 	if param == "" {
-		return "", fmt.Errorf("%w: %s", ErrMissingURLParameter, key)
+		return zero, fmt.Errorf("%w: %s", ErrMissingURLParameter, key)
 	}
 
-	return param, nil
-}
+	var value T
+	switch any(value).(type) {
+	case string:
+		v, ok := any(param).(T)
+		if !ok {
+			return zero, fmt.Errorf("%w: %T", ErrUnsupportedURLParameterType, value)
+		}
 
-func nodeIDParam(req *http.Request, key string) (types.NodeID, error) {
-	param := chi.URLParam(req, key)
-	if param == "" {
-		return 0, fmt.Errorf("%w: %s", ErrMissingURLParameter, key)
+		value = v
+	case types.NodeID:
+		id, err := types.ParseNodeID(param)
+		if err != nil {
+			return zero, fmt.Errorf("parsing %s: %w", key, err)
+		}
+
+		v, ok := any(id).(T)
+		if !ok {
+			return zero, fmt.Errorf("%w: %T", ErrUnsupportedURLParameterType, value)
+		}
+
+		value = v
+	default:
+		return zero, fmt.Errorf("%w: %T", ErrUnsupportedURLParameterType, value)
 	}
 
-	id, err := types.ParseNodeID(param)
-	if err != nil {
-		return 0, fmt.Errorf("parsing %s: %w", key, err)
-	}
-
-	return id, nil
+	return value, nil
 }
 
 // SSHActionHandler handles the /ssh-action endpoint, returning a
@@ -365,7 +363,7 @@ func (ns *noiseServer) SSHActionHandler(
 	writer http.ResponseWriter,
 	req *http.Request,
 ) {
-	srcNodeID, err := nodeIDParam(req, "src_node_id")
+	srcNodeID, err := urlParam[types.NodeID](req, "src_node_id")
 	if err != nil {
 		httpError(writer, NewHTTPError(
 			http.StatusBadRequest,
@@ -376,7 +374,7 @@ func (ns *noiseServer) SSHActionHandler(
 		return
 	}
 
-	dstNodeID, err := nodeIDParam(req, "dst_node_id")
+	dstNodeID, err := urlParam[types.NodeID](req, "dst_node_id")
 	if err != nil {
 		httpError(writer, NewHTTPError(
 			http.StatusBadRequest,
@@ -455,12 +453,12 @@ func (ns *noiseServer) SSHActionHandler(
 }
 
 // sshAction resolves the SSH action for the given request parameters.
-// It returns the action to send to the client, or an [HTTPError] on failure.
+// It returns the action to send to the client, or an HTTPError on failure.
 //
 // Three cases:
 //  1. Initial request, auto-approved — source recently authenticated
 //     within the check period, accept immediately.
-//  2. Initial request, needs auth — build a [tailcfg.SSHAction.HoldAndDelegate] URL and
+//  2. Initial request, needs auth — build a HoldAndDelegate URL and
 //     wait for the user to authenticate.
 //  3. Follow-up request — an auth_id is present, wait for the auth
 //     verdict and accept or reject.
@@ -512,7 +510,7 @@ func (ns *noiseServer) sshAction(
 }
 
 // sshActionHoldAndDelegate creates a new auth session bound to the
-// (src, dst) pair and returns a [tailcfg.SSHAction.HoldAndDelegate] action that directs the
+// (src, dst) pair and returns a HoldAndDelegate action that directs the
 // client to authenticate.
 func (ns *noiseServer) sshActionHoldAndDelegate(
 	reqLog zerolog.Logger,
@@ -594,19 +592,6 @@ func (ns *noiseServer) sshActionFollowUp(
 
 	auth, ok := ns.headscale.state.GetAuthCacheEntry(authID)
 	if !ok {
-		// The session is gone (expired, evicted, or lost on a control-plane
-		// restart). A bare error dead-ends the client: it keeps polling this
-		// now-defunct auth_id until the SSH connection times out. Re-delegate
-		// so a still-required check can complete instead.
-		if checkFound {
-			reqLog.Info().Caller().
-				Msg("SSH check auth session missing; re-delegating")
-
-			return ns.sshActionHoldAndDelegate(
-				reqLog, action, srcNodeID, dstNodeID,
-			)
-		}
-
 		return nil, NewHTTPError(
 			http.StatusBadRequest,
 			"Invalid auth_id",
@@ -647,8 +632,8 @@ func (ns *noiseServer) sshActionFollowUp(
 	case <-ctx.Done():
 		// The client disconnected (or its request timed out) before the
 		// auth session resolved. Return an error so the parked goroutine
-		// is freed; without this select [noiseServer.sshActionFollowUp] would block
-		// until the cache eviction callback signalled [types.AuthRequest.FinishAuth], which
+		// is freed; without this select sshActionFollowUp would block
+		// until the cache eviction callback signalled FinishAuth, which
 		// could be up to register_cache_expiration (15 minutes).
 		return nil, NewHTTPError(
 			http.StatusUnauthorized,
@@ -685,8 +670,8 @@ func (ns *noiseServer) sshActionFollowUp(
 // This is the busiest endpoint, as it keeps the HTTP long poll that updates
 // the clients when something in the network changes.
 //
-// The clients POST stuff like [tailcfg.Hostinfo] and their Endpoints here, but
-// only after their first request (marked with the [tailcfg.MapRequest.ReadOnly] field).
+// The clients POST stuff like HostInfo and their Endpoints here, but
+// only after their first request (marked with the ReadOnly field).
 //
 // At this moment the updates are sent in a quite horrendous way, but they kinda work.
 func (ns *noiseServer) PollNetMapHandler(
@@ -712,6 +697,8 @@ func (ns *noiseServer) PollNetMapHandler(
 		return
 	}
 
+	ns.nodeKey = nv.NodeKey()
+
 	sess := ns.headscale.newMapSession(req.Context(), mapRequest, writer, nv.AsStruct())
 	sess.log.Trace().Caller().Msg("a node sending a MapRequest with Noise protocol")
 
@@ -747,6 +734,8 @@ func (ns *noiseServer) RegistrationHandler(
 			return &regReq, regErr(err)
 		}
 
+		ns.nodeKey = regReq.NodeKey
+
 		resp, err = ns.headscale.handleRegister(req.Context(), regReq, ns.conn.Peer())
 		if err != nil {
 			if httpErr, ok := errors.AsType[HTTPError](err); ok {
diff --git a/hscontrol/noise_test.go b/hscontrol/noise_test.go
index 99b3ec4bf..cf97a216e 100644
--- a/hscontrol/noise_test.go
+++ b/hscontrol/noise_test.go
@@ -8,7 +8,6 @@ import (
 	"io"
 	"net/http"
 	"net/http/httptest"
-	"net/url"
 	"strconv"
 	"testing"
 
@@ -22,8 +21,8 @@ import (
 
 // newNoiseRouterWithBodyLimit builds a chi router with the same body-limit
 // middleware used in the real Noise router but wired to a test handler that
-// captures the [io.ReadAll] result. This lets us verify the limit without
-// needing a full [Headscale] instance.
+// captures the io.ReadAll result. This lets us verify the limit without
+// needing a full Headscale instance.
 func newNoiseRouterWithBodyLimit(readBody *[]byte, readErr *error) http.Handler {
 	r := chi.NewRouter()
 	r.Use(func(next http.Handler) http.Handler {
@@ -160,7 +159,7 @@ func TestNoiseBodyLimit_AtExactLimit(t *testing.T) {
 }
 
 // TestPollNetMapHandler_OversizedBody calls the real handler with a
-// [http.MaxBytesReader]-wrapped body to verify it fails gracefully (json decode
+// MaxBytesReader-wrapped body to verify it fails gracefully (json decode
 // error on truncated data) rather than consuming unbounded memory.
 func TestPollNetMapHandler_OversizedBody(t *testing.T) {
 	t.Parallel()
@@ -174,12 +173,12 @@ func TestPollNetMapHandler_OversizedBody(t *testing.T) {
 
 	ns.PollNetMapHandler(rec, req)
 
-	// Body is truncated → [json.Decoder.Decode] fails → [httpError] returns 500.
+	// Body is truncated → json.Decode fails → httpError returns 500.
 	assert.Equal(t, http.StatusInternalServerError, rec.Code)
 }
 
 // TestRegistrationHandler_OversizedBody calls the real handler with a
-// [http.MaxBytesReader]-wrapped body to verify it returns an error response
+// MaxBytesReader-wrapped body to verify it returns an error response
 // rather than consuming unbounded memory.
 func TestRegistrationHandler_OversizedBody(t *testing.T) {
 	t.Parallel()
@@ -193,8 +192,8 @@ func TestRegistrationHandler_OversizedBody(t *testing.T) {
 
 	ns.RegistrationHandler(rec, req)
 
-	// [json.Decoder.Decode] returns [http.MaxBytesError] → [regErr] wraps it → handler writes
-	// a [tailcfg.RegisterResponse] with the error and then [rejectUnsupported] kicks in
+	// json.Decode returns MaxBytesError → regErr wraps it → handler writes
+	// a RegisterResponse with the error and then rejectUnsupported kicks in
 	// for version 0 → returns 400.
 	assert.Equal(t, http.StatusBadRequest, rec.Code)
 }
@@ -237,7 +236,7 @@ func TestSSHActionRoute_OldPathReturns404(t *testing.T) {
 }
 
 // newSSHActionRequest builds an httptest request with the chi URL params
-// [noiseServer.SSHActionHandler] reads (src_node_id and dst_node_id), so the handler
+// SSHActionHandler reads (src_node_id and dst_node_id), so the handler
 // can be exercised directly without going through the chi router.
 func newSSHActionRequest(t *testing.T, src, dst types.NodeID) *http.Request {
 	t.Helper()
@@ -254,8 +253,8 @@ func newSSHActionRequest(t *testing.T, src, dst types.NodeID) *http.Request {
 }
 
 // putTestNodeInStore creates a node via the database test helper and
-// also stages it into the in-memory [state.NodeStore] so handlers that read
-// [state.NodeStore]-backed APIs (e.g. [state.State.GetNodeByID]) can see it.
+// also stages it into the in-memory NodeStore so handlers that read
+// NodeStore-backed APIs (e.g. State.GetNodeByID) can see it.
 func putTestNodeInStore(t *testing.T, app *Headscale, user *types.User, hostname string) *types.Node {
 	t.Helper()
 
@@ -277,7 +276,7 @@ func TestSSHActionHandler_RejectsRogueMachineKey(t *testing.T) {
 	src := putTestNodeInStore(t, app, user, "src-node")
 	dst := putTestNodeInStore(t, app, user, "dst-node")
 
-	// [noiseServer] carries the wrong machine key — a fresh throwaway key,
+	// noiseServer carries the wrong machine key — a fresh throwaway key,
 	// not dst.MachineKey.
 	rogue := key.NewMachine().Public()
 	require.NotEqual(t, dst.MachineKey, rogue, "test sanity: rogue key must differ from dst")
@@ -369,171 +368,3 @@ func TestSSHActionFollowUp_RejectsBindingMismatch(t *testing.T) {
 	assert.Equal(t, http.StatusUnauthorized, rec.Code,
 		"binding mismatch must be rejected with 401")
 }
-
-// TestOverrideRemoteAddr asserts the middleware used inside the Noise
-// tunnel pins r.RemoteAddr to the value captured from the outer
-// (pre-hijack) request, so /machine/* requests log the trusted-proxy
-// resolved client IP instead of the hijacked TCP socket's loopback peer.
-func TestOverrideRemoteAddr(t *testing.T) {
-	t.Parallel()
-
-	const clientAddr = "192.168.91.240"
-
-	r := chi.NewRouter()
-	r.Use(overrideRemoteAddr(clientAddr))
-
-	var observed string
-
-	r.Get("/x", func(w http.ResponseWriter, r *http.Request) {
-		observed = r.RemoteAddr
-
-		w.WriteHeader(http.StatusOK)
-	})
-
-	req := httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/x", nil)
-	req.RemoteAddr = "127.0.0.1:44388"
-
-	r.ServeHTTP(httptest.NewRecorder(), req)
-
-	assert.Equal(t, clientAddr, observed)
-}
-
-// TestSSHActionHoldAndDelegate_PersistsAuthSession guards the happy path: the
-// initial SSH-check poll returns a HoldAndDelegate URL carrying an auth_id, and
-// that auth session must remain in the cache for the follow-up poll to find.
-func TestSSHActionHoldAndDelegate_PersistsAuthSession(t *testing.T) {
-	t.Parallel()
-
-	app := createTestApp(t)
-	user := app.state.CreateUserForTest("ssh-persist-user")
-	src := putTestNodeInStore(t, app, user, "src-node")
-	dst := putTestNodeInStore(t, app, user, "dst-node")
-
-	ns := &noiseServer{headscale: app, machineKey: dst.MachineKey}
-
-	rec := httptest.NewRecorder()
-	ns.SSHActionHandler(rec, newSSHActionRequest(t, src.ID, dst.ID))
-	require.Equal(t, http.StatusOK, rec.Code, "initial poll body=%s", rec.Body.String())
-
-	var action tailcfg.SSHAction
-	require.NoError(t, json.Unmarshal(rec.Body.Bytes(), &action))
-	require.NotEmpty(t, action.HoldAndDelegate, "expected HoldAndDelegate, got %+v", action)
-
-	u, err := url.Parse(action.HoldAndDelegate)
-	require.NoError(t, err)
-
-	authIDStr := u.Query().Get("auth_id")
-	require.NotEmpty(t, authIDStr, "HoldAndDelegate URL missing auth_id: %s", action.HoldAndDelegate)
-
-	authID, err := types.AuthIDFromString(authIDStr)
-	require.NoError(t, err)
-
-	_, ok := app.state.GetAuthCacheEntry(authID)
-	require.True(t, ok, "auth session %s must persist after HoldAndDelegate", authID)
-}
-
-// TestSSHActionHandler_RejectsMissingSessionWithoutCheck verifies that without
-// an SSH check covering the pair, a follow-up poll for an unknown auth_id is a
-// genuinely bogus request and is rejected. The re-delegation behaviour for a
-// missing session (issue #3305, exercised end to end with a real client in the
-// servertest package) applies only when the pair is still subject to a check.
-func TestSSHActionHandler_RejectsMissingSessionWithoutCheck(t *testing.T) {
-	t.Parallel()
-
-	app := createTestApp(t)
-	user := app.state.CreateUserForTest("ssh-nocheck-user")
-	src := putTestNodeInStore(t, app, user, "src-node")
-	dst := putTestNodeInStore(t, app, user, "dst-node")
-
-	// No SSH-check policy is set, so the pair is not subject to a check.
-	_, checkFound := app.state.SSHCheckParams(src.ID, dst.ID)
-	require.False(t, checkFound, "test setup: pair must not be subject to a check")
-
-	ns := &noiseServer{headscale: app, machineKey: dst.MachineKey}
-
-	missing := types.MustAuthID()
-
-	rec := httptest.NewRecorder()
-	ns.SSHActionHandler(rec, newSSHActionFollowUpRequest(t, src.ID, dst.ID, missing))
-	require.Equal(t, http.StatusBadRequest, rec.Code,
-		"a bogus auth_id with no active check must be rejected, body=%s", rec.Body.String())
-}
-
-// TestTS2021Route_AcceptsGETAndPOST reproduces a regression where the
-// browser/WASM control client could not connect. Tailscale's JS/WASM control
-// client opens /ts2021 as a WebSocket, which is an HTTP GET upgrade; the native
-// Go client uses an HTTP POST upgrade. The gorilla->chi router migration
-// registered /ts2021 for POST only, so the GET WebSocket handshake was rejected
-// with 405 Method Not Allowed by the router before it could reach
-// NoiseUpgradeHandler. Both methods must route to the handler.
-//
-// NoiseUpgradeHandler dispatches on the Upgrade header, not the HTTP method, so
-// once the route is reachable the handler handles both upgrade styles. The
-// httptest recorder is not an http.Hijacker, so the upgrade itself fails past
-// the router (501 for the WebSocket path, 400 for the native path) — the point
-// is only that neither is 405, i.e. the router no longer rejects GET early.
-func TestTS2021Route_AcceptsGETAndPOST(t *testing.T) {
-	t.Parallel()
-
-	handler := createTestApp(t).HTTPHandler()
-
-	tests := []struct {
-		name    string
-		method  string
-		headers map[string]string
-	}{
-		{
-			name:   "websocket_get_from_wasm_client",
-			method: http.MethodGet,
-			headers: map[string]string{
-				"Connection":             "Upgrade",
-				"Upgrade":                "websocket",
-				"Sec-WebSocket-Version":  "13",
-				"Sec-WebSocket-Key":      "dGhlIHNhbXBsZSBub25jZQ==",
-				"Sec-WebSocket-Protocol": "tailscale-control-protocol",
-			},
-		},
-		{
-			name:   "native_post_upgrade",
-			method: http.MethodPost,
-			headers: map[string]string{
-				"Connection":            "upgrade",
-				"Upgrade":               "tailscale-control-protocol",
-				"X-Tailscale-Handshake": "AAAA",
-			},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-
-			req := httptest.NewRequestWithContext(context.Background(), tt.method,
-				"/ts2021?X-Tailscale-Handshake=AAAA", nil)
-			for k, v := range tt.headers {
-				req.Header.Set(k, v)
-			}
-
-			rec := httptest.NewRecorder()
-			handler.ServeHTTP(rec, req)
-
-			assert.NotEqual(t, http.StatusMethodNotAllowed, rec.Code,
-				"%s /ts2021 must reach NoiseUpgradeHandler, not be rejected by the router with 405",
-				tt.method)
-		})
-	}
-}
-
-// newSSHActionFollowUpRequest is like newSSHActionRequest but carries the
-// auth_id query parameter that marks a follow-up poll.
-func newSSHActionFollowUpRequest(t *testing.T, src, dst types.NodeID, authID types.AuthID) *http.Request {
-	t.Helper()
-
-	req := newSSHActionRequest(t, src, dst)
-
-	q := req.URL.Query()
-	q.Set("auth_id", authID.String())
-	req.URL.RawQuery = q.Encode()
-
-	return req
-}
diff --git a/hscontrol/oidc.go b/hscontrol/oidc.go
index bd660e4d1..5b5953335 100644
--- a/hscontrol/oidc.go
+++ b/hscontrol/oidc.go
@@ -20,7 +20,6 @@ import (
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/rs/zerolog/log"
 	"golang.org/x/oauth2"
-	"tailscale.com/util/rands"
 )
 
 const (
@@ -28,15 +27,15 @@ const (
 	defaultOAuthOptionsCount = 3
 	authCacheExpiration      = time.Minute * 15
 
-	// authCacheMaxEntries bounds the OIDC state→[AuthInfo] cache to prevent
+	// authCacheMaxEntries bounds the OIDC state→AuthInfo cache to prevent
 	// unauthenticated cache-fill DoS via repeated /register/{auth_id} or
 	// /auth/{auth_id} GETs that mint OIDC state cookies.
 	authCacheMaxEntries = 1024
 
 	// cookieNamePrefixLen is the number of leading characters from a
-	// state/nonce value that [getCookieName] splices into the cookie name.
+	// state/nonce value that getCookieName splices into the cookie name.
 	// State and nonce values that are shorter than this are rejected at
-	// the callback boundary so [getCookieName] cannot panic on a slice
+	// the callback boundary so getCookieName cannot panic on a slice
 	// out-of-range.
 	cookieNamePrefixLen = 6
 )
@@ -55,7 +54,6 @@ var (
 		"authenticated principal does not match any allowed user",
 	)
 	errOIDCUnverifiedEmail = errors.New("authenticated principal has an unverified email")
-	errInvalidPKCEMethod   = errors.New("invalid pkce.method")
 )
 
 // AuthInfo contains both auth ID and verifier information for OIDC validation.
@@ -71,7 +69,7 @@ type AuthProviderOIDC struct {
 	cfg       *types.OIDCConfig
 
 	// authCache holds auth information between the auth and the callback
-	// steps. It is a bounded [expirable.LRU] keyed by OIDC state, evicting oldest
+	// steps. It is a bounded LRU keyed by OIDC state, evicting oldest
 	// entries to keep the cache footprint constant under attack.
 	authCache *expirable.LRU[string, AuthInfo]
 
@@ -85,9 +83,9 @@ func NewAuthProviderOIDC(
 	serverURL string,
 	cfg *types.OIDCConfig,
 ) (*AuthProviderOIDC, error) {
-	// Use the caller's context (bounded, see app.go) so a slow or unreachable
-	// issuer fails discovery within the timeout instead of hanging startup.
-	oidcProvider, err := oidc.NewProvider(ctx, cfg.Issuer)
+	var err error
+	// grab oidc config if it hasn't been already
+	oidcProvider, err := oidc.NewProvider(context.Background(), cfg.Issuer) //nolint:contextcheck
 	if err != nil {
 		return nil, fmt.Errorf("creating OIDC provider from issuer config: %w", err)
 	}
@@ -117,17 +115,11 @@ func NewAuthProviderOIDC(
 	}, nil
 }
 
-// cookiesSecure reports whether the OIDC cookies should carry the Secure flag.
-// It keys off the configured server_url scheme, not req.TLS, so cookies stay
-// Secure behind a TLS-terminating reverse proxy (where the proxy→Headscale hop
-// is plain HTTP and req.TLS is nil). Deriving it from config avoids trusting a
-// spoofable X-Forwarded-Proto header.
-func (a *AuthProviderOIDC) cookiesSecure() bool {
-	return strings.HasPrefix(a.serverURL, "https://")
-}
-
 func (a *AuthProviderOIDC) AuthURL(authID types.AuthID) string {
-	return authPathURL(a.serverURL, "auth", authID)
+	return fmt.Sprintf(
+		"%s/auth/%s",
+		strings.TrimSuffix(a.serverURL, "/"),
+		authID.String())
 }
 
 func (a *AuthProviderOIDC) AuthHandler(
@@ -138,7 +130,10 @@ func (a *AuthProviderOIDC) AuthHandler(
 }
 
 func (a *AuthProviderOIDC) RegisterURL(authID types.AuthID) string {
-	return authPathURL(a.serverURL, "register", authID)
+	return fmt.Sprintf(
+		"%s/register/%s",
+		strings.TrimSuffix(a.serverURL, "/"),
+		authID.String())
 }
 
 // RegisterHandler registers the OIDC callback handler with the given router.
@@ -165,10 +160,18 @@ func (a *AuthProviderOIDC) authHandler(
 	}
 
 	// Set the state and nonce cookies to protect against CSRF attacks
-	state := setCSRFCookie(writer, req, "state", a.cookiesSecure())
+	state, err := setCSRFCookie(writer, req, "state")
+	if err != nil {
+		httpUserError(writer, err)
+		return
+	}
 
 	// Set the state and nonce cookies to protect against CSRF attacks
-	nonce := setCSRFCookie(writer, req, "nonce", a.cookiesSecure())
+	nonce, err := setCSRFCookie(writer, req, "nonce")
+	if err != nil {
+		httpUserError(writer, err)
+		return
+	}
 
 	registrationInfo := AuthInfo{
 		AuthID:       authID,
@@ -189,12 +192,6 @@ func (a *AuthProviderOIDC) authHandler(
 		case types.PKCEMethodPlain:
 			// oauth2 does not have a plain challenge option, so we add it manually
 			extras = append(extras, oauth2.SetAuthURLParam("code_challenge_method", "plain"), oauth2.SetAuthURLParam("code_challenge", verifier))
-		default:
-			// An unknown method must not silently emit no challenge: a
-			// verifier was generated and is sent at token exchange, so a
-			// missing challenge degrades to no-PKCE without anyone noticing.
-			httpError(writer, NewHTTPError(http.StatusInternalServerError, "internal server error", fmt.Errorf("%w: %q", errInvalidPKCEMethod, a.cfg.PKCE.Method)))
-			return
 		}
 	}
 
@@ -272,11 +269,6 @@ func (a *AuthProviderOIDC) OIDCCallbackHandler(
 		return
 	}
 
-	// The state/nonce cookies have served their CSRF purpose; clear them so a
-	// single-use pair does not linger in the browser until MaxAge.
-	clearOIDCCallbackCookie(writer, stateCookieName)
-	clearOIDCCallbackCookie(writer, nonceCookieName)
-
 	nodeExpiry := a.determineNodeExpiry(idToken.Expiry)
 
 	var claims types.OIDCClaims
@@ -294,9 +286,9 @@ func (a *AuthProviderOIDC) OIDCCallbackHandler(
 		util.LogErr(err, "could not get userinfo; only using claims from id token")
 	}
 
-	// The [oidc.UserInfo] type only decodes some fields (Subject, Profile, Email, EmailVerified).
+	// The oidc.UserInfo type only decodes some fields (Subject, Profile, Email, EmailVerified).
 	// We are interested in other fields too (e.g. groups are required for allowedGroups) so we
-	// decode into our own [types.OIDCUserInfo] type using the underlying claims struct.
+	// decode into our own OIDCUserInfo type using the underlying claims struct.
 	var userinfo2 types.OIDCUserInfo
 	if userinfo != nil && userinfo.Claims(&userinfo2) == nil && userinfo2.Sub == claims.Sub {
 		// Update the user with the userinfo claims (with id token claims as fallback).
@@ -310,6 +302,8 @@ func (a *AuthProviderOIDC) OIDCCallbackHandler(
 		if userinfo2.Groups != nil {
 			claims.Groups = userinfo2.Groups
 		}
+	} else {
+		util.LogErr(err, "could not get userinfo; only using claims from id token")
 	}
 
 	// The user claims are now updated from the userinfo endpoint so we can verify the user
@@ -450,10 +444,10 @@ func extractCodeAndStateParamFromRequest(
 		return "", "", NewHTTPError(http.StatusBadRequest, "missing code or state parameter", errEmptyOIDCCallbackParams)
 	}
 
-	// Reject states that are too short for [getCookieName] to splice
+	// Reject states that are too short for getCookieName to splice
 	// into a cookie name. Without this guard a request with
 	// ?state=abc panics on the slice out-of-range and is recovered by
-	// chi's [middleware.Recoverer], amplifying small-DoS log noise.
+	// chi's middleware.Recoverer, amplifying small-DoS log noise.
 	if len(state) < cookieNamePrefixLen {
 		return "", "", NewHTTPError(http.StatusBadRequest, "invalid state parameter", errOIDCStateTooShort)
 	}
@@ -485,7 +479,7 @@ func (a *AuthProviderOIDC) getOauth2Token(
 		return nil, NewHTTPError(http.StatusForbidden, "invalid code", fmt.Errorf("exchanging code for token: %w", err))
 	}
 
-	return oauth2Token, nil
+	return oauth2Token, err
 }
 
 // extractIDToken extracts the ID token from the oauth2 token.
@@ -558,15 +552,15 @@ func validateOIDCAllowedUsers(
 //
 // The following tests are always applied:
 //
-// - [validateOIDCAllowedGroups]
+// - validateOIDCAllowedGroups
 //
 // The following tests are applied if cfg.EmailVerifiedRequired=false
 // or claims.email_verified=true:
 //
-// - [validateOIDCAllowedDomains]
-// - [validateOIDCAllowedUsers]
+// - validateOIDCAllowedDomains
+// - validateOIDCAllowedUsers
 //
-// NOTE that, contrary to the function name, [validateOIDCAllowedUsers]
+// NOTE that, contrary to the function name, validateOIDCAllowedUsers
 // only checks the email address -- not the username.
 func doOIDCAuthorization(
 	cfg *types.OIDCConfig,
@@ -603,17 +597,13 @@ func doOIDCAuthorization(
 	return nil
 }
 
-// getAuthInfoFromState retrieves and consumes the auth info for a state. The
-// entry is removed on read so a state is single-use: a replayed callback cannot
-// resolve the same auth session twice, even within the cache TTL.
+// getAuthInfoFromState retrieves the registration ID from the state.
 func (a *AuthProviderOIDC) getAuthInfoFromState(state string) *AuthInfo {
 	authInfo, ok := a.authCache.Get(state)
 	if !ok {
 		return nil
 	}
 
-	a.authCache.Remove(state)
-
 	return &authInfo
 }
 
@@ -667,31 +657,8 @@ func (a *AuthProviderOIDC) createOrUpdateUserFromClaim(
 // browser do not collide.
 const registerConfirmCSRFCookie = "headscale_register_confirm"
 
-// setRegisterConfirmCookie writes the per-session register-confirm CSRF
-// cookie. Pass the CSRF token and authCacheExpiration seconds to set it;
-// pass ("", -1) to clear it after the registration is finalised.
-func setRegisterConfirmCookie(
-	writer http.ResponseWriter,
-	req *http.Request,
-	authID types.AuthID,
-	value string,
-	maxAge int,
-	secure bool,
-) {
-	//nolint:gosec // G124: Secure from server_url scheme or req.TLS; HttpOnly + SameSite already set
-	http.SetCookie(writer, &http.Cookie{
-		Name:     registerConfirmCSRFCookie,
-		Value:    value,
-		Path:     "/register/confirm/" + authID.String(),
-		MaxAge:   maxAge,
-		Secure:   secure || req.TLS != nil,
-		HttpOnly: true,
-		SameSite: http.SameSiteStrictMode,
-	})
-}
-
 // renderRegistrationConfirmInterstitial captures the resolved OIDC
-// identity and node expiry into the cached [types.AuthRequest], sets the CSRF
+// identity and node expiry into the cached AuthRequest, sets the CSRF
 // cookie, and renders the confirmation page that the user must
 // explicitly submit before the registration is finalised.
 func (a *AuthProviderOIDC) renderRegistrationConfirmInterstitial(
@@ -718,7 +685,12 @@ func (a *AuthProviderOIDC) renderRegistrationConfirmInterstitial(
 		return
 	}
 
-	csrf := rands.HexString(32)
+	csrf, err := util.GenerateRandomStringURLSafe(32)
+	if err != nil {
+		httpUserError(writer, fmt.Errorf("generating csrf token: %w", err))
+
+		return
+	}
 
 	authReq.SetPendingConfirmation(&types.PendingRegistrationConfirmation{
 		UserID:     user.ID,
@@ -726,7 +698,15 @@ func (a *AuthProviderOIDC) renderRegistrationConfirmInterstitial(
 		CSRF:       csrf,
 	})
 
-	setRegisterConfirmCookie(writer, req, authID, csrf, int(authCacheExpiration.Seconds()), a.cookiesSecure())
+	http.SetCookie(writer, &http.Cookie{
+		Name:     registerConfirmCSRFCookie,
+		Value:    csrf,
+		Path:     "/register/confirm/" + authID.String(),
+		MaxAge:   int(authCacheExpiration.Seconds()),
+		Secure:   req.TLS != nil,
+		HttpOnly: true,
+		SameSite: http.SameSiteStrictMode,
+	})
 
 	regData := authReq.RegistrationData()
 
@@ -753,7 +733,7 @@ func (a *AuthProviderOIDC) renderRegistrationConfirmInterstitial(
 // RegisterConfirmHandler is the POST endpoint behind the OIDC
 // registration confirmation interstitial. It validates the CSRF cookie
 // against the form-submitted token, finalises the registration via
-// [AuthProviderOIDC.handleRegistration], and renders the success page.
+// handleRegistration, and renders the success page.
 func (a *AuthProviderOIDC) RegisterConfirmHandler(
 	writer http.ResponseWriter,
 	req *http.Request,
@@ -843,14 +823,22 @@ func (a *AuthProviderOIDC) RegisterConfirmHandler(
 	}
 
 	// Clear the CSRF cookie now that the registration is final.
-	setRegisterConfirmCookie(writer, req, authID, "", -1, a.cookiesSecure())
+	http.SetCookie(writer, &http.Cookie{
+		Name:     registerConfirmCSRFCookie,
+		Value:    "",
+		Path:     "/register/confirm/" + authID.String(),
+		MaxAge:   -1,
+		Secure:   req.TLS != nil,
+		HttpOnly: true,
+		SameSite: http.SameSiteStrictMode,
+	})
 
 	content := renderRegistrationSuccessTemplate(user, newNode)
 
 	writer.Header().Set("Content-Type", "text/html; charset=utf-8")
 	writer.WriteHeader(http.StatusOK)
 
-	// [renderRegistrationSuccessTemplate]'s output only embeds
+	// renderRegistrationSuccessTemplate's output only embeds
 	// HTML-escaped values from a server-side template, so the gosec
 	// XSS warning is a false positive here.
 	if _, err := writer.Write(content.Bytes()); err != nil { //nolint:noinlineerr,gosec
@@ -929,46 +917,29 @@ func renderAuthSuccessTemplate(
 	return bytes.NewBufferString(templates.AuthSuccess(result).Render())
 }
 
-// getCookieName generates a unique cookie name based on a cookie value. It
-// uses at most [cookieNamePrefixLen] bytes of value, and fewer if value is
-// shorter, so a short value (e.g. a malformed nonce from a misbehaving IdP)
-// yields a non-matching name rather than panicking with slice-out-of-range.
+// getCookieName generates a unique cookie name based on a cookie value.
+// Callers must ensure value has at least cookieNamePrefixLen bytes;
+// extractCodeAndStateParamFromRequest enforces this for the state
+// parameter, and setCSRFCookie always supplies a 64-byte random value.
 func getCookieName(baseName, value string) string {
-	n := min(len(value), cookieNamePrefixLen)
-
-	return fmt.Sprintf("%s_%s", baseName, value[:n])
+	return fmt.Sprintf("%s_%s", baseName, value[:cookieNamePrefixLen])
 }
 
-// clearOIDCCallbackCookie expires a /oidc/callback cookie by name. Matching the
-// path the cookie was set with is required for the browser to drop it.
-func clearOIDCCallbackCookie(w http.ResponseWriter, name string) {
-	//nolint:gosec // G124: a deletion cookie (empty value, MaxAge<0); security attributes are moot
-	http.SetCookie(w, &http.Cookie{
-		Name:   name,
-		Path:   "/oidc/callback",
-		MaxAge: -1,
-	})
-}
+func setCSRFCookie(w http.ResponseWriter, r *http.Request, name string) (string, error) {
+	val, err := util.GenerateRandomStringURLSafe(64)
+	if err != nil {
+		return val, err
+	}
 
-func setCSRFCookie(w http.ResponseWriter, r *http.Request, name string, secure bool) string {
-	val := rands.HexString(64)
-
-	//nolint:gosec // G124: Secure from server_url scheme or req.TLS; HttpOnly + SameSite set below
 	c := &http.Cookie{
 		Path:     "/oidc/callback",
 		Name:     getCookieName(name, val),
 		Value:    val,
 		MaxAge:   int(time.Hour.Seconds()),
-		Secure:   secure || r.TLS != nil,
+		Secure:   r.TLS != nil,
 		HttpOnly: true,
-		// Lax, not Strict: the OIDC callback is a cross-site top-level GET
-		// redirect from the IdP that must still carry this cookie. Strict
-		// would drop it and break login. Setting it explicitly also stops
-		// pre-Lax-default browsers from sending it on other cross-site
-		// requests.
-		SameSite: http.SameSiteLaxMode,
 	}
 	http.SetCookie(w, c)
 
-	return val
+	return val, nil
 }
diff --git a/hscontrol/oidc_confirm_test.go b/hscontrol/oidc_confirm_test.go
index bb4e4ee5a..74af90ec7 100644
--- a/hscontrol/oidc_confirm_test.go
+++ b/hscontrol/oidc_confirm_test.go
@@ -24,7 +24,6 @@ func newConfirmRequest(t *testing.T, authID types.AuthID, formCSRF, cookieCSRF s
 		form,
 	)
 	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-	//nolint:gosec // G124: test fixture
 	req.AddCookie(&http.Cookie{
 		Name:  registerConfirmCSRFCookie,
 		Value: cookieCSRF,
@@ -68,7 +67,7 @@ func TestRegisterConfirmHandler_RejectsCSRFMismatch(t *testing.T) {
 		"CSRF cookie/form mismatch must be rejected with 403")
 
 	// And the registration must still be pending — the rejected POST
-	// must not have called [AuthProviderOIDC.handleRegistration].
+	// must not have called handleRegistration.
 	cached, ok := app.state.GetAuthCacheEntry(authID)
 	require.True(t, ok, "rejected POST must not evict the cached registration")
 	require.NotNil(t, cached.PendingConfirmation(),
diff --git a/hscontrol/oidc_cookiename_test.go b/hscontrol/oidc_cookiename_test.go
deleted file mode 100644
index 6adca0bf9..000000000
--- a/hscontrol/oidc_cookiename_test.go
+++ /dev/null
@@ -1,20 +0,0 @@
-package hscontrol
-
-import (
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestGetCookieNameShortValue ensures a value shorter than the prefix length
-// (e.g. a malformed nonce from a misbehaving IdP) does not panic with
-// slice-out-of-range; it uses the available bytes instead.
-func TestGetCookieNameShortValue(t *testing.T) {
-	require.NotPanics(t, func() {
-		assert.Equal(t, "nonce_ab", getCookieName("nonce", "ab"))
-	})
-
-	assert.Equal(t, "nonce_abcdef", getCookieName("nonce", "abcdef"))
-	assert.Equal(t, "nonce_abcdef", getCookieName("nonce", "abcdefghij"))
-}
diff --git a/hscontrol/oidc_test.go b/hscontrol/oidc_test.go
index 04d331649..c6ce382c5 100644
--- a/hscontrol/oidc_test.go
+++ b/hscontrol/oidc_test.go
@@ -1,15 +1,9 @@
 package hscontrol
 
 import (
-	"net/http"
-	"net/http/httptest"
 	"testing"
-	"time"
 
-	"github.com/hashicorp/golang-lru/v2/expirable"
 	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
 )
 
 func TestDoOIDCAuthorization(t *testing.T) {
@@ -177,87 +171,3 @@ func TestDoOIDCAuthorization(t *testing.T) {
 		})
 	}
 }
-
-// TestSetCSRFCookieSameSite verifies the OIDC state/nonce CSRF cookies carry an
-// explicit SameSite=Lax attribute. Lax (not Strict) is required because the
-// OIDC callback is a cross-site top-level GET navigation from the IdP that must
-// still carry the cookie — Strict would drop it and break login. The cookie
-// previously set no SameSite (despite a comment claiming it did), leaving
-// browsers that do not default to Lax sending it on cross-site requests.
-func TestSetCSRFCookieSameSite(t *testing.T) {
-	w := httptest.NewRecorder()
-	r := httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/auth/abcdef0123456789", nil)
-
-	setCSRFCookie(w, r, "state", false)
-
-	cookies := w.Result().Cookies()
-	require.Len(t, cookies, 1)
-	assert.Equal(t, http.SameSiteLaxMode, cookies[0].SameSite,
-		"OIDC CSRF cookie must explicitly set SameSite=Lax")
-}
-
-// TestExtractCodeAndStateParam covers the callback's first trust-boundary
-// checks: both params required, and a too-short state is rejected before
-// getCookieName can slice out of range.
-func TestExtractCodeAndStateParam(t *testing.T) {
-	_, _, err := extractCodeAndStateParamFromRequest(
-		httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/oidc/callback", nil))
-	require.Error(t, err)
-
-	_, _, err = extractCodeAndStateParamFromRequest(
-		httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/oidc/callback?code=c&state=abc", nil))
-	require.ErrorIs(t, err, errOIDCStateTooShort)
-
-	code, state, err := extractCodeAndStateParamFromRequest(
-		httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/oidc/callback?code=c&state=abcdef0123", nil))
-	require.NoError(t, err)
-	assert.Equal(t, "c", code)
-	assert.Equal(t, "abcdef0123", state)
-}
-
-// TestGetAuthInfoFromStateSingleUse asserts a consumed OIDC state cannot be
-// resolved twice, so a replayed callback cannot re-bind the same session.
-func TestGetAuthInfoFromStateSingleUse(t *testing.T) {
-	a := &AuthProviderOIDC{
-		authCache: expirable.NewLRU[string, AuthInfo](16, nil, time.Minute),
-	}
-	a.authCache.Add("state-x", AuthInfo{Registration: true})
-
-	got := a.getAuthInfoFromState("state-x")
-	require.NotNil(t, got)
-	assert.True(t, got.Registration)
-
-	assert.Nil(t, a.getAuthInfoFromState("state-x"), "a consumed state must not resolve again")
-}
-
-// TestClearOIDCCallbackCookie asserts the cookie is expired (negative MaxAge) on
-// the same path it was set with, so the browser drops it.
-func TestClearOIDCCallbackCookie(t *testing.T) {
-	w := httptest.NewRecorder()
-	clearOIDCCallbackCookie(w, "state_abcdef")
-
-	cookies := w.Result().Cookies()
-	require.Len(t, cookies, 1)
-	assert.Equal(t, "state_abcdef", cookies[0].Name)
-	assert.Negative(t, cookies[0].MaxAge, "deletion cookie must have negative MaxAge")
-}
-
-// TestSetCSRFCookieSecure verifies the Secure flag is driven by the secure
-// argument (derived from the configured https server_url), not only req.TLS, so
-// cookies stay Secure behind a TLS-terminating reverse proxy where req.TLS is
-// nil.
-func TestSetCSRFCookieSecure(t *testing.T) {
-	r := httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/auth/abcdef0123456789", nil)
-
-	secureRec := httptest.NewRecorder()
-	setCSRFCookie(secureRec, r, "state", true)
-	require.Len(t, secureRec.Result().Cookies(), 1)
-	assert.True(t, secureRec.Result().Cookies()[0].Secure,
-		"https server_url must set Secure even when req.TLS is nil (proxy case)")
-
-	plainRec := httptest.NewRecorder()
-	setCSRFCookie(plainRec, r, "state", false)
-	require.Len(t, plainRec.Result().Cookies(), 1)
-	assert.False(t, plainRec.Result().Cookies()[0].Secure,
-		"plain-http server_url without req.TLS must not set Secure")
-}
diff --git a/hscontrol/platform_config.go b/hscontrol/platform_config.go
index 28a918bce..74929ea97 100644
--- a/hscontrol/platform_config.go
+++ b/hscontrol/platform_config.go
@@ -3,11 +3,12 @@ package hscontrol
 import (
 	"bytes"
 	_ "embed"
+	"html/template"
 	"net/http"
 	textTemplate "text/template"
 
-	"github.com/go-chi/chi/v5"
 	"github.com/gofrs/uuid/v5"
+	"github.com/gorilla/mux"
 	"github.com/juanfont/headscale/hscontrol/templates"
 )
 
@@ -35,8 +36,10 @@ func (h *Headscale) ApplePlatformConfig(
 	writer http.ResponseWriter,
 	req *http.Request,
 ) {
-	platform := chi.URLParam(req, "platform")
-	if platform == "" {
+	vars := mux.Vars(req)
+
+	platform, ok := vars["platform"]
+	if !ok {
 		httpError(writer, NewHTTPError(http.StatusBadRequest, "no platform specified", nil))
 		return
 	}
@@ -58,17 +61,29 @@ func (h *Headscale) ApplePlatformConfig(
 		URL:  h.cfg.ServerURL,
 	}
 
-	payloadType, ok := applePayloadType[platform]
-	if !ok {
-		httpError(writer, NewHTTPError(http.StatusBadRequest, "platform must be ios, macos-app-store or macos-standalone", nil))
-		return
-	}
-
-	platformConfig.PayloadType = payloadType
-
 	var payload bytes.Buffer
-	if err := payloadTemplate.Execute(&payload, platformConfig); err != nil { //nolint:noinlineerr
-		httpError(writer, err)
+
+	switch platform {
+	case "macos-standalone":
+		err := macosStandaloneTemplate.Execute(&payload, platformConfig)
+		if err != nil {
+			httpError(writer, err)
+			return
+		}
+	case "macos-app-store":
+		err := macosAppStoreTemplate.Execute(&payload, platformConfig)
+		if err != nil {
+			httpError(writer, err)
+			return
+		}
+	case "ios":
+		err := iosTemplate.Execute(&payload, platformConfig)
+		if err != nil {
+			httpError(writer, err)
+			return
+		}
+	default:
+		httpError(writer, NewHTTPError(http.StatusBadRequest, "platform must be ios, macos-app-store or macos-standalone", nil))
 		return
 	}
 
@@ -97,17 +112,8 @@ type AppleMobileConfig struct {
 }
 
 type AppleMobilePlatformConfig struct {
-	UUID        uuid.UUID
-	URL         string
-	PayloadType string
-}
-
-// applePayloadType maps a platform request path to the Tailscale IPN
-// PayloadType emitted in the rendered Apple profile.
-var applePayloadType = map[string]string{
-	"ios":              "io.tailscale.ipn.ios",
-	"macos-app-store":  "io.tailscale.ipn.macos",
-	"macos-standalone": "io.tailscale.ipn.macsys",
+	UUID uuid.UUID
+	URL  string
 }
 
 var commonTemplate = textTemplate.Must(
@@ -137,10 +143,10 @@ var commonTemplate = textTemplate.Must(
 </plist>`),
 )
 
-var payloadTemplate = textTemplate.Must(textTemplate.New("payloadTemplate").Parse(`
+var iosTemplate = textTemplate.Must(textTemplate.New("iosTemplate").Parse(`
     <dict>
         <key>PayloadType</key>
-        <string>{{.PayloadType}}</string>
+        <string>io.tailscale.ipn.ios</string>
         <key>PayloadUUID</key>
         <string>{{.UUID}}</string>
         <key>PayloadIdentifier</key>
@@ -154,3 +160,37 @@ var payloadTemplate = textTemplate.Must(textTemplate.New("payloadTemplate").Pars
         <string>{{.URL}}</string>
     </dict>
 `))
+
+var macosAppStoreTemplate = template.Must(template.New("macosTemplate").Parse(`
+    <dict>
+        <key>PayloadType</key>
+        <string>io.tailscale.ipn.macos</string>
+        <key>PayloadUUID</key>
+        <string>{{.UUID}}</string>
+        <key>PayloadIdentifier</key>
+        <string>com.github.juanfont.headscale</string>
+        <key>PayloadVersion</key>
+        <integer>1</integer>
+        <key>PayloadEnabled</key>
+        <true/>
+        <key>ControlURL</key>
+        <string>{{.URL}}</string>
+    </dict>
+`))
+
+var macosStandaloneTemplate = template.Must(template.New("macosStandaloneTemplate").Parse(`
+    <dict>
+        <key>PayloadType</key>
+        <string>io.tailscale.ipn.macsys</string>
+        <key>PayloadUUID</key>
+        <string>{{.UUID}}</string>
+        <key>PayloadIdentifier</key>
+        <string>com.github.juanfont.headscale</string>
+        <key>PayloadVersion</key>
+        <integer>1</integer>
+        <key>PayloadEnabled</key>
+        <true/>
+        <key>ControlURL</key>
+        <string>{{.URL}}</string>
+    </dict>
+`))
diff --git a/hscontrol/platform_config_test.go b/hscontrol/platform_config_test.go
deleted file mode 100644
index 5d021b142..000000000
--- a/hscontrol/platform_config_test.go
+++ /dev/null
@@ -1,110 +0,0 @@
-package hscontrol
-
-import (
-	"io"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/go-chi/chi/v5"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestApplePlatformConfig_ServesProfilesViaChiRouter is the regression
-// guard for issue juanfont/headscale#3296.
-//
-// The Apple profile download endpoints (`/apple/macos-app-store`,
-// `/apple/macos-standalone`, `/apple/ios`) are registered on the chi
-// router (see hscontrol/app.go: `r.Get("/apple/{platform}", ...)`).
-// Before the fix, `ApplePlatformConfig` extracted the `{platform}` URL
-// parameter via `mux.Vars(req)` from gorilla/mux; because the request
-// never passed through a gorilla router, the lookup always missed and
-// every download returned HTTP 400 `no platform specified`.
-//
-// This test mounts the route on a chi router exactly as production
-// does so the assertion exercises the real router + handler wiring,
-// not a hand-crafted chi context. It fails if the handler ever again
-// reads URL parameters via an API the production router does not
-// populate.
-func TestApplePlatformConfig_ServesProfilesViaChiRouter(t *testing.T) {
-	t.Parallel()
-
-	h := &Headscale{
-		cfg: &types.Config{
-			ServerURL: "https://headscale.example.com",
-		},
-	}
-
-	// Mirror the production mount in hscontrol/app.go so this test
-	// covers the actual router + handler wiring, not a hand-crafted
-	// chi context.
-	r := chi.NewRouter()
-	r.Get("/apple/{platform}", h.ApplePlatformConfig)
-
-	srv := httptest.NewServer(r)
-	t.Cleanup(srv.Close)
-
-	platforms := []string{"macos-app-store", "macos-standalone", "ios"}
-	for _, platform := range platforms {
-		t.Run(platform, func(t *testing.T) {
-			t.Parallel()
-
-			//nolint:noctx // test fixture
-			resp, err := http.Get(srv.URL + "/apple/" + platform)
-			require.NoError(t, err)
-			t.Cleanup(func() { resp.Body.Close() })
-
-			bodyBytes, _ := io.ReadAll(resp.Body)
-			body := string(bodyBytes)
-
-			assert.Equal(t, http.StatusOK, resp.StatusCode,
-				"expected 200 for /apple/%s, got %d: %s",
-				platform, resp.StatusCode, body)
-			assert.Equal(t,
-				"application/x-apple-aspen-config; charset=utf-8",
-				resp.Header.Get("Content-Type"),
-				"profile must be served as an Apple aspen config")
-			assert.Contains(t, body,
-				"https://headscale.example.com",
-				"rendered profile must embed the configured ServerURL")
-		})
-	}
-}
-
-// TestApplePlatformConfig_RejectsUnknownPlatform locks the contract for
-// the `default:` branch of `ApplePlatformConfig`: an otherwise-valid
-// request whose `{platform}` segment is none of the three known values
-// must return HTTP 400 with the documented message. This catches both
-// silent fallthrough (e.g. a future template registered under a new
-// name without adding a case) and accidental message drift.
-func TestApplePlatformConfig_RejectsUnknownPlatform(t *testing.T) {
-	t.Parallel()
-
-	h := &Headscale{
-		cfg: &types.Config{
-			ServerURL: "https://headscale.example.com",
-		},
-	}
-
-	r := chi.NewRouter()
-	r.Get("/apple/{platform}", h.ApplePlatformConfig)
-
-	srv := httptest.NewServer(r)
-	t.Cleanup(srv.Close)
-
-	//nolint:noctx // test fixture
-	resp, err := http.Get(srv.URL + "/apple/windows-phone")
-	require.NoError(t, err)
-	t.Cleanup(func() { resp.Body.Close() })
-
-	bodyBytes, _ := io.ReadAll(resp.Body)
-	body := string(bodyBytes)
-
-	assert.Equal(t, http.StatusBadRequest, resp.StatusCode,
-		"unknown platform must be rejected with 400")
-	assert.Contains(t, body,
-		"platform must be ios, macos-app-store or macos-standalone",
-		"error body must list the supported platforms")
-}
diff --git a/hscontrol/policy/matcher/export_test.go b/hscontrol/policy/matcher/export_test.go
deleted file mode 100644
index 63ec9f09d..000000000
--- a/hscontrol/policy/matcher/export_test.go
+++ /dev/null
@@ -1,13 +0,0 @@
-package matcher
-
-// MatchFromStrings builds a [Match] from raw source and destination
-// strings. Unparseable entries are silently dropped (fail-open): the
-// resulting [Match] is narrower than the input described, but never
-// wider. Callers that need strict validation should pre-validate
-// their inputs via [util.ParseIPSet].
-func MatchFromStrings(sources, destinations []string) Match {
-	return Match{
-		srcs:  buildIPSet(sources),
-		dests: buildIPSet(destinations),
-	}
-}
diff --git a/hscontrol/policy/matcher/matcher.go b/hscontrol/policy/matcher/matcher.go
index acfd35b4a..24f2b87a2 100644
--- a/hscontrol/policy/matcher/matcher.go
+++ b/hscontrol/policy/matcher/matcher.go
@@ -44,16 +44,22 @@ func MatchesFromFilterRules(rules []tailcfg.FilterRule) []Match {
 	return matches
 }
 
-// MatchFromFilterRule derives a [Match] from a [tailcfg.FilterRule]. The
-// destination IP set is the union of [tailcfg.FilterRule.DstPorts][].IP
-// and [tailcfg.FilterRule.CapGrant][].Dsts: cap-grant-only rules (e.g.
-// tailscale.com/cap/relay) carry their destinations in CapGrant.Dsts and
-// would otherwise contribute nothing to peer-visibility derivation in
-// [policy.ReduceNodes], hiding the cap target
-// from the source unless a companion IP-level rule also exists.
+// MatchFromFilterRule derives a Match from a tailcfg.FilterRule. The
+// destination IP set is the union of DstPorts[].IP and CapGrant[].Dsts:
+// cap-grant-only rules (e.g. tailscale.com/cap/relay) carry their
+// destinations in CapGrant.Dsts and would otherwise contribute nothing
+// to peer-visibility derivation in BuildPeerMap / ReduceNodes, hiding
+// the cap target from the source unless a companion IP-level rule
+// also exists.
 func MatchFromFilterRule(rule tailcfg.FilterRule) Match {
+	srcs := new(netipx.IPSetBuilder)
 	dests := new(netipx.IPSetBuilder)
 
+	for _, srcIP := range rule.SrcIPs {
+		set, _ := util.ParseIPSet(srcIP, nil)
+		srcs.AddSet(set)
+	}
+
 	for _, dp := range rule.DstPorts {
 		set, _ := util.ParseIPSet(dp.IP, nil)
 		dests.AddSet(set)
@@ -65,29 +71,45 @@ func MatchFromFilterRule(rule tailcfg.FilterRule) Match {
 		}
 	}
 
+	srcsSet, _ := srcs.IPSet()
 	destsSet, _ := dests.IPSet()
 
 	return Match{
-		srcs:  buildIPSet(rule.SrcIPs),
+		srcs:  srcsSet,
 		dests: destsSet,
 	}
 }
 
-// buildIPSet parses each string via [util.ParseIPSet] and unions the
-// results into a single [netipx.IPSet]. Unparseable entries are silently
-// dropped (fail-open): the result is narrower than the input described,
-// but never wider.
-func buildIPSet(addrs []string) *netipx.IPSet {
-	builder := new(netipx.IPSetBuilder)
+// MatchFromStrings builds a Match from raw source and destination
+// strings. Unparseable entries are silently dropped (fail-open): the
+// resulting Match is narrower than the input described, but never
+// wider. Callers that need strict validation should pre-validate
+// their inputs via util.ParseIPSet.
+func MatchFromStrings(sources, destinations []string) Match {
+	srcs := new(netipx.IPSetBuilder)
+	dests := new(netipx.IPSetBuilder)
 
-	for _, addr := range addrs {
-		set, _ := util.ParseIPSet(addr, nil)
-		builder.AddSet(set)
+	for _, srcIP := range sources {
+		set, _ := util.ParseIPSet(srcIP, nil)
+
+		srcs.AddSet(set)
 	}
 
-	set, _ := builder.IPSet()
+	for _, dest := range destinations {
+		set, _ := util.ParseIPSet(dest, nil)
 
-	return set
+		dests.AddSet(set)
+	}
+
+	srcsSet, _ := srcs.IPSet()
+	destsSet, _ := dests.IPSet()
+
+	match := Match{
+		srcs:  srcsSet,
+		dests: destsSet,
+	}
+
+	return match
 }
 
 func (m *Match) SrcsContainsIPs(ips ...netip.Addr) bool {
@@ -109,7 +131,7 @@ func (m *Match) DestsOverlapsPrefixes(prefixes ...netip.Prefix) bool {
 // DestsIsTheInternet reports whether the destination covers "the
 // internet" — the set represented by autogroup:internet, special-cased
 // for exit nodes. Returns true if either family's /0 is contained
-// (0.0.0.0/0 or ::/0), or if dests is a superset of [util.TheInternet]. A
+// (0.0.0.0/0 or ::/0), or if dests is a superset of TheInternet(). A
 // single-family /0 counts because operators may write it directly and
 // it still denotes the whole internet for that family.
 func (m *Match) DestsIsTheInternet() bool {
@@ -118,7 +140,14 @@ func (m *Match) DestsIsTheInternet() bool {
 		return true
 	}
 
-	// Superset-of-[util.TheInternet] check handles merged filter rules
+	// Superset-of-TheInternet check handles merged filter rules
 	// where the internet prefixes are combined with other dests.
-	return util.IPSetSubsetOf(util.TheInternet(), m.dests)
+	theInternet := util.TheInternet()
+	for _, prefix := range theInternet.Prefixes() {
+		if !m.dests.ContainsPrefix(prefix) {
+			return false
+		}
+	}
+
+	return true
 }
diff --git a/hscontrol/policy/pm.go b/hscontrol/policy/pm.go
index ffde6361a..956ecb929 100644
--- a/hscontrol/policy/pm.go
+++ b/hscontrol/policy/pm.go
@@ -33,56 +33,20 @@ type PolicyManager interface {
 	// TagExists reports whether the given tag is defined in the policy.
 	TagExists(tag string) bool
 
-	// TagOwnedByTags reports whether a credential holding ownerTags may apply
-	// tag: true if tag is one of ownerTags, or tag's tag-to-tag ownership chain
-	// transitively includes one of ownerTags. Authorises the tags an OAuth
-	// access token may set on the auth keys it mints.
-	TagOwnedByTags(tag string, ownerTags []string) bool
-
 	// NodeCanApproveRoute reports whether the given node can approve the given route.
 	NodeCanApproveRoute(node types.NodeView, route netip.Prefix) bool
 
-	// NodeNeedsPeerRecompute reports whether peers must recompute their
-	// netmap when the node's online state changes. True for subnet
-	// routers, relay targets (tailscale.com/cap/relay), and via targets;
-	// false for ordinary nodes, which only need a lightweight online or
-	// offline peer patch. [State.Connect] and [State.Disconnect] use it to
-	// avoid a tailnet-wide recompute on every ordinary reconnect.
-	NodeNeedsPeerRecompute(node types.NodeView) bool
-
 	// ViaRoutesForPeer computes via grant effects for a viewer-peer pair.
 	// It returns which routes should be included (peer is via-designated for viewer)
 	// and excluded (steered to a different peer). When no via grants apply,
 	// both fields are empty and the caller falls back to existing behavior.
 	ViaRoutesForPeer(viewer, peer types.NodeView) types.ViaRouteResult
 
-	// NodeCapMap returns the policy-derived CapMap for the given node,
-	// or nil when no nodeAttrs entry targets it. The returned map is
-	// owned by the manager; treat it as read-only and copy before
-	// merging into a [tailcfg.Node]. It describes the node's own
-	// capabilities, not a per-viewer view.
-	NodeCapMap(id types.NodeID) tailcfg.NodeCapMap
-
-	// NodeCapMaps returns a snapshot of the per-node policy CapMap so
-	// callers can amortise lock acquisitions over a peer loop. The
-	// outer map is a fresh container; the inner [tailcfg.NodeCapMap]
-	// values are shared with the manager and read-only.
-	NodeCapMaps() map[types.NodeID]tailcfg.NodeCapMap
-
-	// NodesWithChangedCapMap returns the IDs of nodes whose nodeAttrs
-	// CapMap shifted during recent updateLocked calls. The buffer
-	// drains on read; callers consume it once per update cycle to
-	// decide which nodes need a self-targeted MapResponse.
-	// refreshNodeAttrsLocked appends to the buffer rather than
-	// overwriting, so a SetUsers/SetNodes between SetPolicy and the
-	// drain cannot lose the policy-reload diff.
-	NodesWithChangedCapMap() []types.NodeID
-
 	Version() int
 	DebugString() string
 }
 
-// NewPolicyManager returns a new [PolicyManager].
+// NewPolicyManager returns a new policy manager.
 func NewPolicyManager(pol []byte, users []types.User, nodes views.Slice[types.NodeView]) (PolicyManager, error) {
 	var (
 		polMan PolicyManager
@@ -97,8 +61,8 @@ func NewPolicyManager(pol []byte, users []types.User, nodes views.Slice[types.No
 	return polMan, err
 }
 
-// PolicyManagersForTest returns all available [PolicyManager] implementations to
-// be used in tests to validate them in tests that try to determine that they
+// PolicyManagersForTest returns all available PostureManagers to be used
+// in tests to validate them in tests that try to determine that they
 // behave the same.
 func PolicyManagersForTest(pol []byte, users []types.User, nodes views.Slice[types.NodeView]) ([]PolicyManager, error) {
 	var polMans []PolicyManager
diff --git a/hscontrol/policy/policy.go b/hscontrol/policy/policy.go
index 94316eb72..53cc241e1 100644
--- a/hscontrol/policy/policy.go
+++ b/hscontrol/policy/policy.go
@@ -8,6 +8,7 @@ import (
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/rs/zerolog/log"
+	"github.com/samber/lo"
 	"tailscale.com/types/views"
 )
 
@@ -49,9 +50,35 @@ func ReduceRoutes(
 	return result
 }
 
+// BuildPeerMap builds a map of all peers that can be accessed by each node.
+func BuildPeerMap(
+	nodes views.Slice[types.NodeView],
+	matchers []matcher.Match,
+) map[types.NodeID][]types.NodeView {
+	ret := make(map[types.NodeID][]types.NodeView, nodes.Len())
+
+	// Build the map of all peers according to the matchers.
+	// Compared to ReduceNodes, which builds the list per node, we end up with doing
+	// the full work for every node (On^2), while this will reduce the list as we see
+	// relationships while building the map, making it O(n^2/2) in the end, but with less work per node.
+	for i := range nodes.Len() {
+		for j := i + 1; j < nodes.Len(); j++ {
+			if nodes.At(i).ID() == nodes.At(j).ID() {
+				continue
+			}
+
+			if nodes.At(i).CanAccess(matchers, nodes.At(j)) || nodes.At(j).CanAccess(matchers, nodes.At(i)) {
+				ret[nodes.At(i).ID()] = append(ret[nodes.At(i).ID()], nodes.At(j))
+				ret[nodes.At(j).ID()] = append(ret[nodes.At(j).ID()], nodes.At(i))
+			}
+		}
+	}
+
+	return ret
+}
+
 // ApproveRoutesWithPolicy checks if the node can approve the announced routes
-// and returns the new list of approved routes. The [PolicyManager] is consulted
-// via [PolicyManager.NodeCanApproveRoute].
+// and returns the new list of approved routes.
 // The approved routes will include:
 // 1. ALL previously approved routes (regardless of whether they're still advertised)
 // 2. New routes from announcedRoutes that can be auto-approved by policy
@@ -65,7 +92,8 @@ func ApproveRoutesWithPolicy(pm PolicyManager, nv types.NodeView, currentApprove
 	}
 
 	// Start with ALL currently approved routes - we never remove approved routes
-	newApproved := slices.Clone(currentApproved)
+	newApproved := make([]netip.Prefix, len(currentApproved))
+	copy(newApproved, currentApproved)
 
 	// Then, check for new routes that can be auto-approved
 	for _, route := range announcedRoutes {
@@ -84,12 +112,13 @@ func ApproveRoutesWithPolicy(pm PolicyManager, nv types.NodeView, currentApprove
 	// Sort and deduplicate
 	slices.SortFunc(newApproved, netip.Prefix.Compare)
 	newApproved = slices.Compact(newApproved)
-	newApproved = slices.DeleteFunc(newApproved, func(route netip.Prefix) bool {
-		return !route.IsValid()
+	newApproved = lo.Filter(newApproved, func(route netip.Prefix, index int) bool {
+		return route.IsValid()
 	})
 
 	// Sort the current approved for comparison
-	sortedCurrent := slices.Clone(currentApproved)
+	sortedCurrent := make([]netip.Prefix, len(currentApproved))
+	copy(sortedCurrent, currentApproved)
 	slices.SortFunc(sortedCurrent, netip.Prefix.Compare)
 
 	// Only update if the routes actually changed
diff --git a/hscontrol/policy/policyutil/doc.go b/hscontrol/policy/policyutil/doc.go
index 73a20c907..902a43e45 100644
--- a/hscontrol/policy/policyutil/doc.go
+++ b/hscontrol/policy/policyutil/doc.go
@@ -1,9 +1,9 @@
 // Package policyutil contains pure functions that transform compiled
 // policy rules for a specific node. The headline function is
-// [ReduceFilterRules], which filters global rules down to those relevant
+// ReduceFilterRules, which filters global rules down to those relevant
 // to one node.
 //
-// A node's [types.NodeView.SubnetRoutes] (approved, non-exit) participate
-// in rule matching so subnet routers receive filter rules for
-// destinations their subnets cover.
+// A node's SubnetRoutes (approved, non-exit) participate in rule
+// matching so subnet routers receive filter rules for destinations
+// their subnets cover — the fix for issue #3169.
 package policyutil
diff --git a/hscontrol/policy/policyutil/reduce.go b/hscontrol/policy/policyutil/reduce.go
index fc662aacb..dcd5bee62 100644
--- a/hscontrol/policy/policyutil/reduce.go
+++ b/hscontrol/policy/policyutil/reduce.go
@@ -6,6 +6,7 @@ import (
 
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/util"
+	"go4.org/netipx"
 	"tailscale.com/tailcfg"
 )
 
@@ -14,8 +15,7 @@ import (
 //
 // IMPORTANT: This function is designed for global filters only. Per-node filters
 // (from autogroup:self policies) are already node-specific and should not be passed
-// to this function. Use [policy.PolicyManager.FilterForNode] instead, which handles
-// both cases.
+// to this function. Use PolicyManager.FilterForNode() instead, which handles both cases.
 func ReduceFilterRules(node types.NodeView, rules []tailcfg.FilterRule) []tailcfg.FilterRule {
 	ret := []tailcfg.FilterRule{}
 	subnetRoutes := node.SubnetRoutes()
@@ -49,14 +49,13 @@ func ReduceFilterRules(node types.NodeView, rules []tailcfg.FilterRule) []tailcf
 			}
 
 			// If the node has approved subnet routes, preserve
-			// filter rules targeting those routes.
-			// [types.NodeView.SubnetRoutes] returns only approved,
-			// non-exit routes — matching Tailscale SaaS behavior,
-			// which does not generate filter rules for
-			// advertised-but-unapproved routes. Exit routes
-			// (0.0.0.0/0, ::/0) are excluded by
-			// [types.NodeView.SubnetRoutes] and handled separately
-			// via AllowedIPs/routing.
+			// filter rules targeting those routes. SubnetRoutes()
+			// returns only approved, non-exit routes — matching
+			// Tailscale SaaS behavior, which does not generate
+			// filter rules for advertised-but-unapproved routes.
+			// Exit routes (0.0.0.0/0, ::/0) are excluded by
+			// SubnetRoutes() and handled separately via
+			// AllowedIPs/routing.
 			if slices.ContainsFunc(subnetRoutes, expanded.OverlapsPrefix) {
 				dests = append(dests, dest)
 				continue
@@ -65,7 +64,7 @@ func ReduceFilterRules(node types.NodeView, rules []tailcfg.FilterRule) []tailcf
 			// Exit-route advertisers need rules targeting the
 			// public internet so the kernel filter accepts
 			// traffic forwarded by autogroup:internet sources.
-			if hasExitRoutes && util.IPSetSubsetOf(expanded, util.TheInternet()) {
+			if hasExitRoutes && ipSetSubsetOf(expanded, util.TheInternet()) {
 				dests = append(dests, dest)
 			}
 		}
@@ -82,11 +81,25 @@ func ReduceFilterRules(node types.NodeView, rules []tailcfg.FilterRule) []tailcf
 	return ret
 }
 
-// reduceCapGrantRule filters a [tailcfg.CapGrant] rule to only include
-// [tailcfg.CapGrant] entries whose Dsts match the given node's IPs. When a
-// broad prefix (e.g. 100.64.0.0/10 from dst:*) contains a node's IP, it is
+func ipSetSubsetOf(candidate, container *netipx.IPSet) bool {
+	if candidate == nil || container == nil {
+		return false
+	}
+
+	for _, pref := range candidate.Prefixes() {
+		if !container.ContainsPrefix(pref) {
+			return false
+		}
+	}
+
+	return true
+}
+
+// reduceCapGrantRule filters a CapGrant rule to only include CapGrant
+// entries whose Dsts match the given node's IPs. When a broad prefix
+// (e.g. 100.64.0.0/10 from dst:*) contains a node's IP, it is
 // narrowed to the node's specific /32 or /128 prefix. Returns nil if
-// no [tailcfg.CapGrant] entries are relevant to this node.
+// no CapGrant entries are relevant to this node.
 func reduceCapGrantRule(
 	node types.NodeView,
 	rule tailcfg.FilterRule,
@@ -123,9 +136,9 @@ func reduceCapGrantRule(
 		// prefixes to node-specific /32 or /128 so peers receive only
 		// the minimum routing surface. The route-match loop below
 		// preserves the original prefix so the subnet-serving node
-		// receives the full CapGrant scope. [types.NodeView.SubnetRoutes]
-		// excludes both unapproved and exit routes, matching Tailscale
-		// SaaS behavior.
+		// receives the full CapGrant scope. SubnetRoutes() excludes
+		// both unapproved and exit routes, matching Tailscale SaaS
+		// behavior.
 		for _, dst := range cg.Dsts {
 			for _, subnetRoute := range subnetRoutes {
 				if dst.Overlaps(subnetRoute) {
@@ -138,7 +151,7 @@ func reduceCapGrantRule(
 		if len(matchingDsts) > 0 {
 			// A Dst can be appended twice when a broad prefix both
 			// contains a node IP and overlaps one of its approved
-			// subnet routes. Sort + Compact dedups; [netip.Prefix] is
+			// subnet routes. Sort + Compact dedups; netip.Prefix is
 			// comparable so Compact works with ==.
 			slices.SortFunc(matchingDsts, netip.Prefix.Compare)
 			matchingDsts = slices.Compact(matchingDsts)
diff --git a/hscontrol/policy/v2/canaccess_equiv_test.go b/hscontrol/policy/v2/canaccess_equiv_test.go
deleted file mode 100644
index 198ec41ab..000000000
--- a/hscontrol/policy/v2/canaccess_equiv_test.go
+++ /dev/null
@@ -1,50 +0,0 @@
-package v2
-
-import (
-	"net/netip"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/policy/matcher"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"tailscale.com/tailcfg"
-)
-
-// TestCanAccessWithRoutesMatchesCanAccess guards the peer-map optimization:
-// CanAccessWithRoutes, fed the same route data CanAccess computes internally,
-// must produce identical results. BuildPeerMap relies on this to precompute
-// each node's routes once instead of per pair.
-func TestCanAccessWithRoutesMatchesCanAccess(t *testing.T) {
-	user := types.User{Name: "u"}
-
-	subnetRouter := node("subnet", "100.64.0.1", "fd7a:115c:a1e0::1", user)
-	subnetRouter.Hostinfo = &tailcfg.Hostinfo{RoutableIPs: []netip.Prefix{netip.MustParsePrefix("10.0.0.0/24")}}
-	subnetRouter.ApprovedRoutes = []netip.Prefix{netip.MustParsePrefix("10.0.0.0/24")}
-
-	exitNode := node("exit", "100.64.0.2", "fd7a:115c:a1e0::2", user)
-	exitNode.Hostinfo = &tailcfg.Hostinfo{RoutableIPs: []netip.Prefix{netip.MustParsePrefix("0.0.0.0/0")}}
-	exitNode.ApprovedRoutes = []netip.Prefix{netip.MustParsePrefix("0.0.0.0/0")}
-
-	plain := node("plain", "100.64.0.3", "fd7a:115c:a1e0::3", user)
-
-	matchers := matcher.MatchesFromFilterRules([]tailcfg.FilterRule{
-		{
-			SrcIPs:   []string{"*"},
-			DstPorts: []tailcfg.NetPortRange{{IP: "*", Ports: tailcfg.PortRangeAny}},
-		},
-	})
-
-	views := []types.NodeView{subnetRouter.View(), exitNode.View(), plain.View()}
-
-	for _, a := range views {
-		for _, b := range views {
-			if a.ID() == b.ID() {
-				continue
-			}
-
-			want := a.CanAccess(matchers, b)
-			got := a.CanAccessWithRoutes(matchers, b, a.SubnetRoutes(), b.SubnetRoutes(), b.IsExitNode())
-			assert.Equalf(t, want, got, "%s -> %s", a.Hostname(), b.Hostname())
-		}
-	}
-}
diff --git a/hscontrol/policy/v2/compiled.go b/hscontrol/policy/v2/compiled.go
index 642100c7d..ebc32c7bc 100644
--- a/hscontrol/policy/v2/compiled.go
+++ b/hscontrol/policy/v2/compiled.go
@@ -1,7 +1,6 @@
 package v2
 
 import (
-	"fmt"
 	"net/netip"
 	"slices"
 
@@ -11,7 +10,6 @@ import (
 	"go4.org/netipx"
 	"tailscale.com/tailcfg"
 	"tailscale.com/types/views"
-	"tailscale.com/util/set"
 )
 
 // grantCategory classifies a grant by what per-node work it needs.
@@ -19,7 +17,7 @@ type grantCategory int
 
 const (
 	// grantCategoryRegular requires no per-node work. The pre-compiled
-	// rules are complete and only need [policyutil.ReduceFilterRules].
+	// rules are complete and only need ReduceFilterRules.
 	grantCategoryRegular grantCategory = iota
 
 	// grantCategorySelf has autogroup:self destinations that must be
@@ -67,57 +65,17 @@ type selfGrantData struct {
 }
 
 // viaGrantData holds data needed for per-node via-grant compilation.
-// Sources are already resolved into srcIPStrings; destinations are
-// pre-resolved into prefixes plus a flag for autogroup:internet, which
-// the consumers handle separately because its gate is per-node
-// (IsExitNode()) rather than per-prefix overlap.
+// Sources are already resolved into srcIPStrings.
 type viaGrantData struct {
-	viaTags              []Tag
-	resolvedDsts         []netip.Prefix
-	hasAutoGroupInternet bool
-	internetProtocols    []ProtocolPort
-	srcIPStrings         []string
-}
-
-// resolveViaDestinations splits a via grant's destinations into the
-// flat list of IP prefixes they resolve to plus a flag for
-// autogroup:internet. Every alias kind goes through [Alias.Resolve] so
-// adding a new alias type to the policy parser does not silently
-// disappear from the via path. Non-IP alias kinds (tag, user, group,
-// wildcard) resolve to /32 host IPs that never overlap with subnet
-// route advertisements and therefore contribute nothing here.
-func resolveViaDestinations(
-	pol *Policy,
-	users types.Users,
-	nodes views.Slice[types.NodeView],
-	dsts Aliases,
-) ([]netip.Prefix, bool) {
-	var (
-		prefixes             []netip.Prefix
-		hasAutoGroupInternet bool
-	)
-
-	for _, d := range dsts {
-		if ag, ok := d.(*AutoGroup); ok && ag.Is(AutoGroupInternet) {
-			hasAutoGroupInternet = true
-
-			continue
-		}
-
-		ips, err := d.Resolve(pol, users, nodes)
-		if err != nil || ips == nil {
-			continue
-		}
-
-		prefixes = append(prefixes, ips.Prefixes()...)
-	}
-
-	return prefixes, hasAutoGroupInternet
+	viaTags           []Tag
+	destinations      Aliases
+	internetProtocols []ProtocolPort
+	srcIPStrings      []string
 }
 
 // userNodeIndex maps user IDs to their untagged nodes. Built once per
 // policy or node-set change and read from many goroutines under
-// [PolicyManager.mu]; readers must hold the lock (or the snapshot
+// PolicyManager.mu; readers must hold the lock (or the snapshot
 // returned to them).
 type userNodeIndex map[uint][]types.NodeView
 
@@ -136,97 +94,10 @@ func buildUserNodeIndex(
 	return idx
 }
 
-// compileNodeAttrs returns the per-node CapMap derived from policy
-// nodeAttrs plus the tailnet-wide [Policy.RandomizeClientPort] flag.
-//
-// Returns an error when a target alias fails to resolve so the caller
-// surfaces a corrupt policy instead of silently granting a partial set
-// of attrs.
-func (pol *Policy) compileNodeAttrs(
-	users types.Users,
-	nodes views.Slice[types.NodeView],
-) (map[types.NodeID]tailcfg.NodeCapMap, error) {
-	empty := map[types.NodeID]tailcfg.NodeCapMap{}
-
-	if pol == nil {
-		return empty, nil
-	}
-
-	if len(pol.NodeAttrs) == 0 && !pol.RandomizeClientPort {
-		return empty, nil
-	}
-
-	result := make(map[types.NodeID]tailcfg.NodeCapMap)
-	stamp := func(id types.NodeID, attr tailcfg.NodeCapability) {
-		capMap, ok := result[id]
-		if !ok {
-			capMap = tailcfg.NodeCapMap{}
-			result[id] = capMap
-		}
-
-		// nil [tailcfg.RawMessage] matches the wire format from a
-		// Tailscale-hosted control plane: capabilities without companion
-		// data marshal as null rather than []. Storing nil keeps the
-		// merge stable and lets the compat test diff cleanly against
-		// captured netmaps.
-		if _, exists := capMap[attr]; !exists {
-			capMap[attr] = nil
-		}
-	}
-
-	// Cache each node's IPs once per call. Without the cache, the
-	// node-attr inner loop would call [types.NodeView.IPs] once per attr
-	// per node — O(grants × nodes) allocations of a 2-element slice
-	// for what is invariant per node within a single policy compile.
-	type nodeIPs struct {
-		id  types.NodeID
-		ips []netip.Addr
-	}
-
-	nodeList := make([]nodeIPs, 0, nodes.Len())
-	for _, n := range nodes.All() {
-		nodeList = append(nodeList, nodeIPs{id: n.ID(), ips: n.IPs()})
-	}
-
-	if pol.RandomizeClientPort {
-		for _, ni := range nodeList {
-			stamp(ni.id, tailcfg.NodeAttrRandomizeClientPort)
-		}
-	}
-
-	for _, na := range pol.NodeAttrs {
-		if len(na.Attrs) == 0 {
-			continue
-		}
-
-		resolved, err := na.Targets.Resolve(pol, users, nodes)
-		if err != nil {
-			return nil, fmt.Errorf("nodeAttrs target %s: %w", na.Targets, err)
-		}
-
-		if resolved == nil {
-			continue
-		}
-
-		for _, ni := range nodeList {
-			if !slices.ContainsFunc(ni.ips, resolved.Contains) {
-				continue
-			}
-
-			for _, attr := range na.Attrs {
-				stamp(ni.id, attr)
-			}
-		}
-	}
-
-	return result, nil
-}
-
-// compileGrants resolves all policy grants into [compiledGrant] structs.
+// compileGrants resolves all policy grants into compiledGrant structs.
 // Source resolution and non-self destination resolution happens once
 // here. This is the single resolution path that replaces the
-// duplicated work in [Policy.compileFilterRules] and the autogroup:self
-// expansion.
+// duplicated work in compileFilterRules and compileGrantWithAutogroupSelf.
 func (pol *Policy) compileGrants(
 	users types.Users,
 	nodes views.Slice[types.NodeView],
@@ -258,7 +129,7 @@ func (pol *Policy) compileGrants(
 	return compiled
 }
 
-// compileOneGrant resolves a single grant into a [compiledGrant].
+// compileOneGrant resolves a single grant into a compiledGrant.
 // All source resolution happens here. Non-self, non-via destination
 // resolution also happens here. Per-node data (self dests, via
 // matching) is stored for deferred compilation.
@@ -325,37 +196,25 @@ func (pol *Policy) compileOneGrant(
 		)
 	}
 
-	// Classify and store deferred self data. The struct literal already
-	// initializes category to grantCategoryRegular (the zero value).
-	if len(autogroupSelfDests) > 0 {
+	// Classify and store deferred self data.
+	switch {
+	case len(autogroupSelfDests) > 0:
 		cg.category = grantCategorySelf
 		cg.self = &selfGrantData{
 			resolvedSrcs:      resolvedSrcs,
 			internetProtocols: grant.InternetProtocols,
 			app:               grant.App,
 		}
+	default:
+		cg.category = grantCategoryRegular
 	}
 
 	return cg, nil
 }
 
-// mergeResolvedSrcs merges every prefix from the resolved sources into a
-// single [resolved] address set.
-func mergeResolvedSrcs(resolvedSrcs []ResolvedAddresses) (resolved, error) {
-	var b netipx.IPSetBuilder
-
-	for _, ips := range resolvedSrcs {
-		for _, pref := range ips.Prefixes() {
-			b.AddPrefix(pref)
-		}
-	}
-
-	return newResolved(&b)
-}
-
 // compileOneViaGrant resolves sources for a via grant and stores the
 // deferred per-node data. The actual via-node matching and route
-// intersection happens in [compileViaForNode].
+// intersection happens in compileViaForNode.
 func (pol *Policy) compileOneViaGrant(
 	grant Grant,
 	users types.Users,
@@ -377,7 +236,15 @@ func (pol *Policy) compileOneViaGrant(
 	}
 
 	// Build merged SrcIPs.
-	srcResolved, err := mergeResolvedSrcs(resolvedSrcs)
+	var srcIPs netipx.IPSetBuilder
+
+	for _, ips := range resolvedSrcs {
+		for _, pref := range ips.Prefixes() {
+			srcIPs.AddPrefix(pref)
+		}
+	}
+
+	srcResolved, err := newResolved(&srcIPs)
 	if err != nil {
 		return nil, err
 	}
@@ -389,17 +256,12 @@ func (pol *Policy) compileOneViaGrant(
 	hasWildcard := sourcesHaveWildcard(grant.Sources)
 	hasDangerAll := sourcesHaveDangerAll(grant.Sources)
 
-	resolvedDsts, hasAutoGroupInternet := resolveViaDestinations(
-		pol, users, nodes, grant.Destinations,
-	)
-
 	return &compiledGrant{
 		category: grantCategoryVia,
 		via: &viaGrantData{
-			viaTags:              grant.Via,
-			resolvedDsts:         resolvedDsts,
-			hasAutoGroupInternet: hasAutoGroupInternet,
-			internetProtocols:    grant.InternetProtocols,
+			viaTags:           grant.Via,
+			destinations:      grant.Destinations,
+			internetProtocols: grant.InternetProtocols,
 			srcIPStrings: srcIPsWithRoutes(
 				srcResolved, hasWildcard, hasDangerAll, nodes,
 			),
@@ -410,8 +272,8 @@ func (pol *Policy) compileOneViaGrant(
 // resolveSources resolves grant sources per-alias, returning the
 // resolved addresses and a separate slice of non-wildcard sources.
 // This is the canonical source-resolution path. Its output lands in
-// [compiledGrant.srcIPStrings] (among other places) and callers on the
-// hot path should prefer reading that over calling [Alias.Resolve] again.
+// compiledGrant.srcIPStrings (among other places) and callers on the
+// hot path should prefer reading that over calling Resolve again.
 func resolveSources(
 	pol *Policy,
 	sources Aliases,
@@ -451,8 +313,20 @@ func buildSrcIPStrings(
 	hasWildcard, hasDangerAll bool,
 	nodes views.Slice[types.NodeView],
 ) []string {
-	srcResolved, err := mergeResolvedSrcs(resolvedSrcs)
-	if err != nil || srcResolved.Empty() {
+	var merged netipx.IPSetBuilder
+
+	for _, ips := range resolvedSrcs {
+		for _, pref := range ips.Prefixes() {
+			merged.AddPrefix(pref)
+		}
+	}
+
+	srcResolved, err := newResolved(&merged)
+	if err != nil {
+		return nil
+	}
+
+	if srcResolved.Empty() {
 		return nil
 	}
 
@@ -465,12 +339,15 @@ func buildSrcIPStrings(
 	// individual IPs from non-wildcard sources alongside the
 	// merged CGNAT ranges rather than absorbing them.
 	if hasWildcard && len(nonWildcardSrcs) > 0 {
-		seen := set.SetOf(srcIPStrs)
+		seen := make(map[string]bool, len(srcIPStrs))
+		for _, s := range srcIPStrs {
+			seen[s] = true
+		}
 
 		for _, ips := range nonWildcardSrcs {
 			for _, s := range ips.Strings() {
-				if !seen.Contains(s) {
-					seen.Add(s)
+				if !seen[s] {
+					seen[s] = true
 					srcIPStrs = append(srcIPStrs, s)
 				}
 			}
@@ -481,9 +358,8 @@ func buildSrcIPStrings(
 }
 
 // compileOtherDests compiles filter rules for non-self, non-via
-// destinations. This produces both [tailcfg.FilterRule.DstPorts] rules
-// (from [Grant.InternetProtocols]) and [tailcfg.CapGrant] rules (from
-// [Grant.App]).
+// destinations. This produces both DstPorts rules (from
+// InternetProtocols) and CapGrant rules (from App).
 func (pol *Policy) compileOtherDests(
 	users types.Users,
 	nodes views.Slice[types.NodeView],
@@ -572,7 +448,7 @@ func (pol *Policy) compileOtherDests(
 	return rules
 }
 
-// hasPerNodeGrants reports whether any [compiledGrant] requires
+// hasPerNodeGrants reports whether any compiled grant requires
 // per-node filter compilation (via grants or autogroup:self).
 func hasPerNodeGrants(grants []compiledGrant) bool {
 	for i := range grants {
@@ -584,62 +460,10 @@ func hasPerNodeGrants(grants []compiledGrant) bool {
 	return false
 }
 
-// collectRelayTargetIPs returns the set of IPs that are destinations of a
-// tailscale.com/cap/relay grant. A node whose IP is in this set is a relay
-// target: when it goes offline, peers holding a PeerRelay allocation through
-// it must recompute their netmap to drop the now-dead allocation. The relay
-// cap is carried on each grant's [tailcfg.CapGrant] with Dsts set to the
-// resolved relay destinations (see [Policy.compileOtherDests]); the reversed
-// companion rule carries [tailcfg.PeerCapabilityRelayTarget] instead and is
-// intentionally skipped.
-func collectRelayTargetIPs(grants []compiledGrant) (*netipx.IPSet, error) {
-	var b netipx.IPSetBuilder
-
-	for i := range grants {
-		for _, rule := range grants[i].rules {
-			for _, cg := range rule.CapGrant {
-				if _, ok := cg.CapMap[tailcfg.PeerCapabilityRelay]; !ok {
-					continue
-				}
-
-				for _, dst := range cg.Dsts {
-					b.AddPrefix(dst)
-				}
-			}
-		}
-	}
-
-	return b.IPSet()
-}
-
-// collectViaTargetTags returns the set of tags used as via targets across all
-// grants. A node carrying any of these tags is a via target: peers steering
-// traffic through it must recompute when it goes offline. Returns nil when no
-// via grants exist.
-func collectViaTargetTags(grants []compiledGrant) map[Tag]struct{} {
-	tags := make(map[Tag]struct{})
-
-	for i := range grants {
-		if grants[i].via == nil {
-			continue
-		}
-
-		for _, t := range grants[i].via.viaTags {
-			tags[t] = struct{}{}
-		}
-	}
-
-	if len(tags) == 0 {
-		return nil
-	}
-
-	return tags
-}
-
-// globalFilterRules extracts global filter rules from [compiledGrant]s.
-// Via grants produce no global rules (they are per-node only); regular
-// grants contribute their full pre-compiled ruleset; self grants
-// contribute their non-self portion.
+// globalFilterRules extracts global filter rules from compiled
+// grants. Via grants produce no global rules (they are per-node
+// only); regular grants contribute their full pre-compiled ruleset;
+// self grants contribute their non-self portion.
 func globalFilterRules(grants []compiledGrant) []tailcfg.FilterRule {
 	var rules []tailcfg.FilterRule
 
@@ -848,41 +672,39 @@ func compileViaForNode(
 		return nil
 	}
 
-	// [types.NodeView.SubnetRoutes] excludes exit routes, so the overlap
-	// gate below sees only subnet advertisements. autogroup:internet on
-	// a via-tagged exit advertiser is handled separately because its
-	// eligibility is per-node ([types.NodeView.IsExitNode]) rather than
-	// per-prefix overlap.
+	// Find matching destination prefixes. SubnetRoutes() excludes exit
+	// routes, so the *Prefix check below sees only subnet advertisements;
+	// the *AutoGroup AutoGroupInternet branch checks IsExitNode() instead.
 	nodeSubnetRoutes := node.SubnetRoutes()
 
 	var viaDstPrefixes []netip.Prefix
 
-	for _, dstPrefix := range cg.via.resolvedDsts {
-		// Equality would reject any broader or narrower dst relative
-		// to the advertised route. Containment in either direction
-		// matches the operator's authorisation: a broader dst restricts
-		// traffic to the subset the router serves; a narrower dst rides
-		// on a router covering more than the operator asked for. The
-		// rule emits the literal dst either way because that is what
-		// the policy authorised.
-		if slices.ContainsFunc(nodeSubnetRoutes, dstPrefix.Overlaps) {
-			viaDstPrefixes = append(viaDstPrefixes, dstPrefix)
+	for _, dst := range cg.via.destinations {
+		switch d := dst.(type) {
+		case *Prefix:
+			dstPrefix := netip.Prefix(*d)
+			if slices.Contains(nodeSubnetRoutes, dstPrefix) {
+				viaDstPrefixes = append(
+					viaDstPrefixes, dstPrefix,
+				)
+			}
+		case *AutoGroup:
+			// autogroup:internet on a via-tagged exit advertiser
+			// becomes a rule whose DstPorts enumerate
+			// util.TheInternet(). The matchers derived from this
+			// rule let Node.CanAccess surface the exit node to the
+			// grant source via DestsIsTheInternet. ReduceFilterRules
+			// strips the rule from the wire format on non-exit
+			// advertisers, preserving SaaS PacketFilter encoding.
+			if d.Is(AutoGroupInternet) && node.IsExitNode() {
+				viaDstPrefixes = append(
+					viaDstPrefixes,
+					util.TheInternet().Prefixes()...,
+				)
+			}
 		}
 	}
 
-	// autogroup:internet on a via-tagged exit advertiser becomes a rule
-	// whose DstPorts enumerate [util.TheInternet]. The matchers derived
-	// from this rule let [types.NodeView.CanAccess] surface the exit node
-	// to the grant source via [matcher.Match.DestsIsTheInternet].
-	// [policyutil.ReduceFilterRules] strips the rule from the wire format
-	// on non-exit advertisers, preserving SaaS PacketFilter encoding.
-	if cg.via.hasAutoGroupInternet && node.IsExitNode() {
-		viaDstPrefixes = append(
-			viaDstPrefixes,
-			util.TheInternet().Prefixes()...,
-		)
-	}
-
 	if len(viaDstPrefixes) == 0 {
 		return nil
 	}
diff --git a/hscontrol/policy/v2/filter.go b/hscontrol/policy/v2/filter.go
index 6eb99707f..7a8dc6284 100644
--- a/hscontrol/policy/v2/filter.go
+++ b/hscontrol/policy/v2/filter.go
@@ -1,10 +1,12 @@
 package v2
 
 import (
+	"cmp"
 	"errors"
 	"fmt"
 	"net/netip"
 	"slices"
+	"strconv"
 	"strings"
 	"time"
 
@@ -21,56 +23,63 @@ var (
 	errSelfInSources = errors.New("autogroup:self cannot be used in sources")
 )
 
-// companionCap pairs a well-known Tailscale capability with its
-// companion capability.
-type companionCap struct {
-	original  tailcfg.PeerCapability
-	companion tailcfg.PeerCapability
-}
-
-// companionCaps lists certain well-known Tailscale capabilities and
+// companionCaps maps certain well-known Tailscale capabilities to
 // their companion capability. When a grant includes one of these
 // capabilities, Tailscale automatically generates an additional
-// [tailcfg.FilterRule] with the companion capability and a nil CapMap value.
-// The slice is ordered by the original capability name so that
-// generated companion rules are emitted deterministically.
-var companionCaps = []companionCap{
-	{tailcfg.PeerCapabilityTaildrive, tailcfg.PeerCapabilityTaildriveSharer},
-	{tailcfg.PeerCapabilityRelay, tailcfg.PeerCapabilityRelayTarget},
+// FilterRule with the companion capability and a nil CapMap value.
+var companionCaps = map[tailcfg.PeerCapability]tailcfg.PeerCapability{
+	tailcfg.PeerCapabilityTaildrive: tailcfg.PeerCapabilityTaildriveSharer,
+	tailcfg.PeerCapabilityRelay:     tailcfg.PeerCapabilityRelayTarget,
 }
 
-// companionCapGrantRules returns additional [tailcfg.FilterRule]s for any
+// companionCapGrantRules returns additional FilterRules for any
 // well-known capabilities that have companion caps. Companion rules
 // are **reversed**: SrcIPs come from the original destinations and
 // CapGrant Dsts come from the original sources. This allows
-// [policyutil.ReduceFilterRules] to distribute companion rules to source
-// nodes (e.g. drive-sharer goes to the member nodes, not the destination).
+// ReduceFilterRules to distribute companion rules to source nodes
+// (e.g. drive-sharer goes to the member nodes, not the destination).
 // Rules are ordered by the original capability name.
 //
 // dstIPStrings are the resolved destination IPs as strings (used as
 // companion SrcIPs). srcPrefixes are the resolved source IPs as
-// [netip.Prefix] (used as companion CapGrant Dsts).
+// netip.Prefix (used as companion CapGrant Dsts).
 func companionCapGrantRules(
 	dstIPStrings []string,
 	srcPrefixes []netip.Prefix,
 	capMap tailcfg.PeerCapMap,
 ) []tailcfg.FilterRule {
-	companions := make([]tailcfg.FilterRule, 0, len(companionCaps))
+	// Process in deterministic order by original capability name.
+	type pair struct {
+		original  tailcfg.PeerCapability
+		companion tailcfg.PeerCapability
+	}
 
-	for _, c := range companionCaps {
-		if _, ok := capMap[c.original]; ok {
-			companions = append(companions, tailcfg.FilterRule{
-				SrcIPs: dstIPStrings,
-				CapGrant: []tailcfg.CapGrant{
-					{
-						Dsts: srcPrefixes,
-						CapMap: tailcfg.PeerCapMap{
-							c.companion: nil,
-						},
+	var pairs []pair
+
+	for cap, companion := range companionCaps {
+		if _, ok := capMap[cap]; ok {
+			pairs = append(pairs, pair{cap, companion})
+		}
+	}
+
+	slices.SortFunc(pairs, func(a, b pair) int {
+		return cmp.Compare(a.original, b.original)
+	})
+
+	companions := make([]tailcfg.FilterRule, 0, len(pairs))
+
+	for _, p := range pairs {
+		companions = append(companions, tailcfg.FilterRule{
+			SrcIPs: dstIPStrings,
+			CapGrant: []tailcfg.CapGrant{
+				{
+					Dsts: srcPrefixes,
+					CapMap: tailcfg.PeerCapMap{
+						p.companion: nil,
 					},
 				},
-			})
-		}
+			},
+		})
 	}
 
 	return companions
@@ -78,7 +87,7 @@ func companionCapGrantRules(
 
 // sourcesHaveWildcard returns true if any of the source aliases is
 // a wildcard (*). Used to determine whether approved subnet routes
-// should be appended to [tailcfg.FilterRule.SrcIPs].
+// should be appended to SrcIPs.
 func sourcesHaveWildcard(srcs Aliases) bool {
 	for _, src := range srcs {
 		if _, ok := src.(Asterix); ok {
@@ -90,8 +99,8 @@ func sourcesHaveWildcard(srcs Aliases) bool {
 }
 
 // sourcesHaveDangerAll returns true if any of the source aliases is
-// autogroup:danger-all. When present, [tailcfg.FilterRule.SrcIPs] should
-// be ["*"] to represent all IP addresses including non-Tailscale addresses.
+// autogroup:danger-all. When present, SrcIPs should be ["*"] to
+// represent all IP addresses including non-Tailscale addresses.
 func sourcesHaveDangerAll(srcs Aliases) bool {
 	for _, src := range srcs {
 		if ag, ok := src.(*AutoGroup); ok && ag.Is(AutoGroupDangerAll) {
@@ -102,8 +111,8 @@ func sourcesHaveDangerAll(srcs Aliases) bool {
 	return false
 }
 
-// srcIPsWithRoutes returns the [tailcfg.FilterRule.SrcIPs] string slice,
-// appending approved subnet routes when the sources include a wildcard.
+// srcIPsWithRoutes returns the SrcIPs string slice, appending
+// approved subnet routes when the sources include a wildcard.
 // When hasDangerAll is true, returns ["*"] to represent all IPs.
 func srcIPsWithRoutes(
 	resolved ResolvedAddresses,
@@ -123,18 +132,17 @@ func srcIPsWithRoutes(
 	return ips
 }
 
-// compileFilterRules takes a set of nodes and a [Policy] and generates a
-// set of Tailscale compatible [tailcfg.FilterRule]s used to allow traffic
-// on clients.
+// compileFilterRules takes a set of nodes and an ACLPolicy and generates a
+// set of Tailscale compatible FilterRules used to allow traffic on clients.
 func (pol *Policy) compileFilterRules(
 	users types.Users,
 	nodes views.Slice[types.NodeView],
-) []tailcfg.FilterRule {
+) ([]tailcfg.FilterRule, error) {
 	if pol == nil || (pol.ACLs == nil && pol.Grants == nil) {
-		return tailcfg.FilterAllowAll
+		return tailcfg.FilterAllowAll, nil
 	}
 
-	return globalFilterRules(pol.compileGrants(users, nodes))
+	return globalFilterRules(pol.compileGrants(users, nodes)), nil
 }
 
 func (pol *Policy) destinationsToNetPortRange(
@@ -194,15 +202,15 @@ func (pol *Policy) compileFilterRulesForNode(
 	users types.Users,
 	node types.NodeView,
 	nodes views.Slice[types.NodeView],
-) []tailcfg.FilterRule {
+) ([]tailcfg.FilterRule, error) {
 	if pol == nil {
-		return tailcfg.FilterAllowAll
+		return tailcfg.FilterAllowAll, nil
 	}
 
 	grants := pol.compileGrants(users, nodes)
 	userIdx := buildUserNodeIndex(nodes)
 
-	return filterRulesForNode(grants, node, userIdx)
+	return filterRulesForNode(grants, node, userIdx), nil
 }
 
 var sshAccept = tailcfg.SSHAction{
@@ -213,11 +221,11 @@ var sshAccept = tailcfg.SSHAction{
 	AllowRemotePortForwarding: true,
 }
 
-// checkPeriodFromRule extracts the check period duration from an [SSH] rule.
-// Returns [SSHCheckPeriodDefault] if no checkPeriod is configured,
+// checkPeriodFromRule extracts the check period duration from an SSH rule.
+// Returns SSHCheckPeriodDefault if no checkPeriod is configured,
 // 0 if checkPeriod is "always", or the configured duration otherwise.
-// This is used server-side by [PolicyManager.SSHCheckParams] to resolve the
-// real period when the client calls back; the wire format always sends 0.
+// This is used server-side by SSHCheckParams to resolve the real period
+// when the client calls back; the wire format always sends 0.
 func checkPeriodFromRule(rule SSH) time.Duration {
 	switch {
 	case rule.CheckPeriod == nil:
@@ -229,7 +237,7 @@ func checkPeriodFromRule(rule SSH) time.Duration {
 	}
 }
 
-func sshCheck(baseURL string) tailcfg.SSHAction {
+func sshCheck(baseURL string, _ time.Duration) tailcfg.SSHAction {
 	holdURL := baseURL + "/machine/ssh/action/$SRC_NODE_ID/to/$DST_NODE_ID?local_user=$LOCAL_USER"
 
 	return tailcfg.SSHAction{
@@ -250,7 +258,6 @@ func sshCheck(baseURL string) tailcfg.SSHAction {
 	}
 }
 
-//nolint:gocyclo // SSH compilation walks per-rule branches with intertwined autogroup:self handling
 func (pol *Policy) compileSSHPolicy(
 	baseURL string,
 	users types.Users,
@@ -293,7 +300,7 @@ func (pol *Policy) compileSSHPolicy(
 		case SSHActionAccept:
 			action = sshAccept
 		case SSHActionCheck:
-			action = sshCheck(baseURL)
+			action = sshCheck(baseURL, checkPeriodFromRule(rule))
 		default:
 			return nil, fmt.Errorf(
 				"parsing SSH policy, unknown action %q, index: %d: %w",
@@ -416,7 +423,12 @@ func (pol *Policy) compileSSHPolicy(
 					allPrincipals = append(allPrincipals, taggedPrincipals...)
 
 					if len(allPrincipals) > 0 {
-						appendRules(allPrincipals, 0, false)
+						rules = append(rules, &tailcfg.SSHRule{
+							Principals: allPrincipals,
+							SSHUsers:   baseUserMap,
+							Action:     &action,
+							AcceptEnv:  acceptEnv,
+						})
 					}
 				}
 			} else if hasLocalpart && slices.ContainsFunc(node.IPs(), srcIPs.Contains) {
@@ -465,7 +477,24 @@ func (pol *Policy) compileSSHPolicy(
 	}, nil
 }
 
-// ipSetToPrincipals converts an [netipx.IPSet] into SSH principals, one per address.
+// resolvedAddrsToPrincipals converts ResolvedAddresses into SSH principals, one per address.
+func resolvedAddrsToPrincipals(addrs ResolvedAddresses) []*tailcfg.SSHPrincipal {
+	if addrs == nil {
+		return nil
+	}
+
+	var principals []*tailcfg.SSHPrincipal
+
+	for addr := range addrs.Iter() {
+		principals = append(principals, &tailcfg.SSHPrincipal{
+			NodeIP: addr.String(),
+		})
+	}
+
+	return principals
+}
+
+// ipSetToPrincipals converts an IPSet into SSH principals, one per address.
 func ipSetToPrincipals(ipSet *netipx.IPSet) []*tailcfg.SSHPrincipal {
 	if ipSet == nil {
 		return nil
@@ -593,19 +622,36 @@ func groupSourcesByUser(
 	return userIDs, principalsByUser, taggedPrincipals
 }
 
-// filterRuleKey generates a unique key for merging based on [tailcfg.FilterRule.SrcIPs]
-// and [tailcfg.FilterRule.IPProto].
-func filterRuleKey(rule tailcfg.FilterRule) string {
-	return fmt.Sprintf("%s|%v", strings.Join(rule.SrcIPs, ","), rule.IPProto)
+func ipSetToPrefixStringList(ips *netipx.IPSet) []string {
+	var out []string
+
+	if ips == nil {
+		return out
+	}
+
+	for _, pref := range ips.Prefixes() {
+		out = append(out, pref.String())
+	}
+
+	return out
 }
 
-// mergeFilterRules merges rules with identical [tailcfg.FilterRule.SrcIPs] and
-// [tailcfg.FilterRule.IPProto] by combining their [tailcfg.FilterRule.DstPorts].
-// DstPorts are NOT deduplicated to match Tailscale behavior.
-// [tailcfg.CapGrant] rules (which have no [tailcfg.FilterRule.DstPorts]) are
-// passed through without merging since [tailcfg.CapGrant] and
-// [tailcfg.FilterRule.DstPorts] are mutually exclusive in a
-// [tailcfg.FilterRule].
+// filterRuleKey generates a unique key for merging based on SrcIPs and IPProto.
+func filterRuleKey(rule tailcfg.FilterRule) string {
+	srcKey := strings.Join(rule.SrcIPs, ",")
+
+	protoStrs := make([]string, len(rule.IPProto))
+	for i, p := range rule.IPProto {
+		protoStrs[i] = strconv.Itoa(p)
+	}
+
+	return srcKey + "|" + strings.Join(protoStrs, ",")
+}
+
+// mergeFilterRules merges rules with identical SrcIPs and IPProto by combining
+// their DstPorts. DstPorts are NOT deduplicated to match Tailscale behavior.
+// CapGrant rules (which have no DstPorts) are passed through without merging
+// since CapGrant and DstPorts are mutually exclusive in a FilterRule.
 func mergeFilterRules(rules []tailcfg.FilterRule) []tailcfg.FilterRule {
 	if len(rules) <= 1 {
 		return rules
diff --git a/hscontrol/policy/v2/filter_test.go b/hscontrol/policy/v2/filter_test.go
index b6afc8e08..81f78f413 100644
--- a/hscontrol/policy/v2/filter_test.go
+++ b/hscontrol/policy/v2/filter_test.go
@@ -368,7 +368,7 @@ func TestParsing(t *testing.T) {
 				return
 			}
 
-			rules := pol.compileFilterRules(
+			rules, err := pol.compileFilterRules(
 				users,
 				types.Nodes{
 					&types.Node{
@@ -381,6 +381,12 @@ func TestParsing(t *testing.T) {
 					},
 				}.ViewSlice())
 
+			if (err != nil) != tt.wantErr {
+				t.Errorf("parsing() error = %v, wantErr %v", err, tt.wantErr)
+
+				return
+			}
+
 			if diff := cmp.Diff(tt.want, rules); diff != "" {
 				t.Errorf("parsing() unexpected result (-want +got):\n%s", diff)
 			}
@@ -1334,7 +1340,10 @@ func TestCompileFilterRulesForNodeWithAutogroupSelf(t *testing.T) {
 	// Test compilation for user1's first node
 	node1 := nodes[0].View()
 
-	rules := policy2.compileFilterRulesForNode(users, node1, nodes.ViewSlice())
+	rules, err := policy2.compileFilterRulesForNode(users, node1, nodes.ViewSlice())
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
 
 	if len(rules) != 1 {
 		t.Fatalf("expected 1 rule, got %d", len(rules))
@@ -1492,7 +1501,8 @@ func TestTagUserMutualExclusivity(t *testing.T) {
 	// matching the production pipeline in filterForNodeLocked.
 	userNode := nodes[0].View()
 
-	compiled := pol.compileFilterRulesForNode(users, userNode, nodes.ViewSlice())
+	compiled, err := pol.compileFilterRulesForNode(users, userNode, nodes.ViewSlice())
+	require.NoError(t, err)
 
 	userRules := policyutil.ReduceFilterRules(userNode, compiled)
 
@@ -1514,7 +1524,8 @@ func TestTagUserMutualExclusivity(t *testing.T) {
 	// Tag:database should receive the tag:server → tag:database rule after reduction.
 	dbNode := nodes[3].View()
 
-	compiled = pol.compileFilterRulesForNode(users, dbNode, nodes.ViewSlice())
+	compiled, err = pol.compileFilterRulesForNode(users, dbNode, nodes.ViewSlice())
+	require.NoError(t, err)
 
 	dbRules := policyutil.ReduceFilterRules(dbNode, compiled)
 
@@ -1585,7 +1596,8 @@ func TestUserToTagCrossIdentityGrant(t *testing.T) {
 	// user1's IP as source.
 	taggedNode := nodes[2].View()
 
-	compiled := pol.compileFilterRulesForNode(users, taggedNode, nodes.ViewSlice())
+	compiled, err := pol.compileFilterRulesForNode(users, taggedNode, nodes.ViewSlice())
+	require.NoError(t, err)
 
 	rules := policyutil.ReduceFilterRules(taggedNode, compiled)
 
@@ -1723,7 +1735,8 @@ func TestAutogroupTagged(t *testing.T) {
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
-			rules := policy.compileFilterRulesForNode(users, tt.sourceNode, nodes.ViewSlice())
+			rules, err := policy.compileFilterRulesForNode(users, tt.sourceNode, nodes.ViewSlice())
+			require.NoError(t, err)
 
 			// Verify all expected destinations are reachable
 			for _, expectedDest := range tt.shouldReach {
@@ -1806,7 +1819,8 @@ func TestAutogroupSelfWithSpecificUserSource(t *testing.T) {
 
 	// For user1's node: sources should be user1's devices
 	node1 := nodes[0].View()
-	rules := policy.compileFilterRulesForNode(users, node1, nodes.ViewSlice())
+	rules, err := policy.compileFilterRulesForNode(users, node1, nodes.ViewSlice())
+	require.NoError(t, err)
 	require.Len(t, rules, 1)
 
 	expectedSourceIPs := []string{"100.64.0.1", "100.64.0.2"}
@@ -1836,7 +1850,8 @@ func TestAutogroupSelfWithSpecificUserSource(t *testing.T) {
 	assert.ElementsMatch(t, expectedDestIPs, actualDestIPs)
 
 	node2 := nodes[2].View()
-	rules2 := policy.compileFilterRulesForNode(users, node2, nodes.ViewSlice())
+	rules2, err := policy.compileFilterRulesForNode(users, node2, nodes.ViewSlice())
+	require.NoError(t, err)
 	assert.Empty(t, rules2, "user2's node should have no rules (user1@ devices can't match user2's self)")
 }
 
@@ -1878,7 +1893,8 @@ func TestAutogroupSelfWithGroupSource(t *testing.T) {
 
 	// (group:admins has user1+user2, but autogroup:self filters to same user)
 	node1 := nodes[0].View()
-	rules := policy.compileFilterRulesForNode(users, node1, nodes.ViewSlice())
+	rules, err := policy.compileFilterRulesForNode(users, node1, nodes.ViewSlice())
+	require.NoError(t, err)
 	require.Len(t, rules, 1)
 
 	expectedSrcIPs := []string{"100.64.0.1", "100.64.0.2"}
@@ -1900,7 +1916,8 @@ func TestAutogroupSelfWithGroupSource(t *testing.T) {
 	}
 
 	node3 := nodes[4].View()
-	rules3 := policy.compileFilterRulesForNode(users, node3, nodes.ViewSlice())
+	rules3, err := policy.compileFilterRulesForNode(users, node3, nodes.ViewSlice())
+	require.NoError(t, err)
 	assert.Empty(t, rules3, "user3 should have no rules")
 }
 
@@ -2349,7 +2366,8 @@ func TestAutogroupSelfWithNonExistentUserInGroup(t *testing.T) {
 	// Test superadmin's device: should have rules with tag:common, tag:tech, tag:privileged destinations
 	// and superadmin's IP should appear in sources (partial resolution of group:superadmin works)
 	superadminNode := nodes[0].View()
-	superadminRules := policy.compileFilterRulesForNode(users, superadminNode, nodes.ViewSlice())
+	superadminRules, err := policy.compileFilterRulesForNode(users, superadminNode, nodes.ViewSlice())
+	require.NoError(t, err)
 	assert.True(t, containsIP(superadminRules, "100.64.0.10"), "rules should include tag:common server")
 	assert.True(t, containsIP(superadminRules, "100.64.0.11"), "rules should include tag:tech server")
 	assert.True(t, containsIP(superadminRules, "100.64.0.12"), "rules should include tag:privileged server")
@@ -2365,7 +2383,8 @@ func TestAutogroupSelfWithNonExistentUserInGroup(t *testing.T) {
 	// partial result to be discarded via `continue`. With the fix, superadmin's IPs
 	// from group:superadmin are retained alongside admin's IPs from group:admin.
 	adminNode := nodes[1].View()
-	adminRules := policy.compileFilterRulesForNode(users, adminNode, nodes.ViewSlice())
+	adminRules, err := policy.compileFilterRulesForNode(users, adminNode, nodes.ViewSlice())
+	require.NoError(t, err)
 
 	// Rule 1 sources: [group:superadmin, group:admin, group:direction]
 	// Without fix: group:superadmin discarded -> only admin + direction IPs in sources
@@ -2379,7 +2398,8 @@ func TestAutogroupSelfWithNonExistentUserInGroup(t *testing.T) {
 
 	// Test direction's device: similar to admin, verifies group:direction sources work
 	directionNode := nodes[2].View()
-	directionRules := policy.compileFilterRulesForNode(users, directionNode, nodes.ViewSlice())
+	directionRules, err := policy.compileFilterRulesForNode(users, directionNode, nodes.ViewSlice())
+	require.NoError(t, err)
 	assert.True(t, containsIP(directionRules, "100.64.0.10"),
 		"direction rules should include tag:common server")
 	assert.True(t, containsSrcIP(directionRules, "100.64.0.3"),
@@ -3573,7 +3593,8 @@ func TestFilterAllowAllFix(t *testing.T) {
 		t.Run(tt.name, func(t *testing.T) {
 			t.Parallel()
 
-			rules := tt.pol.compileFilterRules(users, nodes)
+			rules, err := tt.pol.compileFilterRules(users, nodes)
+			require.NoError(t, err)
 
 			isFilterAllowAll := cmp.Diff(tailcfg.FilterAllowAll, rules) == ""
 			assert.Equal(t, tt.wantFilterAllow, isFilterAllowAll,
diff --git a/hscontrol/policy/v2/issue_3212_test.go b/hscontrol/policy/v2/issue_3212_test.go
index e95b18ded..c2f636a56 100644
--- a/hscontrol/policy/v2/issue_3212_test.go
+++ b/hscontrol/policy/v2/issue_3212_test.go
@@ -1,4 +1,4 @@
-// Tests pinned against captures for juanfont/headscale#3212.
+// Tests pinned against tscap captures for juanfont/headscale#3212.
 //
 // The captures were taken on 2026-04-28 against a live Tailscale SaaS
 // tailnet. They reproduce the literal #3212 setup: an ACL granting
diff --git a/hscontrol/policy/v2/issue_3267_test.go b/hscontrol/policy/v2/issue_3267_test.go
deleted file mode 100644
index 007ae09e9..000000000
--- a/hscontrol/policy/v2/issue_3267_test.go
+++ /dev/null
@@ -1,119 +0,0 @@
-package v2
-
-import (
-	"net/netip"
-	"slices"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/require"
-	"gorm.io/gorm"
-	"tailscale.com/tailcfg"
-)
-
-const issue3267AliceEmail = "alice@headscale.net"
-
-// TestIssue3267ViaGrantBroaderDestination locks the SaaS contract for
-// a via grant whose destination is a host alias broader than (or
-// narrower than) the router's advertised subnet route. Alice's only
-// path into the subnet is via tag:subnet-router. The grant destination
-// resolves to a /64 (IPv6) or /16 (IPv4), and the router advertises a
-// contained /120 / /24. Pre-fix the policy compiler emitted no rule
-// and ViaRoutesForPeer left Include empty because the prefix relation
-// was checked by slices.Contains (exact equality). SaaS behaviour is
-// the authority — see testdata/grant_results/via-grant-v47..v51 for
-// the equivalent compatibility regression.
-func TestIssue3267ViaGrantBroaderDestination(t *testing.T) {
-	t.Parallel()
-
-	users := types.Users{
-		{Model: gorm.Model{ID: 1}, Name: "alice", Email: issue3267AliceEmail}, //nolint:goconst
-	}
-
-	cases := []struct {
-		name       string
-		hostAlias  string
-		dst        string // value the hosts alias resolves to
-		advertised string // narrower prefix the router actually serves
-	}{
-		{
-			name:       "ipv6_4via6_64_dst_with_120_advertised",
-			hostAlias:  "example-4via6",
-			dst:        "fd7a:115c:a1e0:b1a::/64",
-			advertised: "fd7a:115c:a1e0:b1a:0:13:ad2:7300/120",
-		},
-		{
-			name:       "ipv4_16_dst_with_24_advertised",
-			hostAlias:  "subnet",
-			dst:        "10.33.0.0/16",
-			advertised: "10.33.5.0/24",
-		},
-	}
-
-	for _, tc := range cases {
-		t.Run(tc.name, func(t *testing.T) {
-			t.Parallel()
-
-			aliceLaptop := node("alice-laptop", "100.64.0.10", "fd7a:115c:a1e0::a", users[0])
-			aliceLaptop.ID = 1
-
-			router := node("subnet-router", "100.64.0.11", "fd7a:115c:a1e0::b", users[0])
-			router.ID = 2
-			router.Tags = []string{"tag:subnet-router"}
-			route := netip.MustParsePrefix(tc.advertised)
-			router.Hostinfo = &tailcfg.Hostinfo{RoutableIPs: []netip.Prefix{route}}
-			router.ApprovedRoutes = []netip.Prefix{route}
-
-			nodes := types.Nodes{aliceLaptop, router}
-
-			policy := `{
-				"tagOwners": {
-					"tag:subnet-router": ["` + issue3267AliceEmail + `"]
-				},
-				"hosts": {
-					"` + tc.hostAlias + `": "` + tc.dst + `"
-				},
-				"grants": [
-					{
-						"src": ["` + issue3267AliceEmail + `"],
-						"dst": ["` + tc.hostAlias + `"],
-						"via": ["tag:subnet-router"],
-						"ip": ["icmp:*"]
-					}
-				]
-			}`
-
-			pm, err := NewPolicyManager([]byte(policy), users, nodes.ViewSlice())
-			require.NoError(t, err)
-
-			pol, err := unmarshalPolicy([]byte(policy))
-			require.NoError(t, err)
-			require.NoError(t, pol.validate())
-
-			t.Run("compileFilterRulesForNode_emits_rule_with_grant_dst", func(t *testing.T) {
-				t.Parallel()
-
-				rules := pol.compileFilterRulesForNode(users, router.View(), nodes.ViewSlice())
-
-				found := slices.ContainsFunc(rules, func(r tailcfg.FilterRule) bool {
-					return slices.ContainsFunc(r.DstPorts, func(d tailcfg.NetPortRange) bool {
-						return d.IP == tc.dst
-					})
-				})
-				require.Truef(t, found,
-					"router %s must receive a via filter rule whose DstPorts.IP equals the grant dst %q; got rules=%+v",
-					router.Hostname, tc.dst, rules)
-			})
-
-			t.Run("ViaRoutesForPeer_includes_advertised_prefix", func(t *testing.T) {
-				t.Parallel()
-
-				result := pm.ViaRoutesForPeer(aliceLaptop.View(), router.View())
-				require.Contains(t, result.Include, route,
-					"alice viewing tag:subnet-router must Include advertised prefix %s — drives AllowedIPs in state.RoutesForPeer", route)
-				require.Empty(t, result.Exclude,
-					"alice viewing tag:subnet-router must not Exclude any prefix — there is no competing via tag")
-			})
-		})
-	}
-}
diff --git a/hscontrol/policy/v2/node_recompute_test.go b/hscontrol/policy/v2/node_recompute_test.go
deleted file mode 100644
index ed8c9db17..000000000
--- a/hscontrol/policy/v2/node_recompute_test.go
+++ /dev/null
@@ -1,137 +0,0 @@
-package v2
-
-import (
-	"net/netip"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/require"
-	"gorm.io/gorm"
-	"tailscale.com/tailcfg"
-)
-
-// TestNodeNeedsPeerRecompute pins which node roles force peers to recompute
-// their netmap when the node's online state changes. An ordinary node only
-// needs the lightweight online/offline peer patch; subnet routers, relay
-// targets, and via targets change what peers compute and therefore need a
-// full recompute. The predicate is keyed on the flipping node, so an ordinary
-// node in a tailnet that uses relay or via elsewhere must still be classified
-// as not needing a recompute.
-func TestNodeNeedsPeerRecompute(t *testing.T) {
-	users := types.Users{
-		{Model: gorm.Model{ID: 1}, Name: "user1", Email: "user1@headscale.net"},
-	}
-
-	const allowAll = `{"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-
-	relayPol := `{
-		"tagOwners": {"tag:relay": ["user1@"]},
-		"grants": [
-			{"src": ["*"], "dst": ["tag:relay"], "app": {"tailscale.com/cap/relay": [{}]}}
-		]
-	}`
-
-	viaPol := `{
-		"tagOwners": {"tag:via": ["user1@"]},
-		"grants": [
-			{"src": ["*"], "dst": ["10.0.0.0/24"], "ip": ["*"], "via": ["tag:via"]}
-		]
-	}`
-
-	taildrivePol := `{
-		"tagOwners": {"tag:drive": ["user1@"]},
-		"grants": [
-			{"src": ["*"], "dst": ["tag:drive"], "app": {"tailscale.com/cap/drive": [{}]}}
-		]
-	}`
-
-	ordinary := node("ordinary", "100.64.0.1", "fd7a:115c:a1e0::1", users[0])
-	ordinary.ID = 1
-
-	subnetRouter := node("subnet", "100.64.0.2", "fd7a:115c:a1e0::2", users[0])
-	subnetRouter.ID = 2
-	subnetRouter.Hostinfo = &tailcfg.Hostinfo{
-		RoutableIPs: []netip.Prefix{netip.MustParsePrefix("10.0.0.0/24")},
-	}
-	subnetRouter.ApprovedRoutes = []netip.Prefix{netip.MustParsePrefix("10.0.0.0/24")}
-
-	relayTarget := node("relay", "100.64.0.3", "fd7a:115c:a1e0::3", users[0])
-	relayTarget.ID = 3
-	relayTarget.Tags = []string{"tag:relay"}
-
-	viaTarget := node("via", "100.64.0.4", "fd7a:115c:a1e0::4", users[0])
-	viaTarget.ID = 4
-	viaTarget.Tags = []string{"tag:via"}
-
-	driveTarget := node("drive", "100.64.0.5", "fd7a:115c:a1e0::5", users[0])
-	driveTarget.ID = 5
-	driveTarget.Tags = []string{"tag:drive"}
-
-	tests := []struct {
-		name    string
-		pol     string
-		nodes   types.Nodes
-		subject *types.Node
-		want    bool
-	}{
-		{
-			name:    "ordinary node under allow-all does not need recompute",
-			pol:     allowAll,
-			nodes:   types.Nodes{ordinary},
-			subject: ordinary,
-			want:    false,
-		},
-		{
-			name:    "subnet router needs recompute",
-			pol:     allowAll,
-			nodes:   types.Nodes{subnetRouter},
-			subject: subnetRouter,
-			want:    true,
-		},
-		{
-			name:    "relay target needs recompute",
-			pol:     relayPol,
-			nodes:   types.Nodes{relayTarget, ordinary},
-			subject: relayTarget,
-			want:    true,
-		},
-		{
-			name:    "ordinary node in a relay-using tailnet does not need recompute",
-			pol:     relayPol,
-			nodes:   types.Nodes{relayTarget, ordinary},
-			subject: ordinary,
-			want:    false,
-		},
-		{
-			name:    "via target needs recompute",
-			pol:     viaPol,
-			nodes:   types.Nodes{viaTarget, ordinary},
-			subject: viaTarget,
-			want:    true,
-		},
-		{
-			name:    "ordinary node in a via-using tailnet does not need recompute",
-			pol:     viaPol,
-			nodes:   types.Nodes{viaTarget, ordinary},
-			subject: ordinary,
-			want:    false,
-		},
-		{
-			name:    "taildrive target does not need recompute",
-			pol:     taildrivePol,
-			nodes:   types.Nodes{driveTarget, ordinary},
-			subject: driveTarget,
-			want:    false,
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			pm, err := NewPolicyManager([]byte(tt.pol), users, tt.nodes.ViewSlice())
-			require.NoError(t, err)
-
-			got := pm.NodeNeedsPeerRecompute(tt.subject.View())
-			require.Equal(t, tt.want, got)
-		})
-	}
-}
diff --git a/hscontrol/policy/v2/nodeattrs_test.go b/hscontrol/policy/v2/nodeattrs_test.go
deleted file mode 100644
index c494024ed..000000000
--- a/hscontrol/policy/v2/nodeattrs_test.go
+++ /dev/null
@@ -1,357 +0,0 @@
-package v2
-
-import (
-	"net/netip"
-	"slices"
-	"testing"
-
-	"github.com/google/go-cmp/cmp"
-	"github.com/google/go-cmp/cmp/cmpopts"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"gorm.io/gorm"
-	"tailscale.com/tailcfg"
-)
-
-// nodeAttrsTestUsers returns a minimal user set: two passkey-style users on
-// different domains, mirroring the production multi-domain shape so user-target
-// resolution is exercised across both.
-func nodeAttrsTestUsers() types.Users {
-	return types.Users{
-		{Model: gorm.Model{ID: 1}, Name: "alice", Email: "alice@example.com"},
-		{Model: gorm.Model{ID: 2}, Name: "bob", Email: "bob@example.org"},
-	}
-}
-
-// nodeAttrsTestNodes returns a fixed mix of user-owned and tagged nodes used
-// by every nodeAttrs unit test. Two user-owned nodes (one per user) and three
-// tagged nodes (server, client, prod) so target resolution can be exercised
-// across user, group, tag, autogroup, and wildcard alias forms.
-func nodeAttrsTestNodes(users types.Users) types.Nodes {
-	return types.Nodes{
-		{
-			ID:        1,
-			GivenName: "alice-laptop",
-			User:      &users[0],
-			UserID:    &users[0].ID,
-			IPv4:      ptrAddr("100.64.0.1"),
-			IPv6:      ptrAddr("fd7a:115c:a1e0::1"),
-			Hostinfo:  &tailcfg.Hostinfo{},
-		},
-		{
-			ID:        2,
-			GivenName: "bob-laptop",
-			User:      &users[1],
-			UserID:    &users[1].ID,
-			IPv4:      ptrAddr("100.64.0.2"),
-			IPv6:      ptrAddr("fd7a:115c:a1e0::2"),
-			Hostinfo:  &tailcfg.Hostinfo{},
-		},
-		{
-			ID:        3,
-			GivenName: "server",
-			Tags:      []string{"tag:server"},
-			IPv4:      ptrAddr("100.64.0.3"),
-			IPv6:      ptrAddr("fd7a:115c:a1e0::3"),
-			Hostinfo:  &tailcfg.Hostinfo{},
-		},
-		{
-			ID:        4,
-			GivenName: "client",
-			Tags:      []string{"tag:client"},
-			IPv4:      ptrAddr("100.64.0.4"),
-			IPv6:      ptrAddr("fd7a:115c:a1e0::4"),
-			Hostinfo:  &tailcfg.Hostinfo{},
-		},
-		{
-			ID:        5,
-			GivenName: "prod",
-			Tags:      []string{"tag:prod"},
-			IPv4:      ptrAddr("100.64.0.5"),
-			IPv6:      ptrAddr("fd7a:115c:a1e0::5"),
-			Hostinfo:  &tailcfg.Hostinfo{},
-		},
-	}
-}
-
-const nodeAttrsTagOwners = `"tag:server": ["alice@example.com"],
-		"tag:client": ["alice@example.com"],
-		"tag:prod":   ["alice@example.com"]`
-
-func TestNodeAttrsCompile(t *testing.T) {
-	t.Parallel()
-
-	capMap := func(c tailcfg.NodeCapability) tailcfg.NodeCapMap {
-		return tailcfg.NodeCapMap{c: nil}
-	}
-
-	tests := []struct {
-		name string
-		// extra is appended inside the policy block alongside tagOwners.
-		extra string
-		want  map[types.NodeID]tailcfg.NodeCapMap
-	}{
-		{
-			name:  "wildcard target hits every node",
-			extra: `"nodeAttrs": [{"target": ["*"], "attr": ["randomize-client-port"]}]`,
-			want: map[types.NodeID]tailcfg.NodeCapMap{
-				1: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				2: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				3: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				4: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				5: capMap(tailcfg.NodeAttrRandomizeClientPort),
-			},
-		},
-		{
-			name:  "user target hits only that user's untagged nodes",
-			extra: `"nodeAttrs": [{"target": ["alice@example.com"], "attr": ["randomize-client-port"]}]`,
-			want: map[types.NodeID]tailcfg.NodeCapMap{
-				1: capMap(tailcfg.NodeAttrRandomizeClientPort),
-			},
-		},
-		{
-			name:  "tag target hits only matching tagged nodes",
-			extra: `"nodeAttrs": [{"target": ["tag:server"], "attr": ["drive:share", "drive:access"]}]`,
-			want: map[types.NodeID]tailcfg.NodeCapMap{
-				3: {
-					tailcfg.NodeAttrsTaildriveShare:  nil,
-					tailcfg.NodeAttrsTaildriveAccess: nil,
-				},
-			},
-		},
-		{
-			name:  "autogroup:member hits untagged nodes only",
-			extra: `"nodeAttrs": [{"target": ["autogroup:member"], "attr": ["randomize-client-port"]}]`,
-			want: map[types.NodeID]tailcfg.NodeCapMap{
-				1: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				2: capMap(tailcfg.NodeAttrRandomizeClientPort),
-			},
-		},
-		{
-			name:  "autogroup:tagged hits tagged nodes only",
-			extra: `"nodeAttrs": [{"target": ["autogroup:tagged"], "attr": ["disable-captive-portal-detection"]}]`,
-			want: map[types.NodeID]tailcfg.NodeCapMap{
-				3: capMap(tailcfg.NodeAttrDisableCaptivePortalDetection),
-				4: capMap(tailcfg.NodeAttrDisableCaptivePortalDetection),
-				5: capMap(tailcfg.NodeAttrDisableCaptivePortalDetection),
-			},
-		},
-		{
-			name: "merging two grants on overlapping targets unions attrs",
-			extra: `"nodeAttrs": [
-				{"target": ["*"],          "attr": ["drive:access"]},
-				{"target": ["tag:server"], "attr": ["drive:share"]}
-			]`,
-			want: map[types.NodeID]tailcfg.NodeCapMap{
-				1: capMap(tailcfg.NodeAttrsTaildriveAccess),
-				2: capMap(tailcfg.NodeAttrsTaildriveAccess),
-				3: {
-					tailcfg.NodeAttrsTaildriveAccess: nil,
-					tailcfg.NodeAttrsTaildriveShare:  nil,
-				},
-				4: capMap(tailcfg.NodeAttrsTaildriveAccess),
-				5: capMap(tailcfg.NodeAttrsTaildriveAccess),
-			},
-		},
-		{
-			name:  "empty entry compiles to nothing",
-			extra: `"nodeAttrs": [{"target": ["*"]}]`,
-			want:  nil,
-		},
-		{
-			name:  "top-level randomizeClientPort stamps every node",
-			extra: `"randomizeClientPort": true`,
-			want: map[types.NodeID]tailcfg.NodeCapMap{
-				1: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				2: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				3: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				4: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				5: capMap(tailcfg.NodeAttrRandomizeClientPort),
-			},
-		},
-		{
-			name: "global randomize plus per-tag entry merges",
-			extra: `"randomizeClientPort": true,
-				"nodeAttrs": [{"target": ["tag:server"], "attr": ["disable-captive-portal-detection"]}]`,
-			want: map[types.NodeID]tailcfg.NodeCapMap{
-				1: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				2: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				3: {
-					tailcfg.NodeAttrRandomizeClientPort:           nil,
-					tailcfg.NodeAttrDisableCaptivePortalDetection: nil,
-				},
-				4: capMap(tailcfg.NodeAttrRandomizeClientPort),
-				5: capMap(tailcfg.NodeAttrRandomizeClientPort),
-			},
-		},
-	}
-
-	users := nodeAttrsTestUsers()
-	nodes := nodeAttrsTestNodes(users)
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-
-			policy := `{
-		"tagOwners": {` + nodeAttrsTagOwners + `},
-		` + tt.extra + `
-	}`
-
-			pm, err := NewPolicyManager([]byte(policy), users, nodes.ViewSlice())
-			require.NoErrorf(t, err, "policy must parse and validate:\n%s", policy)
-
-			got, err := pm.pol.compileNodeAttrs(users, pm.nodes)
-			require.NoError(t, err)
-
-			if diff := cmp.Diff(tt.want, got, cmpopts.EquateEmpty()); diff != "" {
-				t.Errorf("compileNodeAttrs (-want +got):\n%s", diff)
-			}
-		})
-	}
-}
-
-func TestNodeAttrsValidate(t *testing.T) {
-	t.Parallel()
-
-	tests := []struct {
-		name    string
-		extra   string
-		wantErr error
-	}{
-		{
-			name:    "autogroup:self target rejected",
-			extra:   `"nodeAttrs": [{"target": ["autogroup:self"], "attr": ["randomize-client-port"]}]`,
-			wantErr: ErrNodeAttrsAutogroupNotAllowed,
-		},
-		{
-			name:    "autogroup:admin target rejected with user-role hint",
-			extra:   `"nodeAttrs": [{"target": ["autogroup:admin"], "attr": ["randomize-client-port"]}]`,
-			wantErr: ErrNodeAttrsAutogroupNotAllowed,
-		},
-		{
-			name:    "autogroup:owner target rejected with user-role hint",
-			extra:   `"nodeAttrs": [{"target": ["autogroup:owner"], "attr": ["randomize-client-port"]}]`,
-			wantErr: ErrNodeAttrsAutogroupNotAllowed,
-		},
-		{
-			name:    "funnel attr rejected as unsupported",
-			extra:   `"nodeAttrs": [{"target": ["*"], "attr": ["funnel"]}]`,
-			wantErr: ErrNodeAttrUnsupported,
-		},
-		{
-			name:    "ipPool set rejected as unsupported",
-			extra:   `"nodeAttrs": [{"target": ["autogroup:member"], "ipPool": ["100.81.0.0/16"]}]`,
-			wantErr: ErrNodeAttrIPPoolUnsupported,
-		},
-		{
-			name:    "ipPool overlapping reserved range rejected at validate",
-			extra:   `"nodeAttrs": [{"target": ["autogroup:member"], "ipPool": ["100.100.100.0/24"]}]`,
-			wantErr: ErrNodeAttrsIPPoolReserved,
-		},
-	}
-
-	users := nodeAttrsTestUsers()
-	nodes := nodeAttrsTestNodes(users)
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-
-			policy := `{
-		"tagOwners": {` + nodeAttrsTagOwners + `},
-		` + tt.extra + `
-	}`
-
-			_, err := NewPolicyManager([]byte(policy), users, nodes.ViewSlice())
-			require.Error(t, err)
-			assert.ErrorIs(t, err, tt.wantErr)
-		})
-	}
-}
-
-func TestNodeAttrsIPPoolValidator(t *testing.T) {
-	t.Parallel()
-
-	tests := []struct {
-		name    string
-		prefix  string
-		wantErr error
-	}{
-		{name: "in cgnat", prefix: "100.81.0.0/16"},
-		{name: "outside cgnat", prefix: "10.0.0.0/8", wantErr: ErrNodeAttrsIPPoolOutOfRange},
-		{name: "less specific than cgnat", prefix: "100.0.0.0/8", wantErr: ErrNodeAttrsIPPoolOutOfRange},
-		{name: "whole cgnat overlaps reserved", prefix: "100.64.0.0/10", wantErr: ErrNodeAttrsIPPoolReserved},
-		{name: "overlaps quad100", prefix: "100.100.100.0/24", wantErr: ErrNodeAttrsIPPoolReserved},
-		{name: "overlaps ipn", prefix: "100.115.92.0/24", wantErr: ErrNodeAttrsIPPoolReserved},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			t.Parallel()
-
-			err := validateNodeAttrIPPool(netip.MustParsePrefix(tt.prefix))
-			if tt.wantErr != nil {
-				require.Error(t, err)
-				assert.ErrorIs(t, err, tt.wantErr)
-
-				return
-			}
-
-			require.NoError(t, err)
-		})
-	}
-}
-
-func TestNodesWithChangedCapMap(t *testing.T) {
-	t.Parallel()
-
-	users := nodeAttrsTestUsers()
-	nodes := nodeAttrsTestNodes(users)
-
-	policyA := `{
-		"tagOwners": {` + nodeAttrsTagOwners + `},
-		"nodeAttrs": [{
-			"target": ["tag:server"],
-			"attr":   ["randomize-client-port"]
-		}]
-	}`
-
-	pm, err := NewPolicyManager([]byte(policyA), users, nodes.ViewSlice())
-	require.NoError(t, err)
-
-	initial := pm.NodesWithChangedCapMap()
-	slices.Sort(initial)
-	assert.Equal(t, []types.NodeID{3}, initial,
-		"first build reports every node with a non-empty CapMap")
-
-	// Swap targets: server loses the attr, client and prod gain it.
-	policyB := `{
-		"tagOwners": {` + nodeAttrsTagOwners + `},
-		"nodeAttrs": [{
-			"target": ["tag:client", "tag:prod"],
-			"attr":   ["randomize-client-port"]
-		}]
-	}`
-
-	changed, err := pm.SetPolicy([]byte(policyB))
-	require.NoError(t, err)
-	require.True(t, changed)
-
-	delta := pm.NodesWithChangedCapMap()
-	slices.Sort(delta)
-	assert.Equal(t, []types.NodeID{3, 4, 5}, delta,
-		"server lost the cap, client and prod gained it -- diff is the symmetric difference")
-
-	assert.Empty(t, pm.NodesWithChangedCapMap(),
-		"NodesWithChangedCapMap drains its buffer on read")
-
-	// Reload the same bytes. updateLocked still runs, but no node's
-	// CapMap hash should change.
-	_, err = pm.SetPolicy([]byte(policyB))
-	require.NoError(t, err)
-
-	assert.Empty(t, pm.NodesWithChangedCapMap(),
-		"reloading the same policy must not produce CapMap diffs")
-}
diff --git a/hscontrol/policy/v2/policy.go b/hscontrol/policy/v2/policy.go
index ae76ad267..679b4397e 100644
--- a/hscontrol/policy/v2/policy.go
+++ b/hscontrol/policy/v2/policy.go
@@ -5,7 +5,6 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
-	"maps"
 	"net/netip"
 	"slices"
 	"strings"
@@ -15,7 +14,6 @@ import (
 	"github.com/juanfont/headscale/hscontrol/policy/matcher"
 	"github.com/juanfont/headscale/hscontrol/policy/policyutil"
 	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/puzpuzpuz/xsync/v4"
 	"github.com/rs/zerolog/log"
 	"go4.org/netipx"
 	"tailscale.com/net/tsaddr"
@@ -25,14 +23,11 @@ import (
 	"tailscale.com/util/multierr"
 )
 
-// ErrInvalidTagOwner is returned when a tag owner is not an [Alias] type.
+// ErrInvalidTagOwner is returned when a tag owner is not an Alias type.
 var ErrInvalidTagOwner = errors.New("tag owner is not an Alias")
 
 type PolicyManager struct {
-	// RWMutex, not Mutex, so concurrent map generation does not serialise on
-	// reads. The per-node caches are xsync.Maps so a read can fill them without
-	// taking the write lock.
-	mu    sync.RWMutex
+	mu    sync.Mutex
 	pol   *Policy
 	users []types.User
 	nodes views.Slice[types.NodeView]
@@ -49,17 +44,8 @@ type PolicyManager struct {
 	autoApproveMapHash deephash.Sum
 	autoApproveMap     map[netip.Prefix]*netipx.IPSet
 
-	// relayTargetIPs holds the IPs of nodes that are destinations of a
-	// tailscale.com/cap/relay grant; viaTargetTags holds the tags used as
-	// via targets. A node matching either, or that is a subnet router,
-	// forces peers to recompute their netmap when its online state changes
-	// (see [PolicyManager.NodeNeedsPeerRecompute]). Recomputed from the
-	// compiled grants on every policy/user/node change.
-	relayTargetIPs *netipx.IPSet
-	viaTargetTags  map[Tag]struct{}
-
 	// Lazy map of SSH policies
-	sshPolicyMap *xsync.Map[types.NodeID, *tailcfg.SSHPolicy]
+	sshPolicyMap map[types.NodeID]*tailcfg.SSHPolicy
 
 	// compiledGrants are the grants with sources pre-resolved.
 	// The single source of truth for filter compilation. Both
@@ -68,26 +54,16 @@ type PolicyManager struct {
 	userNodeIdx    userNodeIndex
 
 	// Lazy map of per-node filter rules (reduced, for packet filters)
-	filterRulesMap *xsync.Map[types.NodeID, []tailcfg.FilterRule]
+	filterRulesMap map[types.NodeID][]tailcfg.FilterRule
 
 	// Lazy map of per-node matchers derived from UNREDUCED filter
 	// rules. Only populated on the slow path when needsPerNodeFilter
 	// is true; the fast path returns pm.matchers directly.
-	matchersForNodeMap *xsync.Map[types.NodeID, []matcher.Match]
+	matchersForNodeMap map[types.NodeID][]matcher.Match
 
 	// needsPerNodeFilter is true when any compiled grant requires
 	// per-node work (autogroup:self or via grants).
 	needsPerNodeFilter bool
-
-	// nodeAttrsMap is the per-node CapMap compiled from policy.NodeAttrs.
-	// nodeAttrsHashes shadow it for change detection between updateLocked
-	// runs. nodeAttrsChanged accumulates the union of all per-call diffs
-	// since the last drain — refresh APPENDS, never overwrites, so a
-	// concurrent SetUsers/SetNodes between SetPolicy and the drain
-	// cannot silently lose the policy-reload diff.
-	nodeAttrsMap     map[types.NodeID]tailcfg.NodeCapMap
-	nodeAttrsHashes  map[types.NodeID]deephash.Sum
-	nodeAttrsChanged []types.NodeID
 }
 
 // filterAndPolicy combines the compiled filter rules with policy content for hashing.
@@ -99,8 +75,8 @@ type filterAndPolicy struct {
 }
 
 // validateUserReferences surfaces ambiguous user@ tokens at policy load so
-// duplicate DB rows fail loudly instead of silently dropping rules.
-// Missing-user tokens stay tolerant. Empty users → no-op for
+// duplicate DB rows fail loudly instead of silently dropping rules (#3160).
+// Missing-user tokens stay tolerant (#2863). Empty users → no-op for
 // syntax-only checks.
 func validateUserReferences(pol *Policy, users types.Users) error {
 	if pol == nil || len(users) == 0 {
@@ -183,7 +159,7 @@ func validateUserReferences(pol *Policy, users types.Users) error {
 	return multierr.New(errs...)
 }
 
-// NewPolicyManager creates a new [PolicyManager] from a policy file and a list of users and nodes.
+// NewPolicyManager creates a new PolicyManager from a policy file and a list of users and nodes.
 // It returns an error if the policy file is invalid.
 // The policy manager will update the filter rules based on the users and nodes.
 func NewPolicyManager(b []byte, users []types.User, nodes views.Slice[types.NodeView]) (*PolicyManager, error) {
@@ -201,9 +177,9 @@ func NewPolicyManager(b []byte, users []types.User, nodes views.Slice[types.Node
 		pol:                policy,
 		users:              users,
 		nodes:              nodes,
-		sshPolicyMap:       xsync.NewMap[types.NodeID, *tailcfg.SSHPolicy](),
-		filterRulesMap:     xsync.NewMap[types.NodeID, []tailcfg.FilterRule](),
-		matchersForNodeMap: xsync.NewMap[types.NodeID, []matcher.Match](),
+		sshPolicyMap:       make(map[types.NodeID]*tailcfg.SSHPolicy, nodes.Len()),
+		filterRulesMap:     make(map[types.NodeID][]tailcfg.FilterRule, nodes.Len()),
+		matchersForNodeMap: make(map[types.NodeID][]matcher.Match, nodes.Len()),
 	}
 
 	_, err = pm.updateLocked()
@@ -236,14 +212,6 @@ func (pm *PolicyManager) updateLocked() (bool, error) {
 	pm.compiledGrants = pm.pol.compileGrants(pm.users, pm.nodes)
 	pm.userNodeIdx = buildUserNodeIndex(pm.nodes)
 	pm.needsPerNodeFilter = hasPerNodeGrants(pm.compiledGrants)
-	pm.viaTargetTags = collectViaTargetTags(pm.compiledGrants)
-
-	relayTargetIPs, err := collectRelayTargetIPs(pm.compiledGrants)
-	if err != nil {
-		return false, fmt.Errorf("collecting relay target IPs: %w", err)
-	}
-
-	pm.relayTargetIPs = relayTargetIPs
 
 	var filter []tailcfg.FilterRule
 	if pm.pol == nil || (pm.pol.ACLs == nil && pm.pol.Grants == nil) {
@@ -334,16 +302,6 @@ func (pm *PolicyManager) updateLocked() (bool, error) {
 	pm.exitSet = exitSet
 	pm.exitSetHash = exitSetHash
 
-	// Recompile per-node nodeAttrs CapMap and append the diff to
-	// pm.nodeAttrsChanged. The drain (NodesWithChangedCapMap) returns
-	// the accumulated union of every change since the last drain;
-	// SetUsers/SetNodes appending between SetPolicy and the drain
-	// cannot lose the policy-reload diff.
-	err = pm.refreshNodeAttrsLocked()
-	if err != nil {
-		return false, err
-	}
-
 	// Determine if we need to send updates to nodes
 	// filterChanged now includes policy content changes (via combined hash),
 	// so it will detect changes even for autogroup:self where compiled filter is empty
@@ -358,9 +316,9 @@ func (pm *PolicyManager) updateLocked() (bool, error) {
 		// TODO(kradalby): This could potentially be optimized by only clearing the
 		// policies for nodes that have changed. Particularly if the only difference is
 		// that nodes has been added or removed.
-		pm.sshPolicyMap.Clear()
-		pm.filterRulesMap.Clear()
-		pm.matchersForNodeMap.Clear()
+		clear(pm.sshPolicyMap)
+		clear(pm.filterRulesMap)
+		clear(pm.matchersForNodeMap)
 	}
 
 	// If nothing changed, no need to update nodes
@@ -381,55 +339,16 @@ func (pm *PolicyManager) updateLocked() (bool, error) {
 	return true, nil
 }
 
-// NodeNeedsPeerRecompute reports whether peers must recompute their netmap
-// when node's online state changes. A plain node only needs the lightweight
-// online/offline peer patch; these roles change what peers compute when the
-// node goes up or down, so they require a full recompute:
-//   - subnet router: primary-route failover changes peers' AllowedIPs
-//   - relay target (tailscale.com/cap/relay): peers must drop a stale
-//     PeerRelay allocation
-//   - via target: peers steer traffic through this node
-//
-// The check is keyed on the node itself, so an ordinary node in a tailnet
-// that uses relay or via for other nodes is correctly classified as not
-// needing a recompute.
-func (pm *PolicyManager) NodeNeedsPeerRecompute(node types.NodeView) bool {
-	if !node.Valid() {
-		return false
-	}
-
-	// Subnet-router status is intrinsic to the node, so it needs no policy
-	// state and is checked without the lock.
-	if node.IsSubnetRouter() {
-		return true
-	}
-
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
-	if pm.relayTargetIPs != nil && node.InIPSet(pm.relayTargetIPs) {
-		return true
-	}
-
-	for tag := range pm.viaTargetTags {
-		if node.HasTag(string(tag)) {
-			return true
-		}
-	}
-
-	return false
-}
-
-// SSHPolicy returns the [tailcfg.SSHPolicy] for node, compiling and
+// SSHPolicy returns the tailcfg.SSHPolicy for node, compiling and
 // caching on first access. Rules use SessionDuration = 0 (no
 // auto-approval) and emit check URLs of the form
 // /machine/ssh/action/{src}/to/{dst}?local_user={local_user} per the
 // SaaS wire format. Cache is invalidated on policy reload.
 func (pm *PolicyManager) SSHPolicy(baseURL string, node types.NodeView) (*tailcfg.SSHPolicy, error) {
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
-	if sshPol, ok := pm.sshPolicyMap.Load(node.ID()); ok {
+	if sshPol, ok := pm.sshPolicyMap[node.ID()]; ok {
 		return sshPol, nil
 	}
 
@@ -438,7 +357,7 @@ func (pm *PolicyManager) SSHPolicy(baseURL string, node types.NodeView) (*tailcf
 		return nil, fmt.Errorf("compiling SSH policy: %w", err)
 	}
 
-	pm.sshPolicyMap.Store(node.ID(), sshPol)
+	pm.sshPolicyMap[node.ID()] = sshPol
 
 	return sshPol, nil
 }
@@ -454,8 +373,8 @@ func (pm *PolicyManager) SSHPolicy(baseURL string, node types.NodeView) (*tailcf
 func (pm *PolicyManager) SSHCheckParams(
 	srcNodeID, dstNodeID types.NodeID,
 ) (time.Duration, bool) {
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	if pm.pol == nil || len(pm.pol.SSHs) == 0 {
 		return 0, false
@@ -502,14 +421,7 @@ func (pm *PolicyManager) SSHCheckParams(
 		// Check if dst node matches any destination.
 		for _, dst := range rule.Destinations {
 			if ag, isAG := dst.(*AutoGroup); isAG && ag.Is(AutoGroupSelf) {
-				// User().Valid() guards the User().ID() dereference: the
-				// NodeStore can hold a non-tagged node with UserID set but
-				// the User association unhydrated (nil), and IsTagged()
-				// alone does not cover that. Mirrors filter.go's
-				// autogroup:self guard. Without it, a tailnet client on the
-				// Noise SSH-check path crashes the server (nil deref).
 				if !srcNode.IsTagged() && !dstNode.IsTagged() &&
-					srcNode.User().Valid() && dstNode.User().Valid() &&
 					srcNode.User().ID() == dstNode.User().ID() {
 					return checkPeriodFromRule(rule), true
 				}
@@ -572,7 +484,6 @@ func (pm *PolicyManager) SetPolicy(polB []byte) (bool, error) {
 		Int("groups.count", len(pol.Groups)).
 		Int("hosts.count", len(pol.Hosts)).
 		Int("tagOwners.count", len(pol.TagOwners)).
-		Int("nodeAttrs.count", len(pol.NodeAttrs)).
 		Int("autoApprovers.routes.count", len(pol.AutoApprovers.Routes)).
 		Int("tests.count", len(pol.Tests)).
 		Msg("Policy parsed successfully")
@@ -588,8 +499,8 @@ func (pm *PolicyManager) Filter() ([]tailcfg.FilterRule, []matcher.Match) {
 		return nil, nil
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	return pm.filter, pm.matchers
 }
@@ -598,30 +509,13 @@ func (pm *PolicyManager) Filter() ([]tailcfg.FilterRule, []matcher.Match) {
 // For global filters, it uses the global filter matchers for all nodes.
 // For autogroup:self policies (empty global filter), it builds per-node
 // peer maps using each node's specific filter rules.
-//
-// Compared to [policy.ReduceNodes], which builds the list per node, we end
-// up with doing the full work for every node O(n^2), while this will reduce
-// the list as we see relationships while building the map, making it
-// O(n^2/2) in the end, but with less work per node.
 func (pm *PolicyManager) BuildPeerMap(nodes views.Slice[types.NodeView]) map[types.NodeID][]types.NodeView {
 	if pm == nil {
 		return nil
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
-	// Precompute each node's subnet routes and exit-node status once; the
-	// O(n^2) pair scans below would otherwise recompute them for every pair.
-	type nodeRoutes struct {
-		subnet []netip.Prefix
-		isExit bool
-	}
-
-	routeInfo := make(map[types.NodeID]nodeRoutes, nodes.Len())
-	for _, n := range nodes.All() {
-		routeInfo[n.ID()] = nodeRoutes{subnet: n.SubnetRoutes(), isExit: n.IsExitNode()}
-	}
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	// If we have a global filter, use it for all nodes (normal case).
 	// Via grants require the per-node path because the global filter
@@ -630,15 +524,16 @@ func (pm *PolicyManager) BuildPeerMap(nodes views.Slice[types.NodeView]) map[typ
 		ret := make(map[types.NodeID][]types.NodeView, nodes.Len())
 
 		// Build the map of all peers according to the matchers.
+		// Compared to ReduceNodes, which builds the list per node, we end up with doing
+		// the full work for every node O(n^2), while this will reduce the list as we see
+		// relationships while building the map, making it O(n^2/2) in the end, but with less work per node.
 		for i := range nodes.Len() {
 			for j := i + 1; j < nodes.Len(); j++ {
 				if nodes.At(i).ID() == nodes.At(j).ID() {
 					continue
 				}
 
-				ri, rj := routeInfo[nodes.At(i).ID()], routeInfo[nodes.At(j).ID()]
-				if nodes.At(i).CanAccessWithRoutes(pm.matchers, nodes.At(j), ri.subnet, rj.subnet, rj.isExit) ||
-					nodes.At(j).CanAccessWithRoutes(pm.matchers, nodes.At(i), rj.subnet, ri.subnet, ri.isExit) {
+				if nodes.At(i).CanAccess(pm.matchers, nodes.At(j)) || nodes.At(j).CanAccess(pm.matchers, nodes.At(i)) {
 					ret[nodes.At(i).ID()] = append(ret[nodes.At(i).ID()], nodes.At(j))
 					ret[nodes.At(j).ID()] = append(ret[nodes.At(j).ID()], nodes.At(i))
 				}
@@ -670,12 +565,10 @@ func (pm *PolicyManager) BuildPeerMap(nodes views.Slice[types.NodeView]) map[typ
 	for i := range nodes.Len() {
 		nodeI := nodes.At(i)
 		matchersI, hasFilterI := nodeMatchers[nodeI.ID()]
-		riI := routeInfo[nodeI.ID()]
 
 		for j := i + 1; j < nodes.Len(); j++ {
 			nodeJ := nodes.At(j)
 			matchersJ, hasFilterJ := nodeMatchers[nodeJ.ID()]
-			riJ := routeInfo[nodeJ.ID()]
 
 			// Check all access directions for symmetric peer visibility.
 			// For via grants, filter rules exist on the via-designated node
@@ -686,10 +579,10 @@ func (pm *PolicyManager) BuildPeerMap(nodes views.Slice[types.NodeView]) map[typ
 			//      using nodeI's matchers? (reverse direction: the matchers
 			//      on the via node accept traffic FROM the source)
 			// Same for matchersJ in both directions.
-			canIAccessJ := hasFilterI && nodeI.CanAccessWithRoutes(matchersI, nodeJ, riI.subnet, riJ.subnet, riJ.isExit)
-			canJAccessI := hasFilterJ && nodeJ.CanAccessWithRoutes(matchersJ, nodeI, riJ.subnet, riI.subnet, riI.isExit)
-			canJReachI := hasFilterI && nodeJ.CanAccessWithRoutes(matchersI, nodeI, riJ.subnet, riI.subnet, riI.isExit)
-			canIReachJ := hasFilterJ && nodeI.CanAccessWithRoutes(matchersJ, nodeJ, riI.subnet, riJ.subnet, riJ.isExit)
+			canIAccessJ := hasFilterI && nodeI.CanAccess(matchersI, nodeJ)
+			canJAccessI := hasFilterJ && nodeJ.CanAccess(matchersJ, nodeI)
+			canJReachI := hasFilterI && nodeJ.CanAccess(matchersI, nodeI)
+			canIReachJ := hasFilterJ && nodeI.CanAccess(matchersJ, nodeJ)
 
 			if canIAccessJ || canJAccessI || canJReachI || canIReachJ {
 				ret[nodeI.ID()] = append(ret[nodeI.ID()], nodeJ)
@@ -730,7 +623,7 @@ func (pm *PolicyManager) filterForNodeLocked(
 		return nil
 	}
 
-	if rules, ok := pm.filterRulesMap.Load(node.ID()); ok {
+	if rules, ok := pm.filterRulesMap[node.ID()]; ok {
 		return rules
 	}
 
@@ -742,7 +635,7 @@ func (pm *PolicyManager) filterForNodeLocked(
 	}
 
 	reduced := policyutil.ReduceFilterRules(node, unreduced)
-	pm.filterRulesMap.Store(node.ID(), reduced)
+	pm.filterRulesMap[node.ID()] = reduced
 
 	return reduced
 }
@@ -752,36 +645,36 @@ func (pm *PolicyManager) filterForNodeLocked(
 // If the policy uses autogroup:self, this returns node-specific compiled rules.
 // Otherwise, it returns the global filter reduced for this node.
 //
-// Cache is invalidated by [PolicyManager.updateLocked] on policy reload,
-// node-set change, or tag-state change.
+// Cache is invalidated by updateLocked on policy reload, node-set
+// change, or tag-state change.
 func (pm *PolicyManager) FilterForNode(node types.NodeView) ([]tailcfg.FilterRule, error) {
 	if pm == nil {
 		return nil, nil
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	return pm.filterForNodeLocked(node), nil
 }
 
 // MatchersForNode returns the matchers for peer relationship determination for a specific node.
 // These are UNREDUCED matchers - they include all rules where the node could be either source or destination.
-// This is different from [PolicyManager.FilterForNode] which returns REDUCED rules for packet filtering.
+// This is different from FilterForNode which returns REDUCED rules for packet filtering.
 //
 // For global policies: returns the global matchers (same for all nodes)
 // For autogroup:self: returns node-specific matchers from unreduced compiled rules.
 //
 // Per-node results are cached and invalidated on policy/node updates
-// so [PolicyManager.BuildPeerMap]'s O(N²) slow path avoids recomputing
-// matchers for every pair.
+// so BuildPeerMap's O(N²) slow path avoids recomputing matchers for
+// every pair.
 func (pm *PolicyManager) MatchersForNode(node types.NodeView) ([]matcher.Match, error) {
 	if pm == nil {
 		return nil, nil
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	// For global policies, return the shared global matchers.
 	// Via grants require per-node matchers because the global matchers
@@ -790,7 +683,7 @@ func (pm *PolicyManager) MatchersForNode(node types.NodeView) ([]matcher.Match,
 		return pm.matchers, nil
 	}
 
-	if cached, ok := pm.matchersForNodeMap.Load(node.ID()); ok {
+	if cached, ok := pm.matchersForNodeMap[node.ID()]; ok {
 		return cached, nil
 	}
 
@@ -798,7 +691,7 @@ func (pm *PolicyManager) MatchersForNode(node types.NodeView) ([]matcher.Match,
 	// the stored compiled grants for this specific node.
 	unreduced := pm.filterRulesForNodeLocked(node)
 	matchers := matcher.MatchesFromFilterRules(unreduced)
-	pm.matchersForNodeMap.Store(node.ID(), matchers)
+	pm.matchersForNodeMap[node.ID()] = matchers
 
 	return matchers, nil
 }
@@ -817,7 +710,7 @@ func (pm *PolicyManager) SetUsers(users []types.User) (bool, error) {
 	// Clear SSH policy map when users change to force SSH policy recomputation
 	// This ensures that if SSH policy compilation previously failed due to missing users,
 	// it will be retried with the new user list
-	pm.sshPolicyMap.Clear()
+	clear(pm.sshPolicyMap)
 
 	changed, err := pm.updateLocked()
 	if err != nil {
@@ -826,7 +719,7 @@ func (pm *PolicyManager) SetUsers(users []types.User) (bool, error) {
 
 	// If SSH policies exist, force a policy change when users are updated
 	// This ensures nodes get updated SSH policies even if other policy hashes didn't change
-	if pm.pol != nil && len(pm.pol.SSHs) > 0 {
+	if pm.pol != nil && pm.pol.SSHs != nil && len(pm.pol.SSHs) > 0 {
 		return true, nil
 	}
 
@@ -870,9 +763,9 @@ func (pm *PolicyManager) SetNodes(nodes views.Slice[types.NodeView]) (bool, erro
 
 		if !needsUpdate {
 			// This ensures fresh filter rules are generated for all nodes
-			pm.sshPolicyMap.Clear()
-			pm.filterRulesMap.Clear()
-			pm.matchersForNodeMap.Clear()
+			clear(pm.sshPolicyMap)
+			clear(pm.filterRulesMap)
+			clear(pm.matchersForNodeMap)
 		}
 		// Always return true when nodes changed, even if filter hash didn't change
 		// (can happen with autogroup:self or when nodes are added but don't affect rules)
@@ -882,23 +775,15 @@ func (pm *PolicyManager) SetNodes(nodes views.Slice[types.NodeView]) (bool, erro
 	return false, nil
 }
 
-// nodeIDViewMap indexes a slice of node views by node ID. On duplicate IDs the
-// last view wins, matching the open-coded loops it replaces.
-func nodeIDViewMap(s views.Slice[types.NodeView]) map[types.NodeID]types.NodeView {
-	m := make(map[types.NodeID]types.NodeView, s.Len())
-	for _, n := range s.All() {
-		m[n.ID()] = n
-	}
-
-	return m
-}
-
 func (pm *PolicyManager) nodesHavePolicyAffectingChanges(newNodes views.Slice[types.NodeView]) bool {
 	if pm.nodes.Len() != newNodes.Len() {
 		return true
 	}
 
-	oldNodes := nodeIDViewMap(pm.nodes)
+	oldNodes := make(map[types.NodeID]types.NodeView, pm.nodes.Len())
+	for _, node := range pm.nodes.All() {
+		oldNodes[node.ID()] = node
+	}
 
 	for _, newNode := range newNodes.All() {
 		oldNode, exists := oldNodes[newNode.ID()]
@@ -925,22 +810,16 @@ func (pm *PolicyManager) nodesHavePolicyAffectingChanges(newNodes views.Slice[ty
 // NodeCanHaveTag checks if a node can have the specified tag during client-initiated
 // registration or reauth flows (e.g., tailscale up --advertise-tags).
 //
-// This function is NOT used by the admin API's [state.State.SetNodeTags] - admins can
-// set any existing tag on any node by calling [state.State.SetNodeTags] directly,
-// which bypasses this authorization check.
+// This function is NOT used by the admin API's SetNodeTags - admins can set any
+// existing tag on any node by calling State.SetNodeTags directly, which bypasses
+// this authorization check.
 func (pm *PolicyManager) NodeCanHaveTag(node types.NodeView, tag string) bool {
-	if pm == nil {
+	if pm == nil || pm.pol == nil {
 		return false
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
-	// pm.pol is written by SetPolicy under pm.mu; reading it before the
-	// lock races with concurrent policy reloads.
-	if pm.pol == nil {
-		return false
-	}
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	// Check if tag exists in policy
 	owners, exists := pm.pol.TagOwners[Tag(tag)]
@@ -972,68 +851,8 @@ func (pm *PolicyManager) NodeCanHaveTag(node types.NodeView, tag string) bool {
 	return false
 }
 
-// TagOwnedByTags reports whether a credential holding ownerTags is authorised to
-// apply tag. It is true when tag is one of ownerTags, or when tag's tagOwners
-// chain (tag-to-tag ownership) transitively includes one of ownerTags. This is
-// the tag-level check used when an OAuth access token mints an auth key: the
-// requested tags must each be owned by the token's tags, so an operator token
-// tagged tag:k8s-operator may mint tag:k8s keys when the policy declares
-// "tag:k8s": ["tag:k8s-operator"]. It is purely tag-relational and does not
-// consult node IPs.
-func (pm *PolicyManager) TagOwnedByTags(tag string, ownerTags []string) bool {
-	if pm == nil {
-		return false
-	}
-
-	owns := make(map[string]bool, len(ownerTags))
-	for _, t := range ownerTags {
-		owns[t] = true
-	}
-
-	// A credential may always apply a tag it directly holds; this needs no policy.
-	if owns[tag] {
-		return true
-	}
-
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
-	// Owned-by delegation requires the policy's tagOwners.
-	if pm.pol == nil {
-		return false
-	}
-
-	// Walk tag-to-tag ownership transitively, guarding against cycles.
-	visited := make(map[Tag]bool)
-
-	var walk func(t Tag) bool
-
-	walk = func(t Tag) bool {
-		if visited[t] {
-			return false
-		}
-
-		visited[t] = true
-
-		for _, owner := range pm.pol.TagOwners[t] {
-			ot, ok := owner.(*Tag)
-			if !ok {
-				continue
-			}
-
-			if owns[string(*ot)] || walk(*ot) {
-				return true
-			}
-		}
-
-		return false
-	}
-
-	return walk(Tag(tag))
-}
-
 // userMatchesOwner checks if a user matches a tag owner entry.
-// This is used as a fallback when the node's IP is not in the [PolicyManager.tagOwnerMap].
+// This is used as a fallback when the node's IP is not in the tagOwnerMap.
 func (pm *PolicyManager) userMatchesOwner(user types.UserView, owner Owner) bool {
 	switch o := owner.(type) {
 	case *Username:
@@ -1078,18 +897,12 @@ func (pm *PolicyManager) userMatchesOwner(user types.UserView, owner Owner) bool
 
 // TagExists reports whether the given tag is defined in the policy.
 func (pm *PolicyManager) TagExists(tag string) bool {
-	if pm == nil {
+	if pm == nil || pm.pol == nil {
 		return false
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
-	// pm.pol is written by SetPolicy under pm.mu; reading it before the
-	// lock races with concurrent policy reloads.
-	if pm.pol == nil {
-		return false
-	}
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	_, exists := pm.pol.TagOwners[Tag(tag)]
 
@@ -1101,8 +914,8 @@ func (pm *PolicyManager) NodeCanApproveRoute(node types.NodeView, route netip.Pr
 		return false
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	// If the route to-be-approved is an exit route, then we need to check
 	// if the node is in allowed to approve it. This is treated differently
@@ -1149,29 +962,20 @@ func (pm *PolicyManager) NodeCanApproveRoute(node types.NodeView, route netip.Pr
 // ViaRoutesForPeer computes via grant effects for a viewer-peer pair.
 // For each via grant where the viewer matches the source, it checks whether the
 // peer advertises any of the grant's destination prefixes. If the peer has the
-// via tag, those prefixes go into [types.ViaRouteResult.Include]; otherwise
-// into [types.ViaRouteResult.Exclude].
+// via tag, those prefixes go into Include; otherwise into Exclude.
 //
-// Performance note: this holds [PolicyManager.mu] for its full duration. Hot
-// callers should memoise by (policy-hash, viewer-id) rather than invoking
-// this per-pair.
-//
-//nolint:gocyclo // three-pass via-grant resolution (match, primary election, regular-overlap)
+// Performance note: this holds pm.mu for its full duration. Hot
+// callers should memoise by (policy-hash, viewer-id) rather than
+// invoking this per-pair.
 func (pm *PolicyManager) ViaRoutesForPeer(viewer, peer types.NodeView) types.ViaRouteResult {
 	var result types.ViaRouteResult
 
-	if pm == nil {
+	if pm == nil || pm.pol == nil {
 		return result
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
-	// pm.pol is written by SetPolicy under pm.mu; reading it before the
-	// lock races with concurrent policy reloads.
-	if pm.pol == nil {
-		return result
-	}
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	// Self-steering doesn't apply.
 	if viewer.ID() == peer.ID() {
@@ -1183,13 +987,11 @@ func (pm *PolicyManager) ViaRoutesForPeer(viewer, peer types.NodeView) types.Via
 		grants = append(grants, aclToGrants(acl)...)
 	}
 
-	// Resolve each grant's sources against the viewer once, and each
-	// grant's destinations into a flat prefix list. The three passes
-	// below reuse both results instead of re-resolving per pass.
+	// Resolve each grant's sources against the viewer once. The three
+	// passes below reuse this result instead of calling src.Resolve
+	// per grant per pass.
 	viewerIPs := viewer.IPs()
 	viewerMatchesGrant := make([]bool, len(grants))
-	resolvedDstPrefixes := make([][]netip.Prefix, len(grants))
-	grantHasAutoGroupInternet := make([]bool, len(grants))
 
 	for i, grant := range grants {
 		for _, src := range grant.Sources {
@@ -1204,10 +1006,6 @@ func (pm *PolicyManager) ViaRoutesForPeer(viewer, peer types.NodeView) types.Via
 				break
 			}
 		}
-
-		resolvedDstPrefixes[i], grantHasAutoGroupInternet[i] = resolveViaDestinations(
-			pm.pol, pm.users, pm.nodes, grant.Destinations,
-		)
 	}
 
 	for i, grant := range grants {
@@ -1219,33 +1017,32 @@ func (pm *PolicyManager) ViaRoutesForPeer(viewer, peer types.NodeView) types.Via
 			continue
 		}
 
-		// Filter rules and [tailcfg.Node.AllowedIPs] are different layers.
-		// The filter rule carries the dst (the authorisation surface).
-		// [tailcfg.Node.AllowedIPs] carries the advertised route (the
-		// routing fact the viewer needs to pick this peer). This loop
-		// builds the AllowedIPs side, so it emits routes — not dst
-		// prefixes.
+		// Collect destination prefixes that the peer actually advertises.
 		peerSubnetRoutes := peer.SubnetRoutes()
 
 		var matchedPrefixes []netip.Prefix
 
-		for _, dstPrefix := range resolvedDstPrefixes[i] {
-			for _, route := range peerSubnetRoutes {
-				if dstPrefix.Overlaps(route) {
-					matchedPrefixes = append(matchedPrefixes, route)
+		for _, dst := range grant.Destinations {
+			switch d := dst.(type) {
+			case *Prefix:
+				dstPrefix := netip.Prefix(*d)
+				if slices.Contains(peerSubnetRoutes, dstPrefix) {
+					matchedPrefixes = append(matchedPrefixes, dstPrefix)
+				}
+			case *AutoGroup:
+				// Per-viewer steering for autogroup:internet: a peer
+				// advertising approved exit routes is the via-tagged
+				// node's analogue of "advertises the destination".
+				// The downstream Include/Exclude split below restricts
+				// alice to exit nodes carrying the via tag.
+				if d.Is(AutoGroupInternet) && peer.IsExitNode() {
+					matchedPrefixes = append(
+						matchedPrefixes, peer.ExitRoutes()...,
+					)
 				}
 			}
 		}
 
-		// Per-viewer steering for autogroup:internet: a peer advertising
-		// approved exit routes is the via-tagged node's analogue of
-		// "advertises the destination". The downstream Include/Exclude
-		// split below restricts the viewer to exit nodes carrying the
-		// via tag.
-		if grantHasAutoGroupInternet[i] && peer.IsExitNode() {
-			matchedPrefixes = append(matchedPrefixes, peer.ExitRoutes()...)
-		}
-
 		if len(matchedPrefixes) == 0 {
 			continue
 		}
@@ -1284,11 +1081,11 @@ func (pm *PolicyManager) ViaRoutesForPeer(viewer, peer types.NodeView) types.Via
 		// Include. The others move to Exclude. This mirrors HA
 		// primary election scoped to the via tag group.
 		//
-		// Unlike the global [tailcfg.Node.PrimaryRoutes] election
-		// (routes/primary.go), which picks one primary across ALL
-		// advertisers of a prefix, this election is scoped to the via tag.
-		// Two via grants with different tags (e.g., tag:ha-a vs tag:ha-b)
-		// each elect their own winner independently.
+		// Unlike the global PrimaryRoutes election (routes/primary.go),
+		// which picks one primary across ALL advertisers of a prefix,
+		// this election is scoped to the via tag. Two via grants with
+		// different tags (e.g., tag:ha-a vs tag:ha-b) each elect their
+		// own winner independently.
 		//
 		// Only process via grants where the viewer matches the source,
 		// otherwise grants for other viewer groups would incorrectly
@@ -1302,35 +1099,40 @@ func (pm *PolicyManager) ViaRoutesForPeer(viewer, peer types.NodeView) types.Via
 				continue
 			}
 
-			// Elect per matched route, not per dst — a peer can only
-			// be primary for a prefix it actually advertises, and one
-			// dst may cover multiple distinct routes.
-			for _, dstPrefix := range resolvedDstPrefixes[i] {
-				for _, included := range slices.Clone(result.Include) {
-					if !dstPrefix.Overlaps(included) {
-						continue
-					}
+			for _, dst := range grant.Destinations {
+				d, ok := dst.(*Prefix)
+				if !ok {
+					continue
+				}
 
-					var viaPrimaryID types.NodeID
+				dstPrefix := netip.Prefix(*d)
+				if !slices.Contains(result.Include, dstPrefix) {
+					continue
+				}
 
-					for _, viaTag := range grant.Via {
-						for _, node := range pm.nodes.All() {
-							if node.HasTag(string(viaTag)) &&
-								slices.Contains(node.SubnetRoutes(), included) {
-								if viaPrimaryID == 0 || node.ID() < viaPrimaryID {
-									viaPrimaryID = node.ID()
-								}
+				// Find the lowest-ID peer with this via tag that
+				// advertises this prefix — the via-group primary.
+				var viaPrimaryID types.NodeID
+
+				for _, viaTag := range grant.Via {
+					for _, node := range pm.nodes.All() {
+						if node.HasTag(string(viaTag)) &&
+							slices.Contains(node.SubnetRoutes(), dstPrefix) {
+							if viaPrimaryID == 0 || node.ID() < viaPrimaryID {
+								viaPrimaryID = node.ID()
 							}
 						}
 					}
+				}
 
-					if viaPrimaryID != 0 && peer.ID() != viaPrimaryID {
-						result.Include = slices.DeleteFunc(result.Include, func(p netip.Prefix) bool {
-							return p == included
-						})
-						if !slices.Contains(result.Exclude, included) {
-							result.Exclude = append(result.Exclude, included)
-						}
+				// If the current peer is not the via-group primary,
+				// demote the prefix from Include to Exclude.
+				if viaPrimaryID != 0 && peer.ID() != viaPrimaryID {
+					result.Include = slices.DeleteFunc(result.Include, func(p netip.Prefix) bool {
+						return p == dstPrefix
+					})
+					if !slices.Contains(result.Exclude, dstPrefix) {
+						result.Exclude = append(result.Exclude, dstPrefix)
 					}
 				}
 			}
@@ -1340,9 +1142,8 @@ func (pm *PolicyManager) ViaRoutesForPeer(viewer, peer types.NodeView) types.Via
 		// When a regular grant also covers a prefix that a via grant
 		// included, defer to global HA primary election (UsePrimary).
 		// When a regular grant covers a prefix that a via grant excluded
-		// (peer lacks via tag), remove the exclusion so
-		// [state.State.RoutesForPeer] can apply normal
-		// [policy.ReduceRoutes] + primary logic.
+		// (peer lacks via tag), remove the exclusion so RoutesForPeer
+		// can apply normal ReduceRoutes + primary logic.
 		for i, grant := range grants {
 			if len(grant.Via) > 0 {
 				continue
@@ -1352,19 +1153,21 @@ func (pm *PolicyManager) ViaRoutesForPeer(viewer, peer types.NodeView) types.Via
 				continue
 			}
 
-			// A non-via grant covering routes that a via grant included
-			// defers to global HA primary election. Match by overlap so
-			// a broader or narrower regular dst still catches the
-			// routes the via grant added to Include.
-			for _, dstPrefix := range resolvedDstPrefixes[i] {
-				for _, p := range result.Include {
-					if dstPrefix.Overlaps(p) &&
-						!slices.Contains(result.UsePrimary, p) {
-						result.UsePrimary = append(result.UsePrimary, p)
+			for _, dst := range grant.Destinations {
+				if d, ok := dst.(*Prefix); ok {
+					dstPrefix := netip.Prefix(*d)
+					if slices.Contains(result.Include, dstPrefix) &&
+						!slices.Contains(result.UsePrimary, dstPrefix) {
+						result.UsePrimary = append(result.UsePrimary, dstPrefix)
 					}
-				}
 
-				result.Exclude = slices.DeleteFunc(result.Exclude, dstPrefix.Overlaps)
+					// A regular grant overrides a via exclusion: the
+					// peer doesn't need the via tag if the viewer has
+					// direct (non-via) access to the prefix.
+					result.Exclude = slices.DeleteFunc(result.Exclude, func(p netip.Prefix) bool {
+						return p == dstPrefix
+					})
+				}
 			}
 		}
 	}
@@ -1381,11 +1184,6 @@ func (pm *PolicyManager) DebugString() string {
 		return "PolicyManager is not setup"
 	}
 
-	// pm.pol, filter, matchers, and the derived maps are all written
-	// under pm.mu by SetPolicy/SetUsers/SetNodes.
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
 	var sb strings.Builder
 
 	fmt.Fprintf(&sb, "PolicyManager (v%d):\n\n", pm.Version())
@@ -1459,25 +1257,27 @@ func (pm *PolicyManager) DebugString() string {
 // the entire cache.
 func (pm *PolicyManager) invalidateAutogroupSelfCache(oldNodes, newNodes views.Slice[types.NodeView]) {
 	// Build maps for efficient lookup
-	oldNodeMap := nodeIDViewMap(oldNodes)
-	newNodeMap := nodeIDViewMap(newNodes)
+	oldNodeMap := make(map[types.NodeID]types.NodeView)
+	for _, node := range oldNodes.All() {
+		oldNodeMap[node.ID()] = node
+	}
+
+	newNodeMap := make(map[types.NodeID]types.NodeView)
+	for _, node := range newNodes.All() {
+		newNodeMap[node.ID()] = node
+	}
 
 	// Track which users are affected by changes.
 	// Tagged nodes don't participate in autogroup:self (identity is tag-based),
 	// so we skip them when collecting affected users, except when tag status changes
 	// (which affects the user's device set).
-	//
-	// Ownership is keyed on TypedUserID (the UserID field), not the User
-	// association view: the NodeStore holds nodes by value with User as a
-	// *User pointer, and not every write path hydrates that association. A
-	// non-tagged node always has UserID set, so it is the reliable owner key.
-	affectedUsers := make(map[types.UserID]struct{})
+	affectedUsers := make(map[uint]struct{})
 
 	// Check for removed nodes (only non-tagged nodes affect autogroup:self)
 	for nodeID, oldNode := range oldNodeMap {
 		if _, exists := newNodeMap[nodeID]; !exists {
 			if !oldNode.IsTagged() {
-				affectedUsers[oldNode.TypedUserID()] = struct{}{}
+				affectedUsers[oldNode.User().ID()] = struct{}{}
 			}
 		}
 	}
@@ -1486,7 +1286,7 @@ func (pm *PolicyManager) invalidateAutogroupSelfCache(oldNodes, newNodes views.S
 	for nodeID, newNode := range newNodeMap {
 		if _, exists := oldNodeMap[nodeID]; !exists {
 			if !newNode.IsTagged() {
-				affectedUsers[newNode.TypedUserID()] = struct{}{}
+				affectedUsers[newNode.User().ID()] = struct{}{}
 			}
 		}
 	}
@@ -1499,10 +1299,10 @@ func (pm *PolicyManager) invalidateAutogroupSelfCache(oldNodes, newNodes views.S
 			if oldNode.IsTagged() != newNode.IsTagged() {
 				if !oldNode.IsTagged() {
 					// Was untagged, now tagged: user lost a device
-					affectedUsers[oldNode.TypedUserID()] = struct{}{}
+					affectedUsers[oldNode.User().ID()] = struct{}{}
 				} else {
 					// Was tagged, now untagged: user gained a device
-					affectedUsers[newNode.TypedUserID()] = struct{}{}
+					affectedUsers[newNode.User().ID()] = struct{}{}
 				}
 
 				continue
@@ -1514,14 +1314,25 @@ func (pm *PolicyManager) invalidateAutogroupSelfCache(oldNodes, newNodes views.S
 			}
 
 			// Check if user changed (both versions are non-tagged here)
-			if oldNode.TypedUserID() != newNode.TypedUserID() {
-				affectedUsers[oldNode.TypedUserID()] = struct{}{}
-				affectedUsers[newNode.TypedUserID()] = struct{}{}
+			if oldNode.User().ID() != newNode.User().ID() {
+				affectedUsers[oldNode.User().ID()] = struct{}{}
+				affectedUsers[newNode.User().ID()] = struct{}{}
 			}
 
-			// Check if IPs changed.
-			if !slices.Equal(oldNode.IPs(), newNode.IPs()) {
-				affectedUsers[newNode.TypedUserID()] = struct{}{}
+			// Check if IPs changed (simple check - could be more sophisticated)
+			oldIPs := oldNode.IPs()
+
+			newIPs := newNode.IPs()
+			if len(oldIPs) != len(newIPs) {
+				affectedUsers[newNode.User().ID()] = struct{}{}
+			} else {
+				// Check if any IPs are different
+				for i, oldIP := range oldIPs {
+					if i >= len(newIPs) || oldIP != newIPs[i] {
+						affectedUsers[newNode.User().ID()] = struct{}{}
+						break
+					}
+				}
 			}
 		}
 	}
@@ -1529,41 +1340,63 @@ func (pm *PolicyManager) invalidateAutogroupSelfCache(oldNodes, newNodes views.S
 	// Clear cache entries for affected users only.
 	// For autogroup:self, we need to clear all nodes belonging to affected users
 	// because autogroup:self rules depend on the entire user's device set.
-	pm.filterRulesMap.Range(func(nodeID types.NodeID, _ []tailcfg.FilterRule) bool {
-		// Find the user for this cached node using the already-built indexes.
-		node, ok := newNodeMap[nodeID]
-		if !ok {
-			node, ok = oldNodeMap[nodeID]
+	for nodeID := range pm.filterRulesMap {
+		// Find the user for this cached node
+		var nodeUserID uint
+
+		found := false
+
+		// Check in new nodes first
+		for _, node := range newNodes.All() {
+			if node.ID() == nodeID {
+				// Tagged nodes don't participate in autogroup:self,
+				// so their cache doesn't need user-based invalidation.
+				if node.IsTagged() {
+					found = true
+					break
+				}
+
+				nodeUserID = node.User().ID()
+				found = true
+
+				break
+			}
 		}
 
-		// Node not found in either old or new list, clear it.
-		if !ok {
-			pm.filterRulesMap.Delete(nodeID)
-			pm.matchersForNodeMap.Delete(nodeID)
+		// If not found in new nodes, check old nodes
+		if !found {
+			for _, node := range oldNodes.All() {
+				if node.ID() == nodeID {
+					if node.IsTagged() {
+						found = true
+						break
+					}
 
-			return true
+					nodeUserID = node.User().ID()
+					found = true
+
+					break
+				}
+			}
 		}
 
-		// Tagged nodes don't participate in autogroup:self, so their cache
-		// doesn't need user-based invalidation; leave nodeUserID at zero.
-		var nodeUserID types.UserID
-		if !node.IsTagged() {
-			nodeUserID = node.TypedUserID()
+		// If we found the user and they're affected, clear this cache entry
+		if found {
+			if _, affected := affectedUsers[nodeUserID]; affected {
+				delete(pm.filterRulesMap, nodeID)
+				delete(pm.matchersForNodeMap, nodeID)
+			}
+		} else {
+			// Node not found in either old or new list, clear it
+			delete(pm.filterRulesMap, nodeID)
+			delete(pm.matchersForNodeMap, nodeID)
 		}
-
-		// If the owning user is affected, clear this cache entry.
-		if _, affected := affectedUsers[nodeUserID]; affected {
-			pm.filterRulesMap.Delete(nodeID)
-			pm.matchersForNodeMap.Delete(nodeID)
-		}
-
-		return true
-	})
+	}
 
 	if len(affectedUsers) > 0 {
 		log.Debug().
 			Int("affected_users", len(affectedUsers)).
-			Int("remaining_cache_entries", pm.filterRulesMap.Size()).
+			Int("remaining_cache_entries", len(pm.filterRulesMap)).
 			Msg("Selectively cleared autogroup:self cache for affected users")
 	}
 }
@@ -1583,10 +1416,17 @@ func (pm *PolicyManager) invalidateNodeCache(newNodes views.Slice[types.NodeView
 }
 
 // invalidateGlobalPolicyCache invalidates only nodes whose properties affecting
-// [policyutil.ReduceFilterRules] changed. For global policies, each node's filter is independent.
+// ReduceFilterRules changed. For global policies, each node's filter is independent.
 func (pm *PolicyManager) invalidateGlobalPolicyCache(newNodes views.Slice[types.NodeView]) {
-	oldNodeMap := nodeIDViewMap(pm.nodes)
-	newNodeMap := nodeIDViewMap(newNodes)
+	oldNodeMap := make(map[types.NodeID]types.NodeView)
+	for _, node := range pm.nodes.All() {
+		oldNodeMap[node.ID()] = node
+	}
+
+	newNodeMap := make(map[types.NodeID]types.NodeView)
+	for _, node := range newNodes.All() {
+		newNodeMap[node.ID()] = node
+	}
 
 	// Invalidate nodes whose properties changed
 	for nodeID, newNode := range newNodeMap {
@@ -1597,35 +1437,36 @@ func (pm *PolicyManager) invalidateGlobalPolicyCache(newNodes views.Slice[types.
 		}
 
 		if newNode.HasNetworkChanges(oldNode) {
-			pm.filterRulesMap.Delete(nodeID)
-			pm.matchersForNodeMap.Delete(nodeID)
+			delete(pm.filterRulesMap, nodeID)
+			delete(pm.matchersForNodeMap, nodeID)
 		}
 	}
 
 	// Remove deleted nodes from cache
-	pm.filterRulesMap.Range(func(nodeID types.NodeID, _ []tailcfg.FilterRule) bool {
+	for nodeID := range pm.filterRulesMap {
 		if _, exists := newNodeMap[nodeID]; !exists {
-			pm.filterRulesMap.Delete(nodeID)
+			delete(pm.filterRulesMap, nodeID)
 		}
+	}
 
-		return true
-	})
-
-	pm.matchersForNodeMap.Range(func(nodeID types.NodeID, _ []matcher.Match) bool {
+	for nodeID := range pm.matchersForNodeMap {
 		if _, exists := newNodeMap[nodeID]; !exists {
-			pm.matchersForNodeMap.Delete(nodeID)
+			delete(pm.matchersForNodeMap, nodeID)
 		}
-
-		return true
-	})
+	}
 }
 
-// flattenTags resolves nested tag-owner references. Cycles
-// (tag:a -> tag:b -> tag:a, or tag:a -> tag:a) drop the cycle-causing
-// edge and contribute no addresses; non-cycle owners on the cycled tags
-// still resolve. Undefined-tag references remain a hard error.
+// flattenTags flattens the TagOwners by resolving nested tags. Cycles
+// in the ownership graph (tag:a -> tag:b -> tag:a, or tag:a -> tag:a)
+// are tolerated to match SaaS: the cycle-causing edge is dropped, the
+// remaining owners propagate, and the cycle itself contributes no
+// addresses. Non-cycle owners on the cycled tags still resolve.
+// Undefined-tag references remain a hard error.
 func flattenTags(tagOwners TagOwners, tag Tag, visiting map[Tag]bool, chain []Tag) (Owners, error) {
 	if visiting[tag] {
+		// Cycle: this tag is already on the resolution stack. SaaS
+		// drops the edge instead of failing, so we return an empty
+		// owner set and let the caller continue with any siblings.
 		return nil, nil
 	}
 
@@ -1657,8 +1498,8 @@ func flattenTags(tagOwners TagOwners, tag Tag, visiting map[Tag]bool, chain []Ta
 	return result, nil
 }
 
-// flattenTagOwners flattens all [TagOwners] by resolving nested tags and detecting cycles.
-// It will return a new [TagOwners] map where all the [Tag] types have been resolved to their underlying [Owners].
+// flattenTagOwners flattens all TagOwners by resolving nested tags and detecting cycles.
+// It will return a new TagOwners map where all the Tag types have been resolved to their underlying Owners.
 func flattenTagOwners(tagOwners TagOwners) (TagOwners, error) {
 	ret := make(TagOwners)
 
@@ -1679,9 +1520,9 @@ func flattenTagOwners(tagOwners TagOwners) (TagOwners, error) {
 	return ret, nil
 }
 
-// resolveTagOwners resolves the [TagOwners] to a map of [Tag] to [netipx.IPSet].
-// The resulting map can be used to quickly look up the IPSet for a given [Tag].
-// It is intended for internal use in a [PolicyManager].
+// resolveTagOwners resolves the TagOwners to a map of Tag to netipx.IPSet.
+// The resulting map can be used to quickly look up the IPSet for a given Tag.
+// It is intended for internal use in a PolicyManager.
 func resolveTagOwners(p *Policy, users types.Users, nodes views.Slice[types.NodeView]) (map[Tag]*netipx.IPSet, error) {
 	if p == nil {
 		return make(map[Tag]*netipx.IPSet), nil
@@ -1732,127 +1573,3 @@ func resolveTagOwners(p *Policy, users types.Users, nodes views.Slice[types.Node
 
 	return ret, nil
 }
-
-// refreshNodeAttrsLocked recompiles the per-node nodeAttrs CapMap and
-// appends the IDs whose CapMap differs from the previous snapshot
-// (including newly-targeted nodes and nodes that lost all attrs) to
-// pm.nodeAttrsChanged. Append, not overwrite: a concurrent
-// SetUsers/SetNodes between SetPolicy and a NodesWithChangedCapMap
-// drain cannot clobber the policy-reload diff.
-//
-// Caller must hold pm.mu.
-func (pm *PolicyManager) refreshNodeAttrsLocked() error {
-	// Fast path for the common steady-state shape: tailnet has no
-	// nodeAttrs entries and never had any. Skip the compile + per-node
-	// hash walk entirely. As soon as the operator adds a nodeAttrs
-	// entry pm.nodeAttrsHashes becomes non-empty and the gate opens.
-	if pm.pol != nil &&
-		len(pm.pol.NodeAttrs) == 0 &&
-		!pm.pol.RandomizeClientPort &&
-		len(pm.nodeAttrsHashes) == 0 {
-		return nil
-	}
-
-	newMap, err := pm.pol.compileNodeAttrs(pm.users, pm.nodes)
-	if err != nil {
-		return fmt.Errorf("compiling nodeAttrs: %w", err)
-	}
-
-	newHashes := make(map[types.NodeID]deephash.Sum, len(newMap))
-	for id, capMap := range newMap {
-		newHashes[id] = deephash.Hash(&capMap)
-	}
-
-	// Walk the union of old and new node IDs and emit the delta.
-	seen := make(map[types.NodeID]struct{}, len(newHashes)+len(pm.nodeAttrsHashes))
-
-	var changed []types.NodeID
-
-	for id, h := range newHashes {
-		seen[id] = struct{}{}
-		if pm.nodeAttrsHashes[id] != h {
-			changed = append(changed, id)
-		}
-	}
-
-	for id := range pm.nodeAttrsHashes {
-		if _, ok := seen[id]; ok {
-			continue
-		}
-		// Node lost all nodeAttrs since the last update.
-		changed = append(changed, id)
-	}
-
-	pm.nodeAttrsMap = newMap
-	pm.nodeAttrsHashes = newHashes
-	pm.nodeAttrsChanged = append(pm.nodeAttrsChanged, changed...)
-
-	return nil
-}
-
-// NodeCapMap returns the policy-derived CapMap for the given node, or
-// nil when the node has no nodeAttrs entries that target it. The
-// returned map is a defensive clone — caller mutations cannot reach
-// the manager-owned cache.
-func (pm *PolicyManager) NodeCapMap(id types.NodeID) tailcfg.NodeCapMap {
-	if pm == nil {
-		return nil
-	}
-
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
-	src := pm.nodeAttrsMap[id]
-	if len(src) == 0 {
-		return nil
-	}
-
-	out := make(tailcfg.NodeCapMap, len(src))
-	maps.Copy(out, src)
-
-	return out
-}
-
-// NodeCapMaps returns a snapshot of the per-node policy CapMap. The
-// mapper calls this once per request to amortise lock acquisitions
-// over a peer-loop instead of taking the lock per peer. The returned
-// map is a fresh container; the inner [tailcfg.NodeCapMap] values are
-// shared with the manager and must be treated as read-only.
-func (pm *PolicyManager) NodeCapMaps() map[types.NodeID]tailcfg.NodeCapMap {
-	if pm == nil {
-		return nil
-	}
-
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
-
-	out := make(map[types.NodeID]tailcfg.NodeCapMap, len(pm.nodeAttrsMap))
-	maps.Copy(out, pm.nodeAttrsMap)
-
-	return out
-}
-
-// NodesWithChangedCapMap returns the IDs of nodes whose nodeAttrs
-// CapMap shifted across one or more [PolicyManager.updateLocked] calls
-// since the last drain. The buffer drains on return. The mapper calls
-// this once per [state.State.ReloadPolicy] to decide which nodes need
-// a [change.SelfUpdate].
-//
-// [PolicyManager.refreshNodeAttrsLocked] APPENDS to the buffer; the drain
-// returns the union of every change since the previous read. A concurrent
-// [PolicyManager.SetUsers]/[PolicyManager.SetNodes] between
-// [PolicyManager.SetPolicy] and a drain cannot silently lose the
-// policy-reload diff.
-func (pm *PolicyManager) NodesWithChangedCapMap() []types.NodeID {
-	if pm == nil {
-		return nil
-	}
-
-	pm.mu.Lock()
-	defer pm.mu.Unlock()
-
-	out := pm.nodeAttrsChanged
-	pm.nodeAttrsChanged = nil
-
-	return out
-}
diff --git a/hscontrol/policy/v2/policy_concurrency_test.go b/hscontrol/policy/v2/policy_concurrency_test.go
deleted file mode 100644
index b4b759f59..000000000
--- a/hscontrol/policy/v2/policy_concurrency_test.go
+++ /dev/null
@@ -1,103 +0,0 @@
-package v2
-
-import (
-	"fmt"
-	"sync"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"gorm.io/gorm"
-)
-
-// TestPolicyManagerConcurrentReads is the correctness guard for the #3346 fix:
-// PolicyManager read methods take a shared RLock and populate their per-node
-// caches (filterRulesMap, matchersForNodeMap) concurrently. This test hammers
-// those reads from many goroutines while a writer mutates the node set, so the
-// race detector catches any unsafe access to the shared caches or policy state.
-//
-// It uses an autogroup:self policy so reads take the per-node filter slow path
-// — the same path that made #3346's reconnect storm expensive — which is where
-// the lazy caches are written.
-func TestPolicyManagerConcurrentReads(t *testing.T) {
-	users := types.Users{
-		{Model: gorm.Model{ID: 1}, Name: "user1", Email: "user1@headscale.net"},
-		{Model: gorm.Model{ID: 2}, Name: "user2", Email: "user2@headscale.net"},
-		{Model: gorm.Model{ID: 3}, Name: "user3", Email: "user3@headscale.net"},
-	}
-
-	policy := `{
-		"acls": [
-			{
-				"action": "accept",
-				"src": ["autogroup:member"],
-				"dst": ["autogroup:self:*"]
-			}
-		]
-	}`
-
-	const nodeCount = 60
-
-	nodes := make(types.Nodes, 0, nodeCount)
-	for i := range nodeCount {
-		n := node(
-			fmt.Sprintf("node%d", i),
-			fmt.Sprintf("100.64.0.%d", i+1),
-			fmt.Sprintf("fd7a:115c:a1e0::%d", i+1),
-			users[i%len(users)],
-		)
-		n.ID = types.NodeID(i + 1) //nolint:gosec // safe in test
-		nodes = append(nodes, n)
-	}
-
-	pm, err := NewPolicyManager([]byte(policy), users, nodes.ViewSlice())
-	require.NoError(t, err)
-
-	const (
-		readers        = 16
-		iterations     = 60
-		mutatorReloads = 30
-	)
-
-	var wg sync.WaitGroup
-
-	// Concurrent readers exercise every converted RLock read path, including
-	// the two lazily populated per-node caches. Assertions inside the
-	// goroutines use assert (not require) so a failure does not call
-	// t.FailNow from a non-test goroutine.
-	for r := range readers {
-		wg.Go(func() {
-			for i := range iterations {
-				nv := nodes[(r+i)%len(nodes)].View()
-
-				rules, err := pm.FilterForNode(nv)
-				assert.NoError(t, err) //nolint:testifylint // assert (not require) is correct off the test goroutine
-				assert.NotNil(t, rules)
-
-				_, err = pm.MatchersForNode(nv)
-				assert.NoError(t, err) //nolint:testifylint // assert (not require) is correct off the test goroutine
-
-				pm.Filter()
-				pm.NodeCapMap(nv.ID())
-
-				// BuildPeerMap is the O(n^2) writer-side read; exercise it
-				// under RLock too, but not every iteration.
-				if i%8 == 0 {
-					assert.NotNil(t, pm.BuildPeerMap(nodes.ViewSlice()))
-				}
-			}
-		})
-	}
-
-	// A writer repeatedly re-sets the node set, invalidating and racing the
-	// caches the readers are populating.
-	wg.Go(func() {
-		for range mutatorReloads {
-			_, err := pm.SetNodes(nodes.ViewSlice())
-			assert.NoError(t, err) //nolint:testifylint // assert (not require) is correct off the test goroutine
-		}
-	})
-
-	wg.Wait()
-}
diff --git a/hscontrol/policy/v2/policy_test.go b/hscontrol/policy/v2/policy_test.go
index 6a0d7ada9..a0c3cdb36 100644
--- a/hscontrol/policy/v2/policy_test.go
+++ b/hscontrol/policy/v2/policy_test.go
@@ -8,7 +8,6 @@ import (
 	"github.com/google/go-cmp/cmp"
 	"github.com/juanfont/headscale/hscontrol/policy/matcher"
 	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/puzpuzpuz/xsync/v4"
 	"github.com/stretchr/testify/require"
 	"gorm.io/gorm"
 	"tailscale.com/net/tsaddr"
@@ -123,7 +122,7 @@ func TestInvalidateAutogroupSelfCache(t *testing.T) {
 		require.NoError(t, err)
 	}
 
-	require.Equal(t, len(initialNodes), pm.filterRulesMap.Size())
+	require.Len(t, pm.filterRulesMap, len(initialNodes))
 
 	tests := []struct {
 		name            string
@@ -208,154 +207,25 @@ func TestInvalidateAutogroupSelfCache(t *testing.T) {
 				}
 			}
 
-			pm.filterRulesMap.Clear()
-
+			pm.filterRulesMap = make(map[types.NodeID][]tailcfg.FilterRule)
 			for _, n := range initialNodes {
 				_, err := pm.FilterForNode(n.View())
 				require.NoError(t, err)
 			}
 
-			initialCacheSize := pm.filterRulesMap.Size()
+			initialCacheSize := len(pm.filterRulesMap)
 			require.Equal(t, len(initialNodes), initialCacheSize)
 
 			pm.invalidateAutogroupSelfCache(initialNodes.ViewSlice(), tt.newNodes.ViewSlice())
 
 			// Verify the expected number of cache entries were cleared
-			finalCacheSize := pm.filterRulesMap.Size()
+			finalCacheSize := len(pm.filterRulesMap)
 			clearedEntries := initialCacheSize - finalCacheSize
 			require.Equal(t, tt.expectedCleared, clearedEntries, tt.description)
 		})
 	}
 }
 
-// TestSetNodesAutogroupSelfUnhydratedUser reproduces the panic seen on
-// /machine/map when an autogroup:self policy is active and a non-tagged
-// node reaches the policy manager with its UserID set but the User
-// association left unhydrated (User pointer nil). The NodeStore stores
-// nodes by value with User as a *User; not every write path hydrates the
-// association, so the autogroup:self cache invalidation must derive the
-// owning user from UserID, not from the User view.
-func TestSetNodesAutogroupSelfUnhydratedUser(t *testing.T) {
-	users := types.Users{
-		{Model: gorm.Model{ID: 1}, Name: "user1", Email: "user1@headscale.net"},
-		{Model: gorm.Model{ID: 2}, Name: "user2", Email: "user2@headscale.net"},
-	}
-
-	policy := `{
-		"acls": [
-			{
-				"action": "accept",
-				"src": ["autogroup:member"],
-				"dst": ["autogroup:self:*"]
-			}
-		]
-	}`
-
-	// unhydratedNode mirrors a NodeStore snapshot entry whose UserID is
-	// set (so it is unambiguously user-owned, not tagged) but whose User
-	// association was never loaded.
-	unhydratedNode := func(name, ipv4, ipv6 string, userID uint) *types.Node {
-		return &types.Node{
-			Hostname: name,
-			IPv4:     ap(ipv4),
-			IPv6:     ap(ipv6),
-			UserID:   new(userID),
-			User:     nil,
-		}
-	}
-
-	initialNodes := types.Nodes{
-		node("user1-node1", "100.64.0.1", "fd7a:115c:a1e0::1", users[0]),
-		node("user2-node1", "100.64.0.2", "fd7a:115c:a1e0::2", users[1]),
-	}
-	for i, n := range initialNodes {
-		n.ID = types.NodeID(i + 1) //nolint:gosec // safe conversion in test
-	}
-
-	pm, err := NewPolicyManager([]byte(policy), users, initialNodes.ViewSlice())
-	require.NoError(t, err)
-
-	require.False(t, initialNodes[0].IsTagged(), "node must be user-owned for autogroup:self")
-
-	// Simulate a node restarting tailscaled: the same node is pushed back
-	// into the policy manager, but the snapshot version has no hydrated
-	// User association. This is the exact shape that crashed beta.1.
-	updatedNodes := types.Nodes{
-		unhydratedNode("user1-node1", "100.64.0.1", "fd7a:115c:a1e0::1", users[0].ID),
-		node("user2-node1", "100.64.0.2", "fd7a:115c:a1e0::2", users[1]),
-	}
-	for i, n := range updatedNodes {
-		n.ID = types.NodeID(i + 1) //nolint:gosec // safe conversion in test
-	}
-
-	require.NotPanics(t, func() {
-		_, err = pm.SetNodes(updatedNodes.ViewSlice())
-	}, "SetNodes must not panic when a non-tagged node has an unhydrated User")
-	require.NoError(t, err)
-}
-
-// TestSSHCheckParamsUnhydratedUserNoPanic proves that SSHCheckParams does
-// not panic when a non-tagged node reaches the policy manager with its
-// UserID set but its User association unhydrated (User pointer nil) — the
-// same NodeStore shape that crashed /machine/map in commit 171fd7a3. The
-// autogroup:self SSH branch dereferences node.User().ID() guarded only by
-// !IsTagged(), not by User().Valid(); SSHCheckParams is reached from the
-// Noise SSH-check path (noise.go), so a tailnet client triggers the panic
-// and crashes the server (DoS) whenever an SSH check rule with an
-// autogroup:self destination is active.
-func TestSSHCheckParamsUnhydratedUserNoPanic(t *testing.T) {
-	users := types.Users{
-		{Model: gorm.Model{ID: 1}, Name: "user1", Email: "user1@headscale.net"},
-	}
-
-	policy := `{
-		"ssh": [
-			{
-				"action": "check",
-				"src":    ["user1@headscale.net"],
-				"dst":    ["autogroup:self"],
-				"users":  ["root"]
-			}
-		]
-	}`
-
-	initialNodes := types.Nodes{
-		node("user1-src", "100.64.0.1", "fd7a:115c:a1e0::1", users[0]),
-		node("user1-dst", "100.64.0.2", "fd7a:115c:a1e0::2", users[0]),
-	}
-	for i, n := range initialNodes {
-		n.ID = types.NodeID(i + 1) //nolint:gosec // safe conversion in test
-	}
-
-	pm, err := NewPolicyManager([]byte(policy), users, initialNodes.ViewSlice())
-	require.NoError(t, err)
-
-	// Simulate a node restarting tailscaled: the destination node is pushed
-	// back into the policy manager with no hydrated User association (UserID
-	// set, User pointer nil), the exact shape that crashed beta.1.
-	unhydratedDst := &types.Node{
-		ID:       2,
-		Hostname: "user1-dst",
-		IPv4:     ap("100.64.0.2"),
-		IPv6:     ap("fd7a:115c:a1e0::2"),
-		UserID:   new(users[0].ID),
-		User:     nil,
-	}
-	require.False(t, unhydratedDst.IsTagged(), "dst node must be user-owned for autogroup:self")
-
-	updatedNodes := types.Nodes{
-		node("user1-src", "100.64.0.1", "fd7a:115c:a1e0::1", users[0]),
-		unhydratedDst,
-	}
-	updatedNodes[0].ID = 1
-	_, err = pm.SetNodes(updatedNodes.ViewSlice())
-	require.NoError(t, err)
-
-	require.NotPanics(t, func() {
-		pm.SSHCheckParams(types.NodeID(1), types.NodeID(2))
-	}, "SSHCheckParams must not panic when a non-tagged node has an unhydrated User")
-}
-
 // TestInvalidateGlobalPolicyCache tests the cache invalidation logic for global policies.
 func TestInvalidateGlobalPolicyCache(t *testing.T) {
 	mustIPPtr := func(s string) *netip.Addr {
@@ -500,19 +370,15 @@ func TestInvalidateGlobalPolicyCache(t *testing.T) {
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
 			pm := &PolicyManager{
-				nodes:              tt.oldNodes.ViewSlice(),
-				filterRulesMap:     xsync.NewMap[types.NodeID, []tailcfg.FilterRule](),
-				matchersForNodeMap: xsync.NewMap[types.NodeID, []matcher.Match](),
-			}
-			for id, rules := range tt.initialCache {
-				pm.filterRulesMap.Store(id, rules)
+				nodes:          tt.oldNodes.ViewSlice(),
+				filterRulesMap: tt.initialCache,
 			}
 
 			pm.invalidateGlobalPolicyCache(tt.newNodes.ViewSlice())
 
 			// Verify cache state
 			for nodeID, shouldExist := range tt.expectedCacheAfter {
-				_, exists := pm.filterRulesMap.Load(nodeID)
+				_, exists := pm.filterRulesMap[nodeID]
 				require.Equal(t, shouldExist, exists, "node %d cache existence mismatch", nodeID)
 			}
 		})
@@ -869,11 +735,10 @@ func TestTagPropagationToPeerMap(t *testing.T) {
 	require.NoError(t, err)
 	require.NotEmpty(t, matchersForUser2, "MatchersForNode should return non-empty matchers (at least self-access rule)")
 
-	// Test [policy.ReduceNodes] logic with the updated nodes and matchers
-	// This is what [mapper.MapResponseBuilder.buildTailPeers] does - it takes peers from
-	// [state.State.ListPeers] (which might include user1) and filters them using
-	// [policy.ReduceNodes] with the updated matchers
-	// Inline the [policy.ReduceNodes] logic to avoid import cycle
+	// Test ReduceNodes logic with the updated nodes and matchers
+	// This is what buildTailPeers does - it takes peers from ListPeers (which might include user1)
+	// and filters them using ReduceNodes with the updated matchers
+	// Inline the ReduceNodes logic to avoid import cycle
 	user2View := user2Node.View()
 	user1UpdatedView := user1NodeUpdated.View()
 
@@ -1948,147 +1813,6 @@ func TestViaRoutesForPeer(t *testing.T) {
 			"client should NOT be able to access 10.0.0.0/24 via matchers alone; "+
 				"state.RoutesForPeer adds via routes after ReduceRoutes to fix this")
 	})
-
-	t.Run("broader_dst_includes_narrower_advertised_route", func(t *testing.T) {
-		t.Parallel()
-
-		nodes := types.Nodes{
-			{
-				ID:       1,
-				Hostname: "viewer",
-				IPv4:     ap("100.64.0.1"),
-				User:     new(users[0]),
-				UserID:   new(users[0].ID),
-				Hostinfo: &tailcfg.Hostinfo{},
-			},
-			{
-				ID:       2,
-				Hostname: "router",
-				IPv4:     ap("100.64.0.2"),
-				User:     new(users[0]),
-				UserID:   new(users[0].ID),
-				Tags:     []string{"tag:router"},
-				Hostinfo: &tailcfg.Hostinfo{
-					RoutableIPs: []netip.Prefix{mp("10.33.5.0/24")},
-				},
-				ApprovedRoutes: []netip.Prefix{mp("10.33.5.0/24")},
-			},
-		}
-
-		pol := `{
-			"tagOwners": {
-				"tag:router": ["user1@"]
-			},
-			"grants": [{
-				"src": ["user1@"],
-				"dst": ["10.0.0.0/8"],
-				"ip": ["*"],
-				"via": ["tag:router"]
-			}]
-		}`
-
-		pm, err := NewPolicyManager([]byte(pol), users, nodes.ViewSlice())
-		require.NoError(t, err)
-
-		result := pm.ViaRoutesForPeer(nodes[0].View(), nodes[1].View())
-		require.Equal(t, []netip.Prefix{mp("10.33.5.0/24")}, result.Include,
-			"Include must hold the advertised route /24, not the broader grant dst /8")
-		require.Empty(t, result.Exclude)
-	})
-
-	t.Run("narrower_dst_includes_advertised_route", func(t *testing.T) {
-		t.Parallel()
-
-		nodes := types.Nodes{
-			{
-				ID:       1,
-				Hostname: "viewer",
-				IPv4:     ap("100.64.0.1"),
-				User:     new(users[0]),
-				UserID:   new(users[0].ID),
-				Hostinfo: &tailcfg.Hostinfo{},
-			},
-			{
-				ID:       2,
-				Hostname: "router",
-				IPv4:     ap("100.64.0.2"),
-				User:     new(users[0]),
-				UserID:   new(users[0].ID),
-				Tags:     []string{"tag:router"},
-				Hostinfo: &tailcfg.Hostinfo{
-					RoutableIPs: []netip.Prefix{mp("10.33.0.0/16")},
-				},
-				ApprovedRoutes: []netip.Prefix{mp("10.33.0.0/16")},
-			},
-		}
-
-		pol := `{
-			"tagOwners": {
-				"tag:router": ["user1@"]
-			},
-			"grants": [{
-				"src": ["user1@"],
-				"dst": ["10.33.5.0/24"],
-				"ip": ["*"],
-				"via": ["tag:router"]
-			}]
-		}`
-
-		pm, err := NewPolicyManager([]byte(pol), users, nodes.ViewSlice())
-		require.NoError(t, err)
-
-		result := pm.ViaRoutesForPeer(nodes[0].View(), nodes[1].View())
-		require.Equal(t, []netip.Prefix{mp("10.33.0.0/16")}, result.Include,
-			"Include must hold the advertised route /16 that covers the narrower grant dst /24")
-		require.Empty(t, result.Exclude)
-	})
-
-	t.Run("disjoint_dst_emits_nothing", func(t *testing.T) {
-		t.Parallel()
-
-		nodes := types.Nodes{
-			{
-				ID:       1,
-				Hostname: "viewer",
-				IPv4:     ap("100.64.0.1"),
-				User:     new(users[0]),
-				UserID:   new(users[0].ID),
-				Hostinfo: &tailcfg.Hostinfo{},
-			},
-			{
-				ID:       2,
-				Hostname: "router",
-				IPv4:     ap("100.64.0.2"),
-				User:     new(users[0]),
-				UserID:   new(users[0].ID),
-				Tags:     []string{"tag:router"},
-				Hostinfo: &tailcfg.Hostinfo{
-					RoutableIPs: []netip.Prefix{mp("10.33.0.0/16")},
-				},
-				ApprovedRoutes: []netip.Prefix{mp("10.33.0.0/16")},
-			},
-		}
-
-		pol := `{
-			"tagOwners": {
-				"tag:router": ["user1@"]
-			},
-			"grants": [{
-				"src": ["user1@"],
-				"dst": ["192.168.0.0/16"],
-				"ip": ["*"],
-				"via": ["tag:router"]
-			}]
-		}`
-
-		pm, err := NewPolicyManager([]byte(pol), users, nodes.ViewSlice())
-		require.NoError(t, err)
-
-		result := pm.ViaRoutesForPeer(nodes[0].View(), nodes[1].View())
-		require.Empty(t, result.Include,
-			"disjoint dst must produce nothing — the via gate requires advertised-route overlap")
-		require.Empty(t, result.Exclude)
-	})
 }
 
 // TestBuildPeerMap_AutogroupInternetMakesExitNodeVisible reproduces
@@ -2096,8 +1820,8 @@ func TestViaRoutesForPeer(t *testing.T) {
 // `autogroup:internet` must keep the exit node visible to the source
 // in BuildPeerMap so the Tailscale client surfaces it in
 // `tailscale exit-node list`. Authoritative SaaS captures
-// (routes-b17/b18, 2026-04-28) confirm SaaS includes the exit node
-// in the source's Peers with 0.0.0.0/0 and ::/0 in AllowedIPs.
+// (tscap routes-b17/b18, 2026-04-28) confirm SaaS includes the exit
+// node in the source's Peers with 0.0.0.0/0 and ::/0 in AllowedIPs.
 func TestBuildPeerMap_AutogroupInternetMakesExitNodeVisible(t *testing.T) {
 	t.Parallel()
 
@@ -2476,75 +2200,3 @@ func TestPeerRelayGrantMakesRelayVisible(t *testing.T) {
 		})
 	}
 }
-
-func TestTagOwnedByTags(t *testing.T) {
-	// tag:leaf is owned by tag:mid, which is owned by tag:root: a tag-to-tag
-	// delegation chain, the shape an operator token uses to mint narrower keys.
-	const policy = `{
-		"tagOwners": {
-			"tag:root": [],
-			"tag:mid":  ["tag:root"],
-			"tag:leaf": ["tag:mid"],
-			"tag:lone": []
-		},
-		"acls": [{"action": "accept", "src": ["*"], "dst": ["*:*"]}]
-	}`
-
-	pm, err := NewPolicyManager([]byte(policy), nil, types.Nodes{}.ViewSlice())
-	require.NoError(t, err)
-
-	tests := []struct {
-		name      string
-		tag       string
-		ownerTags []string
-		want      bool
-	}{
-		{
-			name:      "directly held tag needs no policy",
-			tag:       "tag:lone",
-			ownerTags: []string{"tag:lone"},
-			want:      true,
-		},
-		{
-			name:      "one-hop owned-by",
-			tag:       "tag:mid",
-			ownerTags: []string{"tag:root"},
-			want:      true,
-		},
-		{
-			name:      "transitive chain root owns leaf",
-			tag:       "tag:leaf",
-			ownerTags: []string{"tag:root"},
-			want:      true,
-		},
-		{
-			name:      "owning one link does not grant a sibling",
-			tag:       "tag:lone",
-			ownerTags: []string{"tag:root"},
-			want:      false,
-		},
-		{
-			name:      "unowned tag denied",
-			tag:       "tag:leaf",
-			ownerTags: []string{"tag:unrelated"},
-			want:      false,
-		},
-		{
-			name:      "empty owners deny a delegated tag",
-			tag:       "tag:leaf",
-			ownerTags: nil,
-			want:      false,
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			require.Equal(t, tt.want, pm.TagOwnedByTags(tt.tag, tt.ownerTags))
-		})
-	}
-
-	t.Run("nil policy manager denies", func(t *testing.T) {
-		var nilPM *PolicyManager
-		require.False(t, nilPM.TagOwnedByTags("tag:leaf", []string{"tag:root"}))
-	})
-}
diff --git a/hscontrol/policy/v2/sshtest.go b/hscontrol/policy/v2/sshtest.go
index 89d339c76..e98c45ce8 100644
--- a/hscontrol/policy/v2/sshtest.go
+++ b/hscontrol/policy/v2/sshtest.go
@@ -2,7 +2,6 @@ package v2
 
 import (
 	"fmt"
-	"maps"
 	"net/netip"
 	"slices"
 	"strings"
@@ -13,17 +12,34 @@ import (
 	"tailscale.com/types/views"
 )
 
-// sshTests assertions evaluate on user-initiated writes; boot reload
-// skips them so a stale reference does not block startup. Each entry
-// names a src and one or more dst, and uses:
+// The sshTests block is Tailscale's parallel of the ACL `tests` block for
+// SSH-shaped rules: each entry asserts that a source identity reaching out
+// to one or more destination hosts can SSH in as the named login users —
+// or, conversely, must be refused. The block runs at the same user-write
+// boundary as `tests` (SetPolicy, `headscale policy check`, file-mode
+// reload after a change). Boot-time reload skips evaluation so a stored
+// policy referencing a now-deleted entity does not block startup.
 //
-//   - accept: every listed user reaches every dst via an accept- or
-//     check-action rule.
-//   - deny: no listed user reaches any dst.
-//   - check: every listed user reaches every dst via a check-action
-//     rule specifically (accept-only matches fail the assertion).
+// Three assertion kinds:
+//
+//   - accept[user]: from src, every dst must be reachable as user via an
+//     action:accept OR action:check rule. Check counts as reachable for
+//     the accept assertion because both actions resolve to "the user is
+//     allowed to start a session" at the wire layer.
+//   - deny[user]: from src, no dst is reachable as user. A test passes
+//     when no rule allows the user at all (or every matching rule's
+//     SSHUsers map blocks the user).
+//   - check[user]: from src, every dst must be reachable as user via a
+//     rule whose action is specifically check (HoldAndDelegate is the
+//     wire signal — see filter.go sshCheck). An accept-only match
+//     fails the check assertion: SaaS keeps the distinction so policy
+//     authors can pin sensitive logins to check rules.
 
-// SSHPolicyTestResult is the outcome of a single [SSHPolicyTest].
+// SSHPolicyTestResult is the outcome of a single SSHPolicyTest.
+//
+// Each map is keyed by login user and records the per-dst breakdown so
+// the rendered error tells the operator which (src, user, dst) triple
+// went the wrong way.
 type SSHPolicyTestResult struct {
 	Src    string   `json:"src"`
 	Passed bool     `json:"passed"`
@@ -44,6 +60,11 @@ type SSHPolicyTestResults struct {
 }
 
 // Errors renders the per-test failure breakdown joined by newlines.
+//
+// Tailscale SaaS returns only the literal "test(s) failed" body for
+// either assertion class. We keep the per-test detail because operators
+// invoking SetPolicy from the CLI or file-mode reload have no separate
+// audit endpoint, so the rendered body is the only signal they get.
 func (r SSHPolicyTestResults) Errors() string {
 	if r.AllPassed {
 		return ""
@@ -92,11 +113,22 @@ func (r SSHPolicyTestResults) Errors() string {
 	return strings.Join(lines, "\n")
 }
 
+// sortedUsers returns the keys of m sorted by user name so error
+// rendering is deterministic across runs.
 func sortedUsers(m map[string][]string) []string {
-	return slices.Sorted(maps.Keys(m))
+	keys := make([]string, 0, len(m))
+	for k := range m {
+		keys = append(keys, k)
+	}
+
+	slices.Sort(keys)
+
+	return keys
 }
 
-// displayUser shows an empty username as `""` rather than blank.
+// displayUser formats a login user for the rendered error. An empty
+// string is shown as `""` so the operator can see that the assertion
+// referenced an empty username (which is itself a failure case).
 func displayUser(u string) string {
 	if u == "" {
 		return `""`
@@ -105,8 +137,9 @@ func displayUser(u string) string {
 	return u
 }
 
-// checkFailReason annotates a check-fail with whether the user reached
-// the dst via an accept rule or did not reach at all.
+// checkFailReason annotates a check-fail line with whether the user
+// reached the dst via an accept rule (so the operator knows to flip the
+// rule to action:check) or did not reach the dst at all.
 func checkFailReason(res SSHPolicyTestResult, user, dst string) string {
 	if slices.Contains(res.AcceptOK[user], dst) {
 		return "ALLOWED via accept"
@@ -115,23 +148,31 @@ func checkFailReason(res SSHPolicyTestResult, user, dst string) string {
 	return "DENIED"
 }
 
-// RunSSHTests evaluates the live policy's sshTests block and wraps any
-// failure in [errSSHPolicyTestsFailed].
+// RunSSHTests evaluates the policy's sshTests block against the live
+// users and nodes and returns a wrapped error when any assertion fails.
+// Callers that need the per-test breakdown can call runSSHPolicyTests
+// directly with their own compile cache.
 func (pm *PolicyManager) RunSSHTests() error {
 	if pm == nil || pm.pol == nil || len(pm.pol.SSHTests) == 0 {
 		return nil
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	cache := make(map[types.NodeID]*tailcfg.SSHPolicy)
 	results := runSSHPolicyTests(pm.pol, pm.users, pm.nodes, cache)
 
-	return wrapTestResult(errSSHPolicyTestsFailed, results.AllPassed, results.Errors)
+	if results.AllPassed {
+		return nil
+	}
+
+	return fmt.Errorf("%w:\n%s", errSSHPolicyTestsFailed, results.Errors())
 }
 
-// evaluateSSHTests runs the block against pol without mutating live state.
+// evaluateSSHTests is the user-write sandbox: run sshTests against pol
+// + current users/nodes without mutating any live state. It mirrors
+// evaluateTests for the ACL block.
 func evaluateSSHTests(
 	pol *Policy,
 	users []types.User,
@@ -144,11 +185,16 @@ func evaluateSSHTests(
 	cache := make(map[types.NodeID]*tailcfg.SSHPolicy)
 	results := runSSHPolicyTests(pol, users, nodes, cache)
 
-	return wrapTestResult(errSSHPolicyTestsFailed, results.AllPassed, results.Errors)
+	if results.AllPassed {
+		return nil
+	}
+
+	return fmt.Errorf("%w:\n%s", errSSHPolicyTestsFailed, results.Errors())
 }
 
-// runSSHPolicyTests evaluates every sshTests entry. The cache is keyed
-// by dst [types.NodeID] so repeat destinations only compile once per pass.
+// runSSHPolicyTests evaluates every sshTests entry against pol. The
+// cache is keyed by destination node ID and reused across entries so a
+// 10-entry block hitting 4 dst nodes pays 4 compiles, not 40.
 func runSSHPolicyTests(
 	pol *Policy,
 	users []types.User,
@@ -172,8 +218,11 @@ func runSSHPolicyTests(
 	return results
 }
 
-// runSSHPolicyTest evaluates one entry: resolve src → resolve dst →
-// walk accept/deny/check arrays against each dst's compiled SSH policy.
+// runSSHPolicyTest evaluates one SSHPolicyTest entry against pol.
+//
+// Order of operations: resolve src → resolve dst nodes → reject empty
+// assertion blocks → walk accept/deny/check arrays, asking the per-dst
+// compiled SSH policy whether the user can reach the dst.
 func runSSHPolicyTest(
 	test SSHPolicyTest,
 	pol *Policy,
@@ -208,7 +257,10 @@ func runSSHPolicyTest(
 		return res
 	}
 
-	// An entry with no assertion arrays would silently pass.
+	// Tailscale SaaS treats an entry with no accept/deny/check arrays
+	// as "nothing to assert", which is reported as a failure. Catching
+	// it here keeps the engine output mirroring SaaS for parse-accepted
+	// inputs.
 	if len(test.Accept) == 0 && len(test.Deny) == 0 && len(test.Check) == 0 {
 		res.Passed = false
 		res.Errors = append(res.Errors,
@@ -226,7 +278,10 @@ func runSSHPolicyTest(
 		return res
 	}
 
-	// A dst resolving to zero nodes would silently pass.
+	// SaaS treats a dst alias that resolves to no nodes as a failure
+	// when the entry has anything to assert. Without this branch, the
+	// per-assertion loops below run zero iterations and the test
+	// passes silently — wrong shape, missed regression.
 	for _, dst := range emptyDsts {
 		res.Passed = false
 		res.Errors = append(res.Errors,
@@ -237,26 +292,35 @@ func runSSHPolicyTest(
 		return res
 	}
 
-	for _, g := range []struct {
-		users []SSHUser
-		kind  sshAssertion
-	}{
-		{test.Accept, assertAccept},
-		{test.Deny, assertDeny},
-		{test.Check, assertCheck},
-	} {
-		for _, user := range g.users {
-			evaluateAssertion(
-				pol, users, nodes, cache,
-				srcAddrs, dstNodes, user.String(),
-				g.kind, &res,
-			)
-		}
+	for _, user := range test.Accept {
+		evaluateAssertion(
+			pol, users, nodes, cache,
+			srcAddrs, dstNodes, user.String(),
+			assertAccept, &res,
+		)
+	}
+
+	for _, user := range test.Deny {
+		evaluateAssertion(
+			pol, users, nodes, cache,
+			srcAddrs, dstNodes, user.String(),
+			assertDeny, &res,
+		)
+	}
+
+	for _, user := range test.Check {
+		evaluateAssertion(
+			pol, users, nodes, cache,
+			srcAddrs, dstNodes, user.String(),
+			assertCheck, &res,
+		)
 	}
 
 	return res
 }
 
+// sshAssertion is the kind of assertion being evaluated for a single
+// (src, dst, user) triple.
 type sshAssertion int
 
 const (
@@ -265,9 +329,19 @@ const (
 	assertCheck
 )
 
-// evaluateAssertion walks every (srcAddr, dstNode) pair for one user
-// and records the outcome. Empty username fails — SSH login users
-// cannot be empty even when parse accepted it.
+// evaluateAssertion walks every (srcAddr, dstNode) pair for one user and
+// records the outcome in res. The semantics:
+//
+//   - accept passes iff every (srcAddr, dstNode) reaches the dst via at
+//     least one rule whose action is accept or check.
+//   - deny passes iff no (srcAddr, dstNode) is reachable as user.
+//   - check passes iff every (srcAddr, dstNode) reaches the dst via at
+//     least one check rule (HoldAndDelegate set). An accept-only match
+//     fails the check assertion — SaaS keeps the two categories
+//     distinct.
+//
+// Empty username is parse-accepted but reports as a failure here: SSH
+// login users cannot be empty, so the assertion can never be satisfied.
 func evaluateAssertion(
 	pol *Policy,
 	users []types.User,
@@ -293,6 +367,8 @@ dstLoop:
 
 		dstLabel := dst.Hostname()
 
+		// acceptHit covers "any matching accept-or-check rule";
+		// checkHit restricts to check-action matches only.
 		acceptHit := false
 		checkHit := false
 
@@ -306,8 +382,9 @@ dstLoop:
 				checkHit = true
 			}
 
-			// All src IPs must agree; one counter-example fails
-			// the whole (user, dst) pair.
+			// accept and deny require ALL src IPs to reach (or all
+			// to be blocked). A single counter-example fails the
+			// assertion.
 			switch kind {
 			case assertAccept:
 				if !a {
@@ -355,7 +432,7 @@ dstLoop:
 	}
 }
 
-// appendUserDst appends dst to m[user], allocating m on first use.
+// appendUserDst appends dst to m[user], lazily allocating m.
 func appendUserDst(m map[string][]string, user, dst string) map[string][]string {
 	if m == nil {
 		m = make(map[string][]string)
@@ -366,9 +443,11 @@ func appendUserDst(m map[string][]string, user, dst string) map[string][]string
 	return m
 }
 
-// resolveSSHTestSource returns the src's principal addresses and, for
-// user-shaped sources, the user ID (so autogroup:self can scope to it).
-// [Tag], [Host], and IP sources return userID 0.
+// resolveSSHTestSource resolves the typed src alias into a list of
+// netip.Addr (one per principal address the SSH compiler would emit
+// for the same source). For user-shaped sources, srcUserID returns the
+// resolved user's ID so autogroup:self destinations can scope to the
+// same user. Returns ID 0 when the source is a tag, host, or IP.
 func resolveSSHTestSource(
 	src Alias,
 	pol *Policy,
@@ -388,7 +467,10 @@ func resolveSSHTestSource(
 		return nil, 0, nil
 	}
 
-	out := slices.Collect(addrs.Iter())
+	out := make([]netip.Addr, 0)
+	for a := range addrs.Iter() {
+		out = append(out, a)
+	}
 
 	var userID uint
 
@@ -403,11 +485,14 @@ func resolveSSHTestSource(
 	return out, userID, nil
 }
 
-// resolveSSHTestDestNodes maps each dst alias to its destination
-// [types.NodeView]s. autogroup:self needs special handling: it cannot
-// resolve without per-node context, so it walks the node set keyed on
-// src's owning user. Other aliases resolve to an [netipx.IPSet] and match
-// via [types.NodeView.InIPSet].
+// resolveSSHTestDestNodes resolves every dst alias in the test entry
+// to its destination NodeViews. autogroup:self requires special
+// handling because it cannot resolve in the general (non-per-node)
+// context — see AutoGroup.resolve in types.go.
+//
+// For non-self aliases, the resolved IPSet is matched against each
+// node's IPs via InIPSet (the same primitive the SSH compiler uses to
+// decide whether a node is a destination of a given rule).
 func resolveSSHTestDestNodes(
 	dsts SSHTestDestinations,
 	pol *Policy,
@@ -427,8 +512,12 @@ func resolveSSHTestDestNodes(
 		matched := false
 
 		if ag, ok := alias.(*AutoGroup); ok && ag.Is(AutoGroupSelf) {
-			// autogroup:self resolves to non-tagged nodes owned by
-			// the same user as src; tagged/IP sources have no user.
+			// autogroup:self → destinations are the non-tagged
+			// nodes owned by the same user as src. A tagged or
+			// IP-only src has no user identity, so the dst set
+			// is empty and the caller surfaces it as a failure
+			// (matches SaaS, which treats a no-node dst as a
+			// failing assertion).
 			if srcUserID == 0 {
 				emptyDsts = append(emptyDsts, dstLabel)
 
@@ -476,6 +565,9 @@ func resolveSSHTestDestNodes(
 			continue
 		}
 
+		// Compile to an IPSet for the InIPSet primitive. ResolvedAddresses
+		// already wraps one; expose it via the IPSet builder by walking
+		// the resolved prefixes.
 		set, err := prefixesToIPSet(ips.Prefixes())
 		if err != nil {
 			return nil, nil, fmt.Errorf("building IPSet for %q: %w", dstLabel, err)
@@ -504,8 +596,10 @@ func resolveSSHTestDestNodes(
 	return out, emptyDsts, nil
 }
 
-// prefixesToIPSet builds the [netipx.IPSet] that [types.NodeView.InIPSet]
-// expects on the node side.
+// prefixesToIPSet builds a netipx.IPSet from a slice of prefixes. The
+// SSH compiler does the same dance via netipx.IPSetBuilder; we mirror
+// the shape so InIPSet (the node-side primitive) behaves identically
+// for test evaluation and live compilation.
 func prefixesToIPSet(prefixes []netip.Prefix) (*netipx.IPSet, error) {
 	var b netipx.IPSetBuilder
 
@@ -516,9 +610,10 @@ func prefixesToIPSet(prefixes []netip.Prefix) (*netipx.IPSet, error) {
 	return b.IPSet()
 }
 
-// compiledSSHPolicy returns the per-node compiled [tailcfg.SSHPolicy], caching
-// on miss. baseURL is empty because reachability only checks for the
-// presence of [tailcfg.SSHAction.HoldAndDelegate], not its value.
+// compiledSSHPolicy returns the per-node compiled SSH policy, populating
+// cache on miss. baseURL is empty because the engine only needs the
+// "is this rule a check rule" signal (HoldAndDelegate non-empty), not
+// the actual URL contents.
 func compiledSSHPolicy(
 	pol *Policy,
 	users []types.User,
@@ -540,10 +635,15 @@ func compiledSSHPolicy(
 	return sshPol, nil
 }
 
-// reachability reports whether srcAddr can log in as user via:
+// reachability walks dstPolicy.Rules and reports whether srcAddr is
+// allowed to log in as user via:
 //
-//   - any matching rule (acceptHit, satisfies accept assertions)
-//   - a check-action rule (checkHit, satisfies check assertions)
+//   - any rule (first return) — satisfies accept assertions
+//   - a check rule specifically (second return) — satisfies check assertions
+//
+// A nil policy is treated as "no rule matches", which is the right
+// answer for both accept (DENIED) and check (DENIED) and for deny
+// (PASS, because the deny assertion inverts).
 func reachability(
 	dstPolicy *tailcfg.SSHPolicy,
 	srcAddr netip.Addr,
@@ -574,8 +674,8 @@ func reachability(
 			checkHit = true
 		}
 
-		// Early-out only when both bits are set: a rule satisfying
-		// accept does not always satisfy check.
+		// Early-out only when both bits are set; a rule that
+		// satisfies one assertion may not satisfy the other.
 		if acceptHit && checkHit {
 			return acceptHit, checkHit
 		}
@@ -584,8 +684,9 @@ func reachability(
 	return acceptHit, checkHit
 }
 
-// principalContainsAddr reports whether any principal's [tailcfg.SSHPrincipal.NodeIP]
-// matches srcAddr exactly (the SSH compiler emits one principal per source IP).
+// principalContainsAddr reports whether any principal has a NodeIP
+// matching srcAddr. The SSH compiler emits one principal per source
+// IP, so an exact-match comparison is correct.
 func principalContainsAddr(
 	principals []*tailcfg.SSHPrincipal,
 	srcAddr netip.Addr,
@@ -612,13 +713,19 @@ func principalContainsAddr(
 	return false
 }
 
-// sshUserMapAllows reports whether [SSHUsers] permits user. The [SSHUsers]
-// wire shape (see filter.go compileSSHPolicy):
+// sshUserMapAllows reports whether SSHUsers permits user. The wire
+// shape (see filter.go compileSSHPolicy):
 //
-//   - SSHUsers["root"] == "root" allows root; == "" disallows it.
-//   - SSHUsers["*"] == "=" is the wildcard fallback for non-root users
-//     (set when the rule lists autogroup:nonroot).
-//   - SSHUsers[<literal>] == <literal> for every named user.
+//   - SSHUsers["root"] == "root" when the rule's users list contains
+//     "root", and == "" otherwise (the empty mapping means "root NOT
+//     allowed", per Tailscale's SSH evaluator).
+//   - SSHUsers["*"] == "=" when the rule's users list contains
+//     autogroup:nonroot — wildcard fallback for any non-root user.
+//   - SSHUsers[<literal>] == <literal> for every named SSH user in
+//     the rule.
+//
+// An empty user input (which the parse layer accepts but treats as
+// a failure case) cannot match any map entry.
 func sshUserMapAllows(m map[string]string, user string) bool {
 	if user == "" {
 		return false
diff --git a/hscontrol/policy/v2/sshtester_compat_test.go b/hscontrol/policy/v2/sshtester_compat_test.go
index 568de951f..df7773cca 100644
--- a/hscontrol/policy/v2/sshtester_compat_test.go
+++ b/hscontrol/policy/v2/sshtester_compat_test.go
@@ -1,8 +1,21 @@
-// Replay golden HuJSON captures under testdata/sshtest_results/*.hujson:
-// the 200 path requires headscale's evaluateSSHTests to pass; the
-// non-200 path requires headscale to reject the same input with the
-// captured error body as a substring. Divergences are listed in
-// knownSSHTesterDivergences with the engine gap each represents.
+// Compatibility tests for the policy `sshTests` block, replaying captures
+// recorded against a real Tailscale SaaS tailnet. The runner mirrors the
+// pattern in policytester_compat_test.go: a single Glob over a testdata
+// directory, one t.Run per file. Each capture is one of:
+//
+//   - APIResponseCode != 200 — the policy was rejected by SaaS, the
+//     captured Message is the body the user saw, and headscale must
+//     reject the same input with an error string that contains the same
+//     body (substring match, allowing wrapping like "test(s) failed:\n…").
+//   - APIResponseCode == 200 — SaaS accepted the policy (its sshTests
+//     block passed); headscale's evaluateSSHTests must also pass.
+//
+// Captures live in testdata/sshtest_results/*.hujson. Scenarios in
+// knownSSHTesterDivergences are skipped with their tracking note —
+// these are real Tailscale ↔ headscale divergences that need engine-level
+// fixes in follow-up PRs.
+//
+// Source format: github.com/juanfont/headscale/hscontrol/types/testcapture
 
 package v2
 
@@ -15,10 +28,20 @@ import (
 	"github.com/stretchr/testify/require"
 )
 
-// knownSSHTesterDivergences names the engine gap for each capture where
-// headscale and upstream disagree.
+// knownSSHTesterDivergences tracks scenarios where headscale and SaaS
+// disagree on whether a policy is accepted. Each entry should describe
+// the engine area a follow-up PR needs to touch.
 var knownSSHTesterDivergences = map[string]string{
-	"sshtest-malformed-dst-bare-ipv6": "bare-IPv6 sshTests dst: upstream parse-accepts then engine-rejects; headscale accepts (IPv4 mirror passes both sides)",
+	// SaaS parse-accepts a bare IPv6 sshTests dst but engine-rejects
+	// the same input with "test(s) failed" while the matching IPv4
+	// scenario engine-passes. The two captures share the same topology
+	// and the same policy shape, so the asymmetry is in the SaaS
+	// sshTests evaluator's IPv6 handling, not in any rule the user
+	// wrote. Headscale's evaluator resolves both literals to the
+	// tagged node that carries them and the assertion passes — a
+	// follow-up needs to either reproduce the SaaS-side IPv6 quirk or
+	// confirm this is a SaaS bug we will not match.
+	"sshtest-malformed-dst-bare-ipv6": "engine: SaaS rejects bare IPv6 sshTests dst; headscale accepts (IPv4 mirror passes both sides)",
 }
 
 func TestSSHTesterCompat(t *testing.T) {
@@ -44,8 +67,12 @@ func TestSSHTesterCompat(t *testing.T) {
 				t.Skip(reason)
 			}
 
-			// Each capture pins its own topology IPs; build nodes
-			// from the capture so host-alias dsts resolve.
+			// Per-capture nodes mean the topology IPs (which a
+			// policy `hosts` mapping references by literal IP)
+			// resolve to real nodes in the test fixture. Without
+			// this the static fixture's IPs do not overlap with
+			// the captures and host-alias dsts resolve to no
+			// nodes — that path is now a load-bearing failure.
 			nodes := buildGrantsNodesFromCapture(users, c)
 
 			policyJSON := []byte(c.Input.FullPolicy)
diff --git a/hscontrol/policy/v2/tailnet_state_caps.go b/hscontrol/policy/v2/tailnet_state_caps.go
deleted file mode 100644
index 9ee11bf60..000000000
--- a/hscontrol/policy/v2/tailnet_state_caps.go
+++ /dev/null
@@ -1,199 +0,0 @@
-package v2
-
-// This file enumerates [tailcfg.NodeCapability] values that the
-// Tailscale-hosted control plane emits where headscale has no
-// equivalent concept yet. The compat test in
-// tailscale_nodeattrs_compat_test.go builds the self-view CapMap via
-// [types.Node.TailNode] -- the same call the mapper makes -- and
-// strips these from BOTH sides before [cmp.Diff]; every other cap is
-// compared in full as it lands on the wire.
-//
-// Each entry documents its purpose (cross-referenced to Tailscale
-// source), why headscale does not emit it, and a tracking issue where
-// one exists.
-
-import (
-	"maps"
-	"slices"
-	"strings"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"tailscale.com/tailcfg"
-)
-
-// PeerCapMap returns the subset of peerSelfCaps the Tailscale client
-// reads from the peer view (rather than the self view) given the
-// peer's state. Returns nil when no peer-consumed cap applies, matching
-// the empirical wire shape where [tailcfg.Node.CapMap] is omitted for
-// most peers.
-//
-// Caps the client reads from the peer view rather than the self view
-// (suggest-exit-node, dns-subdomain-resolve — see
-// ipn/ipnlocal/local.go:7534 and node_backend.go:745) are emitted only
-// when the peer satisfies the cap's emission condition. This function
-// encodes those conditions; the mapper calls it from
-// [mapper.MapResponseBuilder.buildTailPeers] and the compat test calls
-// it to compute the expected per-peer wire shape.
-func PeerCapMap(peer types.NodeView, peerSelfCaps tailcfg.NodeCapMap) tailcfg.NodeCapMap {
-	if len(peerSelfCaps) == 0 {
-		return nil
-	}
-
-	var out tailcfg.NodeCapMap
-
-	// suggest-exit-node — surfaced on Peer.CapMap when the peer
-	// advertises exit routes AND those routes are approved. Client
-	// reads at ipn/ipnlocal/local.go:7534. Approval gating prevents
-	// the suggestion from following an advertised-but-not-yet-trusted
-	// node.
-	if peer.IsExitNode() {
-		if v, ok := peerSelfCaps[tailcfg.NodeAttrSuggestExitNode]; ok {
-			if out == nil {
-				out = tailcfg.NodeCapMap{}
-			}
-
-			out[tailcfg.NodeAttrSuggestExitNode] = v
-		}
-	}
-
-	return out
-}
-
-// unmodelledTailnetStateCaps lists [tailcfg.NodeCapability] values
-// stripped on both sides of the compat diff. Order:
-//
-//  1. Caps gated on a user-role concept headscale does not model.
-//  2. Caps gated on a tailnet feature headscale does not implement.
-//  3. Caps that are tailnet-state metadata (display name, key
-//     duration, etc.) where the values are not derivable from
-//     headscale config in a way that round-trips through the
-//     anonymized capture.
-//  4. Caps that are internal magicsock or embedded-SSH tuning with no
-//     headscale-side equivalent.
-var unmodelledTailnetStateCaps = []tailcfg.NodeCapability{
-	// --- 1. User-role gated ---
-
-	// [tailcfg.CapabilityAdmin]: the hosted control plane stamps this
-	// on nodes whose owning user has the admin role; tagged nodes
-	// inherit from a tagOwner with the role. Headscale has no
-	// user-role model — [types.Node.TailNode] emits it as part of
-	// the always-on baseline. Stripping on both sides keeps the diff
-	// from failing on every user-owned non-admin node in a capture.
-	// Long-term fix is autogroup:admin support.
-	tailcfg.CapabilityAdmin,
-
-	// [tailcfg.CapabilityOwner]: same shape as is-admin, conditional
-	// on the "owner" role rather than admin. Headscale does not emit
-	// this cap at all. autogroup:owner support is tracked under
-	// NO_USER_ROLES — see the compat skip list.
-	tailcfg.CapabilityOwner,
-
-	// --- 2. Feature not implemented ---
-
-	// [tailcfg.CapabilityTailnetLock]: tailnet-lock signs node keys
-	// with a tailnet-wide signing key so peers can detect silent
-	// re-keying by the control plane. Client reads at
-	// ipn/ipnlocal/local.go:1752 (b.capTailnetLock). Headscale has no
-	// tailnet-lock implementation.
-	tailcfg.CapabilityTailnetLock,
-
-	// [tailcfg.NodeAttrServiceHost]: marks a node as approved to host
-	// VIP services (Tailscale Services). Client reads via
-	// UnmarshalNodeCapViewJSON at ipn/ipnlocal/local.go:2704.
-	// Headscale does not implement Tailscale Services.
-	tailcfg.NodeAttrServiceHost,
-
-	// [tailcfg.NodeAttrStoreAppCRoutes]: tells an app-connector node
-	// to persist learned routes across restarts. Client reads via
-	// controlknobs:148. Headscale does not implement app connectors.
-	tailcfg.NodeAttrStoreAppCRoutes,
-
-	// [tailcfg.CapabilityWarnFunnelNoHTTPS]: deprecated in Tailscale
-	// 2023-08-09. Should not appear in fresh captures — listed
-	// defensively in case a stale tailnet still emits it.
-	tailcfg.CapabilityWarnFunnelNoHTTPS,
-
-	// --- 3. Tailnet-state metadata not derivable from headscale config ---
-
-	// [tailcfg.NodeAttrTailnetDisplayName]: tailnet display name
-	// surfaced in the client UI. The hosted control plane emits the
-	// tailnet admin's email; headscale would have to invent a value
-	// from cfg.Domain() that does not round-trip through the
-	// anonymized capture string. Skip rather than diverge on a value
-	// with no real-world equivalent.
-	tailcfg.NodeAttrTailnetDisplayName,
-
-	// [tailcfg.NodeAttrMaxKeyDuration]: tailnet-wide max key duration
-	// value. Headscale has cfg.Node.Expiry but does not surface it
-	// as a cap today; the hosted control plane emits this only when
-	// a non-default value is configured.
-	tailcfg.NodeAttrMaxKeyDuration,
-
-	// [tailcfg.NodeAttrNativeIPV4]: peer-consumed cap conditional on
-	// tailnet ipv4 reachability state. Out of scope for the current
-	// peer-cap adoption (only suggest-exit-node is wired in this
-	// PR).
-	tailcfg.NodeAttrNativeIPV4,
-
-	// --- 4. Internal tuning, no headscale equivalent ---
-
-	// [tailcfg.NodeAttrProbeUDPLifetime]: tunes magicsock's UDP
-	// path-lifetime probe behavior. Internal performance knob; not
-	// policy-driven. Client reads via controlknobs:147.
-	tailcfg.NodeAttrProbeUDPLifetime,
-
-	// [tailcfg.NodeAttrSSHBehaviorV1]: configures the embedded SSH
-	// server (no su, in-process SFTP). Internal tuning; the embedded
-	// server picks Tailscale-vendored defaults without the cap.
-	tailcfg.NodeAttrSSHBehaviorV1,
-
-	// [tailcfg.NodeAttrSSHEnvironmentVariables]: gates SendEnv
-	// forwarding in the embedded SSH server. Internal; default chosen
-	// by the server.
-	tailcfg.NodeAttrSSHEnvironmentVariables,
-}
-
-// strippedCapPrefixes lists URL/string prefixes for parameterized or
-// pattern-named caps that should be stripped alongside
-// [unmodelledTailnetStateCaps].
-var strippedCapPrefixes = []string{
-	// "https://tailscale.com/cap/funnel-ports?…": parameterized cap
-	// (e.g. "?ports=80,443") issued when funnel is configured.
-	// Funnel is not supported.
-	"https://tailscale.com/cap/funnel-ports?",
-}
-
-// stripUnmodelledTailnetStateCaps returns a copy of cm with
-// [unmodelledTailnetStateCaps] and [strippedCapPrefixes] removed. Used
-// by the compat test on both sides before [cmp.Diff].
-func stripUnmodelledTailnetStateCaps(cm tailcfg.NodeCapMap) tailcfg.NodeCapMap {
-	if len(cm) == 0 {
-		return nil
-	}
-
-	out := maps.Clone(cm)
-	maps.DeleteFunc(out, func(k tailcfg.NodeCapability, _ []tailcfg.RawMessage) bool {
-		return isUnmodelledTailnetStateCap(k)
-	})
-
-	if len(out) == 0 {
-		return nil
-	}
-
-	return out
-}
-
-func isUnmodelledTailnetStateCap(k tailcfg.NodeCapability) bool {
-	if slices.Contains(unmodelledTailnetStateCaps, k) {
-		return true
-	}
-
-	s := string(k)
-	for _, p := range strippedCapPrefixes {
-		if strings.HasPrefix(s, p) {
-			return true
-		}
-	}
-
-	return false
-}
diff --git a/hscontrol/policy/v2/tailscale_acl_data_compat_test.go b/hscontrol/policy/v2/tailscale_acl_data_compat_test.go
index ecf212947..18983ab9d 100644
--- a/hscontrol/policy/v2/tailscale_acl_data_compat_test.go
+++ b/hscontrol/policy/v2/tailscale_acl_data_compat_test.go
@@ -1,7 +1,7 @@
 // This file implements a data-driven test runner for ACL compatibility tests.
 // It loads HuJSON golden files from testdata/acl_results/acl-*.hujson and
 // compares headscale's ACL engine output against the expected packet filter
-// rules captured from a Tailscale-hosted control plane by an external capture tool.
+// rules captured from Tailscale SaaS by the tscap tool.
 //
 // Each file is a testcapture.Capture containing:
 //   - The full policy that was POSTed to the Tailscale SaaS API
@@ -40,8 +40,8 @@ func ptrAddr(s string) *netip.Addr {
 }
 
 // setupACLCompatUsers returns the 3 test users for ACL compatibility tests.
-// Names and emails match the anonymized identifiers the capture tool writes into the
-// capture files users get
+// Names and emails match the anonymized identifiers tscap writes into the
+// capture files (see github.com/kradalby/tscap/anonymize): users get
 // norse-god names and nodes get original-151 pokémon names.
 func setupACLCompatUsers() types.Users {
 	return types.Users{
@@ -51,6 +51,60 @@ func setupACLCompatUsers() types.Users {
 	}
 }
 
+// setupACLCompatNodes returns the 8 test nodes for ACL compatibility tests.
+// Node GivenNames match tscap's anonymized pokémon naming.
+func setupACLCompatNodes(users types.Users) types.Nodes {
+	return types.Nodes{
+		{
+			ID: 1, GivenName: "bulbasaur",
+			User: &users[0], UserID: &users[0].ID,
+			IPv4: ptrAddr("100.90.199.68"), IPv6: ptrAddr("fd7a:115c:a1e0::2d01:c747"),
+			Hostinfo: &tailcfg.Hostinfo{},
+		},
+		{
+			ID: 2, GivenName: "ivysaur",
+			User: &users[1], UserID: &users[1].ID,
+			IPv4: ptrAddr("100.110.121.96"), IPv6: ptrAddr("fd7a:115c:a1e0::1737:7960"),
+			Hostinfo: &tailcfg.Hostinfo{},
+		},
+		{
+			ID: 3, GivenName: "venusaur",
+			User: &users[2], UserID: &users[2].ID,
+			IPv4: ptrAddr("100.103.90.82"), IPv6: ptrAddr("fd7a:115c:a1e0::9e37:5a52"),
+			Hostinfo: &tailcfg.Hostinfo{},
+		},
+		{
+			ID: 4, GivenName: "beedrill",
+			IPv4: ptrAddr("100.108.74.26"), IPv6: ptrAddr("fd7a:115c:a1e0::b901:4a87"),
+			Tags: []string{"tag:server"}, Hostinfo: &tailcfg.Hostinfo{},
+		},
+		{
+			ID: 5, GivenName: "kakuna",
+			IPv4: ptrAddr("100.103.8.15"), IPv6: ptrAddr("fd7a:115c:a1e0::5b37:80f"),
+			Tags: []string{"tag:prod"}, Hostinfo: &tailcfg.Hostinfo{},
+		},
+		{
+			ID: 6, GivenName: "weedle",
+			IPv4: ptrAddr("100.83.200.69"), IPv6: ptrAddr("fd7a:115c:a1e0::c537:c845"),
+			Tags: []string{"tag:client"}, Hostinfo: &tailcfg.Hostinfo{},
+		},
+		{
+			ID: 7, GivenName: "squirtle",
+			IPv4: ptrAddr("100.92.142.61"), IPv6: ptrAddr("fd7a:115c:a1e0::3e37:8e3d"),
+			Tags: []string{"tag:router"},
+			Hostinfo: &tailcfg.Hostinfo{
+				RoutableIPs: []netip.Prefix{netip.MustParsePrefix("10.33.0.0/16")},
+			},
+			ApprovedRoutes: []netip.Prefix{netip.MustParsePrefix("10.33.0.0/16")},
+		},
+		{
+			ID: 8, GivenName: "charmander",
+			IPv4: ptrAddr("100.85.66.106"), IPv6: ptrAddr("fd7a:115c:a1e0::7c37:426a"),
+			Tags: []string{"tag:exit"}, Hostinfo: &tailcfg.Hostinfo{},
+		},
+	}
+}
+
 // findNodeByGivenName finds a node by its GivenName field.
 func findNodeByGivenName(nodes types.Nodes, name string) *types.Node {
 	for _, n := range nodes {
@@ -237,7 +291,7 @@ func TestACLCompat(t *testing.T) {
 			}
 
 			// Build nodes per-scenario from this file's topology.
-			// the capture tool uses clean-slate mode, so each scenario has
+			// tscap uses clean-slate mode, so each scenario has
 			// different node IPs; using a shared topology would
 			// cause IP mismatches in filter rule comparisons.
 			users, nodes := buildACLUsersAndNodes(t, tf)
@@ -357,11 +411,18 @@ func testACLSuccess(
 			}
 
 			// Compile headscale filter rules for this node
-			compiledRules := pol.compileFilterRulesForNode(
+			compiledRules, err := pol.compileFilterRulesForNode(
 				users,
 				node.View(),
 				nodes.ViewSlice(),
 			)
+			require.NoError(
+				t,
+				err,
+				"%s/%s: failed to compile filter rules",
+				tf.TestID,
+				nodeName,
+			)
 
 			gotRules := policyutil.ReduceFilterRules(
 				node.View(),
diff --git a/hscontrol/policy/v2/tailscale_grants_compat_test.go b/hscontrol/policy/v2/tailscale_grants_compat_test.go
index b23b14ffc..7a994aabb 100644
--- a/hscontrol/policy/v2/tailscale_grants_compat_test.go
+++ b/hscontrol/policy/v2/tailscale_grants_compat_test.go
@@ -1,6 +1,6 @@
 // This file implements a data-driven test runner for grant compatibility
 // tests. It loads HuJSON golden files from testdata/grant_results/grant-*.hujson
-// and via-grant-*.hujson, captured from a Tailscale-hosted control plane, and compares
+// and via-grant-*.hujson, captured from Tailscale SaaS by tscap, and compares
 // headscale's grants engine output against the captured packet filter rules.
 //
 // Each file is a testcapture.Capture containing:
@@ -35,8 +35,8 @@ import (
 
 // setupGrantsCompatUsers returns the 3 test users for grants compatibility tests.
 // Users get norse-god names; nodes get original-151 pokémon names — matching
-// the anonymized identifiers the capture tool writes into the capture files
-// .
+// the anonymized identifiers tscap writes into the capture files
+// (see github.com/kradalby/tscap/anonymize).
 func setupGrantsCompatUsers() types.Users {
 	return types.Users{
 		{Model: gorm.Model{ID: 1}, Name: "odin", Email: "odin@example.com"},
@@ -45,6 +45,218 @@ func setupGrantsCompatUsers() types.Users {
 	}
 }
 
+// setupGrantsCompatNodes returns the 15 test nodes for grants compatibility tests.
+// The node configuration matches the Tailscale test environment:
+//   - 3 user-owned nodes (bulbasaur, ivysaur, venusaur)
+//   - 12 tagged nodes (beedrill, kakuna, weedle, squirtle, charmander,
+//     pidgey, pidgeotto, rattata, raticate, spearow, fearow, blastoise)
+func setupGrantsCompatNodes(users types.Users) types.Nodes {
+	nodeBulbasaur := &types.Node{
+		ID:        1,
+		GivenName: "bulbasaur",
+		User:      &users[0],
+		UserID:    &users[0].ID,
+		IPv4:      ptrAddr("100.90.199.68"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::2d01:c747"),
+		Hostinfo:  &tailcfg.Hostinfo{},
+	}
+
+	nodeIvysaur := &types.Node{
+		ID:        2,
+		GivenName: "ivysaur",
+		User:      &users[1],
+		UserID:    &users[1].ID,
+		IPv4:      ptrAddr("100.110.121.96"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::1737:7960"),
+		Hostinfo:  &tailcfg.Hostinfo{},
+	}
+
+	nodeVenusaur := &types.Node{
+		ID:        3,
+		GivenName: "venusaur",
+		User:      &users[2],
+		UserID:    &users[2].ID,
+		IPv4:      ptrAddr("100.103.90.82"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::9e37:5a52"),
+		Hostinfo:  &tailcfg.Hostinfo{},
+	}
+
+	nodeBeedrill := &types.Node{
+		ID:        4,
+		GivenName: "beedrill",
+		IPv4:      ptrAddr("100.108.74.26"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::b901:4a87"),
+		Tags:      []string{"tag:server"},
+		Hostinfo:  &tailcfg.Hostinfo{},
+	}
+
+	nodeKakuna := &types.Node{
+		ID:        5,
+		GivenName: "kakuna",
+		IPv4:      ptrAddr("100.103.8.15"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::5b37:80f"),
+		Tags:      []string{"tag:prod"},
+		Hostinfo:  &tailcfg.Hostinfo{},
+	}
+
+	nodeWeedle := &types.Node{
+		ID:        6,
+		GivenName: "weedle",
+		IPv4:      ptrAddr("100.83.200.69"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::c537:c845"),
+		Tags:      []string{"tag:client"},
+		Hostinfo:  &tailcfg.Hostinfo{},
+	}
+
+	nodeSquirtle := &types.Node{
+		ID:        7,
+		GivenName: "squirtle",
+		IPv4:      ptrAddr("100.92.142.61"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::3e37:8e3d"),
+		Tags:      []string{"tag:router"},
+		Hostinfo: &tailcfg.Hostinfo{
+			RoutableIPs: []netip.Prefix{netip.MustParsePrefix("10.33.0.0/16")},
+		},
+		ApprovedRoutes: []netip.Prefix{netip.MustParsePrefix("10.33.0.0/16")},
+	}
+
+	nodeCharmander := &types.Node{
+		ID:        8,
+		GivenName: "charmander",
+		IPv4:      ptrAddr("100.85.66.106"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::7c37:426a"),
+		Tags:      []string{"tag:exit"},
+		Hostinfo: &tailcfg.Hostinfo{
+			RoutableIPs: []netip.Prefix{
+				netip.MustParsePrefix("0.0.0.0/0"),
+				netip.MustParsePrefix("::/0"),
+			},
+		},
+		ApprovedRoutes: []netip.Prefix{
+			netip.MustParsePrefix("0.0.0.0/0"),
+			netip.MustParsePrefix("::/0"),
+		},
+	}
+
+	// --- New nodes for expanded via grant topology ---
+
+	nodePidgey := &types.Node{
+		ID:        9,
+		GivenName: "pidgey",
+		IPv4:      ptrAddr("100.124.195.93"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::7837:c35d"),
+		Tags:      []string{"tag:exit-a"},
+		Hostinfo: &tailcfg.Hostinfo{
+			RoutableIPs: []netip.Prefix{
+				netip.MustParsePrefix("0.0.0.0/0"),
+				netip.MustParsePrefix("::/0"),
+			},
+		},
+		ApprovedRoutes: []netip.Prefix{
+			netip.MustParsePrefix("0.0.0.0/0"),
+			netip.MustParsePrefix("::/0"),
+		},
+	}
+
+	nodePidgeotto := &types.Node{
+		ID:        10,
+		GivenName: "pidgeotto",
+		IPv4:      ptrAddr("100.116.18.24"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::ff37:1218"),
+		Tags:      []string{"tag:exit-b"},
+		Hostinfo: &tailcfg.Hostinfo{
+			RoutableIPs: []netip.Prefix{
+				netip.MustParsePrefix("0.0.0.0/0"),
+				netip.MustParsePrefix("::/0"),
+			},
+		},
+		ApprovedRoutes: []netip.Prefix{
+			netip.MustParsePrefix("0.0.0.0/0"),
+			netip.MustParsePrefix("::/0"),
+		},
+	}
+
+	nodeRattata := &types.Node{
+		ID:        11,
+		GivenName: "rattata",
+		IPv4:      ptrAddr("100.107.162.14"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::a237:a20e"),
+		Tags:      []string{"tag:group-a"},
+		Hostinfo:  &tailcfg.Hostinfo{},
+	}
+
+	nodeRaticate := &types.Node{
+		ID:        12,
+		GivenName: "raticate",
+		IPv4:      ptrAddr("100.77.135.18"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::4b37:8712"),
+		Tags:      []string{"tag:group-b"},
+		Hostinfo:  &tailcfg.Hostinfo{},
+	}
+
+	nodeSpearow := &types.Node{
+		ID:        13,
+		GivenName: "spearow",
+		IPv4:      ptrAddr("100.109.43.124"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::a537:2b7c"),
+		Tags:      []string{"tag:router-a"},
+		Hostinfo: &tailcfg.Hostinfo{
+			RoutableIPs: []netip.Prefix{netip.MustParsePrefix("10.44.0.0/16")},
+		},
+		ApprovedRoutes: []netip.Prefix{netip.MustParsePrefix("10.44.0.0/16")},
+	}
+
+	nodeFearow := &types.Node{
+		ID:        14,
+		GivenName: "fearow",
+		IPv4:      ptrAddr("100.65.172.123"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::5a37:ac7c"),
+		Tags:      []string{"tag:router-b"},
+		Hostinfo: &tailcfg.Hostinfo{
+			RoutableIPs: []netip.Prefix{netip.MustParsePrefix("10.55.0.0/16")},
+		},
+		ApprovedRoutes: []netip.Prefix{netip.MustParsePrefix("10.55.0.0/16")},
+	}
+
+	nodeBlastoise := &types.Node{
+		ID:        15,
+		GivenName: "blastoise",
+		IPv4:      ptrAddr("100.105.127.107"),
+		IPv6:      ptrAddr("fd7a:115c:a1e0::9537:7f6b"),
+		Tags:      []string{"tag:exit", "tag:router"},
+		Hostinfo: &tailcfg.Hostinfo{
+			RoutableIPs: []netip.Prefix{
+				netip.MustParsePrefix("10.33.0.0/16"),
+				netip.MustParsePrefix("0.0.0.0/0"),
+				netip.MustParsePrefix("::/0"),
+			},
+		},
+		ApprovedRoutes: []netip.Prefix{
+			netip.MustParsePrefix("10.33.0.0/16"),
+			netip.MustParsePrefix("0.0.0.0/0"),
+			netip.MustParsePrefix("::/0"),
+		},
+	}
+
+	return types.Nodes{
+		nodeBulbasaur,
+		nodeIvysaur,
+		nodeVenusaur,
+		nodeBeedrill,
+		nodeKakuna,
+		nodeWeedle,
+		nodeSquirtle,
+		nodeCharmander,
+		nodePidgey,
+		nodePidgeotto,
+		nodeRattata,
+		nodeRaticate,
+		nodeSpearow,
+		nodeFearow,
+		nodeBlastoise,
+	}
+}
+
 // findGrantsNode finds a node by its GivenName in the grants test environment.
 func findGrantsNode(nodes types.Nodes, name string) *types.Node {
 	for _, n := range nodes {
@@ -57,7 +269,7 @@ func findGrantsNode(nodes types.Nodes, name string) *types.Node {
 }
 
 // buildGrantsNodesFromCapture constructs types.Nodes from a capture's
-// topology section. Each scenario in the capture tool uses clean-slate mode, so
+// topology section. Each scenario in tscap uses clean-slate mode, so
 // node IPs differ between scenarios; this builds the node set with
 // the IPs that were actually present during that capture.
 func buildGrantsNodesFromCapture(
@@ -120,7 +332,7 @@ func buildGrantsNodesFromCapture(
 }
 
 // convertPolicyUserEmails used to map SaaS-side emails to @example.com.
-// captures anonymize the policy JSON at write time (kratail2tid -> odin,
+// tscap now anonymizes the policy JSON at write time (kratail2tid -> odin,
 // kristoffer -> thor, monitorpasskeykradalby -> freya), so the captured
 // FullPolicy is already in its final form and this is a passthrough that
 // just adapts the captured string value to the []byte that the policy
@@ -193,12 +405,12 @@ func TestGrantsCompat(t *testing.T) {
 			}
 
 			// Build nodes per-scenario from this file's topology.
-			// the capture tool uses clean-slate mode, so each scenario has
+			// tscap uses clean-slate mode, so each scenario has
 			// different node IPs.
 			nodes := buildGrantsNodesFromCapture(users, tf)
 
 			// Use the captured full policy as is (anonymization
-			// the capture tool already rewrote SaaS emails).
+			// in tscap already rewrote SaaS emails).
 			policyJSON := convertPolicyUserEmails(tf.Input.FullPolicy)
 
 			if tf.Input.APIResponseCode == 400 || tf.Error {
@@ -284,11 +496,18 @@ func testGrantSuccess(
 				"golden node %s not found in test setup", nodeName)
 
 			// Compile headscale filter rules for this node
-			gotRules := pol.compileFilterRulesForNode(
+			gotRules, err := pol.compileFilterRulesForNode(
 				users,
 				node.View(),
 				nodes.ViewSlice(),
 			)
+			require.NoError(
+				t,
+				err,
+				"%s/%s: failed to compile filter rules",
+				tf.TestID,
+				nodeName,
+			)
 
 			gotRules = policyutil.ReduceFilterRules(node.View(), gotRules)
 
diff --git a/hscontrol/policy/v2/tailscale_nodeattrs_compat_test.go b/hscontrol/policy/v2/tailscale_nodeattrs_compat_test.go
deleted file mode 100644
index 9a2923a03..000000000
--- a/hscontrol/policy/v2/tailscale_nodeattrs_compat_test.go
+++ /dev/null
@@ -1,336 +0,0 @@
-// This file implements a data-driven test runner for nodeAttrs
-// compatibility tests. It loads HuJSON golden files from
-// testdata/nodeattrs_results/nodeattrs-*.hujson, captured from a
-// Tailscale-hosted control plane, and compares headscale's
-// `compileNodeAttrs` output against each captured netmap's SelfNode.CapMap.
-//
-// Each file is a testcapture.Capture containing:
-//   - A full policy with a `nodeAttrs` block (and optionally `ipPool`)
-//   - The expected per-node netmap from SaaS, including the cap map
-//
-// Tests known to fail due to unimplemented features are skipped with a
-// TODO comment explaining the root cause. As headscale's nodeAttrs
-// implementation grows, tests should be removed from the skip list.
-//
-// Test data source: testdata/nodeattrs_results/nodeattrs-*.hujson
-// Source format:    github.com/juanfont/headscale/hscontrol/types/testcapture
-
-package v2
-
-import (
-	"net/netip"
-	"path/filepath"
-	"testing"
-
-	"github.com/google/go-cmp/cmp"
-	"github.com/google/go-cmp/cmp/cmpopts"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/types/testcapture"
-	"github.com/stretchr/testify/require"
-	"gorm.io/gorm"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/views"
-)
-
-// nodeAttrsCompatUsers returns the three norse-god users the capture
-// tool's anonymizer rewrites the SaaS users into.
-func nodeAttrsCompatUsers() types.Users {
-	return types.Users{
-		{Model: gorm.Model{ID: 1}, Name: "odin", Email: "odin@example.com"},
-		{Model: gorm.Model{ID: 2}, Name: "thor", Email: "thor@example.org"},
-		{Model: gorm.Model{ID: 3}, Name: "freya", Email: "freya@example.com"},
-	}
-}
-
-// buildNodeAttrsNodesFromCapture mirrors the grants compat helper: each
-// scenario's clean-slate run produces a different IP for the same
-// hostname, so the node set comes from the capture's topology rather
-// than a fixed table.
-//
-// [tailcfg.Hostinfo.RoutableIPs] and [types.Node.ApprovedRoutes]
-// round-trip from the topology so [types.NodeView.IsExitNode] reflects
-// the captured approval state — the suggest-exit-node peer-cap rule
-// only fires when a peer's exit routes are approved.
-func buildNodeAttrsNodesFromCapture(
-	t *testing.T,
-	users types.Users,
-	tf *testcapture.Capture,
-) types.Nodes {
-	t.Helper()
-
-	nodes := make(types.Nodes, 0, len(tf.Topology.Nodes))
-	autoID := 1
-
-	for _, nodeDef := range tf.Topology.Nodes {
-		node := &types.Node{
-			ID:        types.NodeID(autoID), //nolint:gosec
-			GivenName: nodeDef.Hostname,
-			IPv4:      ptrAddr(nodeDef.IPv4),
-			IPv6:      ptrAddr(nodeDef.IPv6),
-			Tags:      nodeDef.Tags,
-			Hostinfo: &tailcfg.Hostinfo{
-				RoutableIPs: parsePrefixes(t, nodeDef.Hostname+".RoutableIPs", nodeDef.RoutableIPs),
-			},
-			ApprovedRoutes: parsePrefixes(t, nodeDef.Hostname+".ApprovedRoutes", nodeDef.ApprovedRoutes),
-		}
-		autoID++
-
-		if len(nodeDef.Tags) == 0 && nodeDef.User != "" {
-			for i := range users {
-				if users[i].Name == nodeDef.User {
-					node.User = &users[i]
-					node.UserID = &users[i].ID
-
-					break
-				}
-			}
-		}
-
-		nodes = append(nodes, node)
-	}
-
-	return nodes
-}
-
-// parsePrefixes converts a slice of CIDR strings into [netip.Prefix].
-// Bad entries fail loud through t.Fatalf — the topology files are
-// authoritative routing data, so a malformed CIDR is a testdata bug
-// that should surface, not silently drop the route and corrupt
-// downstream IsExitNode checks.
-func parsePrefixes(t *testing.T, name string, s []string) []netip.Prefix {
-	t.Helper()
-
-	if len(s) == 0 {
-		return nil
-	}
-
-	out := make([]netip.Prefix, 0, len(s))
-
-	for _, p := range s {
-		pre, err := netip.ParsePrefix(p)
-		if err != nil {
-			t.Fatalf("topology %q: malformed CIDR %q: %v", name, p, err)
-		}
-
-		out = append(out, pre)
-	}
-
-	return out
-}
-
-// nodeAttrsSkipReasons documents the captured scenarios SaaS accepts and
-// headscale deliberately rejects at validate time. The rejection itself is
-// covered by TestNodeAttrsValidate; this list keeps the compat diff focused
-// on shapes both control planes agree on.
-//
-//	IPPOOL_ALLOCATOR — `ipPool` is parsed but the allocator that
-//	    consumes it is not yet implemented.
-//	FUNNEL_NOT_SUPPORTED — `funnel` cap is rejected pending the DNS /
-//	    ACME machinery the feature requires.
-//	NO_USER_ROLES — `autogroup:admin` and `autogroup:owner` depend on
-//	    user-role and tailnet-ownership concepts headscale does not
-//	    model.
-var nodeAttrsSkipReasons = map[string]string{
-	"nodeattrs-ippool-g1-admin":            "IPPOOL_ALLOCATOR",
-	"nodeattrs-ippool-g2-group":            "IPPOOL_ALLOCATOR",
-	"nodeattrs-ippool-g3-mixed":            "IPPOOL_ALLOCATOR",
-	"nodeattrs-target-a10-autogroup-admin": "NO_USER_ROLES: autogroup:admin",
-	"nodeattrs-target-a11-autogroup-owner": "NO_USER_ROLES: autogroup:owner",
-	"nodeattrs-attr-c1-funnel":             "FUNNEL_NOT_SUPPORTED",
-	"nodeattrs-funnel-f1-tag":              "FUNNEL_NOT_SUPPORTED",
-	"nodeattrs-funnel-f2-user":             "FUNNEL_NOT_SUPPORTED",
-}
-
-// TestNodeAttrsCompat is a data-driven test that loads every captured
-// nodeAttrs scenario and compares headscale's compiled CapMap against
-// the corresponding SaaS-rendered netmap.
-func TestNodeAttrsCompat(t *testing.T) {
-	t.Parallel()
-
-	files, err := filepath.Glob(
-		filepath.Join("testdata", "nodeattrs_results", "*.hujson"),
-	)
-	require.NoError(t, err, "failed to glob test files")
-
-	if len(files) == 0 {
-		t.Skip(
-			"testdata/nodeattrs_results is empty — re-run the capture " +
-				"tool against the nodeattrs scenario set and copy the " +
-				"anonymized results into " +
-				"hscontrol/policy/v2/testdata/nodeattrs_results/",
-		)
-	}
-
-	t.Logf("Loaded %d nodeAttrs test files", len(files))
-
-	users := nodeAttrsCompatUsers()
-
-	for _, file := range files {
-		tf := loadGrantTestFile(t, file)
-
-		t.Run(tf.TestID, func(t *testing.T) {
-			t.Parallel()
-
-			if reason, ok := nodeAttrsSkipReasons[tf.TestID]; ok {
-				t.Skipf("TODO: %s", reason)
-			}
-
-			nodes := buildNodeAttrsNodesFromCapture(t, users, tf)
-			policyJSON := convertPolicyUserEmails(tf.Input.FullPolicy)
-
-			if tf.Input.APIResponseCode == 400 || tf.Error {
-				testNodeAttrsError(t, policyJSON, tf)
-
-				return
-			}
-
-			testNodeAttrsSuccess(t, policyJSON, tf, users, nodes)
-		})
-	}
-}
-
-func testNodeAttrsError(t *testing.T, policyJSON []byte, tf *testcapture.Capture) {
-	t.Helper()
-
-	// SaaS error wording is not stable enough to compare exactly — the
-	// e3-autogroup-self capture comes back as "internal server error",
-	// for instance. The contract this test enforces is the weaker but
-	// still-meaningful one: headscale must also refuse the policy at
-	// parse or validate time.
-	pol, err := unmarshalPolicy(policyJSON)
-	if err != nil {
-		return
-	}
-
-	err = pol.validate()
-	if err != nil {
-		return
-	}
-
-	wantMsg := ""
-	if tf.Input.APIResponseBody != nil {
-		wantMsg = tf.Input.APIResponseBody.Message
-	}
-
-	// The dispatch in TestNodeAttrsCompat fires for either
-	// APIResponseCode==400 or tf.Error==true; reflect the actual
-	// trigger in the diagnostic so a tf.Error scenario doesn't get
-	// reported as "saas code=0".
-	t.Errorf(
-		"%s: expected error (api_code=%d capture_error=%t msg=%q) "+
-			"but policy parsed and validated successfully",
-		tf.TestID, tf.Input.APIResponseCode, tf.Error, wantMsg,
-	)
-}
-
-func testNodeAttrsSuccess(
-	t *testing.T,
-	policyJSON []byte,
-	tf *testcapture.Capture,
-	users types.Users,
-	nodes types.Nodes,
-) {
-	t.Helper()
-
-	pol, err := unmarshalPolicy(policyJSON)
-	require.NoErrorf(t, err, "%s: policy should parse", tf.TestID)
-	require.NoErrorf(t, pol.validate(), "%s: policy should validate", tf.TestID)
-
-	got, err := pol.compileNodeAttrs(users, nodes.ViewSlice())
-	require.NoErrorf(t, err, "%s: compileNodeAttrs", tf.TestID)
-
-	// Mirror the prod self-build: route function is irrelevant for CapMap.
-	//
-	// Taildrop.Enabled defaults to true here because every capture is
-	// taken with the SaaS default Send Files state. The Tailscale v2
-	// TailnetSettings API does not expose the Send Files toggle, so
-	// tscap cannot vary it; the off-path is covered directly by
-	// TestTaildropDisabledWithholdsFileSharingCap in servertest.
-	// TODO: wire Taildrop.Enabled from tf.Input.Tailnet.Settings.FileSharing
-	// once the field is added to the public TailnetSettings API.
-	cfg := &types.Config{Taildrop: types.TaildropConfig{Enabled: true}}
-	if v := tf.Input.Tailnet.Settings.DevicesAutoUpdatesOn; v != nil && *v {
-		cfg.AutoUpdate = types.AutoUpdateConfig{Enabled: true}
-	}
-
-	emptyRoutes := func(types.NodeID) []netip.Prefix { return nil }
-
-	selfCapMap := func(t *testing.T, node *types.Node) tailcfg.NodeCapMap {
-		t.Helper()
-
-		tn, err := node.View().TailNode(0, emptyRoutes, cfg, got[node.ID])
-		require.NoErrorf(t, err, "%s/%s: TailNode", tf.TestID, node.GivenName)
-
-		return tn.CapMap
-	}
-
-	for nodeName, capture := range tf.Captures {
-		if capture.Netmap == nil || !capture.Netmap.SelfNode.Valid() {
-			continue
-		}
-
-		t.Run(nodeName, func(t *testing.T) {
-			node := findNodeByGivenName(nodes, nodeName)
-			require.NotNilf(t, node,
-				"node %q from capture not found in test setup", nodeName)
-
-			gotSelf := stripUnmodelledTailnetStateCaps(selfCapMap(t, node))
-			wantSelf := stripUnmodelledTailnetStateCaps(
-				capMapFromView(capture.Netmap.SelfNode.CapMap()),
-			)
-
-			if diff := cmp.Diff(wantSelf, gotSelf, cmpopts.EquateEmpty()); diff != "" {
-				t.Errorf(
-					"%s/%s: SelfNode.CapMap mismatch (-tailscale +headscale):\n%s",
-					tf.TestID, nodeName, diff,
-				)
-			}
-
-			for _, peer := range capture.Netmap.Peers {
-				peerName := peer.ComputedName()
-
-				peerNode := findNodeByGivenName(nodes, peerName)
-				if peerNode == nil {
-					// A captured peer with no matching node in the
-					// constructed topology is almost always topology
-					// drift — fail loud so the gap is visible instead
-					// of silently dropping the comparison.
-					t.Errorf("%s/%s: capture peer %q not found in topology",
-						tf.TestID, nodeName, peerName)
-
-					continue
-				}
-
-				gotPeer := stripUnmodelledTailnetStateCaps(
-					PeerCapMap(peerNode.View(), got[peerNode.ID]),
-				)
-				wantPeer := stripUnmodelledTailnetStateCaps(
-					capMapFromView(peer.CapMap()),
-				)
-
-				if diff := cmp.Diff(wantPeer, gotPeer, cmpopts.EquateEmpty()); diff != "" {
-					t.Errorf(
-						"%s/%s/peer=%s: Peer.CapMap mismatch (-tailscale +headscale):\n%s",
-						tf.TestID, nodeName, peerName, diff,
-					)
-				}
-			}
-		})
-	}
-}
-
-// capMapFromView materialises a captured CapMap view into the
-// [tailcfg.NodeCapMap] shape headscale renders, so both sides of the
-// diff have the same concrete type.
-func capMapFromView(view views.MapSlice[tailcfg.NodeCapability, tailcfg.RawMessage]) tailcfg.NodeCapMap {
-	if view.Len() == 0 {
-		return nil
-	}
-
-	out := make(tailcfg.NodeCapMap, view.Len())
-	for k, v := range view.All() {
-		out[k] = v.AsSlice()
-	}
-
-	return out
-}
diff --git a/hscontrol/policy/v2/tailscale_routes_data_compat_test.go b/hscontrol/policy/v2/tailscale_routes_data_compat_test.go
index 978977940..1bc0182f9 100644
--- a/hscontrol/policy/v2/tailscale_routes_data_compat_test.go
+++ b/hscontrol/policy/v2/tailscale_routes_data_compat_test.go
@@ -1,6 +1,6 @@
 // This file implements data-driven test runners for routes compatibility tests.
 // It loads HuJSON golden files from testdata/routes_results/routes-*.hujson,
-// captured from a Tailscale-hosted control plane, and compares headscale's route-aware
+// captured from Tailscale SaaS by tscap, and compares headscale's route-aware
 // ACL engine output against the captured packet filter rules.
 //
 // Each capture file is a testcapture.Capture containing:
@@ -57,7 +57,7 @@ func loadRoutesTestFile(t *testing.T, path string) *testcapture.Capture {
 }
 
 // convertSaaSEmail used to map SaaS-side emails to @example.com placeholders.
-// captures are anonymized at write time (norse-god names + pokémon
+// tscap now anonymizes captures at write time (norse-god names + pokémon
 // hostnames), so the captured topology emails are already in their final
 // form and this is a passthrough.
 func convertSaaSEmail(email string) string {
@@ -236,11 +236,18 @@ func TestRoutesCompat(t *testing.T) {
 					require.NotNilf(t, node,
 						"golden node %s not found in topology", nodeName)
 
-					compiledRules := pol.compileFilterRulesForNode(
+					compiledRules, err := pol.compileFilterRulesForNode(
 						users,
 						node.View(),
 						nodes.ViewSlice(),
 					)
+					require.NoError(
+						t,
+						err,
+						"%s/%s: failed to compile filter rules",
+						tf.TestID,
+						nodeName,
+					)
 
 					gotRules := policyutil.ReduceFilterRules(
 						node.View(),
diff --git a/hscontrol/policy/v2/tailscale_ssh_data_compat_test.go b/hscontrol/policy/v2/tailscale_ssh_data_compat_test.go
index a6cb27c20..03d9dd24e 100644
--- a/hscontrol/policy/v2/tailscale_ssh_data_compat_test.go
+++ b/hscontrol/policy/v2/tailscale_ssh_data_compat_test.go
@@ -1,9 +1,22 @@
-// Replay golden HuJSON captures under testdata/ssh_results/ssh-*.hujson:
-// the 200 path compares headscale's compileSSHPolicy output node-by-node
-// against the captured SSHRules; the non-200 path requires headscale to
-// reject the same input with the captured error body as a substring.
-// Divergences are listed in sshSkipReasons (200) and sshRejectSkipReasons
-// (non-200) with the engine gap each represents.
+// This file implements a data-driven test runner for SSH compatibility tests.
+// It loads HuJSON golden files from testdata/ssh_results/ssh-*.hujson, captured
+// from Tailscale SaaS by tscap, and compares headscale's SSH policy compilation
+// against the captured SSH rules.
+//
+// Each capture is one of:
+//   - APIResponseCode == 200 — SaaS accepted the policy; the captured
+//     per-node SSH rules in tf.Captures[name].SSHRules are the source of
+//     truth, and headscale's compileSSHPolicy must produce the same shape.
+//   - APIResponseCode != 200 — SaaS rejected the policy at the API; the
+//     captured Message is the body the user saw. headscale must reject
+//     the same input with an error whose text contains that body as a
+//     substring (mirroring sshtester_compat_test.go).
+//
+// Tests known to diverge are listed in sshSkipReasons (200 path) or
+// sshRejectSkipReasons (!= 200 path) with a TODO explaining the gap.
+//
+// Test data source: testdata/ssh_results/ssh-*.hujson
+// Source format:    github.com/juanfont/headscale/hscontrol/types/testcapture
 
 package v2
 
@@ -22,10 +35,16 @@ import (
 	"tailscale.com/tailcfg"
 )
 
-// setupSSHDataCompatUsers returns three users straddling two email
-// domains so that "localpart:*@example.com" resolves to exactly two
-// users (odin, freya) and the cross-domain case stays covered through
-// thor on @example.org.
+// setupSSHDataCompatUsers returns the 3 test users for SSH data-driven
+// compatibility tests. Users get norse-god names; nodes get original-151
+// pokémon names — matching the anonymized identifiers tscap writes into
+// the capture files (see github.com/kradalby/tscap/anonymize).
+//
+// odin and freya live on @example.com; thor lives on @example.org so
+// that "localpart:*@example.com" resolves to exactly two users
+// (matching SaaS output) and the "user on a different email domain"
+// case stays covered by scenarios like ssh-d1 that use
+// "localpart:*@example.org".
 func setupSSHDataCompatUsers() types.Users {
 	return types.Users{
 		{
@@ -56,29 +75,49 @@ func loadSSHTestFile(t *testing.T, path string) *testcapture.Capture {
 	return c
 }
 
-// sshSkipReasons documents captures the upstream control plane accepts
-// but headscale cannot yet represent. Each entry names the feature gap.
+// sshSkipReasons documents APIResponseCode == 200 captures where SaaS
+// accepted the policy but headscale either does not yet support the
+// shape or rejects it stricter than SaaS does. Each entry should
+// describe the gap a follow-up PR needs to close (or justify why
+// headscale is intentionally stricter).
 var sshSkipReasons = map[string]string{
-	"ssh-b5":  "headscale has no passkey authentication; user:*@passkey wildcard unsupported",
-	"ssh-d10": "headscale has no passkey authentication; user:*@passkey wildcard unsupported",
+	// USER_PASSKEY_WILDCARD (2 tests)
+	//
+	// headscale does not support passkey authentication and has no
+	// equivalent for the user:*@passkey wildcard pattern.
+	"ssh-b5":  "user:*@passkey wildcard not supported in headscale",
+	"ssh-d10": "user:*@passkey wildcard not supported in headscale",
 }
 
-// sshRejectSkipReasons documents captures the upstream control plane
-// rejects for reasons headscale cannot apply. Each entry names the
-// feature gap.
+// sshRejectSkipReasons documents APIResponseCode != 200 captures where
+// headscale and SaaS legitimately disagree on whether the policy should
+// be rejected (or where headscale rejects with different wording).
 var sshRejectSkipReasons = map[string]string{
-	"ssh-b4": "headscale has no associated-tailnet-domains config; user:*@domain / localpart:*@domain are not domain-validated",
-	"ssh-d1": "headscale has no associated-tailnet-domains config; user:*@domain / localpart:*@domain are not domain-validated",
-	"ssh-e1": "headscale has no associated-tailnet-domains config; user:*@domain / localpart:*@domain are not domain-validated",
-	"ssh-e2": "headscale has no associated-tailnet-domains config; user:*@domain / localpart:*@domain are not domain-validated",
-	"ssh-malformed-user-localpart-multi-glob": "headscale has no associated-tailnet-domains config; user:*@domain / localpart:*@domain are not domain-validated",
+	// DOMAIN_NOT_ASSOCIATED (5 tests)
+	//
+	// SaaS validates that email domains in user:*@domain and
+	// localpart:*@domain expressions are configured tailnet
+	// domains. headscale has no concept of "associated tailnet
+	// domains" — it only has users with email addresses. These
+	// policies are legitimately rejected by SaaS but not by
+	// headscale.
+	"ssh-b4": "domain validation: headscale has no 'associated tailnet domains' concept",
+	"ssh-d1": "domain validation: headscale has no 'associated tailnet domains' concept",
+	"ssh-e1": "domain validation: headscale has no 'associated tailnet domains' concept",
+	"ssh-e2": "domain validation: headscale has no 'associated tailnet domains' concept",
+	"ssh-malformed-user-localpart-multi-glob": "domain validation: headscale has no 'associated tailnet domains' concept (same gap as ssh-b4/d1/e1/e2)",
 }
 
-// TestSSHDataCompat loads every ssh-*.hujson capture, parses the policy
-// it pinned, and compiles the same per-node SSH rules to compare against
-// the captured shape. Non-200 captures replay the rejection path: the
-// recorded error body must appear as a substring of headscale's
-// rejection.
+// TestSSHDataCompat is a data-driven test that loads all ssh-*.hujson test
+// files captured from Tailscale SaaS and compares headscale's SSH policy
+// compilation against the real Tailscale behavior.
+//
+// Each capture file contains:
+//   - The full policy that was POSTed to the SaaS API (Input.FullPolicy)
+//   - Expected SSH rules per node (Captures[name].SSHRules)
+//
+// The test converts Tailscale user email formats to headscale format and runs
+// the captured policy through unmarshalPolicy and compileSSHPolicy.
 func TestSSHDataCompat(t *testing.T) {
 	t.Parallel()
 
@@ -112,15 +151,27 @@ func TestSSHDataCompat(t *testing.T) {
 		t.Run(tf.TestID, func(t *testing.T) {
 			t.Parallel()
 
-			// Each capture pins its own topology IPs, so nodes are
-			// rebuilt from the capture rather than a shared fixture.
+			// Build nodes per-scenario from this file's topology.
+			// tscap uses clean-slate mode, so each scenario has
+			// different node IPs.
 			nodes := buildGrantsNodesFromCapture(users, tf)
 
+			// Use the captured full policy as is. Anonymization in
+			// tscap already rewrites SaaS emails to @example.com.
 			policyJSON := []byte(tf.Input.FullPolicy)
 
+			// Branch on the SaaS response code. Captures with
+			// APIResponseCode != 200 are policies SaaS rejected at
+			// the API; headscale must reject the same input. The
+			// 200 path falls through to the existing per-node SSH
+			// rule comparison.
 			if tf.Input.APIResponseCode != 200 {
 				if reason, ok := sshRejectSkipReasons[tf.TestID]; ok {
-					t.Skipf("skipping: %s", reason)
+					t.Skipf(
+						"TODO: %s — see sshRejectSkipReasons for details",
+						reason,
+					)
+
 					return
 				}
 
@@ -155,8 +206,14 @@ func TestSSHDataCompat(t *testing.T) {
 				return
 			}
 
+			// APIResponseCode == 200: SaaS accepted; headscale must
+			// match the captured per-node SSH rules.
 			if reason, ok := sshSkipReasons[tf.TestID]; ok {
-				t.Skipf("skipping: %s", reason)
+				t.Skipf(
+					"TODO: %s — see sshSkipReasons comments for details",
+					reason,
+				)
+
 				return
 			}
 
diff --git a/hscontrol/policy/v2/test.go b/hscontrol/policy/v2/test.go
index da79f7c72..6b27f0688 100644
--- a/hscontrol/policy/v2/test.go
+++ b/hscontrol/policy/v2/test.go
@@ -25,9 +25,16 @@ import (
 // The tests evaluate against the compiled global filter rules, which fold in
 // both `acls` and `grants`, so the `tests` block validates the whole policy.
 
-// errPolicyTestsFailed and errSSHPolicyTestsFailed share the
-// "test(s) failed" prefix but stay distinct so callers can use
-// [errors.Is] to tell ACL-test and SSH-test failures apart.
+// errPolicyTestsFailed wraps the rendered failure body so callers can
+// type-assert when they need to react differently to test failures vs. parse
+// errors. The Error() prefix is "test(s) failed", the same string Tailscale
+// SaaS returns in the api_response_body.message — see
+// hscontrol/policy/v2/testdata/policytest_results/.
+//
+// errSSHPolicyTestsFailed wraps sshTests failures. Tailscale SaaS returns the
+// same literal "test(s) failed" body for both ACL tests and SSH tests, but
+// the two sentinels are kept as distinct values so callers can use errors.Is
+// to tell them apart while still matching the SaaS body byte-for-byte.
 var (
 	errPolicyTestsFailed    = errors.New("test(s) failed")
 	errSSHPolicyTestsFailed = errors.New("test(s) failed")
@@ -53,36 +60,47 @@ type PolicyTest struct {
 	Deny []string `json:"deny,omitempty"`
 }
 
-// SSHPolicyTest is one entry in the policy's `sshTests` block. The
-// accept/deny/check arrays carry usernames, not destinations — every
-// listed user is asserted against every entry in [SSHPolicyTest.Dst].
+// SSHPolicyTest is one entry in the policy's `sshTests` block. Unlike the
+// ACL `tests` block, sshTests describe SSH login attempts: a source alias
+// connects to each destination host and tries each named login user. The
+// accept / deny / check arrays carry usernames, not destinations — every
+// listed user is asserted against every entry in dst.
 type SSHPolicyTest struct {
-	// Src is a single source alias (user, group, tag, host, or IP).
+	// Src is a single source alias (user, group, tag, host, or IP). Same
+	// shape as PolicyTest.Src — Tailscale only supports one src per entry.
 	Src Alias `json:"src"`
 
-	// Dst lists destinations the test exercises (tag, host, or SSH-
-	// compatible autogroup). Ports, CIDRs, and autogroup:internet are
-	// rejected at parse time.
+	// Dst lists destination host aliases the test exercises. Tags, hosts,
+	// and the SSH-compatible autogroups are valid; ports, CIDR ranges, and
+	// autogroup:internet are rejected at parse time.
 	Dst SSHTestDestinations `json:"dst"`
 
-	// Accept lists users that must reach every Dst via an accept- or
-	// check-action rule.
+	// Accept lists SSH login users that must be allowed by an action:accept
+	// or action:check rule when Src connects to each entry in Dst.
 	Accept []SSHUser `json:"accept,omitempty"`
 
-	// Deny lists users that must NOT reach any Dst.
+	// Deny lists SSH login users that must NOT be allowed by any rule when
+	// Src connects to each entry in Dst.
 	Deny []SSHUser `json:"deny,omitempty"`
 
-	// Check lists users that must reach every Dst via a check-action
-	// rule specifically; an accept-action rule does not satisfy this.
+	// Check lists SSH login users that must reach every dst via an
+	// action:check rule specifically (the HoldAndDelegate signal on the
+	// compiled SSH policy). An action:accept rule alone does not satisfy
+	// a check assertion — SaaS keeps the two categories distinct so
+	// policy authors can pin sensitive logins to check rules.
 	Check []SSHUser `json:"check,omitempty"`
 }
 
-// SSHTestDestinations is the typed list of destination aliases an
-// sshTests entry targets. [validateSSHTestDestination] enforces the
-// SSH-specific shape rules (no :port, no CIDR, no autogroup:internet,
+// SSHTestDestinations is the list of destination aliases an sshTests entry
+// targets. Unmarshalling reuses the same alias parser the rest of the
+// policy engine drives so each element lands as a typed Alias; the parse-
+// time shape rules in validateSSHTestDestination continue to enforce the
+// SSH-specific restrictions (no :port, no CIDR, no autogroup:internet,
 // known tag).
 type SSHTestDestinations []Alias
 
+// UnmarshalJSON walks the JSON array, dispatching each element through
+// AliasEnc so trimming and prefix detection match the rest of the parser.
 func (d *SSHTestDestinations) UnmarshalJSON(b []byte) error {
 	var aliases []AliasEnc
 
@@ -99,9 +117,13 @@ func (d *SSHTestDestinations) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// UnmarshalJSON parses each typed field. An empty src lands as a nil
-// [Alias] so validation surfaces [ErrSSHTestEmptySrc] rather than a parser
-// failure.
+// UnmarshalJSON drives the typed shape of SSHPolicyTest. The wire format
+// is unchanged: src is a JSON string parsed through parseAlias; dst is an
+// array of strings handled by SSHTestDestinations; accept/deny/check are
+// arrays of strings handled per element by SSHUser.UnmarshalJSON. An
+// empty src string lands as a nil Alias so the empty-src case stays a
+// validation-time error with the SaaS-aligned ErrSSHTestEmptySrc body
+// rather than a raw parser failure.
 func (t *SSHPolicyTest) UnmarshalJSON(b []byte) error {
 	var raw struct {
 		Src    string              `json:"src"`
@@ -134,7 +156,7 @@ func (t *SSHPolicyTest) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// PolicyTestResult is the outcome of a single [PolicyTest].
+// PolicyTestResult is the outcome of a single PolicyTest.
 type PolicyTestResult struct {
 	Src    string   `json:"src"`
 	Proto  Protocol `json:"proto,omitempty"`
@@ -196,17 +218,6 @@ func (r PolicyTestResults) Errors() string {
 	return strings.Join(lines, "\n")
 }
 
-// wrapTestResult returns nil when every test passed, otherwise wraps the
-// rendered failure breakdown in sentinel. errs is passed uncalled so it is
-// only evaluated on the failure path.
-func wrapTestResult(sentinel error, allPassed bool, errs func() string) error {
-	if allPassed {
-		return nil
-	}
-
-	return fmt.Errorf("%w:\n%s", sentinel, errs())
-}
-
 // RunTests evaluates the policy's own `tests` block against the live compiled
 // filter and returns a wrapped error when any test fails. Callers that need
 // the per-test breakdown can call runPolicyTests directly.
@@ -215,16 +226,19 @@ func (pm *PolicyManager) RunTests() error {
 		return nil
 	}
 
-	pm.mu.RLock()
-	defer pm.mu.RUnlock()
+	pm.mu.Lock()
+	defer pm.mu.Unlock()
 
 	results := runPolicyTests(pm.pol, pm.filter, pm.users, pm.nodes)
+	if results.AllPassed {
+		return nil
+	}
 
-	return wrapTestResult(errPolicyTestsFailed, results.AllPassed, results.Errors)
+	return fmt.Errorf("%w:\n%s", errPolicyTestsFailed, results.Errors())
 }
 
 // evaluateTests runs the `tests` block against a fresh compilation of pol.
-// It is the user-write sandbox: the live [PolicyManager] state is left
+// It is the user-write sandbox: the live PolicyManager state is left
 // untouched, so a failing test rejects the write without side effects.
 func evaluateTests(pol *Policy, users []types.User, nodes views.Slice[types.NodeView]) error {
 	if pol == nil || len(pol.Tests) == 0 {
@@ -241,8 +255,11 @@ func evaluateTests(pol *Policy, users []types.User, nodes views.Slice[types.Node
 	}
 
 	results := runPolicyTests(pol, filter, users, nodes)
+	if results.AllPassed {
+		return nil
+	}
 
-	return wrapTestResult(errPolicyTestsFailed, results.AllPassed, results.Errors)
+	return fmt.Errorf("%w:\n%s", errPolicyTestsFailed, results.Errors())
 }
 
 // runPolicyTests is the pure evaluation function: given a policy, the
@@ -267,7 +284,7 @@ func runPolicyTests(pol *Policy, filter []tailcfg.FilterRule, users []types.User
 	return results
 }
 
-// runPolicyTest evaluates one [PolicyTest].
+// runPolicyTest evaluates one PolicyTest.
 func runPolicyTest(test PolicyTest, pol *Policy, filter []tailcfg.FilterRule, users []types.User, nodes views.Slice[types.NodeView]) PolicyTestResult {
 	res := PolicyTestResult{
 		Src:    test.Src,
@@ -290,34 +307,45 @@ func runPolicyTest(test PolicyTest, pol *Policy, filter []tailcfg.FilterRule, us
 		return res
 	}
 
-	check := func(dsts []string, wantAllowed bool, ok, fail *[]string) {
-		for _, dst := range dsts {
-			allowed, err := evalReachability(srcPrefixes, dst, test.Proto, pol, filter, users, nodes)
-			if err != nil {
-				res.Passed = false
-				res.Errors = append(res.Errors, fmt.Sprintf("error testing %q: %v", dst, err))
+	for _, dst := range test.Accept {
+		allowed, err := evalReachability(srcPrefixes, dst, test.Proto, pol, filter, users, nodes)
+		if err != nil {
+			res.Passed = false
+			res.Errors = append(res.Errors, fmt.Sprintf("error testing %q: %v", dst, err))
 
-				continue
-			}
+			continue
+		}
 
-			if allowed == wantAllowed {
-				*ok = append(*ok, dst)
-			} else {
-				res.Passed = false
-
-				*fail = append(*fail, dst)
-			}
+		if allowed {
+			res.AcceptOK = append(res.AcceptOK, dst)
+		} else {
+			res.Passed = false
+			res.AcceptFail = append(res.AcceptFail, dst)
 		}
 	}
 
-	check(test.Accept, true, &res.AcceptOK, &res.AcceptFail)
-	check(test.Deny, false, &res.DenyOK, &res.DenyFail)
+	for _, dst := range test.Deny {
+		allowed, err := evalReachability(srcPrefixes, dst, test.Proto, pol, filter, users, nodes)
+		if err != nil {
+			res.Passed = false
+			res.Errors = append(res.Errors, fmt.Sprintf("error testing %q: %v", dst, err))
+
+			continue
+		}
+
+		if !allowed {
+			res.DenyOK = append(res.DenyOK, dst)
+		} else {
+			res.Passed = false
+			res.DenyFail = append(res.DenyFail, dst)
+		}
+	}
 
 	return res
 }
 
-// resolveTestSource resolves the Src alias of a [PolicyTest] into a slice of
-// [netip.Prefix]. [parseAlias] + [Alias.Resolve] cover every alias type the rest
+// resolveTestSource resolves the Src alias of a PolicyTest into a slice of
+// netip.Prefix. parseAlias + Alias.Resolve cover every alias type the rest
 // of the policy engine supports, so tests inherit alias semantics for free.
 func resolveTestSource(src string, pol *Policy, users []types.User, nodes views.Slice[types.NodeView]) ([]netip.Prefix, error) {
 	alias, err := parseAlias(src)
@@ -371,13 +399,13 @@ func evalReachability(srcPrefixes []netip.Prefix, dst string, proto Protocol, po
 	return true, nil
 }
 
-// parseDestinationAlias is a thin wrapper over [AliasWithPorts.UnmarshalJSON]
+// parseDestinationAlias is a thin wrapper over AliasWithPorts.UnmarshalJSON
 // so callers can hand it a bare `"host:port"` string without re-implementing
 // the parse logic.
 func parseDestinationAlias(dst string) (*AliasWithPorts, error) {
 	var awp AliasWithPorts
 
-	// [AliasWithPorts.UnmarshalJSON] expects a quoted JSON string, so wrap.
+	// AliasWithPorts.UnmarshalJSON expects a quoted JSON string, so wrap.
 	err := awp.UnmarshalJSON([]byte(`"` + dst + `"`))
 	if err != nil {
 		return nil, err
@@ -419,9 +447,9 @@ func srcReachesDst(src netip.Prefix, dstPrefixes []netip.Prefix, ports []tailcfg
 }
 
 // ruleMatchesSource reports whether the rule's source list contains src.
-// [tailcfg.FilterRule.SrcIPs] may be CIDR, single addresses, IP ranges (`a-b`),
-// or `*`; we use [util.ParseIPSet] to cover all of those uniformly. Unparseable
-// entries are skipped (the rule compiler emits well-formed strings, so this is
+// SrcIPs may be CIDR, single addresses, IP ranges (`a-b`), or `*`; we use
+// util.ParseIPSet to cover all of those uniformly. Unparseable entries
+// are skipped (the rule compiler emits well-formed strings, so this is
 // defence-in-depth, not error handling).
 func ruleMatchesSource(rule tailcfg.FilterRule, src netip.Prefix) bool {
 	for _, raw := range rule.SrcIPs {
@@ -439,10 +467,9 @@ func ruleMatchesSource(rule tailcfg.FilterRule, src netip.Prefix) bool {
 }
 
 // ruleMatchesProto reports whether the rule permits any of requestedProtos.
-// An unset [tailcfg.FilterRule.IPProto] means "any protocol" and matches
-// everything. requestedProtos is the per-test protocol set: a single proto
-// for an explicit [PolicyTest.Proto], or the default set when
-// [PolicyTest.Proto] is empty.
+// An unset rule.IPProto means "any protocol" and matches everything.
+// requestedProtos is the per-test protocol set: a single proto for an
+// explicit test.Proto, or the default set when test.Proto is empty.
 func ruleMatchesProto(rule tailcfg.FilterRule, requestedProtos []int) bool {
 	if len(rule.IPProto) == 0 {
 		return true
@@ -474,7 +501,7 @@ func ruleAllowsAnyDest(rule tailcfg.FilterRule, dstPrefixes []netip.Prefix, port
 	return false
 }
 
-// destEntryMatchesPrefixes reports whether the rule's [tailcfg.NetPortRange.IP]
+// destEntryMatchesPrefixes reports whether the rule's NetPortRange.IP
 // (CIDR, single IP, IP range, or "*") covers any prefix in dstPrefixes.
 func destEntryMatchesPrefixes(dp tailcfg.NetPortRange, dstPrefixes []netip.Prefix) bool {
 	set, err := util.ParseIPSet(dp.IP, nil)
diff --git a/hscontrol/policy/v2/testdata/grant_results/via-grant-v47.hujson b/hscontrol/policy/v2/testdata/grant_results/via-grant-v47.hujson
deleted file mode 100644
index 4a46ee03b..000000000
--- a/hscontrol/policy/v2/testdata/grant_results/via-grant-v47.hujson
+++ /dev/null
@@ -1,14164 +0,0 @@
-// via-grant-v47
-//
-// via grant v47 dst literal cidr broader than advertised subnet
-//
-// Nodes with filter rules: 2 of 15
-// Captured at:    2026-05-18T09:07:30Z
-// tool version:   tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "via-grant-v47",
-	"description":    "via grant v47 dst literal cidr broader than advertised subnet",
-	"category":       "grant",
-	"captured_at":    "2026-05-18T09:07:30.233896341Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                                                                      \n  \n                                                                         \n                                                                     \n                                                                   \n                                                                         \n  \n                                                              \n                                                                 \n{\n\t\"category\":    \"grant\",\n\t\"description\": \"via grant v47 dst literal cidr broader than advertised subnet\",\n\t\"id\":          \"via-grant-v47\",\n\t\"options\":     {\"capture_whois\": true},\n\t\"policy\": {\"autoApprovers\": {\"routes\": {\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"10.44.0.0/16\": [\"tag:spearow\"],\n\t\t\"10.55.0.0/16\": [\"tag:fearow\"]\n\t}}, \"grants\": [{\n\t\t\"dst\": [\"10.0.0.0/8\"],\n\t\t\"ip\":  [\"*\"],\n\t\t\"src\": [\"tag:group-a\"],\n\t\t\"via\": [\"tag:router\"]\n\t}], \"groups\": {\n\t\t\"group:admins\":     [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\":      [],\n\t\t\"group:monitors\":   [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\":  \"10.0.0.0/8\",\n\t\t\"prodbox\":   \"100.103.8.15\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\":   [\"odin@example.com\"],\n\t\t\"tag:exit\":     [\"odin@example.com\"],\n\t\t\"tag:pidgey\":   [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\":   [\"odin@example.com\"],\n\t\t\"tag:group-a\":  [\"odin@example.com\"],\n\t\t\"tag:group-b\":  [\"odin@example.com\"],\n\t\t\"tag:ha\":       [\"odin@example.com\"],\n\t\t\"tag:prod\":     [\"odin@example.com\"],\n\t\t\"tag:router\":   [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\":   [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\":      {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/grant.hujson\"\n}\n",
-		"scenario_path":   "scenarios/grant/via-grant-v47.hujson",
-		"full_policy": {"autoApprovers": {"routes": {
-			"10.33.0.0/16": ["tag:router"],
-			"10.44.0.0/16": ["tag:spearow"],
-			"10.55.0.0/16": ["tag:fearow"]
-		}}, "grants": [{
-			"dst": ["10.0.0.0/8"],
-			"ip":  ["*"],
-			"src": ["tag:group-a"],
-			"via": ["tag:router"]
-		}], "groups": {
-			"group:admins":     ["odin@example.com"],
-			"group:developers": ["thor@example.org", "odin@example.com"],
-			"group:empty":      [],
-			"group:monitors":   ["freya@example.com"]
-		}, "hosts": {
-			"internal":  "10.0.0.0/8",
-			"prodbox":   "100.103.8.15",
-			"webserver": "100.108.74.26"
-		}, "tagOwners": {
-			"tag:client":    ["odin@example.com"],
-			"tag:exit":      ["odin@example.com"],
-			"tag:pidgey":    ["odin@example.com"],
-			"tag:pidgeotto": ["odin@example.com"],
-			"tag:group-a":   ["odin@example.com"],
-			"tag:group-b":   ["odin@example.com"],
-			"tag:ha":        ["odin@example.com"],
-			"tag:prod":      ["odin@example.com"],
-			"tag:router":    ["odin@example.com"],
-			"tag:spearow":   ["odin@example.com"],
-			"tag:fearow":    ["odin@example.com"],
-			"tag:server":    ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"beedrill": {
-		"hostname":        "beedrill",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "blastoise": {
-		"hostname":        "blastoise",
-		"tags":            ["tag:exit", "tag:router"],
-		"ipv4":            "100.64.0.9",
-		"ipv6":            "fd7a:115c:a1e0::9",
-		"routable_ips":    ["10.33.0.0/16", "0.0.0.0/0", "::/0"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "bulbasaur": {
-		"hostname":        "bulbasaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.19",
-		"ipv6":            "fd7a:115c:a1e0::13",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "charmander": {
-		"hostname":        "charmander",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.4",
-		"ipv6":            "fd7a:115c:a1e0::4",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "fearow": {
-		"hostname":        "fearow",
-		"tags":            ["tag:fearow"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    ["10.55.0.0/16"],
-		"approved_routes": ["10.55.0.0/16"]
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "kakuna": {
-		"hostname":        "kakuna",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "pidgeotto": {
-		"hostname":        "pidgeotto",
-		"tags":            ["tag:pidgeotto"],
-		"ipv4":            "100.64.0.3",
-		"ipv6":            "fd7a:115c:a1e0::3",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "pidgey": {
-		"hostname":        "pidgey",
-		"tags":            ["tag:pidgey"],
-		"ipv4":            "100.64.0.2",
-		"ipv6":            "fd7a:115c:a1e0::2",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "raticate": {
-		"hostname":        "raticate",
-		"tags":            ["tag:group-b"],
-		"ipv4":            "100.64.0.6",
-		"ipv6":            "fd7a:115c:a1e0::6",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "rattata": {
-		"hostname":        "rattata",
-		"tags":            ["tag:group-a"],
-		"ipv4":            "100.64.0.5",
-		"ipv6":            "fd7a:115c:a1e0::5",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "spearow": {
-		"hostname":        "spearow",
-		"tags":            ["tag:spearow"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    ["10.44.0.0/16"],
-		"approved_routes": ["10.44.0.0/16"]
-	}, "squirtle": {
-		"hostname":        "squirtle",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.18",
-		"ipv6":            "fd7a:115c:a1e0::12",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "weedle": {
-		"hostname":        "weedle",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"beedrill": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         5981618237305639,
-			"StableID":   "nk5QY9y5io11CNTRL",
-			"Name":       "beedrill.tail78f774.ts.net.",
-			"User":       5981618237305639,
-			"Key":        "nodekey:8d00dadb71723afae9a5a66f91f0969d976e421e425f9a59bf724af8ad0be044",
-			"DiscoKey":   "discokey:58a7b5d39f051fe68397efb26faf8750e5e02e9f63bd44898ab0d2072a95b606",
-			"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"Endpoints": [
-				"77.164.248.136:40707",
-				"10.65.0.27:40707",
-				"172.17.0.1:40707",
-				"172.18.0.1:40707",
-				"172.19.0.1:40707",
-				"172.20.0.1:40707",
-				"172.21.0.1:40707",
-				"172.22.0.1:40707",
-				"172.23.0.1:40707",
-				"172.24.0.1:40707",
-				"172.25.0.1:40707",
-				"172.27.0.1:40707",
-				"172.28.0.1:40707",
-				"172.29.0.1:40707",
-				"172.30.0.1:40707"
-			],
-			"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
-				{"Proto": "peerapi4", "Port": 50358},
-				{"Proto": "peerapi6", "Port": 50358},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:07:42.555612283Z",
-			"Tags":              ["tag:server"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "beedrill",
-			"ComputedNameWithHost": "beedrill"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:8d00dadb71723afae9a5a66f91f0969d976e421e425f9a59bf724af8ad0be044",
-		"MachineKey":        "mkey:c0f8e65db1b7d40ade64d7f79b1b6e8357d0b039822dfb0c2064aefe4d8d556f",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"5981618237305639": {
-			"ID":          5981618237305639,
-			"LoginName":   "beedrill.tail78f774.ts.net",
-			"DisplayName": "beedrill"
-		}}
-	}}, "blastoise": {"packet_filter_rules": [{
-		"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-		"DstPorts": [{"IP": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}]
-	}], "packet_filter_matches": [{
-		"IPProto": [6, 17, 1, 58],
-		"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"SrcCaps": null,
-		"Dsts":    [{"Net": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}],
-		"Caps":    []
-	}], "netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2473353104810224,
-			"StableID":   "n9wnGwnBKL11CNTRL",
-			"Name":       "blastoise.tail78f774.ts.net.",
-			"User":       2473353104810224,
-			"Key":        "nodekey:53576a2afaa4b69cb90015c53612c7dfd379f0228b834c69c259c4e6fca4b126",
-			"DiscoKey":   "discokey:ff7cbde611949dd26d88c1b8fb4f44eb7c0d088d56f6a27b55d877b998c19154",
-			"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-			"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:34777",
-				"10.65.0.27:34777",
-				"172.17.0.1:34777",
-				"172.18.0.1:34777",
-				"172.19.0.1:34777",
-				"172.20.0.1:34777",
-				"172.21.0.1:34777",
-				"172.22.0.1:34777",
-				"172.23.0.1:34777",
-				"172.24.0.1:34777",
-				"172.25.0.1:34777",
-				"172.27.0.1:34777",
-				"172.28.0.1:34777",
-				"172.29.0.1:34777",
-				"172.30.0.1:34777"
-			],
-			"Hostinfo": {
-				"Hostname":    "blastoise",
-				"RoutableIPs": ["10.33.0.0/16", "0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit", "tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 60534},
-					{"Proto": "peerapi6", "Port": 60534},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:07:39.354833108Z",
-			"Tags":              ["tag:exit", "tag:router"],
-			"PrimaryRoutes":     ["10.33.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "blastoise",
-			"ComputedNameWithHost": "blastoise"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:53576a2afaa4b69cb90015c53612c7dfd379f0228b834c69c259c4e6fca4b126",
-		"MachineKey": "mkey:fb2a0b9fb8f781ee7920910a5139ef6a349da317cd3599045dc362211893c32b",
-		"Peers": [{
-			"ID":         2235849634173111,
-			"StableID":   "nLB9skycTJ11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:6db2017d3818f302a7d230746785041dbb0314a538f5d655931ebca7add23541",
-			"DiscoKey":   "discokey:483f647524f0e221cc993febe44f860f82f23540a3efa803468d7bae22cb003d",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:43793",
-				"10.65.0.27:43793",
-				"172.17.0.1:43793",
-				"172.18.0.1:43793",
-				"172.19.0.1:43793",
-				"172.20.0.1:43793",
-				"172.21.0.1:43793",
-				"172.22.0.1:43793",
-				"172.23.0.1:43793",
-				"172.24.0.1:43793",
-				"172.25.0.1:43793",
-				"172.27.0.1:43793",
-				"172.28.0.1:43793",
-				"172.29.0.1:43793",
-				"172.30.0.1:43793"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053}
-			]},
-			"Created":              "2026-05-18T09:07:38.293173157Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:group-a"],
-			"Online":               true,
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		}],
-		"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"SrcCaps": null,
-			"Dsts":    [{"Net": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}],
-			"Caps":    []
-		}],
-		"PacketFilterRules": [{
-			"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-			"DstPorts": [{"IP": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}]
-		}],
-		"SSHPolicy":       {"rules": []},
-		"CollectServices": false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "2473353104810224": {
-			"ID":          2473353104810224,
-			"LoginName":   "blastoise.tail78f774.ts.net",
-			"DisplayName": "blastoise"
-		}}
-	}, "whois": {"100.64.0.5": {"Node": {
-		"ID":         2235849634173111,
-		"StableID":   "nLB9skycTJ11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:6db2017d3818f302a7d230746785041dbb0314a538f5d655931ebca7add23541",
-		"DiscoKey":   "discokey:483f647524f0e221cc993febe44f860f82f23540a3efa803468d7bae22cb003d",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:43793",
-			"10.65.0.27:43793",
-			"172.17.0.1:43793",
-			"172.18.0.1:43793",
-			"172.19.0.1:43793",
-			"172.20.0.1:43793",
-			"172.21.0.1:43793",
-			"172.22.0.1:43793",
-			"172.23.0.1:43793",
-			"172.24.0.1:43793",
-			"172.25.0.1:43793",
-			"172.27.0.1:43793",
-			"172.28.0.1:43793",
-			"172.29.0.1:43793",
-			"172.30.0.1:43793"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:07:38.293173157Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::5": {"Node": {
-		"ID":         2235849634173111,
-		"StableID":   "nLB9skycTJ11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:6db2017d3818f302a7d230746785041dbb0314a538f5d655931ebca7add23541",
-		"DiscoKey":   "discokey:483f647524f0e221cc993febe44f860f82f23540a3efa803468d7bae22cb003d",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:43793",
-			"10.65.0.27:43793",
-			"172.17.0.1:43793",
-			"172.18.0.1:43793",
-			"172.19.0.1:43793",
-			"172.20.0.1:43793",
-			"172.21.0.1:43793",
-			"172.22.0.1:43793",
-			"172.23.0.1:43793",
-			"172.24.0.1:43793",
-			"172.25.0.1:43793",
-			"172.27.0.1:43793",
-			"172.28.0.1:43793",
-			"172.29.0.1:43793",
-			"172.30.0.1:43793"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:07:38.293173157Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "bulbasaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         3735169030154237,
-			"StableID":   "n239iHZfAW11CNTRL",
-			"Name":       "bulbasaur.tail78f774.ts.net.",
-			"User":       4156223528223174,
-			"Key":        "nodekey:a774215fe8e225a2f8e3512976b66d28c99f4ec53ce5e8a9a0151bc5e6823f19",
-			"KeyExpiry":  "2026-11-14T09:07:44Z",
-			"DiscoKey":   "discokey:5ed049b7a2ab5d6db0cb238f24853358f630e8732941ab2080352cde120a8424",
-			"Addresses":  ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
-			"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
-			"Endpoints": [
-				"77.164.248.136:52052",
-				"10.65.0.27:52052",
-				"172.17.0.1:52052",
-				"172.18.0.1:52052",
-				"172.19.0.1:52052",
-				"172.20.0.1:52052",
-				"172.21.0.1:52052",
-				"172.22.0.1:52052",
-				"172.23.0.1:52052",
-				"172.24.0.1:52052",
-				"172.25.0.1:52052",
-				"172.27.0.1:52052",
-				"172.28.0.1:52052",
-				"172.29.0.1:52052",
-				"172.30.0.1:52052"
-			],
-			"Hostinfo": {"Hostname": "bulbasaur", "Services": [
-				{"Proto": "peerapi4", "Port": 38156},
-				{"Proto": "peerapi6", "Port": 38156},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:07:44.156697605Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "bulbasaur",
-			"ComputedNameWithHost": "bulbasaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:a774215fe8e225a2f8e3512976b66d28c99f4ec53ce5e8a9a0151bc5e6823f19",
-		"MachineKey":        "mkey:1a4b414c9ccd8577fb02ab172093ad7e402a207afd92586edea123a590100930",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4156223528223174": {
-			"ID":          4156223528223174,
-			"LoginName":   "odin@example.com",
-			"DisplayName": "odin"
-		}}
-	}}, "charmander": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2713035784821404,
-			"StableID":   "nu57xGrjBN11CNTRL",
-			"Name":       "charmander.tail78f774.ts.net.",
-			"User":       2713035784821404,
-			"Key":        "nodekey:5cb9f7acbae73edf559e1377876b21dc4623f284b4910afa113fee4d5b3caa22",
-			"DiscoKey":   "discokey:547d15f2e245fa1cfd074dde54335c3bcea322326dd09b2396b94a2cee1e6616",
-			"Addresses":  ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
-			"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
-			"Endpoints": [
-				"77.164.248.136:39812",
-				"10.65.0.27:39812",
-				"172.17.0.1:39812",
-				"172.18.0.1:39812",
-				"172.19.0.1:39812",
-				"172.20.0.1:39812",
-				"172.21.0.1:39812",
-				"172.22.0.1:39812",
-				"172.23.0.1:39812",
-				"172.24.0.1:39812",
-				"172.25.0.1:39812",
-				"172.27.0.1:39812",
-				"172.28.0.1:39812",
-				"172.29.0.1:39812",
-				"172.30.0.1:39812"
-			],
-			"Hostinfo": {
-				"Hostname":    "charmander",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 37067},
-					{"Proto": "peerapi6", "Port": 37067},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:07:37.761033386Z",
-			"Tags":              ["tag:exit"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "charmander",
-			"ComputedNameWithHost": "charmander"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:5cb9f7acbae73edf559e1377876b21dc4623f284b4910afa113fee4d5b3caa22",
-		"MachineKey":        "mkey:57893d73ba8b22cc2ea924982dfcf12560269df0307d293cbbd432dddcda771f",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"2713035784821404": {
-			"ID":          2713035784821404,
-			"LoginName":   "charmander.tail78f774.ts.net",
-			"DisplayName": "charmander"
-		}}
-	}}, "fearow": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1036298269181620,
-			"StableID":   "n9BqQJoL6911CNTRL",
-			"Name":       "fearow.tail78f774.ts.net.",
-			"User":       1036298269181620,
-			"Key":        "nodekey:8c80f779c4b3f88a3cea46596bc465f7c32b0e495ce49f8163f3dab22eb32027",
-			"DiscoKey":   "discokey:087e934fddc3d13002704b01725a7befd7c406315e4b4061938dc791626e8c31",
-			"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-			"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128", "10.55.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:58140",
-				"10.65.0.27:58140",
-				"172.17.0.1:58140",
-				"172.18.0.1:58140",
-				"172.19.0.1:58140",
-				"172.20.0.1:58140",
-				"172.21.0.1:58140",
-				"172.22.0.1:58140",
-				"172.23.0.1:58140",
-				"172.24.0.1:58140",
-				"172.25.0.1:58140",
-				"172.27.0.1:58140",
-				"172.28.0.1:58140",
-				"172.29.0.1:58140",
-				"172.30.0.1:58140"
-			],
-			"Hostinfo": {
-				"Hostname":    "fearow",
-				"RoutableIPs": ["10.55.0.0/16"],
-				"RequestTags": ["tag:fearow"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:07:40.418352282Z",
-			"Tags":              ["tag:fearow"],
-			"PrimaryRoutes":     ["10.55.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "fearow",
-			"ComputedNameWithHost": "fearow"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:8c80f779c4b3f88a3cea46596bc465f7c32b0e495ce49f8163f3dab22eb32027",
-		"MachineKey":        "mkey:b61388ca8350efc3e792f6ccf81a353d0e56cb12b010490006bea4ff8850ea53",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1036298269181620": {
-			"ID":          1036298269181620,
-			"LoginName":   "fearow.tail78f774.ts.net",
-			"DisplayName": "fearow"
-		}}
-	}}, "ivysaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         6052475718574476,
-			"StableID":   "nRjDXtGBGp11CNTRL",
-			"Name":       "ivysaur.tail78f774.ts.net.",
-			"User":       4538565228176803,
-			"Key":        "nodekey:bf95ec3ca0ef9fcf414d6c2dbcde1ad167462596f0302534a4fb0599de2d7608",
-			"KeyExpiry":  "2026-11-14T09:07:43Z",
-			"DiscoKey":   "discokey:d2847f8e1119447612990448a50b04d407f3ef9c60b84d2087dc528f4c7d102c",
-			"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"Endpoints": [
-				"77.164.248.136:47977",
-				"10.65.0.27:47977",
-				"172.17.0.1:47977",
-				"172.18.0.1:47977",
-				"172.19.0.1:47977",
-				"172.20.0.1:47977",
-				"172.21.0.1:47977",
-				"172.22.0.1:47977",
-				"172.23.0.1:47977",
-				"172.24.0.1:47977",
-				"172.25.0.1:47977",
-				"172.27.0.1:47977",
-				"172.28.0.1:47977",
-				"172.29.0.1:47977",
-				"172.30.0.1:47977"
-			],
-			"Hostinfo": {"Hostname": "ivysaur", "Services": [
-				{"Proto": "peerapi4", "Port": 62496},
-				{"Proto": "peerapi6", "Port": 62496},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:07:43.094398266Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "ivysaur",
-			"ComputedNameWithHost": "ivysaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:bf95ec3ca0ef9fcf414d6c2dbcde1ad167462596f0302534a4fb0599de2d7608",
-		"MachineKey":        "mkey:11c887185e0c4768aec007945b24a597760b1179c62ff13f0abd215d5e031a10",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4538565228176803": {
-			"ID":          4538565228176803,
-			"LoginName":   "thor@example.org",
-			"DisplayName": "thor"
-		}}
-	}}, "kakuna": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         794053188242122,
-			"StableID":   "n5ky8zRdC711CNTRL",
-			"Name":       "kakuna.tail78f774.ts.net.",
-			"User":       794053188242122,
-			"Key":        "nodekey:0e51741477cf6d0151375bef8bf17b20be798ecfc80211cd2b5242a9357e320e",
-			"DiscoKey":   "discokey:2bca03dbb97dbdb2cc5edafc535dbe06f25ec21f76c7827ff827c1d30b593c19",
-			"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"Endpoints": [
-				"77.164.248.136:59649",
-				"10.65.0.27:59649",
-				"172.17.0.1:59649",
-				"172.18.0.1:59649",
-				"172.19.0.1:59649",
-				"172.20.0.1:59649",
-				"172.21.0.1:59649",
-				"172.22.0.1:59649",
-				"172.23.0.1:59649",
-				"172.24.0.1:59649",
-				"172.25.0.1:59649",
-				"172.27.0.1:59649",
-				"172.28.0.1:59649",
-				"172.29.0.1:59649",
-				"172.30.0.1:59649"
-			],
-			"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
-				{"Proto": "peerapi4", "Port": 51523},
-				{"Proto": "peerapi6", "Port": 51523},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:07:42.022585026Z",
-			"Tags":              ["tag:prod"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "kakuna",
-			"ComputedNameWithHost": "kakuna"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:0e51741477cf6d0151375bef8bf17b20be798ecfc80211cd2b5242a9357e320e",
-		"MachineKey":        "mkey:5e46df86af2cd5bfacbc9f7d0526d488a8be09677e7b852e4fe037211bc8af17",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"794053188242122": {
-			"ID":          794053188242122,
-			"LoginName":   "kakuna.tail78f774.ts.net",
-			"DisplayName": "kakuna"
-		}}
-	}}, "pidgeotto": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         4812977064092943,
-			"StableID":   "nG1XtGkoae11CNTRL",
-			"Name":       "pidgeotto.tail78f774.ts.net.",
-			"User":       4812977064092943,
-			"Key":        "nodekey:9d1fd36fc77794676d764f15ba49b55085ba4d30da84cfcde57ab42304ec6a6b",
-			"DiscoKey":   "discokey:811005c8eb7cd134ad3a54ec8646d14a18c9c6f437943fd5518f232685e31b07",
-			"Addresses":  ["100.64.0.3/32", "fd7a:115c:a1e0::3/128"],
-			"AllowedIPs": ["100.64.0.3/32", "fd7a:115c:a1e0::3/128"],
-			"Endpoints": [
-				"77.164.248.136:57034",
-				"10.65.0.27:57034",
-				"172.17.0.1:57034",
-				"172.18.0.1:57034",
-				"172.19.0.1:57034",
-				"172.20.0.1:57034",
-				"172.21.0.1:57034",
-				"172.22.0.1:57034",
-				"172.23.0.1:57034",
-				"172.24.0.1:57034",
-				"172.25.0.1:57034",
-				"172.27.0.1:57034",
-				"172.28.0.1:57034",
-				"172.29.0.1:57034",
-				"172.30.0.1:57034"
-			],
-			"Hostinfo": {
-				"Hostname":    "pidgeotto",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:pidgeotto"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 34152},
-					{"Proto": "peerapi6", "Port": 34152},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:07:37.243602289Z",
-			"Tags":              ["tag:pidgeotto"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "pidgeotto",
-			"ComputedNameWithHost": "pidgeotto"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:9d1fd36fc77794676d764f15ba49b55085ba4d30da84cfcde57ab42304ec6a6b",
-		"MachineKey":        "mkey:cc92e5235f0a5f4f21f80e5501305887c00be15fc602099fe62772fac452d518",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4812977064092943": {
-			"ID":          4812977064092943,
-			"LoginName":   "pidgeotto.tail78f774.ts.net",
-			"DisplayName": "pidgeotto"
-		}}
-	}}, "pidgey": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8216591946215860,
-			"StableID":   "n5PctNwJA721CNTRL",
-			"Name":       "pidgey.tail78f774.ts.net.",
-			"User":       8216591946215860,
-			"Key":        "nodekey:f54e53dd1c4183ffc21e79366245cd9ca3388580ab0693eddd6f22e666f6ce04",
-			"DiscoKey":   "discokey:5d7953f92951857532d9b605a02b7c630349de3174d0c2b6cdfebb970d766260",
-			"Addresses":  ["100.64.0.2/32", "fd7a:115c:a1e0::2/128"],
-			"AllowedIPs": ["100.64.0.2/32", "fd7a:115c:a1e0::2/128"],
-			"Endpoints": [
-				"77.164.248.136:42913",
-				"10.65.0.27:42913",
-				"172.17.0.1:42913",
-				"172.18.0.1:42913",
-				"172.19.0.1:42913",
-				"172.20.0.1:42913",
-				"172.21.0.1:42913",
-				"172.22.0.1:42913",
-				"172.23.0.1:42913",
-				"172.24.0.1:42913",
-				"172.25.0.1:42913",
-				"172.27.0.1:42913",
-				"172.28.0.1:42913",
-				"172.29.0.1:42913",
-				"172.30.0.1:42913"
-			],
-			"Hostinfo": {
-				"Hostname":    "pidgey",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:pidgey"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 46590},
-					{"Proto": "peerapi6", "Port": 46590},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:07:36.71265978Z",
-			"Tags":              ["tag:pidgey"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "pidgey",
-			"ComputedNameWithHost": "pidgey"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:f54e53dd1c4183ffc21e79366245cd9ca3388580ab0693eddd6f22e666f6ce04",
-		"MachineKey":        "mkey:4c30a202339842a91c2e7ea26434618557cb1d565ca9fab62b2b4cf4b9c0f456",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"8216591946215860": {
-			"ID":          8216591946215860,
-			"LoginName":   "pidgey.tail78f774.ts.net",
-			"DisplayName": "pidgey"
-		}}
-	}}, "raticate": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8892810857496319,
-			"StableID":   "ntyeUa4aSC21CNTRL",
-			"Name":       "raticate.tail78f774.ts.net.",
-			"User":       8892810857496319,
-			"Key":        "nodekey:1a7845aef659eda1c859138a1cc5bf0c67a2558c91b339fe6ac5800dcda6ae5a",
-			"DiscoKey":   "discokey:59fae4ca38649d03d183574d5bf8f4c73875161d00416df26079d973a3387561",
-			"Addresses":  ["100.64.0.6/32", "fd7a:115c:a1e0::6/128"],
-			"AllowedIPs": ["100.64.0.6/32", "fd7a:115c:a1e0::6/128"],
-			"Endpoints": [
-				"77.164.248.136:34561",
-				"10.65.0.27:34561",
-				"172.17.0.1:34561",
-				"172.18.0.1:34561",
-				"172.19.0.1:34561",
-				"172.20.0.1:34561",
-				"172.21.0.1:34561",
-				"172.22.0.1:34561",
-				"172.23.0.1:34561",
-				"172.24.0.1:34561",
-				"172.25.0.1:34561",
-				"172.27.0.1:34561",
-				"172.28.0.1:34561",
-				"172.29.0.1:34561",
-				"172.30.0.1:34561"
-			],
-			"Hostinfo": {"Hostname": "raticate", "RequestTags": ["tag:group-b"], "Services": [
-				{"Proto": "peerapi4", "Port": 61927},
-				{"Proto": "peerapi6", "Port": 61927},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:07:38.818449728Z",
-			"Tags":              ["tag:group-b"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "raticate",
-			"ComputedNameWithHost": "raticate"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:1a7845aef659eda1c859138a1cc5bf0c67a2558c91b339fe6ac5800dcda6ae5a",
-		"MachineKey":        "mkey:9a874ea341056cfa481dc395dd2bc7cd1a286ab6b6ab02b644a82fb348539a63",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"8892810857496319": {
-			"ID":          8892810857496319,
-			"LoginName":   "raticate.tail78f774.ts.net",
-			"DisplayName": "raticate"
-		}}
-	}}, "rattata": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2235849634173111,
-			"StableID":   "nLB9skycTJ11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       2235849634173111,
-			"Key":        "nodekey:6db2017d3818f302a7d230746785041dbb0314a538f5d655931ebca7add23541",
-			"DiscoKey":   "discokey:483f647524f0e221cc993febe44f860f82f23540a3efa803468d7bae22cb003d",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:43793",
-				"10.65.0.27:43793",
-				"172.17.0.1:43793",
-				"172.18.0.1:43793",
-				"172.19.0.1:43793",
-				"172.20.0.1:43793",
-				"172.21.0.1:43793",
-				"172.22.0.1:43793",
-				"172.23.0.1:43793",
-				"172.24.0.1:43793",
-				"172.25.0.1:43793",
-				"172.27.0.1:43793",
-				"172.28.0.1:43793",
-				"172.29.0.1:43793",
-				"172.30.0.1:43793"
-			],
-			"Hostinfo": {"Hostname": "rattata", "RequestTags": ["tag:group-a"], "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:07:38.293173157Z",
-			"Tags":              ["tag:group-a"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:6db2017d3818f302a7d230746785041dbb0314a538f5d655931ebca7add23541",
-		"MachineKey": "mkey:11b1a37b8ec4366a8bb0973dcbe374c151cdb60c99d70b7ea095c75f126e1838",
-		"Peers": [{
-			"ID":         2473353104810224,
-			"StableID":   "n9wnGwnBKL11CNTRL",
-			"Name":       "blastoise.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:53576a2afaa4b69cb90015c53612c7dfd379f0228b834c69c259c4e6fca4b126",
-			"DiscoKey":   "discokey:ff7cbde611949dd26d88c1b8fb4f44eb7c0d088d56f6a27b55d877b998c19154",
-			"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-			"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:34777",
-				"10.65.0.27:34777",
-				"172.17.0.1:34777",
-				"172.18.0.1:34777",
-				"172.19.0.1:34777",
-				"172.20.0.1:34777",
-				"172.21.0.1:34777",
-				"172.22.0.1:34777",
-				"172.23.0.1:34777",
-				"172.24.0.1:34777",
-				"172.25.0.1:34777",
-				"172.27.0.1:34777",
-				"172.28.0.1:34777",
-				"172.29.0.1:34777",
-				"172.30.0.1:34777"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-				{"Proto": "peerapi4", "Port": 60534},
-				{"Proto": "peerapi6", "Port": 60534}
-			]},
-			"Created":              "2026-05-18T09:07:39.354833108Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:exit", "tag:router"],
-			"PrimaryRoutes":        ["10.33.0.0/16"],
-			"Online":               true,
-			"ComputedName":         "blastoise",
-			"ComputedNameWithHost": "blastoise"
-		}, {
-			"ID":         3041776490751602,
-			"StableID":   "nyvyQ1KdkQ11CNTRL",
-			"Name":       "squirtle.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:50b6a0a0d1e146d32491c4755b27bdbf70c363b6e9e1d93f4352e6950a7c4654",
-			"DiscoKey":   "discokey:3635aa1d34b3d62fd7d260145cb8e9a1ff0358707f6767f22bc6f4da95517169",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"Endpoints": [
-				"77.164.248.136:34905",
-				"10.65.0.27:34905",
-				"172.17.0.1:34905",
-				"172.18.0.1:34905",
-				"172.19.0.1:34905",
-				"172.20.0.1:34905",
-				"172.21.0.1:34905",
-				"172.22.0.1:34905",
-				"172.23.0.1:34905",
-				"172.24.0.1:34905",
-				"172.25.0.1:34905",
-				"172.27.0.1:34905",
-				"172.28.0.1:34905",
-				"172.29.0.1:34905",
-				"172.30.0.1:34905"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-				{"Proto": "peerapi4", "Port": 43119},
-				{"Proto": "peerapi6", "Port": 43119}
-			]},
-			"Created":              "2026-05-18T09:07:40.954380299Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:router"],
-			"Online":               true,
-			"ComputedName":         "squirtle",
-			"ComputedNameWithHost": "squirtle"
-		}],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "2235849634173111": {
-			"ID":          2235849634173111,
-			"LoginName":   "rattata.tail78f774.ts.net",
-			"DisplayName": "rattata"
-		}}
-	}, "whois": {"100.64.0.13": {"Node": {
-		"ID":         3041776490751602,
-		"StableID":   "nyvyQ1KdkQ11CNTRL",
-		"Name":       "squirtle.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:50b6a0a0d1e146d32491c4755b27bdbf70c363b6e9e1d93f4352e6950a7c4654",
-		"DiscoKey":   "discokey:3635aa1d34b3d62fd7d260145cb8e9a1ff0358707f6767f22bc6f4da95517169",
-		"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"Endpoints": [
-			"77.164.248.136:34905",
-			"10.65.0.27:34905",
-			"172.17.0.1:34905",
-			"172.18.0.1:34905",
-			"172.19.0.1:34905",
-			"172.20.0.1:34905",
-			"172.21.0.1:34905",
-			"172.22.0.1:34905",
-			"172.23.0.1:34905",
-			"172.24.0.1:34905",
-			"172.25.0.1:34905",
-			"172.27.0.1:34905",
-			"172.28.0.1:34905",
-			"172.29.0.1:34905",
-			"172.30.0.1:34905"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-			{"Proto": "peerapi4", "Port": 43119},
-			{"Proto": "peerapi6", "Port": 43119}
-		]},
-		"Created":              "2026-05-18T09:07:40.954380299Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:router"],
-		"Online":               true,
-		"ComputedName":         "squirtle",
-		"ComputedNameWithHost": "squirtle"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "100.64.0.9": {"Node": {
-		"ID":         2473353104810224,
-		"StableID":   "n9wnGwnBKL11CNTRL",
-		"Name":       "blastoise.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:53576a2afaa4b69cb90015c53612c7dfd379f0228b834c69c259c4e6fca4b126",
-		"DiscoKey":   "discokey:ff7cbde611949dd26d88c1b8fb4f44eb7c0d088d56f6a27b55d877b998c19154",
-		"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-		"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-		"Endpoints": [
-			"77.164.248.136:34777",
-			"10.65.0.27:34777",
-			"172.17.0.1:34777",
-			"172.18.0.1:34777",
-			"172.19.0.1:34777",
-			"172.20.0.1:34777",
-			"172.21.0.1:34777",
-			"172.22.0.1:34777",
-			"172.23.0.1:34777",
-			"172.24.0.1:34777",
-			"172.25.0.1:34777",
-			"172.27.0.1:34777",
-			"172.28.0.1:34777",
-			"172.29.0.1:34777",
-			"172.30.0.1:34777"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-			{"Proto": "peerapi4", "Port": 60534},
-			{"Proto": "peerapi6", "Port": 60534}
-		]},
-		"Created":              "2026-05-18T09:07:39.354833108Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:exit", "tag:router"],
-		"PrimaryRoutes":        ["10.33.0.0/16"],
-		"Online":               true,
-		"ComputedName":         "blastoise",
-		"ComputedNameWithHost": "blastoise"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::9": {"Node": {
-		"ID":         2473353104810224,
-		"StableID":   "n9wnGwnBKL11CNTRL",
-		"Name":       "blastoise.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:53576a2afaa4b69cb90015c53612c7dfd379f0228b834c69c259c4e6fca4b126",
-		"DiscoKey":   "discokey:ff7cbde611949dd26d88c1b8fb4f44eb7c0d088d56f6a27b55d877b998c19154",
-		"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-		"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-		"Endpoints": [
-			"77.164.248.136:34777",
-			"10.65.0.27:34777",
-			"172.17.0.1:34777",
-			"172.18.0.1:34777",
-			"172.19.0.1:34777",
-			"172.20.0.1:34777",
-			"172.21.0.1:34777",
-			"172.22.0.1:34777",
-			"172.23.0.1:34777",
-			"172.24.0.1:34777",
-			"172.25.0.1:34777",
-			"172.27.0.1:34777",
-			"172.28.0.1:34777",
-			"172.29.0.1:34777",
-			"172.30.0.1:34777"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-			{"Proto": "peerapi4", "Port": 60534},
-			{"Proto": "peerapi6", "Port": 60534}
-		]},
-		"Created":              "2026-05-18T09:07:39.354833108Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:exit", "tag:router"],
-		"PrimaryRoutes":        ["10.33.0.0/16"],
-		"Online":               true,
-		"ComputedName":         "blastoise",
-		"ComputedNameWithHost": "blastoise"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::d": {"Node": {
-		"ID":         3041776490751602,
-		"StableID":   "nyvyQ1KdkQ11CNTRL",
-		"Name":       "squirtle.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:50b6a0a0d1e146d32491c4755b27bdbf70c363b6e9e1d93f4352e6950a7c4654",
-		"DiscoKey":   "discokey:3635aa1d34b3d62fd7d260145cb8e9a1ff0358707f6767f22bc6f4da95517169",
-		"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"Endpoints": [
-			"77.164.248.136:34905",
-			"10.65.0.27:34905",
-			"172.17.0.1:34905",
-			"172.18.0.1:34905",
-			"172.19.0.1:34905",
-			"172.20.0.1:34905",
-			"172.21.0.1:34905",
-			"172.22.0.1:34905",
-			"172.23.0.1:34905",
-			"172.24.0.1:34905",
-			"172.25.0.1:34905",
-			"172.27.0.1:34905",
-			"172.28.0.1:34905",
-			"172.29.0.1:34905",
-			"172.30.0.1:34905"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-			{"Proto": "peerapi4", "Port": 43119},
-			{"Proto": "peerapi6", "Port": 43119}
-		]},
-		"Created":              "2026-05-18T09:07:40.954380299Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:router"],
-		"Online":               true,
-		"ComputedName":         "squirtle",
-		"ComputedNameWithHost": "squirtle"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "spearow": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2799795516713445,
-			"StableID":   "nQv2N5t2sN11CNTRL",
-			"Name":       "spearow.tail78f774.ts.net.",
-			"User":       2799795516713445,
-			"Key":        "nodekey:1add08b06d606dadeada63b16c9f03e40caba4b5f8578bc14c687e6a25b1ac7a",
-			"DiscoKey":   "discokey:6610b340849c87be81ab4747629a14f6e473a71cc0ea8da4acfbbb2d485dff55",
-			"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128", "10.44.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:39652",
-				"10.65.0.27:39652",
-				"172.17.0.1:39652",
-				"172.18.0.1:39652",
-				"172.19.0.1:39652",
-				"172.20.0.1:39652",
-				"172.21.0.1:39652",
-				"172.22.0.1:39652",
-				"172.23.0.1:39652",
-				"172.24.0.1:39652",
-				"172.25.0.1:39652",
-				"172.27.0.1:39652",
-				"172.28.0.1:39652",
-				"172.29.0.1:39652",
-				"172.30.0.1:39652"
-			],
-			"Hostinfo": {
-				"Hostname":    "spearow",
-				"RoutableIPs": ["10.44.0.0/16"],
-				"RequestTags": ["tag:spearow"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:07:39.890624348Z",
-			"Tags":              ["tag:spearow"],
-			"PrimaryRoutes":     ["10.44.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "spearow",
-			"ComputedNameWithHost": "spearow"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:1add08b06d606dadeada63b16c9f03e40caba4b5f8578bc14c687e6a25b1ac7a",
-		"MachineKey":        "mkey:b93eabce8cd9b6798a4dc31251d1e04b02102f4f5269e53c0ff2a33e3382aa18",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"2799795516713445": {
-			"ID":          2799795516713445,
-			"LoginName":   "spearow.tail78f774.ts.net",
-			"DisplayName": "spearow"
-		}}
-	}}, "squirtle": {"packet_filter_rules": [{
-		"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-		"DstPorts": [{"IP": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}]
-	}], "packet_filter_matches": [{
-		"IPProto": [6, 17, 1, 58],
-		"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"SrcCaps": null,
-		"Dsts":    [{"Net": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}],
-		"Caps":    []
-	}], "netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         3041776490751602,
-			"StableID":   "nyvyQ1KdkQ11CNTRL",
-			"Name":       "squirtle.tail78f774.ts.net.",
-			"User":       3041776490751602,
-			"Key":        "nodekey:50b6a0a0d1e146d32491c4755b27bdbf70c363b6e9e1d93f4352e6950a7c4654",
-			"DiscoKey":   "discokey:3635aa1d34b3d62fd7d260145cb8e9a1ff0358707f6767f22bc6f4da95517169",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:34905",
-				"10.65.0.27:34905",
-				"172.17.0.1:34905",
-				"172.18.0.1:34905",
-				"172.19.0.1:34905",
-				"172.20.0.1:34905",
-				"172.21.0.1:34905",
-				"172.22.0.1:34905",
-				"172.23.0.1:34905",
-				"172.24.0.1:34905",
-				"172.25.0.1:34905",
-				"172.27.0.1:34905",
-				"172.28.0.1:34905",
-				"172.29.0.1:34905",
-				"172.30.0.1:34905"
-			],
-			"Hostinfo": {
-				"Hostname":    "squirtle",
-				"RoutableIPs": ["10.33.0.0/16"],
-				"RequestTags": ["tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:07:40.954380299Z",
-			"Tags":              ["tag:router"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "squirtle",
-			"ComputedNameWithHost": "squirtle"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:50b6a0a0d1e146d32491c4755b27bdbf70c363b6e9e1d93f4352e6950a7c4654",
-		"MachineKey": "mkey:f39e2e6f5ed734cb72eb5f65a803a4e85b2aadfa1c73df8fbe89653b4efca311",
-		"Peers": [{
-			"ID":         2235849634173111,
-			"StableID":   "nLB9skycTJ11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:6db2017d3818f302a7d230746785041dbb0314a538f5d655931ebca7add23541",
-			"DiscoKey":   "discokey:483f647524f0e221cc993febe44f860f82f23540a3efa803468d7bae22cb003d",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:43793",
-				"10.65.0.27:43793",
-				"172.17.0.1:43793",
-				"172.18.0.1:43793",
-				"172.19.0.1:43793",
-				"172.20.0.1:43793",
-				"172.21.0.1:43793",
-				"172.22.0.1:43793",
-				"172.23.0.1:43793",
-				"172.24.0.1:43793",
-				"172.25.0.1:43793",
-				"172.27.0.1:43793",
-				"172.28.0.1:43793",
-				"172.29.0.1:43793",
-				"172.30.0.1:43793"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053}
-			]},
-			"Created":              "2026-05-18T09:07:38.293173157Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:group-a"],
-			"Online":               true,
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		}],
-		"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"SrcCaps": null,
-			"Dsts":    [{"Net": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}],
-			"Caps":    []
-		}],
-		"PacketFilterRules": [{
-			"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-			"DstPorts": [{"IP": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}]
-		}],
-		"SSHPolicy":       {"rules": []},
-		"CollectServices": false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "3041776490751602": {
-			"ID":          3041776490751602,
-			"LoginName":   "squirtle.tail78f774.ts.net",
-			"DisplayName": "squirtle"
-		}}
-	}, "whois": {"100.64.0.5": {"Node": {
-		"ID":         2235849634173111,
-		"StableID":   "nLB9skycTJ11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:6db2017d3818f302a7d230746785041dbb0314a538f5d655931ebca7add23541",
-		"DiscoKey":   "discokey:483f647524f0e221cc993febe44f860f82f23540a3efa803468d7bae22cb003d",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:43793",
-			"10.65.0.27:43793",
-			"172.17.0.1:43793",
-			"172.18.0.1:43793",
-			"172.19.0.1:43793",
-			"172.20.0.1:43793",
-			"172.21.0.1:43793",
-			"172.22.0.1:43793",
-			"172.23.0.1:43793",
-			"172.24.0.1:43793",
-			"172.25.0.1:43793",
-			"172.27.0.1:43793",
-			"172.28.0.1:43793",
-			"172.29.0.1:43793",
-			"172.30.0.1:43793"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:07:38.293173157Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::5": {"Node": {
-		"ID":         2235849634173111,
-		"StableID":   "nLB9skycTJ11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:6db2017d3818f302a7d230746785041dbb0314a538f5d655931ebca7add23541",
-		"DiscoKey":   "discokey:483f647524f0e221cc993febe44f860f82f23540a3efa803468d7bae22cb003d",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:43793",
-			"10.65.0.27:43793",
-			"172.17.0.1:43793",
-			"172.18.0.1:43793",
-			"172.19.0.1:43793",
-			"172.20.0.1:43793",
-			"172.21.0.1:43793",
-			"172.22.0.1:43793",
-			"172.23.0.1:43793",
-			"172.24.0.1:43793",
-			"172.25.0.1:43793",
-			"172.27.0.1:43793",
-			"172.28.0.1:43793",
-			"172.29.0.1:43793",
-			"172.30.0.1:43793"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:07:38.293173157Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "venusaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2373815828419161,
-			"StableID":   "nCWQ1m77YK11CNTRL",
-			"Name":       "venusaur.tail78f774.ts.net.",
-			"User":       3982058329734709,
-			"Key":        "nodekey:06e4dabcb61a95f21c7addb5a986754fbe29b7b78793757eb8ad16823c17936f",
-			"KeyExpiry":  "2026-11-14T09:07:43Z",
-			"DiscoKey":   "discokey:01f918807dbcd783cbec6fc8a68db8349ba155d45b222bc28528d647831a7b64",
-			"Addresses":  ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
-			"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
-			"Endpoints": [
-				"77.164.248.136:56337",
-				"10.65.0.27:56337",
-				"172.17.0.1:56337",
-				"172.18.0.1:56337",
-				"172.19.0.1:56337",
-				"172.20.0.1:56337",
-				"172.21.0.1:56337",
-				"172.22.0.1:56337",
-				"172.23.0.1:56337",
-				"172.24.0.1:56337",
-				"172.25.0.1:56337",
-				"172.27.0.1:56337",
-				"172.28.0.1:56337",
-				"172.29.0.1:56337",
-				"172.30.0.1:56337"
-			],
-			"Hostinfo": {"Hostname": "venusaur", "Services": [
-				{"Proto": "peerapi4", "Port": 42394},
-				{"Proto": "peerapi6", "Port": 42394},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:07:43.621164687Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "venusaur",
-			"ComputedNameWithHost": "venusaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:06e4dabcb61a95f21c7addb5a986754fbe29b7b78793757eb8ad16823c17936f",
-		"MachineKey":        "mkey:907eebd2a1d7c7f88e175e6db66c386073b22db0f4fb47d9089bb48c7fb14d7a",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"3982058329734709": {
-			"ID":          3982058329734709,
-			"LoginName":   "freya@example.com",
-			"DisplayName": "freya"
-		}}
-	}}, "weedle": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         5012072571545429,
-			"StableID":   "nAKT7Zey8g11CNTRL",
-			"Name":       "weedle.tail78f774.ts.net.",
-			"User":       5012072571545429,
-			"Key":        "nodekey:240035543acf1f0c2d2f9d4c0f6eeed6500f8805c7d43e74e06b6ae1ebb19578",
-			"DiscoKey":   "discokey:da4a9c01d0028620fbc9b91a315542a2e2b2931aabe6bdf692de73234e255945",
-			"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"Endpoints": [
-				"77.164.248.136:35714",
-				"10.65.0.27:35714",
-				"172.17.0.1:35714",
-				"172.18.0.1:35714",
-				"172.19.0.1:35714",
-				"172.20.0.1:35714",
-				"172.21.0.1:35714",
-				"172.22.0.1:35714",
-				"172.23.0.1:35714",
-				"172.24.0.1:35714",
-				"172.25.0.1:35714",
-				"172.27.0.1:35714",
-				"172.28.0.1:35714",
-				"172.29.0.1:35714",
-				"172.30.0.1:35714"
-			],
-			"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
-				{"Proto": "peerapi4", "Port": 63957},
-				{"Proto": "peerapi6", "Port": 63957},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:07:41.490756459Z",
-			"Tags":              ["tag:client"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "weedle",
-			"ComputedNameWithHost": "weedle"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:240035543acf1f0c2d2f9d4c0f6eeed6500f8805c7d43e74e06b6ae1ebb19578",
-		"MachineKey":        "mkey:28507eb157e4d6f03845a0ab0be1d48b083f3bfef571ccc9cd3d294e0cc2c656",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"5012072571545429": {
-			"ID":          5012072571545429,
-			"LoginName":   "weedle.tail78f774.ts.net",
-			"DisplayName": "weedle"
-		}}
-	}}}
-}
diff --git a/hscontrol/policy/v2/testdata/grant_results/via-grant-v48.hujson b/hscontrol/policy/v2/testdata/grant_results/via-grant-v48.hujson
deleted file mode 100644
index 807e346af..000000000
--- a/hscontrol/policy/v2/testdata/grant_results/via-grant-v48.hujson
+++ /dev/null
@@ -1,14164 +0,0 @@
-// via-grant-v48
-//
-// via grant v48 dst cidr narrower than advertised subnet
-//
-// Nodes with filter rules: 2 of 15
-// Captured at:    2026-05-18T09:08:45Z
-// tool version:   tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "via-grant-v48",
-	"description":    "via grant v48 dst cidr narrower than advertised subnet",
-	"category":       "grant",
-	"captured_at":    "2026-05-18T09:08:45.834537146Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                                                               \n  \n                                                                         \n                                                                   \n                                                                       \n                                     \n  \n                                                                \n                                                                 \n{\n\t\"category\":    \"grant\",\n\t\"description\": \"via grant v48 dst cidr narrower than advertised subnet\",\n\t\"id\":          \"via-grant-v48\",\n\t\"options\":     {\"capture_whois\": true},\n\t\"policy\": {\"autoApprovers\": {\"routes\": {\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"10.44.0.0/16\": [\"tag:spearow\"],\n\t\t\"10.55.0.0/16\": [\"tag:fearow\"]\n\t}}, \"grants\": [{\n\t\t\"dst\": [\"10.33.5.0/24\"],\n\t\t\"ip\":  [\"*\"],\n\t\t\"src\": [\"tag:group-a\"],\n\t\t\"via\": [\"tag:router\"]\n\t}], \"groups\": {\n\t\t\"group:admins\":     [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\":      [],\n\t\t\"group:monitors\":   [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\":  \"10.0.0.0/8\",\n\t\t\"prodbox\":   \"100.103.8.15\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\":   [\"odin@example.com\"],\n\t\t\"tag:exit\":     [\"odin@example.com\"],\n\t\t\"tag:pidgey\":   [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\":   [\"odin@example.com\"],\n\t\t\"tag:group-a\":  [\"odin@example.com\"],\n\t\t\"tag:group-b\":  [\"odin@example.com\"],\n\t\t\"tag:ha\":       [\"odin@example.com\"],\n\t\t\"tag:prod\":     [\"odin@example.com\"],\n\t\t\"tag:router\":   [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\":   [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\":      {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/grant.hujson\"\n}\n",
-		"scenario_path":   "scenarios/grant/via-grant-v48.hujson",
-		"full_policy": {"autoApprovers": {"routes": {
-			"10.33.0.0/16": ["tag:router"],
-			"10.44.0.0/16": ["tag:spearow"],
-			"10.55.0.0/16": ["tag:fearow"]
-		}}, "grants": [{
-			"dst": ["10.33.5.0/24"],
-			"ip":  ["*"],
-			"src": ["tag:group-a"],
-			"via": ["tag:router"]
-		}], "groups": {
-			"group:admins":     ["odin@example.com"],
-			"group:developers": ["thor@example.org", "odin@example.com"],
-			"group:empty":      [],
-			"group:monitors":   ["freya@example.com"]
-		}, "hosts": {
-			"internal":  "10.0.0.0/8",
-			"prodbox":   "100.103.8.15",
-			"webserver": "100.108.74.26"
-		}, "tagOwners": {
-			"tag:client":    ["odin@example.com"],
-			"tag:exit":      ["odin@example.com"],
-			"tag:pidgey":    ["odin@example.com"],
-			"tag:pidgeotto": ["odin@example.com"],
-			"tag:group-a":   ["odin@example.com"],
-			"tag:group-b":   ["odin@example.com"],
-			"tag:ha":        ["odin@example.com"],
-			"tag:prod":      ["odin@example.com"],
-			"tag:router":    ["odin@example.com"],
-			"tag:spearow":   ["odin@example.com"],
-			"tag:fearow":    ["odin@example.com"],
-			"tag:server":    ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"beedrill": {
-		"hostname":        "beedrill",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "blastoise": {
-		"hostname":        "blastoise",
-		"tags":            ["tag:exit", "tag:router"],
-		"ipv4":            "100.64.0.9",
-		"ipv6":            "fd7a:115c:a1e0::9",
-		"routable_ips":    ["10.33.0.0/16", "0.0.0.0/0", "::/0"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "bulbasaur": {
-		"hostname":        "bulbasaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.19",
-		"ipv6":            "fd7a:115c:a1e0::13",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "charmander": {
-		"hostname":        "charmander",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.4",
-		"ipv6":            "fd7a:115c:a1e0::4",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "fearow": {
-		"hostname":        "fearow",
-		"tags":            ["tag:fearow"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    ["10.55.0.0/16"],
-		"approved_routes": ["10.55.0.0/16"]
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "kakuna": {
-		"hostname":        "kakuna",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "pidgeotto": {
-		"hostname":        "pidgeotto",
-		"tags":            ["tag:pidgeotto"],
-		"ipv4":            "100.64.0.3",
-		"ipv6":            "fd7a:115c:a1e0::3",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "pidgey": {
-		"hostname":        "pidgey",
-		"tags":            ["tag:pidgey"],
-		"ipv4":            "100.64.0.2",
-		"ipv6":            "fd7a:115c:a1e0::2",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "raticate": {
-		"hostname":        "raticate",
-		"tags":            ["tag:group-b"],
-		"ipv4":            "100.64.0.6",
-		"ipv6":            "fd7a:115c:a1e0::6",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "rattata": {
-		"hostname":        "rattata",
-		"tags":            ["tag:group-a"],
-		"ipv4":            "100.64.0.5",
-		"ipv6":            "fd7a:115c:a1e0::5",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "spearow": {
-		"hostname":        "spearow",
-		"tags":            ["tag:spearow"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    ["10.44.0.0/16"],
-		"approved_routes": ["10.44.0.0/16"]
-	}, "squirtle": {
-		"hostname":        "squirtle",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.18",
-		"ipv6":            "fd7a:115c:a1e0::12",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "weedle": {
-		"hostname":        "weedle",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"beedrill": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         4939789463153043,
-			"StableID":   "nGwyLntEaf11CNTRL",
-			"Name":       "beedrill.tail78f774.ts.net.",
-			"User":       4939789463153043,
-			"Key":        "nodekey:96b07b5c72419047faaabdb30aa4ca151710d6fe857e1f8237754a1916ff4a57",
-			"DiscoKey":   "discokey:e6e3feefec412217a27ea78b94a14cab01b5d9c2a29598c75f05eea069d95831",
-			"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"Endpoints": [
-				"77.164.248.136:54990",
-				"10.65.0.27:54990",
-				"172.17.0.1:54990",
-				"172.18.0.1:54990",
-				"172.19.0.1:54990",
-				"172.20.0.1:54990",
-				"172.21.0.1:54990",
-				"172.22.0.1:54990",
-				"172.23.0.1:54990",
-				"172.24.0.1:54990",
-				"172.25.0.1:54990",
-				"172.27.0.1:54990",
-				"172.28.0.1:54990",
-				"172.29.0.1:54990",
-				"172.30.0.1:54990"
-			],
-			"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
-				{"Proto": "peerapi4", "Port": 50358},
-				{"Proto": "peerapi6", "Port": 50358},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:08:58.527680896Z",
-			"Tags":              ["tag:server"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "beedrill",
-			"ComputedNameWithHost": "beedrill"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:96b07b5c72419047faaabdb30aa4ca151710d6fe857e1f8237754a1916ff4a57",
-		"MachineKey":        "mkey:1310795e2e9a2d1e0af99f732ec631ca81bb9b6cba72c536f3b880f0416a4b1a",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4939789463153043": {
-			"ID":          4939789463153043,
-			"LoginName":   "beedrill.tail78f774.ts.net",
-			"DisplayName": "beedrill"
-		}}
-	}}, "blastoise": {"packet_filter_rules": [{
-		"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-		"DstPorts": [{"IP": "10.33.5.0/24", "Ports": {"First": 0, "Last": 65535}}]
-	}], "packet_filter_matches": [{
-		"IPProto": [6, 17, 1, 58],
-		"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"SrcCaps": null,
-		"Dsts":    [{"Net": "10.33.5.0/24", "Ports": {"First": 0, "Last": 65535}}],
-		"Caps":    []
-	}], "netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8665747210852025,
-			"StableID":   "nWHpZ7VjfA21CNTRL",
-			"Name":       "blastoise.tail78f774.ts.net.",
-			"User":       8665747210852025,
-			"Key":        "nodekey:e1997bcdec8da2b3320583a153b55ef42e4e433fc0defdab0f2db8cb208d680e",
-			"DiscoKey":   "discokey:9dd4f0e3b72e928e8322334201d4688a2ba265b7bb17cb6715e83cd5d1665220",
-			"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-			"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:59708",
-				"10.65.0.27:59708",
-				"172.17.0.1:59708",
-				"172.18.0.1:59708",
-				"172.19.0.1:59708",
-				"172.20.0.1:59708",
-				"172.21.0.1:59708",
-				"172.22.0.1:59708",
-				"172.23.0.1:59708",
-				"172.24.0.1:59708",
-				"172.25.0.1:59708",
-				"172.27.0.1:59708",
-				"172.28.0.1:59708",
-				"172.29.0.1:59708",
-				"172.30.0.1:59708"
-			],
-			"Hostinfo": {
-				"Hostname":    "blastoise",
-				"RoutableIPs": ["10.33.0.0/16", "0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit", "tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 60534},
-					{"Proto": "peerapi6", "Port": 60534},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:08:55.326839794Z",
-			"Tags":              ["tag:exit", "tag:router"],
-			"PrimaryRoutes":     ["10.33.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "blastoise",
-			"ComputedNameWithHost": "blastoise"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:e1997bcdec8da2b3320583a153b55ef42e4e433fc0defdab0f2db8cb208d680e",
-		"MachineKey": "mkey:af25fdb9638960447bf18984caabd69885168812fc7a95c719e5df40b2c5a079",
-		"Peers": [{
-			"ID":         7067747585838294,
-			"StableID":   "nyaAoAkzBx11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:f0f21941bc3aee295900c96b04335b18d1527061e6eaf773c8e56b0cec38d47f",
-			"DiscoKey":   "discokey:9e1d242539c3dd067ad5eb339aacb8a13da29ae57c218f9e91f773b7a2e7ca6e",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:45427",
-				"10.65.0.27:45427",
-				"172.17.0.1:45427",
-				"172.18.0.1:45427",
-				"172.19.0.1:45427",
-				"172.20.0.1:45427",
-				"172.21.0.1:45427",
-				"172.22.0.1:45427",
-				"172.23.0.1:45427",
-				"172.24.0.1:45427",
-				"172.25.0.1:45427",
-				"172.27.0.1:45427",
-				"172.28.0.1:45427",
-				"172.29.0.1:45427",
-				"172.30.0.1:45427"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053}
-			]},
-			"Created":              "2026-05-18T09:08:54.27787786Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:group-a"],
-			"Online":               true,
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		}],
-		"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"SrcCaps": null,
-			"Dsts":    [{"Net": "10.33.5.0/24", "Ports": {"First": 0, "Last": 65535}}],
-			"Caps":    []
-		}],
-		"PacketFilterRules": [{
-			"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-			"DstPorts": [{"IP": "10.33.5.0/24", "Ports": {"First": 0, "Last": 65535}}]
-		}],
-		"SSHPolicy":       {"rules": []},
-		"CollectServices": false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "8665747210852025": {
-			"ID":          8665747210852025,
-			"LoginName":   "blastoise.tail78f774.ts.net",
-			"DisplayName": "blastoise"
-		}}
-	}, "whois": {"100.64.0.5": {"Node": {
-		"ID":         7067747585838294,
-		"StableID":   "nyaAoAkzBx11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:f0f21941bc3aee295900c96b04335b18d1527061e6eaf773c8e56b0cec38d47f",
-		"DiscoKey":   "discokey:9e1d242539c3dd067ad5eb339aacb8a13da29ae57c218f9e91f773b7a2e7ca6e",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:45427",
-			"10.65.0.27:45427",
-			"172.17.0.1:45427",
-			"172.18.0.1:45427",
-			"172.19.0.1:45427",
-			"172.20.0.1:45427",
-			"172.21.0.1:45427",
-			"172.22.0.1:45427",
-			"172.23.0.1:45427",
-			"172.24.0.1:45427",
-			"172.25.0.1:45427",
-			"172.27.0.1:45427",
-			"172.28.0.1:45427",
-			"172.29.0.1:45427",
-			"172.30.0.1:45427"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:08:54.27787786Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::5": {"Node": {
-		"ID":         7067747585838294,
-		"StableID":   "nyaAoAkzBx11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:f0f21941bc3aee295900c96b04335b18d1527061e6eaf773c8e56b0cec38d47f",
-		"DiscoKey":   "discokey:9e1d242539c3dd067ad5eb339aacb8a13da29ae57c218f9e91f773b7a2e7ca6e",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:45427",
-			"10.65.0.27:45427",
-			"172.17.0.1:45427",
-			"172.18.0.1:45427",
-			"172.19.0.1:45427",
-			"172.20.0.1:45427",
-			"172.21.0.1:45427",
-			"172.22.0.1:45427",
-			"172.23.0.1:45427",
-			"172.24.0.1:45427",
-			"172.25.0.1:45427",
-			"172.27.0.1:45427",
-			"172.28.0.1:45427",
-			"172.29.0.1:45427",
-			"172.30.0.1:45427"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:08:54.27787786Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "bulbasaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         6568888912785811,
-			"StableID":   "npFw7Ea4Jt11CNTRL",
-			"Name":       "bulbasaur.tail78f774.ts.net.",
-			"User":       4156223528223174,
-			"Key":        "nodekey:4ddd367622cc084368575c6d7d1b656e261dae5e9335999a22418e340202ba3c",
-			"KeyExpiry":  "2026-11-14T09:09:00Z",
-			"DiscoKey":   "discokey:fc90c3aec724921a883d1399ff15eb32384a2cc89a065105f46ce9202f481b3c",
-			"Addresses":  ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
-			"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
-			"Endpoints": [
-				"77.164.248.136:56853",
-				"10.65.0.27:56853",
-				"172.17.0.1:56853",
-				"172.18.0.1:56853",
-				"172.19.0.1:56853",
-				"172.20.0.1:56853",
-				"172.21.0.1:56853",
-				"172.22.0.1:56853",
-				"172.23.0.1:56853",
-				"172.24.0.1:56853",
-				"172.25.0.1:56853",
-				"172.27.0.1:56853",
-				"172.28.0.1:56853",
-				"172.29.0.1:56853",
-				"172.30.0.1:56853"
-			],
-			"Hostinfo": {"Hostname": "bulbasaur", "Services": [
-				{"Proto": "peerapi4", "Port": 38156},
-				{"Proto": "peerapi6", "Port": 38156},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:00.131809648Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "bulbasaur",
-			"ComputedNameWithHost": "bulbasaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:4ddd367622cc084368575c6d7d1b656e261dae5e9335999a22418e340202ba3c",
-		"MachineKey":        "mkey:c2edfc5da989bdd4facde1ef564c6f6510086448b38f270f926a2983a7373120",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4156223528223174": {
-			"ID":          4156223528223174,
-			"LoginName":   "odin@example.com",
-			"DisplayName": "odin"
-		}}
-	}}, "charmander": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1111001440653222,
-			"StableID":   "nmGAsB8Bg911CNTRL",
-			"Name":       "charmander.tail78f774.ts.net.",
-			"User":       1111001440653222,
-			"Key":        "nodekey:d6faab2e7e0ec2fc7bbef863fac510a7dbf2b8bf288df19543f9abc7e598ec30",
-			"DiscoKey":   "discokey:e79dd72ab763fbaae737b31671dffa5dc10a527acd1eeb19d9455454b682225e",
-			"Addresses":  ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
-			"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
-			"Endpoints": [
-				"77.164.248.136:37255",
-				"10.65.0.27:37255",
-				"172.17.0.1:37255",
-				"172.18.0.1:37255",
-				"172.19.0.1:37255",
-				"172.20.0.1:37255",
-				"172.21.0.1:37255",
-				"172.22.0.1:37255",
-				"172.23.0.1:37255",
-				"172.24.0.1:37255",
-				"172.25.0.1:37255",
-				"172.27.0.1:37255",
-				"172.28.0.1:37255",
-				"172.29.0.1:37255",
-				"172.30.0.1:37255"
-			],
-			"Hostinfo": {
-				"Hostname":    "charmander",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 37067},
-					{"Proto": "peerapi6", "Port": 37067},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:08:53.740935778Z",
-			"Tags":              ["tag:exit"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "charmander",
-			"ComputedNameWithHost": "charmander"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:d6faab2e7e0ec2fc7bbef863fac510a7dbf2b8bf288df19543f9abc7e598ec30",
-		"MachineKey":        "mkey:ae18966c2204844bc0dfebc122960d5ec5f330595da3ff641c8b9551a7001034",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1111001440653222": {
-			"ID":          1111001440653222,
-			"LoginName":   "charmander.tail78f774.ts.net",
-			"DisplayName": "charmander"
-		}}
-	}}, "fearow": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2232659580769961,
-			"StableID":   "nNDcmWBBSJ11CNTRL",
-			"Name":       "fearow.tail78f774.ts.net.",
-			"User":       2232659580769961,
-			"Key":        "nodekey:0f3d03af8733585e71c3386acdabc068af290a11ad173c9dbd1d5ca2992abb23",
-			"DiscoKey":   "discokey:dee37c53da0023d677d36f42b676d8701ad5fd8730f7faab66f4f851bf185007",
-			"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-			"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128", "10.55.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:56599",
-				"10.65.0.27:56599",
-				"172.17.0.1:56599",
-				"172.18.0.1:56599",
-				"172.19.0.1:56599",
-				"172.20.0.1:56599",
-				"172.21.0.1:56599",
-				"172.22.0.1:56599",
-				"172.23.0.1:56599",
-				"172.24.0.1:56599",
-				"172.25.0.1:56599",
-				"172.27.0.1:56599",
-				"172.28.0.1:56599",
-				"172.29.0.1:56599",
-				"172.30.0.1:56599"
-			],
-			"Hostinfo": {
-				"Hostname":    "fearow",
-				"RoutableIPs": ["10.55.0.0/16"],
-				"RequestTags": ["tag:fearow"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:08:56.380377038Z",
-			"Tags":              ["tag:fearow"],
-			"PrimaryRoutes":     ["10.55.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "fearow",
-			"ComputedNameWithHost": "fearow"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:0f3d03af8733585e71c3386acdabc068af290a11ad173c9dbd1d5ca2992abb23",
-		"MachineKey":        "mkey:d088442e2a25a73b9a141bd39a4d887dfe23a6ff09b63cfb7f20c4dfc8f43b36",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"2232659580769961": {
-			"ID":          2232659580769961,
-			"LoginName":   "fearow.tail78f774.ts.net",
-			"DisplayName": "fearow"
-		}}
-	}}, "ivysaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         4890103721196372,
-			"StableID":   "nPUBUVjjBf11CNTRL",
-			"Name":       "ivysaur.tail78f774.ts.net.",
-			"User":       4538565228176803,
-			"Key":        "nodekey:3f948190034ff04e6a3dc51a31a607b2d1f345fe40a874a3661633927393c409",
-			"KeyExpiry":  "2026-11-14T09:08:59Z",
-			"DiscoKey":   "discokey:35972f831195fa374a6230409971d306f1fc1c88ccdc1130081ad357a686482d",
-			"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"Endpoints": [
-				"77.164.248.136:55086",
-				"10.65.0.27:55086",
-				"172.17.0.1:55086",
-				"172.18.0.1:55086",
-				"172.19.0.1:55086",
-				"172.20.0.1:55086",
-				"172.21.0.1:55086",
-				"172.22.0.1:55086",
-				"172.23.0.1:55086",
-				"172.24.0.1:55086",
-				"172.25.0.1:55086",
-				"172.27.0.1:55086",
-				"172.28.0.1:55086",
-				"172.29.0.1:55086",
-				"172.30.0.1:55086"
-			],
-			"Hostinfo": {"Hostname": "ivysaur", "Services": [
-				{"Proto": "peerapi4", "Port": 62496},
-				{"Proto": "peerapi6", "Port": 62496},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:08:59.058953458Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "ivysaur",
-			"ComputedNameWithHost": "ivysaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:3f948190034ff04e6a3dc51a31a607b2d1f345fe40a874a3661633927393c409",
-		"MachineKey":        "mkey:00fd6a4d52a5f42222dae897d0e656d17ea8102a4bf3225f34fff4635cd8e846",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4538565228176803": {
-			"ID":          4538565228176803,
-			"LoginName":   "thor@example.org",
-			"DisplayName": "thor"
-		}}
-	}}, "kakuna": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         5343603949263262,
-			"StableID":   "nX5hg3R8ji11CNTRL",
-			"Name":       "kakuna.tail78f774.ts.net.",
-			"User":       5343603949263262,
-			"Key":        "nodekey:50c79d4d9fa331c021289dc35df5491d972222b1cd602147bf9f697813886e5a",
-			"DiscoKey":   "discokey:870e60d598d69eedd0bba889fcaec28b2409e57c86c32d9df63b359673eb297f",
-			"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"Endpoints": [
-				"77.164.248.136:48644",
-				"10.65.0.27:48644",
-				"172.17.0.1:48644",
-				"172.18.0.1:48644",
-				"172.19.0.1:48644",
-				"172.20.0.1:48644",
-				"172.21.0.1:48644",
-				"172.22.0.1:48644",
-				"172.23.0.1:48644",
-				"172.24.0.1:48644",
-				"172.25.0.1:48644",
-				"172.27.0.1:48644",
-				"172.28.0.1:48644",
-				"172.29.0.1:48644",
-				"172.30.0.1:48644"
-			],
-			"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
-				{"Proto": "peerapi4", "Port": 51523},
-				{"Proto": "peerapi6", "Port": 51523},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:08:57.995162833Z",
-			"Tags":              ["tag:prod"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "kakuna",
-			"ComputedNameWithHost": "kakuna"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:50c79d4d9fa331c021289dc35df5491d972222b1cd602147bf9f697813886e5a",
-		"MachineKey":        "mkey:7bdd1094f7b4491602c38e55d281a9adc220a1512618ec0d6e7e0becf7011e57",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"5343603949263262": {
-			"ID":          5343603949263262,
-			"LoginName":   "kakuna.tail78f774.ts.net",
-			"DisplayName": "kakuna"
-		}}
-	}}, "pidgeotto": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         3489568170389294,
-			"StableID":   "nqNekE3SFU11CNTRL",
-			"Name":       "pidgeotto.tail78f774.ts.net.",
-			"User":       3489568170389294,
-			"Key":        "nodekey:8759e6b652900cd5327cf8daeebeff892b380c1eeee93689612df3b1a61bf71b",
-			"DiscoKey":   "discokey:5a6562a098487689ebbde39e8529472e4667927613e593a8b589a21a38564d68",
-			"Addresses":  ["100.64.0.3/32", "fd7a:115c:a1e0::3/128"],
-			"AllowedIPs": ["100.64.0.3/32", "fd7a:115c:a1e0::3/128"],
-			"Endpoints": [
-				"77.164.248.136:36194",
-				"10.65.0.27:36194",
-				"172.17.0.1:36194",
-				"172.18.0.1:36194",
-				"172.19.0.1:36194",
-				"172.20.0.1:36194",
-				"172.21.0.1:36194",
-				"172.22.0.1:36194",
-				"172.23.0.1:36194",
-				"172.24.0.1:36194",
-				"172.25.0.1:36194",
-				"172.27.0.1:36194",
-				"172.28.0.1:36194",
-				"172.29.0.1:36194",
-				"172.30.0.1:36194"
-			],
-			"Hostinfo": {
-				"Hostname":    "pidgeotto",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:pidgeotto"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 34152},
-					{"Proto": "peerapi6", "Port": 34152},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:08:53.175984692Z",
-			"Tags":              ["tag:pidgeotto"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "pidgeotto",
-			"ComputedNameWithHost": "pidgeotto"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:8759e6b652900cd5327cf8daeebeff892b380c1eeee93689612df3b1a61bf71b",
-		"MachineKey":        "mkey:751f63eaa9b8fd2e1afa8601ac85a69fe2bd5b4c71b64d9e2619a950628d4f15",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"3489568170389294": {
-			"ID":          3489568170389294,
-			"LoginName":   "pidgeotto.tail78f774.ts.net",
-			"DisplayName": "pidgeotto"
-		}}
-	}}, "pidgey": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         6997798859301923,
-			"StableID":   "npMtMyJKew11CNTRL",
-			"Name":       "pidgey.tail78f774.ts.net.",
-			"User":       6997798859301923,
-			"Key":        "nodekey:4351c29c87ef524718f06f845b1ff8beb79cd983c1c5cd4b35ea139eb55f141f",
-			"DiscoKey":   "discokey:868bf00822d56717aabc58a15530449fcc3a0f0ec81b253ee1ce29844be8e228",
-			"Addresses":  ["100.64.0.2/32", "fd7a:115c:a1e0::2/128"],
-			"AllowedIPs": ["100.64.0.2/32", "fd7a:115c:a1e0::2/128"],
-			"Endpoints": [
-				"77.164.248.136:36872",
-				"10.65.0.27:36872",
-				"172.17.0.1:36872",
-				"172.18.0.1:36872",
-				"172.19.0.1:36872",
-				"172.20.0.1:36872",
-				"172.21.0.1:36872",
-				"172.22.0.1:36872",
-				"172.23.0.1:36872",
-				"172.24.0.1:36872",
-				"172.25.0.1:36872",
-				"172.27.0.1:36872",
-				"172.28.0.1:36872",
-				"172.29.0.1:36872",
-				"172.30.0.1:36872"
-			],
-			"Hostinfo": {
-				"Hostname":    "pidgey",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:pidgey"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 46590},
-					{"Proto": "peerapi6", "Port": 46590},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:08:52.645416183Z",
-			"Tags":              ["tag:pidgey"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "pidgey",
-			"ComputedNameWithHost": "pidgey"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:4351c29c87ef524718f06f845b1ff8beb79cd983c1c5cd4b35ea139eb55f141f",
-		"MachineKey":        "mkey:d5f643820b60fdf9d939c947a76e3a019ec03c9384c90ab1bbbdc0a82c346c46",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"6997798859301923": {
-			"ID":          6997798859301923,
-			"LoginName":   "pidgey.tail78f774.ts.net",
-			"DisplayName": "pidgey"
-		}}
-	}}, "raticate": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         6442298576950201,
-			"StableID":   "n8QYd3GjJs11CNTRL",
-			"Name":       "raticate.tail78f774.ts.net.",
-			"User":       6442298576950201,
-			"Key":        "nodekey:8b2455337fefa4aca2cd5c3b76969b6cb9bef01ae527f9ca3d73ecd8ed84ea20",
-			"DiscoKey":   "discokey:70868d428d4ad928d05f6f54aab8a996997968d793cf0e14514fd4916f94a34d",
-			"Addresses":  ["100.64.0.6/32", "fd7a:115c:a1e0::6/128"],
-			"AllowedIPs": ["100.64.0.6/32", "fd7a:115c:a1e0::6/128"],
-			"Endpoints": [
-				"77.164.248.136:48518",
-				"10.65.0.27:48518",
-				"172.17.0.1:48518",
-				"172.18.0.1:48518",
-				"172.19.0.1:48518",
-				"172.20.0.1:48518",
-				"172.21.0.1:48518",
-				"172.22.0.1:48518",
-				"172.23.0.1:48518",
-				"172.24.0.1:48518",
-				"172.25.0.1:48518",
-				"172.27.0.1:48518",
-				"172.28.0.1:48518",
-				"172.29.0.1:48518",
-				"172.30.0.1:48518"
-			],
-			"Hostinfo": {"Hostname": "raticate", "RequestTags": ["tag:group-b"], "Services": [
-				{"Proto": "peerapi4", "Port": 61927},
-				{"Proto": "peerapi6", "Port": 61927},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:08:54.799700059Z",
-			"Tags":              ["tag:group-b"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "raticate",
-			"ComputedNameWithHost": "raticate"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:8b2455337fefa4aca2cd5c3b76969b6cb9bef01ae527f9ca3d73ecd8ed84ea20",
-		"MachineKey":        "mkey:b3a9bb89ed6795f9962795521ada67f7dcef0fbb146b2d5f4264f9daa0238b11",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"6442298576950201": {
-			"ID":          6442298576950201,
-			"LoginName":   "raticate.tail78f774.ts.net",
-			"DisplayName": "raticate"
-		}}
-	}}, "rattata": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         7067747585838294,
-			"StableID":   "nyaAoAkzBx11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       7067747585838294,
-			"Key":        "nodekey:f0f21941bc3aee295900c96b04335b18d1527061e6eaf773c8e56b0cec38d47f",
-			"DiscoKey":   "discokey:9e1d242539c3dd067ad5eb339aacb8a13da29ae57c218f9e91f773b7a2e7ca6e",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:45427",
-				"10.65.0.27:45427",
-				"172.17.0.1:45427",
-				"172.18.0.1:45427",
-				"172.19.0.1:45427",
-				"172.20.0.1:45427",
-				"172.21.0.1:45427",
-				"172.22.0.1:45427",
-				"172.23.0.1:45427",
-				"172.24.0.1:45427",
-				"172.25.0.1:45427",
-				"172.27.0.1:45427",
-				"172.28.0.1:45427",
-				"172.29.0.1:45427",
-				"172.30.0.1:45427"
-			],
-			"Hostinfo": {"Hostname": "rattata", "RequestTags": ["tag:group-a"], "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:08:54.27787786Z",
-			"Tags":              ["tag:group-a"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:f0f21941bc3aee295900c96b04335b18d1527061e6eaf773c8e56b0cec38d47f",
-		"MachineKey": "mkey:a5683705876508cfaaae3f3875a440e784190fa1b5b4a53c77537282b8219b2d",
-		"Peers": [{
-			"ID":         8665747210852025,
-			"StableID":   "nWHpZ7VjfA21CNTRL",
-			"Name":       "blastoise.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:e1997bcdec8da2b3320583a153b55ef42e4e433fc0defdab0f2db8cb208d680e",
-			"DiscoKey":   "discokey:9dd4f0e3b72e928e8322334201d4688a2ba265b7bb17cb6715e83cd5d1665220",
-			"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-			"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:59708",
-				"10.65.0.27:59708",
-				"172.17.0.1:59708",
-				"172.18.0.1:59708",
-				"172.19.0.1:59708",
-				"172.20.0.1:59708",
-				"172.21.0.1:59708",
-				"172.22.0.1:59708",
-				"172.23.0.1:59708",
-				"172.24.0.1:59708",
-				"172.25.0.1:59708",
-				"172.27.0.1:59708",
-				"172.28.0.1:59708",
-				"172.29.0.1:59708",
-				"172.30.0.1:59708"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-				{"Proto": "peerapi4", "Port": 60534},
-				{"Proto": "peerapi6", "Port": 60534}
-			]},
-			"Created":              "2026-05-18T09:08:55.326839794Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:exit", "tag:router"],
-			"PrimaryRoutes":        ["10.33.0.0/16"],
-			"Online":               true,
-			"ComputedName":         "blastoise",
-			"ComputedNameWithHost": "blastoise"
-		}, {
-			"ID":         707081358747369,
-			"StableID":   "nQzPP3qEX611CNTRL",
-			"Name":       "squirtle.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:a5bbb7881c8bca32b6efd73a03c65217dd8c438fa27792829382e992007f4b52",
-			"DiscoKey":   "discokey:6887d524dd27c2f8ad4b3676851eceea715fb13e0c0db431a0be67cd594bee4e",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"Endpoints": [
-				"77.164.248.136:44108",
-				"10.65.0.27:44108",
-				"172.17.0.1:44108",
-				"172.18.0.1:44108",
-				"172.19.0.1:44108",
-				"172.20.0.1:44108",
-				"172.21.0.1:44108",
-				"172.22.0.1:44108",
-				"172.23.0.1:44108",
-				"172.24.0.1:44108",
-				"172.25.0.1:44108",
-				"172.27.0.1:44108",
-				"172.28.0.1:44108",
-				"172.29.0.1:44108",
-				"172.30.0.1:44108"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-				{"Proto": "peerapi4", "Port": 43119},
-				{"Proto": "peerapi6", "Port": 43119}
-			]},
-			"Created":              "2026-05-18T09:08:56.923114061Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:router"],
-			"Online":               true,
-			"ComputedName":         "squirtle",
-			"ComputedNameWithHost": "squirtle"
-		}],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "7067747585838294": {
-			"ID":          7067747585838294,
-			"LoginName":   "rattata.tail78f774.ts.net",
-			"DisplayName": "rattata"
-		}}
-	}, "whois": {"100.64.0.13": {"Node": {
-		"ID":         707081358747369,
-		"StableID":   "nQzPP3qEX611CNTRL",
-		"Name":       "squirtle.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:a5bbb7881c8bca32b6efd73a03c65217dd8c438fa27792829382e992007f4b52",
-		"DiscoKey":   "discokey:6887d524dd27c2f8ad4b3676851eceea715fb13e0c0db431a0be67cd594bee4e",
-		"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"Endpoints": [
-			"77.164.248.136:44108",
-			"10.65.0.27:44108",
-			"172.17.0.1:44108",
-			"172.18.0.1:44108",
-			"172.19.0.1:44108",
-			"172.20.0.1:44108",
-			"172.21.0.1:44108",
-			"172.22.0.1:44108",
-			"172.23.0.1:44108",
-			"172.24.0.1:44108",
-			"172.25.0.1:44108",
-			"172.27.0.1:44108",
-			"172.28.0.1:44108",
-			"172.29.0.1:44108",
-			"172.30.0.1:44108"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-			{"Proto": "peerapi4", "Port": 43119},
-			{"Proto": "peerapi6", "Port": 43119}
-		]},
-		"Created":              "2026-05-18T09:08:56.923114061Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:router"],
-		"Online":               true,
-		"ComputedName":         "squirtle",
-		"ComputedNameWithHost": "squirtle"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "100.64.0.9": {"Node": {
-		"ID":         8665747210852025,
-		"StableID":   "nWHpZ7VjfA21CNTRL",
-		"Name":       "blastoise.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:e1997bcdec8da2b3320583a153b55ef42e4e433fc0defdab0f2db8cb208d680e",
-		"DiscoKey":   "discokey:9dd4f0e3b72e928e8322334201d4688a2ba265b7bb17cb6715e83cd5d1665220",
-		"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-		"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-		"Endpoints": [
-			"77.164.248.136:59708",
-			"10.65.0.27:59708",
-			"172.17.0.1:59708",
-			"172.18.0.1:59708",
-			"172.19.0.1:59708",
-			"172.20.0.1:59708",
-			"172.21.0.1:59708",
-			"172.22.0.1:59708",
-			"172.23.0.1:59708",
-			"172.24.0.1:59708",
-			"172.25.0.1:59708",
-			"172.27.0.1:59708",
-			"172.28.0.1:59708",
-			"172.29.0.1:59708",
-			"172.30.0.1:59708"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-			{"Proto": "peerapi4", "Port": 60534},
-			{"Proto": "peerapi6", "Port": 60534}
-		]},
-		"Created":              "2026-05-18T09:08:55.326839794Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:exit", "tag:router"],
-		"PrimaryRoutes":        ["10.33.0.0/16"],
-		"Online":               true,
-		"ComputedName":         "blastoise",
-		"ComputedNameWithHost": "blastoise"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::9": {"Node": {
-		"ID":         8665747210852025,
-		"StableID":   "nWHpZ7VjfA21CNTRL",
-		"Name":       "blastoise.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:e1997bcdec8da2b3320583a153b55ef42e4e433fc0defdab0f2db8cb208d680e",
-		"DiscoKey":   "discokey:9dd4f0e3b72e928e8322334201d4688a2ba265b7bb17cb6715e83cd5d1665220",
-		"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-		"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-		"Endpoints": [
-			"77.164.248.136:59708",
-			"10.65.0.27:59708",
-			"172.17.0.1:59708",
-			"172.18.0.1:59708",
-			"172.19.0.1:59708",
-			"172.20.0.1:59708",
-			"172.21.0.1:59708",
-			"172.22.0.1:59708",
-			"172.23.0.1:59708",
-			"172.24.0.1:59708",
-			"172.25.0.1:59708",
-			"172.27.0.1:59708",
-			"172.28.0.1:59708",
-			"172.29.0.1:59708",
-			"172.30.0.1:59708"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-			{"Proto": "peerapi4", "Port": 60534},
-			{"Proto": "peerapi6", "Port": 60534}
-		]},
-		"Created":              "2026-05-18T09:08:55.326839794Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:exit", "tag:router"],
-		"PrimaryRoutes":        ["10.33.0.0/16"],
-		"Online":               true,
-		"ComputedName":         "blastoise",
-		"ComputedNameWithHost": "blastoise"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::d": {"Node": {
-		"ID":         707081358747369,
-		"StableID":   "nQzPP3qEX611CNTRL",
-		"Name":       "squirtle.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:a5bbb7881c8bca32b6efd73a03c65217dd8c438fa27792829382e992007f4b52",
-		"DiscoKey":   "discokey:6887d524dd27c2f8ad4b3676851eceea715fb13e0c0db431a0be67cd594bee4e",
-		"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"Endpoints": [
-			"77.164.248.136:44108",
-			"10.65.0.27:44108",
-			"172.17.0.1:44108",
-			"172.18.0.1:44108",
-			"172.19.0.1:44108",
-			"172.20.0.1:44108",
-			"172.21.0.1:44108",
-			"172.22.0.1:44108",
-			"172.23.0.1:44108",
-			"172.24.0.1:44108",
-			"172.25.0.1:44108",
-			"172.27.0.1:44108",
-			"172.28.0.1:44108",
-			"172.29.0.1:44108",
-			"172.30.0.1:44108"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-			{"Proto": "peerapi4", "Port": 43119},
-			{"Proto": "peerapi6", "Port": 43119}
-		]},
-		"Created":              "2026-05-18T09:08:56.923114061Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:router"],
-		"Online":               true,
-		"ComputedName":         "squirtle",
-		"ComputedNameWithHost": "squirtle"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "spearow": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         668394826740252,
-			"StableID":   "nuoe2jbiD611CNTRL",
-			"Name":       "spearow.tail78f774.ts.net.",
-			"User":       668394826740252,
-			"Key":        "nodekey:6c1416b431ea96423daddbeb1a8e0c83678d2324ddc53e2dcc2c0515fcd07570",
-			"DiscoKey":   "discokey:28e6b1477dca8bedaed0f887e145954f56aa0cc7972ef743f475c54a9557722d",
-			"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128", "10.44.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:38545",
-				"10.65.0.27:38545",
-				"172.17.0.1:38545",
-				"172.18.0.1:38545",
-				"172.19.0.1:38545",
-				"172.20.0.1:38545",
-				"172.21.0.1:38545",
-				"172.22.0.1:38545",
-				"172.23.0.1:38545",
-				"172.24.0.1:38545",
-				"172.25.0.1:38545",
-				"172.27.0.1:38545",
-				"172.28.0.1:38545",
-				"172.29.0.1:38545",
-				"172.30.0.1:38545"
-			],
-			"Hostinfo": {
-				"Hostname":    "spearow",
-				"RoutableIPs": ["10.44.0.0/16"],
-				"RequestTags": ["tag:spearow"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:08:55.85676883Z",
-			"Tags":              ["tag:spearow"],
-			"PrimaryRoutes":     ["10.44.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "spearow",
-			"ComputedNameWithHost": "spearow"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:6c1416b431ea96423daddbeb1a8e0c83678d2324ddc53e2dcc2c0515fcd07570",
-		"MachineKey":        "mkey:fac25f80e5a9463dfd40bbd74fda72ea0e9f0ba111a3ebeeb9a18b5cc70ca108",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"668394826740252": {
-			"ID":          668394826740252,
-			"LoginName":   "spearow.tail78f774.ts.net",
-			"DisplayName": "spearow"
-		}}
-	}}, "squirtle": {"packet_filter_rules": [{
-		"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-		"DstPorts": [{"IP": "10.33.5.0/24", "Ports": {"First": 0, "Last": 65535}}]
-	}], "packet_filter_matches": [{
-		"IPProto": [6, 17, 1, 58],
-		"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"SrcCaps": null,
-		"Dsts":    [{"Net": "10.33.5.0/24", "Ports": {"First": 0, "Last": 65535}}],
-		"Caps":    []
-	}], "netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         707081358747369,
-			"StableID":   "nQzPP3qEX611CNTRL",
-			"Name":       "squirtle.tail78f774.ts.net.",
-			"User":       707081358747369,
-			"Key":        "nodekey:a5bbb7881c8bca32b6efd73a03c65217dd8c438fa27792829382e992007f4b52",
-			"DiscoKey":   "discokey:6887d524dd27c2f8ad4b3676851eceea715fb13e0c0db431a0be67cd594bee4e",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:44108",
-				"10.65.0.27:44108",
-				"172.17.0.1:44108",
-				"172.18.0.1:44108",
-				"172.19.0.1:44108",
-				"172.20.0.1:44108",
-				"172.21.0.1:44108",
-				"172.22.0.1:44108",
-				"172.23.0.1:44108",
-				"172.24.0.1:44108",
-				"172.25.0.1:44108",
-				"172.27.0.1:44108",
-				"172.28.0.1:44108",
-				"172.29.0.1:44108",
-				"172.30.0.1:44108"
-			],
-			"Hostinfo": {
-				"Hostname":    "squirtle",
-				"RoutableIPs": ["10.33.0.0/16"],
-				"RequestTags": ["tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:08:56.923114061Z",
-			"Tags":              ["tag:router"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "squirtle",
-			"ComputedNameWithHost": "squirtle"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:a5bbb7881c8bca32b6efd73a03c65217dd8c438fa27792829382e992007f4b52",
-		"MachineKey": "mkey:f96acb2bd50905ee969a5c746012d94f96ce8a4476227930097e0e2f42515d42",
-		"Peers": [{
-			"ID":         7067747585838294,
-			"StableID":   "nyaAoAkzBx11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:f0f21941bc3aee295900c96b04335b18d1527061e6eaf773c8e56b0cec38d47f",
-			"DiscoKey":   "discokey:9e1d242539c3dd067ad5eb339aacb8a13da29ae57c218f9e91f773b7a2e7ca6e",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:45427",
-				"10.65.0.27:45427",
-				"172.17.0.1:45427",
-				"172.18.0.1:45427",
-				"172.19.0.1:45427",
-				"172.20.0.1:45427",
-				"172.21.0.1:45427",
-				"172.22.0.1:45427",
-				"172.23.0.1:45427",
-				"172.24.0.1:45427",
-				"172.25.0.1:45427",
-				"172.27.0.1:45427",
-				"172.28.0.1:45427",
-				"172.29.0.1:45427",
-				"172.30.0.1:45427"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053}
-			]},
-			"Created":              "2026-05-18T09:08:54.27787786Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:group-a"],
-			"Online":               true,
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		}],
-		"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"SrcCaps": null,
-			"Dsts":    [{"Net": "10.33.5.0/24", "Ports": {"First": 0, "Last": 65535}}],
-			"Caps":    []
-		}],
-		"PacketFilterRules": [{
-			"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-			"DstPorts": [{"IP": "10.33.5.0/24", "Ports": {"First": 0, "Last": 65535}}]
-		}],
-		"SSHPolicy":       {"rules": []},
-		"CollectServices": false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "707081358747369": {
-			"ID":          707081358747369,
-			"LoginName":   "squirtle.tail78f774.ts.net",
-			"DisplayName": "squirtle"
-		}}
-	}, "whois": {"100.64.0.5": {"Node": {
-		"ID":         7067747585838294,
-		"StableID":   "nyaAoAkzBx11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:f0f21941bc3aee295900c96b04335b18d1527061e6eaf773c8e56b0cec38d47f",
-		"DiscoKey":   "discokey:9e1d242539c3dd067ad5eb339aacb8a13da29ae57c218f9e91f773b7a2e7ca6e",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:45427",
-			"10.65.0.27:45427",
-			"172.17.0.1:45427",
-			"172.18.0.1:45427",
-			"172.19.0.1:45427",
-			"172.20.0.1:45427",
-			"172.21.0.1:45427",
-			"172.22.0.1:45427",
-			"172.23.0.1:45427",
-			"172.24.0.1:45427",
-			"172.25.0.1:45427",
-			"172.27.0.1:45427",
-			"172.28.0.1:45427",
-			"172.29.0.1:45427",
-			"172.30.0.1:45427"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:08:54.27787786Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::5": {"Node": {
-		"ID":         7067747585838294,
-		"StableID":   "nyaAoAkzBx11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:f0f21941bc3aee295900c96b04335b18d1527061e6eaf773c8e56b0cec38d47f",
-		"DiscoKey":   "discokey:9e1d242539c3dd067ad5eb339aacb8a13da29ae57c218f9e91f773b7a2e7ca6e",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:45427",
-			"10.65.0.27:45427",
-			"172.17.0.1:45427",
-			"172.18.0.1:45427",
-			"172.19.0.1:45427",
-			"172.20.0.1:45427",
-			"172.21.0.1:45427",
-			"172.22.0.1:45427",
-			"172.23.0.1:45427",
-			"172.24.0.1:45427",
-			"172.25.0.1:45427",
-			"172.27.0.1:45427",
-			"172.28.0.1:45427",
-			"172.29.0.1:45427",
-			"172.30.0.1:45427"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:08:54.27787786Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "venusaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         7881217227059504,
-			"StableID":   "nywtPKDRY421CNTRL",
-			"Name":       "venusaur.tail78f774.ts.net.",
-			"User":       3982058329734709,
-			"Key":        "nodekey:c713605ecf9f8727a3a302dcecad491e7cb60b4fe1a2084b05e3c6cf82c5a83b",
-			"KeyExpiry":  "2026-11-14T09:08:59Z",
-			"DiscoKey":   "discokey:c1664318ec9349ed48ce1530ec3244ccbe891aaee31bba74450bc06e61048713",
-			"Addresses":  ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
-			"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
-			"Endpoints": [
-				"77.164.248.136:49496",
-				"10.65.0.27:49496",
-				"172.17.0.1:49496",
-				"172.18.0.1:49496",
-				"172.19.0.1:49496",
-				"172.20.0.1:49496",
-				"172.21.0.1:49496",
-				"172.22.0.1:49496",
-				"172.23.0.1:49496",
-				"172.24.0.1:49496",
-				"172.25.0.1:49496",
-				"172.27.0.1:49496",
-				"172.28.0.1:49496",
-				"172.29.0.1:49496",
-				"172.30.0.1:49496"
-			],
-			"Hostinfo": {"Hostname": "venusaur", "Services": [
-				{"Proto": "peerapi4", "Port": 42394},
-				{"Proto": "peerapi6", "Port": 42394},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:08:59.597175811Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "venusaur",
-			"ComputedNameWithHost": "venusaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:c713605ecf9f8727a3a302dcecad491e7cb60b4fe1a2084b05e3c6cf82c5a83b",
-		"MachineKey":        "mkey:23363497a57674b8424ed254203df2e560a97c9982c0dea8674b5c20b002f24a",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"3982058329734709": {
-			"ID":          3982058329734709,
-			"LoginName":   "freya@example.com",
-			"DisplayName": "freya"
-		}}
-	}}, "weedle": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8774068181880326,
-			"StableID":   "nK3BrntnWB21CNTRL",
-			"Name":       "weedle.tail78f774.ts.net.",
-			"User":       8774068181880326,
-			"Key":        "nodekey:982431d8795a4558c52df10d87f17ad5831dee9b8c0fa715658d34389d4ffe67",
-			"DiscoKey":   "discokey:1c9023924d510ca77d8566ee1ab23733512c58d4ed073c44a256e37cd984eb37",
-			"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"Endpoints": [
-				"77.164.248.136:54831",
-				"10.65.0.27:54831",
-				"172.17.0.1:54831",
-				"172.18.0.1:54831",
-				"172.19.0.1:54831",
-				"172.20.0.1:54831",
-				"172.21.0.1:54831",
-				"172.22.0.1:54831",
-				"172.23.0.1:54831",
-				"172.24.0.1:54831",
-				"172.25.0.1:54831",
-				"172.27.0.1:54831",
-				"172.28.0.1:54831",
-				"172.29.0.1:54831",
-				"172.30.0.1:54831"
-			],
-			"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
-				{"Proto": "peerapi4", "Port": 63957},
-				{"Proto": "peerapi6", "Port": 63957},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:08:57.461846474Z",
-			"Tags":              ["tag:client"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "weedle",
-			"ComputedNameWithHost": "weedle"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:982431d8795a4558c52df10d87f17ad5831dee9b8c0fa715658d34389d4ffe67",
-		"MachineKey":        "mkey:c7a43d8ce9185f44c8b3263e950203728450ef77a3cca16450dead4115626479",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"8774068181880326": {
-			"ID":          8774068181880326,
-			"LoginName":   "weedle.tail78f774.ts.net",
-			"DisplayName": "weedle"
-		}}
-	}}}
-}
diff --git a/hscontrol/policy/v2/testdata/grant_results/via-grant-v49.hujson b/hscontrol/policy/v2/testdata/grant_results/via-grant-v49.hujson
deleted file mode 100644
index f3c82c0ed..000000000
--- a/hscontrol/policy/v2/testdata/grant_results/via-grant-v49.hujson
+++ /dev/null
@@ -1,14164 +0,0 @@
-// via-grant-v49
-//
-// via grant v49 dst host alias broader than advertised subnet
-//
-// Nodes with filter rules: 2 of 15
-// Captured at:    2026-05-18T09:09:45Z
-// tool version:   tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "via-grant-v49",
-	"description":    "via grant v49 dst host alias broader than advertised subnet",
-	"category":       "grant",
-	"captured_at":    "2026-05-18T09:09:45.383298229Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                                                      \n  \n                                                                          \n                                                                           \n                                                                        \n                                                                         \n  \n                                                                         \n                                                                 \n{\n\t\"category\":    \"grant\",\n\t\"description\": \"via grant v49 dst host alias broader than advertised subnet\",\n\t\"id\":          \"via-grant-v49\",\n\t\"options\":     {\"capture_whois\": true},\n\t\"policy\": {\"autoApprovers\": {\"routes\": {\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"10.44.0.0/16\": [\"tag:spearow\"],\n\t\t\"10.55.0.0/16\": [\"tag:fearow\"]\n\t}}, \"grants\": [{\n\t\t\"dst\": [\"internal\"],\n\t\t\"ip\":  [\"*\"],\n\t\t\"src\": [\"tag:group-a\"],\n\t\t\"via\": [\"tag:router\"]\n\t}], \"groups\": {\n\t\t\"group:admins\":     [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\":      [],\n\t\t\"group:monitors\":   [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\":  \"10.0.0.0/8\",\n\t\t\"prodbox\":   \"100.103.8.15\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\":   [\"odin@example.com\"],\n\t\t\"tag:exit\":     [\"odin@example.com\"],\n\t\t\"tag:pidgey\":   [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\":   [\"odin@example.com\"],\n\t\t\"tag:group-a\":  [\"odin@example.com\"],\n\t\t\"tag:group-b\":  [\"odin@example.com\"],\n\t\t\"tag:ha\":       [\"odin@example.com\"],\n\t\t\"tag:prod\":     [\"odin@example.com\"],\n\t\t\"tag:router\":   [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\":   [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\":      {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/grant.hujson\"\n}\n",
-		"scenario_path":   "scenarios/grant/via-grant-v49.hujson",
-		"full_policy": {"autoApprovers": {"routes": {
-			"10.33.0.0/16": ["tag:router"],
-			"10.44.0.0/16": ["tag:spearow"],
-			"10.55.0.0/16": ["tag:fearow"]
-		}}, "grants": [{
-			"dst": ["internal"],
-			"ip":  ["*"],
-			"src": ["tag:group-a"],
-			"via": ["tag:router"]
-		}], "groups": {
-			"group:admins":     ["odin@example.com"],
-			"group:developers": ["thor@example.org", "odin@example.com"],
-			"group:empty":      [],
-			"group:monitors":   ["freya@example.com"]
-		}, "hosts": {
-			"internal":  "10.0.0.0/8",
-			"prodbox":   "100.103.8.15",
-			"webserver": "100.108.74.26"
-		}, "tagOwners": {
-			"tag:client":    ["odin@example.com"],
-			"tag:exit":      ["odin@example.com"],
-			"tag:pidgey":    ["odin@example.com"],
-			"tag:pidgeotto": ["odin@example.com"],
-			"tag:group-a":   ["odin@example.com"],
-			"tag:group-b":   ["odin@example.com"],
-			"tag:ha":        ["odin@example.com"],
-			"tag:prod":      ["odin@example.com"],
-			"tag:router":    ["odin@example.com"],
-			"tag:spearow":   ["odin@example.com"],
-			"tag:fearow":    ["odin@example.com"],
-			"tag:server":    ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"beedrill": {
-		"hostname":        "beedrill",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "blastoise": {
-		"hostname":        "blastoise",
-		"tags":            ["tag:exit", "tag:router"],
-		"ipv4":            "100.64.0.9",
-		"ipv6":            "fd7a:115c:a1e0::9",
-		"routable_ips":    ["10.33.0.0/16", "0.0.0.0/0", "::/0"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "bulbasaur": {
-		"hostname":        "bulbasaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.19",
-		"ipv6":            "fd7a:115c:a1e0::13",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "charmander": {
-		"hostname":        "charmander",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.4",
-		"ipv6":            "fd7a:115c:a1e0::4",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "fearow": {
-		"hostname":        "fearow",
-		"tags":            ["tag:fearow"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    ["10.55.0.0/16"],
-		"approved_routes": ["10.55.0.0/16"]
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "kakuna": {
-		"hostname":        "kakuna",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "pidgeotto": {
-		"hostname":        "pidgeotto",
-		"tags":            ["tag:pidgeotto"],
-		"ipv4":            "100.64.0.3",
-		"ipv6":            "fd7a:115c:a1e0::3",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "pidgey": {
-		"hostname":        "pidgey",
-		"tags":            ["tag:pidgey"],
-		"ipv4":            "100.64.0.2",
-		"ipv6":            "fd7a:115c:a1e0::2",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "raticate": {
-		"hostname":        "raticate",
-		"tags":            ["tag:group-b"],
-		"ipv4":            "100.64.0.6",
-		"ipv6":            "fd7a:115c:a1e0::6",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "rattata": {
-		"hostname":        "rattata",
-		"tags":            ["tag:group-a"],
-		"ipv4":            "100.64.0.5",
-		"ipv6":            "fd7a:115c:a1e0::5",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "spearow": {
-		"hostname":        "spearow",
-		"tags":            ["tag:spearow"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    ["10.44.0.0/16"],
-		"approved_routes": ["10.44.0.0/16"]
-	}, "squirtle": {
-		"hostname":        "squirtle",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.18",
-		"ipv6":            "fd7a:115c:a1e0::12",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "weedle": {
-		"hostname":        "weedle",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"beedrill": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1654201741972838,
-			"StableID":   "nsHePL5CvD11CNTRL",
-			"Name":       "beedrill.tail78f774.ts.net.",
-			"User":       1654201741972838,
-			"Key":        "nodekey:2f6ed2755d5bec53ed1d463206d6e4f324bd49285205161348efd4578829723d",
-			"DiscoKey":   "discokey:cd8c9fc6fc3c67d1d5a85cca3e9d9c305276819513e0ed87f351f24507f3cc2f",
-			"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"Endpoints": [
-				"77.164.248.136:46172",
-				"10.65.0.27:46172",
-				"172.17.0.1:46172",
-				"172.18.0.1:46172",
-				"172.19.0.1:46172",
-				"172.20.0.1:46172",
-				"172.21.0.1:46172",
-				"172.22.0.1:46172",
-				"172.23.0.1:46172",
-				"172.24.0.1:46172",
-				"172.25.0.1:46172",
-				"172.27.0.1:46172",
-				"172.28.0.1:46172",
-				"172.29.0.1:46172",
-				"172.30.0.1:46172"
-			],
-			"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
-				{"Proto": "peerapi4", "Port": 50358},
-				{"Proto": "peerapi6", "Port": 50358},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:57.643616429Z",
-			"Tags":              ["tag:server"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "beedrill",
-			"ComputedNameWithHost": "beedrill"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:2f6ed2755d5bec53ed1d463206d6e4f324bd49285205161348efd4578829723d",
-		"MachineKey":        "mkey:0e5fded7ceb7f42dc07075f281606ae8adaf5261bbd54e6894c43c51d3821114",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1654201741972838": {
-			"ID":          1654201741972838,
-			"LoginName":   "beedrill.tail78f774.ts.net",
-			"DisplayName": "beedrill"
-		}}
-	}}, "blastoise": {"packet_filter_rules": [{
-		"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-		"DstPorts": [{"IP": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}]
-	}], "packet_filter_matches": [{
-		"IPProto": [6, 17, 1, 58],
-		"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"SrcCaps": null,
-		"Dsts":    [{"Net": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}],
-		"Caps":    []
-	}], "netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         4353680609859707,
-			"StableID":   "ncdq1ponza11CNTRL",
-			"Name":       "blastoise.tail78f774.ts.net.",
-			"User":       4353680609859707,
-			"Key":        "nodekey:b5db4038b4b10452989f805261c321d951a289c50fc7ee9e119cc43f3b60133a",
-			"DiscoKey":   "discokey:e5ac5dd18c7f96c6189e8c8a377a3bbfc606c1520a4627b8ce97c71c7ce9cc7f",
-			"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-			"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:59178",
-				"10.65.0.27:59178",
-				"172.17.0.1:59178",
-				"172.18.0.1:59178",
-				"172.19.0.1:59178",
-				"172.20.0.1:59178",
-				"172.21.0.1:59178",
-				"172.22.0.1:59178",
-				"172.23.0.1:59178",
-				"172.24.0.1:59178",
-				"172.25.0.1:59178",
-				"172.27.0.1:59178",
-				"172.28.0.1:59178",
-				"172.29.0.1:59178",
-				"172.30.0.1:59178"
-			],
-			"Hostinfo": {
-				"Hostname":    "blastoise",
-				"RoutableIPs": ["10.33.0.0/16", "0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit", "tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 60534},
-					{"Proto": "peerapi6", "Port": 60534},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:09:54.427828038Z",
-			"Tags":              ["tag:exit", "tag:router"],
-			"PrimaryRoutes":     ["10.33.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "blastoise",
-			"ComputedNameWithHost": "blastoise"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:b5db4038b4b10452989f805261c321d951a289c50fc7ee9e119cc43f3b60133a",
-		"MachineKey": "mkey:e648ae1613f7d9dc9484ac10ddcb78bb2e34a44b6895b1a830e9f17277d0415b",
-		"Peers": [{
-			"ID":         1191708573799268,
-			"StableID":   "nFJSrUAjJA11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:38a866479caef0d5c0e853c85a8a3df39f1fd96c005b32071b40f4ef80d6ec13",
-			"DiscoKey":   "discokey:d23472be07dfe7f1384c1d713569b6abc53d6c3a8ea28b723a8265a421e7cf59",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:60165",
-				"10.65.0.27:60165",
-				"172.17.0.1:60165",
-				"172.18.0.1:60165",
-				"172.19.0.1:60165",
-				"172.20.0.1:60165",
-				"172.21.0.1:60165",
-				"172.22.0.1:60165",
-				"172.23.0.1:60165",
-				"172.24.0.1:60165",
-				"172.25.0.1:60165",
-				"172.27.0.1:60165",
-				"172.28.0.1:60165",
-				"172.29.0.1:60165",
-				"172.30.0.1:60165"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053}
-			]},
-			"Created":              "2026-05-18T09:09:53.365800595Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:group-a"],
-			"Online":               true,
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		}],
-		"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"SrcCaps": null,
-			"Dsts":    [{"Net": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}],
-			"Caps":    []
-		}],
-		"PacketFilterRules": [{
-			"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-			"DstPorts": [{"IP": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}]
-		}],
-		"SSHPolicy":       {"rules": []},
-		"CollectServices": false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "4353680609859707": {
-			"ID":          4353680609859707,
-			"LoginName":   "blastoise.tail78f774.ts.net",
-			"DisplayName": "blastoise"
-		}}
-	}, "whois": {"100.64.0.5": {"Node": {
-		"ID":         1191708573799268,
-		"StableID":   "nFJSrUAjJA11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:38a866479caef0d5c0e853c85a8a3df39f1fd96c005b32071b40f4ef80d6ec13",
-		"DiscoKey":   "discokey:d23472be07dfe7f1384c1d713569b6abc53d6c3a8ea28b723a8265a421e7cf59",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:60165",
-			"10.65.0.27:60165",
-			"172.17.0.1:60165",
-			"172.18.0.1:60165",
-			"172.19.0.1:60165",
-			"172.20.0.1:60165",
-			"172.21.0.1:60165",
-			"172.22.0.1:60165",
-			"172.23.0.1:60165",
-			"172.24.0.1:60165",
-			"172.25.0.1:60165",
-			"172.27.0.1:60165",
-			"172.28.0.1:60165",
-			"172.29.0.1:60165",
-			"172.30.0.1:60165"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:09:53.365800595Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::5": {"Node": {
-		"ID":         1191708573799268,
-		"StableID":   "nFJSrUAjJA11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:38a866479caef0d5c0e853c85a8a3df39f1fd96c005b32071b40f4ef80d6ec13",
-		"DiscoKey":   "discokey:d23472be07dfe7f1384c1d713569b6abc53d6c3a8ea28b723a8265a421e7cf59",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:60165",
-			"10.65.0.27:60165",
-			"172.17.0.1:60165",
-			"172.18.0.1:60165",
-			"172.19.0.1:60165",
-			"172.20.0.1:60165",
-			"172.21.0.1:60165",
-			"172.22.0.1:60165",
-			"172.23.0.1:60165",
-			"172.24.0.1:60165",
-			"172.25.0.1:60165",
-			"172.27.0.1:60165",
-			"172.28.0.1:60165",
-			"172.29.0.1:60165",
-			"172.30.0.1:60165"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:09:53.365800595Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "bulbasaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         926567223465290,
-			"StableID":   "n7w7fHMeE811CNTRL",
-			"Name":       "bulbasaur.tail78f774.ts.net.",
-			"User":       4156223528223174,
-			"Key":        "nodekey:ef6bd76a781c32ae5017c044987675e837068daa77b0699df609f533b6df5a57",
-			"KeyExpiry":  "2026-11-14T09:09:59Z",
-			"DiscoKey":   "discokey:9cf87cc83bb0273a8801ace89d2bd27542395a98924482edd63540db1f6ece35",
-			"Addresses":  ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
-			"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
-			"Endpoints": [
-				"77.164.248.136:51843",
-				"10.65.0.27:51843",
-				"172.17.0.1:51843",
-				"172.18.0.1:51843",
-				"172.19.0.1:51843",
-				"172.20.0.1:51843",
-				"172.21.0.1:51843",
-				"172.22.0.1:51843",
-				"172.23.0.1:51843",
-				"172.24.0.1:51843",
-				"172.25.0.1:51843",
-				"172.27.0.1:51843",
-				"172.28.0.1:51843",
-				"172.29.0.1:51843",
-				"172.30.0.1:51843"
-			],
-			"Hostinfo": {"Hostname": "bulbasaur", "Services": [
-				{"Proto": "peerapi4", "Port": 38156},
-				{"Proto": "peerapi6", "Port": 38156},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:59.241340908Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "bulbasaur",
-			"ComputedNameWithHost": "bulbasaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:ef6bd76a781c32ae5017c044987675e837068daa77b0699df609f533b6df5a57",
-		"MachineKey":        "mkey:9f406d8cdb4b07d8938287577dc41ef14cdd5663861ac77d0c012a2093b04958",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4156223528223174": {
-			"ID":          4156223528223174,
-			"LoginName":   "odin@example.com",
-			"DisplayName": "odin"
-		}}
-	}}, "charmander": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1154714393061985,
-			"StableID":   "nJ1KnZPy1A11CNTRL",
-			"Name":       "charmander.tail78f774.ts.net.",
-			"User":       1154714393061985,
-			"Key":        "nodekey:8729c0c3cb115278d3a6503c1671517189d8db5c14b1593d49127307f31d8d1d",
-			"DiscoKey":   "discokey:39093f5aa31169f5dc3208fe0cb7a1bcca0c67fd5a6d3ad3ff93656b33d4b412",
-			"Addresses":  ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
-			"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
-			"Endpoints": [
-				"77.164.248.136:50136",
-				"10.65.0.27:50136",
-				"172.17.0.1:50136",
-				"172.18.0.1:50136",
-				"172.19.0.1:50136",
-				"172.20.0.1:50136",
-				"172.21.0.1:50136",
-				"172.22.0.1:50136",
-				"172.23.0.1:50136",
-				"172.24.0.1:50136",
-				"172.25.0.1:50136",
-				"172.27.0.1:50136",
-				"172.28.0.1:50136",
-				"172.29.0.1:50136",
-				"172.30.0.1:50136"
-			],
-			"Hostinfo": {
-				"Hostname":    "charmander",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 37067},
-					{"Proto": "peerapi6", "Port": 37067},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:09:52.838243604Z",
-			"Tags":              ["tag:exit"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "charmander",
-			"ComputedNameWithHost": "charmander"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:8729c0c3cb115278d3a6503c1671517189d8db5c14b1593d49127307f31d8d1d",
-		"MachineKey":        "mkey:62bfd0315ccbbcfedb7b22991a2dcee12f458304a340f7f931992d9d37641265",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1154714393061985": {
-			"ID":          1154714393061985,
-			"LoginName":   "charmander.tail78f774.ts.net",
-			"DisplayName": "charmander"
-		}}
-	}}, "fearow": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         6512658328578833,
-			"StableID":   "n2frwTVbrs11CNTRL",
-			"Name":       "fearow.tail78f774.ts.net.",
-			"User":       6512658328578833,
-			"Key":        "nodekey:eacb11c6f0c205ec9f4f7b3694554ab846c9fab4582b9b8a6510310626d41c7c",
-			"DiscoKey":   "discokey:fbc334bc4e07db567cd5605bf03951d67209334c38ff7690bd0d1e118cfc0028",
-			"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-			"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128", "10.55.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:60774",
-				"10.65.0.27:60774",
-				"172.17.0.1:60774",
-				"172.18.0.1:60774",
-				"172.19.0.1:60774",
-				"172.20.0.1:60774",
-				"172.21.0.1:60774",
-				"172.22.0.1:60774",
-				"172.23.0.1:60774",
-				"172.24.0.1:60774",
-				"172.25.0.1:60774",
-				"172.27.0.1:60774",
-				"172.28.0.1:60774",
-				"172.29.0.1:60774",
-				"172.30.0.1:60774"
-			],
-			"Hostinfo": {
-				"Hostname":    "fearow",
-				"RoutableIPs": ["10.55.0.0/16"],
-				"RequestTags": ["tag:fearow"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:09:55.50305827Z",
-			"Tags":              ["tag:fearow"],
-			"PrimaryRoutes":     ["10.55.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "fearow",
-			"ComputedNameWithHost": "fearow"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:eacb11c6f0c205ec9f4f7b3694554ab846c9fab4582b9b8a6510310626d41c7c",
-		"MachineKey":        "mkey:e550a5efb38cf93e01a19c06a53485d519152ffa932c982fba6003655b0fee10",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"6512658328578833": {
-			"ID":          6512658328578833,
-			"LoginName":   "fearow.tail78f774.ts.net",
-			"DisplayName": "fearow"
-		}}
-	}}, "ivysaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8517488899238478,
-			"StableID":   "n3boFSzaW921CNTRL",
-			"Name":       "ivysaur.tail78f774.ts.net.",
-			"User":       4538565228176803,
-			"Key":        "nodekey:6351d6da190536fb1dcdbaef6045950abdbee90284bb5e0d358b81fbc76a8f7e",
-			"KeyExpiry":  "2026-11-14T09:09:58Z",
-			"DiscoKey":   "discokey:a726a69088fc615c8da8473e572bbda47d26c2e452c2062252c8c582f7dbc70c",
-			"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"Endpoints": [
-				"77.164.248.136:35182",
-				"10.65.0.27:35182",
-				"172.17.0.1:35182",
-				"172.18.0.1:35182",
-				"172.19.0.1:35182",
-				"172.20.0.1:35182",
-				"172.21.0.1:35182",
-				"172.22.0.1:35182",
-				"172.23.0.1:35182",
-				"172.24.0.1:35182",
-				"172.25.0.1:35182",
-				"172.27.0.1:35182",
-				"172.28.0.1:35182",
-				"172.29.0.1:35182",
-				"172.30.0.1:35182"
-			],
-			"Hostinfo": {"Hostname": "ivysaur", "Services": [
-				{"Proto": "peerapi4", "Port": 62496},
-				{"Proto": "peerapi6", "Port": 62496},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:58.170587249Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "ivysaur",
-			"ComputedNameWithHost": "ivysaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:6351d6da190536fb1dcdbaef6045950abdbee90284bb5e0d358b81fbc76a8f7e",
-		"MachineKey":        "mkey:47a38b805622722b150cf68bbdcae6bc9326b146290f477356a3c5bdcea55a0c",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4538565228176803": {
-			"ID":          4538565228176803,
-			"LoginName":   "thor@example.org",
-			"DisplayName": "thor"
-		}}
-	}}, "kakuna": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         4398905709499259,
-			"StableID":   "nGfoC3oGMb11CNTRL",
-			"Name":       "kakuna.tail78f774.ts.net.",
-			"User":       4398905709499259,
-			"Key":        "nodekey:b155c51fc9f7601ea6dec78b67cf298b3713fc02417b530bea8335274bc1ad76",
-			"DiscoKey":   "discokey:f19ef368e77535b2d3a4a8d147decc80d4ea61b0abea57b03b0fd74c6ce79111",
-			"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"Endpoints": [
-				"77.164.248.136:56640",
-				"10.65.0.27:56640",
-				"172.17.0.1:56640",
-				"172.18.0.1:56640",
-				"172.19.0.1:56640",
-				"172.20.0.1:56640",
-				"172.21.0.1:56640",
-				"172.22.0.1:56640",
-				"172.23.0.1:56640",
-				"172.24.0.1:56640",
-				"172.25.0.1:56640",
-				"172.27.0.1:56640",
-				"172.28.0.1:56640",
-				"172.29.0.1:56640",
-				"172.30.0.1:56640"
-			],
-			"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
-				{"Proto": "peerapi4", "Port": 51523},
-				{"Proto": "peerapi6", "Port": 51523},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:57.112792896Z",
-			"Tags":              ["tag:prod"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "kakuna",
-			"ComputedNameWithHost": "kakuna"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:b155c51fc9f7601ea6dec78b67cf298b3713fc02417b530bea8335274bc1ad76",
-		"MachineKey":        "mkey:46016eeabfdc23062f5b9b92c6e103d8f682b22ab22bf04de243af1433d95e0d",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4398905709499259": {
-			"ID":          4398905709499259,
-			"LoginName":   "kakuna.tail78f774.ts.net",
-			"DisplayName": "kakuna"
-		}}
-	}}, "pidgeotto": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1462701867398957,
-			"StableID":   "n8vcEUhTRC11CNTRL",
-			"Name":       "pidgeotto.tail78f774.ts.net.",
-			"User":       1462701867398957,
-			"Key":        "nodekey:d2e24d6575449f6f7f05da050cd456eea796a70fecf8f5bca2b90b981b708e64",
-			"DiscoKey":   "discokey:b9247209ed5489c8a97a9e4aaceb3a45db0bfbfe641940cd96aca8dce12a3619",
-			"Addresses":  ["100.64.0.3/32", "fd7a:115c:a1e0::3/128"],
-			"AllowedIPs": ["100.64.0.3/32", "fd7a:115c:a1e0::3/128"],
-			"Endpoints": [
-				"77.164.248.136:49323",
-				"10.65.0.27:49323",
-				"172.17.0.1:49323",
-				"172.18.0.1:49323",
-				"172.19.0.1:49323",
-				"172.20.0.1:49323",
-				"172.21.0.1:49323",
-				"172.22.0.1:49323",
-				"172.23.0.1:49323",
-				"172.24.0.1:49323",
-				"172.25.0.1:49323",
-				"172.27.0.1:49323",
-				"172.28.0.1:49323",
-				"172.29.0.1:49323",
-				"172.30.0.1:49323"
-			],
-			"Hostinfo": {
-				"Hostname":    "pidgeotto",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:pidgeotto"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 34152},
-					{"Proto": "peerapi6", "Port": 34152},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:09:52.330166848Z",
-			"Tags":              ["tag:pidgeotto"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "pidgeotto",
-			"ComputedNameWithHost": "pidgeotto"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:d2e24d6575449f6f7f05da050cd456eea796a70fecf8f5bca2b90b981b708e64",
-		"MachineKey":        "mkey:48562c45554f387ac4eb430f5eec7013fad827d43c783adc210d1afc32f2142a",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1462701867398957": {
-			"ID":          1462701867398957,
-			"LoginName":   "pidgeotto.tail78f774.ts.net",
-			"DisplayName": "pidgeotto"
-		}}
-	}}, "pidgey": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1421890685488846,
-			"StableID":   "nRGmq7fy6C11CNTRL",
-			"Name":       "pidgey.tail78f774.ts.net.",
-			"User":       1421890685488846,
-			"Key":        "nodekey:c8fcfbdfc7940b880da1345f4b9d4308d4206d8e8b67d730f6302a0c6e6f1d3f",
-			"DiscoKey":   "discokey:6e5ea488a1e1ad360f3e23b92cd1250847f52d8fe9d9c528a4cd30fa046ca922",
-			"Addresses":  ["100.64.0.2/32", "fd7a:115c:a1e0::2/128"],
-			"AllowedIPs": ["100.64.0.2/32", "fd7a:115c:a1e0::2/128"],
-			"Endpoints": [
-				"77.164.248.136:59725",
-				"10.65.0.27:59725",
-				"172.17.0.1:59725",
-				"172.18.0.1:59725",
-				"172.19.0.1:59725",
-				"172.20.0.1:59725",
-				"172.21.0.1:59725",
-				"172.22.0.1:59725",
-				"172.23.0.1:59725",
-				"172.24.0.1:59725",
-				"172.25.0.1:59725",
-				"172.27.0.1:59725",
-				"172.28.0.1:59725",
-				"172.29.0.1:59725",
-				"172.30.0.1:59725"
-			],
-			"Hostinfo": {
-				"Hostname":    "pidgey",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:pidgey"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 46590},
-					{"Proto": "peerapi6", "Port": 46590},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:09:51.783297044Z",
-			"Tags":              ["tag:pidgey"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "pidgey",
-			"ComputedNameWithHost": "pidgey"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:c8fcfbdfc7940b880da1345f4b9d4308d4206d8e8b67d730f6302a0c6e6f1d3f",
-		"MachineKey":        "mkey:7f1d861dba06f6b5d10c8e20bef0038714f88c3fb9d6e4dab0c89815eb1ca01f",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1421890685488846": {
-			"ID":          1421890685488846,
-			"LoginName":   "pidgey.tail78f774.ts.net",
-			"DisplayName": "pidgey"
-		}}
-	}}, "raticate": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         6830479516309268,
-			"StableID":   "nm1jyd7YLv11CNTRL",
-			"Name":       "raticate.tail78f774.ts.net.",
-			"User":       6830479516309268,
-			"Key":        "nodekey:c4d281f165fd2867c4d67011cd71701fa9be987348ddb36641109f9a8caea561",
-			"DiscoKey":   "discokey:a2a38ca3a8d76366a4649f5219b7e36c23d9d449188acd52da16b31490ef2161",
-			"Addresses":  ["100.64.0.6/32", "fd7a:115c:a1e0::6/128"],
-			"AllowedIPs": ["100.64.0.6/32", "fd7a:115c:a1e0::6/128"],
-			"Endpoints": [
-				"77.164.248.136:34630",
-				"10.65.0.27:34630",
-				"172.17.0.1:34630",
-				"172.18.0.1:34630",
-				"172.19.0.1:34630",
-				"172.20.0.1:34630",
-				"172.21.0.1:34630",
-				"172.22.0.1:34630",
-				"172.23.0.1:34630",
-				"172.24.0.1:34630",
-				"172.25.0.1:34630",
-				"172.27.0.1:34630",
-				"172.28.0.1:34630",
-				"172.29.0.1:34630",
-				"172.30.0.1:34630"
-			],
-			"Hostinfo": {"Hostname": "raticate", "RequestTags": ["tag:group-b"], "Services": [
-				{"Proto": "peerapi4", "Port": 61927},
-				{"Proto": "peerapi6", "Port": 61927},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:53.9152509Z",
-			"Tags":              ["tag:group-b"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "raticate",
-			"ComputedNameWithHost": "raticate"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:c4d281f165fd2867c4d67011cd71701fa9be987348ddb36641109f9a8caea561",
-		"MachineKey":        "mkey:9b49218879ebcd1bf07a0b140e7bed1b19850e5bec7adb590ee8dfd54ac4ca6e",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"6830479516309268": {
-			"ID":          6830479516309268,
-			"LoginName":   "raticate.tail78f774.ts.net",
-			"DisplayName": "raticate"
-		}}
-	}}, "rattata": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1191708573799268,
-			"StableID":   "nFJSrUAjJA11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       1191708573799268,
-			"Key":        "nodekey:38a866479caef0d5c0e853c85a8a3df39f1fd96c005b32071b40f4ef80d6ec13",
-			"DiscoKey":   "discokey:d23472be07dfe7f1384c1d713569b6abc53d6c3a8ea28b723a8265a421e7cf59",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:60165",
-				"10.65.0.27:60165",
-				"172.17.0.1:60165",
-				"172.18.0.1:60165",
-				"172.19.0.1:60165",
-				"172.20.0.1:60165",
-				"172.21.0.1:60165",
-				"172.22.0.1:60165",
-				"172.23.0.1:60165",
-				"172.24.0.1:60165",
-				"172.25.0.1:60165",
-				"172.27.0.1:60165",
-				"172.28.0.1:60165",
-				"172.29.0.1:60165",
-				"172.30.0.1:60165"
-			],
-			"Hostinfo": {"Hostname": "rattata", "RequestTags": ["tag:group-a"], "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:53.365800595Z",
-			"Tags":              ["tag:group-a"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:38a866479caef0d5c0e853c85a8a3df39f1fd96c005b32071b40f4ef80d6ec13",
-		"MachineKey": "mkey:91230ff01950c8ec552b951556bdac624112f0816e7ca2e675bf2cd99d885c5d",
-		"Peers": [{
-			"ID":         4353680609859707,
-			"StableID":   "ncdq1ponza11CNTRL",
-			"Name":       "blastoise.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:b5db4038b4b10452989f805261c321d951a289c50fc7ee9e119cc43f3b60133a",
-			"DiscoKey":   "discokey:e5ac5dd18c7f96c6189e8c8a377a3bbfc606c1520a4627b8ce97c71c7ce9cc7f",
-			"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-			"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:59178",
-				"10.65.0.27:59178",
-				"172.17.0.1:59178",
-				"172.18.0.1:59178",
-				"172.19.0.1:59178",
-				"172.20.0.1:59178",
-				"172.21.0.1:59178",
-				"172.22.0.1:59178",
-				"172.23.0.1:59178",
-				"172.24.0.1:59178",
-				"172.25.0.1:59178",
-				"172.27.0.1:59178",
-				"172.28.0.1:59178",
-				"172.29.0.1:59178",
-				"172.30.0.1:59178"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-				{"Proto": "peerapi4", "Port": 60534},
-				{"Proto": "peerapi6", "Port": 60534}
-			]},
-			"Created":              "2026-05-18T09:09:54.427828038Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:exit", "tag:router"],
-			"PrimaryRoutes":        ["10.33.0.0/16"],
-			"Online":               true,
-			"ComputedName":         "blastoise",
-			"ComputedNameWithHost": "blastoise"
-		}, {
-			"ID":         5736597902827947,
-			"StableID":   "nJ8kcZh7om11CNTRL",
-			"Name":       "squirtle.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:a82e54f5c6150a0caa9610e9287570a51cad64af696ff4432b5545f7590e804c",
-			"DiscoKey":   "discokey:105764c326fdac03402af2449523a6be028f244a3bbf9bbad5c6b5114fb1d11c",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"Endpoints": [
-				"77.164.248.136:59206",
-				"10.65.0.27:59206",
-				"172.17.0.1:59206",
-				"172.18.0.1:59206",
-				"172.19.0.1:59206",
-				"172.20.0.1:59206",
-				"172.21.0.1:59206",
-				"172.22.0.1:59206",
-				"172.23.0.1:59206",
-				"172.24.0.1:59206",
-				"172.25.0.1:59206",
-				"172.27.0.1:59206",
-				"172.28.0.1:59206",
-				"172.29.0.1:59206",
-				"172.30.0.1:59206"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-				{"Proto": "peerapi4", "Port": 43119},
-				{"Proto": "peerapi6", "Port": 43119}
-			]},
-			"Created":              "2026-05-18T09:09:56.03671269Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:router"],
-			"Online":               true,
-			"ComputedName":         "squirtle",
-			"ComputedNameWithHost": "squirtle"
-		}],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1191708573799268": {
-			"ID":          1191708573799268,
-			"LoginName":   "rattata.tail78f774.ts.net",
-			"DisplayName": "rattata"
-		}, "1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}}
-	}, "whois": {"100.64.0.13": {"Node": {
-		"ID":         5736597902827947,
-		"StableID":   "nJ8kcZh7om11CNTRL",
-		"Name":       "squirtle.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:a82e54f5c6150a0caa9610e9287570a51cad64af696ff4432b5545f7590e804c",
-		"DiscoKey":   "discokey:105764c326fdac03402af2449523a6be028f244a3bbf9bbad5c6b5114fb1d11c",
-		"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"Endpoints": [
-			"77.164.248.136:59206",
-			"10.65.0.27:59206",
-			"172.17.0.1:59206",
-			"172.18.0.1:59206",
-			"172.19.0.1:59206",
-			"172.20.0.1:59206",
-			"172.21.0.1:59206",
-			"172.22.0.1:59206",
-			"172.23.0.1:59206",
-			"172.24.0.1:59206",
-			"172.25.0.1:59206",
-			"172.27.0.1:59206",
-			"172.28.0.1:59206",
-			"172.29.0.1:59206",
-			"172.30.0.1:59206"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-			{"Proto": "peerapi4", "Port": 43119},
-			{"Proto": "peerapi6", "Port": 43119}
-		]},
-		"Created":              "2026-05-18T09:09:56.03671269Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:router"],
-		"Online":               true,
-		"ComputedName":         "squirtle",
-		"ComputedNameWithHost": "squirtle"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "100.64.0.9": {"Node": {
-		"ID":         4353680609859707,
-		"StableID":   "ncdq1ponza11CNTRL",
-		"Name":       "blastoise.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:b5db4038b4b10452989f805261c321d951a289c50fc7ee9e119cc43f3b60133a",
-		"DiscoKey":   "discokey:e5ac5dd18c7f96c6189e8c8a377a3bbfc606c1520a4627b8ce97c71c7ce9cc7f",
-		"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-		"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-		"Endpoints": [
-			"77.164.248.136:59178",
-			"10.65.0.27:59178",
-			"172.17.0.1:59178",
-			"172.18.0.1:59178",
-			"172.19.0.1:59178",
-			"172.20.0.1:59178",
-			"172.21.0.1:59178",
-			"172.22.0.1:59178",
-			"172.23.0.1:59178",
-			"172.24.0.1:59178",
-			"172.25.0.1:59178",
-			"172.27.0.1:59178",
-			"172.28.0.1:59178",
-			"172.29.0.1:59178",
-			"172.30.0.1:59178"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-			{"Proto": "peerapi4", "Port": 60534},
-			{"Proto": "peerapi6", "Port": 60534}
-		]},
-		"Created":              "2026-05-18T09:09:54.427828038Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:exit", "tag:router"],
-		"PrimaryRoutes":        ["10.33.0.0/16"],
-		"Online":               true,
-		"ComputedName":         "blastoise",
-		"ComputedNameWithHost": "blastoise"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::9": {"Node": {
-		"ID":         4353680609859707,
-		"StableID":   "ncdq1ponza11CNTRL",
-		"Name":       "blastoise.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:b5db4038b4b10452989f805261c321d951a289c50fc7ee9e119cc43f3b60133a",
-		"DiscoKey":   "discokey:e5ac5dd18c7f96c6189e8c8a377a3bbfc606c1520a4627b8ce97c71c7ce9cc7f",
-		"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-		"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-		"Endpoints": [
-			"77.164.248.136:59178",
-			"10.65.0.27:59178",
-			"172.17.0.1:59178",
-			"172.18.0.1:59178",
-			"172.19.0.1:59178",
-			"172.20.0.1:59178",
-			"172.21.0.1:59178",
-			"172.22.0.1:59178",
-			"172.23.0.1:59178",
-			"172.24.0.1:59178",
-			"172.25.0.1:59178",
-			"172.27.0.1:59178",
-			"172.28.0.1:59178",
-			"172.29.0.1:59178",
-			"172.30.0.1:59178"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "blastoise", "Services": [
-			{"Proto": "peerapi4", "Port": 60534},
-			{"Proto": "peerapi6", "Port": 60534}
-		]},
-		"Created":              "2026-05-18T09:09:54.427828038Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:exit", "tag:router"],
-		"PrimaryRoutes":        ["10.33.0.0/16"],
-		"Online":               true,
-		"ComputedName":         "blastoise",
-		"ComputedNameWithHost": "blastoise"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::d": {"Node": {
-		"ID":         5736597902827947,
-		"StableID":   "nJ8kcZh7om11CNTRL",
-		"Name":       "squirtle.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:a82e54f5c6150a0caa9610e9287570a51cad64af696ff4432b5545f7590e804c",
-		"DiscoKey":   "discokey:105764c326fdac03402af2449523a6be028f244a3bbf9bbad5c6b5114fb1d11c",
-		"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-		"Endpoints": [
-			"77.164.248.136:59206",
-			"10.65.0.27:59206",
-			"172.17.0.1:59206",
-			"172.18.0.1:59206",
-			"172.19.0.1:59206",
-			"172.20.0.1:59206",
-			"172.21.0.1:59206",
-			"172.22.0.1:59206",
-			"172.23.0.1:59206",
-			"172.24.0.1:59206",
-			"172.25.0.1:59206",
-			"172.27.0.1:59206",
-			"172.28.0.1:59206",
-			"172.29.0.1:59206",
-			"172.30.0.1:59206"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "squirtle", "Services": [
-			{"Proto": "peerapi4", "Port": 43119},
-			{"Proto": "peerapi6", "Port": 43119}
-		]},
-		"Created":              "2026-05-18T09:09:56.03671269Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:router"],
-		"Online":               true,
-		"ComputedName":         "squirtle",
-		"ComputedNameWithHost": "squirtle"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "spearow": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         5554457969945969,
-			"StableID":   "nNHUT9CdNk11CNTRL",
-			"Name":       "spearow.tail78f774.ts.net.",
-			"User":       5554457969945969,
-			"Key":        "nodekey:e85ccf9890a697a7faf59cddf1944fa7cf88f28eb8f8cede6d456812a815856d",
-			"DiscoKey":   "discokey:c50b6000f3e9a04b6cc80199dbb9293fed0b048fcccdcf2d50dd3ae242407243",
-			"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128", "10.44.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:32906",
-				"10.65.0.27:32906",
-				"172.17.0.1:32906",
-				"172.18.0.1:32906",
-				"172.19.0.1:32906",
-				"172.20.0.1:32906",
-				"172.21.0.1:32906",
-				"172.22.0.1:32906",
-				"172.23.0.1:32906",
-				"172.24.0.1:32906",
-				"172.25.0.1:32906",
-				"172.27.0.1:32906",
-				"172.28.0.1:32906",
-				"172.29.0.1:32906",
-				"172.30.0.1:32906"
-			],
-			"Hostinfo": {
-				"Hostname":    "spearow",
-				"RoutableIPs": ["10.44.0.0/16"],
-				"RequestTags": ["tag:spearow"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:09:54.973023641Z",
-			"Tags":              ["tag:spearow"],
-			"PrimaryRoutes":     ["10.44.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "spearow",
-			"ComputedNameWithHost": "spearow"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:e85ccf9890a697a7faf59cddf1944fa7cf88f28eb8f8cede6d456812a815856d",
-		"MachineKey":        "mkey:e5f41d0ea32bd6e75e786f68a93db26c678770bd32e93590053318e48e211a16",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"5554457969945969": {
-			"ID":          5554457969945969,
-			"LoginName":   "spearow.tail78f774.ts.net",
-			"DisplayName": "spearow"
-		}}
-	}}, "squirtle": {"packet_filter_rules": [{
-		"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-		"DstPorts": [{"IP": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}]
-	}], "packet_filter_matches": [{
-		"IPProto": [6, 17, 1, 58],
-		"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"SrcCaps": null,
-		"Dsts":    [{"Net": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}],
-		"Caps":    []
-	}], "netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         5736597902827947,
-			"StableID":   "nJ8kcZh7om11CNTRL",
-			"Name":       "squirtle.tail78f774.ts.net.",
-			"User":       5736597902827947,
-			"Key":        "nodekey:a82e54f5c6150a0caa9610e9287570a51cad64af696ff4432b5545f7590e804c",
-			"DiscoKey":   "discokey:105764c326fdac03402af2449523a6be028f244a3bbf9bbad5c6b5114fb1d11c",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:59206",
-				"10.65.0.27:59206",
-				"172.17.0.1:59206",
-				"172.18.0.1:59206",
-				"172.19.0.1:59206",
-				"172.20.0.1:59206",
-				"172.21.0.1:59206",
-				"172.22.0.1:59206",
-				"172.23.0.1:59206",
-				"172.24.0.1:59206",
-				"172.25.0.1:59206",
-				"172.27.0.1:59206",
-				"172.28.0.1:59206",
-				"172.29.0.1:59206",
-				"172.30.0.1:59206"
-			],
-			"Hostinfo": {
-				"Hostname":    "squirtle",
-				"RoutableIPs": ["10.33.0.0/16"],
-				"RequestTags": ["tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:09:56.03671269Z",
-			"Tags":              ["tag:router"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "squirtle",
-			"ComputedNameWithHost": "squirtle"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:a82e54f5c6150a0caa9610e9287570a51cad64af696ff4432b5545f7590e804c",
-		"MachineKey": "mkey:eb56e1bc39a518091833374735bbab511a36e3db348ce585e57e5716399a931c",
-		"Peers": [{
-			"ID":         1191708573799268,
-			"StableID":   "nFJSrUAjJA11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:38a866479caef0d5c0e853c85a8a3df39f1fd96c005b32071b40f4ef80d6ec13",
-			"DiscoKey":   "discokey:d23472be07dfe7f1384c1d713569b6abc53d6c3a8ea28b723a8265a421e7cf59",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:60165",
-				"10.65.0.27:60165",
-				"172.17.0.1:60165",
-				"172.18.0.1:60165",
-				"172.19.0.1:60165",
-				"172.20.0.1:60165",
-				"172.21.0.1:60165",
-				"172.22.0.1:60165",
-				"172.23.0.1:60165",
-				"172.24.0.1:60165",
-				"172.25.0.1:60165",
-				"172.27.0.1:60165",
-				"172.28.0.1:60165",
-				"172.29.0.1:60165",
-				"172.30.0.1:60165"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053}
-			]},
-			"Created":              "2026-05-18T09:09:53.365800595Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:group-a"],
-			"Online":               true,
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		}],
-		"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"SrcCaps": null,
-			"Dsts":    [{"Net": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}],
-			"Caps":    []
-		}],
-		"PacketFilterRules": [{
-			"SrcIPs":   ["100.64.0.5", "fd7a:115c:a1e0::5"],
-			"DstPorts": [{"IP": "10.0.0.0/8", "Ports": {"First": 0, "Last": 65535}}]
-		}],
-		"SSHPolicy":       {"rules": []},
-		"CollectServices": false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "5736597902827947": {
-			"ID":          5736597902827947,
-			"LoginName":   "squirtle.tail78f774.ts.net",
-			"DisplayName": "squirtle"
-		}}
-	}, "whois": {"100.64.0.5": {"Node": {
-		"ID":         1191708573799268,
-		"StableID":   "nFJSrUAjJA11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:38a866479caef0d5c0e853c85a8a3df39f1fd96c005b32071b40f4ef80d6ec13",
-		"DiscoKey":   "discokey:d23472be07dfe7f1384c1d713569b6abc53d6c3a8ea28b723a8265a421e7cf59",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:60165",
-			"10.65.0.27:60165",
-			"172.17.0.1:60165",
-			"172.18.0.1:60165",
-			"172.19.0.1:60165",
-			"172.20.0.1:60165",
-			"172.21.0.1:60165",
-			"172.22.0.1:60165",
-			"172.23.0.1:60165",
-			"172.24.0.1:60165",
-			"172.25.0.1:60165",
-			"172.27.0.1:60165",
-			"172.28.0.1:60165",
-			"172.29.0.1:60165",
-			"172.30.0.1:60165"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:09:53.365800595Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::5": {"Node": {
-		"ID":         1191708573799268,
-		"StableID":   "nFJSrUAjJA11CNTRL",
-		"Name":       "rattata.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:38a866479caef0d5c0e853c85a8a3df39f1fd96c005b32071b40f4ef80d6ec13",
-		"DiscoKey":   "discokey:d23472be07dfe7f1384c1d713569b6abc53d6c3a8ea28b723a8265a421e7cf59",
-		"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-		"Endpoints": [
-			"77.164.248.136:60165",
-			"10.65.0.27:60165",
-			"172.17.0.1:60165",
-			"172.18.0.1:60165",
-			"172.19.0.1:60165",
-			"172.20.0.1:60165",
-			"172.21.0.1:60165",
-			"172.22.0.1:60165",
-			"172.23.0.1:60165",
-			"172.24.0.1:60165",
-			"172.25.0.1:60165",
-			"172.27.0.1:60165",
-			"172.28.0.1:60165",
-			"172.29.0.1:60165",
-			"172.30.0.1:60165"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "rattata", "Services": [
-			{"Proto": "peerapi4", "Port": 41053},
-			{"Proto": "peerapi6", "Port": 41053}
-		]},
-		"Created":              "2026-05-18T09:09:53.365800595Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "rattata",
-		"ComputedNameWithHost": "rattata"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "venusaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8565173068968397,
-			"StableID":   "nSmk3DaBt921CNTRL",
-			"Name":       "venusaur.tail78f774.ts.net.",
-			"User":       3982058329734709,
-			"Key":        "nodekey:8d5be578b9466b6c25398b6a8cec4dfa921bb81653c26c09c6602d3335b7292f",
-			"KeyExpiry":  "2026-11-14T09:09:58Z",
-			"DiscoKey":   "discokey:b24c6d83ddffffa2ef75fc0ec43f7d992823795f4a07739c5e761f62f2125e73",
-			"Addresses":  ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
-			"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
-			"Endpoints": [
-				"77.164.248.136:54738",
-				"10.65.0.27:54738",
-				"172.17.0.1:54738",
-				"172.18.0.1:54738",
-				"172.19.0.1:54738",
-				"172.20.0.1:54738",
-				"172.21.0.1:54738",
-				"172.22.0.1:54738",
-				"172.23.0.1:54738",
-				"172.24.0.1:54738",
-				"172.25.0.1:54738",
-				"172.27.0.1:54738",
-				"172.28.0.1:54738",
-				"172.29.0.1:54738",
-				"172.30.0.1:54738"
-			],
-			"Hostinfo": {"Hostname": "venusaur", "Services": [
-				{"Proto": "peerapi4", "Port": 42394},
-				{"Proto": "peerapi6", "Port": 42394},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:58.707802059Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "venusaur",
-			"ComputedNameWithHost": "venusaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:8d5be578b9466b6c25398b6a8cec4dfa921bb81653c26c09c6602d3335b7292f",
-		"MachineKey":        "mkey:aee00888869f777b2ca1c5eb63fb3333c9ee79fede7503c79ba3c0a182a74f1a",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"3982058329734709": {
-			"ID":          3982058329734709,
-			"LoginName":   "freya@example.com",
-			"DisplayName": "freya"
-		}}
-	}}, "weedle": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         5904929113215889,
-			"StableID":   "nGAoFYUM7o11CNTRL",
-			"Name":       "weedle.tail78f774.ts.net.",
-			"User":       5904929113215889,
-			"Key":        "nodekey:f3edbda487f65b4b5f396a8e5fb4ac2c5b81438b86499ee2660f3264080dff52",
-			"DiscoKey":   "discokey:1f5cbc97dcd670225e8a75a5b4a39bdedfd929f95d1ef6ace18a26e5ef7c7741",
-			"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"Endpoints": [
-				"77.164.248.136:43137",
-				"10.65.0.27:43137",
-				"172.17.0.1:43137",
-				"172.18.0.1:43137",
-				"172.19.0.1:43137",
-				"172.20.0.1:43137",
-				"172.21.0.1:43137",
-				"172.22.0.1:43137",
-				"172.23.0.1:43137",
-				"172.24.0.1:43137",
-				"172.25.0.1:43137",
-				"172.27.0.1:43137",
-				"172.28.0.1:43137",
-				"172.29.0.1:43137",
-				"172.30.0.1:43137"
-			],
-			"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
-				{"Proto": "peerapi4", "Port": 63957},
-				{"Proto": "peerapi6", "Port": 63957},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:09:56.578084606Z",
-			"Tags":              ["tag:client"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "weedle",
-			"ComputedNameWithHost": "weedle"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:f3edbda487f65b4b5f396a8e5fb4ac2c5b81438b86499ee2660f3264080dff52",
-		"MachineKey":        "mkey:dfc7fdac891e1d2343138400540e6f94c32bd2fe6d74abf31f52b9e4b11d6976",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"5904929113215889": {
-			"ID":          5904929113215889,
-			"LoginName":   "weedle.tail78f774.ts.net",
-			"DisplayName": "weedle"
-		}}
-	}}}
-}
diff --git a/hscontrol/policy/v2/testdata/grant_results/via-grant-v50.hujson b/hscontrol/policy/v2/testdata/grant_results/via-grant-v50.hujson
deleted file mode 100644
index c4cf73770..000000000
--- a/hscontrol/policy/v2/testdata/grant_results/via-grant-v50.hujson
+++ /dev/null
@@ -1,13635 +0,0 @@
-// via-grant-v50
-//
-// via grant v50 dst cidr disjoint from advertised subnet
-// Captured at:    2026-05-18T09:10:44Z
-// tool version:   tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "via-grant-v50",
-	"description":    "via grant v50 dst cidr disjoint from advertised subnet",
-	"category":       "grant",
-	"captured_at":    "2026-05-18T09:10:44.446555363Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                                                              \n  \n                                                                        \n                                                                        \n                                 \n  \n                                                                  \n                                                                 \n{\n\t\"category\":    \"grant\",\n\t\"description\": \"via grant v50 dst cidr disjoint from advertised subnet\",\n\t\"id\":          \"via-grant-v50\",\n\t\"options\":     {\"capture_whois\": true},\n\t\"policy\": {\"autoApprovers\": {\"routes\": {\n\t\t\"10.33.0.0/16\": [\"tag:router\"],\n\t\t\"10.44.0.0/16\": [\"tag:spearow\"],\n\t\t\"10.55.0.0/16\": [\"tag:fearow\"]\n\t}}, \"grants\": [{\n\t\t\"dst\": [\"192.168.0.0/16\"],\n\t\t\"ip\":  [\"*\"],\n\t\t\"src\": [\"tag:group-a\"],\n\t\t\"via\": [\"tag:router\"]\n\t}], \"groups\": {\n\t\t\"group:admins\":     [\"odin@example.com\"],\n\t\t\"group:developers\": [\"thor@example.org\", \"odin@example.com\"],\n\t\t\"group:empty\":      [],\n\t\t\"group:monitors\":   [\"freya@example.com\"]\n\t}, \"hosts\": {\n\t\t\"internal\":  \"10.0.0.0/8\",\n\t\t\"prodbox\":   \"100.103.8.15\",\n\t\t\"webserver\": \"100.108.74.26\"\n\t}, \"tagOwners\": {\n\t\t\"tag:client\":   [\"odin@example.com\"],\n\t\t\"tag:exit\":     [\"odin@example.com\"],\n\t\t\"tag:pidgey\":   [\"odin@example.com\"],\n\t\t\"tag:pidgeotto\":   [\"odin@example.com\"],\n\t\t\"tag:group-a\":  [\"odin@example.com\"],\n\t\t\"tag:group-b\":  [\"odin@example.com\"],\n\t\t\"tag:ha\":       [\"odin@example.com\"],\n\t\t\"tag:prod\":     [\"odin@example.com\"],\n\t\t\"tag:router\":   [\"odin@example.com\"],\n\t\t\"tag:spearow\": [\"odin@example.com\"],\n\t\t\"tag:fearow\": [\"odin@example.com\"],\n\t\t\"tag:server\":   [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\":      {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": \"../_topologies/grant.hujson\"\n}\n",
-		"scenario_path":   "scenarios/grant/via-grant-v50.hujson",
-		"full_policy": {"autoApprovers": {"routes": {
-			"10.33.0.0/16": ["tag:router"],
-			"10.44.0.0/16": ["tag:spearow"],
-			"10.55.0.0/16": ["tag:fearow"]
-		}}, "grants": [{
-			"dst": ["192.168.0.0/16"],
-			"ip":  ["*"],
-			"src": ["tag:group-a"],
-			"via": ["tag:router"]
-		}], "groups": {
-			"group:admins":     ["odin@example.com"],
-			"group:developers": ["thor@example.org", "odin@example.com"],
-			"group:empty":      [],
-			"group:monitors":   ["freya@example.com"]
-		}, "hosts": {
-			"internal":  "10.0.0.0/8",
-			"prodbox":   "100.103.8.15",
-			"webserver": "100.108.74.26"
-		}, "tagOwners": {
-			"tag:client":    ["odin@example.com"],
-			"tag:exit":      ["odin@example.com"],
-			"tag:pidgey":    ["odin@example.com"],
-			"tag:pidgeotto": ["odin@example.com"],
-			"tag:group-a":   ["odin@example.com"],
-			"tag:group-b":   ["odin@example.com"],
-			"tag:ha":        ["odin@example.com"],
-			"tag:prod":      ["odin@example.com"],
-			"tag:router":    ["odin@example.com"],
-			"tag:spearow":   ["odin@example.com"],
-			"tag:fearow":    ["odin@example.com"],
-			"tag:server":    ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"beedrill": {
-		"hostname":        "beedrill",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "blastoise": {
-		"hostname":        "blastoise",
-		"tags":            ["tag:exit", "tag:router"],
-		"ipv4":            "100.64.0.9",
-		"ipv6":            "fd7a:115c:a1e0::9",
-		"routable_ips":    ["10.33.0.0/16", "0.0.0.0/0", "::/0"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "bulbasaur": {
-		"hostname":        "bulbasaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.19",
-		"ipv6":            "fd7a:115c:a1e0::13",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "charmander": {
-		"hostname":        "charmander",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.4",
-		"ipv6":            "fd7a:115c:a1e0::4",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "fearow": {
-		"hostname":        "fearow",
-		"tags":            ["tag:fearow"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    ["10.55.0.0/16"],
-		"approved_routes": ["10.55.0.0/16"]
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "kakuna": {
-		"hostname":        "kakuna",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "pidgeotto": {
-		"hostname":        "pidgeotto",
-		"tags":            ["tag:pidgeotto"],
-		"ipv4":            "100.64.0.3",
-		"ipv6":            "fd7a:115c:a1e0::3",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "pidgey": {
-		"hostname":        "pidgey",
-		"tags":            ["tag:pidgey"],
-		"ipv4":            "100.64.0.2",
-		"ipv6":            "fd7a:115c:a1e0::2",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "raticate": {
-		"hostname":        "raticate",
-		"tags":            ["tag:group-b"],
-		"ipv4":            "100.64.0.6",
-		"ipv6":            "fd7a:115c:a1e0::6",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "rattata": {
-		"hostname":        "rattata",
-		"tags":            ["tag:group-a"],
-		"ipv4":            "100.64.0.5",
-		"ipv6":            "fd7a:115c:a1e0::5",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "spearow": {
-		"hostname":        "spearow",
-		"tags":            ["tag:spearow"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    ["10.44.0.0/16"],
-		"approved_routes": ["10.44.0.0/16"]
-	}, "squirtle": {
-		"hostname":        "squirtle",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.18",
-		"ipv6":            "fd7a:115c:a1e0::12",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "weedle": {
-		"hostname":        "weedle",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"beedrill": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         742807651721642,
-			"StableID":   "nMtKZFJRo611CNTRL",
-			"Name":       "beedrill.tail78f774.ts.net.",
-			"User":       742807651721642,
-			"Key":        "nodekey:45d7df813905a0e39a63843408c508d051e40d88ff64a02f2c5d8246661eb716",
-			"DiscoKey":   "discokey:3242b6abcbfdbe7f55ad497daa1ecc13a27a1503bbd14172abe6a15593071a41",
-			"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"Endpoints": [
-				"77.164.248.136:49637",
-				"10.65.0.27:49637",
-				"172.17.0.1:49637",
-				"172.18.0.1:49637",
-				"172.19.0.1:49637",
-				"172.20.0.1:49637",
-				"172.21.0.1:49637",
-				"172.22.0.1:49637",
-				"172.23.0.1:49637",
-				"172.24.0.1:49637",
-				"172.25.0.1:49637",
-				"172.27.0.1:49637",
-				"172.28.0.1:49637",
-				"172.29.0.1:49637",
-				"172.30.0.1:49637"
-			],
-			"Hostinfo": {"Hostname": "beedrill", "RequestTags": ["tag:server"], "Services": [
-				{"Proto": "peerapi4", "Port": 50358},
-				{"Proto": "peerapi6", "Port": 50358},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:10:56.956275273Z",
-			"Tags":              ["tag:server"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "beedrill",
-			"ComputedNameWithHost": "beedrill"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:45d7df813905a0e39a63843408c508d051e40d88ff64a02f2c5d8246661eb716",
-		"MachineKey":        "mkey:0de60b0f194ebaa9cb84a2a734a76526bee25283326a10c2e984c7908a7e267f",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"742807651721642": {
-			"ID":          742807651721642,
-			"LoginName":   "beedrill.tail78f774.ts.net",
-			"DisplayName": "beedrill"
-		}}
-	}}, "blastoise": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         4115946452487668,
-			"StableID":   "n5bNcAw79Z11CNTRL",
-			"Name":       "blastoise.tail78f774.ts.net.",
-			"User":       4115946452487668,
-			"Key":        "nodekey:7c578e256bcd180c9157581f28c9aae903b4b535cc4880f7276c956567e7644c",
-			"DiscoKey":   "discokey:0dd3cc956f91bfbf57a0342898041ee443f28e01f57e0d825cc9a5b4f6f4c348",
-			"Addresses":  ["100.64.0.9/32", "fd7a:115c:a1e0::9/128"],
-			"AllowedIPs": ["100.64.0.9/32", "fd7a:115c:a1e0::9/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:47019",
-				"10.65.0.27:47019",
-				"172.17.0.1:47019",
-				"172.18.0.1:47019",
-				"172.19.0.1:47019",
-				"172.20.0.1:47019",
-				"172.21.0.1:47019",
-				"172.22.0.1:47019",
-				"172.23.0.1:47019",
-				"172.24.0.1:47019",
-				"172.25.0.1:47019",
-				"172.27.0.1:47019",
-				"172.28.0.1:47019",
-				"172.29.0.1:47019",
-				"172.30.0.1:47019"
-			],
-			"Hostinfo": {
-				"Hostname":    "blastoise",
-				"RoutableIPs": ["10.33.0.0/16", "0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit", "tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 60534},
-					{"Proto": "peerapi6", "Port": 60534},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:10:53.752738091Z",
-			"Tags":              ["tag:exit", "tag:router"],
-			"PrimaryRoutes":     ["10.33.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "blastoise",
-			"ComputedNameWithHost": "blastoise"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:7c578e256bcd180c9157581f28c9aae903b4b535cc4880f7276c956567e7644c",
-		"MachineKey":        "mkey:969d1cd089f03379b70814a95f0ef16ce2df65de187e76e5c474f6a822d5a369",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4115946452487668": {
-			"ID":          4115946452487668,
-			"LoginName":   "blastoise.tail78f774.ts.net",
-			"DisplayName": "blastoise"
-		}}
-	}}, "bulbasaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         117941651091692,
-			"StableID":   "nD9RqN8Rv111CNTRL",
-			"Name":       "bulbasaur.tail78f774.ts.net.",
-			"User":       4156223528223174,
-			"Key":        "nodekey:179b877ca5f2801740968a2d5920c58c08b35447b912e7c8ab4ea986e85ff513",
-			"KeyExpiry":  "2026-11-14T09:10:58Z",
-			"DiscoKey":   "discokey:57fcdacb9de1e6cbfcc57b69cb0413e61f99817b4ac91517935c39d4d994495c",
-			"Addresses":  ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
-			"AllowedIPs": ["100.64.0.19/32", "fd7a:115c:a1e0::13/128"],
-			"Endpoints": [
-				"77.164.248.136:47480",
-				"10.65.0.27:47480",
-				"172.17.0.1:47480",
-				"172.18.0.1:47480",
-				"172.19.0.1:47480",
-				"172.20.0.1:47480",
-				"172.21.0.1:47480",
-				"172.22.0.1:47480",
-				"172.23.0.1:47480",
-				"172.24.0.1:47480",
-				"172.25.0.1:47480",
-				"172.27.0.1:47480",
-				"172.28.0.1:47480",
-				"172.29.0.1:47480",
-				"172.30.0.1:47480"
-			],
-			"Hostinfo": {"Hostname": "bulbasaur", "Services": [
-				{"Proto": "peerapi4", "Port": 38156},
-				{"Proto": "peerapi6", "Port": 38156},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:10:58.549729838Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "bulbasaur",
-			"ComputedNameWithHost": "bulbasaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:179b877ca5f2801740968a2d5920c58c08b35447b912e7c8ab4ea986e85ff513",
-		"MachineKey":        "mkey:87c7679a59c128c8d5e3ae69c84713fa14e7e2989cc9d8d43365a66fb14fa85e",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4156223528223174": {
-			"ID":          4156223528223174,
-			"LoginName":   "odin@example.com",
-			"DisplayName": "odin"
-		}}
-	}}, "charmander": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8611553749726689,
-			"StableID":   "nAZ1z2vBFA21CNTRL",
-			"Name":       "charmander.tail78f774.ts.net.",
-			"User":       8611553749726689,
-			"Key":        "nodekey:5eb431f788096d6d4c2ad5b7639f2f76630b531981a275f6c7fb478462cadf6a",
-			"DiscoKey":   "discokey:d941d6a21f41536a54f30f1b4360f1149dd8dad27c3826f6d16bd0c71a19e209",
-			"Addresses":  ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
-			"AllowedIPs": ["100.64.0.4/32", "fd7a:115c:a1e0::4/128"],
-			"Endpoints": [
-				"77.164.248.136:54587",
-				"10.65.0.27:54587",
-				"172.17.0.1:54587",
-				"172.18.0.1:54587",
-				"172.19.0.1:54587",
-				"172.20.0.1:54587",
-				"172.21.0.1:54587",
-				"172.22.0.1:54587",
-				"172.23.0.1:54587",
-				"172.24.0.1:54587",
-				"172.25.0.1:54587",
-				"172.27.0.1:54587",
-				"172.28.0.1:54587",
-				"172.29.0.1:54587",
-				"172.30.0.1:54587"
-			],
-			"Hostinfo": {
-				"Hostname":    "charmander",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 37067},
-					{"Proto": "peerapi6", "Port": 37067},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:10:52.167516116Z",
-			"Tags":              ["tag:exit"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "charmander",
-			"ComputedNameWithHost": "charmander"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:5eb431f788096d6d4c2ad5b7639f2f76630b531981a275f6c7fb478462cadf6a",
-		"MachineKey":        "mkey:3c4cee07a759e9892b8be7839e99dd3f8eda7c74f9e28b50672111fa6082aa45",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"8611553749726689": {
-			"ID":          8611553749726689,
-			"LoginName":   "charmander.tail78f774.ts.net",
-			"DisplayName": "charmander"
-		}}
-	}}, "fearow": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2962818332067504,
-			"StableID":   "n36zJPDs8Q11CNTRL",
-			"Name":       "fearow.tail78f774.ts.net.",
-			"User":       2962818332067504,
-			"Key":        "nodekey:ae65fa0cbc483038e5b31f1aa96ee6f9de15ce74a70fd63782c01efc14b7ed2a",
-			"DiscoKey":   "discokey:f5f3dbeb346aa6043ae7f18e7fce55ba7675996f32cbc6b35ecfed9221ca686d",
-			"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-			"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128", "10.55.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:48210",
-				"10.65.0.27:48210",
-				"172.17.0.1:48210",
-				"172.18.0.1:48210",
-				"172.19.0.1:48210",
-				"172.20.0.1:48210",
-				"172.21.0.1:48210",
-				"172.22.0.1:48210",
-				"172.23.0.1:48210",
-				"172.24.0.1:48210",
-				"172.25.0.1:48210",
-				"172.27.0.1:48210",
-				"172.28.0.1:48210",
-				"172.29.0.1:48210",
-				"172.30.0.1:48210"
-			],
-			"Hostinfo": {
-				"Hostname":    "fearow",
-				"RoutableIPs": ["10.55.0.0/16"],
-				"RequestTags": ["tag:fearow"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:10:54.809749328Z",
-			"Tags":              ["tag:fearow"],
-			"PrimaryRoutes":     ["10.55.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "fearow",
-			"ComputedNameWithHost": "fearow"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:ae65fa0cbc483038e5b31f1aa96ee6f9de15ce74a70fd63782c01efc14b7ed2a",
-		"MachineKey":        "mkey:627d45ac3bc7cb556e179a75a00279e5c2c42190d49f940005ed9446c6e0d400",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"2962818332067504": {
-			"ID":          2962818332067504,
-			"LoginName":   "fearow.tail78f774.ts.net",
-			"DisplayName": "fearow"
-		}}
-	}}, "ivysaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2348533302157090,
-			"StableID":   "n5nkjGzeLK11CNTRL",
-			"Name":       "ivysaur.tail78f774.ts.net.",
-			"User":       4538565228176803,
-			"Key":        "nodekey:4fdef654e4461936edc780b227c460829b3f690acdf333c856b5bbcb03346862",
-			"KeyExpiry":  "2026-11-14T09:10:57Z",
-			"DiscoKey":   "discokey:9790b60c664988dd878024181e01253bbaf80ca667a48f7d2227e3a3933f7e24",
-			"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"Endpoints": [
-				"77.164.248.136:54379",
-				"10.65.0.27:54379",
-				"172.17.0.1:54379",
-				"172.18.0.1:54379",
-				"172.19.0.1:54379",
-				"172.20.0.1:54379",
-				"172.21.0.1:54379",
-				"172.22.0.1:54379",
-				"172.23.0.1:54379",
-				"172.24.0.1:54379",
-				"172.25.0.1:54379",
-				"172.27.0.1:54379",
-				"172.28.0.1:54379",
-				"172.29.0.1:54379",
-				"172.30.0.1:54379"
-			],
-			"Hostinfo": {"Hostname": "ivysaur", "Services": [
-				{"Proto": "peerapi4", "Port": 62496},
-				{"Proto": "peerapi6", "Port": 62496},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:10:57.484455263Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "ivysaur",
-			"ComputedNameWithHost": "ivysaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:4fdef654e4461936edc780b227c460829b3f690acdf333c856b5bbcb03346862",
-		"MachineKey":        "mkey:bbf6b2f42e88d79b842a31699f972aaddd3822f7b782c3c5a5cb30303f42cb6c",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4538565228176803": {
-			"ID":          4538565228176803,
-			"LoginName":   "thor@example.org",
-			"DisplayName": "thor"
-		}}
-	}}, "kakuna": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8316404855452220,
-			"StableID":   "nBpNtVrWw721CNTRL",
-			"Name":       "kakuna.tail78f774.ts.net.",
-			"User":       8316404855452220,
-			"Key":        "nodekey:fc6c4f97df6155da8f12135b8e5b107fb3c11447a0c78aed4f97019a76355a09",
-			"DiscoKey":   "discokey:7c5b44e12f1c86dd4320eec977184995f03f1f70bcd01add7270be947871fd11",
-			"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"Endpoints": [
-				"77.164.248.136:52381",
-				"10.65.0.27:52381",
-				"172.17.0.1:52381",
-				"172.18.0.1:52381",
-				"172.19.0.1:52381",
-				"172.20.0.1:52381",
-				"172.21.0.1:52381",
-				"172.22.0.1:52381",
-				"172.23.0.1:52381",
-				"172.24.0.1:52381",
-				"172.25.0.1:52381",
-				"172.27.0.1:52381",
-				"172.28.0.1:52381",
-				"172.29.0.1:52381",
-				"172.30.0.1:52381"
-			],
-			"Hostinfo": {"Hostname": "kakuna", "RequestTags": ["tag:prod"], "Services": [
-				{"Proto": "peerapi4", "Port": 51523},
-				{"Proto": "peerapi6", "Port": 51523},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:10:56.419139003Z",
-			"Tags":              ["tag:prod"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "kakuna",
-			"ComputedNameWithHost": "kakuna"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:fc6c4f97df6155da8f12135b8e5b107fb3c11447a0c78aed4f97019a76355a09",
-		"MachineKey":        "mkey:1f10dce91e6f48aa397e1f55ec84d7bbf700b6eae603a5cb6773d60786f6de62",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"8316404855452220": {
-			"ID":          8316404855452220,
-			"LoginName":   "kakuna.tail78f774.ts.net",
-			"DisplayName": "kakuna"
-		}}
-	}}, "pidgeotto": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         781141996409684,
-			"StableID":   "nP81LzGn6711CNTRL",
-			"Name":       "pidgeotto.tail78f774.ts.net.",
-			"User":       781141996409684,
-			"Key":        "nodekey:8454a17c478cbd84c2bbbe569015aca27171259ecc0fec3c261715289f9bdf78",
-			"DiscoKey":   "discokey:bd3827365b07af564765413e8aa789775efb48d5ea4bc8407a8ae32babc4a455",
-			"Addresses":  ["100.64.0.3/32", "fd7a:115c:a1e0::3/128"],
-			"AllowedIPs": ["100.64.0.3/32", "fd7a:115c:a1e0::3/128"],
-			"Endpoints": [
-				"77.164.248.136:39405",
-				"10.65.0.27:39405",
-				"172.17.0.1:39405",
-				"172.18.0.1:39405",
-				"172.19.0.1:39405",
-				"172.20.0.1:39405",
-				"172.21.0.1:39405",
-				"172.22.0.1:39405",
-				"172.23.0.1:39405",
-				"172.24.0.1:39405",
-				"172.25.0.1:39405",
-				"172.27.0.1:39405",
-				"172.28.0.1:39405",
-				"172.29.0.1:39405",
-				"172.30.0.1:39405"
-			],
-			"Hostinfo": {
-				"Hostname":    "pidgeotto",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:pidgeotto"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 34152},
-					{"Proto": "peerapi6", "Port": 34152},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:10:51.639009594Z",
-			"Tags":              ["tag:pidgeotto"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "pidgeotto",
-			"ComputedNameWithHost": "pidgeotto"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:8454a17c478cbd84c2bbbe569015aca27171259ecc0fec3c261715289f9bdf78",
-		"MachineKey":        "mkey:e33eca0d1703f9f889f42c5eb3b55295e214f0d43849ee08a2062989966fdd7a",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"781141996409684": {
-			"ID":          781141996409684,
-			"LoginName":   "pidgeotto.tail78f774.ts.net",
-			"DisplayName": "pidgeotto"
-		}}
-	}}, "pidgey": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         7957670396407127,
-			"StableID":   "nNamASW39521CNTRL",
-			"Name":       "pidgey.tail78f774.ts.net.",
-			"User":       7957670396407127,
-			"Key":        "nodekey:0fdeaf58178609371f1a726273f49154455ce398311e26fc294e975bedccba05",
-			"DiscoKey":   "discokey:bc4adfb590e9db28fcb7b36af00db93ce2472d66b94893c7656591521feb395d",
-			"Addresses":  ["100.64.0.2/32", "fd7a:115c:a1e0::2/128"],
-			"AllowedIPs": ["100.64.0.2/32", "fd7a:115c:a1e0::2/128"],
-			"Endpoints": [
-				"77.164.248.136:41325",
-				"10.65.0.27:41325",
-				"172.17.0.1:41325",
-				"172.18.0.1:41325",
-				"172.19.0.1:41325",
-				"172.20.0.1:41325",
-				"172.21.0.1:41325",
-				"172.22.0.1:41325",
-				"172.23.0.1:41325",
-				"172.24.0.1:41325",
-				"172.25.0.1:41325",
-				"172.27.0.1:41325",
-				"172.28.0.1:41325",
-				"172.29.0.1:41325",
-				"172.30.0.1:41325"
-			],
-			"Hostinfo": {
-				"Hostname":    "pidgey",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:pidgey"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 46590},
-					{"Proto": "peerapi6", "Port": 46590},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:10:51.102683657Z",
-			"Tags":              ["tag:pidgey"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "pidgey",
-			"ComputedNameWithHost": "pidgey"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:0fdeaf58178609371f1a726273f49154455ce398311e26fc294e975bedccba05",
-		"MachineKey":        "mkey:2c3d102d9cc29041131813cadb074cf83965fd8b052a09e1d2ff9c7886c18505",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"7957670396407127": {
-			"ID":          7957670396407127,
-			"LoginName":   "pidgey.tail78f774.ts.net",
-			"DisplayName": "pidgey"
-		}}
-	}}, "raticate": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         8774142286825719,
-			"StableID":   "ncXPFhqpWB21CNTRL",
-			"Name":       "raticate.tail78f774.ts.net.",
-			"User":       8774142286825719,
-			"Key":        "nodekey:4b5b22a10939393effca670f78d3c2ce7694db849fc0315b5b14155d5b4da051",
-			"DiscoKey":   "discokey:c4b76557ff2311f5b95d2357d140b771ca79f18c8f522270e3203e7204f5fd4a",
-			"Addresses":  ["100.64.0.6/32", "fd7a:115c:a1e0::6/128"],
-			"AllowedIPs": ["100.64.0.6/32", "fd7a:115c:a1e0::6/128"],
-			"Endpoints": [
-				"77.164.248.136:39952",
-				"10.65.0.27:39952",
-				"172.17.0.1:39952",
-				"172.18.0.1:39952",
-				"172.19.0.1:39952",
-				"172.20.0.1:39952",
-				"172.21.0.1:39952",
-				"172.22.0.1:39952",
-				"172.23.0.1:39952",
-				"172.24.0.1:39952",
-				"172.25.0.1:39952",
-				"172.27.0.1:39952",
-				"172.28.0.1:39952",
-				"172.29.0.1:39952",
-				"172.30.0.1:39952"
-			],
-			"Hostinfo": {"Hostname": "raticate", "RequestTags": ["tag:group-b"], "Services": [
-				{"Proto": "peerapi4", "Port": 61927},
-				{"Proto": "peerapi6", "Port": 61927},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:10:53.21995137Z",
-			"Tags":              ["tag:group-b"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "raticate",
-			"ComputedNameWithHost": "raticate"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:4b5b22a10939393effca670f78d3c2ce7694db849fc0315b5b14155d5b4da051",
-		"MachineKey":        "mkey:dd498639926b5c582d320e8b36c1b76add012d763e00a74d441ceabc06d1b72c",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"8774142286825719": {
-			"ID":          8774142286825719,
-			"LoginName":   "raticate.tail78f774.ts.net",
-			"DisplayName": "raticate"
-		}}
-	}}, "rattata": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         5603212911954104,
-			"StableID":   "nVdEjJuhkk11CNTRL",
-			"Name":       "rattata.tail78f774.ts.net.",
-			"User":       5603212911954104,
-			"Key":        "nodekey:308c261c7eb0104abf3e66f1646be742cdcf06036d059f919e76dfe88a2b6572",
-			"DiscoKey":   "discokey:2cc68f99012b0d824d6fd24ace704e106e80712e77fcfba34054014f7a730e69",
-			"Addresses":  ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"AllowedIPs": ["100.64.0.5/32", "fd7a:115c:a1e0::5/128"],
-			"Endpoints": [
-				"77.164.248.136:33694",
-				"10.65.0.27:33694",
-				"172.17.0.1:33694",
-				"172.18.0.1:33694",
-				"172.19.0.1:33694",
-				"172.20.0.1:33694",
-				"172.21.0.1:33694",
-				"172.22.0.1:33694",
-				"172.23.0.1:33694",
-				"172.24.0.1:33694",
-				"172.25.0.1:33694",
-				"172.27.0.1:33694",
-				"172.28.0.1:33694",
-				"172.29.0.1:33694",
-				"172.30.0.1:33694"
-			],
-			"Hostinfo": {"Hostname": "rattata", "RequestTags": ["tag:group-a"], "Services": [
-				{"Proto": "peerapi4", "Port": 41053},
-				{"Proto": "peerapi6", "Port": 41053},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:10:52.700936185Z",
-			"Tags":              ["tag:group-a"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "rattata",
-			"ComputedNameWithHost": "rattata"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:308c261c7eb0104abf3e66f1646be742cdcf06036d059f919e76dfe88a2b6572",
-		"MachineKey":        "mkey:5f5f1ff0ccb1742d1d8cb0316a09af2fdd3fe95c92fb9fe3226ce6321ee14371",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"5603212911954104": {
-			"ID":          5603212911954104,
-			"LoginName":   "rattata.tail78f774.ts.net",
-			"DisplayName": "rattata"
-		}}
-	}}, "spearow": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         4263580853033713,
-			"StableID":   "npe53H3zHa11CNTRL",
-			"Name":       "spearow.tail78f774.ts.net.",
-			"User":       4263580853033713,
-			"Key":        "nodekey:ac5983ee49695f3ddbafe48311a097ecb9cb0e4806907c06323b6ac58c9af64f",
-			"DiscoKey":   "discokey:29fa1a3518796d0f50fc5b5c0b36f41eb6ac3b92a6a3e0d959fc5d8df0082a2e",
-			"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128", "10.44.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:55465",
-				"10.65.0.27:55465",
-				"172.17.0.1:55465",
-				"172.18.0.1:55465",
-				"172.19.0.1:55465",
-				"172.20.0.1:55465",
-				"172.21.0.1:55465",
-				"172.22.0.1:55465",
-				"172.23.0.1:55465",
-				"172.24.0.1:55465",
-				"172.25.0.1:55465",
-				"172.27.0.1:55465",
-				"172.28.0.1:55465",
-				"172.29.0.1:55465",
-				"172.30.0.1:55465"
-			],
-			"Hostinfo": {
-				"Hostname":    "spearow",
-				"RoutableIPs": ["10.44.0.0/16"],
-				"RequestTags": ["tag:spearow"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:10:54.283207375Z",
-			"Tags":              ["tag:spearow"],
-			"PrimaryRoutes":     ["10.44.0.0/16"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "spearow",
-			"ComputedNameWithHost": "spearow"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:ac5983ee49695f3ddbafe48311a097ecb9cb0e4806907c06323b6ac58c9af64f",
-		"MachineKey":        "mkey:0ad13c072d304401be41eb0d7000eaf9adfc111ec3ce62bf4e6ab9f7b36f7745",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4263580853033713": {
-			"ID":          4263580853033713,
-			"LoginName":   "spearow.tail78f774.ts.net",
-			"DisplayName": "spearow"
-		}}
-	}}, "squirtle": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2715924301317889,
-			"StableID":   "nz5BG7j3DN11CNTRL",
-			"Name":       "squirtle.tail78f774.ts.net.",
-			"User":       2715924301317889,
-			"Key":        "nodekey:0ce04552f96890506449aad321dc9453835716697eb0d0bdcc0782613036994c",
-			"DiscoKey":   "discokey:812ba325824c522e05582e005744f3f710b87d77710505678c210dc610b90e4e",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-			"Endpoints": [
-				"77.164.248.136:49272",
-				"10.65.0.27:49272",
-				"172.17.0.1:49272",
-				"172.18.0.1:49272",
-				"172.19.0.1:49272",
-				"172.20.0.1:49272",
-				"172.21.0.1:49272",
-				"172.22.0.1:49272",
-				"172.23.0.1:49272",
-				"172.24.0.1:49272",
-				"172.25.0.1:49272",
-				"172.27.0.1:49272",
-				"172.28.0.1:49272",
-				"172.29.0.1:49272",
-				"172.30.0.1:49272"
-			],
-			"Hostinfo": {
-				"Hostname":    "squirtle",
-				"RoutableIPs": ["10.33.0.0/16"],
-				"RequestTags": ["tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:10:55.348461932Z",
-			"Tags":              ["tag:router"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "squirtle",
-			"ComputedNameWithHost": "squirtle"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:0ce04552f96890506449aad321dc9453835716697eb0d0bdcc0782613036994c",
-		"MachineKey":        "mkey:7746b6bcfc673aedac1e7d4cdbec81cf08347bcecdb45258daac5d32109ac037",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"2715924301317889": {
-			"ID":          2715924301317889,
-			"LoginName":   "squirtle.tail78f774.ts.net",
-			"DisplayName": "squirtle"
-		}}
-	}}, "venusaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         7292111442929489,
-			"StableID":   "nGQrYLQcwy11CNTRL",
-			"Name":       "venusaur.tail78f774.ts.net.",
-			"User":       3982058329734709,
-			"Key":        "nodekey:d2a96f1163c963756c7fa4b41a4269ec0abe4e61cb3971e0a4845af4f360b141",
-			"KeyExpiry":  "2026-11-14T09:10:58Z",
-			"DiscoKey":   "discokey:57f04a4cd9d35bc8c9131a544af90524da77c3a07573ac011e70856704bad928",
-			"Addresses":  ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
-			"AllowedIPs": ["100.64.0.18/32", "fd7a:115c:a1e0::12/128"],
-			"Endpoints": [
-				"77.164.248.136:48636",
-				"10.65.0.27:48636",
-				"172.17.0.1:48636",
-				"172.18.0.1:48636",
-				"172.19.0.1:48636",
-				"172.20.0.1:48636",
-				"172.21.0.1:48636",
-				"172.22.0.1:48636",
-				"172.23.0.1:48636",
-				"172.24.0.1:48636",
-				"172.25.0.1:48636",
-				"172.27.0.1:48636",
-				"172.28.0.1:48636",
-				"172.29.0.1:48636",
-				"172.30.0.1:48636"
-			],
-			"Hostinfo": {"Hostname": "venusaur", "Services": [
-				{"Proto": "peerapi4", "Port": 42394},
-				{"Proto": "peerapi6", "Port": 42394},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:10:58.013696855Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "venusaur",
-			"ComputedNameWithHost": "venusaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:d2a96f1163c963756c7fa4b41a4269ec0abe4e61cb3971e0a4845af4f360b141",
-		"MachineKey":        "mkey:00ab69d50c24300b46e0936b08cd28504b8ee7060f042fb4753e24bd0cb00b65",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"3982058329734709": {
-			"ID":          3982058329734709,
-			"LoginName":   "freya@example.com",
-			"DisplayName": "freya"
-		}}
-	}}, "weedle": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         7716405826229389,
-			"StableID":   "ng8sGztmF321CNTRL",
-			"Name":       "weedle.tail78f774.ts.net.",
-			"User":       7716405826229389,
-			"Key":        "nodekey:d8b35c1dface4d18b9fafa93c6b303f4b773febf51f4c234c862f18a5de8250b",
-			"DiscoKey":   "discokey:4bba182fd9a1812cf3bfef9edfdd7933bbdafb956a2b1863555b289f1d2e6977",
-			"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"Endpoints": [
-				"77.164.248.136:54114",
-				"10.65.0.27:54114",
-				"172.17.0.1:54114",
-				"172.18.0.1:54114",
-				"172.19.0.1:54114",
-				"172.20.0.1:54114",
-				"172.21.0.1:54114",
-				"172.22.0.1:54114",
-				"172.23.0.1:54114",
-				"172.24.0.1:54114",
-				"172.25.0.1:54114",
-				"172.27.0.1:54114",
-				"172.28.0.1:54114",
-				"172.29.0.1:54114",
-				"172.30.0.1:54114"
-			],
-			"Hostinfo": {"Hostname": "weedle", "RequestTags": ["tag:client"], "Services": [
-				{"Proto": "peerapi4", "Port": 63957},
-				{"Proto": "peerapi6", "Port": 63957},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:10:55.882122812Z",
-			"Tags":              ["tag:client"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "weedle",
-			"ComputedNameWithHost": "weedle"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:d8b35c1dface4d18b9fafa93c6b303f4b773febf51f4c234c862f18a5de8250b",
-		"MachineKey":        "mkey:62d8c49eed6420a2f1ae67fe4886e9b678974846b37d689d07fce88e42563848",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"7716405826229389": {
-			"ID":          7716405826229389,
-			"LoginName":   "weedle.tail78f774.ts.net",
-			"DisplayName": "weedle"
-		}}
-	}}}
-}
diff --git a/hscontrol/policy/v2/testdata/grant_results/via-grant-v51.hujson b/hscontrol/policy/v2/testdata/grant_results/via-grant-v51.hujson
deleted file mode 100644
index d5105e8e7..000000000
--- a/hscontrol/policy/v2/testdata/grant_results/via-grant-v51.hujson
+++ /dev/null
@@ -1,2157 +0,0 @@
-// via-grant-v51
-//
-// via grant v51 ipv6 4via6 dst host alias /64 broader than advertised /120
-//
-// Nodes with filter rules: 1 of 2
-// Captured at:    2026-05-18T09:11:44Z
-// tool version:   tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "via-grant-v51",
-	"description":    "via grant v51 ipv6 4via6 dst host alias /64 broader than advertised /120",
-	"category":       "grant",
-	"captured_at":    "2026-05-18T09:11:44.189311885Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                                                                       \n  \n                                                                       \n                                                  \n                                                                     \n                                                                     \n                                           \n  \n                                                                   \n                                                                          \n                                                                 \n                   \n{\n\t\"category\":    \"grant\",\n\t\"description\": \"via grant v51 ipv6 4via6 dst host alias /64 broader than advertised /120\",\n\t\"id\":          \"via-grant-v51\",\n\t\"options\":     {\"capture_whois\": true},\n\t\"policy\": {\"autoApprovers\": {\"routes\": {\n\t\t\"fd7a:115c:a1e0:b1a:0:13:ad2:7300/120\": [\"tag:router\"]\n\t}}, \"grants\": [{\n\t\t\"dst\": [\"example-4via6\"],\n\t\t\"ip\":  [\"icmp:*\", \"tcp:3389\"],\n\t\t\"src\": [\"tag:group-a\"],\n\t\t\"via\": [\"tag:router\"]\n\t}], \"hosts\": {\n\t\t\"example-4via6\": \"fd7a:115c:a1e0:b1a::/64\"\n\t}, \"tagOwners\": {\n\t\t\"tag:group-a\": [\"odin@example.com\"],\n\t\t\"tag:router\":  [\"odin@example.com\"]\n\t}},\n\t\"tailnet\": {\n\t\t\"dns\":      {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n\t\t\"settings\": {}\n\t},\n\t\"topology\": {\n\t\t\"users\": [{\"id\": 1, \"name\": \"odin\", \"email\": \"odin@example.com\"}],\n\t\t\"nodes\": {\n\t\t\t\"client-a\": {\n\t\t\t\t\"hostname\":        \"client-a\",\n\t\t\t\t\"tags\":            [\"tag:group-a\"],\n\t\t\t\t\"routable_ips\":    [],\n\t\t\t\t\"approved_routes\": []\n\t\t\t},\n\t\t\t\"router-6via\": {\n\t\t\t\t\"hostname\":        \"router-6via\",\n\t\t\t\t\"tags\":            [\"tag:router\"],\n\t\t\t\t\"routable_ips\":    [\"fd7a:115c:a1e0:b1a:0:13:ad2:7300/120\"],\n\t\t\t\t\"approved_routes\": []\n\t\t\t}\n\t\t}\n\t}\n}\n",
-		"scenario_path":   "scenarios/grant/via-grant-v51.hujson",
-		"full_policy": {
-			"autoApprovers": {"routes": {"fd7a:115c:a1e0:b1a:0:13:ad2:7300/120": ["tag:router"]}},
-			"grants": [{
-				"dst": ["example-4via6"],
-				"ip":  ["icmp:*", "tcp:3389"],
-				"src": ["tag:group-a"],
-				"via": ["tag:router"]
-			}],
-			"hosts":     {"example-4via6": "fd7a:115c:a1e0:b1a::/64"},
-			"tagOwners": {"tag:group-a": ["odin@example.com"], "tag:router": ["odin@example.com"]}
-		}
-	},
-	"topology": {
-		"users": [{"id": 1, "name": "odin", "email": "odin@example.com"}],
-		"nodes": {"client-a": {
-			"hostname":        "client-a",
-			"tags":            ["tag:group-a"],
-			"ipv4":            "100.95.136.121",
-			"ipv6":            "fd7a:115c:a1e0::bd37:8879",
-			"routable_ips":    [],
-			"approved_routes": []
-		}, "router-6via": {
-			"hostname":        "router-6via",
-			"tags":            ["tag:router"],
-			"ipv4":            "100.120.10.2",
-			"ipv6":            "fd7a:115c:a1e0::7537:a02",
-			"routable_ips":    ["fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"],
-			"approved_routes": ["fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"]
-		}}
-	},
-	"captures": {"client-a": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1523520198144354,
-			"StableID":   "nXhtrwH1uC11CNTRL",
-			"Name":       "client-a.tail78f774.ts.net.",
-			"User":       1523520198144354,
-			"Key":        "nodekey:e7e273fc7d70ffb8cef6797a3e1725f5d1f25c64a2ca47be203862f1bd5f8878",
-			"DiscoKey":   "discokey:42f94cc27341c00d3e3e056d1840f1db99a5fc47d5b2728e8739a8d6c6970365",
-			"Addresses":  ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-			"AllowedIPs": ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-			"Endpoints": [
-				"77.164.248.136:44313",
-				"10.65.0.27:44313",
-				"172.17.0.1:44313",
-				"172.18.0.1:44313",
-				"172.19.0.1:44313",
-				"172.20.0.1:44313",
-				"172.21.0.1:44313",
-				"172.22.0.1:44313",
-				"172.23.0.1:44313",
-				"172.24.0.1:44313",
-				"172.25.0.1:44313",
-				"172.27.0.1:44313",
-				"172.28.0.1:44313",
-				"172.29.0.1:44313",
-				"172.30.0.1:44313"
-			],
-			"Hostinfo": {"Hostname": "client-a", "RequestTags": ["tag:group-a"], "Services": [
-				{"Proto": "peerapi4", "Port": 60228},
-				{"Proto": "peerapi6", "Port": 60228},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-18T09:11:46.4498255Z",
-			"Tags":              ["tag:group-a"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "client-a",
-			"ComputedNameWithHost": "client-a"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:e7e273fc7d70ffb8cef6797a3e1725f5d1f25c64a2ca47be203862f1bd5f8878",
-		"MachineKey": "mkey:a9045bad4803f49067aec4ecf0156cb2f030a26466c9dd03b6a9da3b003e7648",
-		"Peers": [{
-			"ID":        3557161560388091,
-			"StableID":  "nAgWAwb3nU11CNTRL",
-			"Name":      "router-6via.tail78f774.ts.net.",
-			"User":      1260082990019555,
-			"Key":       "nodekey:acaabecf14a43b9a74d89c9fe3f9e6ba3421de3c28570d015dc1a11e75b80a01",
-			"DiscoKey":  "discokey:ab37a1bb878d7322f28d8ac80759bc4347819f45d58279515a04fec9fe581672",
-			"Addresses": ["100.120.10.2/32", "fd7a:115c:a1e0::7537:a02/128"],
-			"AllowedIPs": [
-				"100.120.10.2/32",
-				"fd7a:115c:a1e0::7537:a02/128",
-				"fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"
-			],
-			"Endpoints": [
-				"77.164.248.136:41317",
-				"10.65.0.27:41317",
-				"172.17.0.1:41317",
-				"172.18.0.1:41317",
-				"172.19.0.1:41317",
-				"172.20.0.1:41317",
-				"172.21.0.1:41317",
-				"172.22.0.1:41317",
-				"172.23.0.1:41317",
-				"172.24.0.1:41317",
-				"172.25.0.1:41317",
-				"172.27.0.1:41317",
-				"172.28.0.1:41317",
-				"172.29.0.1:41317",
-				"172.30.0.1:41317"
-			],
-			"HomeDERP": 14,
-			"Hostinfo": {"OS": "linux", "Hostname": "router-6via", "Services": [
-				{"Proto": "peerapi4", "Port": 59740},
-				{"Proto": "peerapi6", "Port": 59740}
-			]},
-			"Created":              "2026-05-18T09:11:46.979865427Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:router"],
-			"PrimaryRoutes":        ["fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"],
-			"Online":               true,
-			"ComputedName":         "router-6via",
-			"ComputedNameWithHost": "router-6via"
-		}],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "1523520198144354": {
-			"ID":          1523520198144354,
-			"LoginName":   "client-a.tail78f774.ts.net",
-			"DisplayName": "client-a"
-		}}
-	}, "whois": {"100.120.10.2": {"Node": {
-		"ID":        3557161560388091,
-		"StableID":  "nAgWAwb3nU11CNTRL",
-		"Name":      "router-6via.tail78f774.ts.net.",
-		"User":      1260082990019555,
-		"Key":       "nodekey:acaabecf14a43b9a74d89c9fe3f9e6ba3421de3c28570d015dc1a11e75b80a01",
-		"DiscoKey":  "discokey:ab37a1bb878d7322f28d8ac80759bc4347819f45d58279515a04fec9fe581672",
-		"Addresses": ["100.120.10.2/32", "fd7a:115c:a1e0::7537:a02/128"],
-		"AllowedIPs": [
-			"100.120.10.2/32",
-			"fd7a:115c:a1e0::7537:a02/128",
-			"fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"
-		],
-		"Endpoints": [
-			"77.164.248.136:41317",
-			"10.65.0.27:41317",
-			"172.17.0.1:41317",
-			"172.18.0.1:41317",
-			"172.19.0.1:41317",
-			"172.20.0.1:41317",
-			"172.21.0.1:41317",
-			"172.22.0.1:41317",
-			"172.23.0.1:41317",
-			"172.24.0.1:41317",
-			"172.25.0.1:41317",
-			"172.27.0.1:41317",
-			"172.28.0.1:41317",
-			"172.29.0.1:41317",
-			"172.30.0.1:41317"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "router-6via", "Services": [
-			{"Proto": "peerapi4", "Port": 59740},
-			{"Proto": "peerapi6", "Port": 59740}
-		]},
-		"Created":              "2026-05-18T09:11:46.979865427Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:router"],
-		"PrimaryRoutes":        ["fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"],
-		"Online":               true,
-		"ComputedName":         "router-6via",
-		"ComputedNameWithHost": "router-6via"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::7537:a02": {"Node": {
-		"ID":        3557161560388091,
-		"StableID":  "nAgWAwb3nU11CNTRL",
-		"Name":      "router-6via.tail78f774.ts.net.",
-		"User":      1260082990019555,
-		"Key":       "nodekey:acaabecf14a43b9a74d89c9fe3f9e6ba3421de3c28570d015dc1a11e75b80a01",
-		"DiscoKey":  "discokey:ab37a1bb878d7322f28d8ac80759bc4347819f45d58279515a04fec9fe581672",
-		"Addresses": ["100.120.10.2/32", "fd7a:115c:a1e0::7537:a02/128"],
-		"AllowedIPs": [
-			"100.120.10.2/32",
-			"fd7a:115c:a1e0::7537:a02/128",
-			"fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"
-		],
-		"Endpoints": [
-			"77.164.248.136:41317",
-			"10.65.0.27:41317",
-			"172.17.0.1:41317",
-			"172.18.0.1:41317",
-			"172.19.0.1:41317",
-			"172.20.0.1:41317",
-			"172.21.0.1:41317",
-			"172.22.0.1:41317",
-			"172.23.0.1:41317",
-			"172.24.0.1:41317",
-			"172.25.0.1:41317",
-			"172.27.0.1:41317",
-			"172.28.0.1:41317",
-			"172.29.0.1:41317",
-			"172.30.0.1:41317"
-		],
-		"HomeDERP": 14,
-		"Hostinfo": {"OS": "linux", "Hostname": "router-6via", "Services": [
-			{"Proto": "peerapi4", "Port": 59740},
-			{"Proto": "peerapi6", "Port": 59740}
-		]},
-		"Created":              "2026-05-18T09:11:46.979865427Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:router"],
-		"PrimaryRoutes":        ["fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"],
-		"Online":               true,
-		"ComputedName":         "router-6via",
-		"ComputedNameWithHost": "router-6via"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}, "router-6via": {"packet_filter_rules": [{
-		"SrcIPs":   ["100.95.136.121", "fd7a:115c:a1e0::bd37:8879"],
-		"DstPorts": [{"IP": "fd7a:115c:a1e0:b1a::/64", "Ports": {"First": 0, "Last": 65535}}],
-		"IPProto":  [1]
-	}, {"SrcIPs": ["100.95.136.121", "fd7a:115c:a1e0::bd37:8879"], "DstPorts": [
-		{"IP": "fd7a:115c:a1e0:b1a::/64", "Ports": {"First": 3389, "Last": 3389}}
-	], "IPProto": [6]}], "packet_filter_matches": [{
-		"IPProto": [1],
-		"Srcs":    ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-		"SrcCaps": null,
-		"Dsts":    [{"Net": "fd7a:115c:a1e0:b1a::/64", "Ports": {"First": 0, "Last": 65535}}],
-		"Caps":    []
-	}, {
-		"IPProto": [6],
-		"Srcs":    ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-		"SrcCaps": null,
-		"Dsts": [
-			{"Net": "fd7a:115c:a1e0:b1a::/64", "Ports": {"First": 3389, "Last": 3389}}
-		],
-		"Caps": []
-	}], "netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":        3557161560388091,
-			"StableID":  "nAgWAwb3nU11CNTRL",
-			"Name":      "router-6via.tail78f774.ts.net.",
-			"User":      3557161560388091,
-			"Key":       "nodekey:acaabecf14a43b9a74d89c9fe3f9e6ba3421de3c28570d015dc1a11e75b80a01",
-			"DiscoKey":  "discokey:ab37a1bb878d7322f28d8ac80759bc4347819f45d58279515a04fec9fe581672",
-			"Addresses": ["100.120.10.2/32", "fd7a:115c:a1e0::7537:a02/128"],
-			"AllowedIPs": [
-				"100.120.10.2/32",
-				"fd7a:115c:a1e0::7537:a02/128",
-				"fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"
-			],
-			"Endpoints": [
-				"77.164.248.136:41317",
-				"10.65.0.27:41317",
-				"172.17.0.1:41317",
-				"172.18.0.1:41317",
-				"172.19.0.1:41317",
-				"172.20.0.1:41317",
-				"172.21.0.1:41317",
-				"172.22.0.1:41317",
-				"172.23.0.1:41317",
-				"172.24.0.1:41317",
-				"172.25.0.1:41317",
-				"172.27.0.1:41317",
-				"172.28.0.1:41317",
-				"172.29.0.1:41317",
-				"172.30.0.1:41317"
-			],
-			"Hostinfo": {
-				"Hostname":    "router-6via",
-				"RoutableIPs": ["fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"],
-				"RequestTags": ["tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 59740},
-					{"Proto": "peerapi6", "Port": 59740},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-18T09:11:46.979865427Z",
-			"Tags":              ["tag:router"],
-			"PrimaryRoutes":     ["fd7a:115c:a1e0:b1a:0:13:ad2:7300/120"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "router-6via",
-			"ComputedNameWithHost": "router-6via"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:acaabecf14a43b9a74d89c9fe3f9e6ba3421de3c28570d015dc1a11e75b80a01",
-		"MachineKey": "mkey:504ebafa5399ca52470362f74b2b24da583b53bf1e20e5cdf0bc3bf0f9c84c6a",
-		"Peers": [{
-			"ID":         1523520198144354,
-			"StableID":   "nXhtrwH1uC11CNTRL",
-			"Name":       "client-a.tail78f774.ts.net.",
-			"User":       1260082990019555,
-			"Key":        "nodekey:e7e273fc7d70ffb8cef6797a3e1725f5d1f25c64a2ca47be203862f1bd5f8878",
-			"DiscoKey":   "discokey:42f94cc27341c00d3e3e056d1840f1db99a5fc47d5b2728e8739a8d6c6970365",
-			"Addresses":  ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-			"AllowedIPs": ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-			"Endpoints": [
-				"77.164.248.136:44313",
-				"10.65.0.27:44313",
-				"172.17.0.1:44313",
-				"172.18.0.1:44313",
-				"172.19.0.1:44313",
-				"172.20.0.1:44313",
-				"172.21.0.1:44313",
-				"172.22.0.1:44313",
-				"172.23.0.1:44313",
-				"172.24.0.1:44313",
-				"172.25.0.1:44313",
-				"172.27.0.1:44313",
-				"172.28.0.1:44313",
-				"172.29.0.1:44313",
-				"172.30.0.1:44313"
-			],
-			"HomeDERP": 8,
-			"Hostinfo": {"OS": "linux", "Hostname": "client-a", "Services": [
-				{"Proto": "peerapi4", "Port": 60228},
-				{"Proto": "peerapi6", "Port": 60228}
-			]},
-			"Created":              "2026-05-18T09:11:46.4498255Z",
-			"Cap":                  131,
-			"Tags":                 ["tag:group-a"],
-			"Online":               true,
-			"ComputedName":         "client-a",
-			"ComputedNameWithHost": "client-a"
-		}],
-		"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter": [{
-			"IPProto": [1],
-			"Srcs":    ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-			"SrcCaps": null,
-			"Dsts":    [{"Net": "fd7a:115c:a1e0:b1a::/64", "Ports": {"First": 0, "Last": 65535}}],
-			"Caps":    []
-		}, {
-			"IPProto": [6],
-			"Srcs":    ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-			"SrcCaps": null,
-			"Dsts": [
-				{"Net": "fd7a:115c:a1e0:b1a::/64", "Ports": {"First": 3389, "Last": 3389}}
-			],
-			"Caps": []
-		}],
-		"PacketFilterRules": [{
-			"SrcIPs":   ["100.95.136.121", "fd7a:115c:a1e0::bd37:8879"],
-			"DstPorts": [{"IP": "fd7a:115c:a1e0:b1a::/64", "Ports": {"First": 0, "Last": 65535}}],
-			"IPProto":  [1]
-		}, {"SrcIPs": ["100.95.136.121", "fd7a:115c:a1e0::bd37:8879"], "DstPorts": [
-			{"IP": "fd7a:115c:a1e0:b1a::/64", "Ports": {"First": 3389, "Last": 3389}}
-		], "IPProto": [6]}],
-		"SSHPolicy":       {"rules": []},
-		"CollectServices": false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1260082990019555": {
-			"ID":          1260082990019555,
-			"LoginName":   "tagged-devices",
-			"DisplayName": "Tagged Devices"
-		}, "3557161560388091": {
-			"ID":          3557161560388091,
-			"LoginName":   "router-6via.tail78f774.ts.net",
-			"DisplayName": "router-6via"
-		}}
-	}, "whois": {"100.95.136.121": {"Node": {
-		"ID":         1523520198144354,
-		"StableID":   "nXhtrwH1uC11CNTRL",
-		"Name":       "client-a.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:e7e273fc7d70ffb8cef6797a3e1725f5d1f25c64a2ca47be203862f1bd5f8878",
-		"DiscoKey":   "discokey:42f94cc27341c00d3e3e056d1840f1db99a5fc47d5b2728e8739a8d6c6970365",
-		"Addresses":  ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-		"AllowedIPs": ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-		"Endpoints": [
-			"77.164.248.136:44313",
-			"10.65.0.27:44313",
-			"172.17.0.1:44313",
-			"172.18.0.1:44313",
-			"172.19.0.1:44313",
-			"172.20.0.1:44313",
-			"172.21.0.1:44313",
-			"172.22.0.1:44313",
-			"172.23.0.1:44313",
-			"172.24.0.1:44313",
-			"172.25.0.1:44313",
-			"172.27.0.1:44313",
-			"172.28.0.1:44313",
-			"172.29.0.1:44313",
-			"172.30.0.1:44313"
-		],
-		"HomeDERP": 8,
-		"Hostinfo": {"OS": "linux", "Hostname": "client-a", "Services": [
-			{"Proto": "peerapi4", "Port": 60228},
-			{"Proto": "peerapi6", "Port": 60228}
-		]},
-		"Created":              "2026-05-18T09:11:46.4498255Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "client-a",
-		"ComputedNameWithHost": "client-a"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}, "fd7a:115c:a1e0::bd37:8879": {"Node": {
-		"ID":         1523520198144354,
-		"StableID":   "nXhtrwH1uC11CNTRL",
-		"Name":       "client-a.tail78f774.ts.net.",
-		"User":       1260082990019555,
-		"Key":        "nodekey:e7e273fc7d70ffb8cef6797a3e1725f5d1f25c64a2ca47be203862f1bd5f8878",
-		"DiscoKey":   "discokey:42f94cc27341c00d3e3e056d1840f1db99a5fc47d5b2728e8739a8d6c6970365",
-		"Addresses":  ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-		"AllowedIPs": ["100.95.136.121/32", "fd7a:115c:a1e0::bd37:8879/128"],
-		"Endpoints": [
-			"77.164.248.136:44313",
-			"10.65.0.27:44313",
-			"172.17.0.1:44313",
-			"172.18.0.1:44313",
-			"172.19.0.1:44313",
-			"172.20.0.1:44313",
-			"172.21.0.1:44313",
-			"172.22.0.1:44313",
-			"172.23.0.1:44313",
-			"172.24.0.1:44313",
-			"172.25.0.1:44313",
-			"172.27.0.1:44313",
-			"172.28.0.1:44313",
-			"172.29.0.1:44313",
-			"172.30.0.1:44313"
-		],
-		"HomeDERP": 8,
-		"Hostinfo": {"OS": "linux", "Hostname": "client-a", "Services": [
-			{"Proto": "peerapi4", "Port": 60228},
-			{"Proto": "peerapi6", "Port": 60228}
-		]},
-		"Created":              "2026-05-18T09:11:46.4498255Z",
-		"Cap":                  131,
-		"Tags":                 ["tag:group-a"],
-		"Online":               true,
-		"ComputedName":         "client-a",
-		"ComputedNameWithHost": "client-a"
-	}, "UserProfile": {
-		"ID":          1260082990019555,
-		"LoginName":   "tagged-devices",
-		"DisplayName": "Tagged Devices"
-	}, "CapMap": null}}}}
-}
diff --git a/hscontrol/policy/v2/testdata/issue_3212/routes-b17-autogroup-internet-with-exit-autoapprover.hujson b/hscontrol/policy/v2/testdata/issue_3212/routes-b17-autogroup-internet-with-exit-autoapprover.hujson
index 0f3fec097..53f624b09 100644
--- a/hscontrol/policy/v2/testdata/issue_3212/routes-b17-autogroup-internet-with-exit-autoapprover.hujson
+++ b/hscontrol/policy/v2/testdata/issue_3212/routes-b17-autogroup-internet-with-exit-autoapprover.hujson
@@ -229,7 +229,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -257,7 +257,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
diff --git a/hscontrol/policy/v2/testdata/issue_3212/routes-b18-autogroup-internet-wildcard-src-with-exit-autoapprover.hujson b/hscontrol/policy/v2/testdata/issue_3212/routes-b18-autogroup-internet-wildcard-src-with-exit-autoapprover.hujson
index 4cf5bf63d..326e07157 100644
--- a/hscontrol/policy/v2/testdata/issue_3212/routes-b18-autogroup-internet-wildcard-src-with-exit-autoapprover.hujson
+++ b/hscontrol/policy/v2/testdata/issue_3212/routes-b18-autogroup-internet-wildcard-src-with-exit-autoapprover.hujson
@@ -229,7 +229,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -257,7 +257,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -1176,7 +1176,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -1204,7 +1204,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -2126,7 +2126,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -2154,7 +2154,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -3077,7 +3077,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -3105,7 +3105,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -4204,7 +4204,7 @@
 			"Tags":                 ["tag:exit", "tag:router"],
 			"PrimaryRoutes":        ["172.16.0.0/24"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}, {
@@ -5410,7 +5410,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -5438,7 +5438,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -6355,7 +6355,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -6383,7 +6383,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -7306,7 +7306,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -7334,7 +7334,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -8257,7 +8257,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -8285,7 +8285,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -9202,7 +9202,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -9230,7 +9230,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
@@ -10274,7 +10274,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -11535,7 +11535,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "charmander",
 			"ComputedNameWithHost": "charmander"
 		}, {
@@ -11563,7 +11563,7 @@
 			"Cap":                  131,
 			"Tags":                 ["tag:exit", "tag:router"],
 			"Online":               true,
-			"CapMap":               {"suggest-exit-node": null},
+			"CapMap":               {"suggest-charmander": null},
 			"ComputedName":         "wartortle",
 			"ComputedNameWithHost": "wartortle"
 		}],
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c1-funnel.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c1-funnel.hujson
deleted file mode 100644
index 9f59029c2..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c1-funnel.hujson
+++ /dev/null
@@ -1,7774 +0,0 @@
-// nodeattrs-attr-c1-funnel
-//
-// funnel attr -- SaaS accepts; headscale rejects pending #2527
-//
-// Nodes with filter rules: 7 of 7
-// Captured at:    2026-05-07T08:09:10Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c1-funnel",
-	"description":    "funnel attr -- SaaS accepts; headscale rejects pending #2527",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:09:10.752217112Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                           \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"funnel attr -- SaaS accepts; headscale rejects pending #2527\",\n    \"id\": \"nodeattrs-attr-c1-funnel\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"funnel\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c1-funnel.hujson",
-		"full_policy": {"nodeAttrs": [{"attr": ["funnel"], "target": ["*"]}], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4090757224299988,
-				"StableID":   "nTvjmpFiwY11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       4090757224299988,
-				"Key":        "nodekey:6060a69a84c14c77debcc6dd1e99eb0355f9c8a236d83ff7ca203a5f05a57329",
-				"DiscoKey":   "discokey:dd9d68050a0760526a7bf887f2d0874c9736fc831730f8ca32f7efc617109b7a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:45294", "10.65.0.27:45294", "172.17.0.1:45294"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:16.591521816Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-owner":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6060a69a84c14c77debcc6dd1e99eb0355f9c8a236d83ff7ca203a5f05a57329",
-			"MachineKey": "mkey:92d100abbab60eb9661702b555467aefca68af02a987d4f219dc61522afffa59",
-			"Peers": [{
-				"ID":         2172740290692456,
-				"StableID":   "nXtkHnC3yH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8cfe26d687e4a33b3f9983dcb803c643159e7fadf61905b7f8910b70930fb75a",
-				"DiscoKey":   "discokey:74a6ef64b2a93b9bae2d42a4952e24ce0be81f7a87cd91d05dcb0c7c94c58703",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55038", "10.65.0.27:55038", "172.17.0.1:55038"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:17.439497538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3729058952588305,
-				"StableID":   "nAbW5D4u7W11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3adf2916349048a555328121dc0197f1223a716bec586c1d872f6db1d4d4bf40",
-				"DiscoKey":   "discokey:350c9ef5d46f72f0dad96e3e8f558e276000b517ff2722720825ceeae7a5cb60",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:59607", "10.65.0.27:59607", "172.17.0.1:59607"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:17.977460567Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6486096069756646,
-				"StableID":   "n92L6EkZes11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef0f2ba985359ce207cd195638a4aed57b568ba015024429c61c95d0b860c949",
-				"DiscoKey":   "discokey:654bcc6d1101d7639ce5e353327a2b8119affe4c1d131ec3921e1e603fcd1563",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36486", "10.65.0.27:36486", "172.17.0.1:36486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:18.539140143Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3904138462584152,
-				"StableID":   "nspyqd6CVX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a9872de8e89f09a07db29c8e2ab406bb43d482ace43d44bcc8f25e6b59b2eb28",
-				"DiscoKey":   "discokey:618c4cca80b4ea3b82a06b2358ab016c5d64178cb3639b93e0fbf16e2f464b5a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:32920", "10.65.0.27:32920", "172.17.0.1:32920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:19.072105707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2434479959825055,
-				"StableID":   "npskZJfa1L11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7d6af4d348b4e4ba1077d58564400446755b7f7d28be94d655ce064c13ae9111",
-				"KeyExpiry":  "2026-11-03T08:09:19Z",
-				"DiscoKey":   "discokey:2844ac3364f66997acc792018b2755e06dbcaddd3fc127fb4080954811785a0b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60678", "10.65.0.27:60678", "172.17.0.1:60678"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:19.605134967Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1748311320546717,
-				"StableID":   "nppya5BpeE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:31addaa70ae4ce3343a8dcdec74cfc0ee2c237fec10db2e0678773bb12d40957",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:07395429eaff461fb07e66c489e2d36768563149ba55c8fe4aa5014fcef5e772",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36207", "10.65.0.27:36207", "172.17.0.1:36207"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:20.137503732Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3956390917262716,
-				"StableID":   "nbaPLUgrtX11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:eded9cda03439fea46d91ea628b965fb1646921833b75be65a587a637712d02d",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:eed2dfdd4d5707ed6bf0796c85ee97eb94126e4838ec764769c174a7a6cd1155",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34576", "10.65.0.27:34576", "172.17.0.1:34576"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:20.750844307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4090757224299988": {
-				"ID":          4090757224299988,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2172740290692456,
-				"StableID":   "nXtkHnC3yH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       2172740290692456,
-				"Key":        "nodekey:8cfe26d687e4a33b3f9983dcb803c643159e7fadf61905b7f8910b70930fb75a",
-				"DiscoKey":   "discokey:74a6ef64b2a93b9bae2d42a4952e24ce0be81f7a87cd91d05dcb0c7c94c58703",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55038", "10.65.0.27:55038", "172.17.0.1:55038"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:09:17.439497538Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-owner":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8cfe26d687e4a33b3f9983dcb803c643159e7fadf61905b7f8910b70930fb75a",
-			"MachineKey": "mkey:802a3dfd3b0098aa442dc7a27813b07fe050b9548c4b2fbd78083eff6ad27b2d",
-			"Peers": [{
-				"ID":         4090757224299988,
-				"StableID":   "nTvjmpFiwY11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6060a69a84c14c77debcc6dd1e99eb0355f9c8a236d83ff7ca203a5f05a57329",
-				"DiscoKey":   "discokey:dd9d68050a0760526a7bf887f2d0874c9736fc831730f8ca32f7efc617109b7a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:45294", "10.65.0.27:45294", "172.17.0.1:45294"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:16.591521816Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3729058952588305,
-				"StableID":   "nAbW5D4u7W11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3adf2916349048a555328121dc0197f1223a716bec586c1d872f6db1d4d4bf40",
-				"DiscoKey":   "discokey:350c9ef5d46f72f0dad96e3e8f558e276000b517ff2722720825ceeae7a5cb60",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:59607", "10.65.0.27:59607", "172.17.0.1:59607"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:17.977460567Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6486096069756646,
-				"StableID":   "n92L6EkZes11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef0f2ba985359ce207cd195638a4aed57b568ba015024429c61c95d0b860c949",
-				"DiscoKey":   "discokey:654bcc6d1101d7639ce5e353327a2b8119affe4c1d131ec3921e1e603fcd1563",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36486", "10.65.0.27:36486", "172.17.0.1:36486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:18.539140143Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3904138462584152,
-				"StableID":   "nspyqd6CVX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a9872de8e89f09a07db29c8e2ab406bb43d482ace43d44bcc8f25e6b59b2eb28",
-				"DiscoKey":   "discokey:618c4cca80b4ea3b82a06b2358ab016c5d64178cb3639b93e0fbf16e2f464b5a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:32920", "10.65.0.27:32920", "172.17.0.1:32920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:19.072105707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2434479959825055,
-				"StableID":   "npskZJfa1L11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7d6af4d348b4e4ba1077d58564400446755b7f7d28be94d655ce064c13ae9111",
-				"KeyExpiry":  "2026-11-03T08:09:19Z",
-				"DiscoKey":   "discokey:2844ac3364f66997acc792018b2755e06dbcaddd3fc127fb4080954811785a0b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60678", "10.65.0.27:60678", "172.17.0.1:60678"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:19.605134967Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1748311320546717,
-				"StableID":   "nppya5BpeE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:31addaa70ae4ce3343a8dcdec74cfc0ee2c237fec10db2e0678773bb12d40957",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:07395429eaff461fb07e66c489e2d36768563149ba55c8fe4aa5014fcef5e772",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36207", "10.65.0.27:36207", "172.17.0.1:36207"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:20.137503732Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3956390917262716,
-				"StableID":   "nbaPLUgrtX11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:eded9cda03439fea46d91ea628b965fb1646921833b75be65a587a637712d02d",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:eed2dfdd4d5707ed6bf0796c85ee97eb94126e4838ec764769c174a7a6cd1155",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34576", "10.65.0.27:34576", "172.17.0.1:34576"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:20.750844307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2172740290692456": {
-				"ID":          2172740290692456,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3729058952588305,
-				"StableID":   "nAbW5D4u7W11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       3729058952588305,
-				"Key":        "nodekey:3adf2916349048a555328121dc0197f1223a716bec586c1d872f6db1d4d4bf40",
-				"DiscoKey":   "discokey:350c9ef5d46f72f0dad96e3e8f558e276000b517ff2722720825ceeae7a5cb60",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:59607", "10.65.0.27:59607", "172.17.0.1:59607"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:17.977460567Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-owner":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3adf2916349048a555328121dc0197f1223a716bec586c1d872f6db1d4d4bf40",
-			"MachineKey": "mkey:46482aaa755a42ee55b633f22fb414b923d8ce75404bcf460f5b1e705462da34",
-			"Peers": [{
-				"ID":         4090757224299988,
-				"StableID":   "nTvjmpFiwY11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6060a69a84c14c77debcc6dd1e99eb0355f9c8a236d83ff7ca203a5f05a57329",
-				"DiscoKey":   "discokey:dd9d68050a0760526a7bf887f2d0874c9736fc831730f8ca32f7efc617109b7a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:45294", "10.65.0.27:45294", "172.17.0.1:45294"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:16.591521816Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2172740290692456,
-				"StableID":   "nXtkHnC3yH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8cfe26d687e4a33b3f9983dcb803c643159e7fadf61905b7f8910b70930fb75a",
-				"DiscoKey":   "discokey:74a6ef64b2a93b9bae2d42a4952e24ce0be81f7a87cd91d05dcb0c7c94c58703",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55038", "10.65.0.27:55038", "172.17.0.1:55038"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:17.439497538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6486096069756646,
-				"StableID":   "n92L6EkZes11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef0f2ba985359ce207cd195638a4aed57b568ba015024429c61c95d0b860c949",
-				"DiscoKey":   "discokey:654bcc6d1101d7639ce5e353327a2b8119affe4c1d131ec3921e1e603fcd1563",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36486", "10.65.0.27:36486", "172.17.0.1:36486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:18.539140143Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3904138462584152,
-				"StableID":   "nspyqd6CVX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a9872de8e89f09a07db29c8e2ab406bb43d482ace43d44bcc8f25e6b59b2eb28",
-				"DiscoKey":   "discokey:618c4cca80b4ea3b82a06b2358ab016c5d64178cb3639b93e0fbf16e2f464b5a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:32920", "10.65.0.27:32920", "172.17.0.1:32920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:19.072105707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2434479959825055,
-				"StableID":   "npskZJfa1L11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7d6af4d348b4e4ba1077d58564400446755b7f7d28be94d655ce064c13ae9111",
-				"KeyExpiry":  "2026-11-03T08:09:19Z",
-				"DiscoKey":   "discokey:2844ac3364f66997acc792018b2755e06dbcaddd3fc127fb4080954811785a0b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60678", "10.65.0.27:60678", "172.17.0.1:60678"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:19.605134967Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1748311320546717,
-				"StableID":   "nppya5BpeE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:31addaa70ae4ce3343a8dcdec74cfc0ee2c237fec10db2e0678773bb12d40957",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:07395429eaff461fb07e66c489e2d36768563149ba55c8fe4aa5014fcef5e772",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36207", "10.65.0.27:36207", "172.17.0.1:36207"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:20.137503732Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3956390917262716,
-				"StableID":   "nbaPLUgrtX11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:eded9cda03439fea46d91ea628b965fb1646921833b75be65a587a637712d02d",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:eed2dfdd4d5707ed6bf0796c85ee97eb94126e4838ec764769c174a7a6cd1155",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34576", "10.65.0.27:34576", "172.17.0.1:34576"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:20.750844307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3729058952588305": {
-				"ID":          3729058952588305,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6486096069756646,
-				"StableID":   "n92L6EkZes11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       6486096069756646,
-				"Key":        "nodekey:ef0f2ba985359ce207cd195638a4aed57b568ba015024429c61c95d0b860c949",
-				"DiscoKey":   "discokey:654bcc6d1101d7639ce5e353327a2b8119affe4c1d131ec3921e1e603fcd1563",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36486", "10.65.0.27:36486", "172.17.0.1:36486"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:09:18.539140143Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-owner":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ef0f2ba985359ce207cd195638a4aed57b568ba015024429c61c95d0b860c949",
-			"MachineKey": "mkey:8a9ce1cb60c973fa95dec74e36decd566e95fbc10794348a1cdb30c57d51c773",
-			"Peers": [{
-				"ID":         4090757224299988,
-				"StableID":   "nTvjmpFiwY11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6060a69a84c14c77debcc6dd1e99eb0355f9c8a236d83ff7ca203a5f05a57329",
-				"DiscoKey":   "discokey:dd9d68050a0760526a7bf887f2d0874c9736fc831730f8ca32f7efc617109b7a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:45294", "10.65.0.27:45294", "172.17.0.1:45294"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:16.591521816Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2172740290692456,
-				"StableID":   "nXtkHnC3yH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8cfe26d687e4a33b3f9983dcb803c643159e7fadf61905b7f8910b70930fb75a",
-				"DiscoKey":   "discokey:74a6ef64b2a93b9bae2d42a4952e24ce0be81f7a87cd91d05dcb0c7c94c58703",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55038", "10.65.0.27:55038", "172.17.0.1:55038"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:17.439497538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3729058952588305,
-				"StableID":   "nAbW5D4u7W11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3adf2916349048a555328121dc0197f1223a716bec586c1d872f6db1d4d4bf40",
-				"DiscoKey":   "discokey:350c9ef5d46f72f0dad96e3e8f558e276000b517ff2722720825ceeae7a5cb60",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:59607", "10.65.0.27:59607", "172.17.0.1:59607"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:17.977460567Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3904138462584152,
-				"StableID":   "nspyqd6CVX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a9872de8e89f09a07db29c8e2ab406bb43d482ace43d44bcc8f25e6b59b2eb28",
-				"DiscoKey":   "discokey:618c4cca80b4ea3b82a06b2358ab016c5d64178cb3639b93e0fbf16e2f464b5a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:32920", "10.65.0.27:32920", "172.17.0.1:32920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:19.072105707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2434479959825055,
-				"StableID":   "npskZJfa1L11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7d6af4d348b4e4ba1077d58564400446755b7f7d28be94d655ce064c13ae9111",
-				"KeyExpiry":  "2026-11-03T08:09:19Z",
-				"DiscoKey":   "discokey:2844ac3364f66997acc792018b2755e06dbcaddd3fc127fb4080954811785a0b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60678", "10.65.0.27:60678", "172.17.0.1:60678"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:19.605134967Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1748311320546717,
-				"StableID":   "nppya5BpeE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:31addaa70ae4ce3343a8dcdec74cfc0ee2c237fec10db2e0678773bb12d40957",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:07395429eaff461fb07e66c489e2d36768563149ba55c8fe4aa5014fcef5e772",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36207", "10.65.0.27:36207", "172.17.0.1:36207"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:20.137503732Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3956390917262716,
-				"StableID":   "nbaPLUgrtX11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:eded9cda03439fea46d91ea628b965fb1646921833b75be65a587a637712d02d",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:eed2dfdd4d5707ed6bf0796c85ee97eb94126e4838ec764769c174a7a6cd1155",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34576", "10.65.0.27:34576", "172.17.0.1:34576"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:20.750844307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6486096069756646": {
-				"ID":          6486096069756646,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3904138462584152,
-				"StableID":   "nspyqd6CVX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       3904138462584152,
-				"Key":        "nodekey:a9872de8e89f09a07db29c8e2ab406bb43d482ace43d44bcc8f25e6b59b2eb28",
-				"DiscoKey":   "discokey:618c4cca80b4ea3b82a06b2358ab016c5d64178cb3639b93e0fbf16e2f464b5a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:32920", "10.65.0.27:32920", "172.17.0.1:32920"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:19.072105707Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-owner":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a9872de8e89f09a07db29c8e2ab406bb43d482ace43d44bcc8f25e6b59b2eb28",
-			"MachineKey": "mkey:0b310ae7589d0e61e16cf265905f388468e23c7d112c9c34e4583d1bd2d8b903",
-			"Peers": [{
-				"ID":         4090757224299988,
-				"StableID":   "nTvjmpFiwY11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6060a69a84c14c77debcc6dd1e99eb0355f9c8a236d83ff7ca203a5f05a57329",
-				"DiscoKey":   "discokey:dd9d68050a0760526a7bf887f2d0874c9736fc831730f8ca32f7efc617109b7a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:45294", "10.65.0.27:45294", "172.17.0.1:45294"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:16.591521816Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2172740290692456,
-				"StableID":   "nXtkHnC3yH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8cfe26d687e4a33b3f9983dcb803c643159e7fadf61905b7f8910b70930fb75a",
-				"DiscoKey":   "discokey:74a6ef64b2a93b9bae2d42a4952e24ce0be81f7a87cd91d05dcb0c7c94c58703",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55038", "10.65.0.27:55038", "172.17.0.1:55038"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:17.439497538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3729058952588305,
-				"StableID":   "nAbW5D4u7W11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3adf2916349048a555328121dc0197f1223a716bec586c1d872f6db1d4d4bf40",
-				"DiscoKey":   "discokey:350c9ef5d46f72f0dad96e3e8f558e276000b517ff2722720825ceeae7a5cb60",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:59607", "10.65.0.27:59607", "172.17.0.1:59607"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:17.977460567Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6486096069756646,
-				"StableID":   "n92L6EkZes11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef0f2ba985359ce207cd195638a4aed57b568ba015024429c61c95d0b860c949",
-				"DiscoKey":   "discokey:654bcc6d1101d7639ce5e353327a2b8119affe4c1d131ec3921e1e603fcd1563",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36486", "10.65.0.27:36486", "172.17.0.1:36486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:18.539140143Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2434479959825055,
-				"StableID":   "npskZJfa1L11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7d6af4d348b4e4ba1077d58564400446755b7f7d28be94d655ce064c13ae9111",
-				"KeyExpiry":  "2026-11-03T08:09:19Z",
-				"DiscoKey":   "discokey:2844ac3364f66997acc792018b2755e06dbcaddd3fc127fb4080954811785a0b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60678", "10.65.0.27:60678", "172.17.0.1:60678"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:19.605134967Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1748311320546717,
-				"StableID":   "nppya5BpeE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:31addaa70ae4ce3343a8dcdec74cfc0ee2c237fec10db2e0678773bb12d40957",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:07395429eaff461fb07e66c489e2d36768563149ba55c8fe4aa5014fcef5e772",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36207", "10.65.0.27:36207", "172.17.0.1:36207"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:20.137503732Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3956390917262716,
-				"StableID":   "nbaPLUgrtX11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:eded9cda03439fea46d91ea628b965fb1646921833b75be65a587a637712d02d",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:eed2dfdd4d5707ed6bf0796c85ee97eb94126e4838ec764769c174a7a6cd1155",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34576", "10.65.0.27:34576", "172.17.0.1:34576"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:20.750844307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3904138462584152": {
-				"ID":          3904138462584152,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3956390917262716,
-				"StableID":   "nbaPLUgrtX11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:eded9cda03439fea46d91ea628b965fb1646921833b75be65a587a637712d02d",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:eed2dfdd4d5707ed6bf0796c85ee97eb94126e4838ec764769c174a7a6cd1155",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34576", "10.65.0.27:34576", "172.17.0.1:34576"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:20.750844307Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-admin":                          null,
-					"https://tailscale.com/cap/is-owner":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:eded9cda03439fea46d91ea628b965fb1646921833b75be65a587a637712d02d",
-			"MachineKey": "mkey:dfb2f463436fe78435fe7592277e1aa231afde439f8571950acab7bc81694015",
-			"Peers": [{
-				"ID":         4090757224299988,
-				"StableID":   "nTvjmpFiwY11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6060a69a84c14c77debcc6dd1e99eb0355f9c8a236d83ff7ca203a5f05a57329",
-				"DiscoKey":   "discokey:dd9d68050a0760526a7bf887f2d0874c9736fc831730f8ca32f7efc617109b7a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:45294", "10.65.0.27:45294", "172.17.0.1:45294"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:16.591521816Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2172740290692456,
-				"StableID":   "nXtkHnC3yH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8cfe26d687e4a33b3f9983dcb803c643159e7fadf61905b7f8910b70930fb75a",
-				"DiscoKey":   "discokey:74a6ef64b2a93b9bae2d42a4952e24ce0be81f7a87cd91d05dcb0c7c94c58703",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55038", "10.65.0.27:55038", "172.17.0.1:55038"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:17.439497538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3729058952588305,
-				"StableID":   "nAbW5D4u7W11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3adf2916349048a555328121dc0197f1223a716bec586c1d872f6db1d4d4bf40",
-				"DiscoKey":   "discokey:350c9ef5d46f72f0dad96e3e8f558e276000b517ff2722720825ceeae7a5cb60",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:59607", "10.65.0.27:59607", "172.17.0.1:59607"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:17.977460567Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6486096069756646,
-				"StableID":   "n92L6EkZes11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef0f2ba985359ce207cd195638a4aed57b568ba015024429c61c95d0b860c949",
-				"DiscoKey":   "discokey:654bcc6d1101d7639ce5e353327a2b8119affe4c1d131ec3921e1e603fcd1563",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36486", "10.65.0.27:36486", "172.17.0.1:36486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:18.539140143Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3904138462584152,
-				"StableID":   "nspyqd6CVX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a9872de8e89f09a07db29c8e2ab406bb43d482ace43d44bcc8f25e6b59b2eb28",
-				"DiscoKey":   "discokey:618c4cca80b4ea3b82a06b2358ab016c5d64178cb3639b93e0fbf16e2f464b5a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:32920", "10.65.0.27:32920", "172.17.0.1:32920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:19.072105707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2434479959825055,
-				"StableID":   "npskZJfa1L11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7d6af4d348b4e4ba1077d58564400446755b7f7d28be94d655ce064c13ae9111",
-				"KeyExpiry":  "2026-11-03T08:09:19Z",
-				"DiscoKey":   "discokey:2844ac3364f66997acc792018b2755e06dbcaddd3fc127fb4080954811785a0b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60678", "10.65.0.27:60678", "172.17.0.1:60678"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:19.605134967Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1748311320546717,
-				"StableID":   "nppya5BpeE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:31addaa70ae4ce3343a8dcdec74cfc0ee2c237fec10db2e0678773bb12d40957",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:07395429eaff461fb07e66c489e2d36768563149ba55c8fe4aa5014fcef5e772",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36207", "10.65.0.27:36207", "172.17.0.1:36207"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:20.137503732Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1748311320546717,
-				"StableID":   "nppya5BpeE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:31addaa70ae4ce3343a8dcdec74cfc0ee2c237fec10db2e0678773bb12d40957",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:07395429eaff461fb07e66c489e2d36768563149ba55c8fe4aa5014fcef5e772",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36207", "10.65.0.27:36207", "172.17.0.1:36207"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:20.137503732Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-admin":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:31addaa70ae4ce3343a8dcdec74cfc0ee2c237fec10db2e0678773bb12d40957",
-			"MachineKey": "mkey:1217691c59a216951cafe21620efafead32a4b51184a3c1cfa27c226d840aa69",
-			"Peers": [{
-				"ID":         4090757224299988,
-				"StableID":   "nTvjmpFiwY11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6060a69a84c14c77debcc6dd1e99eb0355f9c8a236d83ff7ca203a5f05a57329",
-				"DiscoKey":   "discokey:dd9d68050a0760526a7bf887f2d0874c9736fc831730f8ca32f7efc617109b7a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:45294", "10.65.0.27:45294", "172.17.0.1:45294"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:16.591521816Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2172740290692456,
-				"StableID":   "nXtkHnC3yH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8cfe26d687e4a33b3f9983dcb803c643159e7fadf61905b7f8910b70930fb75a",
-				"DiscoKey":   "discokey:74a6ef64b2a93b9bae2d42a4952e24ce0be81f7a87cd91d05dcb0c7c94c58703",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55038", "10.65.0.27:55038", "172.17.0.1:55038"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:17.439497538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3729058952588305,
-				"StableID":   "nAbW5D4u7W11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3adf2916349048a555328121dc0197f1223a716bec586c1d872f6db1d4d4bf40",
-				"DiscoKey":   "discokey:350c9ef5d46f72f0dad96e3e8f558e276000b517ff2722720825ceeae7a5cb60",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:59607", "10.65.0.27:59607", "172.17.0.1:59607"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:17.977460567Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6486096069756646,
-				"StableID":   "n92L6EkZes11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef0f2ba985359ce207cd195638a4aed57b568ba015024429c61c95d0b860c949",
-				"DiscoKey":   "discokey:654bcc6d1101d7639ce5e353327a2b8119affe4c1d131ec3921e1e603fcd1563",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36486", "10.65.0.27:36486", "172.17.0.1:36486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:18.539140143Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3904138462584152,
-				"StableID":   "nspyqd6CVX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a9872de8e89f09a07db29c8e2ab406bb43d482ace43d44bcc8f25e6b59b2eb28",
-				"DiscoKey":   "discokey:618c4cca80b4ea3b82a06b2358ab016c5d64178cb3639b93e0fbf16e2f464b5a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:32920", "10.65.0.27:32920", "172.17.0.1:32920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:19.072105707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2434479959825055,
-				"StableID":   "npskZJfa1L11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7d6af4d348b4e4ba1077d58564400446755b7f7d28be94d655ce064c13ae9111",
-				"KeyExpiry":  "2026-11-03T08:09:19Z",
-				"DiscoKey":   "discokey:2844ac3364f66997acc792018b2755e06dbcaddd3fc127fb4080954811785a0b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60678", "10.65.0.27:60678", "172.17.0.1:60678"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:19.605134967Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3956390917262716,
-				"StableID":   "nbaPLUgrtX11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:eded9cda03439fea46d91ea628b965fb1646921833b75be65a587a637712d02d",
-				"KeyExpiry":  "2026-11-03T08:09:20Z",
-				"DiscoKey":   "discokey:eed2dfdd4d5707ed6bf0796c85ee97eb94126e4838ec764769c174a7a6cd1155",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34576", "10.65.0.27:34576", "172.17.0.1:34576"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:20.750844307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c10-disable-relay-server.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c10-disable-relay-server.hujson
deleted file mode 100644
index 0d0c925b9..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c10-disable-relay-server.hujson
+++ /dev/null
@@ -1,8837 +0,0 @@
-// nodeattrs-attr-c10-disable-relay-server
-//
-// single attr disable-relay-server via wildcard
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:07:09Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c10-disable-relay-server",
-	"description":    "single attr disable-relay-server via wildcard",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:07:09.389700891Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                          \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"single attr disable-relay-server via wildcard\",\n    \"id\": \"nodeattrs-attr-c10-disable-relay-server\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"disable-relay-server\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c10-disable-relay-server.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["disable-relay-server"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4756726045183347,
-				"StableID":   "nYFFyN8L9e11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       4756726045183347,
-				"Key":        "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-				"DiscoKey":   "discokey:cd9d3a8f637c364cf6a0c99ee2397c7aed7781ea12a72d1a54ec6055b7ebde08",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47596", "10.65.0.27:47596", "172.17.0.1:47596"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:15.097135856Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-relay-server":                   null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-relay-server",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-			"MachineKey": "mkey:afc500633e4f0f64a4171764a79978eb89b899e7e5d5cfb28607072f6d01017a",
-			"Peers": [{
-				"ID":         3589439867025156,
-				"StableID":   "nRZCbvVf2V11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-				"DiscoKey":   "discokey:9cd2dcd621edd7ba1a55373143779367f35e9f64bdd0045bd5770fd30c92aa6b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37057", "10.65.0.27:37057", "172.17.0.1:37057"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:15.635832721Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1191772042033797,
-				"StableID":   "nvDjKBqkJA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-				"DiscoKey":   "discokey:a1e3e9305ed84920a68cf9ed0a6e8740f08719fe6aa27aacb29f427a41bc902d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48095", "10.65.0.27:48095", "172.17.0.1:48095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:16.177761657Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         972492469940671,
-				"StableID":   "nEWdREjSb811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-				"DiscoKey":   "discokey:bcbe689aaa314795a38639eeba4206447de3bb9837e48b9c7aaaae6150b79107",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33733", "10.65.0.27:33733", "172.17.0.1:33733"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:16.717289042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8789990732968808,
-				"StableID":   "nBJUAn91eB21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-				"DiscoKey":   "discokey:22bb49cd1a20268ee0e037c4dece0c4797f48804b1e26dd751e2036c417e9e08",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44345", "10.65.0.27:44345", "172.17.0.1:44345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:17.267333451Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1345462128313845,
-				"StableID":   "nr5ixV1NWB11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-				"KeyExpiry":  "2026-11-03T08:07:17Z",
-				"DiscoKey":   "discokey:0a2452372a03d8ab8cfabd6073dc20a4f76607020ddad206dc9f740f7edf8060",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:40378", "10.65.0.27:40378", "172.17.0.1:40378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:17.779835697Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6885666708742418,
-				"StableID":   "nhUECjnXmv11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:316e0f652404aa41306d01dbabf6d73987950f8e373c3c7f9dcdd6e9a60f9d25",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48800", "10.65.0.27:48800", "172.17.0.1:48800"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:18.301963156Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8591466120607624,
-				"StableID":   "nqw6zHF66A21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:58eee28a3502e7f8e9cc26ca616aa1e8ad99c9906ab46f4f04d1e0fb77384937",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46312", "10.65.0.27:46312", "172.17.0.1:46312"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:18.844710627Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4756726045183347": {
-				"ID":          4756726045183347,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3589439867025156,
-				"StableID":   "nRZCbvVf2V11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3589439867025156,
-				"Key":        "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-				"DiscoKey":   "discokey:9cd2dcd621edd7ba1a55373143779367f35e9f64bdd0045bd5770fd30c92aa6b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37057", "10.65.0.27:37057", "172.17.0.1:37057"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:07:15.635832721Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-relay-server":                   null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-relay-server",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-			"MachineKey": "mkey:004de8ba8042b72483f872939b1b64c24b61a1d8ca74fe2350eb269021a52022",
-			"Peers": [{
-				"ID":         4756726045183347,
-				"StableID":   "nYFFyN8L9e11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-				"DiscoKey":   "discokey:cd9d3a8f637c364cf6a0c99ee2397c7aed7781ea12a72d1a54ec6055b7ebde08",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47596", "10.65.0.27:47596", "172.17.0.1:47596"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:15.097135856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1191772042033797,
-				"StableID":   "nvDjKBqkJA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-				"DiscoKey":   "discokey:a1e3e9305ed84920a68cf9ed0a6e8740f08719fe6aa27aacb29f427a41bc902d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48095", "10.65.0.27:48095", "172.17.0.1:48095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:16.177761657Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         972492469940671,
-				"StableID":   "nEWdREjSb811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-				"DiscoKey":   "discokey:bcbe689aaa314795a38639eeba4206447de3bb9837e48b9c7aaaae6150b79107",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33733", "10.65.0.27:33733", "172.17.0.1:33733"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:16.717289042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8789990732968808,
-				"StableID":   "nBJUAn91eB21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-				"DiscoKey":   "discokey:22bb49cd1a20268ee0e037c4dece0c4797f48804b1e26dd751e2036c417e9e08",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44345", "10.65.0.27:44345", "172.17.0.1:44345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:17.267333451Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1345462128313845,
-				"StableID":   "nr5ixV1NWB11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-				"KeyExpiry":  "2026-11-03T08:07:17Z",
-				"DiscoKey":   "discokey:0a2452372a03d8ab8cfabd6073dc20a4f76607020ddad206dc9f740f7edf8060",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:40378", "10.65.0.27:40378", "172.17.0.1:40378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:17.779835697Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6885666708742418,
-				"StableID":   "nhUECjnXmv11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:316e0f652404aa41306d01dbabf6d73987950f8e373c3c7f9dcdd6e9a60f9d25",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48800", "10.65.0.27:48800", "172.17.0.1:48800"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:18.301963156Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8591466120607624,
-				"StableID":   "nqw6zHF66A21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:58eee28a3502e7f8e9cc26ca616aa1e8ad99c9906ab46f4f04d1e0fb77384937",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46312", "10.65.0.27:46312", "172.17.0.1:46312"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:18.844710627Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3589439867025156": {
-				"ID":          3589439867025156,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1345462128313845,
-				"StableID":   "nr5ixV1NWB11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-				"KeyExpiry":  "2026-11-03T08:07:17Z",
-				"DiscoKey":   "discokey:0a2452372a03d8ab8cfabd6073dc20a4f76607020ddad206dc9f740f7edf8060",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:40378", "10.65.0.27:40378", "172.17.0.1:40378"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:17.779835697Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-relay-server":                   null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-relay-server",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-			"MachineKey": "mkey:7fd428f48ff48880029918d19419cf29c944ca9ef0265ecf264ccb07d53c1c59",
-			"Peers": [{
-				"ID":         4756726045183347,
-				"StableID":   "nYFFyN8L9e11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-				"DiscoKey":   "discokey:cd9d3a8f637c364cf6a0c99ee2397c7aed7781ea12a72d1a54ec6055b7ebde08",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47596", "10.65.0.27:47596", "172.17.0.1:47596"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:15.097135856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3589439867025156,
-				"StableID":   "nRZCbvVf2V11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-				"DiscoKey":   "discokey:9cd2dcd621edd7ba1a55373143779367f35e9f64bdd0045bd5770fd30c92aa6b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37057", "10.65.0.27:37057", "172.17.0.1:37057"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:15.635832721Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1191772042033797,
-				"StableID":   "nvDjKBqkJA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-				"DiscoKey":   "discokey:a1e3e9305ed84920a68cf9ed0a6e8740f08719fe6aa27aacb29f427a41bc902d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48095", "10.65.0.27:48095", "172.17.0.1:48095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:16.177761657Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         972492469940671,
-				"StableID":   "nEWdREjSb811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-				"DiscoKey":   "discokey:bcbe689aaa314795a38639eeba4206447de3bb9837e48b9c7aaaae6150b79107",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33733", "10.65.0.27:33733", "172.17.0.1:33733"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:16.717289042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8789990732968808,
-				"StableID":   "nBJUAn91eB21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-				"DiscoKey":   "discokey:22bb49cd1a20268ee0e037c4dece0c4797f48804b1e26dd751e2036c417e9e08",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44345", "10.65.0.27:44345", "172.17.0.1:44345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:17.267333451Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6885666708742418,
-				"StableID":   "nhUECjnXmv11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:316e0f652404aa41306d01dbabf6d73987950f8e373c3c7f9dcdd6e9a60f9d25",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48800", "10.65.0.27:48800", "172.17.0.1:48800"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:18.301963156Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8591466120607624,
-				"StableID":   "nqw6zHF66A21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:58eee28a3502e7f8e9cc26ca616aa1e8ad99c9906ab46f4f04d1e0fb77384937",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46312", "10.65.0.27:46312", "172.17.0.1:46312"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:18.844710627Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1191772042033797,
-				"StableID":   "nvDjKBqkJA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1191772042033797,
-				"Key":        "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-				"DiscoKey":   "discokey:a1e3e9305ed84920a68cf9ed0a6e8740f08719fe6aa27aacb29f427a41bc902d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48095", "10.65.0.27:48095", "172.17.0.1:48095"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:16.177761657Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-relay-server":                   null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-relay-server",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-			"MachineKey": "mkey:cfbfb3afb952f47ece251ac16cfdd93d49c291a8ab19b89e26c5de645317b571",
-			"Peers": [{
-				"ID":         4756726045183347,
-				"StableID":   "nYFFyN8L9e11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-				"DiscoKey":   "discokey:cd9d3a8f637c364cf6a0c99ee2397c7aed7781ea12a72d1a54ec6055b7ebde08",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47596", "10.65.0.27:47596", "172.17.0.1:47596"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:15.097135856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3589439867025156,
-				"StableID":   "nRZCbvVf2V11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-				"DiscoKey":   "discokey:9cd2dcd621edd7ba1a55373143779367f35e9f64bdd0045bd5770fd30c92aa6b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37057", "10.65.0.27:37057", "172.17.0.1:37057"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:15.635832721Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         972492469940671,
-				"StableID":   "nEWdREjSb811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-				"DiscoKey":   "discokey:bcbe689aaa314795a38639eeba4206447de3bb9837e48b9c7aaaae6150b79107",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33733", "10.65.0.27:33733", "172.17.0.1:33733"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:16.717289042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8789990732968808,
-				"StableID":   "nBJUAn91eB21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-				"DiscoKey":   "discokey:22bb49cd1a20268ee0e037c4dece0c4797f48804b1e26dd751e2036c417e9e08",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44345", "10.65.0.27:44345", "172.17.0.1:44345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:17.267333451Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1345462128313845,
-				"StableID":   "nr5ixV1NWB11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-				"KeyExpiry":  "2026-11-03T08:07:17Z",
-				"DiscoKey":   "discokey:0a2452372a03d8ab8cfabd6073dc20a4f76607020ddad206dc9f740f7edf8060",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:40378", "10.65.0.27:40378", "172.17.0.1:40378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:17.779835697Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6885666708742418,
-				"StableID":   "nhUECjnXmv11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:316e0f652404aa41306d01dbabf6d73987950f8e373c3c7f9dcdd6e9a60f9d25",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48800", "10.65.0.27:48800", "172.17.0.1:48800"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:18.301963156Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8591466120607624,
-				"StableID":   "nqw6zHF66A21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:58eee28a3502e7f8e9cc26ca616aa1e8ad99c9906ab46f4f04d1e0fb77384937",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46312", "10.65.0.27:46312", "172.17.0.1:46312"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:18.844710627Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1191772042033797": {
-				"ID":          1191772042033797,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         972492469940671,
-				"StableID":   "nEWdREjSb811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       972492469940671,
-				"Key":        "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-				"DiscoKey":   "discokey:bcbe689aaa314795a38639eeba4206447de3bb9837e48b9c7aaaae6150b79107",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33733", "10.65.0.27:33733", "172.17.0.1:33733"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:07:16.717289042Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-relay-server":                   null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-relay-server",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-			"MachineKey": "mkey:bb861dee67ff72928217e4e42315f04ac02a5939c7aa5e77feaf51a86209d26e",
-			"Peers": [{
-				"ID":         4756726045183347,
-				"StableID":   "nYFFyN8L9e11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-				"DiscoKey":   "discokey:cd9d3a8f637c364cf6a0c99ee2397c7aed7781ea12a72d1a54ec6055b7ebde08",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47596", "10.65.0.27:47596", "172.17.0.1:47596"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:15.097135856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3589439867025156,
-				"StableID":   "nRZCbvVf2V11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-				"DiscoKey":   "discokey:9cd2dcd621edd7ba1a55373143779367f35e9f64bdd0045bd5770fd30c92aa6b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37057", "10.65.0.27:37057", "172.17.0.1:37057"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:15.635832721Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1191772042033797,
-				"StableID":   "nvDjKBqkJA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-				"DiscoKey":   "discokey:a1e3e9305ed84920a68cf9ed0a6e8740f08719fe6aa27aacb29f427a41bc902d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48095", "10.65.0.27:48095", "172.17.0.1:48095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:16.177761657Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8789990732968808,
-				"StableID":   "nBJUAn91eB21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-				"DiscoKey":   "discokey:22bb49cd1a20268ee0e037c4dece0c4797f48804b1e26dd751e2036c417e9e08",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44345", "10.65.0.27:44345", "172.17.0.1:44345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:17.267333451Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1345462128313845,
-				"StableID":   "nr5ixV1NWB11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-				"KeyExpiry":  "2026-11-03T08:07:17Z",
-				"DiscoKey":   "discokey:0a2452372a03d8ab8cfabd6073dc20a4f76607020ddad206dc9f740f7edf8060",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:40378", "10.65.0.27:40378", "172.17.0.1:40378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:17.779835697Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6885666708742418,
-				"StableID":   "nhUECjnXmv11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:316e0f652404aa41306d01dbabf6d73987950f8e373c3c7f9dcdd6e9a60f9d25",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48800", "10.65.0.27:48800", "172.17.0.1:48800"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:18.301963156Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8591466120607624,
-				"StableID":   "nqw6zHF66A21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:58eee28a3502e7f8e9cc26ca616aa1e8ad99c9906ab46f4f04d1e0fb77384937",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46312", "10.65.0.27:46312", "172.17.0.1:46312"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:18.844710627Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "972492469940671": {
-				"ID":          972492469940671,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8789990732968808,
-				"StableID":   "nBJUAn91eB21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       8789990732968808,
-				"Key":        "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-				"DiscoKey":   "discokey:22bb49cd1a20268ee0e037c4dece0c4797f48804b1e26dd751e2036c417e9e08",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44345", "10.65.0.27:44345", "172.17.0.1:44345"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:17.267333451Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-relay-server":                   null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-relay-server",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-			"MachineKey": "mkey:2ab7f198e883346b1618bc4c416c76dbf06bdbdbdf63508140cadb15ac545a17",
-			"Peers": [{
-				"ID":         4756726045183347,
-				"StableID":   "nYFFyN8L9e11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-				"DiscoKey":   "discokey:cd9d3a8f637c364cf6a0c99ee2397c7aed7781ea12a72d1a54ec6055b7ebde08",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47596", "10.65.0.27:47596", "172.17.0.1:47596"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:15.097135856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3589439867025156,
-				"StableID":   "nRZCbvVf2V11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-				"DiscoKey":   "discokey:9cd2dcd621edd7ba1a55373143779367f35e9f64bdd0045bd5770fd30c92aa6b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37057", "10.65.0.27:37057", "172.17.0.1:37057"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:15.635832721Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1191772042033797,
-				"StableID":   "nvDjKBqkJA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-				"DiscoKey":   "discokey:a1e3e9305ed84920a68cf9ed0a6e8740f08719fe6aa27aacb29f427a41bc902d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48095", "10.65.0.27:48095", "172.17.0.1:48095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:16.177761657Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         972492469940671,
-				"StableID":   "nEWdREjSb811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-				"DiscoKey":   "discokey:bcbe689aaa314795a38639eeba4206447de3bb9837e48b9c7aaaae6150b79107",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33733", "10.65.0.27:33733", "172.17.0.1:33733"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:16.717289042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1345462128313845,
-				"StableID":   "nr5ixV1NWB11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-				"KeyExpiry":  "2026-11-03T08:07:17Z",
-				"DiscoKey":   "discokey:0a2452372a03d8ab8cfabd6073dc20a4f76607020ddad206dc9f740f7edf8060",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:40378", "10.65.0.27:40378", "172.17.0.1:40378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:17.779835697Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6885666708742418,
-				"StableID":   "nhUECjnXmv11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:316e0f652404aa41306d01dbabf6d73987950f8e373c3c7f9dcdd6e9a60f9d25",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48800", "10.65.0.27:48800", "172.17.0.1:48800"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:18.301963156Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8591466120607624,
-				"StableID":   "nqw6zHF66A21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:58eee28a3502e7f8e9cc26ca616aa1e8ad99c9906ab46f4f04d1e0fb77384937",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46312", "10.65.0.27:46312", "172.17.0.1:46312"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:18.844710627Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8789990732968808": {
-				"ID":          8789990732968808,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8591466120607624,
-				"StableID":   "nqw6zHF66A21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:58eee28a3502e7f8e9cc26ca616aa1e8ad99c9906ab46f4f04d1e0fb77384937",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46312", "10.65.0.27:46312", "172.17.0.1:46312"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:18.844710627Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-relay-server":                   null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-relay-server",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-			"MachineKey": "mkey:1525f2fad1ac15607698d83f19651a88de9c9a7a6eb52e86cc0cab2c1e7c970b",
-			"Peers": [{
-				"ID":         4756726045183347,
-				"StableID":   "nYFFyN8L9e11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-				"DiscoKey":   "discokey:cd9d3a8f637c364cf6a0c99ee2397c7aed7781ea12a72d1a54ec6055b7ebde08",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47596", "10.65.0.27:47596", "172.17.0.1:47596"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:15.097135856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3589439867025156,
-				"StableID":   "nRZCbvVf2V11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-				"DiscoKey":   "discokey:9cd2dcd621edd7ba1a55373143779367f35e9f64bdd0045bd5770fd30c92aa6b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37057", "10.65.0.27:37057", "172.17.0.1:37057"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:15.635832721Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1191772042033797,
-				"StableID":   "nvDjKBqkJA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-				"DiscoKey":   "discokey:a1e3e9305ed84920a68cf9ed0a6e8740f08719fe6aa27aacb29f427a41bc902d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48095", "10.65.0.27:48095", "172.17.0.1:48095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:16.177761657Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         972492469940671,
-				"StableID":   "nEWdREjSb811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-				"DiscoKey":   "discokey:bcbe689aaa314795a38639eeba4206447de3bb9837e48b9c7aaaae6150b79107",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33733", "10.65.0.27:33733", "172.17.0.1:33733"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:16.717289042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8789990732968808,
-				"StableID":   "nBJUAn91eB21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-				"DiscoKey":   "discokey:22bb49cd1a20268ee0e037c4dece0c4797f48804b1e26dd751e2036c417e9e08",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44345", "10.65.0.27:44345", "172.17.0.1:44345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:17.267333451Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1345462128313845,
-				"StableID":   "nr5ixV1NWB11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-				"KeyExpiry":  "2026-11-03T08:07:17Z",
-				"DiscoKey":   "discokey:0a2452372a03d8ab8cfabd6073dc20a4f76607020ddad206dc9f740f7edf8060",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:40378", "10.65.0.27:40378", "172.17.0.1:40378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:17.779835697Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6885666708742418,
-				"StableID":   "nhUECjnXmv11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:316e0f652404aa41306d01dbabf6d73987950f8e373c3c7f9dcdd6e9a60f9d25",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48800", "10.65.0.27:48800", "172.17.0.1:48800"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:18.301963156Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6885666708742418,
-				"StableID":   "nhUECjnXmv11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:316e0f652404aa41306d01dbabf6d73987950f8e373c3c7f9dcdd6e9a60f9d25",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48800", "10.65.0.27:48800", "172.17.0.1:48800"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:18.301963156Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-relay-server":                   null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-relay-server",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:28f970b56e9697a0d0e818fb8b7921af586d51ed3dd41ca9093be867e1cdfb1d",
-			"MachineKey": "mkey:cfa7fe4303d638f2bef8df6a336942b966dc09445d6181ac0187712e48ebb43b",
-			"Peers": [{
-				"ID":         4756726045183347,
-				"StableID":   "nYFFyN8L9e11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b3c9114df6532b225b9acb6a27e3bad1b76f17faac6c793e133d052f6e0cd22",
-				"DiscoKey":   "discokey:cd9d3a8f637c364cf6a0c99ee2397c7aed7781ea12a72d1a54ec6055b7ebde08",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47596", "10.65.0.27:47596", "172.17.0.1:47596"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:15.097135856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3589439867025156,
-				"StableID":   "nRZCbvVf2V11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a0fb27313f7cc13cbc6f562aa1b387116c741972df3128165b23f642c62d007e",
-				"DiscoKey":   "discokey:9cd2dcd621edd7ba1a55373143779367f35e9f64bdd0045bd5770fd30c92aa6b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37057", "10.65.0.27:37057", "172.17.0.1:37057"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:15.635832721Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1191772042033797,
-				"StableID":   "nvDjKBqkJA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:02cbd5e5b3a2987a1fc72580efa312531a0b98de568dd21d0eec5f3e08361f67",
-				"DiscoKey":   "discokey:a1e3e9305ed84920a68cf9ed0a6e8740f08719fe6aa27aacb29f427a41bc902d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48095", "10.65.0.27:48095", "172.17.0.1:48095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:16.177761657Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         972492469940671,
-				"StableID":   "nEWdREjSb811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6471d51fc87c7c0fa89e1b6c2969f57349b7a2a0e35253fa31adde685071b902",
-				"DiscoKey":   "discokey:bcbe689aaa314795a38639eeba4206447de3bb9837e48b9c7aaaae6150b79107",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33733", "10.65.0.27:33733", "172.17.0.1:33733"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:16.717289042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8789990732968808,
-				"StableID":   "nBJUAn91eB21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d5925bc1d416969ae0cfb6209a49e9630aef01ab446bed85b21fc5ebcf1b971c",
-				"DiscoKey":   "discokey:22bb49cd1a20268ee0e037c4dece0c4797f48804b1e26dd751e2036c417e9e08",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44345", "10.65.0.27:44345", "172.17.0.1:44345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:17.267333451Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1345462128313845,
-				"StableID":   "nr5ixV1NWB11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f1c55775f65b26eb20257d6e6623bab09b7525579ec81cb5d7b176ce3823136c",
-				"KeyExpiry":  "2026-11-03T08:07:17Z",
-				"DiscoKey":   "discokey:0a2452372a03d8ab8cfabd6073dc20a4f76607020ddad206dc9f740f7edf8060",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:40378", "10.65.0.27:40378", "172.17.0.1:40378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:17.779835697Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8591466120607624,
-				"StableID":   "nqw6zHF66A21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e272bcff79c5b8266779629aeb5a0dfda2f38e1705359d357fc9c959ac48516f",
-				"KeyExpiry":  "2026-11-03T08:07:18Z",
-				"DiscoKey":   "discokey:58eee28a3502e7f8e9cc26ca616aa1e8ad99c9906ab46f4f04d1e0fb77384937",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46312", "10.65.0.27:46312", "172.17.0.1:46312"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:18.844710627Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c11-unknown.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c11-unknown.hujson
deleted file mode 100644
index f3430e86c..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c11-unknown.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-attr-c11-unknown
-//
-// operator-supplied unknown attr -- pass-through
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:07:49Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c11-unknown",
-	"description":    "operator-supplied unknown attr -- pass-through",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:07:49.936747642Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                             \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"operator-supplied unknown attr -- pass-through\",\n    \"id\": \"nodeattrs-attr-c11-unknown\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"custom:headscale-test\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c11-unknown.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["custom:headscale-test"], "target": ["tag:server"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5427561382775614,
-				"StableID":   "n3FwaNq9Pj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       5427561382775614,
-				"Key":        "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-				"DiscoKey":   "discokey:290b48d9a3ce078d4e39d1eb4432d4d9ec40656820ab63ffca1bf0759576f121",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:49075", "10.65.0.27:49075", "172.17.0.1:49075"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:55.542153202Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-			"MachineKey": "mkey:0b5ff7c5d43310a0b4e082f9438b99d20dcb8fa426dd5a60b074719086e3bd70",
-			"Peers": [{
-				"ID":         8578592627193301,
-				"StableID":   "nGeNTj5Gz921CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-				"DiscoKey":   "discokey:a28b1f573df4888478aabade03390a3a6d4eb5ca35a8abf35927fabb6eb3721c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57345", "10.65.0.27:57345", "172.17.0.1:57345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:56.074646976Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3226969977639554,
-				"StableID":   "nXXhgh2WCS11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-				"DiscoKey":   "discokey:2b54a47ba29fe972e8347f6aa1c321e0af781e00e940c73a92ca45d7cc9c0c64",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51598", "10.65.0.27:51598", "172.17.0.1:51598"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:56.642493741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7836399511742599,
-				"StableID":   "nAz4Nmv7C421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-				"DiscoKey":   "discokey:eafd15f4f84c56decb1094ab75cace09e49a7b1d690d0a05b7c33401014b2760",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37267", "10.65.0.27:37267", "172.17.0.1:37267"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:57.142413331Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4850194264353995,
-				"StableID":   "n8qzRyNfse11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-				"DiscoKey":   "discokey:6b28f287dd0daf1901bbf1466ad43f53dc0c332478fb19cb0b86319df5f4e16e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39253", "10.65.0.27:39253", "172.17.0.1:39253"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:57.676761493Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2188084749259813,
-				"StableID":   "nC4nY1Hz5J11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:816f97dcf2a4aea71a8aaf1cb3d5f7372db893d0afb7c1c605ecbf5f09b7a96d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36165", "10.65.0.27:36165", "172.17.0.1:36165"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:58.197618719Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         458085746837951,
-				"StableID":   "niApos8Ua411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:b5b957561436517a0e2ddcabf27e47c4e094dc7c692111adf0580ce5d1dc2f3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:40115", "10.65.0.27:40115", "172.17.0.1:40115"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:58.720872409Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4738518319844333,
-				"StableID":   "n2bbdnq51e11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-				"KeyExpiry":  "2026-11-03T08:07:59Z",
-				"DiscoKey":   "discokey:1d9be130ae8e38da18d9a56f589d01f6aaaabef11f379061f29c8496ea55a215",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46102", "10.65.0.27:46102", "172.17.0.1:46102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:59.255862543Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5427561382775614": {
-				"ID":          5427561382775614,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8578592627193301,
-				"StableID":   "nGeNTj5Gz921CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       8578592627193301,
-				"Key":        "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-				"DiscoKey":   "discokey:a28b1f573df4888478aabade03390a3a6d4eb5ca35a8abf35927fabb6eb3721c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57345", "10.65.0.27:57345", "172.17.0.1:57345"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:07:56.074646976Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-			"MachineKey": "mkey:7cb66d2f07a0f65013c3646058a42fb48d78d7061f6772eb63dfdb1f95df3002",
-			"Peers": [{
-				"ID":         5427561382775614,
-				"StableID":   "n3FwaNq9Pj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-				"DiscoKey":   "discokey:290b48d9a3ce078d4e39d1eb4432d4d9ec40656820ab63ffca1bf0759576f121",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:49075", "10.65.0.27:49075", "172.17.0.1:49075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:55.542153202Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3226969977639554,
-				"StableID":   "nXXhgh2WCS11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-				"DiscoKey":   "discokey:2b54a47ba29fe972e8347f6aa1c321e0af781e00e940c73a92ca45d7cc9c0c64",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51598", "10.65.0.27:51598", "172.17.0.1:51598"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:56.642493741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7836399511742599,
-				"StableID":   "nAz4Nmv7C421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-				"DiscoKey":   "discokey:eafd15f4f84c56decb1094ab75cace09e49a7b1d690d0a05b7c33401014b2760",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37267", "10.65.0.27:37267", "172.17.0.1:37267"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:57.142413331Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4850194264353995,
-				"StableID":   "n8qzRyNfse11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-				"DiscoKey":   "discokey:6b28f287dd0daf1901bbf1466ad43f53dc0c332478fb19cb0b86319df5f4e16e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39253", "10.65.0.27:39253", "172.17.0.1:39253"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:57.676761493Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2188084749259813,
-				"StableID":   "nC4nY1Hz5J11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:816f97dcf2a4aea71a8aaf1cb3d5f7372db893d0afb7c1c605ecbf5f09b7a96d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36165", "10.65.0.27:36165", "172.17.0.1:36165"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:58.197618719Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         458085746837951,
-				"StableID":   "niApos8Ua411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:b5b957561436517a0e2ddcabf27e47c4e094dc7c692111adf0580ce5d1dc2f3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:40115", "10.65.0.27:40115", "172.17.0.1:40115"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:58.720872409Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4738518319844333,
-				"StableID":   "n2bbdnq51e11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-				"KeyExpiry":  "2026-11-03T08:07:59Z",
-				"DiscoKey":   "discokey:1d9be130ae8e38da18d9a56f589d01f6aaaabef11f379061f29c8496ea55a215",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46102", "10.65.0.27:46102", "172.17.0.1:46102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:59.255862543Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8578592627193301": {
-				"ID":          8578592627193301,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2188084749259813,
-				"StableID":   "nC4nY1Hz5J11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:816f97dcf2a4aea71a8aaf1cb3d5f7372db893d0afb7c1c605ecbf5f09b7a96d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36165", "10.65.0.27:36165", "172.17.0.1:36165"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:58.197618719Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-			"MachineKey": "mkey:1f0e99a961bb87c5fa03040203551f7665482cf64549653ad27d24e79151e11c",
-			"Peers": [{
-				"ID":         5427561382775614,
-				"StableID":   "n3FwaNq9Pj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-				"DiscoKey":   "discokey:290b48d9a3ce078d4e39d1eb4432d4d9ec40656820ab63ffca1bf0759576f121",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:49075", "10.65.0.27:49075", "172.17.0.1:49075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:55.542153202Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8578592627193301,
-				"StableID":   "nGeNTj5Gz921CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-				"DiscoKey":   "discokey:a28b1f573df4888478aabade03390a3a6d4eb5ca35a8abf35927fabb6eb3721c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57345", "10.65.0.27:57345", "172.17.0.1:57345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:56.074646976Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3226969977639554,
-				"StableID":   "nXXhgh2WCS11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-				"DiscoKey":   "discokey:2b54a47ba29fe972e8347f6aa1c321e0af781e00e940c73a92ca45d7cc9c0c64",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51598", "10.65.0.27:51598", "172.17.0.1:51598"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:56.642493741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7836399511742599,
-				"StableID":   "nAz4Nmv7C421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-				"DiscoKey":   "discokey:eafd15f4f84c56decb1094ab75cace09e49a7b1d690d0a05b7c33401014b2760",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37267", "10.65.0.27:37267", "172.17.0.1:37267"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:57.142413331Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4850194264353995,
-				"StableID":   "n8qzRyNfse11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-				"DiscoKey":   "discokey:6b28f287dd0daf1901bbf1466ad43f53dc0c332478fb19cb0b86319df5f4e16e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39253", "10.65.0.27:39253", "172.17.0.1:39253"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:57.676761493Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         458085746837951,
-				"StableID":   "niApos8Ua411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:b5b957561436517a0e2ddcabf27e47c4e094dc7c692111adf0580ce5d1dc2f3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:40115", "10.65.0.27:40115", "172.17.0.1:40115"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:58.720872409Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4738518319844333,
-				"StableID":   "n2bbdnq51e11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-				"KeyExpiry":  "2026-11-03T08:07:59Z",
-				"DiscoKey":   "discokey:1d9be130ae8e38da18d9a56f589d01f6aaaabef11f379061f29c8496ea55a215",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46102", "10.65.0.27:46102", "172.17.0.1:46102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:59.255862543Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3226969977639554,
-				"StableID":   "nXXhgh2WCS11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       3226969977639554,
-				"Key":        "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-				"DiscoKey":   "discokey:2b54a47ba29fe972e8347f6aa1c321e0af781e00e940c73a92ca45d7cc9c0c64",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51598", "10.65.0.27:51598", "172.17.0.1:51598"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:56.642493741Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-			"MachineKey": "mkey:38d85be2f217c3faa9810f675d8d65653cedef5f0a93d71c904158fb3b035115",
-			"Peers": [{
-				"ID":         5427561382775614,
-				"StableID":   "n3FwaNq9Pj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-				"DiscoKey":   "discokey:290b48d9a3ce078d4e39d1eb4432d4d9ec40656820ab63ffca1bf0759576f121",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:49075", "10.65.0.27:49075", "172.17.0.1:49075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:55.542153202Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8578592627193301,
-				"StableID":   "nGeNTj5Gz921CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-				"DiscoKey":   "discokey:a28b1f573df4888478aabade03390a3a6d4eb5ca35a8abf35927fabb6eb3721c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57345", "10.65.0.27:57345", "172.17.0.1:57345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:56.074646976Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7836399511742599,
-				"StableID":   "nAz4Nmv7C421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-				"DiscoKey":   "discokey:eafd15f4f84c56decb1094ab75cace09e49a7b1d690d0a05b7c33401014b2760",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37267", "10.65.0.27:37267", "172.17.0.1:37267"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:57.142413331Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4850194264353995,
-				"StableID":   "n8qzRyNfse11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-				"DiscoKey":   "discokey:6b28f287dd0daf1901bbf1466ad43f53dc0c332478fb19cb0b86319df5f4e16e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39253", "10.65.0.27:39253", "172.17.0.1:39253"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:57.676761493Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2188084749259813,
-				"StableID":   "nC4nY1Hz5J11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:816f97dcf2a4aea71a8aaf1cb3d5f7372db893d0afb7c1c605ecbf5f09b7a96d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36165", "10.65.0.27:36165", "172.17.0.1:36165"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:58.197618719Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         458085746837951,
-				"StableID":   "niApos8Ua411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:b5b957561436517a0e2ddcabf27e47c4e094dc7c692111adf0580ce5d1dc2f3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:40115", "10.65.0.27:40115", "172.17.0.1:40115"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:58.720872409Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4738518319844333,
-				"StableID":   "n2bbdnq51e11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-				"KeyExpiry":  "2026-11-03T08:07:59Z",
-				"DiscoKey":   "discokey:1d9be130ae8e38da18d9a56f589d01f6aaaabef11f379061f29c8496ea55a215",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46102", "10.65.0.27:46102", "172.17.0.1:46102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:59.255862543Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3226969977639554": {
-				"ID":          3226969977639554,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7836399511742599,
-				"StableID":   "nAz4Nmv7C421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       7836399511742599,
-				"Key":        "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-				"DiscoKey":   "discokey:eafd15f4f84c56decb1094ab75cace09e49a7b1d690d0a05b7c33401014b2760",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37267", "10.65.0.27:37267", "172.17.0.1:37267"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:07:57.142413331Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-			"MachineKey": "mkey:3a93bca6d86ff708c9c1bfc36ef9e0edaabd1e36293fabf62f5468136a58606a",
-			"Peers": [{
-				"ID":         5427561382775614,
-				"StableID":   "n3FwaNq9Pj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-				"DiscoKey":   "discokey:290b48d9a3ce078d4e39d1eb4432d4d9ec40656820ab63ffca1bf0759576f121",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:49075", "10.65.0.27:49075", "172.17.0.1:49075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:55.542153202Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8578592627193301,
-				"StableID":   "nGeNTj5Gz921CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-				"DiscoKey":   "discokey:a28b1f573df4888478aabade03390a3a6d4eb5ca35a8abf35927fabb6eb3721c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57345", "10.65.0.27:57345", "172.17.0.1:57345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:56.074646976Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3226969977639554,
-				"StableID":   "nXXhgh2WCS11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-				"DiscoKey":   "discokey:2b54a47ba29fe972e8347f6aa1c321e0af781e00e940c73a92ca45d7cc9c0c64",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51598", "10.65.0.27:51598", "172.17.0.1:51598"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:56.642493741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4850194264353995,
-				"StableID":   "n8qzRyNfse11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-				"DiscoKey":   "discokey:6b28f287dd0daf1901bbf1466ad43f53dc0c332478fb19cb0b86319df5f4e16e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39253", "10.65.0.27:39253", "172.17.0.1:39253"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:57.676761493Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2188084749259813,
-				"StableID":   "nC4nY1Hz5J11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:816f97dcf2a4aea71a8aaf1cb3d5f7372db893d0afb7c1c605ecbf5f09b7a96d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36165", "10.65.0.27:36165", "172.17.0.1:36165"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:58.197618719Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         458085746837951,
-				"StableID":   "niApos8Ua411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:b5b957561436517a0e2ddcabf27e47c4e094dc7c692111adf0580ce5d1dc2f3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:40115", "10.65.0.27:40115", "172.17.0.1:40115"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:58.720872409Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4738518319844333,
-				"StableID":   "n2bbdnq51e11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-				"KeyExpiry":  "2026-11-03T08:07:59Z",
-				"DiscoKey":   "discokey:1d9be130ae8e38da18d9a56f589d01f6aaaabef11f379061f29c8496ea55a215",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46102", "10.65.0.27:46102", "172.17.0.1:46102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:59.255862543Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7836399511742599": {
-				"ID":          7836399511742599,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4850194264353995,
-				"StableID":   "n8qzRyNfse11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       4850194264353995,
-				"Key":        "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-				"DiscoKey":   "discokey:6b28f287dd0daf1901bbf1466ad43f53dc0c332478fb19cb0b86319df5f4e16e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39253", "10.65.0.27:39253", "172.17.0.1:39253"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:57.676761493Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"custom:headscale-test":                  null,
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"custom:headscale-test",
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-			"MachineKey": "mkey:d385b7a36ca6097208f8eb5a19c3f7f6818de8759ffa1806c746de042a5ead5b",
-			"Peers": [{
-				"ID":         5427561382775614,
-				"StableID":   "n3FwaNq9Pj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-				"DiscoKey":   "discokey:290b48d9a3ce078d4e39d1eb4432d4d9ec40656820ab63ffca1bf0759576f121",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:49075", "10.65.0.27:49075", "172.17.0.1:49075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:55.542153202Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8578592627193301,
-				"StableID":   "nGeNTj5Gz921CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-				"DiscoKey":   "discokey:a28b1f573df4888478aabade03390a3a6d4eb5ca35a8abf35927fabb6eb3721c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57345", "10.65.0.27:57345", "172.17.0.1:57345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:56.074646976Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3226969977639554,
-				"StableID":   "nXXhgh2WCS11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-				"DiscoKey":   "discokey:2b54a47ba29fe972e8347f6aa1c321e0af781e00e940c73a92ca45d7cc9c0c64",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51598", "10.65.0.27:51598", "172.17.0.1:51598"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:56.642493741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7836399511742599,
-				"StableID":   "nAz4Nmv7C421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-				"DiscoKey":   "discokey:eafd15f4f84c56decb1094ab75cace09e49a7b1d690d0a05b7c33401014b2760",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37267", "10.65.0.27:37267", "172.17.0.1:37267"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:57.142413331Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2188084749259813,
-				"StableID":   "nC4nY1Hz5J11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:816f97dcf2a4aea71a8aaf1cb3d5f7372db893d0afb7c1c605ecbf5f09b7a96d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36165", "10.65.0.27:36165", "172.17.0.1:36165"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:58.197618719Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         458085746837951,
-				"StableID":   "niApos8Ua411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:b5b957561436517a0e2ddcabf27e47c4e094dc7c692111adf0580ce5d1dc2f3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:40115", "10.65.0.27:40115", "172.17.0.1:40115"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:58.720872409Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4738518319844333,
-				"StableID":   "n2bbdnq51e11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-				"KeyExpiry":  "2026-11-03T08:07:59Z",
-				"DiscoKey":   "discokey:1d9be130ae8e38da18d9a56f589d01f6aaaabef11f379061f29c8496ea55a215",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46102", "10.65.0.27:46102", "172.17.0.1:46102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:59.255862543Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4850194264353995": {
-				"ID":          4850194264353995,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4738518319844333,
-				"StableID":   "n2bbdnq51e11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-				"KeyExpiry":  "2026-11-03T08:07:59Z",
-				"DiscoKey":   "discokey:1d9be130ae8e38da18d9a56f589d01f6aaaabef11f379061f29c8496ea55a215",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46102", "10.65.0.27:46102", "172.17.0.1:46102"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:59.255862543Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-			"MachineKey": "mkey:1e64b526b883dde4545fb47888a1d18e8df43ca84cb406bcc1b20dfa934cd874",
-			"Peers": [{
-				"ID":         5427561382775614,
-				"StableID":   "n3FwaNq9Pj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-				"DiscoKey":   "discokey:290b48d9a3ce078d4e39d1eb4432d4d9ec40656820ab63ffca1bf0759576f121",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:49075", "10.65.0.27:49075", "172.17.0.1:49075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:55.542153202Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8578592627193301,
-				"StableID":   "nGeNTj5Gz921CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-				"DiscoKey":   "discokey:a28b1f573df4888478aabade03390a3a6d4eb5ca35a8abf35927fabb6eb3721c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57345", "10.65.0.27:57345", "172.17.0.1:57345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:56.074646976Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3226969977639554,
-				"StableID":   "nXXhgh2WCS11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-				"DiscoKey":   "discokey:2b54a47ba29fe972e8347f6aa1c321e0af781e00e940c73a92ca45d7cc9c0c64",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51598", "10.65.0.27:51598", "172.17.0.1:51598"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:56.642493741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7836399511742599,
-				"StableID":   "nAz4Nmv7C421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-				"DiscoKey":   "discokey:eafd15f4f84c56decb1094ab75cace09e49a7b1d690d0a05b7c33401014b2760",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37267", "10.65.0.27:37267", "172.17.0.1:37267"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:57.142413331Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4850194264353995,
-				"StableID":   "n8qzRyNfse11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-				"DiscoKey":   "discokey:6b28f287dd0daf1901bbf1466ad43f53dc0c332478fb19cb0b86319df5f4e16e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39253", "10.65.0.27:39253", "172.17.0.1:39253"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:57.676761493Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2188084749259813,
-				"StableID":   "nC4nY1Hz5J11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:816f97dcf2a4aea71a8aaf1cb3d5f7372db893d0afb7c1c605ecbf5f09b7a96d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36165", "10.65.0.27:36165", "172.17.0.1:36165"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:58.197618719Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         458085746837951,
-				"StableID":   "niApos8Ua411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:b5b957561436517a0e2ddcabf27e47c4e094dc7c692111adf0580ce5d1dc2f3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:40115", "10.65.0.27:40115", "172.17.0.1:40115"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:07:58.720872409Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         458085746837951,
-				"StableID":   "niApos8Ua411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:b5b957561436517a0e2ddcabf27e47c4e094dc7c692111adf0580ce5d1dc2f3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:40115", "10.65.0.27:40115", "172.17.0.1:40115"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:07:58.720872409Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8c634b4ed84cf49e4b08a1f9f327c690564e0d27972752210402603431405b47",
-			"MachineKey": "mkey:3ace8e4653f7f5894b1d3b69986a382114fb5c981f29b13dbc5082f6ebba1e31",
-			"Peers": [{
-				"ID":         5427561382775614,
-				"StableID":   "n3FwaNq9Pj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ef3e2d49e225e913966cd1da9b0c0aab1f94ea53e6b3281f30e1669a3715cb06",
-				"DiscoKey":   "discokey:290b48d9a3ce078d4e39d1eb4432d4d9ec40656820ab63ffca1bf0759576f121",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:49075", "10.65.0.27:49075", "172.17.0.1:49075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:07:55.542153202Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8578592627193301,
-				"StableID":   "nGeNTj5Gz921CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cef2a6f605b49fee1c1b6c920d077678fefe0e6c7c6371e7316872a4f6aef12",
-				"DiscoKey":   "discokey:a28b1f573df4888478aabade03390a3a6d4eb5ca35a8abf35927fabb6eb3721c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57345", "10.65.0.27:57345", "172.17.0.1:57345"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:07:56.074646976Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3226969977639554,
-				"StableID":   "nXXhgh2WCS11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:372fd36d7326c38bdb17194b29fc827370eebe7dc46d946a759cfd4856ca376d",
-				"DiscoKey":   "discokey:2b54a47ba29fe972e8347f6aa1c321e0af781e00e940c73a92ca45d7cc9c0c64",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51598", "10.65.0.27:51598", "172.17.0.1:51598"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:07:56.642493741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7836399511742599,
-				"StableID":   "nAz4Nmv7C421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3c58ac7f3114a78f2c2e1c567b5b1a3a7a81403a47295ae09cc0a9eaf95df39",
-				"DiscoKey":   "discokey:eafd15f4f84c56decb1094ab75cace09e49a7b1d690d0a05b7c33401014b2760",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37267", "10.65.0.27:37267", "172.17.0.1:37267"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:07:57.142413331Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4850194264353995,
-				"StableID":   "n8qzRyNfse11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b3d01cffcc26a347ffae9da01ac6b303f4afd9351198ebd3f03566f8219a8964",
-				"DiscoKey":   "discokey:6b28f287dd0daf1901bbf1466ad43f53dc0c332478fb19cb0b86319df5f4e16e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39253", "10.65.0.27:39253", "172.17.0.1:39253"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:07:57.676761493Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2188084749259813,
-				"StableID":   "nC4nY1Hz5J11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6cb653a26759ae77fe8f6244b6186fa5e1770769e0b3830c3297343dc324e775",
-				"KeyExpiry":  "2026-11-03T08:07:58Z",
-				"DiscoKey":   "discokey:816f97dcf2a4aea71a8aaf1cb3d5f7372db893d0afb7c1c605ecbf5f09b7a96d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36165", "10.65.0.27:36165", "172.17.0.1:36165"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:07:58.197618719Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4738518319844333,
-				"StableID":   "n2bbdnq51e11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:55d88915afd134c7eff9fcb88b24accd50c9dbad2ec10e7fa81620e761093a2c",
-				"KeyExpiry":  "2026-11-03T08:07:59Z",
-				"DiscoKey":   "discokey:1d9be130ae8e38da18d9a56f589d01f6aaaabef11f379061f29c8496ea55a215",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:46102", "10.65.0.27:46102", "172.17.0.1:46102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:07:59.255862543Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c12-cap-with-query.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c12-cap-with-query.hujson
deleted file mode 100644
index 31d6c22a2..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c12-cap-with-query.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-attr-c12-cap-with-query
-//
-// operator-supplied cap with query string
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:08:30Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c12-cap-with-query",
-	"description":    "operator-supplied cap with query string",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:08:30.325747102Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                    \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"operator-supplied cap with query string\",\n    \"id\": \"nodeattrs-attr-c12-cap-with-query\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"https://example.com/cap/test?value=42\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c12-cap-with-query.hujson",
-		"full_policy": {"nodeAttrs": [{
-			"attr":   ["https://example.com/cap/test?value=42"],
-			"target": ["tag:server"]
-		}], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6207465451937003,
-				"StableID":   "nxBDXJbNUq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       6207465451937003,
-				"Key":        "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-				"DiscoKey":   "discokey:4961c6df45875c4936ee21c2ab6c69e5bc7287fd68ce3ca7289ddd75a7b9d31c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:41244", "10.65.0.27:41244", "172.17.0.1:41244"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:08:35.749696895Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-			"MachineKey": "mkey:3e9c5e29cbffaee351a3299af36fc84b6e5f70cda13468931dfa1cc7567c4d39",
-			"Peers": [{
-				"ID":         2001555191997345,
-				"StableID":   "nJ7AKjTWdG11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-				"DiscoKey":   "discokey:e27a9e73e6f74e66dc0c53abdd51fac9124be116dacfc5ae13aaa24734739847",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:38380", "10.65.0.27:38380", "172.17.0.1:38380"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:08:36.278813928Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1238104572113096,
-				"StableID":   "n5hAMeujfA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-				"DiscoKey":   "discokey:420470db72285a13b91278e34e751944f884268e286c04c9d3be586328b56350",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51082", "10.65.0.27:51082", "172.17.0.1:51082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:08:36.816605053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8516549626771466,
-				"StableID":   "nXutxPKAW921CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-				"DiscoKey":   "discokey:358b15b38272fb7b5e9323c66cc314776ee32ddc637912d8708ddcc361d76106",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51147", "10.65.0.27:51147", "172.17.0.1:51147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:08:37.356054334Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6121058746179917,
-				"StableID":   "ng2WpMqEop11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-				"DiscoKey":   "discokey:cf96047801b117b4a09d45190ec29d5a1f6947ce46f642bce7ccffadcc0ddb2a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53763", "10.65.0.27:53763", "172.17.0.1:53763"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:08:38.203520257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8772827808768110,
-				"StableID":   "nFjkK1KEWB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-				"KeyExpiry":  "2026-11-03T08:08:38Z",
-				"DiscoKey":   "discokey:fd049ab604036fc5e309e1b61b688bac5d88daa5c8accb50276275a548c44d37",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46753", "10.65.0.27:46753", "172.17.0.1:46753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:08:38.67495449Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3060309828243579,
-				"StableID":   "nnW2zg92uQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:12a6c6dbfa1f965ac03c5df9f5f5e2007d0311323f2157d7c0fda75684ef4047",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49028", "10.65.0.27:49028", "172.17.0.1:49028"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:08:39.209251635Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6070733255429221,
-				"StableID":   "ngcuXNsSQp11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:29142f2df5295108ed719f23a6677c0c3d2277fab091f0da3af8245d337f2805",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49968", "10.65.0.27:49968", "172.17.0.1:49968"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:08:39.753834502Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6207465451937003": {
-				"ID":          6207465451937003,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2001555191997345,
-				"StableID":   "nJ7AKjTWdG11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       2001555191997345,
-				"Key":        "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-				"DiscoKey":   "discokey:e27a9e73e6f74e66dc0c53abdd51fac9124be116dacfc5ae13aaa24734739847",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:38380", "10.65.0.27:38380", "172.17.0.1:38380"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:08:36.278813928Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-			"MachineKey": "mkey:61216fa7ca5f3e541f1ac8296d4230e061a296cf6134bf8fe161286e70f54c38",
-			"Peers": [{
-				"ID":         6207465451937003,
-				"StableID":   "nxBDXJbNUq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-				"DiscoKey":   "discokey:4961c6df45875c4936ee21c2ab6c69e5bc7287fd68ce3ca7289ddd75a7b9d31c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:41244", "10.65.0.27:41244", "172.17.0.1:41244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:08:35.749696895Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1238104572113096,
-				"StableID":   "n5hAMeujfA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-				"DiscoKey":   "discokey:420470db72285a13b91278e34e751944f884268e286c04c9d3be586328b56350",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51082", "10.65.0.27:51082", "172.17.0.1:51082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:08:36.816605053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8516549626771466,
-				"StableID":   "nXutxPKAW921CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-				"DiscoKey":   "discokey:358b15b38272fb7b5e9323c66cc314776ee32ddc637912d8708ddcc361d76106",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51147", "10.65.0.27:51147", "172.17.0.1:51147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:08:37.356054334Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6121058746179917,
-				"StableID":   "ng2WpMqEop11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-				"DiscoKey":   "discokey:cf96047801b117b4a09d45190ec29d5a1f6947ce46f642bce7ccffadcc0ddb2a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53763", "10.65.0.27:53763", "172.17.0.1:53763"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:08:38.203520257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8772827808768110,
-				"StableID":   "nFjkK1KEWB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-				"KeyExpiry":  "2026-11-03T08:08:38Z",
-				"DiscoKey":   "discokey:fd049ab604036fc5e309e1b61b688bac5d88daa5c8accb50276275a548c44d37",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46753", "10.65.0.27:46753", "172.17.0.1:46753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:08:38.67495449Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3060309828243579,
-				"StableID":   "nnW2zg92uQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:12a6c6dbfa1f965ac03c5df9f5f5e2007d0311323f2157d7c0fda75684ef4047",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49028", "10.65.0.27:49028", "172.17.0.1:49028"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:08:39.209251635Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6070733255429221,
-				"StableID":   "ngcuXNsSQp11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:29142f2df5295108ed719f23a6677c0c3d2277fab091f0da3af8245d337f2805",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49968", "10.65.0.27:49968", "172.17.0.1:49968"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:08:39.753834502Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2001555191997345": {
-				"ID":          2001555191997345,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8772827808768110,
-				"StableID":   "nFjkK1KEWB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-				"KeyExpiry":  "2026-11-03T08:08:38Z",
-				"DiscoKey":   "discokey:fd049ab604036fc5e309e1b61b688bac5d88daa5c8accb50276275a548c44d37",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46753", "10.65.0.27:46753", "172.17.0.1:46753"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:08:38.67495449Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-			"MachineKey": "mkey:8ec378618c515e167871180ad972a5050ef403367375dae13ff4d49b05b84c12",
-			"Peers": [{
-				"ID":         6207465451937003,
-				"StableID":   "nxBDXJbNUq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-				"DiscoKey":   "discokey:4961c6df45875c4936ee21c2ab6c69e5bc7287fd68ce3ca7289ddd75a7b9d31c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:41244", "10.65.0.27:41244", "172.17.0.1:41244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:08:35.749696895Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2001555191997345,
-				"StableID":   "nJ7AKjTWdG11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-				"DiscoKey":   "discokey:e27a9e73e6f74e66dc0c53abdd51fac9124be116dacfc5ae13aaa24734739847",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:38380", "10.65.0.27:38380", "172.17.0.1:38380"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:08:36.278813928Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1238104572113096,
-				"StableID":   "n5hAMeujfA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-				"DiscoKey":   "discokey:420470db72285a13b91278e34e751944f884268e286c04c9d3be586328b56350",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51082", "10.65.0.27:51082", "172.17.0.1:51082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:08:36.816605053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8516549626771466,
-				"StableID":   "nXutxPKAW921CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-				"DiscoKey":   "discokey:358b15b38272fb7b5e9323c66cc314776ee32ddc637912d8708ddcc361d76106",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51147", "10.65.0.27:51147", "172.17.0.1:51147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:08:37.356054334Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6121058746179917,
-				"StableID":   "ng2WpMqEop11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-				"DiscoKey":   "discokey:cf96047801b117b4a09d45190ec29d5a1f6947ce46f642bce7ccffadcc0ddb2a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53763", "10.65.0.27:53763", "172.17.0.1:53763"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:08:38.203520257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3060309828243579,
-				"StableID":   "nnW2zg92uQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:12a6c6dbfa1f965ac03c5df9f5f5e2007d0311323f2157d7c0fda75684ef4047",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49028", "10.65.0.27:49028", "172.17.0.1:49028"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:08:39.209251635Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6070733255429221,
-				"StableID":   "ngcuXNsSQp11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:29142f2df5295108ed719f23a6677c0c3d2277fab091f0da3af8245d337f2805",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49968", "10.65.0.27:49968", "172.17.0.1:49968"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:08:39.753834502Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1238104572113096,
-				"StableID":   "n5hAMeujfA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1238104572113096,
-				"Key":        "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-				"DiscoKey":   "discokey:420470db72285a13b91278e34e751944f884268e286c04c9d3be586328b56350",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51082", "10.65.0.27:51082", "172.17.0.1:51082"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:08:36.816605053Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-			"MachineKey": "mkey:7489aa806fa90d598a42a1d849437df7cb1708df273330779eb17c6f531bcd05",
-			"Peers": [{
-				"ID":         6207465451937003,
-				"StableID":   "nxBDXJbNUq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-				"DiscoKey":   "discokey:4961c6df45875c4936ee21c2ab6c69e5bc7287fd68ce3ca7289ddd75a7b9d31c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:41244", "10.65.0.27:41244", "172.17.0.1:41244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:08:35.749696895Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2001555191997345,
-				"StableID":   "nJ7AKjTWdG11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-				"DiscoKey":   "discokey:e27a9e73e6f74e66dc0c53abdd51fac9124be116dacfc5ae13aaa24734739847",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:38380", "10.65.0.27:38380", "172.17.0.1:38380"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:08:36.278813928Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8516549626771466,
-				"StableID":   "nXutxPKAW921CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-				"DiscoKey":   "discokey:358b15b38272fb7b5e9323c66cc314776ee32ddc637912d8708ddcc361d76106",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51147", "10.65.0.27:51147", "172.17.0.1:51147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:08:37.356054334Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6121058746179917,
-				"StableID":   "ng2WpMqEop11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-				"DiscoKey":   "discokey:cf96047801b117b4a09d45190ec29d5a1f6947ce46f642bce7ccffadcc0ddb2a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53763", "10.65.0.27:53763", "172.17.0.1:53763"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:08:38.203520257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8772827808768110,
-				"StableID":   "nFjkK1KEWB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-				"KeyExpiry":  "2026-11-03T08:08:38Z",
-				"DiscoKey":   "discokey:fd049ab604036fc5e309e1b61b688bac5d88daa5c8accb50276275a548c44d37",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46753", "10.65.0.27:46753", "172.17.0.1:46753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:08:38.67495449Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3060309828243579,
-				"StableID":   "nnW2zg92uQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:12a6c6dbfa1f965ac03c5df9f5f5e2007d0311323f2157d7c0fda75684ef4047",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49028", "10.65.0.27:49028", "172.17.0.1:49028"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:08:39.209251635Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6070733255429221,
-				"StableID":   "ngcuXNsSQp11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:29142f2df5295108ed719f23a6677c0c3d2277fab091f0da3af8245d337f2805",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49968", "10.65.0.27:49968", "172.17.0.1:49968"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:08:39.753834502Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1238104572113096": {
-				"ID":          1238104572113096,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8516549626771466,
-				"StableID":   "nXutxPKAW921CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       8516549626771466,
-				"Key":        "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-				"DiscoKey":   "discokey:358b15b38272fb7b5e9323c66cc314776ee32ddc637912d8708ddcc361d76106",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51147", "10.65.0.27:51147", "172.17.0.1:51147"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:08:37.356054334Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-			"MachineKey": "mkey:d7e2200ff84fe8d64e44cc5846514b0a36455c5edc469c3f14e3d12111c0ca6b",
-			"Peers": [{
-				"ID":         6207465451937003,
-				"StableID":   "nxBDXJbNUq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-				"DiscoKey":   "discokey:4961c6df45875c4936ee21c2ab6c69e5bc7287fd68ce3ca7289ddd75a7b9d31c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:41244", "10.65.0.27:41244", "172.17.0.1:41244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:08:35.749696895Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2001555191997345,
-				"StableID":   "nJ7AKjTWdG11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-				"DiscoKey":   "discokey:e27a9e73e6f74e66dc0c53abdd51fac9124be116dacfc5ae13aaa24734739847",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:38380", "10.65.0.27:38380", "172.17.0.1:38380"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:08:36.278813928Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1238104572113096,
-				"StableID":   "n5hAMeujfA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-				"DiscoKey":   "discokey:420470db72285a13b91278e34e751944f884268e286c04c9d3be586328b56350",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51082", "10.65.0.27:51082", "172.17.0.1:51082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:08:36.816605053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6121058746179917,
-				"StableID":   "ng2WpMqEop11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-				"DiscoKey":   "discokey:cf96047801b117b4a09d45190ec29d5a1f6947ce46f642bce7ccffadcc0ddb2a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53763", "10.65.0.27:53763", "172.17.0.1:53763"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:08:38.203520257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8772827808768110,
-				"StableID":   "nFjkK1KEWB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-				"KeyExpiry":  "2026-11-03T08:08:38Z",
-				"DiscoKey":   "discokey:fd049ab604036fc5e309e1b61b688bac5d88daa5c8accb50276275a548c44d37",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46753", "10.65.0.27:46753", "172.17.0.1:46753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:08:38.67495449Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3060309828243579,
-				"StableID":   "nnW2zg92uQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:12a6c6dbfa1f965ac03c5df9f5f5e2007d0311323f2157d7c0fda75684ef4047",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49028", "10.65.0.27:49028", "172.17.0.1:49028"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:08:39.209251635Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6070733255429221,
-				"StableID":   "ngcuXNsSQp11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:29142f2df5295108ed719f23a6677c0c3d2277fab091f0da3af8245d337f2805",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49968", "10.65.0.27:49968", "172.17.0.1:49968"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:08:39.753834502Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8516549626771466": {
-				"ID":          8516549626771466,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6121058746179917,
-				"StableID":   "ng2WpMqEop11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       6121058746179917,
-				"Key":        "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-				"DiscoKey":   "discokey:cf96047801b117b4a09d45190ec29d5a1f6947ce46f642bce7ccffadcc0ddb2a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53763", "10.65.0.27:53763", "172.17.0.1:53763"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:08:38.203520257Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://example.com/cap/test?value=42":  null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://example.com/cap/test?value=42",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-			"MachineKey": "mkey:1a623cf47524aeb4815db94855facbab58aec8356e8058658421f4ef84e0603b",
-			"Peers": [{
-				"ID":         6207465451937003,
-				"StableID":   "nxBDXJbNUq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-				"DiscoKey":   "discokey:4961c6df45875c4936ee21c2ab6c69e5bc7287fd68ce3ca7289ddd75a7b9d31c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:41244", "10.65.0.27:41244", "172.17.0.1:41244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:08:35.749696895Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2001555191997345,
-				"StableID":   "nJ7AKjTWdG11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-				"DiscoKey":   "discokey:e27a9e73e6f74e66dc0c53abdd51fac9124be116dacfc5ae13aaa24734739847",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:38380", "10.65.0.27:38380", "172.17.0.1:38380"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:08:36.278813928Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1238104572113096,
-				"StableID":   "n5hAMeujfA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-				"DiscoKey":   "discokey:420470db72285a13b91278e34e751944f884268e286c04c9d3be586328b56350",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51082", "10.65.0.27:51082", "172.17.0.1:51082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:08:36.816605053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8516549626771466,
-				"StableID":   "nXutxPKAW921CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-				"DiscoKey":   "discokey:358b15b38272fb7b5e9323c66cc314776ee32ddc637912d8708ddcc361d76106",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51147", "10.65.0.27:51147", "172.17.0.1:51147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:08:37.356054334Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8772827808768110,
-				"StableID":   "nFjkK1KEWB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-				"KeyExpiry":  "2026-11-03T08:08:38Z",
-				"DiscoKey":   "discokey:fd049ab604036fc5e309e1b61b688bac5d88daa5c8accb50276275a548c44d37",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46753", "10.65.0.27:46753", "172.17.0.1:46753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:08:38.67495449Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3060309828243579,
-				"StableID":   "nnW2zg92uQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:12a6c6dbfa1f965ac03c5df9f5f5e2007d0311323f2157d7c0fda75684ef4047",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49028", "10.65.0.27:49028", "172.17.0.1:49028"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:08:39.209251635Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6070733255429221,
-				"StableID":   "ngcuXNsSQp11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:29142f2df5295108ed719f23a6677c0c3d2277fab091f0da3af8245d337f2805",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49968", "10.65.0.27:49968", "172.17.0.1:49968"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:08:39.753834502Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6121058746179917": {
-				"ID":          6121058746179917,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6070733255429221,
-				"StableID":   "ngcuXNsSQp11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:29142f2df5295108ed719f23a6677c0c3d2277fab091f0da3af8245d337f2805",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49968", "10.65.0.27:49968", "172.17.0.1:49968"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:08:39.753834502Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-			"MachineKey": "mkey:4bf1444f442086264e70c5a26845144d655a38d9fc7e6a04526fe30f504f256b",
-			"Peers": [{
-				"ID":         6207465451937003,
-				"StableID":   "nxBDXJbNUq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-				"DiscoKey":   "discokey:4961c6df45875c4936ee21c2ab6c69e5bc7287fd68ce3ca7289ddd75a7b9d31c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:41244", "10.65.0.27:41244", "172.17.0.1:41244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:08:35.749696895Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2001555191997345,
-				"StableID":   "nJ7AKjTWdG11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-				"DiscoKey":   "discokey:e27a9e73e6f74e66dc0c53abdd51fac9124be116dacfc5ae13aaa24734739847",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:38380", "10.65.0.27:38380", "172.17.0.1:38380"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:08:36.278813928Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1238104572113096,
-				"StableID":   "n5hAMeujfA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-				"DiscoKey":   "discokey:420470db72285a13b91278e34e751944f884268e286c04c9d3be586328b56350",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51082", "10.65.0.27:51082", "172.17.0.1:51082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:08:36.816605053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8516549626771466,
-				"StableID":   "nXutxPKAW921CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-				"DiscoKey":   "discokey:358b15b38272fb7b5e9323c66cc314776ee32ddc637912d8708ddcc361d76106",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51147", "10.65.0.27:51147", "172.17.0.1:51147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:08:37.356054334Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6121058746179917,
-				"StableID":   "ng2WpMqEop11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-				"DiscoKey":   "discokey:cf96047801b117b4a09d45190ec29d5a1f6947ce46f642bce7ccffadcc0ddb2a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53763", "10.65.0.27:53763", "172.17.0.1:53763"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:08:38.203520257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8772827808768110,
-				"StableID":   "nFjkK1KEWB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-				"KeyExpiry":  "2026-11-03T08:08:38Z",
-				"DiscoKey":   "discokey:fd049ab604036fc5e309e1b61b688bac5d88daa5c8accb50276275a548c44d37",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46753", "10.65.0.27:46753", "172.17.0.1:46753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:08:38.67495449Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3060309828243579,
-				"StableID":   "nnW2zg92uQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:12a6c6dbfa1f965ac03c5df9f5f5e2007d0311323f2157d7c0fda75684ef4047",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49028", "10.65.0.27:49028", "172.17.0.1:49028"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:08:39.209251635Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3060309828243579,
-				"StableID":   "nnW2zg92uQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:12a6c6dbfa1f965ac03c5df9f5f5e2007d0311323f2157d7c0fda75684ef4047",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49028", "10.65.0.27:49028", "172.17.0.1:49028"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:08:39.209251635Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4dc384b7c29eaf4c5675b1c1fdaf25b23dc1acba58428be2c7ccd31894f45e37",
-			"MachineKey": "mkey:06ba6ad87a60eabb2bf06a4aa1b5c74306ddc4c52cba1423446fd37e5ce85321",
-			"Peers": [{
-				"ID":         6207465451937003,
-				"StableID":   "nxBDXJbNUq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0dfe9806f2c8db6d02c9bd707b28bf33e016bf7aa84b086b38b565fa774fb17",
-				"DiscoKey":   "discokey:4961c6df45875c4936ee21c2ab6c69e5bc7287fd68ce3ca7289ddd75a7b9d31c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:41244", "10.65.0.27:41244", "172.17.0.1:41244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:08:35.749696895Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2001555191997345,
-				"StableID":   "nJ7AKjTWdG11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ea746a309c195a7c10d37fa1ff3a95ee846b8f10ed1e38e0db4301a389b6f923",
-				"DiscoKey":   "discokey:e27a9e73e6f74e66dc0c53abdd51fac9124be116dacfc5ae13aaa24734739847",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:38380", "10.65.0.27:38380", "172.17.0.1:38380"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:08:36.278813928Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1238104572113096,
-				"StableID":   "n5hAMeujfA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a59825f7e882b7047314c73d3a31cab172eddf0eba97610eacdc30ffc88b7e50",
-				"DiscoKey":   "discokey:420470db72285a13b91278e34e751944f884268e286c04c9d3be586328b56350",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51082", "10.65.0.27:51082", "172.17.0.1:51082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:08:36.816605053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8516549626771466,
-				"StableID":   "nXutxPKAW921CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61a5bc07c7c93beb7869dc95a0e8514ab27a6bee64a63600779ad84512f51544",
-				"DiscoKey":   "discokey:358b15b38272fb7b5e9323c66cc314776ee32ddc637912d8708ddcc361d76106",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51147", "10.65.0.27:51147", "172.17.0.1:51147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:08:37.356054334Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6121058746179917,
-				"StableID":   "ng2WpMqEop11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b202da25e67b9b27a6158f81bda1d911b735304a248bcfec1e3ecd144f3a562",
-				"DiscoKey":   "discokey:cf96047801b117b4a09d45190ec29d5a1f6947ce46f642bce7ccffadcc0ddb2a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53763", "10.65.0.27:53763", "172.17.0.1:53763"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:08:38.203520257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8772827808768110,
-				"StableID":   "nFjkK1KEWB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9ddf014ca52bcc33d1e81e02a07b4fa6bc86a09a113529ca81117e4e34d2604f",
-				"KeyExpiry":  "2026-11-03T08:08:38Z",
-				"DiscoKey":   "discokey:fd049ab604036fc5e309e1b61b688bac5d88daa5c8accb50276275a548c44d37",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46753", "10.65.0.27:46753", "172.17.0.1:46753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:08:38.67495449Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6070733255429221,
-				"StableID":   "ngcuXNsSQp11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:1482e2351f50164ab1c52b25ef79d89940e07d38a2c7a456c01aac2a3de5e876",
-				"KeyExpiry":  "2026-11-03T08:08:39Z",
-				"DiscoKey":   "discokey:29142f2df5295108ed719f23a6677c0c3d2277fab091f0da3af8245d337f2805",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49968", "10.65.0.27:49968", "172.17.0.1:49968"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:08:39.753834502Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c13-suggest-exit-node.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c13-suggest-exit-node.hujson
deleted file mode 100644
index 8fb1bed88..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c13-suggest-exit-node.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-attr-c13-suggest-exit-node
-//
-// suggest-exit-node on exit nodes; check whether SaaS propagates to Peer.CapMap
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T15:53:05Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c13-suggest-exit-node",
-	"description":    "suggest-exit-node on exit nodes; check whether SaaS propagates to Peer.CapMap",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T15:53:05.886892938Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                       \n{\n    \"category\":    \"nodeattrs\",\n    \"description\": \"suggest-exit-node on exit nodes; check whether SaaS propagates to Peer.CapMap\",\n    \"id\":          \"nodeattrs-attr-c13-suggest-exit-node\",\n    \"options\":     {},\n    \"policy\": {\n        \"tagOwners\": {\n            \"tag:server\": [\"odin@example.com\"],\n            \"tag:client\": [\"odin@example.com\"],\n            \"tag:prod\":   [\"odin@example.com\"],\n            \"tag:router\": [\"odin@example.com\"],\n            \"tag:exit\":   [\"odin@example.com\"]\n        },\n        \"nodeAttrs\": [\n            {\"target\": [\"tag:exit\"], \"attr\": [\"suggest-exit-node\"]}\n        ]\n    },\n    \"tailnet\": {\n        \"dns\":      {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c13-suggest-exit-node.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["suggest-exit-node"], "target": ["tag:exit"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1526416952205740,
-				"StableID":   "nfkd6LPKvC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1526416952205740,
-				"Key":        "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-				"DiscoKey":   "discokey:ed0d8e9cc85ac8998e09188b342788429c6584f00f8367e8308b87d833349d48",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:54026", "10.65.0.27:54026", "172.17.0.1:54026"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:53:11.290818856Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-			"MachineKey": "mkey:a3684823fb32070a07431a799abb4678868d5488dd598007805708aef476391c",
-			"Peers": [{
-				"ID":         8371968125939604,
-				"StableID":   "nTSDqZQgN821CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-				"DiscoKey":   "discokey:0df983280b8c13a4ae58531f93eaa14cf6fdcd13d81abf24d5838f93b190a92e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60804", "10.65.0.27:60804", "172.17.0.1:60804"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:53:11.82588002Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6653320671729474,
-				"StableID":   "n7uzXDTJxt11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-				"DiscoKey":   "discokey:68c34acee5f4097ecab53fd46610a4c6aaa011e46b18f4e4888036b76c7a9b52",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41354", "10.65.0.27:41354", "172.17.0.1:41354"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:53:12.367289468Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3782020496345348,
-				"StableID":   "nm5oLPGtXW11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-				"DiscoKey":   "discokey:94f9fe08fcc97506ff4abfba77347d66050d8616c8932a5f3a0223d5f3a7605a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56004", "10.65.0.27:56004", "172.17.0.1:56004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:53:12.909691525Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4025239427601364,
-				"StableID":   "nRB5SRD3SY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-				"DiscoKey":   "discokey:4be24e0c493b3a3f6061c84cb49fe69721b98da676e391000a6a6ee5c9703f48",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53579", "10.65.0.27:53579", "172.17.0.1:53579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:53:13.451273204Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2374793873041347,
-				"StableID":   "nk7kTsoYYK11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-				"KeyExpiry":  "2026-11-03T15:53:13Z",
-				"DiscoKey":   "discokey:18ef0b27c13a3441c67daf15766a78f3728d34316facb67272c65bb411b4dd5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45047", "10.65.0.27:45047", "172.17.0.1:45047"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:53:13.990625541Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3010125802983325,
-				"StableID":   "npp3XEuHWQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-				"KeyExpiry":  "2026-11-03T15:53:14Z",
-				"DiscoKey":   "discokey:492284988d4e57e03896aab40d9af1cea4f98ae24285532e77efd931ba274d75",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55438", "10.65.0.27:55438", "172.17.0.1:55438"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:53:14.531218093Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         348611426074739,
-				"StableID":   "npKbxzRti311CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-				"KeyExpiry":  "2026-11-03T15:53:15Z",
-				"DiscoKey":   "discokey:34044067f8d9990cbcffb90a6ae850567a959f09a311c4e478277ecb3914e827",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:52159", "10.65.0.27:52159", "172.17.0.1:52159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:53:15.075211994Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1526416952205740": {
-				"ID":          1526416952205740,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8371968125939604,
-				"StableID":   "nTSDqZQgN821CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       8371968125939604,
-				"Key":        "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-				"DiscoKey":   "discokey:0df983280b8c13a4ae58531f93eaa14cf6fdcd13d81abf24d5838f93b190a92e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60804", "10.65.0.27:60804", "172.17.0.1:60804"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T15:53:11.82588002Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"suggest-exit-node":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"suggest-exit-node",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-			"MachineKey": "mkey:2a255216aad110b6842038577fbdb0d18426007d767a9c5dbbb4b70ee62fe57d",
-			"Peers": [{
-				"ID":         1526416952205740,
-				"StableID":   "nfkd6LPKvC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-				"DiscoKey":   "discokey:ed0d8e9cc85ac8998e09188b342788429c6584f00f8367e8308b87d833349d48",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:54026", "10.65.0.27:54026", "172.17.0.1:54026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:53:11.290818856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6653320671729474,
-				"StableID":   "n7uzXDTJxt11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-				"DiscoKey":   "discokey:68c34acee5f4097ecab53fd46610a4c6aaa011e46b18f4e4888036b76c7a9b52",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41354", "10.65.0.27:41354", "172.17.0.1:41354"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:53:12.367289468Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3782020496345348,
-				"StableID":   "nm5oLPGtXW11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-				"DiscoKey":   "discokey:94f9fe08fcc97506ff4abfba77347d66050d8616c8932a5f3a0223d5f3a7605a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56004", "10.65.0.27:56004", "172.17.0.1:56004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:53:12.909691525Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4025239427601364,
-				"StableID":   "nRB5SRD3SY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-				"DiscoKey":   "discokey:4be24e0c493b3a3f6061c84cb49fe69721b98da676e391000a6a6ee5c9703f48",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53579", "10.65.0.27:53579", "172.17.0.1:53579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:53:13.451273204Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2374793873041347,
-				"StableID":   "nk7kTsoYYK11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-				"KeyExpiry":  "2026-11-03T15:53:13Z",
-				"DiscoKey":   "discokey:18ef0b27c13a3441c67daf15766a78f3728d34316facb67272c65bb411b4dd5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45047", "10.65.0.27:45047", "172.17.0.1:45047"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:53:13.990625541Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3010125802983325,
-				"StableID":   "npp3XEuHWQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-				"KeyExpiry":  "2026-11-03T15:53:14Z",
-				"DiscoKey":   "discokey:492284988d4e57e03896aab40d9af1cea4f98ae24285532e77efd931ba274d75",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55438", "10.65.0.27:55438", "172.17.0.1:55438"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:53:14.531218093Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         348611426074739,
-				"StableID":   "npKbxzRti311CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-				"KeyExpiry":  "2026-11-03T15:53:15Z",
-				"DiscoKey":   "discokey:34044067f8d9990cbcffb90a6ae850567a959f09a311c4e478277ecb3914e827",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:52159", "10.65.0.27:52159", "172.17.0.1:52159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:53:15.075211994Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8371968125939604": {
-				"ID":          8371968125939604,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2374793873041347,
-				"StableID":   "nk7kTsoYYK11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-				"KeyExpiry":  "2026-11-03T15:53:13Z",
-				"DiscoKey":   "discokey:18ef0b27c13a3441c67daf15766a78f3728d34316facb67272c65bb411b4dd5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45047", "10.65.0.27:45047", "172.17.0.1:45047"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:53:13.990625541Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-			"MachineKey": "mkey:4bdc16eff1486e156e187da609e8024cd23748444d1ad6cdbf1a4f8c7aaba45e",
-			"Peers": [{
-				"ID":         1526416952205740,
-				"StableID":   "nfkd6LPKvC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-				"DiscoKey":   "discokey:ed0d8e9cc85ac8998e09188b342788429c6584f00f8367e8308b87d833349d48",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:54026", "10.65.0.27:54026", "172.17.0.1:54026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:53:11.290818856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8371968125939604,
-				"StableID":   "nTSDqZQgN821CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-				"DiscoKey":   "discokey:0df983280b8c13a4ae58531f93eaa14cf6fdcd13d81abf24d5838f93b190a92e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60804", "10.65.0.27:60804", "172.17.0.1:60804"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:53:11.82588002Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6653320671729474,
-				"StableID":   "n7uzXDTJxt11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-				"DiscoKey":   "discokey:68c34acee5f4097ecab53fd46610a4c6aaa011e46b18f4e4888036b76c7a9b52",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41354", "10.65.0.27:41354", "172.17.0.1:41354"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:53:12.367289468Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3782020496345348,
-				"StableID":   "nm5oLPGtXW11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-				"DiscoKey":   "discokey:94f9fe08fcc97506ff4abfba77347d66050d8616c8932a5f3a0223d5f3a7605a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56004", "10.65.0.27:56004", "172.17.0.1:56004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:53:12.909691525Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4025239427601364,
-				"StableID":   "nRB5SRD3SY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-				"DiscoKey":   "discokey:4be24e0c493b3a3f6061c84cb49fe69721b98da676e391000a6a6ee5c9703f48",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53579", "10.65.0.27:53579", "172.17.0.1:53579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:53:13.451273204Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3010125802983325,
-				"StableID":   "npp3XEuHWQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-				"KeyExpiry":  "2026-11-03T15:53:14Z",
-				"DiscoKey":   "discokey:492284988d4e57e03896aab40d9af1cea4f98ae24285532e77efd931ba274d75",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55438", "10.65.0.27:55438", "172.17.0.1:55438"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:53:14.531218093Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         348611426074739,
-				"StableID":   "npKbxzRti311CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-				"KeyExpiry":  "2026-11-03T15:53:15Z",
-				"DiscoKey":   "discokey:34044067f8d9990cbcffb90a6ae850567a959f09a311c4e478277ecb3914e827",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:52159", "10.65.0.27:52159", "172.17.0.1:52159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:53:15.075211994Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6653320671729474,
-				"StableID":   "n7uzXDTJxt11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       6653320671729474,
-				"Key":        "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-				"DiscoKey":   "discokey:68c34acee5f4097ecab53fd46610a4c6aaa011e46b18f4e4888036b76c7a9b52",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41354", "10.65.0.27:41354", "172.17.0.1:41354"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:53:12.367289468Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-			"MachineKey": "mkey:e817e1a36d04c85386fbca93ccf22058ef9c2470c0cf4cd368efed43003df415",
-			"Peers": [{
-				"ID":         1526416952205740,
-				"StableID":   "nfkd6LPKvC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-				"DiscoKey":   "discokey:ed0d8e9cc85ac8998e09188b342788429c6584f00f8367e8308b87d833349d48",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:54026", "10.65.0.27:54026", "172.17.0.1:54026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:53:11.290818856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8371968125939604,
-				"StableID":   "nTSDqZQgN821CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-				"DiscoKey":   "discokey:0df983280b8c13a4ae58531f93eaa14cf6fdcd13d81abf24d5838f93b190a92e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60804", "10.65.0.27:60804", "172.17.0.1:60804"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:53:11.82588002Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3782020496345348,
-				"StableID":   "nm5oLPGtXW11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-				"DiscoKey":   "discokey:94f9fe08fcc97506ff4abfba77347d66050d8616c8932a5f3a0223d5f3a7605a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56004", "10.65.0.27:56004", "172.17.0.1:56004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:53:12.909691525Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4025239427601364,
-				"StableID":   "nRB5SRD3SY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-				"DiscoKey":   "discokey:4be24e0c493b3a3f6061c84cb49fe69721b98da676e391000a6a6ee5c9703f48",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53579", "10.65.0.27:53579", "172.17.0.1:53579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:53:13.451273204Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2374793873041347,
-				"StableID":   "nk7kTsoYYK11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-				"KeyExpiry":  "2026-11-03T15:53:13Z",
-				"DiscoKey":   "discokey:18ef0b27c13a3441c67daf15766a78f3728d34316facb67272c65bb411b4dd5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45047", "10.65.0.27:45047", "172.17.0.1:45047"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:53:13.990625541Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3010125802983325,
-				"StableID":   "npp3XEuHWQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-				"KeyExpiry":  "2026-11-03T15:53:14Z",
-				"DiscoKey":   "discokey:492284988d4e57e03896aab40d9af1cea4f98ae24285532e77efd931ba274d75",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55438", "10.65.0.27:55438", "172.17.0.1:55438"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:53:14.531218093Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         348611426074739,
-				"StableID":   "npKbxzRti311CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-				"KeyExpiry":  "2026-11-03T15:53:15Z",
-				"DiscoKey":   "discokey:34044067f8d9990cbcffb90a6ae850567a959f09a311c4e478277ecb3914e827",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:52159", "10.65.0.27:52159", "172.17.0.1:52159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:53:15.075211994Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6653320671729474": {
-				"ID":          6653320671729474,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3782020496345348,
-				"StableID":   "nm5oLPGtXW11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       3782020496345348,
-				"Key":        "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-				"DiscoKey":   "discokey:94f9fe08fcc97506ff4abfba77347d66050d8616c8932a5f3a0223d5f3a7605a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56004", "10.65.0.27:56004", "172.17.0.1:56004"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T15:53:12.909691525Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-			"MachineKey": "mkey:38f976bf502cfffa167aa130eed417ced2fe3c27caf437800ed6d0d3f8de3b20",
-			"Peers": [{
-				"ID":         1526416952205740,
-				"StableID":   "nfkd6LPKvC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-				"DiscoKey":   "discokey:ed0d8e9cc85ac8998e09188b342788429c6584f00f8367e8308b87d833349d48",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:54026", "10.65.0.27:54026", "172.17.0.1:54026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:53:11.290818856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8371968125939604,
-				"StableID":   "nTSDqZQgN821CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-				"DiscoKey":   "discokey:0df983280b8c13a4ae58531f93eaa14cf6fdcd13d81abf24d5838f93b190a92e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60804", "10.65.0.27:60804", "172.17.0.1:60804"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:53:11.82588002Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6653320671729474,
-				"StableID":   "n7uzXDTJxt11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-				"DiscoKey":   "discokey:68c34acee5f4097ecab53fd46610a4c6aaa011e46b18f4e4888036b76c7a9b52",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41354", "10.65.0.27:41354", "172.17.0.1:41354"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:53:12.367289468Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4025239427601364,
-				"StableID":   "nRB5SRD3SY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-				"DiscoKey":   "discokey:4be24e0c493b3a3f6061c84cb49fe69721b98da676e391000a6a6ee5c9703f48",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53579", "10.65.0.27:53579", "172.17.0.1:53579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:53:13.451273204Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2374793873041347,
-				"StableID":   "nk7kTsoYYK11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-				"KeyExpiry":  "2026-11-03T15:53:13Z",
-				"DiscoKey":   "discokey:18ef0b27c13a3441c67daf15766a78f3728d34316facb67272c65bb411b4dd5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45047", "10.65.0.27:45047", "172.17.0.1:45047"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:53:13.990625541Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3010125802983325,
-				"StableID":   "npp3XEuHWQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-				"KeyExpiry":  "2026-11-03T15:53:14Z",
-				"DiscoKey":   "discokey:492284988d4e57e03896aab40d9af1cea4f98ae24285532e77efd931ba274d75",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55438", "10.65.0.27:55438", "172.17.0.1:55438"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:53:14.531218093Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         348611426074739,
-				"StableID":   "npKbxzRti311CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-				"KeyExpiry":  "2026-11-03T15:53:15Z",
-				"DiscoKey":   "discokey:34044067f8d9990cbcffb90a6ae850567a959f09a311c4e478277ecb3914e827",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:52159", "10.65.0.27:52159", "172.17.0.1:52159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:53:15.075211994Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3782020496345348": {
-				"ID":          3782020496345348,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4025239427601364,
-				"StableID":   "nRB5SRD3SY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       4025239427601364,
-				"Key":        "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-				"DiscoKey":   "discokey:4be24e0c493b3a3f6061c84cb49fe69721b98da676e391000a6a6ee5c9703f48",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53579", "10.65.0.27:53579", "172.17.0.1:53579"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:53:13.451273204Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-			"MachineKey": "mkey:58c32332ee33f2f3cbb4656e764530074c51d72f3e5ac5538e7d7040198f8637",
-			"Peers": [{
-				"ID":         1526416952205740,
-				"StableID":   "nfkd6LPKvC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-				"DiscoKey":   "discokey:ed0d8e9cc85ac8998e09188b342788429c6584f00f8367e8308b87d833349d48",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:54026", "10.65.0.27:54026", "172.17.0.1:54026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:53:11.290818856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8371968125939604,
-				"StableID":   "nTSDqZQgN821CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-				"DiscoKey":   "discokey:0df983280b8c13a4ae58531f93eaa14cf6fdcd13d81abf24d5838f93b190a92e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60804", "10.65.0.27:60804", "172.17.0.1:60804"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:53:11.82588002Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6653320671729474,
-				"StableID":   "n7uzXDTJxt11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-				"DiscoKey":   "discokey:68c34acee5f4097ecab53fd46610a4c6aaa011e46b18f4e4888036b76c7a9b52",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41354", "10.65.0.27:41354", "172.17.0.1:41354"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:53:12.367289468Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3782020496345348,
-				"StableID":   "nm5oLPGtXW11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-				"DiscoKey":   "discokey:94f9fe08fcc97506ff4abfba77347d66050d8616c8932a5f3a0223d5f3a7605a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56004", "10.65.0.27:56004", "172.17.0.1:56004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:53:12.909691525Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2374793873041347,
-				"StableID":   "nk7kTsoYYK11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-				"KeyExpiry":  "2026-11-03T15:53:13Z",
-				"DiscoKey":   "discokey:18ef0b27c13a3441c67daf15766a78f3728d34316facb67272c65bb411b4dd5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45047", "10.65.0.27:45047", "172.17.0.1:45047"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:53:13.990625541Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3010125802983325,
-				"StableID":   "npp3XEuHWQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-				"KeyExpiry":  "2026-11-03T15:53:14Z",
-				"DiscoKey":   "discokey:492284988d4e57e03896aab40d9af1cea4f98ae24285532e77efd931ba274d75",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55438", "10.65.0.27:55438", "172.17.0.1:55438"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:53:14.531218093Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         348611426074739,
-				"StableID":   "npKbxzRti311CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-				"KeyExpiry":  "2026-11-03T15:53:15Z",
-				"DiscoKey":   "discokey:34044067f8d9990cbcffb90a6ae850567a959f09a311c4e478277ecb3914e827",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:52159", "10.65.0.27:52159", "172.17.0.1:52159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:53:15.075211994Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4025239427601364": {
-				"ID":          4025239427601364,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         348611426074739,
-				"StableID":   "npKbxzRti311CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-				"KeyExpiry":  "2026-11-03T15:53:15Z",
-				"DiscoKey":   "discokey:34044067f8d9990cbcffb90a6ae850567a959f09a311c4e478277ecb3914e827",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:52159", "10.65.0.27:52159", "172.17.0.1:52159"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:53:15.075211994Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-			"MachineKey": "mkey:d54bf30d5d401e68fdd90b22639db7f069a44479cf38f92ec6e22636d26a1330",
-			"Peers": [{
-				"ID":         1526416952205740,
-				"StableID":   "nfkd6LPKvC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-				"DiscoKey":   "discokey:ed0d8e9cc85ac8998e09188b342788429c6584f00f8367e8308b87d833349d48",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:54026", "10.65.0.27:54026", "172.17.0.1:54026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:53:11.290818856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8371968125939604,
-				"StableID":   "nTSDqZQgN821CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-				"DiscoKey":   "discokey:0df983280b8c13a4ae58531f93eaa14cf6fdcd13d81abf24d5838f93b190a92e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60804", "10.65.0.27:60804", "172.17.0.1:60804"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:53:11.82588002Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6653320671729474,
-				"StableID":   "n7uzXDTJxt11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-				"DiscoKey":   "discokey:68c34acee5f4097ecab53fd46610a4c6aaa011e46b18f4e4888036b76c7a9b52",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41354", "10.65.0.27:41354", "172.17.0.1:41354"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:53:12.367289468Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3782020496345348,
-				"StableID":   "nm5oLPGtXW11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-				"DiscoKey":   "discokey:94f9fe08fcc97506ff4abfba77347d66050d8616c8932a5f3a0223d5f3a7605a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56004", "10.65.0.27:56004", "172.17.0.1:56004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:53:12.909691525Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4025239427601364,
-				"StableID":   "nRB5SRD3SY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-				"DiscoKey":   "discokey:4be24e0c493b3a3f6061c84cb49fe69721b98da676e391000a6a6ee5c9703f48",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53579", "10.65.0.27:53579", "172.17.0.1:53579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:53:13.451273204Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2374793873041347,
-				"StableID":   "nk7kTsoYYK11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-				"KeyExpiry":  "2026-11-03T15:53:13Z",
-				"DiscoKey":   "discokey:18ef0b27c13a3441c67daf15766a78f3728d34316facb67272c65bb411b4dd5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45047", "10.65.0.27:45047", "172.17.0.1:45047"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:53:13.990625541Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3010125802983325,
-				"StableID":   "npp3XEuHWQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-				"KeyExpiry":  "2026-11-03T15:53:14Z",
-				"DiscoKey":   "discokey:492284988d4e57e03896aab40d9af1cea4f98ae24285532e77efd931ba274d75",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55438", "10.65.0.27:55438", "172.17.0.1:55438"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:53:14.531218093Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3010125802983325,
-				"StableID":   "npp3XEuHWQ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-				"KeyExpiry":  "2026-11-03T15:53:14Z",
-				"DiscoKey":   "discokey:492284988d4e57e03896aab40d9af1cea4f98ae24285532e77efd931ba274d75",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55438", "10.65.0.27:55438", "172.17.0.1:55438"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:53:14.531218093Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a5a3f3665d56466ec66f9e7bbf4cc00942f2bc1e570e3a25c038bfce61910467",
-			"MachineKey": "mkey:6e0799dd8bcb1f55304570c09d1dff8d5f36325352f1a88067242f88aa44ba53",
-			"Peers": [{
-				"ID":         1526416952205740,
-				"StableID":   "nfkd6LPKvC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ca6022a8668747657d9a5fa5e6e0a81f0d43a6a4209e0c40d22b1dcb3037042",
-				"DiscoKey":   "discokey:ed0d8e9cc85ac8998e09188b342788429c6584f00f8367e8308b87d833349d48",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:54026", "10.65.0.27:54026", "172.17.0.1:54026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:53:11.290818856Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8371968125939604,
-				"StableID":   "nTSDqZQgN821CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fc3f6532311b67005c74b64a410a6d9f10426ff182e570fdb7c81bc583d9aa54",
-				"DiscoKey":   "discokey:0df983280b8c13a4ae58531f93eaa14cf6fdcd13d81abf24d5838f93b190a92e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60804", "10.65.0.27:60804", "172.17.0.1:60804"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:53:11.82588002Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6653320671729474,
-				"StableID":   "n7uzXDTJxt11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7993f5282a3e96f153a257bb480f2528f468084fb4cef16c061fa60510aa4c32",
-				"DiscoKey":   "discokey:68c34acee5f4097ecab53fd46610a4c6aaa011e46b18f4e4888036b76c7a9b52",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41354", "10.65.0.27:41354", "172.17.0.1:41354"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:53:12.367289468Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3782020496345348,
-				"StableID":   "nm5oLPGtXW11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16cd0f80891082548fa1c797227789a78c680ff7e141d23c11b6bf8cf13fcb08",
-				"DiscoKey":   "discokey:94f9fe08fcc97506ff4abfba77347d66050d8616c8932a5f3a0223d5f3a7605a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56004", "10.65.0.27:56004", "172.17.0.1:56004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:53:12.909691525Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4025239427601364,
-				"StableID":   "nRB5SRD3SY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:118f95d6493c8f1f41cfbc7806f5fbd9e3f56f6e99d58a46d7e4b42a2c508c4e",
-				"DiscoKey":   "discokey:4be24e0c493b3a3f6061c84cb49fe69721b98da676e391000a6a6ee5c9703f48",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53579", "10.65.0.27:53579", "172.17.0.1:53579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:53:13.451273204Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2374793873041347,
-				"StableID":   "nk7kTsoYYK11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7595be76568e6d61c08d7dcd451cf37d68eb608ebe3bc71e98cb2b311dcbee5b",
-				"KeyExpiry":  "2026-11-03T15:53:13Z",
-				"DiscoKey":   "discokey:18ef0b27c13a3441c67daf15766a78f3728d34316facb67272c65bb411b4dd5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45047", "10.65.0.27:45047", "172.17.0.1:45047"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:53:13.990625541Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         348611426074739,
-				"StableID":   "npKbxzRti311CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:b2c59dc436da23d30fc0af6fe77a5dbbf84b332f07a28a3b7a65509edcdb3e64",
-				"KeyExpiry":  "2026-11-03T15:53:15Z",
-				"DiscoKey":   "discokey:34044067f8d9990cbcffb90a6ae850567a959f09a311c4e478277ecb3914e827",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:52159", "10.65.0.27:52159", "172.17.0.1:52159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:53:15.075211994Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c14-suggest-exit-node-approved.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c14-suggest-exit-node-approved.hujson
deleted file mode 100644
index b96610fdf..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c14-suggest-exit-node-approved.hujson
+++ /dev/null
@@ -1,8831 +0,0 @@
-// nodeattrs-attr-c14-suggest-exit-node-approved
-//
-// suggest-exit-node + approved exit routes; verify Peer.CapMap propagation gated on approval
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T15:51:24Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c14-suggest-exit-node-approved",
-	"description":    "suggest-exit-node + approved exit routes; verify Peer.CapMap propagation gated on approval",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T15:51:24.529346412Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                                \n  \n                                                              \n                                                        \n                                                                   \n                                                                   \n                                                             \n{\n    \"category\":    \"nodeattrs\",\n    \"description\": \"suggest-exit-node + approved exit routes; verify Peer.CapMap propagation gated on approval\",\n    \"id\":          \"nodeattrs-attr-c14-suggest-exit-node-approved\",\n    \"options\":     {},\n    \"policy\": {\n        \"tagOwners\": {\n            \"tag:server\": [\"odin@example.com\"],\n            \"tag:client\": [\"odin@example.com\"],\n            \"tag:prod\":   [\"odin@example.com\"],\n            \"tag:router\": [\"odin@example.com\"],\n            \"tag:exit\":   [\"odin@example.com\"]\n        },\n        \"autoApprovers\": {\n            \"exitNode\": [\"tag:exit\"]\n        },\n        \"nodeAttrs\": [\n            {\"target\": [\"tag:exit\"], \"attr\": [\"suggest-exit-node\"]}\n        ]\n    },\n    \"tailnet\": {\n        \"dns\":      {\"magic_dns\": false, \"nameservers\": [], \"search_paths\": [], \"split_dns\": {}},\n        \"settings\": {}\n    },\n    \"topology\": {\"users\": [\n        {\"id\": 1, \"name\": \"odin\", \"email\": \"odin@example.com\"},\n        {\"id\": 2, \"name\": \"thor\", \"email\": \"thor@example.org\"},\n        {\n            \"id\":    3,\n            \"name\":  \"freya\",\n            \"email\": \"freya@example.com\"\n        }\n    ], \"nodes\": {\"server\": {\n        \"hostname\":        \"server\",\n        \"tags\":            [\"tag:server\"],\n        \"ipv4\":            \"100.64.0.10\",\n        \"ipv6\":            \"fd7a:115c:a1e0::a\",\n        \"routable_ips\":    [],\n        \"approved_routes\": []\n    }, \"client\": {\n        \"hostname\":        \"client\",\n        \"tags\":            [\"tag:client\"],\n        \"ipv4\":            \"100.64.0.11\",\n        \"ipv6\":            \"fd7a:115c:a1e0::b\",\n        \"routable_ips\":    [],\n        \"approved_routes\": []\n    }, \"prod\": {\n        \"hostname\":        \"prod\",\n        \"tags\":            [\"tag:prod\"],\n        \"ipv4\":            \"100.64.0.12\",\n        \"ipv6\":            \"fd7a:115c:a1e0::c\",\n        \"routable_ips\":    [],\n        \"approved_routes\": []\n    }, \"router\": {\n        \"hostname\":        \"router\",\n        \"tags\":            [\"tag:router\"],\n        \"ipv4\":            \"100.64.0.13\",\n        \"ipv6\":            \"fd7a:115c:a1e0::d\",\n        \"routable_ips\":    [\"10.33.0.0/16\"],\n        \"approved_routes\": []\n    }, \"exit\": {\n        \"hostname\":        \"exit\",\n        \"tags\":            [\"tag:exit\"],\n        \"ipv4\":            \"100.64.0.14\",\n        \"ipv6\":            \"fd7a:115c:a1e0::e\",\n        \"routable_ips\":    [\"0.0.0.0/0\", \"::/0\"],\n        \"approved_routes\": [\"0.0.0.0/0\", \"::/0\"]\n    }, \"user-tid\": {\n        \"hostname\":        \"user-tid\",\n        \"tags\":            [],\n        \"ipv4\":            \"100.64.0.15\",\n        \"ipv6\":            \"fd7a:115c:a1e0::f\",\n        \"user\":            \"odin\",\n        \"routable_ips\":    [],\n        \"approved_routes\": []\n    }, \"ivysaur\": {\n        \"hostname\":        \"ivysaur\",\n        \"tags\":            [],\n        \"ipv4\":            \"100.64.0.16\",\n        \"ipv6\":            \"fd7a:115c:a1e0::10\",\n        \"user\":            \"thor\",\n        \"routable_ips\":    [],\n        \"approved_routes\": []\n    }, \"venusaur\": {\n        \"hostname\":        \"venusaur\",\n        \"tags\":            [],\n        \"ipv4\":            \"100.64.0.17\",\n        \"ipv6\":            \"fd7a:115c:a1e0::11\",\n        \"user\":            \"freya\",\n        \"routable_ips\":    [],\n        \"approved_routes\": []\n    }}}\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c14-suggest-exit-node-approved.hujson",
-		"full_policy": {
-			"autoApprovers": {"exitNode": ["tag:exit"]},
-			"nodeAttrs":     [{"attr": ["suggest-exit-node"], "target": ["tag:exit"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": ["0.0.0.0/0", "::/0"]
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2936024681908930,
-				"StableID":   "nPhNCcPjvP11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       2936024681908930,
-				"Key":        "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-				"DiscoKey":   "discokey:6f957027b041d937e5e013b8e10ae7963785af02377d8c20896c186fe1664867",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43848", "10.65.0.27:43848", "172.17.0.1:43848"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:51:30.157098585Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-			"MachineKey": "mkey:b7eadf9c32e2f03ab4073ffef2b8f5a07faef5a8af8f692f69c6fd207feb5528",
-			"Peers": [{
-				"ID":         6748078656141316,
-				"StableID":   "nRwj8raDhu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-				"DiscoKey":   "discokey:461cdc980c42d46617753498cc6b2c072d825650ad8a9c738c49788ac75c2a65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128", "0.0.0.0/0", "::/0"],
-				"Endpoints":  ["77.164.248.136:48195", "10.65.0.27:48195", "172.17.0.1:48195"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:51:30.697989464Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1280311584870179,
-				"StableID":   "nW8yXdcrzA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-				"DiscoKey":   "discokey:40f0af0689b450bd06196a6715a3d595b572f828bd155a6fe651baa14fae1b47",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54926", "10.65.0.27:54926", "172.17.0.1:54926"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:51:31.232885488Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3434162236663933,
-				"StableID":   "n4aq7tcLpT11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-				"DiscoKey":   "discokey:9917200e7be77f45487197c2be3779279a9244368eb8f0cc1cc92bf32fcac151",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45175", "10.65.0.27:45175", "172.17.0.1:45175"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:51:31.779422906Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6814440783025337,
-				"StableID":   "n4nJ3eoGDv11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-				"DiscoKey":   "discokey:e792b97dc63f3964a687b25c0126c499330fa1aa729728f504709c5689cd8c78",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:34895", "10.65.0.27:34895", "172.17.0.1:34895"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:51:32.321687022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3335010483899327,
-				"StableID":   "nxqoF55S3T11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-				"KeyExpiry":  "2026-11-03T15:51:32Z",
-				"DiscoKey":   "discokey:eec1a663bb35800dc7fd8812a8499bf2d9ba03cb796240fd488ff4e6f4b82927",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46555", "10.65.0.27:46555", "172.17.0.1:46555"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:51:32.87144675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         487001463179707,
-				"StableID":   "nG9JekhZo411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:c9099069b4b3c93b479a368f732e5f79cdd72b9ec7a149bd0795728506c73623",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34667", "10.65.0.27:34667", "172.17.0.1:34667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:51:33.4069582Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5579673152480710,
-				"StableID":   "nR6vn2Z3ak11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:a5564337054c75b18a342d6f9e1e3075311b20028aa29d256f09bbcb6d731662",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48892", "10.65.0.27:48892", "172.17.0.1:48892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:51:33.951250072Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2936024681908930": {
-				"ID":          2936024681908930,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6748078656141316,
-				"StableID":   "nRwj8raDhu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       6748078656141316,
-				"Key":        "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-				"DiscoKey":   "discokey:461cdc980c42d46617753498cc6b2c072d825650ad8a9c738c49788ac75c2a65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128", "0.0.0.0/0", "::/0"],
-				"Endpoints":  ["77.164.248.136:48195", "10.65.0.27:48195", "172.17.0.1:48195"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T15:51:30.697989464Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"suggest-exit-node":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"suggest-exit-node",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-			"MachineKey": "mkey:0341e93108462c3725c10f98a1f00309e1cddb533537a78491f44f59ab8d8b5e",
-			"Peers": [{
-				"ID":         2936024681908930,
-				"StableID":   "nPhNCcPjvP11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-				"DiscoKey":   "discokey:6f957027b041d937e5e013b8e10ae7963785af02377d8c20896c186fe1664867",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43848", "10.65.0.27:43848", "172.17.0.1:43848"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:51:30.157098585Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1280311584870179,
-				"StableID":   "nW8yXdcrzA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-				"DiscoKey":   "discokey:40f0af0689b450bd06196a6715a3d595b572f828bd155a6fe651baa14fae1b47",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54926", "10.65.0.27:54926", "172.17.0.1:54926"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:51:31.232885488Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3434162236663933,
-				"StableID":   "n4aq7tcLpT11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-				"DiscoKey":   "discokey:9917200e7be77f45487197c2be3779279a9244368eb8f0cc1cc92bf32fcac151",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45175", "10.65.0.27:45175", "172.17.0.1:45175"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:51:31.779422906Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6814440783025337,
-				"StableID":   "n4nJ3eoGDv11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-				"DiscoKey":   "discokey:e792b97dc63f3964a687b25c0126c499330fa1aa729728f504709c5689cd8c78",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:34895", "10.65.0.27:34895", "172.17.0.1:34895"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:51:32.321687022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3335010483899327,
-				"StableID":   "nxqoF55S3T11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-				"KeyExpiry":  "2026-11-03T15:51:32Z",
-				"DiscoKey":   "discokey:eec1a663bb35800dc7fd8812a8499bf2d9ba03cb796240fd488ff4e6f4b82927",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46555", "10.65.0.27:46555", "172.17.0.1:46555"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:51:32.87144675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         487001463179707,
-				"StableID":   "nG9JekhZo411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:c9099069b4b3c93b479a368f732e5f79cdd72b9ec7a149bd0795728506c73623",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34667", "10.65.0.27:34667", "172.17.0.1:34667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:51:33.4069582Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5579673152480710,
-				"StableID":   "nR6vn2Z3ak11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:a5564337054c75b18a342d6f9e1e3075311b20028aa29d256f09bbcb6d731662",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48892", "10.65.0.27:48892", "172.17.0.1:48892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:51:33.951250072Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6748078656141316": {
-				"ID":          6748078656141316,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3335010483899327,
-				"StableID":   "nxqoF55S3T11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-				"KeyExpiry":  "2026-11-03T15:51:32Z",
-				"DiscoKey":   "discokey:eec1a663bb35800dc7fd8812a8499bf2d9ba03cb796240fd488ff4e6f4b82927",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46555", "10.65.0.27:46555", "172.17.0.1:46555"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:51:32.87144675Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-			"MachineKey": "mkey:e3fcc354b1feb259850783aacef7f7914c68e1c622bf40abd055d668d704976a",
-			"Peers": [{
-				"ID":         2936024681908930,
-				"StableID":   "nPhNCcPjvP11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-				"DiscoKey":   "discokey:6f957027b041d937e5e013b8e10ae7963785af02377d8c20896c186fe1664867",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43848", "10.65.0.27:43848", "172.17.0.1:43848"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:51:30.157098585Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6748078656141316,
-				"StableID":   "nRwj8raDhu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-				"DiscoKey":   "discokey:461cdc980c42d46617753498cc6b2c072d825650ad8a9c738c49788ac75c2a65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128", "0.0.0.0/0", "::/0"],
-				"Endpoints":  ["77.164.248.136:48195", "10.65.0.27:48195", "172.17.0.1:48195"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:51:30.697989464Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1280311584870179,
-				"StableID":   "nW8yXdcrzA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-				"DiscoKey":   "discokey:40f0af0689b450bd06196a6715a3d595b572f828bd155a6fe651baa14fae1b47",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54926", "10.65.0.27:54926", "172.17.0.1:54926"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:51:31.232885488Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3434162236663933,
-				"StableID":   "n4aq7tcLpT11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-				"DiscoKey":   "discokey:9917200e7be77f45487197c2be3779279a9244368eb8f0cc1cc92bf32fcac151",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45175", "10.65.0.27:45175", "172.17.0.1:45175"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:51:31.779422906Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6814440783025337,
-				"StableID":   "n4nJ3eoGDv11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-				"DiscoKey":   "discokey:e792b97dc63f3964a687b25c0126c499330fa1aa729728f504709c5689cd8c78",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:34895", "10.65.0.27:34895", "172.17.0.1:34895"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:51:32.321687022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         487001463179707,
-				"StableID":   "nG9JekhZo411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:c9099069b4b3c93b479a368f732e5f79cdd72b9ec7a149bd0795728506c73623",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34667", "10.65.0.27:34667", "172.17.0.1:34667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:51:33.4069582Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5579673152480710,
-				"StableID":   "nR6vn2Z3ak11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:a5564337054c75b18a342d6f9e1e3075311b20028aa29d256f09bbcb6d731662",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48892", "10.65.0.27:48892", "172.17.0.1:48892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:51:33.951250072Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1280311584870179,
-				"StableID":   "nW8yXdcrzA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1280311584870179,
-				"Key":        "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-				"DiscoKey":   "discokey:40f0af0689b450bd06196a6715a3d595b572f828bd155a6fe651baa14fae1b47",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54926", "10.65.0.27:54926", "172.17.0.1:54926"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:51:31.232885488Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-			"MachineKey": "mkey:9dbb80dfdece1b5d798c989c07929c380ab55371e8121ac9aa6b3d7bf4eeb62c",
-			"Peers": [{
-				"ID":         2936024681908930,
-				"StableID":   "nPhNCcPjvP11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-				"DiscoKey":   "discokey:6f957027b041d937e5e013b8e10ae7963785af02377d8c20896c186fe1664867",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43848", "10.65.0.27:43848", "172.17.0.1:43848"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:51:30.157098585Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6748078656141316,
-				"StableID":   "nRwj8raDhu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-				"DiscoKey":   "discokey:461cdc980c42d46617753498cc6b2c072d825650ad8a9c738c49788ac75c2a65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128", "0.0.0.0/0", "::/0"],
-				"Endpoints":  ["77.164.248.136:48195", "10.65.0.27:48195", "172.17.0.1:48195"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:51:30.697989464Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3434162236663933,
-				"StableID":   "n4aq7tcLpT11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-				"DiscoKey":   "discokey:9917200e7be77f45487197c2be3779279a9244368eb8f0cc1cc92bf32fcac151",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45175", "10.65.0.27:45175", "172.17.0.1:45175"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:51:31.779422906Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6814440783025337,
-				"StableID":   "n4nJ3eoGDv11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-				"DiscoKey":   "discokey:e792b97dc63f3964a687b25c0126c499330fa1aa729728f504709c5689cd8c78",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:34895", "10.65.0.27:34895", "172.17.0.1:34895"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:51:32.321687022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3335010483899327,
-				"StableID":   "nxqoF55S3T11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-				"KeyExpiry":  "2026-11-03T15:51:32Z",
-				"DiscoKey":   "discokey:eec1a663bb35800dc7fd8812a8499bf2d9ba03cb796240fd488ff4e6f4b82927",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46555", "10.65.0.27:46555", "172.17.0.1:46555"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:51:32.87144675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         487001463179707,
-				"StableID":   "nG9JekhZo411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:c9099069b4b3c93b479a368f732e5f79cdd72b9ec7a149bd0795728506c73623",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34667", "10.65.0.27:34667", "172.17.0.1:34667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:51:33.4069582Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5579673152480710,
-				"StableID":   "nR6vn2Z3ak11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:a5564337054c75b18a342d6f9e1e3075311b20028aa29d256f09bbcb6d731662",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48892", "10.65.0.27:48892", "172.17.0.1:48892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:51:33.951250072Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1280311584870179": {
-				"ID":          1280311584870179,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3434162236663933,
-				"StableID":   "n4aq7tcLpT11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       3434162236663933,
-				"Key":        "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-				"DiscoKey":   "discokey:9917200e7be77f45487197c2be3779279a9244368eb8f0cc1cc92bf32fcac151",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45175", "10.65.0.27:45175", "172.17.0.1:45175"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T15:51:31.779422906Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-			"MachineKey": "mkey:f38909ca695e1c39fea23ab689df897df3d581ccf6d84926462095995fb3ba1c",
-			"Peers": [{
-				"ID":         2936024681908930,
-				"StableID":   "nPhNCcPjvP11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-				"DiscoKey":   "discokey:6f957027b041d937e5e013b8e10ae7963785af02377d8c20896c186fe1664867",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43848", "10.65.0.27:43848", "172.17.0.1:43848"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:51:30.157098585Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6748078656141316,
-				"StableID":   "nRwj8raDhu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-				"DiscoKey":   "discokey:461cdc980c42d46617753498cc6b2c072d825650ad8a9c738c49788ac75c2a65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128", "0.0.0.0/0", "::/0"],
-				"Endpoints":  ["77.164.248.136:48195", "10.65.0.27:48195", "172.17.0.1:48195"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:51:30.697989464Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1280311584870179,
-				"StableID":   "nW8yXdcrzA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-				"DiscoKey":   "discokey:40f0af0689b450bd06196a6715a3d595b572f828bd155a6fe651baa14fae1b47",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54926", "10.65.0.27:54926", "172.17.0.1:54926"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:51:31.232885488Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6814440783025337,
-				"StableID":   "n4nJ3eoGDv11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-				"DiscoKey":   "discokey:e792b97dc63f3964a687b25c0126c499330fa1aa729728f504709c5689cd8c78",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:34895", "10.65.0.27:34895", "172.17.0.1:34895"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:51:32.321687022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3335010483899327,
-				"StableID":   "nxqoF55S3T11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-				"KeyExpiry":  "2026-11-03T15:51:32Z",
-				"DiscoKey":   "discokey:eec1a663bb35800dc7fd8812a8499bf2d9ba03cb796240fd488ff4e6f4b82927",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46555", "10.65.0.27:46555", "172.17.0.1:46555"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:51:32.87144675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         487001463179707,
-				"StableID":   "nG9JekhZo411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:c9099069b4b3c93b479a368f732e5f79cdd72b9ec7a149bd0795728506c73623",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34667", "10.65.0.27:34667", "172.17.0.1:34667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:51:33.4069582Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5579673152480710,
-				"StableID":   "nR6vn2Z3ak11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:a5564337054c75b18a342d6f9e1e3075311b20028aa29d256f09bbcb6d731662",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48892", "10.65.0.27:48892", "172.17.0.1:48892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:51:33.951250072Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3434162236663933": {
-				"ID":          3434162236663933,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6814440783025337,
-				"StableID":   "n4nJ3eoGDv11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       6814440783025337,
-				"Key":        "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-				"DiscoKey":   "discokey:e792b97dc63f3964a687b25c0126c499330fa1aa729728f504709c5689cd8c78",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:34895", "10.65.0.27:34895", "172.17.0.1:34895"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:51:32.321687022Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-			"MachineKey": "mkey:908755ba9d65e08ea9f9cb66b12748ef7237fc9e90755ed1fa6fbaedcf32ff0b",
-			"Peers": [{
-				"ID":         2936024681908930,
-				"StableID":   "nPhNCcPjvP11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-				"DiscoKey":   "discokey:6f957027b041d937e5e013b8e10ae7963785af02377d8c20896c186fe1664867",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43848", "10.65.0.27:43848", "172.17.0.1:43848"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:51:30.157098585Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6748078656141316,
-				"StableID":   "nRwj8raDhu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-				"DiscoKey":   "discokey:461cdc980c42d46617753498cc6b2c072d825650ad8a9c738c49788ac75c2a65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128", "0.0.0.0/0", "::/0"],
-				"Endpoints":  ["77.164.248.136:48195", "10.65.0.27:48195", "172.17.0.1:48195"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:51:30.697989464Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1280311584870179,
-				"StableID":   "nW8yXdcrzA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-				"DiscoKey":   "discokey:40f0af0689b450bd06196a6715a3d595b572f828bd155a6fe651baa14fae1b47",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54926", "10.65.0.27:54926", "172.17.0.1:54926"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:51:31.232885488Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3434162236663933,
-				"StableID":   "n4aq7tcLpT11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-				"DiscoKey":   "discokey:9917200e7be77f45487197c2be3779279a9244368eb8f0cc1cc92bf32fcac151",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45175", "10.65.0.27:45175", "172.17.0.1:45175"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:51:31.779422906Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3335010483899327,
-				"StableID":   "nxqoF55S3T11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-				"KeyExpiry":  "2026-11-03T15:51:32Z",
-				"DiscoKey":   "discokey:eec1a663bb35800dc7fd8812a8499bf2d9ba03cb796240fd488ff4e6f4b82927",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46555", "10.65.0.27:46555", "172.17.0.1:46555"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:51:32.87144675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         487001463179707,
-				"StableID":   "nG9JekhZo411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:c9099069b4b3c93b479a368f732e5f79cdd72b9ec7a149bd0795728506c73623",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34667", "10.65.0.27:34667", "172.17.0.1:34667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:51:33.4069582Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5579673152480710,
-				"StableID":   "nR6vn2Z3ak11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:a5564337054c75b18a342d6f9e1e3075311b20028aa29d256f09bbcb6d731662",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48892", "10.65.0.27:48892", "172.17.0.1:48892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:51:33.951250072Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6814440783025337": {
-				"ID":          6814440783025337,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5579673152480710,
-				"StableID":   "nR6vn2Z3ak11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:a5564337054c75b18a342d6f9e1e3075311b20028aa29d256f09bbcb6d731662",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48892", "10.65.0.27:48892", "172.17.0.1:48892"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:51:33.951250072Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-			"MachineKey": "mkey:f7e3ae7063ecd97c70dfc9cf292e2be3f0b8a9623188ee2ca595db7fd60dfb45",
-			"Peers": [{
-				"ID":         2936024681908930,
-				"StableID":   "nPhNCcPjvP11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-				"DiscoKey":   "discokey:6f957027b041d937e5e013b8e10ae7963785af02377d8c20896c186fe1664867",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43848", "10.65.0.27:43848", "172.17.0.1:43848"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:51:30.157098585Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6748078656141316,
-				"StableID":   "nRwj8raDhu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-				"DiscoKey":   "discokey:461cdc980c42d46617753498cc6b2c072d825650ad8a9c738c49788ac75c2a65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128", "0.0.0.0/0", "::/0"],
-				"Endpoints":  ["77.164.248.136:48195", "10.65.0.27:48195", "172.17.0.1:48195"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:51:30.697989464Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1280311584870179,
-				"StableID":   "nW8yXdcrzA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-				"DiscoKey":   "discokey:40f0af0689b450bd06196a6715a3d595b572f828bd155a6fe651baa14fae1b47",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54926", "10.65.0.27:54926", "172.17.0.1:54926"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:51:31.232885488Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3434162236663933,
-				"StableID":   "n4aq7tcLpT11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-				"DiscoKey":   "discokey:9917200e7be77f45487197c2be3779279a9244368eb8f0cc1cc92bf32fcac151",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45175", "10.65.0.27:45175", "172.17.0.1:45175"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:51:31.779422906Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6814440783025337,
-				"StableID":   "n4nJ3eoGDv11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-				"DiscoKey":   "discokey:e792b97dc63f3964a687b25c0126c499330fa1aa729728f504709c5689cd8c78",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:34895", "10.65.0.27:34895", "172.17.0.1:34895"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:51:32.321687022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3335010483899327,
-				"StableID":   "nxqoF55S3T11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-				"KeyExpiry":  "2026-11-03T15:51:32Z",
-				"DiscoKey":   "discokey:eec1a663bb35800dc7fd8812a8499bf2d9ba03cb796240fd488ff4e6f4b82927",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46555", "10.65.0.27:46555", "172.17.0.1:46555"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:51:32.87144675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         487001463179707,
-				"StableID":   "nG9JekhZo411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:c9099069b4b3c93b479a368f732e5f79cdd72b9ec7a149bd0795728506c73623",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34667", "10.65.0.27:34667", "172.17.0.1:34667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T15:51:33.4069582Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         487001463179707,
-				"StableID":   "nG9JekhZo411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:c9099069b4b3c93b479a368f732e5f79cdd72b9ec7a149bd0795728506c73623",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34667", "10.65.0.27:34667", "172.17.0.1:34667"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T15:51:33.4069582Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:849998c24aa6a8455c2636ffec4882ab49a7bfb2b0125a6af14579103c63e52b",
-			"MachineKey": "mkey:2d0dabff8bfc6bc04b2091c21785cba9b53acef12d003300d691c56aae3f3e76",
-			"Peers": [{
-				"ID":         2936024681908930,
-				"StableID":   "nPhNCcPjvP11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:89a93e22257793b851d5082b73f330cbaf0e710c86e992d3751d6fd51d440855",
-				"DiscoKey":   "discokey:6f957027b041d937e5e013b8e10ae7963785af02377d8c20896c186fe1664867",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43848", "10.65.0.27:43848", "172.17.0.1:43848"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T15:51:30.157098585Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6748078656141316,
-				"StableID":   "nRwj8raDhu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:012174b038752708ec42a910ffbe720639f1b0948b6359c5f747a5db71b2b019",
-				"DiscoKey":   "discokey:461cdc980c42d46617753498cc6b2c072d825650ad8a9c738c49788ac75c2a65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128", "0.0.0.0/0", "::/0"],
-				"Endpoints":  ["77.164.248.136:48195", "10.65.0.27:48195", "172.17.0.1:48195"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T15:51:30.697989464Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1280311584870179,
-				"StableID":   "nW8yXdcrzA11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab0e1a07bd07cfcf6f008a4c5634b2402c8fb85f4dc8ab21c22dd59e6f0d677a",
-				"DiscoKey":   "discokey:40f0af0689b450bd06196a6715a3d595b572f828bd155a6fe651baa14fae1b47",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54926", "10.65.0.27:54926", "172.17.0.1:54926"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T15:51:31.232885488Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3434162236663933,
-				"StableID":   "n4aq7tcLpT11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e73598c9634c771e090e508d10977f9da2f943d08792f6a4fba699406c9754",
-				"DiscoKey":   "discokey:9917200e7be77f45487197c2be3779279a9244368eb8f0cc1cc92bf32fcac151",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45175", "10.65.0.27:45175", "172.17.0.1:45175"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T15:51:31.779422906Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6814440783025337,
-				"StableID":   "n4nJ3eoGDv11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0797f05a8874505a59eeca44760b495abe23ec48d69ecfb2189dd32925f0d10",
-				"DiscoKey":   "discokey:e792b97dc63f3964a687b25c0126c499330fa1aa729728f504709c5689cd8c78",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:34895", "10.65.0.27:34895", "172.17.0.1:34895"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T15:51:32.321687022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3335010483899327,
-				"StableID":   "nxqoF55S3T11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:7468c3def693ddc10117cf312517660f9441f5675d03690c31834b3181efed55",
-				"KeyExpiry":  "2026-11-03T15:51:32Z",
-				"DiscoKey":   "discokey:eec1a663bb35800dc7fd8812a8499bf2d9ba03cb796240fd488ff4e6f4b82927",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46555", "10.65.0.27:46555", "172.17.0.1:46555"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T15:51:32.87144675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5579673152480710,
-				"StableID":   "nR6vn2Z3ak11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:97d921b5c6dd0f4fbb93be83d16eb801dcb31bc84e70758d40f58cc5f801902d",
-				"KeyExpiry":  "2026-11-03T15:51:33Z",
-				"DiscoKey":   "discokey:a5564337054c75b18a342d6f9e1e3075311b20028aa29d256f09bbcb6d731662",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48892", "10.65.0.27:48892", "172.17.0.1:48892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T15:51:33.951250072Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c15-disable-ipv4.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c15-disable-ipv4.hujson
deleted file mode 100644
index ee49fea9f..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c15-disable-ipv4.hujson
+++ /dev/null
@@ -1,9725 +0,0 @@
-// nodeattrs-attr-c15-disable-ipv4
-//
-// disable-ipv4 on tag:client -- expect IPv4 stripped from SelfNode and peer view, IPv6 only
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-13T09:42:46Z
-// tool version:   tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c15-disable-ipv4",
-	"description":    "disable-ipv4 on tag:client -- expect IPv4 stripped from SelfNode and peer view, IPv6 only",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-13T09:42:46.874401447Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                  \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"disable-ipv4 on tag:client -- expect IPv4 stripped from SelfNode and peer view, IPv6 only\",\n    \"id\": \"nodeattrs-attr-c15-disable-ipv4\",\n    \"options\": {},\n    \"policy\": {\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        },\n        \"nodeAttrs\": [\n            {\n                \"target\": [\"tag:client\"],\n                \"attr\":   [\"disable-ipv4\"]\n            }\n        ]\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c15-disable-ipv4.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["disable-ipv4"], "target": ["tag:client"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3678477508626290,
-				"StableID":   "n7jo5GNziV11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       3678477508626290,
-				"Key":        "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-				"DiscoKey":   "discokey:e0e8f084a06289b9d8e2f54f0fe84988407cc5baeac3c929adc0db1c2cf8d271",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48659",
-					"10.65.0.27:48659",
-					"172.17.0.1:48659",
-					"172.18.0.1:48659",
-					"172.19.0.1:48659",
-					"172.20.0.1:48659",
-					"172.21.0.1:48659",
-					"172.22.0.1:48659",
-					"172.23.0.1:48659",
-					"172.24.0.1:48659",
-					"172.25.0.1:48659",
-					"172.26.0.1:48659",
-					"172.27.0.1:48659"
-				],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi6", "Port": 64010},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:42:52.462751379Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-ipv4":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-ipv4",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-			"MachineKey": "mkey:5fea2cbfb052af03f3cc5b336f3294f60ef2b17f4daa94598fa7cd57b8e10041",
-			"Peers": [{
-				"ID":         248051897162903,
-				"StableID":   "nGDqjMuLw211CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-				"DiscoKey":   "discokey:9ea81b22200501d873caf8fb9ad95c65e9b0e58c0ff248100d0a48d50e497041",
-				"Addresses":  ["fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:48222",
-					"10.65.0.27:48222",
-					"172.17.0.1:48222",
-					"172.18.0.1:48222",
-					"172.19.0.1:48222",
-					"172.20.0.1:48222",
-					"172.21.0.1:48222",
-					"172.22.0.1:48222",
-					"172.23.0.1:48222",
-					"172.24.0.1:48222",
-					"172.25.0.1:48222",
-					"172.26.0.1:48222",
-					"172.27.0.1:48222"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:42:52.997295504Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5505534131683565,
-				"StableID":   "nJoFQf3Uzj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-				"DiscoKey":   "discokey:0757a1bdd2a1664742ae514409b84ac04cae3ab4fe56ad945800cf6657a2675a",
-				"Addresses":  ["fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:56363",
-					"10.65.0.27:56363",
-					"172.17.0.1:56363",
-					"172.18.0.1:56363",
-					"172.19.0.1:56363",
-					"172.20.0.1:56363",
-					"172.21.0.1:56363",
-					"172.22.0.1:56363",
-					"172.23.0.1:56363",
-					"172.24.0.1:56363",
-					"172.25.0.1:56363",
-					"172.26.0.1:56363",
-					"172.27.0.1:56363"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:42:53.544064147Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4744289296257772,
-				"StableID":   "nBWB4ESh3e11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-				"DiscoKey":   "discokey:420363f1968ac39f9cfc22e1038a77a667058b38d8f45acd88cd2d30cc1cc43c",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:38127",
-					"10.65.0.27:38127",
-					"172.17.0.1:38127",
-					"172.18.0.1:38127",
-					"172.19.0.1:38127",
-					"172.20.0.1:38127",
-					"172.21.0.1:38127",
-					"172.22.0.1:38127",
-					"172.23.0.1:38127",
-					"172.24.0.1:38127",
-					"172.25.0.1:38127",
-					"172.26.0.1:38127",
-					"172.27.0.1:38127"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-13T09:42:54.081851485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1440504016732805,
-				"StableID":   "ncNhBgbQFC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-				"DiscoKey":   "discokey:36b516fab5b39785586b4960a5c0f5a722b626bf235a1adc52e4f71930ae5658",
-				"Addresses":  ["fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:59362",
-					"10.65.0.27:59362",
-					"172.17.0.1:59362",
-					"172.18.0.1:59362",
-					"172.19.0.1:59362",
-					"172.20.0.1:59362",
-					"172.21.0.1:59362",
-					"172.22.0.1:59362",
-					"172.23.0.1:59362",
-					"172.24.0.1:59362",
-					"172.25.0.1:59362",
-					"172.26.0.1:59362",
-					"172.27.0.1:59362"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:42:54.634678526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6865547823617176,
-				"StableID":   "n9B8DNJRcv11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:d059a9d41400569ca5f1a9d0c524f0b3a73deef6993f6e6630209c6f8de32803",
-				"Addresses":  ["fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:38338",
-					"10.65.0.27:38338",
-					"172.17.0.1:38338",
-					"172.18.0.1:38338",
-					"172.19.0.1:38338",
-					"172.20.0.1:38338",
-					"172.21.0.1:38338",
-					"172.22.0.1:38338",
-					"172.23.0.1:38338",
-					"172.24.0.1:38338",
-					"172.25.0.1:38338",
-					"172.26.0.1:38338",
-					"172.27.0.1:38338"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:42:55.1708831Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5780520788520300,
-				"StableID":   "n57rcnU19n11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:bd03a23904d96abfc2a3cb835a8836ef7a87dd127816b6a02c616e49ce73d603",
-				"Addresses":  ["fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:56909",
-					"10.65.0.27:56909",
-					"172.17.0.1:56909",
-					"172.18.0.1:56909",
-					"172.19.0.1:56909",
-					"172.20.0.1:56909",
-					"172.21.0.1:56909",
-					"172.22.0.1:56909",
-					"172.23.0.1:56909",
-					"172.24.0.1:56909",
-					"172.25.0.1:56909",
-					"172.26.0.1:56909",
-					"172.27.0.1:56909"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:42:55.705070864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6786716618178228,
-				"StableID":   "nX8hXAYizu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-				"KeyExpiry":  "2026-11-09T09:42:56Z",
-				"DiscoKey":   "discokey:460eed18744e30112d90638ab0cdb7b19596a5f2e704b3ce0d7177a5997b5e62",
-				"Addresses":  ["fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:49657",
-					"10.65.0.27:49657",
-					"172.17.0.1:49657",
-					"172.18.0.1:49657",
-					"172.19.0.1:49657",
-					"172.20.0.1:49657",
-					"172.21.0.1:49657",
-					"172.22.0.1:49657",
-					"172.23.0.1:49657",
-					"172.24.0.1:49657",
-					"172.25.0.1:49657",
-					"172.26.0.1:49657",
-					"172.27.0.1:49657"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:42:56.231366465Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3678477508626290": {
-				"ID":          3678477508626290,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         248051897162903,
-				"StableID":   "nGDqjMuLw211CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       248051897162903,
-				"Key":        "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-				"DiscoKey":   "discokey:9ea81b22200501d873caf8fb9ad95c65e9b0e58c0ff248100d0a48d50e497041",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:48222",
-					"10.65.0.27:48222",
-					"172.17.0.1:48222",
-					"172.18.0.1:48222",
-					"172.19.0.1:48222",
-					"172.20.0.1:48222",
-					"172.21.0.1:48222",
-					"172.22.0.1:48222",
-					"172.23.0.1:48222",
-					"172.24.0.1:48222",
-					"172.25.0.1:48222",
-					"172.26.0.1:48222",
-					"172.27.0.1:48222"
-				],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-13T09:42:52.997295504Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-			"MachineKey": "mkey:cafa15f9092e7862864557a4adc8805655d136c90476b5c65f80057b9d633e4d",
-			"Peers": [{
-				"ID":         3678477508626290,
-				"StableID":   "n7jo5GNziV11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-				"DiscoKey":   "discokey:e0e8f084a06289b9d8e2f54f0fe84988407cc5baeac3c929adc0db1c2cf8d271",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48659",
-					"10.65.0.27:48659",
-					"172.17.0.1:48659",
-					"172.18.0.1:48659",
-					"172.19.0.1:48659",
-					"172.20.0.1:48659",
-					"172.21.0.1:48659",
-					"172.22.0.1:48659",
-					"172.23.0.1:48659",
-					"172.24.0.1:48659",
-					"172.25.0.1:48659",
-					"172.26.0.1:48659",
-					"172.27.0.1:48659"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "client",
-					"Services": [{"Proto": "peerapi6", "Port": 64010}]
-				},
-				"Created":              "2026-05-13T09:42:52.462751379Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5505534131683565,
-				"StableID":   "nJoFQf3Uzj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-				"DiscoKey":   "discokey:0757a1bdd2a1664742ae514409b84ac04cae3ab4fe56ad945800cf6657a2675a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:56363",
-					"10.65.0.27:56363",
-					"172.17.0.1:56363",
-					"172.18.0.1:56363",
-					"172.19.0.1:56363",
-					"172.20.0.1:56363",
-					"172.21.0.1:56363",
-					"172.22.0.1:56363",
-					"172.23.0.1:56363",
-					"172.24.0.1:56363",
-					"172.25.0.1:56363",
-					"172.26.0.1:56363",
-					"172.27.0.1:56363"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:42:53.544064147Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4744289296257772,
-				"StableID":   "nBWB4ESh3e11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-				"DiscoKey":   "discokey:420363f1968ac39f9cfc22e1038a77a667058b38d8f45acd88cd2d30cc1cc43c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:38127",
-					"10.65.0.27:38127",
-					"172.17.0.1:38127",
-					"172.18.0.1:38127",
-					"172.19.0.1:38127",
-					"172.20.0.1:38127",
-					"172.21.0.1:38127",
-					"172.22.0.1:38127",
-					"172.23.0.1:38127",
-					"172.24.0.1:38127",
-					"172.25.0.1:38127",
-					"172.26.0.1:38127",
-					"172.27.0.1:38127"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-13T09:42:54.081851485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1440504016732805,
-				"StableID":   "ncNhBgbQFC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-				"DiscoKey":   "discokey:36b516fab5b39785586b4960a5c0f5a722b626bf235a1adc52e4f71930ae5658",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:59362",
-					"10.65.0.27:59362",
-					"172.17.0.1:59362",
-					"172.18.0.1:59362",
-					"172.19.0.1:59362",
-					"172.20.0.1:59362",
-					"172.21.0.1:59362",
-					"172.22.0.1:59362",
-					"172.23.0.1:59362",
-					"172.24.0.1:59362",
-					"172.25.0.1:59362",
-					"172.26.0.1:59362",
-					"172.27.0.1:59362"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:42:54.634678526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6865547823617176,
-				"StableID":   "n9B8DNJRcv11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:d059a9d41400569ca5f1a9d0c524f0b3a73deef6993f6e6630209c6f8de32803",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:38338",
-					"10.65.0.27:38338",
-					"172.17.0.1:38338",
-					"172.18.0.1:38338",
-					"172.19.0.1:38338",
-					"172.20.0.1:38338",
-					"172.21.0.1:38338",
-					"172.22.0.1:38338",
-					"172.23.0.1:38338",
-					"172.24.0.1:38338",
-					"172.25.0.1:38338",
-					"172.26.0.1:38338",
-					"172.27.0.1:38338"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:42:55.1708831Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5780520788520300,
-				"StableID":   "n57rcnU19n11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:bd03a23904d96abfc2a3cb835a8836ef7a87dd127816b6a02c616e49ce73d603",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:56909",
-					"10.65.0.27:56909",
-					"172.17.0.1:56909",
-					"172.18.0.1:56909",
-					"172.19.0.1:56909",
-					"172.20.0.1:56909",
-					"172.21.0.1:56909",
-					"172.22.0.1:56909",
-					"172.23.0.1:56909",
-					"172.24.0.1:56909",
-					"172.25.0.1:56909",
-					"172.26.0.1:56909",
-					"172.27.0.1:56909"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:42:55.705070864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6786716618178228,
-				"StableID":   "nX8hXAYizu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-				"KeyExpiry":  "2026-11-09T09:42:56Z",
-				"DiscoKey":   "discokey:460eed18744e30112d90638ab0cdb7b19596a5f2e704b3ce0d7177a5997b5e62",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:49657",
-					"10.65.0.27:49657",
-					"172.17.0.1:49657",
-					"172.18.0.1:49657",
-					"172.19.0.1:49657",
-					"172.20.0.1:49657",
-					"172.21.0.1:49657",
-					"172.22.0.1:49657",
-					"172.23.0.1:49657",
-					"172.24.0.1:49657",
-					"172.25.0.1:49657",
-					"172.26.0.1:49657",
-					"172.27.0.1:49657"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:42:56.231366465Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "248051897162903": {
-				"ID":          248051897162903,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6865547823617176,
-				"StableID":   "n9B8DNJRcv11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:d059a9d41400569ca5f1a9d0c524f0b3a73deef6993f6e6630209c6f8de32803",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:38338",
-					"10.65.0.27:38338",
-					"172.17.0.1:38338",
-					"172.18.0.1:38338",
-					"172.19.0.1:38338",
-					"172.20.0.1:38338",
-					"172.21.0.1:38338",
-					"172.22.0.1:38338",
-					"172.23.0.1:38338",
-					"172.24.0.1:38338",
-					"172.25.0.1:38338",
-					"172.26.0.1:38338",
-					"172.27.0.1:38338"
-				],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:42:55.1708831Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-			"MachineKey": "mkey:71e6322979a4ad0f5cd0e7d7221e4c40cba9d3a61c6ac823de2ab6c6b0a76d41",
-			"Peers": [{
-				"ID":         3678477508626290,
-				"StableID":   "n7jo5GNziV11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-				"DiscoKey":   "discokey:e0e8f084a06289b9d8e2f54f0fe84988407cc5baeac3c929adc0db1c2cf8d271",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48659",
-					"10.65.0.27:48659",
-					"172.17.0.1:48659",
-					"172.18.0.1:48659",
-					"172.19.0.1:48659",
-					"172.20.0.1:48659",
-					"172.21.0.1:48659",
-					"172.22.0.1:48659",
-					"172.23.0.1:48659",
-					"172.24.0.1:48659",
-					"172.25.0.1:48659",
-					"172.26.0.1:48659",
-					"172.27.0.1:48659"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "client",
-					"Services": [{"Proto": "peerapi6", "Port": 64010}]
-				},
-				"Created":              "2026-05-13T09:42:52.462751379Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         248051897162903,
-				"StableID":   "nGDqjMuLw211CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-				"DiscoKey":   "discokey:9ea81b22200501d873caf8fb9ad95c65e9b0e58c0ff248100d0a48d50e497041",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:48222",
-					"10.65.0.27:48222",
-					"172.17.0.1:48222",
-					"172.18.0.1:48222",
-					"172.19.0.1:48222",
-					"172.20.0.1:48222",
-					"172.21.0.1:48222",
-					"172.22.0.1:48222",
-					"172.23.0.1:48222",
-					"172.24.0.1:48222",
-					"172.25.0.1:48222",
-					"172.26.0.1:48222",
-					"172.27.0.1:48222"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:42:52.997295504Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5505534131683565,
-				"StableID":   "nJoFQf3Uzj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-				"DiscoKey":   "discokey:0757a1bdd2a1664742ae514409b84ac04cae3ab4fe56ad945800cf6657a2675a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:56363",
-					"10.65.0.27:56363",
-					"172.17.0.1:56363",
-					"172.18.0.1:56363",
-					"172.19.0.1:56363",
-					"172.20.0.1:56363",
-					"172.21.0.1:56363",
-					"172.22.0.1:56363",
-					"172.23.0.1:56363",
-					"172.24.0.1:56363",
-					"172.25.0.1:56363",
-					"172.26.0.1:56363",
-					"172.27.0.1:56363"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:42:53.544064147Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4744289296257772,
-				"StableID":   "nBWB4ESh3e11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-				"DiscoKey":   "discokey:420363f1968ac39f9cfc22e1038a77a667058b38d8f45acd88cd2d30cc1cc43c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:38127",
-					"10.65.0.27:38127",
-					"172.17.0.1:38127",
-					"172.18.0.1:38127",
-					"172.19.0.1:38127",
-					"172.20.0.1:38127",
-					"172.21.0.1:38127",
-					"172.22.0.1:38127",
-					"172.23.0.1:38127",
-					"172.24.0.1:38127",
-					"172.25.0.1:38127",
-					"172.26.0.1:38127",
-					"172.27.0.1:38127"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-13T09:42:54.081851485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1440504016732805,
-				"StableID":   "ncNhBgbQFC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-				"DiscoKey":   "discokey:36b516fab5b39785586b4960a5c0f5a722b626bf235a1adc52e4f71930ae5658",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:59362",
-					"10.65.0.27:59362",
-					"172.17.0.1:59362",
-					"172.18.0.1:59362",
-					"172.19.0.1:59362",
-					"172.20.0.1:59362",
-					"172.21.0.1:59362",
-					"172.22.0.1:59362",
-					"172.23.0.1:59362",
-					"172.24.0.1:59362",
-					"172.25.0.1:59362",
-					"172.26.0.1:59362",
-					"172.27.0.1:59362"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:42:54.634678526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5780520788520300,
-				"StableID":   "n57rcnU19n11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:bd03a23904d96abfc2a3cb835a8836ef7a87dd127816b6a02c616e49ce73d603",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:56909",
-					"10.65.0.27:56909",
-					"172.17.0.1:56909",
-					"172.18.0.1:56909",
-					"172.19.0.1:56909",
-					"172.20.0.1:56909",
-					"172.21.0.1:56909",
-					"172.22.0.1:56909",
-					"172.23.0.1:56909",
-					"172.24.0.1:56909",
-					"172.25.0.1:56909",
-					"172.26.0.1:56909",
-					"172.27.0.1:56909"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:42:55.705070864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6786716618178228,
-				"StableID":   "nX8hXAYizu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-				"KeyExpiry":  "2026-11-09T09:42:56Z",
-				"DiscoKey":   "discokey:460eed18744e30112d90638ab0cdb7b19596a5f2e704b3ce0d7177a5997b5e62",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:49657",
-					"10.65.0.27:49657",
-					"172.17.0.1:49657",
-					"172.18.0.1:49657",
-					"172.19.0.1:49657",
-					"172.20.0.1:49657",
-					"172.21.0.1:49657",
-					"172.22.0.1:49657",
-					"172.23.0.1:49657",
-					"172.24.0.1:49657",
-					"172.25.0.1:49657",
-					"172.26.0.1:49657",
-					"172.27.0.1:49657"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:42:56.231366465Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5505534131683565,
-				"StableID":   "nJoFQf3Uzj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5505534131683565,
-				"Key":        "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-				"DiscoKey":   "discokey:0757a1bdd2a1664742ae514409b84ac04cae3ab4fe56ad945800cf6657a2675a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:56363",
-					"10.65.0.27:56363",
-					"172.17.0.1:56363",
-					"172.18.0.1:56363",
-					"172.19.0.1:56363",
-					"172.20.0.1:56363",
-					"172.21.0.1:56363",
-					"172.22.0.1:56363",
-					"172.23.0.1:56363",
-					"172.24.0.1:56363",
-					"172.25.0.1:56363",
-					"172.26.0.1:56363",
-					"172.27.0.1:56363"
-				],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:42:53.544064147Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-			"MachineKey": "mkey:5dfadb7362ecdaa465521e4840dc683a5d57ef6a60139c6d82e2a9c4ce11eb4e",
-			"Peers": [{
-				"ID":         3678477508626290,
-				"StableID":   "n7jo5GNziV11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-				"DiscoKey":   "discokey:e0e8f084a06289b9d8e2f54f0fe84988407cc5baeac3c929adc0db1c2cf8d271",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48659",
-					"10.65.0.27:48659",
-					"172.17.0.1:48659",
-					"172.18.0.1:48659",
-					"172.19.0.1:48659",
-					"172.20.0.1:48659",
-					"172.21.0.1:48659",
-					"172.22.0.1:48659",
-					"172.23.0.1:48659",
-					"172.24.0.1:48659",
-					"172.25.0.1:48659",
-					"172.26.0.1:48659",
-					"172.27.0.1:48659"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "client",
-					"Services": [{"Proto": "peerapi6", "Port": 64010}]
-				},
-				"Created":              "2026-05-13T09:42:52.462751379Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         248051897162903,
-				"StableID":   "nGDqjMuLw211CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-				"DiscoKey":   "discokey:9ea81b22200501d873caf8fb9ad95c65e9b0e58c0ff248100d0a48d50e497041",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:48222",
-					"10.65.0.27:48222",
-					"172.17.0.1:48222",
-					"172.18.0.1:48222",
-					"172.19.0.1:48222",
-					"172.20.0.1:48222",
-					"172.21.0.1:48222",
-					"172.22.0.1:48222",
-					"172.23.0.1:48222",
-					"172.24.0.1:48222",
-					"172.25.0.1:48222",
-					"172.26.0.1:48222",
-					"172.27.0.1:48222"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:42:52.997295504Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4744289296257772,
-				"StableID":   "nBWB4ESh3e11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-				"DiscoKey":   "discokey:420363f1968ac39f9cfc22e1038a77a667058b38d8f45acd88cd2d30cc1cc43c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:38127",
-					"10.65.0.27:38127",
-					"172.17.0.1:38127",
-					"172.18.0.1:38127",
-					"172.19.0.1:38127",
-					"172.20.0.1:38127",
-					"172.21.0.1:38127",
-					"172.22.0.1:38127",
-					"172.23.0.1:38127",
-					"172.24.0.1:38127",
-					"172.25.0.1:38127",
-					"172.26.0.1:38127",
-					"172.27.0.1:38127"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-13T09:42:54.081851485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1440504016732805,
-				"StableID":   "ncNhBgbQFC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-				"DiscoKey":   "discokey:36b516fab5b39785586b4960a5c0f5a722b626bf235a1adc52e4f71930ae5658",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:59362",
-					"10.65.0.27:59362",
-					"172.17.0.1:59362",
-					"172.18.0.1:59362",
-					"172.19.0.1:59362",
-					"172.20.0.1:59362",
-					"172.21.0.1:59362",
-					"172.22.0.1:59362",
-					"172.23.0.1:59362",
-					"172.24.0.1:59362",
-					"172.25.0.1:59362",
-					"172.26.0.1:59362",
-					"172.27.0.1:59362"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:42:54.634678526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6865547823617176,
-				"StableID":   "n9B8DNJRcv11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:d059a9d41400569ca5f1a9d0c524f0b3a73deef6993f6e6630209c6f8de32803",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:38338",
-					"10.65.0.27:38338",
-					"172.17.0.1:38338",
-					"172.18.0.1:38338",
-					"172.19.0.1:38338",
-					"172.20.0.1:38338",
-					"172.21.0.1:38338",
-					"172.22.0.1:38338",
-					"172.23.0.1:38338",
-					"172.24.0.1:38338",
-					"172.25.0.1:38338",
-					"172.26.0.1:38338",
-					"172.27.0.1:38338"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:42:55.1708831Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5780520788520300,
-				"StableID":   "n57rcnU19n11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:bd03a23904d96abfc2a3cb835a8836ef7a87dd127816b6a02c616e49ce73d603",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:56909",
-					"10.65.0.27:56909",
-					"172.17.0.1:56909",
-					"172.18.0.1:56909",
-					"172.19.0.1:56909",
-					"172.20.0.1:56909",
-					"172.21.0.1:56909",
-					"172.22.0.1:56909",
-					"172.23.0.1:56909",
-					"172.24.0.1:56909",
-					"172.25.0.1:56909",
-					"172.26.0.1:56909",
-					"172.27.0.1:56909"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:42:55.705070864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6786716618178228,
-				"StableID":   "nX8hXAYizu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-				"KeyExpiry":  "2026-11-09T09:42:56Z",
-				"DiscoKey":   "discokey:460eed18744e30112d90638ab0cdb7b19596a5f2e704b3ce0d7177a5997b5e62",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:49657",
-					"10.65.0.27:49657",
-					"172.17.0.1:49657",
-					"172.18.0.1:49657",
-					"172.19.0.1:49657",
-					"172.20.0.1:49657",
-					"172.21.0.1:49657",
-					"172.22.0.1:49657",
-					"172.23.0.1:49657",
-					"172.24.0.1:49657",
-					"172.25.0.1:49657",
-					"172.26.0.1:49657",
-					"172.27.0.1:49657"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:42:56.231366465Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5505534131683565": {
-				"ID":          5505534131683565,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4744289296257772,
-				"StableID":   "nBWB4ESh3e11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       4744289296257772,
-				"Key":        "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-				"DiscoKey":   "discokey:420363f1968ac39f9cfc22e1038a77a667058b38d8f45acd88cd2d30cc1cc43c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:38127",
-					"10.65.0.27:38127",
-					"172.17.0.1:38127",
-					"172.18.0.1:38127",
-					"172.19.0.1:38127",
-					"172.20.0.1:38127",
-					"172.21.0.1:38127",
-					"172.22.0.1:38127",
-					"172.23.0.1:38127",
-					"172.24.0.1:38127",
-					"172.25.0.1:38127",
-					"172.26.0.1:38127",
-					"172.27.0.1:38127"
-				],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-13T09:42:54.081851485Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-			"MachineKey": "mkey:722c58d6532aa4fa65a3c25aa286c822ec9efbf4e66c0599e656be5f9ab7510d",
-			"Peers": [{
-				"ID":         3678477508626290,
-				"StableID":   "n7jo5GNziV11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-				"DiscoKey":   "discokey:e0e8f084a06289b9d8e2f54f0fe84988407cc5baeac3c929adc0db1c2cf8d271",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48659",
-					"10.65.0.27:48659",
-					"172.17.0.1:48659",
-					"172.18.0.1:48659",
-					"172.19.0.1:48659",
-					"172.20.0.1:48659",
-					"172.21.0.1:48659",
-					"172.22.0.1:48659",
-					"172.23.0.1:48659",
-					"172.24.0.1:48659",
-					"172.25.0.1:48659",
-					"172.26.0.1:48659",
-					"172.27.0.1:48659"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "client",
-					"Services": [{"Proto": "peerapi6", "Port": 64010}]
-				},
-				"Created":              "2026-05-13T09:42:52.462751379Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         248051897162903,
-				"StableID":   "nGDqjMuLw211CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-				"DiscoKey":   "discokey:9ea81b22200501d873caf8fb9ad95c65e9b0e58c0ff248100d0a48d50e497041",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:48222",
-					"10.65.0.27:48222",
-					"172.17.0.1:48222",
-					"172.18.0.1:48222",
-					"172.19.0.1:48222",
-					"172.20.0.1:48222",
-					"172.21.0.1:48222",
-					"172.22.0.1:48222",
-					"172.23.0.1:48222",
-					"172.24.0.1:48222",
-					"172.25.0.1:48222",
-					"172.26.0.1:48222",
-					"172.27.0.1:48222"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:42:52.997295504Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5505534131683565,
-				"StableID":   "nJoFQf3Uzj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-				"DiscoKey":   "discokey:0757a1bdd2a1664742ae514409b84ac04cae3ab4fe56ad945800cf6657a2675a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:56363",
-					"10.65.0.27:56363",
-					"172.17.0.1:56363",
-					"172.18.0.1:56363",
-					"172.19.0.1:56363",
-					"172.20.0.1:56363",
-					"172.21.0.1:56363",
-					"172.22.0.1:56363",
-					"172.23.0.1:56363",
-					"172.24.0.1:56363",
-					"172.25.0.1:56363",
-					"172.26.0.1:56363",
-					"172.27.0.1:56363"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:42:53.544064147Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1440504016732805,
-				"StableID":   "ncNhBgbQFC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-				"DiscoKey":   "discokey:36b516fab5b39785586b4960a5c0f5a722b626bf235a1adc52e4f71930ae5658",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:59362",
-					"10.65.0.27:59362",
-					"172.17.0.1:59362",
-					"172.18.0.1:59362",
-					"172.19.0.1:59362",
-					"172.20.0.1:59362",
-					"172.21.0.1:59362",
-					"172.22.0.1:59362",
-					"172.23.0.1:59362",
-					"172.24.0.1:59362",
-					"172.25.0.1:59362",
-					"172.26.0.1:59362",
-					"172.27.0.1:59362"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:42:54.634678526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6865547823617176,
-				"StableID":   "n9B8DNJRcv11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:d059a9d41400569ca5f1a9d0c524f0b3a73deef6993f6e6630209c6f8de32803",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:38338",
-					"10.65.0.27:38338",
-					"172.17.0.1:38338",
-					"172.18.0.1:38338",
-					"172.19.0.1:38338",
-					"172.20.0.1:38338",
-					"172.21.0.1:38338",
-					"172.22.0.1:38338",
-					"172.23.0.1:38338",
-					"172.24.0.1:38338",
-					"172.25.0.1:38338",
-					"172.26.0.1:38338",
-					"172.27.0.1:38338"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:42:55.1708831Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5780520788520300,
-				"StableID":   "n57rcnU19n11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:bd03a23904d96abfc2a3cb835a8836ef7a87dd127816b6a02c616e49ce73d603",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:56909",
-					"10.65.0.27:56909",
-					"172.17.0.1:56909",
-					"172.18.0.1:56909",
-					"172.19.0.1:56909",
-					"172.20.0.1:56909",
-					"172.21.0.1:56909",
-					"172.22.0.1:56909",
-					"172.23.0.1:56909",
-					"172.24.0.1:56909",
-					"172.25.0.1:56909",
-					"172.26.0.1:56909",
-					"172.27.0.1:56909"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:42:55.705070864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6786716618178228,
-				"StableID":   "nX8hXAYizu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-				"KeyExpiry":  "2026-11-09T09:42:56Z",
-				"DiscoKey":   "discokey:460eed18744e30112d90638ab0cdb7b19596a5f2e704b3ce0d7177a5997b5e62",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:49657",
-					"10.65.0.27:49657",
-					"172.17.0.1:49657",
-					"172.18.0.1:49657",
-					"172.19.0.1:49657",
-					"172.20.0.1:49657",
-					"172.21.0.1:49657",
-					"172.22.0.1:49657",
-					"172.23.0.1:49657",
-					"172.24.0.1:49657",
-					"172.25.0.1:49657",
-					"172.26.0.1:49657",
-					"172.27.0.1:49657"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:42:56.231366465Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4744289296257772": {
-				"ID":          4744289296257772,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1440504016732805,
-				"StableID":   "ncNhBgbQFC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1440504016732805,
-				"Key":        "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-				"DiscoKey":   "discokey:36b516fab5b39785586b4960a5c0f5a722b626bf235a1adc52e4f71930ae5658",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:59362",
-					"10.65.0.27:59362",
-					"172.17.0.1:59362",
-					"172.18.0.1:59362",
-					"172.19.0.1:59362",
-					"172.20.0.1:59362",
-					"172.21.0.1:59362",
-					"172.22.0.1:59362",
-					"172.23.0.1:59362",
-					"172.24.0.1:59362",
-					"172.25.0.1:59362",
-					"172.26.0.1:59362",
-					"172.27.0.1:59362"
-				],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:42:54.634678526Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-			"MachineKey": "mkey:597b26354383172b619878381bf15ff1b13ffc1d3e88dead3240a7c7c57b2b5e",
-			"Peers": [{
-				"ID":         3678477508626290,
-				"StableID":   "n7jo5GNziV11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-				"DiscoKey":   "discokey:e0e8f084a06289b9d8e2f54f0fe84988407cc5baeac3c929adc0db1c2cf8d271",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48659",
-					"10.65.0.27:48659",
-					"172.17.0.1:48659",
-					"172.18.0.1:48659",
-					"172.19.0.1:48659",
-					"172.20.0.1:48659",
-					"172.21.0.1:48659",
-					"172.22.0.1:48659",
-					"172.23.0.1:48659",
-					"172.24.0.1:48659",
-					"172.25.0.1:48659",
-					"172.26.0.1:48659",
-					"172.27.0.1:48659"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "client",
-					"Services": [{"Proto": "peerapi6", "Port": 64010}]
-				},
-				"Created":              "2026-05-13T09:42:52.462751379Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         248051897162903,
-				"StableID":   "nGDqjMuLw211CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-				"DiscoKey":   "discokey:9ea81b22200501d873caf8fb9ad95c65e9b0e58c0ff248100d0a48d50e497041",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:48222",
-					"10.65.0.27:48222",
-					"172.17.0.1:48222",
-					"172.18.0.1:48222",
-					"172.19.0.1:48222",
-					"172.20.0.1:48222",
-					"172.21.0.1:48222",
-					"172.22.0.1:48222",
-					"172.23.0.1:48222",
-					"172.24.0.1:48222",
-					"172.25.0.1:48222",
-					"172.26.0.1:48222",
-					"172.27.0.1:48222"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:42:52.997295504Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5505534131683565,
-				"StableID":   "nJoFQf3Uzj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-				"DiscoKey":   "discokey:0757a1bdd2a1664742ae514409b84ac04cae3ab4fe56ad945800cf6657a2675a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:56363",
-					"10.65.0.27:56363",
-					"172.17.0.1:56363",
-					"172.18.0.1:56363",
-					"172.19.0.1:56363",
-					"172.20.0.1:56363",
-					"172.21.0.1:56363",
-					"172.22.0.1:56363",
-					"172.23.0.1:56363",
-					"172.24.0.1:56363",
-					"172.25.0.1:56363",
-					"172.26.0.1:56363",
-					"172.27.0.1:56363"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:42:53.544064147Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4744289296257772,
-				"StableID":   "nBWB4ESh3e11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-				"DiscoKey":   "discokey:420363f1968ac39f9cfc22e1038a77a667058b38d8f45acd88cd2d30cc1cc43c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:38127",
-					"10.65.0.27:38127",
-					"172.17.0.1:38127",
-					"172.18.0.1:38127",
-					"172.19.0.1:38127",
-					"172.20.0.1:38127",
-					"172.21.0.1:38127",
-					"172.22.0.1:38127",
-					"172.23.0.1:38127",
-					"172.24.0.1:38127",
-					"172.25.0.1:38127",
-					"172.26.0.1:38127",
-					"172.27.0.1:38127"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-13T09:42:54.081851485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6865547823617176,
-				"StableID":   "n9B8DNJRcv11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:d059a9d41400569ca5f1a9d0c524f0b3a73deef6993f6e6630209c6f8de32803",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:38338",
-					"10.65.0.27:38338",
-					"172.17.0.1:38338",
-					"172.18.0.1:38338",
-					"172.19.0.1:38338",
-					"172.20.0.1:38338",
-					"172.21.0.1:38338",
-					"172.22.0.1:38338",
-					"172.23.0.1:38338",
-					"172.24.0.1:38338",
-					"172.25.0.1:38338",
-					"172.26.0.1:38338",
-					"172.27.0.1:38338"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:42:55.1708831Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5780520788520300,
-				"StableID":   "n57rcnU19n11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:bd03a23904d96abfc2a3cb835a8836ef7a87dd127816b6a02c616e49ce73d603",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:56909",
-					"10.65.0.27:56909",
-					"172.17.0.1:56909",
-					"172.18.0.1:56909",
-					"172.19.0.1:56909",
-					"172.20.0.1:56909",
-					"172.21.0.1:56909",
-					"172.22.0.1:56909",
-					"172.23.0.1:56909",
-					"172.24.0.1:56909",
-					"172.25.0.1:56909",
-					"172.26.0.1:56909",
-					"172.27.0.1:56909"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:42:55.705070864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6786716618178228,
-				"StableID":   "nX8hXAYizu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-				"KeyExpiry":  "2026-11-09T09:42:56Z",
-				"DiscoKey":   "discokey:460eed18744e30112d90638ab0cdb7b19596a5f2e704b3ce0d7177a5997b5e62",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:49657",
-					"10.65.0.27:49657",
-					"172.17.0.1:49657",
-					"172.18.0.1:49657",
-					"172.19.0.1:49657",
-					"172.20.0.1:49657",
-					"172.21.0.1:49657",
-					"172.22.0.1:49657",
-					"172.23.0.1:49657",
-					"172.24.0.1:49657",
-					"172.25.0.1:49657",
-					"172.26.0.1:49657",
-					"172.27.0.1:49657"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:42:56.231366465Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1440504016732805": {
-				"ID":          1440504016732805,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6786716618178228,
-				"StableID":   "nX8hXAYizu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-				"KeyExpiry":  "2026-11-09T09:42:56Z",
-				"DiscoKey":   "discokey:460eed18744e30112d90638ab0cdb7b19596a5f2e704b3ce0d7177a5997b5e62",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:49657",
-					"10.65.0.27:49657",
-					"172.17.0.1:49657",
-					"172.18.0.1:49657",
-					"172.19.0.1:49657",
-					"172.20.0.1:49657",
-					"172.21.0.1:49657",
-					"172.22.0.1:49657",
-					"172.23.0.1:49657",
-					"172.24.0.1:49657",
-					"172.25.0.1:49657",
-					"172.26.0.1:49657",
-					"172.27.0.1:49657"
-				],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:42:56.231366465Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-			"MachineKey": "mkey:eab73a9e79b770f0387bd0005b3cbed46b82ae8f27862f90c27adf7c95383e36",
-			"Peers": [{
-				"ID":         3678477508626290,
-				"StableID":   "n7jo5GNziV11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-				"DiscoKey":   "discokey:e0e8f084a06289b9d8e2f54f0fe84988407cc5baeac3c929adc0db1c2cf8d271",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48659",
-					"10.65.0.27:48659",
-					"172.17.0.1:48659",
-					"172.18.0.1:48659",
-					"172.19.0.1:48659",
-					"172.20.0.1:48659",
-					"172.21.0.1:48659",
-					"172.22.0.1:48659",
-					"172.23.0.1:48659",
-					"172.24.0.1:48659",
-					"172.25.0.1:48659",
-					"172.26.0.1:48659",
-					"172.27.0.1:48659"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "client",
-					"Services": [{"Proto": "peerapi6", "Port": 64010}]
-				},
-				"Created":              "2026-05-13T09:42:52.462751379Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         248051897162903,
-				"StableID":   "nGDqjMuLw211CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-				"DiscoKey":   "discokey:9ea81b22200501d873caf8fb9ad95c65e9b0e58c0ff248100d0a48d50e497041",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:48222",
-					"10.65.0.27:48222",
-					"172.17.0.1:48222",
-					"172.18.0.1:48222",
-					"172.19.0.1:48222",
-					"172.20.0.1:48222",
-					"172.21.0.1:48222",
-					"172.22.0.1:48222",
-					"172.23.0.1:48222",
-					"172.24.0.1:48222",
-					"172.25.0.1:48222",
-					"172.26.0.1:48222",
-					"172.27.0.1:48222"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:42:52.997295504Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5505534131683565,
-				"StableID":   "nJoFQf3Uzj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-				"DiscoKey":   "discokey:0757a1bdd2a1664742ae514409b84ac04cae3ab4fe56ad945800cf6657a2675a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:56363",
-					"10.65.0.27:56363",
-					"172.17.0.1:56363",
-					"172.18.0.1:56363",
-					"172.19.0.1:56363",
-					"172.20.0.1:56363",
-					"172.21.0.1:56363",
-					"172.22.0.1:56363",
-					"172.23.0.1:56363",
-					"172.24.0.1:56363",
-					"172.25.0.1:56363",
-					"172.26.0.1:56363",
-					"172.27.0.1:56363"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:42:53.544064147Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4744289296257772,
-				"StableID":   "nBWB4ESh3e11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-				"DiscoKey":   "discokey:420363f1968ac39f9cfc22e1038a77a667058b38d8f45acd88cd2d30cc1cc43c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:38127",
-					"10.65.0.27:38127",
-					"172.17.0.1:38127",
-					"172.18.0.1:38127",
-					"172.19.0.1:38127",
-					"172.20.0.1:38127",
-					"172.21.0.1:38127",
-					"172.22.0.1:38127",
-					"172.23.0.1:38127",
-					"172.24.0.1:38127",
-					"172.25.0.1:38127",
-					"172.26.0.1:38127",
-					"172.27.0.1:38127"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-13T09:42:54.081851485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1440504016732805,
-				"StableID":   "ncNhBgbQFC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-				"DiscoKey":   "discokey:36b516fab5b39785586b4960a5c0f5a722b626bf235a1adc52e4f71930ae5658",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:59362",
-					"10.65.0.27:59362",
-					"172.17.0.1:59362",
-					"172.18.0.1:59362",
-					"172.19.0.1:59362",
-					"172.20.0.1:59362",
-					"172.21.0.1:59362",
-					"172.22.0.1:59362",
-					"172.23.0.1:59362",
-					"172.24.0.1:59362",
-					"172.25.0.1:59362",
-					"172.26.0.1:59362",
-					"172.27.0.1:59362"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:42:54.634678526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6865547823617176,
-				"StableID":   "n9B8DNJRcv11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:d059a9d41400569ca5f1a9d0c524f0b3a73deef6993f6e6630209c6f8de32803",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:38338",
-					"10.65.0.27:38338",
-					"172.17.0.1:38338",
-					"172.18.0.1:38338",
-					"172.19.0.1:38338",
-					"172.20.0.1:38338",
-					"172.21.0.1:38338",
-					"172.22.0.1:38338",
-					"172.23.0.1:38338",
-					"172.24.0.1:38338",
-					"172.25.0.1:38338",
-					"172.26.0.1:38338",
-					"172.27.0.1:38338"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:42:55.1708831Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5780520788520300,
-				"StableID":   "n57rcnU19n11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:bd03a23904d96abfc2a3cb835a8836ef7a87dd127816b6a02c616e49ce73d603",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:56909",
-					"10.65.0.27:56909",
-					"172.17.0.1:56909",
-					"172.18.0.1:56909",
-					"172.19.0.1:56909",
-					"172.20.0.1:56909",
-					"172.21.0.1:56909",
-					"172.22.0.1:56909",
-					"172.23.0.1:56909",
-					"172.24.0.1:56909",
-					"172.25.0.1:56909",
-					"172.26.0.1:56909",
-					"172.27.0.1:56909"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:42:55.705070864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5780520788520300,
-				"StableID":   "n57rcnU19n11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:bd03a23904d96abfc2a3cb835a8836ef7a87dd127816b6a02c616e49ce73d603",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:56909",
-					"10.65.0.27:56909",
-					"172.17.0.1:56909",
-					"172.18.0.1:56909",
-					"172.19.0.1:56909",
-					"172.20.0.1:56909",
-					"172.21.0.1:56909",
-					"172.22.0.1:56909",
-					"172.23.0.1:56909",
-					"172.24.0.1:56909",
-					"172.25.0.1:56909",
-					"172.26.0.1:56909",
-					"172.27.0.1:56909"
-				],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:42:55.705070864Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:328bfdb09bf4cb8dafeb4f9d098e4bfa8ae80333f0363583f75daf803d10f972",
-			"MachineKey": "mkey:02247457f0462a76c5000ab12ce835c0a519a1749345dadcc4addbe4c903f51b",
-			"Peers": [{
-				"ID":         3678477508626290,
-				"StableID":   "n7jo5GNziV11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:918ea57b959b5e316e46f75e7a4149fc8b86481352183a42770cb52c6734cd77",
-				"DiscoKey":   "discokey:e0e8f084a06289b9d8e2f54f0fe84988407cc5baeac3c929adc0db1c2cf8d271",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48659",
-					"10.65.0.27:48659",
-					"172.17.0.1:48659",
-					"172.18.0.1:48659",
-					"172.19.0.1:48659",
-					"172.20.0.1:48659",
-					"172.21.0.1:48659",
-					"172.22.0.1:48659",
-					"172.23.0.1:48659",
-					"172.24.0.1:48659",
-					"172.25.0.1:48659",
-					"172.26.0.1:48659",
-					"172.27.0.1:48659"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "client",
-					"Services": [{"Proto": "peerapi6", "Port": 64010}]
-				},
-				"Created":              "2026-05-13T09:42:52.462751379Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         248051897162903,
-				"StableID":   "nGDqjMuLw211CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a855e127f2b8df32cd9c96f742b7abc77f8d15db9c527c74a47dbdbe9e2ec812",
-				"DiscoKey":   "discokey:9ea81b22200501d873caf8fb9ad95c65e9b0e58c0ff248100d0a48d50e497041",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:48222",
-					"10.65.0.27:48222",
-					"172.17.0.1:48222",
-					"172.18.0.1:48222",
-					"172.19.0.1:48222",
-					"172.20.0.1:48222",
-					"172.21.0.1:48222",
-					"172.22.0.1:48222",
-					"172.23.0.1:48222",
-					"172.24.0.1:48222",
-					"172.25.0.1:48222",
-					"172.26.0.1:48222",
-					"172.27.0.1:48222"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:42:52.997295504Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5505534131683565,
-				"StableID":   "nJoFQf3Uzj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:566cf23de2b1045212c66eb1ac362d8a9bdacd3b7fbe791c6aa3b108df82c87e",
-				"DiscoKey":   "discokey:0757a1bdd2a1664742ae514409b84ac04cae3ab4fe56ad945800cf6657a2675a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:56363",
-					"10.65.0.27:56363",
-					"172.17.0.1:56363",
-					"172.18.0.1:56363",
-					"172.19.0.1:56363",
-					"172.20.0.1:56363",
-					"172.21.0.1:56363",
-					"172.22.0.1:56363",
-					"172.23.0.1:56363",
-					"172.24.0.1:56363",
-					"172.25.0.1:56363",
-					"172.26.0.1:56363",
-					"172.27.0.1:56363"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:42:53.544064147Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4744289296257772,
-				"StableID":   "nBWB4ESh3e11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:edc2b57b1b843869e6200b873e6ae4ef09f9c752d96fb08e0ba35a596bbd325e",
-				"DiscoKey":   "discokey:420363f1968ac39f9cfc22e1038a77a667058b38d8f45acd88cd2d30cc1cc43c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:38127",
-					"10.65.0.27:38127",
-					"172.17.0.1:38127",
-					"172.18.0.1:38127",
-					"172.19.0.1:38127",
-					"172.20.0.1:38127",
-					"172.21.0.1:38127",
-					"172.22.0.1:38127",
-					"172.23.0.1:38127",
-					"172.24.0.1:38127",
-					"172.25.0.1:38127",
-					"172.26.0.1:38127",
-					"172.27.0.1:38127"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-13T09:42:54.081851485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1440504016732805,
-				"StableID":   "ncNhBgbQFC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b0922e48e74decaa3b2cbd83ec5226613e7d9ee518681f230f7df1b18d749846",
-				"DiscoKey":   "discokey:36b516fab5b39785586b4960a5c0f5a722b626bf235a1adc52e4f71930ae5658",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:59362",
-					"10.65.0.27:59362",
-					"172.17.0.1:59362",
-					"172.18.0.1:59362",
-					"172.19.0.1:59362",
-					"172.20.0.1:59362",
-					"172.21.0.1:59362",
-					"172.22.0.1:59362",
-					"172.23.0.1:59362",
-					"172.24.0.1:59362",
-					"172.25.0.1:59362",
-					"172.26.0.1:59362",
-					"172.27.0.1:59362"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:42:54.634678526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6865547823617176,
-				"StableID":   "n9B8DNJRcv11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c8aa40765c46a33020e4bb0c5d775a0bfb4029c171597731120f501a5983ba10",
-				"KeyExpiry":  "2026-11-09T09:42:55Z",
-				"DiscoKey":   "discokey:d059a9d41400569ca5f1a9d0c524f0b3a73deef6993f6e6630209c6f8de32803",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:38338",
-					"10.65.0.27:38338",
-					"172.17.0.1:38338",
-					"172.18.0.1:38338",
-					"172.19.0.1:38338",
-					"172.20.0.1:38338",
-					"172.21.0.1:38338",
-					"172.22.0.1:38338",
-					"172.23.0.1:38338",
-					"172.24.0.1:38338",
-					"172.25.0.1:38338",
-					"172.26.0.1:38338",
-					"172.27.0.1:38338"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:42:55.1708831Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6786716618178228,
-				"StableID":   "nX8hXAYizu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:951df5b878a340d69723f1d81b17da53071ef238fba61063409354fcc76eb036",
-				"KeyExpiry":  "2026-11-09T09:42:56Z",
-				"DiscoKey":   "discokey:460eed18744e30112d90638ab0cdb7b19596a5f2e704b3ce0d7177a5997b5e62",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:49657",
-					"10.65.0.27:49657",
-					"172.17.0.1:49657",
-					"172.18.0.1:49657",
-					"172.19.0.1:49657",
-					"172.20.0.1:49657",
-					"172.21.0.1:49657",
-					"172.22.0.1:49657",
-					"172.23.0.1:49657",
-					"172.24.0.1:49657",
-					"172.25.0.1:49657",
-					"172.26.0.1:49657",
-					"172.27.0.1:49657"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:42:56.231366465Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c16-disable-ipv4-router.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c16-disable-ipv4-router.hujson
deleted file mode 100644
index ebae82df1..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c16-disable-ipv4-router.hujson
+++ /dev/null
@@ -1,9766 +0,0 @@
-// nodeattrs-attr-c16-disable-ipv4-router
-//
-// disable-ipv4 on tag:router (advertises 10.33.0.0/16) -- confirm subnet routes survive while node's own IPv4 is stripped
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-13T09:47:39Z
-// tool version:   tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c16-disable-ipv4-router",
-	"description":    "disable-ipv4 on tag:router (advertises 10.33.0.0/16) -- confirm subnet routes survive while node's own IPv4 is stripped",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-13T09:47:39.933710434Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                         \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"disable-ipv4 on tag:router (advertises 10.33.0.0/16) -- confirm subnet routes survive while node's own IPv4 is stripped\",\n    \"id\": \"nodeattrs-attr-c16-disable-ipv4-router\",\n    \"options\": {},\n    \"policy\": {\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        },\n        \"autoApprovers\": {\n            \"routes\": {\n                \"10.33.0.0/16\": [\"tag:router\"]\n            }\n        },\n        \"nodeAttrs\": [\n            {\n                \"target\": [\"tag:router\"],\n                \"attr\":   [\"disable-ipv4\"]\n            }\n        ]\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c16-disable-ipv4-router.hujson",
-		"full_policy": {
-			"autoApprovers": {"routes": {"10.33.0.0/16": ["tag:router"]}},
-			"nodeAttrs":     [{"attr": ["disable-ipv4"], "target": ["tag:router"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": ["10.33.0.0/16"]
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"10.33.0.0/16",
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"10.33.0.0/16",
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7744588193669082,
-				"StableID":   "nw1YaZCYU321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       7744588193669082,
-				"Key":        "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-				"DiscoKey":   "discokey:61b5fb33b4e55b98ddbe6e92afd9540282aa5d7b3899a30c96f9bea0e9c1a907",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48220",
-					"10.65.0.27:48220",
-					"172.17.0.1:48220",
-					"172.18.0.1:48220",
-					"172.19.0.1:48220",
-					"172.20.0.1:48220",
-					"172.21.0.1:48220",
-					"172.22.0.1:48220",
-					"172.23.0.1:48220",
-					"172.24.0.1:48220",
-					"172.25.0.1:48220",
-					"172.26.0.1:48220",
-					"172.27.0.1:48220"
-				],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:47:45.682829414Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-			"MachineKey": "mkey:acf71bfdd92d57cb63d1557a419d0abd9cd47dd0bcf07fd0d42a3c0340b63937",
-			"Peers": [{
-				"ID":         3850015448975794,
-				"StableID":   "nDY7UtNg4X11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-				"DiscoKey":   "discokey:4f571291f251d1e40f7304cafc3be280e261c0b0cd4e61d6818548335a71f82c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:54549",
-					"10.65.0.27:54549",
-					"172.17.0.1:54549",
-					"172.18.0.1:54549",
-					"172.19.0.1:54549",
-					"172.20.0.1:54549",
-					"172.21.0.1:54549",
-					"172.22.0.1:54549",
-					"172.23.0.1:54549",
-					"172.24.0.1:54549",
-					"172.25.0.1:54549",
-					"172.26.0.1:54549",
-					"172.27.0.1:54549"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:47:46.22785674Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8387476850151810,
-				"StableID":   "ndtbg4ohV821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-				"DiscoKey":   "discokey:814b786f466777ae80c7131c07cd3a1ca59bfcfe707f5211ba69843bd0581468",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:41242",
-					"10.65.0.27:41242",
-					"172.17.0.1:41242",
-					"172.18.0.1:41242",
-					"172.19.0.1:41242",
-					"172.20.0.1:41242",
-					"172.21.0.1:41242",
-					"172.22.0.1:41242",
-					"172.23.0.1:41242",
-					"172.24.0.1:41242",
-					"172.25.0.1:41242",
-					"172.26.0.1:41242",
-					"172.27.0.1:41242"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:47:46.758242986Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4360353747544105,
-				"StableID":   "nUakLk6p3b11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-				"DiscoKey":   "discokey:22b7aaac53fdd924092758d904e4aadf1f5aa77316cf10bfa6fd717da7a6ee09",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-				"Endpoints": [
-					"77.164.248.136:55796",
-					"10.65.0.27:55796",
-					"172.17.0.1:55796",
-					"172.18.0.1:55796",
-					"172.19.0.1:55796",
-					"172.20.0.1:55796",
-					"172.21.0.1:55796",
-					"172.22.0.1:55796",
-					"172.23.0.1:55796",
-					"172.24.0.1:55796",
-					"172.25.0.1:55796",
-					"172.26.0.1:55796",
-					"172.27.0.1:55796"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "router",
-					"Services": [{"Proto": "peerapi6", "Port": 47423}]
-				},
-				"Created":              "2026-05-13T09:47:47.298384949Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"PrimaryRoutes":        ["10.33.0.0/16"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7260286355977455,
-				"StableID":   "nYwWbrQChy11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-				"DiscoKey":   "discokey:e3875bccf4317688f40dd98c6831e538f87acc3cdd24d13ce8be76355afd3271",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:43114",
-					"10.65.0.27:43114",
-					"172.17.0.1:43114",
-					"172.18.0.1:43114",
-					"172.19.0.1:43114",
-					"172.20.0.1:43114",
-					"172.21.0.1:43114",
-					"172.22.0.1:43114",
-					"172.23.0.1:43114",
-					"172.24.0.1:43114",
-					"172.25.0.1:43114",
-					"172.26.0.1:43114",
-					"172.27.0.1:43114"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:47:47.844090839Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1179873036418261,
-				"StableID":   "nYrgwJGNDA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:8e56dea8454febc17e112e22c2f7c83d4d82e394778d125589573dc84eeae85b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:34451",
-					"10.65.0.27:34451",
-					"172.17.0.1:34451",
-					"172.18.0.1:34451",
-					"172.19.0.1:34451",
-					"172.20.0.1:34451",
-					"172.21.0.1:34451",
-					"172.22.0.1:34451",
-					"172.23.0.1:34451",
-					"172.24.0.1:34451",
-					"172.25.0.1:34451",
-					"172.26.0.1:34451",
-					"172.27.0.1:34451"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:47:48.380684324Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3372283317427667,
-				"StableID":   "nQoKvXAKLT11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:9dbaea958fe2a3b10b9f275788df57f78ecf664075058741cb2fb2fdb0112571",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:37981",
-					"10.65.0.27:37981",
-					"172.17.0.1:37981",
-					"172.18.0.1:37981",
-					"172.19.0.1:37981",
-					"172.20.0.1:37981",
-					"172.21.0.1:37981",
-					"172.22.0.1:37981",
-					"172.23.0.1:37981",
-					"172.24.0.1:37981",
-					"172.25.0.1:37981",
-					"172.26.0.1:37981",
-					"172.27.0.1:37981"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:47:48.930128478Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8572368431042155,
-				"StableID":   "nNeAZnaSw921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-				"KeyExpiry":  "2026-11-09T09:47:49Z",
-				"DiscoKey":   "discokey:53e464a876bfac8966036a57e97ccd45d1b7ca90e7b20f7de1ab62bc76a3d043",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36498",
-					"10.65.0.27:36498",
-					"172.17.0.1:36498",
-					"172.18.0.1:36498",
-					"172.19.0.1:36498",
-					"172.20.0.1:36498",
-					"172.21.0.1:36498",
-					"172.22.0.1:36498",
-					"172.23.0.1:36498",
-					"172.24.0.1:36498",
-					"172.25.0.1:36498",
-					"172.26.0.1:36498",
-					"172.27.0.1:36498"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:47:49.471716978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"10.33.0.0/16",
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"10.33.0.0/16",
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7744588193669082": {
-				"ID":          7744588193669082,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"10.33.0.0/16",
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"10.33.0.0/16",
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3850015448975794,
-				"StableID":   "nDY7UtNg4X11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3850015448975794,
-				"Key":        "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-				"DiscoKey":   "discokey:4f571291f251d1e40f7304cafc3be280e261c0b0cd4e61d6818548335a71f82c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:54549",
-					"10.65.0.27:54549",
-					"172.17.0.1:54549",
-					"172.18.0.1:54549",
-					"172.19.0.1:54549",
-					"172.20.0.1:54549",
-					"172.21.0.1:54549",
-					"172.22.0.1:54549",
-					"172.23.0.1:54549",
-					"172.24.0.1:54549",
-					"172.25.0.1:54549",
-					"172.26.0.1:54549",
-					"172.27.0.1:54549"
-				],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-13T09:47:46.22785674Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-			"MachineKey": "mkey:c14c456670da209479709b0d6af1640d34848fcf16f3fef9640467aeaa42e83e",
-			"Peers": [{
-				"ID":         7744588193669082,
-				"StableID":   "nw1YaZCYU321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-				"DiscoKey":   "discokey:61b5fb33b4e55b98ddbe6e92afd9540282aa5d7b3899a30c96f9bea0e9c1a907",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48220",
-					"10.65.0.27:48220",
-					"172.17.0.1:48220",
-					"172.18.0.1:48220",
-					"172.19.0.1:48220",
-					"172.20.0.1:48220",
-					"172.21.0.1:48220",
-					"172.22.0.1:48220",
-					"172.23.0.1:48220",
-					"172.24.0.1:48220",
-					"172.25.0.1:48220",
-					"172.26.0.1:48220",
-					"172.27.0.1:48220"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-13T09:47:45.682829414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8387476850151810,
-				"StableID":   "ndtbg4ohV821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-				"DiscoKey":   "discokey:814b786f466777ae80c7131c07cd3a1ca59bfcfe707f5211ba69843bd0581468",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:41242",
-					"10.65.0.27:41242",
-					"172.17.0.1:41242",
-					"172.18.0.1:41242",
-					"172.19.0.1:41242",
-					"172.20.0.1:41242",
-					"172.21.0.1:41242",
-					"172.22.0.1:41242",
-					"172.23.0.1:41242",
-					"172.24.0.1:41242",
-					"172.25.0.1:41242",
-					"172.26.0.1:41242",
-					"172.27.0.1:41242"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:47:46.758242986Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4360353747544105,
-				"StableID":   "nUakLk6p3b11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-				"DiscoKey":   "discokey:22b7aaac53fdd924092758d904e4aadf1f5aa77316cf10bfa6fd717da7a6ee09",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-				"Endpoints": [
-					"77.164.248.136:55796",
-					"10.65.0.27:55796",
-					"172.17.0.1:55796",
-					"172.18.0.1:55796",
-					"172.19.0.1:55796",
-					"172.20.0.1:55796",
-					"172.21.0.1:55796",
-					"172.22.0.1:55796",
-					"172.23.0.1:55796",
-					"172.24.0.1:55796",
-					"172.25.0.1:55796",
-					"172.26.0.1:55796",
-					"172.27.0.1:55796"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "router",
-					"Services": [{"Proto": "peerapi6", "Port": 47423}]
-				},
-				"Created":              "2026-05-13T09:47:47.298384949Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"PrimaryRoutes":        ["10.33.0.0/16"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7260286355977455,
-				"StableID":   "nYwWbrQChy11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-				"DiscoKey":   "discokey:e3875bccf4317688f40dd98c6831e538f87acc3cdd24d13ce8be76355afd3271",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:43114",
-					"10.65.0.27:43114",
-					"172.17.0.1:43114",
-					"172.18.0.1:43114",
-					"172.19.0.1:43114",
-					"172.20.0.1:43114",
-					"172.21.0.1:43114",
-					"172.22.0.1:43114",
-					"172.23.0.1:43114",
-					"172.24.0.1:43114",
-					"172.25.0.1:43114",
-					"172.26.0.1:43114",
-					"172.27.0.1:43114"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:47:47.844090839Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1179873036418261,
-				"StableID":   "nYrgwJGNDA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:8e56dea8454febc17e112e22c2f7c83d4d82e394778d125589573dc84eeae85b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:34451",
-					"10.65.0.27:34451",
-					"172.17.0.1:34451",
-					"172.18.0.1:34451",
-					"172.19.0.1:34451",
-					"172.20.0.1:34451",
-					"172.21.0.1:34451",
-					"172.22.0.1:34451",
-					"172.23.0.1:34451",
-					"172.24.0.1:34451",
-					"172.25.0.1:34451",
-					"172.26.0.1:34451",
-					"172.27.0.1:34451"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:47:48.380684324Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3372283317427667,
-				"StableID":   "nQoKvXAKLT11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:9dbaea958fe2a3b10b9f275788df57f78ecf664075058741cb2fb2fdb0112571",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:37981",
-					"10.65.0.27:37981",
-					"172.17.0.1:37981",
-					"172.18.0.1:37981",
-					"172.19.0.1:37981",
-					"172.20.0.1:37981",
-					"172.21.0.1:37981",
-					"172.22.0.1:37981",
-					"172.23.0.1:37981",
-					"172.24.0.1:37981",
-					"172.25.0.1:37981",
-					"172.26.0.1:37981",
-					"172.27.0.1:37981"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:47:48.930128478Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8572368431042155,
-				"StableID":   "nNeAZnaSw921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-				"KeyExpiry":  "2026-11-09T09:47:49Z",
-				"DiscoKey":   "discokey:53e464a876bfac8966036a57e97ccd45d1b7ca90e7b20f7de1ab62bc76a3d043",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36498",
-					"10.65.0.27:36498",
-					"172.17.0.1:36498",
-					"172.18.0.1:36498",
-					"172.19.0.1:36498",
-					"172.20.0.1:36498",
-					"172.21.0.1:36498",
-					"172.22.0.1:36498",
-					"172.23.0.1:36498",
-					"172.24.0.1:36498",
-					"172.25.0.1:36498",
-					"172.26.0.1:36498",
-					"172.27.0.1:36498"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:47:49.471716978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"10.33.0.0/16",
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"10.33.0.0/16",
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3850015448975794": {
-				"ID":          3850015448975794,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"10.33.0.0/16",
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"10.33.0.0/16",
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1179873036418261,
-				"StableID":   "nYrgwJGNDA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:8e56dea8454febc17e112e22c2f7c83d4d82e394778d125589573dc84eeae85b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:34451",
-					"10.65.0.27:34451",
-					"172.17.0.1:34451",
-					"172.18.0.1:34451",
-					"172.19.0.1:34451",
-					"172.20.0.1:34451",
-					"172.21.0.1:34451",
-					"172.22.0.1:34451",
-					"172.23.0.1:34451",
-					"172.24.0.1:34451",
-					"172.25.0.1:34451",
-					"172.26.0.1:34451",
-					"172.27.0.1:34451"
-				],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:47:48.380684324Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-			"MachineKey": "mkey:f86177d994f3254b178fc1ed43a175a87fbcc77094fc7ce9868e0d57ad517e1e",
-			"Peers": [{
-				"ID":         7744588193669082,
-				"StableID":   "nw1YaZCYU321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-				"DiscoKey":   "discokey:61b5fb33b4e55b98ddbe6e92afd9540282aa5d7b3899a30c96f9bea0e9c1a907",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48220",
-					"10.65.0.27:48220",
-					"172.17.0.1:48220",
-					"172.18.0.1:48220",
-					"172.19.0.1:48220",
-					"172.20.0.1:48220",
-					"172.21.0.1:48220",
-					"172.22.0.1:48220",
-					"172.23.0.1:48220",
-					"172.24.0.1:48220",
-					"172.25.0.1:48220",
-					"172.26.0.1:48220",
-					"172.27.0.1:48220"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-13T09:47:45.682829414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3850015448975794,
-				"StableID":   "nDY7UtNg4X11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-				"DiscoKey":   "discokey:4f571291f251d1e40f7304cafc3be280e261c0b0cd4e61d6818548335a71f82c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:54549",
-					"10.65.0.27:54549",
-					"172.17.0.1:54549",
-					"172.18.0.1:54549",
-					"172.19.0.1:54549",
-					"172.20.0.1:54549",
-					"172.21.0.1:54549",
-					"172.22.0.1:54549",
-					"172.23.0.1:54549",
-					"172.24.0.1:54549",
-					"172.25.0.1:54549",
-					"172.26.0.1:54549",
-					"172.27.0.1:54549"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:47:46.22785674Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8387476850151810,
-				"StableID":   "ndtbg4ohV821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-				"DiscoKey":   "discokey:814b786f466777ae80c7131c07cd3a1ca59bfcfe707f5211ba69843bd0581468",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:41242",
-					"10.65.0.27:41242",
-					"172.17.0.1:41242",
-					"172.18.0.1:41242",
-					"172.19.0.1:41242",
-					"172.20.0.1:41242",
-					"172.21.0.1:41242",
-					"172.22.0.1:41242",
-					"172.23.0.1:41242",
-					"172.24.0.1:41242",
-					"172.25.0.1:41242",
-					"172.26.0.1:41242",
-					"172.27.0.1:41242"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:47:46.758242986Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4360353747544105,
-				"StableID":   "nUakLk6p3b11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-				"DiscoKey":   "discokey:22b7aaac53fdd924092758d904e4aadf1f5aa77316cf10bfa6fd717da7a6ee09",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-				"Endpoints": [
-					"77.164.248.136:55796",
-					"10.65.0.27:55796",
-					"172.17.0.1:55796",
-					"172.18.0.1:55796",
-					"172.19.0.1:55796",
-					"172.20.0.1:55796",
-					"172.21.0.1:55796",
-					"172.22.0.1:55796",
-					"172.23.0.1:55796",
-					"172.24.0.1:55796",
-					"172.25.0.1:55796",
-					"172.26.0.1:55796",
-					"172.27.0.1:55796"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "router",
-					"Services": [{"Proto": "peerapi6", "Port": 47423}]
-				},
-				"Created":              "2026-05-13T09:47:47.298384949Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"PrimaryRoutes":        ["10.33.0.0/16"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7260286355977455,
-				"StableID":   "nYwWbrQChy11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-				"DiscoKey":   "discokey:e3875bccf4317688f40dd98c6831e538f87acc3cdd24d13ce8be76355afd3271",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:43114",
-					"10.65.0.27:43114",
-					"172.17.0.1:43114",
-					"172.18.0.1:43114",
-					"172.19.0.1:43114",
-					"172.20.0.1:43114",
-					"172.21.0.1:43114",
-					"172.22.0.1:43114",
-					"172.23.0.1:43114",
-					"172.24.0.1:43114",
-					"172.25.0.1:43114",
-					"172.26.0.1:43114",
-					"172.27.0.1:43114"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:47:47.844090839Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3372283317427667,
-				"StableID":   "nQoKvXAKLT11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:9dbaea958fe2a3b10b9f275788df57f78ecf664075058741cb2fb2fdb0112571",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:37981",
-					"10.65.0.27:37981",
-					"172.17.0.1:37981",
-					"172.18.0.1:37981",
-					"172.19.0.1:37981",
-					"172.20.0.1:37981",
-					"172.21.0.1:37981",
-					"172.22.0.1:37981",
-					"172.23.0.1:37981",
-					"172.24.0.1:37981",
-					"172.25.0.1:37981",
-					"172.26.0.1:37981",
-					"172.27.0.1:37981"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:47:48.930128478Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8572368431042155,
-				"StableID":   "nNeAZnaSw921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-				"KeyExpiry":  "2026-11-09T09:47:49Z",
-				"DiscoKey":   "discokey:53e464a876bfac8966036a57e97ccd45d1b7ca90e7b20f7de1ab62bc76a3d043",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36498",
-					"10.65.0.27:36498",
-					"172.17.0.1:36498",
-					"172.18.0.1:36498",
-					"172.19.0.1:36498",
-					"172.20.0.1:36498",
-					"172.21.0.1:36498",
-					"172.22.0.1:36498",
-					"172.23.0.1:36498",
-					"172.24.0.1:36498",
-					"172.25.0.1:36498",
-					"172.26.0.1:36498",
-					"172.27.0.1:36498"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:47:49.471716978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"10.33.0.0/16",
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"10.33.0.0/16",
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"10.33.0.0/16",
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"10.33.0.0/16",
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8387476850151810,
-				"StableID":   "ndtbg4ohV821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       8387476850151810,
-				"Key":        "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-				"DiscoKey":   "discokey:814b786f466777ae80c7131c07cd3a1ca59bfcfe707f5211ba69843bd0581468",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:41242",
-					"10.65.0.27:41242",
-					"172.17.0.1:41242",
-					"172.18.0.1:41242",
-					"172.19.0.1:41242",
-					"172.20.0.1:41242",
-					"172.21.0.1:41242",
-					"172.22.0.1:41242",
-					"172.23.0.1:41242",
-					"172.24.0.1:41242",
-					"172.25.0.1:41242",
-					"172.26.0.1:41242",
-					"172.27.0.1:41242"
-				],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:47:46.758242986Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-			"MachineKey": "mkey:016d77473daba8ab914d688def0ba861d83d444968f2eb9af54a418aebb6bf7e",
-			"Peers": [{
-				"ID":         7744588193669082,
-				"StableID":   "nw1YaZCYU321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-				"DiscoKey":   "discokey:61b5fb33b4e55b98ddbe6e92afd9540282aa5d7b3899a30c96f9bea0e9c1a907",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48220",
-					"10.65.0.27:48220",
-					"172.17.0.1:48220",
-					"172.18.0.1:48220",
-					"172.19.0.1:48220",
-					"172.20.0.1:48220",
-					"172.21.0.1:48220",
-					"172.22.0.1:48220",
-					"172.23.0.1:48220",
-					"172.24.0.1:48220",
-					"172.25.0.1:48220",
-					"172.26.0.1:48220",
-					"172.27.0.1:48220"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-13T09:47:45.682829414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3850015448975794,
-				"StableID":   "nDY7UtNg4X11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-				"DiscoKey":   "discokey:4f571291f251d1e40f7304cafc3be280e261c0b0cd4e61d6818548335a71f82c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:54549",
-					"10.65.0.27:54549",
-					"172.17.0.1:54549",
-					"172.18.0.1:54549",
-					"172.19.0.1:54549",
-					"172.20.0.1:54549",
-					"172.21.0.1:54549",
-					"172.22.0.1:54549",
-					"172.23.0.1:54549",
-					"172.24.0.1:54549",
-					"172.25.0.1:54549",
-					"172.26.0.1:54549",
-					"172.27.0.1:54549"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:47:46.22785674Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4360353747544105,
-				"StableID":   "nUakLk6p3b11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-				"DiscoKey":   "discokey:22b7aaac53fdd924092758d904e4aadf1f5aa77316cf10bfa6fd717da7a6ee09",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-				"Endpoints": [
-					"77.164.248.136:55796",
-					"10.65.0.27:55796",
-					"172.17.0.1:55796",
-					"172.18.0.1:55796",
-					"172.19.0.1:55796",
-					"172.20.0.1:55796",
-					"172.21.0.1:55796",
-					"172.22.0.1:55796",
-					"172.23.0.1:55796",
-					"172.24.0.1:55796",
-					"172.25.0.1:55796",
-					"172.26.0.1:55796",
-					"172.27.0.1:55796"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "router",
-					"Services": [{"Proto": "peerapi6", "Port": 47423}]
-				},
-				"Created":              "2026-05-13T09:47:47.298384949Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"PrimaryRoutes":        ["10.33.0.0/16"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7260286355977455,
-				"StableID":   "nYwWbrQChy11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-				"DiscoKey":   "discokey:e3875bccf4317688f40dd98c6831e538f87acc3cdd24d13ce8be76355afd3271",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:43114",
-					"10.65.0.27:43114",
-					"172.17.0.1:43114",
-					"172.18.0.1:43114",
-					"172.19.0.1:43114",
-					"172.20.0.1:43114",
-					"172.21.0.1:43114",
-					"172.22.0.1:43114",
-					"172.23.0.1:43114",
-					"172.24.0.1:43114",
-					"172.25.0.1:43114",
-					"172.26.0.1:43114",
-					"172.27.0.1:43114"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:47:47.844090839Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1179873036418261,
-				"StableID":   "nYrgwJGNDA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:8e56dea8454febc17e112e22c2f7c83d4d82e394778d125589573dc84eeae85b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:34451",
-					"10.65.0.27:34451",
-					"172.17.0.1:34451",
-					"172.18.0.1:34451",
-					"172.19.0.1:34451",
-					"172.20.0.1:34451",
-					"172.21.0.1:34451",
-					"172.22.0.1:34451",
-					"172.23.0.1:34451",
-					"172.24.0.1:34451",
-					"172.25.0.1:34451",
-					"172.26.0.1:34451",
-					"172.27.0.1:34451"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:47:48.380684324Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3372283317427667,
-				"StableID":   "nQoKvXAKLT11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:9dbaea958fe2a3b10b9f275788df57f78ecf664075058741cb2fb2fdb0112571",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:37981",
-					"10.65.0.27:37981",
-					"172.17.0.1:37981",
-					"172.18.0.1:37981",
-					"172.19.0.1:37981",
-					"172.20.0.1:37981",
-					"172.21.0.1:37981",
-					"172.22.0.1:37981",
-					"172.23.0.1:37981",
-					"172.24.0.1:37981",
-					"172.25.0.1:37981",
-					"172.26.0.1:37981",
-					"172.27.0.1:37981"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:47:48.930128478Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8572368431042155,
-				"StableID":   "nNeAZnaSw921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-				"KeyExpiry":  "2026-11-09T09:47:49Z",
-				"DiscoKey":   "discokey:53e464a876bfac8966036a57e97ccd45d1b7ca90e7b20f7de1ab62bc76a3d043",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36498",
-					"10.65.0.27:36498",
-					"172.17.0.1:36498",
-					"172.18.0.1:36498",
-					"172.19.0.1:36498",
-					"172.20.0.1:36498",
-					"172.21.0.1:36498",
-					"172.22.0.1:36498",
-					"172.23.0.1:36498",
-					"172.24.0.1:36498",
-					"172.25.0.1:36498",
-					"172.26.0.1:36498",
-					"172.27.0.1:36498"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:47:49.471716978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"10.33.0.0/16",
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"10.33.0.0/16",
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8387476850151810": {
-				"ID":          8387476850151810,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"10.33.0.0/16",
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"10.33.0.0/16",
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4360353747544105,
-				"StableID":   "nUakLk6p3b11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       4360353747544105,
-				"Key":        "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-				"DiscoKey":   "discokey:22b7aaac53fdd924092758d904e4aadf1f5aa77316cf10bfa6fd717da7a6ee09",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-				"Endpoints": [
-					"77.164.248.136:55796",
-					"10.65.0.27:55796",
-					"172.17.0.1:55796",
-					"172.18.0.1:55796",
-					"172.19.0.1:55796",
-					"172.20.0.1:55796",
-					"172.21.0.1:55796",
-					"172.22.0.1:55796",
-					"172.23.0.1:55796",
-					"172.24.0.1:55796",
-					"172.25.0.1:55796",
-					"172.26.0.1:55796",
-					"172.27.0.1:55796"
-				],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi6", "Port": 47423},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-13T09:47:47.298384949Z",
-				"Tags":              ["tag:router"],
-				"PrimaryRoutes":     ["10.33.0.0/16"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-ipv4":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-ipv4",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-			"MachineKey": "mkey:7022ff7324dd7b2092a6744b1a12baa8342267497db8e141ee899873375ee160",
-			"Peers": [{
-				"ID":         7744588193669082,
-				"StableID":   "nw1YaZCYU321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-				"DiscoKey":   "discokey:61b5fb33b4e55b98ddbe6e92afd9540282aa5d7b3899a30c96f9bea0e9c1a907",
-				"Addresses":  ["fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48220",
-					"10.65.0.27:48220",
-					"172.17.0.1:48220",
-					"172.18.0.1:48220",
-					"172.19.0.1:48220",
-					"172.20.0.1:48220",
-					"172.21.0.1:48220",
-					"172.22.0.1:48220",
-					"172.23.0.1:48220",
-					"172.24.0.1:48220",
-					"172.25.0.1:48220",
-					"172.26.0.1:48220",
-					"172.27.0.1:48220"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-13T09:47:45.682829414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3850015448975794,
-				"StableID":   "nDY7UtNg4X11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-				"DiscoKey":   "discokey:4f571291f251d1e40f7304cafc3be280e261c0b0cd4e61d6818548335a71f82c",
-				"Addresses":  ["fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:54549",
-					"10.65.0.27:54549",
-					"172.17.0.1:54549",
-					"172.18.0.1:54549",
-					"172.19.0.1:54549",
-					"172.20.0.1:54549",
-					"172.21.0.1:54549",
-					"172.22.0.1:54549",
-					"172.23.0.1:54549",
-					"172.24.0.1:54549",
-					"172.25.0.1:54549",
-					"172.26.0.1:54549",
-					"172.27.0.1:54549"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:47:46.22785674Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8387476850151810,
-				"StableID":   "ndtbg4ohV821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-				"DiscoKey":   "discokey:814b786f466777ae80c7131c07cd3a1ca59bfcfe707f5211ba69843bd0581468",
-				"Addresses":  ["fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:41242",
-					"10.65.0.27:41242",
-					"172.17.0.1:41242",
-					"172.18.0.1:41242",
-					"172.19.0.1:41242",
-					"172.20.0.1:41242",
-					"172.21.0.1:41242",
-					"172.22.0.1:41242",
-					"172.23.0.1:41242",
-					"172.24.0.1:41242",
-					"172.25.0.1:41242",
-					"172.26.0.1:41242",
-					"172.27.0.1:41242"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:47:46.758242986Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7260286355977455,
-				"StableID":   "nYwWbrQChy11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-				"DiscoKey":   "discokey:e3875bccf4317688f40dd98c6831e538f87acc3cdd24d13ce8be76355afd3271",
-				"Addresses":  ["fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:43114",
-					"10.65.0.27:43114",
-					"172.17.0.1:43114",
-					"172.18.0.1:43114",
-					"172.19.0.1:43114",
-					"172.20.0.1:43114",
-					"172.21.0.1:43114",
-					"172.22.0.1:43114",
-					"172.23.0.1:43114",
-					"172.24.0.1:43114",
-					"172.25.0.1:43114",
-					"172.26.0.1:43114",
-					"172.27.0.1:43114"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:47:47.844090839Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1179873036418261,
-				"StableID":   "nYrgwJGNDA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:8e56dea8454febc17e112e22c2f7c83d4d82e394778d125589573dc84eeae85b",
-				"Addresses":  ["fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:34451",
-					"10.65.0.27:34451",
-					"172.17.0.1:34451",
-					"172.18.0.1:34451",
-					"172.19.0.1:34451",
-					"172.20.0.1:34451",
-					"172.21.0.1:34451",
-					"172.22.0.1:34451",
-					"172.23.0.1:34451",
-					"172.24.0.1:34451",
-					"172.25.0.1:34451",
-					"172.26.0.1:34451",
-					"172.27.0.1:34451"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:47:48.380684324Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3372283317427667,
-				"StableID":   "nQoKvXAKLT11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:9dbaea958fe2a3b10b9f275788df57f78ecf664075058741cb2fb2fdb0112571",
-				"Addresses":  ["fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:37981",
-					"10.65.0.27:37981",
-					"172.17.0.1:37981",
-					"172.18.0.1:37981",
-					"172.19.0.1:37981",
-					"172.20.0.1:37981",
-					"172.21.0.1:37981",
-					"172.22.0.1:37981",
-					"172.23.0.1:37981",
-					"172.24.0.1:37981",
-					"172.25.0.1:37981",
-					"172.26.0.1:37981",
-					"172.27.0.1:37981"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:47:48.930128478Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8572368431042155,
-				"StableID":   "nNeAZnaSw921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-				"KeyExpiry":  "2026-11-09T09:47:49Z",
-				"DiscoKey":   "discokey:53e464a876bfac8966036a57e97ccd45d1b7ca90e7b20f7de1ab62bc76a3d043",
-				"Addresses":  ["fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36498",
-					"10.65.0.27:36498",
-					"172.17.0.1:36498",
-					"172.18.0.1:36498",
-					"172.19.0.1:36498",
-					"172.20.0.1:36498",
-					"172.21.0.1:36498",
-					"172.22.0.1:36498",
-					"172.23.0.1:36498",
-					"172.24.0.1:36498",
-					"172.25.0.1:36498",
-					"172.26.0.1:36498",
-					"172.27.0.1:36498"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:47:49.471716978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"10.33.0.0/16",
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"10.33.0.0/16",
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4360353747544105": {
-				"ID":          4360353747544105,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"10.33.0.0/16",
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"10.33.0.0/16",
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7260286355977455,
-				"StableID":   "nYwWbrQChy11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7260286355977455,
-				"Key":        "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-				"DiscoKey":   "discokey:e3875bccf4317688f40dd98c6831e538f87acc3cdd24d13ce8be76355afd3271",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:43114",
-					"10.65.0.27:43114",
-					"172.17.0.1:43114",
-					"172.18.0.1:43114",
-					"172.19.0.1:43114",
-					"172.20.0.1:43114",
-					"172.21.0.1:43114",
-					"172.22.0.1:43114",
-					"172.23.0.1:43114",
-					"172.24.0.1:43114",
-					"172.25.0.1:43114",
-					"172.26.0.1:43114",
-					"172.27.0.1:43114"
-				],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:47:47.844090839Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-			"MachineKey": "mkey:a4f98bc2eb219ef022144dbfdb466bd8e81379040d8a8c3010d43f715f95c663",
-			"Peers": [{
-				"ID":         7744588193669082,
-				"StableID":   "nw1YaZCYU321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-				"DiscoKey":   "discokey:61b5fb33b4e55b98ddbe6e92afd9540282aa5d7b3899a30c96f9bea0e9c1a907",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48220",
-					"10.65.0.27:48220",
-					"172.17.0.1:48220",
-					"172.18.0.1:48220",
-					"172.19.0.1:48220",
-					"172.20.0.1:48220",
-					"172.21.0.1:48220",
-					"172.22.0.1:48220",
-					"172.23.0.1:48220",
-					"172.24.0.1:48220",
-					"172.25.0.1:48220",
-					"172.26.0.1:48220",
-					"172.27.0.1:48220"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-13T09:47:45.682829414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3850015448975794,
-				"StableID":   "nDY7UtNg4X11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-				"DiscoKey":   "discokey:4f571291f251d1e40f7304cafc3be280e261c0b0cd4e61d6818548335a71f82c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:54549",
-					"10.65.0.27:54549",
-					"172.17.0.1:54549",
-					"172.18.0.1:54549",
-					"172.19.0.1:54549",
-					"172.20.0.1:54549",
-					"172.21.0.1:54549",
-					"172.22.0.1:54549",
-					"172.23.0.1:54549",
-					"172.24.0.1:54549",
-					"172.25.0.1:54549",
-					"172.26.0.1:54549",
-					"172.27.0.1:54549"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:47:46.22785674Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8387476850151810,
-				"StableID":   "ndtbg4ohV821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-				"DiscoKey":   "discokey:814b786f466777ae80c7131c07cd3a1ca59bfcfe707f5211ba69843bd0581468",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:41242",
-					"10.65.0.27:41242",
-					"172.17.0.1:41242",
-					"172.18.0.1:41242",
-					"172.19.0.1:41242",
-					"172.20.0.1:41242",
-					"172.21.0.1:41242",
-					"172.22.0.1:41242",
-					"172.23.0.1:41242",
-					"172.24.0.1:41242",
-					"172.25.0.1:41242",
-					"172.26.0.1:41242",
-					"172.27.0.1:41242"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:47:46.758242986Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4360353747544105,
-				"StableID":   "nUakLk6p3b11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-				"DiscoKey":   "discokey:22b7aaac53fdd924092758d904e4aadf1f5aa77316cf10bfa6fd717da7a6ee09",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-				"Endpoints": [
-					"77.164.248.136:55796",
-					"10.65.0.27:55796",
-					"172.17.0.1:55796",
-					"172.18.0.1:55796",
-					"172.19.0.1:55796",
-					"172.20.0.1:55796",
-					"172.21.0.1:55796",
-					"172.22.0.1:55796",
-					"172.23.0.1:55796",
-					"172.24.0.1:55796",
-					"172.25.0.1:55796",
-					"172.26.0.1:55796",
-					"172.27.0.1:55796"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "router",
-					"Services": [{"Proto": "peerapi6", "Port": 47423}]
-				},
-				"Created":              "2026-05-13T09:47:47.298384949Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"PrimaryRoutes":        ["10.33.0.0/16"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1179873036418261,
-				"StableID":   "nYrgwJGNDA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:8e56dea8454febc17e112e22c2f7c83d4d82e394778d125589573dc84eeae85b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:34451",
-					"10.65.0.27:34451",
-					"172.17.0.1:34451",
-					"172.18.0.1:34451",
-					"172.19.0.1:34451",
-					"172.20.0.1:34451",
-					"172.21.0.1:34451",
-					"172.22.0.1:34451",
-					"172.23.0.1:34451",
-					"172.24.0.1:34451",
-					"172.25.0.1:34451",
-					"172.26.0.1:34451",
-					"172.27.0.1:34451"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:47:48.380684324Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3372283317427667,
-				"StableID":   "nQoKvXAKLT11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:9dbaea958fe2a3b10b9f275788df57f78ecf664075058741cb2fb2fdb0112571",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:37981",
-					"10.65.0.27:37981",
-					"172.17.0.1:37981",
-					"172.18.0.1:37981",
-					"172.19.0.1:37981",
-					"172.20.0.1:37981",
-					"172.21.0.1:37981",
-					"172.22.0.1:37981",
-					"172.23.0.1:37981",
-					"172.24.0.1:37981",
-					"172.25.0.1:37981",
-					"172.26.0.1:37981",
-					"172.27.0.1:37981"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:47:48.930128478Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8572368431042155,
-				"StableID":   "nNeAZnaSw921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-				"KeyExpiry":  "2026-11-09T09:47:49Z",
-				"DiscoKey":   "discokey:53e464a876bfac8966036a57e97ccd45d1b7ca90e7b20f7de1ab62bc76a3d043",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36498",
-					"10.65.0.27:36498",
-					"172.17.0.1:36498",
-					"172.18.0.1:36498",
-					"172.19.0.1:36498",
-					"172.20.0.1:36498",
-					"172.21.0.1:36498",
-					"172.22.0.1:36498",
-					"172.23.0.1:36498",
-					"172.24.0.1:36498",
-					"172.25.0.1:36498",
-					"172.26.0.1:36498",
-					"172.27.0.1:36498"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:47:49.471716978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"10.33.0.0/16",
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"10.33.0.0/16",
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7260286355977455": {
-				"ID":          7260286355977455,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"10.33.0.0/16",
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"10.33.0.0/16",
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8572368431042155,
-				"StableID":   "nNeAZnaSw921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-				"KeyExpiry":  "2026-11-09T09:47:49Z",
-				"DiscoKey":   "discokey:53e464a876bfac8966036a57e97ccd45d1b7ca90e7b20f7de1ab62bc76a3d043",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36498",
-					"10.65.0.27:36498",
-					"172.17.0.1:36498",
-					"172.18.0.1:36498",
-					"172.19.0.1:36498",
-					"172.20.0.1:36498",
-					"172.21.0.1:36498",
-					"172.22.0.1:36498",
-					"172.23.0.1:36498",
-					"172.24.0.1:36498",
-					"172.25.0.1:36498",
-					"172.26.0.1:36498",
-					"172.27.0.1:36498"
-				],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:47:49.471716978Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-			"MachineKey": "mkey:88eb159db21674525e4f84b0fd32cd42190c2601eb1339eaea9c3281bbbc2244",
-			"Peers": [{
-				"ID":         7744588193669082,
-				"StableID":   "nw1YaZCYU321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-				"DiscoKey":   "discokey:61b5fb33b4e55b98ddbe6e92afd9540282aa5d7b3899a30c96f9bea0e9c1a907",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48220",
-					"10.65.0.27:48220",
-					"172.17.0.1:48220",
-					"172.18.0.1:48220",
-					"172.19.0.1:48220",
-					"172.20.0.1:48220",
-					"172.21.0.1:48220",
-					"172.22.0.1:48220",
-					"172.23.0.1:48220",
-					"172.24.0.1:48220",
-					"172.25.0.1:48220",
-					"172.26.0.1:48220",
-					"172.27.0.1:48220"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-13T09:47:45.682829414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3850015448975794,
-				"StableID":   "nDY7UtNg4X11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-				"DiscoKey":   "discokey:4f571291f251d1e40f7304cafc3be280e261c0b0cd4e61d6818548335a71f82c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:54549",
-					"10.65.0.27:54549",
-					"172.17.0.1:54549",
-					"172.18.0.1:54549",
-					"172.19.0.1:54549",
-					"172.20.0.1:54549",
-					"172.21.0.1:54549",
-					"172.22.0.1:54549",
-					"172.23.0.1:54549",
-					"172.24.0.1:54549",
-					"172.25.0.1:54549",
-					"172.26.0.1:54549",
-					"172.27.0.1:54549"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:47:46.22785674Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8387476850151810,
-				"StableID":   "ndtbg4ohV821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-				"DiscoKey":   "discokey:814b786f466777ae80c7131c07cd3a1ca59bfcfe707f5211ba69843bd0581468",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:41242",
-					"10.65.0.27:41242",
-					"172.17.0.1:41242",
-					"172.18.0.1:41242",
-					"172.19.0.1:41242",
-					"172.20.0.1:41242",
-					"172.21.0.1:41242",
-					"172.22.0.1:41242",
-					"172.23.0.1:41242",
-					"172.24.0.1:41242",
-					"172.25.0.1:41242",
-					"172.26.0.1:41242",
-					"172.27.0.1:41242"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:47:46.758242986Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4360353747544105,
-				"StableID":   "nUakLk6p3b11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-				"DiscoKey":   "discokey:22b7aaac53fdd924092758d904e4aadf1f5aa77316cf10bfa6fd717da7a6ee09",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-				"Endpoints": [
-					"77.164.248.136:55796",
-					"10.65.0.27:55796",
-					"172.17.0.1:55796",
-					"172.18.0.1:55796",
-					"172.19.0.1:55796",
-					"172.20.0.1:55796",
-					"172.21.0.1:55796",
-					"172.22.0.1:55796",
-					"172.23.0.1:55796",
-					"172.24.0.1:55796",
-					"172.25.0.1:55796",
-					"172.26.0.1:55796",
-					"172.27.0.1:55796"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "router",
-					"Services": [{"Proto": "peerapi6", "Port": 47423}]
-				},
-				"Created":              "2026-05-13T09:47:47.298384949Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"PrimaryRoutes":        ["10.33.0.0/16"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7260286355977455,
-				"StableID":   "nYwWbrQChy11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-				"DiscoKey":   "discokey:e3875bccf4317688f40dd98c6831e538f87acc3cdd24d13ce8be76355afd3271",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:43114",
-					"10.65.0.27:43114",
-					"172.17.0.1:43114",
-					"172.18.0.1:43114",
-					"172.19.0.1:43114",
-					"172.20.0.1:43114",
-					"172.21.0.1:43114",
-					"172.22.0.1:43114",
-					"172.23.0.1:43114",
-					"172.24.0.1:43114",
-					"172.25.0.1:43114",
-					"172.26.0.1:43114",
-					"172.27.0.1:43114"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:47:47.844090839Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1179873036418261,
-				"StableID":   "nYrgwJGNDA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:8e56dea8454febc17e112e22c2f7c83d4d82e394778d125589573dc84eeae85b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:34451",
-					"10.65.0.27:34451",
-					"172.17.0.1:34451",
-					"172.18.0.1:34451",
-					"172.19.0.1:34451",
-					"172.20.0.1:34451",
-					"172.21.0.1:34451",
-					"172.22.0.1:34451",
-					"172.23.0.1:34451",
-					"172.24.0.1:34451",
-					"172.25.0.1:34451",
-					"172.26.0.1:34451",
-					"172.27.0.1:34451"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:47:48.380684324Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3372283317427667,
-				"StableID":   "nQoKvXAKLT11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:9dbaea958fe2a3b10b9f275788df57f78ecf664075058741cb2fb2fdb0112571",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:37981",
-					"10.65.0.27:37981",
-					"172.17.0.1:37981",
-					"172.18.0.1:37981",
-					"172.19.0.1:37981",
-					"172.20.0.1:37981",
-					"172.21.0.1:37981",
-					"172.22.0.1:37981",
-					"172.23.0.1:37981",
-					"172.24.0.1:37981",
-					"172.25.0.1:37981",
-					"172.26.0.1:37981",
-					"172.27.0.1:37981"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-13T09:47:48.930128478Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"10.33.0.0/16",
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"10.33.0.0/16",
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"10.33.0.0/16",
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"10.33.0.0/16",
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3372283317427667,
-				"StableID":   "nQoKvXAKLT11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:9dbaea958fe2a3b10b9f275788df57f78ecf664075058741cb2fb2fdb0112571",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:37981",
-					"10.65.0.27:37981",
-					"172.17.0.1:37981",
-					"172.18.0.1:37981",
-					"172.19.0.1:37981",
-					"172.20.0.1:37981",
-					"172.21.0.1:37981",
-					"172.22.0.1:37981",
-					"172.23.0.1:37981",
-					"172.24.0.1:37981",
-					"172.25.0.1:37981",
-					"172.26.0.1:37981",
-					"172.27.0.1:37981"
-				],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-13T09:47:48.930128478Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a8994739ccd9415d958a6fa8ee9483dcfcff7f2574fe87a8a0dff5db02c75300",
-			"MachineKey": "mkey:141610fb494bb3bf243f21d91cd8b923e1a40acc19e8848ab6ab68b5cbd9b530",
-			"Peers": [{
-				"ID":         7744588193669082,
-				"StableID":   "nw1YaZCYU321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5669b2816ab52c88d3c51cc954fd56a3a1ef5f6094beee38e3cb08350b70ac70",
-				"DiscoKey":   "discokey:61b5fb33b4e55b98ddbe6e92afd9540282aa5d7b3899a30c96f9bea0e9c1a907",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:48220",
-					"10.65.0.27:48220",
-					"172.17.0.1:48220",
-					"172.18.0.1:48220",
-					"172.19.0.1:48220",
-					"172.20.0.1:48220",
-					"172.21.0.1:48220",
-					"172.22.0.1:48220",
-					"172.23.0.1:48220",
-					"172.24.0.1:48220",
-					"172.25.0.1:48220",
-					"172.26.0.1:48220",
-					"172.27.0.1:48220"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-13T09:47:45.682829414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3850015448975794,
-				"StableID":   "nDY7UtNg4X11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:991781fce55ec5fd7edbd4ddad1292c180084f0363db87364a128cd965e1a146",
-				"DiscoKey":   "discokey:4f571291f251d1e40f7304cafc3be280e261c0b0cd4e61d6818548335a71f82c",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:54549",
-					"10.65.0.27:54549",
-					"172.17.0.1:54549",
-					"172.18.0.1:54549",
-					"172.19.0.1:54549",
-					"172.20.0.1:54549",
-					"172.21.0.1:54549",
-					"172.22.0.1:54549",
-					"172.23.0.1:54549",
-					"172.24.0.1:54549",
-					"172.25.0.1:54549",
-					"172.26.0.1:54549",
-					"172.27.0.1:54549"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-13T09:47:46.22785674Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8387476850151810,
-				"StableID":   "ndtbg4ohV821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4360517fd0fd213cfd60eae9e636d381b9e1ad1e1df331e057c94fdfec3130",
-				"DiscoKey":   "discokey:814b786f466777ae80c7131c07cd3a1ca59bfcfe707f5211ba69843bd0581468",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:41242",
-					"10.65.0.27:41242",
-					"172.17.0.1:41242",
-					"172.18.0.1:41242",
-					"172.19.0.1:41242",
-					"172.20.0.1:41242",
-					"172.21.0.1:41242",
-					"172.22.0.1:41242",
-					"172.23.0.1:41242",
-					"172.24.0.1:41242",
-					"172.25.0.1:41242",
-					"172.26.0.1:41242",
-					"172.27.0.1:41242"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-13T09:47:46.758242986Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4360353747544105,
-				"StableID":   "nUakLk6p3b11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:803d250bec5807a8dd9d89affb4198f66ef44984dbddb7e97299ac8d8dc71465",
-				"DiscoKey":   "discokey:22b7aaac53fdd924092758d904e4aadf1f5aa77316cf10bfa6fd717da7a6ee09",
-				"Addresses":  ["fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["fd7a:115c:a1e0::d/128", "10.33.0.0/16"],
-				"Endpoints": [
-					"77.164.248.136:55796",
-					"10.65.0.27:55796",
-					"172.17.0.1:55796",
-					"172.18.0.1:55796",
-					"172.19.0.1:55796",
-					"172.20.0.1:55796",
-					"172.21.0.1:55796",
-					"172.22.0.1:55796",
-					"172.23.0.1:55796",
-					"172.24.0.1:55796",
-					"172.25.0.1:55796",
-					"172.26.0.1:55796",
-					"172.27.0.1:55796"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {
-					"OS":       "linux",
-					"Hostname": "router",
-					"Services": [{"Proto": "peerapi6", "Port": 47423}]
-				},
-				"Created":              "2026-05-13T09:47:47.298384949Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"PrimaryRoutes":        ["10.33.0.0/16"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7260286355977455,
-				"StableID":   "nYwWbrQChy11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cccf339ad05b8514b47fe61d5962e8f7c07d84522e2ad7ce5f3a9c0060da9e72",
-				"DiscoKey":   "discokey:e3875bccf4317688f40dd98c6831e538f87acc3cdd24d13ce8be76355afd3271",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:43114",
-					"10.65.0.27:43114",
-					"172.17.0.1:43114",
-					"172.18.0.1:43114",
-					"172.19.0.1:43114",
-					"172.20.0.1:43114",
-					"172.21.0.1:43114",
-					"172.22.0.1:43114",
-					"172.23.0.1:43114",
-					"172.24.0.1:43114",
-					"172.25.0.1:43114",
-					"172.26.0.1:43114",
-					"172.27.0.1:43114"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-13T09:47:47.844090839Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1179873036418261,
-				"StableID":   "nYrgwJGNDA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:09ac3796be6ab3ff366b8de64f29c0bce0ae60d0b82f3bdd82e1f6d54dad7768",
-				"KeyExpiry":  "2026-11-09T09:47:48Z",
-				"DiscoKey":   "discokey:8e56dea8454febc17e112e22c2f7c83d4d82e394778d125589573dc84eeae85b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:34451",
-					"10.65.0.27:34451",
-					"172.17.0.1:34451",
-					"172.18.0.1:34451",
-					"172.19.0.1:34451",
-					"172.20.0.1:34451",
-					"172.21.0.1:34451",
-					"172.22.0.1:34451",
-					"172.23.0.1:34451",
-					"172.24.0.1:34451",
-					"172.25.0.1:34451",
-					"172.26.0.1:34451",
-					"172.27.0.1:34451"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-13T09:47:48.380684324Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8572368431042155,
-				"StableID":   "nNeAZnaSw921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:f01c4a901e651da0ebb5378b2680ce610f1ed99e63dee853b88b6b9f3a1d893a",
-				"KeyExpiry":  "2026-11-09T09:47:49Z",
-				"DiscoKey":   "discokey:53e464a876bfac8966036a57e97ccd45d1b7ca90e7b20f7de1ab62bc76a3d043",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36498",
-					"10.65.0.27:36498",
-					"172.17.0.1:36498",
-					"172.18.0.1:36498",
-					"172.19.0.1:36498",
-					"172.20.0.1:36498",
-					"172.21.0.1:36498",
-					"172.22.0.1:36498",
-					"172.23.0.1:36498",
-					"172.24.0.1:36498",
-					"172.25.0.1:36498",
-					"172.26.0.1:36498",
-					"172.27.0.1:36498"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-13T09:47:49.471716978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"10.33.0.0/16",
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"10.33.0.0/16",
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c2-randomize.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c2-randomize.hujson
deleted file mode 100644
index 560a59ec0..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c2-randomize.hujson
+++ /dev/null
@@ -1,8837 +0,0 @@
-// nodeattrs-attr-c2-randomize
-//
-// single attr randomize-client-port via wildcard
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:09:49Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c2-randomize",
-	"description":    "single attr randomize-client-port via wildcard",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:09:49.611082623Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                              \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"single attr randomize-client-port via wildcard\",\n    \"id\": \"nodeattrs-attr-c2-randomize\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c2-randomize.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1242253544083859,
-				"StableID":   "nza1ortchA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1242253544083859,
-				"Key":        "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-				"DiscoKey":   "discokey:ddf78c4b6eda97e33b398314e4baaeceba819371b7e4fc9df002ded979704c1e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:59247", "10.65.0.27:59247", "172.17.0.1:59247"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:55.166547046Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-			"MachineKey": "mkey:dbae12b3bf6f31dee529f2ad30c0b36cabdc0a18edde711179d1b0b36167b345",
-			"Peers": [{
-				"ID":         66756093145535,
-				"StableID":   "ntodM2aEX111CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-				"DiscoKey":   "discokey:f1cbf4d7e44df30cf8fa0eb6c36d65802c0038fed85f8fbd093e0133d6b58231",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:45919", "10.65.0.27:45919", "172.17.0.1:45919"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:55.704071912Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         808025455025406,
-				"StableID":   "n1xRWbTxJ711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-				"DiscoKey":   "discokey:5ac2f771e65c623a15a84d3d50a09f355fdd12cd9da03accc9d642e3a30e3746",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:35348", "10.65.0.27:35348", "172.17.0.1:35348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:56.235723406Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2342413225418961,
-				"StableID":   "naokWxDtHK11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-				"DiscoKey":   "discokey:3ad388a43a21f171471f12f0ba66a979134b935c58df02ecf747d329b64a9919",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34147", "10.65.0.27:34147", "172.17.0.1:34147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:57.093215089Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7419467155318450,
-				"StableID":   "nXF9kcpHwz11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-				"DiscoKey":   "discokey:500a35c0bbea7babfc452cf6875ebe8b22ae9c6abcd396acedf552732d3f2b7f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57734", "10.65.0.27:57734", "172.17.0.1:57734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:57.570986512Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8898373695790445,
-				"StableID":   "n2TySuB6VC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:d5348e3c8972ceab1778a76a94b9802f3c1a4ea8f03217993c49378673bc7e2c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55515", "10.65.0.27:55515", "172.17.0.1:55515"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:58.108960695Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7834249763166395,
-				"StableID":   "nxPhSVT9B421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:358d327db54d5a0b15fc5e5ed3c9c81eba5b8f318a761a3589c72b8b071aad56",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55526", "10.65.0.27:55526", "172.17.0.1:55526"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:58.634513306Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8369339924739352,
-				"StableID":   "n1m5hLNVM821CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-				"KeyExpiry":  "2026-11-03T08:09:59Z",
-				"DiscoKey":   "discokey:26b90b39d008a5126c458622b6f87494d19e682ffac39c59b0c909765b82c53c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48344", "10.65.0.27:48344", "172.17.0.1:48344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:59.167149724Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1242253544083859": {
-				"ID":          1242253544083859,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         66756093145535,
-				"StableID":   "ntodM2aEX111CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       66756093145535,
-				"Key":        "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-				"DiscoKey":   "discokey:f1cbf4d7e44df30cf8fa0eb6c36d65802c0038fed85f8fbd093e0133d6b58231",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:45919", "10.65.0.27:45919", "172.17.0.1:45919"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:09:55.704071912Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-			"MachineKey": "mkey:b8f370cb808ba4b620af2ae2107b8e12dc60f0e3d9b2518662b7b393866dde29",
-			"Peers": [{
-				"ID":         1242253544083859,
-				"StableID":   "nza1ortchA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-				"DiscoKey":   "discokey:ddf78c4b6eda97e33b398314e4baaeceba819371b7e4fc9df002ded979704c1e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:59247", "10.65.0.27:59247", "172.17.0.1:59247"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:55.166547046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         808025455025406,
-				"StableID":   "n1xRWbTxJ711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-				"DiscoKey":   "discokey:5ac2f771e65c623a15a84d3d50a09f355fdd12cd9da03accc9d642e3a30e3746",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:35348", "10.65.0.27:35348", "172.17.0.1:35348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:56.235723406Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2342413225418961,
-				"StableID":   "naokWxDtHK11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-				"DiscoKey":   "discokey:3ad388a43a21f171471f12f0ba66a979134b935c58df02ecf747d329b64a9919",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34147", "10.65.0.27:34147", "172.17.0.1:34147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:57.093215089Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7419467155318450,
-				"StableID":   "nXF9kcpHwz11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-				"DiscoKey":   "discokey:500a35c0bbea7babfc452cf6875ebe8b22ae9c6abcd396acedf552732d3f2b7f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57734", "10.65.0.27:57734", "172.17.0.1:57734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:57.570986512Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8898373695790445,
-				"StableID":   "n2TySuB6VC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:d5348e3c8972ceab1778a76a94b9802f3c1a4ea8f03217993c49378673bc7e2c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55515", "10.65.0.27:55515", "172.17.0.1:55515"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:58.108960695Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7834249763166395,
-				"StableID":   "nxPhSVT9B421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:358d327db54d5a0b15fc5e5ed3c9c81eba5b8f318a761a3589c72b8b071aad56",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55526", "10.65.0.27:55526", "172.17.0.1:55526"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:58.634513306Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8369339924739352,
-				"StableID":   "n1m5hLNVM821CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-				"KeyExpiry":  "2026-11-03T08:09:59Z",
-				"DiscoKey":   "discokey:26b90b39d008a5126c458622b6f87494d19e682ffac39c59b0c909765b82c53c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48344", "10.65.0.27:48344", "172.17.0.1:48344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:59.167149724Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "66756093145535": {
-				"ID":          66756093145535,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8898373695790445,
-				"StableID":   "n2TySuB6VC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:d5348e3c8972ceab1778a76a94b9802f3c1a4ea8f03217993c49378673bc7e2c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55515", "10.65.0.27:55515", "172.17.0.1:55515"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:58.108960695Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-			"MachineKey": "mkey:da6aed8e18eb7af1e7b75541c6c751e773e5be647c8b1389b7d9cdcc27d11d68",
-			"Peers": [{
-				"ID":         1242253544083859,
-				"StableID":   "nza1ortchA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-				"DiscoKey":   "discokey:ddf78c4b6eda97e33b398314e4baaeceba819371b7e4fc9df002ded979704c1e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:59247", "10.65.0.27:59247", "172.17.0.1:59247"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:55.166547046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         66756093145535,
-				"StableID":   "ntodM2aEX111CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-				"DiscoKey":   "discokey:f1cbf4d7e44df30cf8fa0eb6c36d65802c0038fed85f8fbd093e0133d6b58231",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:45919", "10.65.0.27:45919", "172.17.0.1:45919"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:55.704071912Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         808025455025406,
-				"StableID":   "n1xRWbTxJ711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-				"DiscoKey":   "discokey:5ac2f771e65c623a15a84d3d50a09f355fdd12cd9da03accc9d642e3a30e3746",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:35348", "10.65.0.27:35348", "172.17.0.1:35348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:56.235723406Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2342413225418961,
-				"StableID":   "naokWxDtHK11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-				"DiscoKey":   "discokey:3ad388a43a21f171471f12f0ba66a979134b935c58df02ecf747d329b64a9919",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34147", "10.65.0.27:34147", "172.17.0.1:34147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:57.093215089Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7419467155318450,
-				"StableID":   "nXF9kcpHwz11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-				"DiscoKey":   "discokey:500a35c0bbea7babfc452cf6875ebe8b22ae9c6abcd396acedf552732d3f2b7f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57734", "10.65.0.27:57734", "172.17.0.1:57734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:57.570986512Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7834249763166395,
-				"StableID":   "nxPhSVT9B421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:358d327db54d5a0b15fc5e5ed3c9c81eba5b8f318a761a3589c72b8b071aad56",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55526", "10.65.0.27:55526", "172.17.0.1:55526"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:58.634513306Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8369339924739352,
-				"StableID":   "n1m5hLNVM821CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-				"KeyExpiry":  "2026-11-03T08:09:59Z",
-				"DiscoKey":   "discokey:26b90b39d008a5126c458622b6f87494d19e682ffac39c59b0c909765b82c53c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48344", "10.65.0.27:48344", "172.17.0.1:48344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:59.167149724Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         808025455025406,
-				"StableID":   "n1xRWbTxJ711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       808025455025406,
-				"Key":        "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-				"DiscoKey":   "discokey:5ac2f771e65c623a15a84d3d50a09f355fdd12cd9da03accc9d642e3a30e3746",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:35348", "10.65.0.27:35348", "172.17.0.1:35348"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:56.235723406Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-			"MachineKey": "mkey:55b66f39823f8f37369794f2b46d98063f4de5980a87956feae2c9fc88e36f58",
-			"Peers": [{
-				"ID":         1242253544083859,
-				"StableID":   "nza1ortchA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-				"DiscoKey":   "discokey:ddf78c4b6eda97e33b398314e4baaeceba819371b7e4fc9df002ded979704c1e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:59247", "10.65.0.27:59247", "172.17.0.1:59247"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:55.166547046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         66756093145535,
-				"StableID":   "ntodM2aEX111CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-				"DiscoKey":   "discokey:f1cbf4d7e44df30cf8fa0eb6c36d65802c0038fed85f8fbd093e0133d6b58231",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:45919", "10.65.0.27:45919", "172.17.0.1:45919"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:55.704071912Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2342413225418961,
-				"StableID":   "naokWxDtHK11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-				"DiscoKey":   "discokey:3ad388a43a21f171471f12f0ba66a979134b935c58df02ecf747d329b64a9919",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34147", "10.65.0.27:34147", "172.17.0.1:34147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:57.093215089Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7419467155318450,
-				"StableID":   "nXF9kcpHwz11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-				"DiscoKey":   "discokey:500a35c0bbea7babfc452cf6875ebe8b22ae9c6abcd396acedf552732d3f2b7f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57734", "10.65.0.27:57734", "172.17.0.1:57734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:57.570986512Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8898373695790445,
-				"StableID":   "n2TySuB6VC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:d5348e3c8972ceab1778a76a94b9802f3c1a4ea8f03217993c49378673bc7e2c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55515", "10.65.0.27:55515", "172.17.0.1:55515"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:58.108960695Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7834249763166395,
-				"StableID":   "nxPhSVT9B421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:358d327db54d5a0b15fc5e5ed3c9c81eba5b8f318a761a3589c72b8b071aad56",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55526", "10.65.0.27:55526", "172.17.0.1:55526"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:58.634513306Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8369339924739352,
-				"StableID":   "n1m5hLNVM821CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-				"KeyExpiry":  "2026-11-03T08:09:59Z",
-				"DiscoKey":   "discokey:26b90b39d008a5126c458622b6f87494d19e682ffac39c59b0c909765b82c53c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48344", "10.65.0.27:48344", "172.17.0.1:48344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:59.167149724Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "808025455025406": {
-				"ID":          808025455025406,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2342413225418961,
-				"StableID":   "naokWxDtHK11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       2342413225418961,
-				"Key":        "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-				"DiscoKey":   "discokey:3ad388a43a21f171471f12f0ba66a979134b935c58df02ecf747d329b64a9919",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34147", "10.65.0.27:34147", "172.17.0.1:34147"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:09:57.093215089Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-			"MachineKey": "mkey:7aa3c14a7c025ae3f678245cbf1b018b376e2bf21a22510c6f40796b07e65b60",
-			"Peers": [{
-				"ID":         1242253544083859,
-				"StableID":   "nza1ortchA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-				"DiscoKey":   "discokey:ddf78c4b6eda97e33b398314e4baaeceba819371b7e4fc9df002ded979704c1e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:59247", "10.65.0.27:59247", "172.17.0.1:59247"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:55.166547046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         66756093145535,
-				"StableID":   "ntodM2aEX111CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-				"DiscoKey":   "discokey:f1cbf4d7e44df30cf8fa0eb6c36d65802c0038fed85f8fbd093e0133d6b58231",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:45919", "10.65.0.27:45919", "172.17.0.1:45919"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:55.704071912Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         808025455025406,
-				"StableID":   "n1xRWbTxJ711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-				"DiscoKey":   "discokey:5ac2f771e65c623a15a84d3d50a09f355fdd12cd9da03accc9d642e3a30e3746",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:35348", "10.65.0.27:35348", "172.17.0.1:35348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:56.235723406Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7419467155318450,
-				"StableID":   "nXF9kcpHwz11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-				"DiscoKey":   "discokey:500a35c0bbea7babfc452cf6875ebe8b22ae9c6abcd396acedf552732d3f2b7f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57734", "10.65.0.27:57734", "172.17.0.1:57734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:57.570986512Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8898373695790445,
-				"StableID":   "n2TySuB6VC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:d5348e3c8972ceab1778a76a94b9802f3c1a4ea8f03217993c49378673bc7e2c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55515", "10.65.0.27:55515", "172.17.0.1:55515"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:58.108960695Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7834249763166395,
-				"StableID":   "nxPhSVT9B421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:358d327db54d5a0b15fc5e5ed3c9c81eba5b8f318a761a3589c72b8b071aad56",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55526", "10.65.0.27:55526", "172.17.0.1:55526"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:58.634513306Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8369339924739352,
-				"StableID":   "n1m5hLNVM821CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-				"KeyExpiry":  "2026-11-03T08:09:59Z",
-				"DiscoKey":   "discokey:26b90b39d008a5126c458622b6f87494d19e682ffac39c59b0c909765b82c53c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48344", "10.65.0.27:48344", "172.17.0.1:48344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:59.167149724Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2342413225418961": {
-				"ID":          2342413225418961,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7419467155318450,
-				"StableID":   "nXF9kcpHwz11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7419467155318450,
-				"Key":        "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-				"DiscoKey":   "discokey:500a35c0bbea7babfc452cf6875ebe8b22ae9c6abcd396acedf552732d3f2b7f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57734", "10.65.0.27:57734", "172.17.0.1:57734"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:57.570986512Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-			"MachineKey": "mkey:4b1e41acd30b981d5c24aedf62407fb782c96d7dce412e26bf0ab0072875ac03",
-			"Peers": [{
-				"ID":         1242253544083859,
-				"StableID":   "nza1ortchA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-				"DiscoKey":   "discokey:ddf78c4b6eda97e33b398314e4baaeceba819371b7e4fc9df002ded979704c1e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:59247", "10.65.0.27:59247", "172.17.0.1:59247"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:55.166547046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         66756093145535,
-				"StableID":   "ntodM2aEX111CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-				"DiscoKey":   "discokey:f1cbf4d7e44df30cf8fa0eb6c36d65802c0038fed85f8fbd093e0133d6b58231",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:45919", "10.65.0.27:45919", "172.17.0.1:45919"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:55.704071912Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         808025455025406,
-				"StableID":   "n1xRWbTxJ711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-				"DiscoKey":   "discokey:5ac2f771e65c623a15a84d3d50a09f355fdd12cd9da03accc9d642e3a30e3746",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:35348", "10.65.0.27:35348", "172.17.0.1:35348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:56.235723406Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2342413225418961,
-				"StableID":   "naokWxDtHK11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-				"DiscoKey":   "discokey:3ad388a43a21f171471f12f0ba66a979134b935c58df02ecf747d329b64a9919",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34147", "10.65.0.27:34147", "172.17.0.1:34147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:57.093215089Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8898373695790445,
-				"StableID":   "n2TySuB6VC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:d5348e3c8972ceab1778a76a94b9802f3c1a4ea8f03217993c49378673bc7e2c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55515", "10.65.0.27:55515", "172.17.0.1:55515"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:58.108960695Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7834249763166395,
-				"StableID":   "nxPhSVT9B421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:358d327db54d5a0b15fc5e5ed3c9c81eba5b8f318a761a3589c72b8b071aad56",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55526", "10.65.0.27:55526", "172.17.0.1:55526"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:58.634513306Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8369339924739352,
-				"StableID":   "n1m5hLNVM821CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-				"KeyExpiry":  "2026-11-03T08:09:59Z",
-				"DiscoKey":   "discokey:26b90b39d008a5126c458622b6f87494d19e682ffac39c59b0c909765b82c53c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48344", "10.65.0.27:48344", "172.17.0.1:48344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:59.167149724Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7419467155318450": {
-				"ID":          7419467155318450,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8369339924739352,
-				"StableID":   "n1m5hLNVM821CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-				"KeyExpiry":  "2026-11-03T08:09:59Z",
-				"DiscoKey":   "discokey:26b90b39d008a5126c458622b6f87494d19e682ffac39c59b0c909765b82c53c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48344", "10.65.0.27:48344", "172.17.0.1:48344"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:59.167149724Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-			"MachineKey": "mkey:7118df5ef166d9377fcfdb8aed92fbf410f9e292633426a81921b55827a01d4e",
-			"Peers": [{
-				"ID":         1242253544083859,
-				"StableID":   "nza1ortchA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-				"DiscoKey":   "discokey:ddf78c4b6eda97e33b398314e4baaeceba819371b7e4fc9df002ded979704c1e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:59247", "10.65.0.27:59247", "172.17.0.1:59247"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:55.166547046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         66756093145535,
-				"StableID":   "ntodM2aEX111CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-				"DiscoKey":   "discokey:f1cbf4d7e44df30cf8fa0eb6c36d65802c0038fed85f8fbd093e0133d6b58231",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:45919", "10.65.0.27:45919", "172.17.0.1:45919"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:55.704071912Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         808025455025406,
-				"StableID":   "n1xRWbTxJ711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-				"DiscoKey":   "discokey:5ac2f771e65c623a15a84d3d50a09f355fdd12cd9da03accc9d642e3a30e3746",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:35348", "10.65.0.27:35348", "172.17.0.1:35348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:56.235723406Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2342413225418961,
-				"StableID":   "naokWxDtHK11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-				"DiscoKey":   "discokey:3ad388a43a21f171471f12f0ba66a979134b935c58df02ecf747d329b64a9919",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34147", "10.65.0.27:34147", "172.17.0.1:34147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:57.093215089Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7419467155318450,
-				"StableID":   "nXF9kcpHwz11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-				"DiscoKey":   "discokey:500a35c0bbea7babfc452cf6875ebe8b22ae9c6abcd396acedf552732d3f2b7f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57734", "10.65.0.27:57734", "172.17.0.1:57734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:57.570986512Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8898373695790445,
-				"StableID":   "n2TySuB6VC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:d5348e3c8972ceab1778a76a94b9802f3c1a4ea8f03217993c49378673bc7e2c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55515", "10.65.0.27:55515", "172.17.0.1:55515"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:58.108960695Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7834249763166395,
-				"StableID":   "nxPhSVT9B421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:358d327db54d5a0b15fc5e5ed3c9c81eba5b8f318a761a3589c72b8b071aad56",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55526", "10.65.0.27:55526", "172.17.0.1:55526"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:09:58.634513306Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7834249763166395,
-				"StableID":   "nxPhSVT9B421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:358d327db54d5a0b15fc5e5ed3c9c81eba5b8f318a761a3589c72b8b071aad56",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:55526", "10.65.0.27:55526", "172.17.0.1:55526"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:09:58.634513306Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6e03f480535dbf76f9f5ddfdc4426eb4edf64ee6ce04ba2fd9c220d438146115",
-			"MachineKey": "mkey:87e0b4a72b20b014e4b7851bc3b2137c0a658b326fd5086d94037ed51efbc54f",
-			"Peers": [{
-				"ID":         1242253544083859,
-				"StableID":   "nza1ortchA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f016f17657f5609e894e2c68000cc660134af4385a10fad6571d9aef72bd3f09",
-				"DiscoKey":   "discokey:ddf78c4b6eda97e33b398314e4baaeceba819371b7e4fc9df002ded979704c1e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:59247", "10.65.0.27:59247", "172.17.0.1:59247"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:09:55.166547046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         66756093145535,
-				"StableID":   "ntodM2aEX111CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:62849e38386a031c3fc49d18d4852d8847abec133659a7a7a4579013a94f7c5f",
-				"DiscoKey":   "discokey:f1cbf4d7e44df30cf8fa0eb6c36d65802c0038fed85f8fbd093e0133d6b58231",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:45919", "10.65.0.27:45919", "172.17.0.1:45919"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:09:55.704071912Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         808025455025406,
-				"StableID":   "n1xRWbTxJ711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a268bf0ef2b79cfa69e007f0e56e054afda81667fc0599c20740f5f1d3eb3274",
-				"DiscoKey":   "discokey:5ac2f771e65c623a15a84d3d50a09f355fdd12cd9da03accc9d642e3a30e3746",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:35348", "10.65.0.27:35348", "172.17.0.1:35348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:09:56.235723406Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2342413225418961,
-				"StableID":   "naokWxDtHK11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:82bd0ff4fda9d840b9efef1830d6440ad856f331a6f88ae5ba99cd7694017506",
-				"DiscoKey":   "discokey:3ad388a43a21f171471f12f0ba66a979134b935c58df02ecf747d329b64a9919",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34147", "10.65.0.27:34147", "172.17.0.1:34147"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:09:57.093215089Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7419467155318450,
-				"StableID":   "nXF9kcpHwz11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:69d455fa3fe405e859a2122c0b31a36bcb78755667c06805dd07293f65949856",
-				"DiscoKey":   "discokey:500a35c0bbea7babfc452cf6875ebe8b22ae9c6abcd396acedf552732d3f2b7f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57734", "10.65.0.27:57734", "172.17.0.1:57734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:09:57.570986512Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8898373695790445,
-				"StableID":   "n2TySuB6VC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:28ee3bf2adee865fece84f409f592b38ed5afc3840b6bf1aef083f1ded253b4b",
-				"KeyExpiry":  "2026-11-03T08:09:58Z",
-				"DiscoKey":   "discokey:d5348e3c8972ceab1778a76a94b9802f3c1a4ea8f03217993c49378673bc7e2c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55515", "10.65.0.27:55515", "172.17.0.1:55515"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:09:58.108960695Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8369339924739352,
-				"StableID":   "n1m5hLNVM821CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:745d3f573398452b749c486c85bd03dedae3572205efdadd694c0fa8ef15bf4d",
-				"KeyExpiry":  "2026-11-03T08:09:59Z",
-				"DiscoKey":   "discokey:26b90b39d008a5126c458622b6f87494d19e682ffac39c59b0c909765b82c53c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:48344", "10.65.0.27:48344", "172.17.0.1:48344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:09:59.167149724Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c3-captive.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c3-captive.hujson
deleted file mode 100644
index 3ade9586f..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c3-captive.hujson
+++ /dev/null
@@ -1,8837 +0,0 @@
-// nodeattrs-attr-c3-captive
-//
-// single attr disable-captive-portal-detection via wildcard
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:10:30Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c3-captive",
-	"description":    "single attr disable-captive-portal-detection via wildcard",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:10:30.141165091Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                            \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"single attr disable-captive-portal-detection via wildcard\",\n    \"id\": \"nodeattrs-attr-c3-captive\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"disable-captive-portal-detection\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c3-captive.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["disable-captive-portal-detection"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         336631436891019,
-				"StableID":   "nUZbLkjTd311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       336631436891019,
-				"Key":        "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-				"DiscoKey":   "discokey:ea5d425f64b555a44e77a3d7358ffe7f774e62c909ef11822def0c37bdfc533a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47709", "10.65.0.27:47709", "172.17.0.1:47709"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:10:35.653371154Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-			"MachineKey": "mkey:0f4f41ca715cc7cdc13e02323b3e156d644fb21147f96634a8dcebc9a6df7314",
-			"Peers": [{
-				"ID":         3971150740179182,
-				"StableID":   "nu8tLyPY1Y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-				"DiscoKey":   "discokey:d3d4fda1f060d93b3e16852b2fa951c372bae1f2912d2f95f3c33d1cfa264506",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50718", "10.65.0.27:50718", "172.17.0.1:50718"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:10:36.179968316Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1799512883977615,
-				"StableID":   "nc94Rp914F11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-				"DiscoKey":   "discokey:22ea8875d3bb16f8758c54d590238648ffc3cd707600f16f6d5ea02e3f0c9035",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55992", "10.65.0.27:55992", "172.17.0.1:55992"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:10:36.697203471Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         966574474734856,
-				"StableID":   "nyfJToGmY811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-				"DiscoKey":   "discokey:64eb1c3d3bb273ccddfd7bbf8951178a8e737b8e732018661a86f233adf3d024",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37994", "10.65.0.27:37994", "172.17.0.1:37994"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:10:37.567576129Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7866278542288182,
-				"StableID":   "nwPeyJoeR421CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-				"DiscoKey":   "discokey:0f34fefef3c50db0fdf0777918c2e256994be515918df2638a8c775c4969722b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39131", "10.65.0.27:39131", "172.17.0.1:39131"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:10:38.046714929Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6630386938886841,
-				"StableID":   "nA3a6G2vmt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-				"KeyExpiry":  "2026-11-03T08:10:38Z",
-				"DiscoKey":   "discokey:a3a6e50bb9b300820f8ffb9499e7f99272f72816c224ce1e480f9fc3c4af6531",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44150", "10.65.0.27:44150", "172.17.0.1:44150"],
-				"HomeDERP":   26,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:10:38.554108699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1743786354359040,
-				"StableID":   "nbgVp1KmcE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:cc526f2ee5d4e8506cae41f5a846933ea190758af89ace40d6d97e05d8603c3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:58263", "10.65.0.27:58263", "172.17.0.1:58263"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:10:39.098821483Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5757584153240252,
-				"StableID":   "njifhQycxm11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:69cba07bf71632464b5131836b331c7682ea779e2a115dcdc9fdf3d2c94f3652",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39792", "10.65.0.27:39792", "172.17.0.1:39792"],
-				"HomeDERP":   18,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:10:39.637825901Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "336631436891019": {
-				"ID":          336631436891019,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3971150740179182,
-				"StableID":   "nu8tLyPY1Y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3971150740179182,
-				"Key":        "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-				"DiscoKey":   "discokey:d3d4fda1f060d93b3e16852b2fa951c372bae1f2912d2f95f3c33d1cfa264506",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50718", "10.65.0.27:50718", "172.17.0.1:50718"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:10:36.179968316Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-			"MachineKey": "mkey:e14643c2a6d75113da4e47d34a0fa289cbe2a33b79f14364988617a124588839",
-			"Peers": [{
-				"ID":         336631436891019,
-				"StableID":   "nUZbLkjTd311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-				"DiscoKey":   "discokey:ea5d425f64b555a44e77a3d7358ffe7f774e62c909ef11822def0c37bdfc533a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47709", "10.65.0.27:47709", "172.17.0.1:47709"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:10:35.653371154Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1799512883977615,
-				"StableID":   "nc94Rp914F11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-				"DiscoKey":   "discokey:22ea8875d3bb16f8758c54d590238648ffc3cd707600f16f6d5ea02e3f0c9035",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55992", "10.65.0.27:55992", "172.17.0.1:55992"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:10:36.697203471Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         966574474734856,
-				"StableID":   "nyfJToGmY811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-				"DiscoKey":   "discokey:64eb1c3d3bb273ccddfd7bbf8951178a8e737b8e732018661a86f233adf3d024",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37994", "10.65.0.27:37994", "172.17.0.1:37994"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:10:37.567576129Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7866278542288182,
-				"StableID":   "nwPeyJoeR421CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-				"DiscoKey":   "discokey:0f34fefef3c50db0fdf0777918c2e256994be515918df2638a8c775c4969722b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39131", "10.65.0.27:39131", "172.17.0.1:39131"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:10:38.046714929Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6630386938886841,
-				"StableID":   "nA3a6G2vmt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-				"KeyExpiry":  "2026-11-03T08:10:38Z",
-				"DiscoKey":   "discokey:a3a6e50bb9b300820f8ffb9499e7f99272f72816c224ce1e480f9fc3c4af6531",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44150", "10.65.0.27:44150", "172.17.0.1:44150"],
-				"HomeDERP":   26,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:10:38.554108699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1743786354359040,
-				"StableID":   "nbgVp1KmcE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:cc526f2ee5d4e8506cae41f5a846933ea190758af89ace40d6d97e05d8603c3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:58263", "10.65.0.27:58263", "172.17.0.1:58263"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:10:39.098821483Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5757584153240252,
-				"StableID":   "njifhQycxm11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:69cba07bf71632464b5131836b331c7682ea779e2a115dcdc9fdf3d2c94f3652",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39792", "10.65.0.27:39792", "172.17.0.1:39792"],
-				"HomeDERP":   18,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:10:39.637825901Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3971150740179182": {
-				"ID":          3971150740179182,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6630386938886841,
-				"StableID":   "nA3a6G2vmt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-				"KeyExpiry":  "2026-11-03T08:10:38Z",
-				"DiscoKey":   "discokey:a3a6e50bb9b300820f8ffb9499e7f99272f72816c224ce1e480f9fc3c4af6531",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44150", "10.65.0.27:44150", "172.17.0.1:44150"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:10:38.554108699Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-			"MachineKey": "mkey:286d8a4ba22495646ad9d5a88acd2576994099343055b404a25adc3fde653c7d",
-			"Peers": [{
-				"ID":         336631436891019,
-				"StableID":   "nUZbLkjTd311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-				"DiscoKey":   "discokey:ea5d425f64b555a44e77a3d7358ffe7f774e62c909ef11822def0c37bdfc533a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47709", "10.65.0.27:47709", "172.17.0.1:47709"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:10:35.653371154Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3971150740179182,
-				"StableID":   "nu8tLyPY1Y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-				"DiscoKey":   "discokey:d3d4fda1f060d93b3e16852b2fa951c372bae1f2912d2f95f3c33d1cfa264506",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50718", "10.65.0.27:50718", "172.17.0.1:50718"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:10:36.179968316Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1799512883977615,
-				"StableID":   "nc94Rp914F11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-				"DiscoKey":   "discokey:22ea8875d3bb16f8758c54d590238648ffc3cd707600f16f6d5ea02e3f0c9035",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55992", "10.65.0.27:55992", "172.17.0.1:55992"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:10:36.697203471Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         966574474734856,
-				"StableID":   "nyfJToGmY811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-				"DiscoKey":   "discokey:64eb1c3d3bb273ccddfd7bbf8951178a8e737b8e732018661a86f233adf3d024",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37994", "10.65.0.27:37994", "172.17.0.1:37994"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:10:37.567576129Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7866278542288182,
-				"StableID":   "nwPeyJoeR421CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-				"DiscoKey":   "discokey:0f34fefef3c50db0fdf0777918c2e256994be515918df2638a8c775c4969722b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39131", "10.65.0.27:39131", "172.17.0.1:39131"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:10:38.046714929Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1743786354359040,
-				"StableID":   "nbgVp1KmcE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:cc526f2ee5d4e8506cae41f5a846933ea190758af89ace40d6d97e05d8603c3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:58263", "10.65.0.27:58263", "172.17.0.1:58263"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:10:39.098821483Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5757584153240252,
-				"StableID":   "njifhQycxm11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:69cba07bf71632464b5131836b331c7682ea779e2a115dcdc9fdf3d2c94f3652",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39792", "10.65.0.27:39792", "172.17.0.1:39792"],
-				"HomeDERP":   18,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:10:39.637825901Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1799512883977615,
-				"StableID":   "nc94Rp914F11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1799512883977615,
-				"Key":        "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-				"DiscoKey":   "discokey:22ea8875d3bb16f8758c54d590238648ffc3cd707600f16f6d5ea02e3f0c9035",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55992", "10.65.0.27:55992", "172.17.0.1:55992"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:10:36.697203471Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-			"MachineKey": "mkey:6f37abc9f318de4d145809f2a2864c40b47f6fdfa730d6415508aa9fab8db248",
-			"Peers": [{
-				"ID":         336631436891019,
-				"StableID":   "nUZbLkjTd311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-				"DiscoKey":   "discokey:ea5d425f64b555a44e77a3d7358ffe7f774e62c909ef11822def0c37bdfc533a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47709", "10.65.0.27:47709", "172.17.0.1:47709"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:10:35.653371154Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3971150740179182,
-				"StableID":   "nu8tLyPY1Y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-				"DiscoKey":   "discokey:d3d4fda1f060d93b3e16852b2fa951c372bae1f2912d2f95f3c33d1cfa264506",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50718", "10.65.0.27:50718", "172.17.0.1:50718"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:10:36.179968316Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         966574474734856,
-				"StableID":   "nyfJToGmY811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-				"DiscoKey":   "discokey:64eb1c3d3bb273ccddfd7bbf8951178a8e737b8e732018661a86f233adf3d024",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37994", "10.65.0.27:37994", "172.17.0.1:37994"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:10:37.567576129Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7866278542288182,
-				"StableID":   "nwPeyJoeR421CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-				"DiscoKey":   "discokey:0f34fefef3c50db0fdf0777918c2e256994be515918df2638a8c775c4969722b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39131", "10.65.0.27:39131", "172.17.0.1:39131"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:10:38.046714929Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6630386938886841,
-				"StableID":   "nA3a6G2vmt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-				"KeyExpiry":  "2026-11-03T08:10:38Z",
-				"DiscoKey":   "discokey:a3a6e50bb9b300820f8ffb9499e7f99272f72816c224ce1e480f9fc3c4af6531",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44150", "10.65.0.27:44150", "172.17.0.1:44150"],
-				"HomeDERP":   26,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:10:38.554108699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1743786354359040,
-				"StableID":   "nbgVp1KmcE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:cc526f2ee5d4e8506cae41f5a846933ea190758af89ace40d6d97e05d8603c3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:58263", "10.65.0.27:58263", "172.17.0.1:58263"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:10:39.098821483Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5757584153240252,
-				"StableID":   "njifhQycxm11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:69cba07bf71632464b5131836b331c7682ea779e2a115dcdc9fdf3d2c94f3652",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39792", "10.65.0.27:39792", "172.17.0.1:39792"],
-				"HomeDERP":   18,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:10:39.637825901Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1799512883977615": {
-				"ID":          1799512883977615,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         966574474734856,
-				"StableID":   "nyfJToGmY811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       966574474734856,
-				"Key":        "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-				"DiscoKey":   "discokey:64eb1c3d3bb273ccddfd7bbf8951178a8e737b8e732018661a86f233adf3d024",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37994", "10.65.0.27:37994", "172.17.0.1:37994"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:10:37.567576129Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-			"MachineKey": "mkey:455a4273bc18d985557841589ef472d133675840f75ef8f191cb85f533b3ca2f",
-			"Peers": [{
-				"ID":         336631436891019,
-				"StableID":   "nUZbLkjTd311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-				"DiscoKey":   "discokey:ea5d425f64b555a44e77a3d7358ffe7f774e62c909ef11822def0c37bdfc533a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47709", "10.65.0.27:47709", "172.17.0.1:47709"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:10:35.653371154Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3971150740179182,
-				"StableID":   "nu8tLyPY1Y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-				"DiscoKey":   "discokey:d3d4fda1f060d93b3e16852b2fa951c372bae1f2912d2f95f3c33d1cfa264506",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50718", "10.65.0.27:50718", "172.17.0.1:50718"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:10:36.179968316Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1799512883977615,
-				"StableID":   "nc94Rp914F11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-				"DiscoKey":   "discokey:22ea8875d3bb16f8758c54d590238648ffc3cd707600f16f6d5ea02e3f0c9035",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55992", "10.65.0.27:55992", "172.17.0.1:55992"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:10:36.697203471Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7866278542288182,
-				"StableID":   "nwPeyJoeR421CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-				"DiscoKey":   "discokey:0f34fefef3c50db0fdf0777918c2e256994be515918df2638a8c775c4969722b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39131", "10.65.0.27:39131", "172.17.0.1:39131"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:10:38.046714929Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6630386938886841,
-				"StableID":   "nA3a6G2vmt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-				"KeyExpiry":  "2026-11-03T08:10:38Z",
-				"DiscoKey":   "discokey:a3a6e50bb9b300820f8ffb9499e7f99272f72816c224ce1e480f9fc3c4af6531",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44150", "10.65.0.27:44150", "172.17.0.1:44150"],
-				"HomeDERP":   26,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:10:38.554108699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1743786354359040,
-				"StableID":   "nbgVp1KmcE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:cc526f2ee5d4e8506cae41f5a846933ea190758af89ace40d6d97e05d8603c3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:58263", "10.65.0.27:58263", "172.17.0.1:58263"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:10:39.098821483Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5757584153240252,
-				"StableID":   "njifhQycxm11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:69cba07bf71632464b5131836b331c7682ea779e2a115dcdc9fdf3d2c94f3652",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39792", "10.65.0.27:39792", "172.17.0.1:39792"],
-				"HomeDERP":   18,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:10:39.637825901Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "966574474734856": {
-				"ID":          966574474734856,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7866278542288182,
-				"StableID":   "nwPeyJoeR421CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7866278542288182,
-				"Key":        "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-				"DiscoKey":   "discokey:0f34fefef3c50db0fdf0777918c2e256994be515918df2638a8c775c4969722b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39131", "10.65.0.27:39131", "172.17.0.1:39131"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:10:38.046714929Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-			"MachineKey": "mkey:a2fdac050a32371ad668105052a46f610630b043c1f4ff3b21b3031d4613ae0b",
-			"Peers": [{
-				"ID":         336631436891019,
-				"StableID":   "nUZbLkjTd311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-				"DiscoKey":   "discokey:ea5d425f64b555a44e77a3d7358ffe7f774e62c909ef11822def0c37bdfc533a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47709", "10.65.0.27:47709", "172.17.0.1:47709"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:10:35.653371154Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3971150740179182,
-				"StableID":   "nu8tLyPY1Y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-				"DiscoKey":   "discokey:d3d4fda1f060d93b3e16852b2fa951c372bae1f2912d2f95f3c33d1cfa264506",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50718", "10.65.0.27:50718", "172.17.0.1:50718"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:10:36.179968316Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1799512883977615,
-				"StableID":   "nc94Rp914F11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-				"DiscoKey":   "discokey:22ea8875d3bb16f8758c54d590238648ffc3cd707600f16f6d5ea02e3f0c9035",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55992", "10.65.0.27:55992", "172.17.0.1:55992"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:10:36.697203471Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         966574474734856,
-				"StableID":   "nyfJToGmY811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-				"DiscoKey":   "discokey:64eb1c3d3bb273ccddfd7bbf8951178a8e737b8e732018661a86f233adf3d024",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37994", "10.65.0.27:37994", "172.17.0.1:37994"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:10:37.567576129Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6630386938886841,
-				"StableID":   "nA3a6G2vmt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-				"KeyExpiry":  "2026-11-03T08:10:38Z",
-				"DiscoKey":   "discokey:a3a6e50bb9b300820f8ffb9499e7f99272f72816c224ce1e480f9fc3c4af6531",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44150", "10.65.0.27:44150", "172.17.0.1:44150"],
-				"HomeDERP":   26,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:10:38.554108699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1743786354359040,
-				"StableID":   "nbgVp1KmcE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:cc526f2ee5d4e8506cae41f5a846933ea190758af89ace40d6d97e05d8603c3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:58263", "10.65.0.27:58263", "172.17.0.1:58263"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:10:39.098821483Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5757584153240252,
-				"StableID":   "njifhQycxm11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:69cba07bf71632464b5131836b331c7682ea779e2a115dcdc9fdf3d2c94f3652",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39792", "10.65.0.27:39792", "172.17.0.1:39792"],
-				"HomeDERP":   18,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:10:39.637825901Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7866278542288182": {
-				"ID":          7866278542288182,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5757584153240252,
-				"StableID":   "njifhQycxm11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:69cba07bf71632464b5131836b331c7682ea779e2a115dcdc9fdf3d2c94f3652",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39792", "10.65.0.27:39792", "172.17.0.1:39792"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:10:39.637825901Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-			"MachineKey": "mkey:855c2e4cbaf307cff7551286dbecb68575e8c3e97f42cab807ce1f1beae5a611",
-			"Peers": [{
-				"ID":         336631436891019,
-				"StableID":   "nUZbLkjTd311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-				"DiscoKey":   "discokey:ea5d425f64b555a44e77a3d7358ffe7f774e62c909ef11822def0c37bdfc533a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47709", "10.65.0.27:47709", "172.17.0.1:47709"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:10:35.653371154Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3971150740179182,
-				"StableID":   "nu8tLyPY1Y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-				"DiscoKey":   "discokey:d3d4fda1f060d93b3e16852b2fa951c372bae1f2912d2f95f3c33d1cfa264506",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50718", "10.65.0.27:50718", "172.17.0.1:50718"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:10:36.179968316Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1799512883977615,
-				"StableID":   "nc94Rp914F11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-				"DiscoKey":   "discokey:22ea8875d3bb16f8758c54d590238648ffc3cd707600f16f6d5ea02e3f0c9035",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55992", "10.65.0.27:55992", "172.17.0.1:55992"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:10:36.697203471Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         966574474734856,
-				"StableID":   "nyfJToGmY811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-				"DiscoKey":   "discokey:64eb1c3d3bb273ccddfd7bbf8951178a8e737b8e732018661a86f233adf3d024",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37994", "10.65.0.27:37994", "172.17.0.1:37994"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:10:37.567576129Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7866278542288182,
-				"StableID":   "nwPeyJoeR421CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-				"DiscoKey":   "discokey:0f34fefef3c50db0fdf0777918c2e256994be515918df2638a8c775c4969722b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39131", "10.65.0.27:39131", "172.17.0.1:39131"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:10:38.046714929Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6630386938886841,
-				"StableID":   "nA3a6G2vmt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-				"KeyExpiry":  "2026-11-03T08:10:38Z",
-				"DiscoKey":   "discokey:a3a6e50bb9b300820f8ffb9499e7f99272f72816c224ce1e480f9fc3c4af6531",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44150", "10.65.0.27:44150", "172.17.0.1:44150"],
-				"HomeDERP":   26,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:10:38.554108699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1743786354359040,
-				"StableID":   "nbgVp1KmcE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:cc526f2ee5d4e8506cae41f5a846933ea190758af89ace40d6d97e05d8603c3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:58263", "10.65.0.27:58263", "172.17.0.1:58263"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:10:39.098821483Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1743786354359040,
-				"StableID":   "nbgVp1KmcE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:cc526f2ee5d4e8506cae41f5a846933ea190758af89ace40d6d97e05d8603c3e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:58263", "10.65.0.27:58263", "172.17.0.1:58263"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:10:39.098821483Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:732da545e32f5a6363afc1861281c393bbbd619a6c3acb342f67aaf70f95cd18",
-			"MachineKey": "mkey:500c933cd5390926640a03068c3d258f1409dddec0d4eaab0e1002a444a5af1a",
-			"Peers": [{
-				"ID":         336631436891019,
-				"StableID":   "nUZbLkjTd311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c44003f1d61f7d036da37936bf68fe636172c24324c619db71794e98c9a4ec26",
-				"DiscoKey":   "discokey:ea5d425f64b555a44e77a3d7358ffe7f774e62c909ef11822def0c37bdfc533a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47709", "10.65.0.27:47709", "172.17.0.1:47709"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:10:35.653371154Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3971150740179182,
-				"StableID":   "nu8tLyPY1Y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c77ee14d5216c68faf684d116152978469c214465f0b825b9dce34dd30d7685c",
-				"DiscoKey":   "discokey:d3d4fda1f060d93b3e16852b2fa951c372bae1f2912d2f95f3c33d1cfa264506",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50718", "10.65.0.27:50718", "172.17.0.1:50718"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:10:36.179968316Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1799512883977615,
-				"StableID":   "nc94Rp914F11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2ebeb456de04adc366588bdb9dc5416cd805569b6e3e63ede6eaf92e6f0a1810",
-				"DiscoKey":   "discokey:22ea8875d3bb16f8758c54d590238648ffc3cd707600f16f6d5ea02e3f0c9035",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55992", "10.65.0.27:55992", "172.17.0.1:55992"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:10:36.697203471Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         966574474734856,
-				"StableID":   "nyfJToGmY811CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ade0e0d4e733f1af79b5aad72f66b8d3ed73c8070bf3000be2c5c86c2eba87b",
-				"DiscoKey":   "discokey:64eb1c3d3bb273ccddfd7bbf8951178a8e737b8e732018661a86f233adf3d024",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37994", "10.65.0.27:37994", "172.17.0.1:37994"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:10:37.567576129Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7866278542288182,
-				"StableID":   "nwPeyJoeR421CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0311cce179b09e6d14423ce01868bead44537c99a02a7f4bec951b51ac6472c",
-				"DiscoKey":   "discokey:0f34fefef3c50db0fdf0777918c2e256994be515918df2638a8c775c4969722b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:39131", "10.65.0.27:39131", "172.17.0.1:39131"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:10:38.046714929Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6630386938886841,
-				"StableID":   "nA3a6G2vmt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:340b444af96529250104e4ae0c132be8e0f9b029370cab0f1d89dae9da082341",
-				"KeyExpiry":  "2026-11-03T08:10:38Z",
-				"DiscoKey":   "discokey:a3a6e50bb9b300820f8ffb9499e7f99272f72816c224ce1e480f9fc3c4af6531",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44150", "10.65.0.27:44150", "172.17.0.1:44150"],
-				"HomeDERP":   26,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:10:38.554108699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5757584153240252,
-				"StableID":   "njifhQycxm11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c89aed314e658385ddac05d09a58fdf342814b5bb41d099461cdc7902f36ae6d",
-				"KeyExpiry":  "2026-11-03T08:10:39Z",
-				"DiscoKey":   "discokey:69cba07bf71632464b5131836b331c7682ea779e2a115dcdc9fdf3d2c94f3652",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39792", "10.65.0.27:39792", "172.17.0.1:39792"],
-				"HomeDERP":   18,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:10:39.637825901Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c4-magicdns-aaaa.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c4-magicdns-aaaa.hujson
deleted file mode 100644
index ae09cc29c..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c4-magicdns-aaaa.hujson
+++ /dev/null
@@ -1,8837 +0,0 @@
-// nodeattrs-attr-c4-magicdns-aaaa
-//
-// single attr magicdns-aaaa via wildcard
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:11:10Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c4-magicdns-aaaa",
-	"description":    "single attr magicdns-aaaa via wildcard",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:11:10.555039525Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                  \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"single attr magicdns-aaaa via wildcard\",\n    \"id\": \"nodeattrs-attr-c4-magicdns-aaaa\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"magicdns-aaaa\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c4-magicdns-aaaa.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["magicdns-aaaa"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7658909703055079,
-				"StableID":   "n6Gnk6ajo221CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       7658909703055079,
-				"Key":        "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-				"DiscoKey":   "discokey:a09d7a285129d8a17fcbccf94ea4fcb68e0cb04526be612d47c16a59bdfb7b70",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:34358", "10.65.0.27:34358", "172.17.0.1:34358"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:15.757748538Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"magicdns-aaaa":                          null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"magicdns-aaaa",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-			"MachineKey": "mkey:2f33bdaefd643a1eecb774cf90e161315a254c07cc7fc70ad00f72559214d415",
-			"Peers": [{
-				"ID":         4832676183267219,
-				"StableID":   "neWQb6Djje11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-				"DiscoKey":   "discokey:c016cd38fb4417197e4255835313c1f88109bf58c228f3e6744294618e759246",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43605", "10.65.0.27:43605", "172.17.0.1:43605"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:16.293581934Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4627319385202296,
-				"StableID":   "nRDTZMqi8d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-				"DiscoKey":   "discokey:33e9da7d9ef4b9736e7a24bc4ce82931a627b0b0a50441859c756298798d4249",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34541", "10.65.0.27:34541", "172.17.0.1:34541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:16.827586741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2840853021707292,
-				"StableID":   "nhb5ViPdBP11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-				"DiscoKey":   "discokey:4055bce3048d4e0ffc8f70f95eb7213323d462e1bc99243bfb5bee31e2e80e04",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36462", "10.65.0.27:36462", "172.17.0.1:36462"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:17.368045596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1551285198776965,
-				"StableID":   "nLgatdda7D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-				"DiscoKey":   "discokey:f363a09fed2d76397cd6b2d2d95f893792b3956b89b249e9c9bd43b57afcb74d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:33062", "10.65.0.27:33062", "172.17.0.1:33062"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:17.903847157Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6554432136778471,
-				"StableID":   "nan4LSpWBt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:ae38f33dd023b5f91c0e4dc1cbfb2b7153dea3bb0932426d3d197f0d94a3dd59",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:58427", "10.65.0.27:58427", "172.17.0.1:58427"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:18.439405592Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1791779879240666,
-				"StableID":   "nBhTG72WzE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:3ca1dd6a433bfb855ed34d3783a43c551797b8ec207b360faee58d877406714d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34378", "10.65.0.27:34378", "172.17.0.1:34378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:18.964362818Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3222725073547543,
-				"StableID":   "n8Df3LXaAS11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-				"KeyExpiry":  "2026-11-03T08:11:19Z",
-				"DiscoKey":   "discokey:6e5286a9fdee75f0e8531f5ebb4a990e2cb095209cb39a5d08173edc9e23d917",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33087", "10.65.0.27:33087", "172.17.0.1:33087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:19.504368893Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7658909703055079": {
-				"ID":          7658909703055079,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4832676183267219,
-				"StableID":   "neWQb6Djje11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       4832676183267219,
-				"Key":        "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-				"DiscoKey":   "discokey:c016cd38fb4417197e4255835313c1f88109bf58c228f3e6744294618e759246",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43605", "10.65.0.27:43605", "172.17.0.1:43605"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:11:16.293581934Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"magicdns-aaaa":                          null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"magicdns-aaaa",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-			"MachineKey": "mkey:425450afb076db056e81d95a72de96ecdf93c32731a1983cebf1e266e3d5ed76",
-			"Peers": [{
-				"ID":         7658909703055079,
-				"StableID":   "n6Gnk6ajo221CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-				"DiscoKey":   "discokey:a09d7a285129d8a17fcbccf94ea4fcb68e0cb04526be612d47c16a59bdfb7b70",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:34358", "10.65.0.27:34358", "172.17.0.1:34358"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:15.757748538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4627319385202296,
-				"StableID":   "nRDTZMqi8d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-				"DiscoKey":   "discokey:33e9da7d9ef4b9736e7a24bc4ce82931a627b0b0a50441859c756298798d4249",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34541", "10.65.0.27:34541", "172.17.0.1:34541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:16.827586741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2840853021707292,
-				"StableID":   "nhb5ViPdBP11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-				"DiscoKey":   "discokey:4055bce3048d4e0ffc8f70f95eb7213323d462e1bc99243bfb5bee31e2e80e04",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36462", "10.65.0.27:36462", "172.17.0.1:36462"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:17.368045596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1551285198776965,
-				"StableID":   "nLgatdda7D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-				"DiscoKey":   "discokey:f363a09fed2d76397cd6b2d2d95f893792b3956b89b249e9c9bd43b57afcb74d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:33062", "10.65.0.27:33062", "172.17.0.1:33062"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:17.903847157Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6554432136778471,
-				"StableID":   "nan4LSpWBt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:ae38f33dd023b5f91c0e4dc1cbfb2b7153dea3bb0932426d3d197f0d94a3dd59",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:58427", "10.65.0.27:58427", "172.17.0.1:58427"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:18.439405592Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1791779879240666,
-				"StableID":   "nBhTG72WzE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:3ca1dd6a433bfb855ed34d3783a43c551797b8ec207b360faee58d877406714d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34378", "10.65.0.27:34378", "172.17.0.1:34378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:18.964362818Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3222725073547543,
-				"StableID":   "n8Df3LXaAS11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-				"KeyExpiry":  "2026-11-03T08:11:19Z",
-				"DiscoKey":   "discokey:6e5286a9fdee75f0e8531f5ebb4a990e2cb095209cb39a5d08173edc9e23d917",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33087", "10.65.0.27:33087", "172.17.0.1:33087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:19.504368893Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4832676183267219": {
-				"ID":          4832676183267219,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6554432136778471,
-				"StableID":   "nan4LSpWBt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:ae38f33dd023b5f91c0e4dc1cbfb2b7153dea3bb0932426d3d197f0d94a3dd59",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:58427", "10.65.0.27:58427", "172.17.0.1:58427"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:18.439405592Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"magicdns-aaaa":                          null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"magicdns-aaaa",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-			"MachineKey": "mkey:c2def2e138664d161558337fc4738147f43a82538f379de04d12f0c1d6c5ac2f",
-			"Peers": [{
-				"ID":         7658909703055079,
-				"StableID":   "n6Gnk6ajo221CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-				"DiscoKey":   "discokey:a09d7a285129d8a17fcbccf94ea4fcb68e0cb04526be612d47c16a59bdfb7b70",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:34358", "10.65.0.27:34358", "172.17.0.1:34358"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:15.757748538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4832676183267219,
-				"StableID":   "neWQb6Djje11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-				"DiscoKey":   "discokey:c016cd38fb4417197e4255835313c1f88109bf58c228f3e6744294618e759246",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43605", "10.65.0.27:43605", "172.17.0.1:43605"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:16.293581934Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4627319385202296,
-				"StableID":   "nRDTZMqi8d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-				"DiscoKey":   "discokey:33e9da7d9ef4b9736e7a24bc4ce82931a627b0b0a50441859c756298798d4249",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34541", "10.65.0.27:34541", "172.17.0.1:34541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:16.827586741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2840853021707292,
-				"StableID":   "nhb5ViPdBP11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-				"DiscoKey":   "discokey:4055bce3048d4e0ffc8f70f95eb7213323d462e1bc99243bfb5bee31e2e80e04",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36462", "10.65.0.27:36462", "172.17.0.1:36462"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:17.368045596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1551285198776965,
-				"StableID":   "nLgatdda7D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-				"DiscoKey":   "discokey:f363a09fed2d76397cd6b2d2d95f893792b3956b89b249e9c9bd43b57afcb74d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:33062", "10.65.0.27:33062", "172.17.0.1:33062"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:17.903847157Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1791779879240666,
-				"StableID":   "nBhTG72WzE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:3ca1dd6a433bfb855ed34d3783a43c551797b8ec207b360faee58d877406714d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34378", "10.65.0.27:34378", "172.17.0.1:34378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:18.964362818Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3222725073547543,
-				"StableID":   "n8Df3LXaAS11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-				"KeyExpiry":  "2026-11-03T08:11:19Z",
-				"DiscoKey":   "discokey:6e5286a9fdee75f0e8531f5ebb4a990e2cb095209cb39a5d08173edc9e23d917",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33087", "10.65.0.27:33087", "172.17.0.1:33087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:19.504368893Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4627319385202296,
-				"StableID":   "nRDTZMqi8d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       4627319385202296,
-				"Key":        "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-				"DiscoKey":   "discokey:33e9da7d9ef4b9736e7a24bc4ce82931a627b0b0a50441859c756298798d4249",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34541", "10.65.0.27:34541", "172.17.0.1:34541"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:16.827586741Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"magicdns-aaaa":                          null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"magicdns-aaaa",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-			"MachineKey": "mkey:161f128b4e8b30074604c15dc8d2591ce71906e8a9f7ba7b4dc73a01282b4d65",
-			"Peers": [{
-				"ID":         7658909703055079,
-				"StableID":   "n6Gnk6ajo221CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-				"DiscoKey":   "discokey:a09d7a285129d8a17fcbccf94ea4fcb68e0cb04526be612d47c16a59bdfb7b70",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:34358", "10.65.0.27:34358", "172.17.0.1:34358"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:15.757748538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4832676183267219,
-				"StableID":   "neWQb6Djje11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-				"DiscoKey":   "discokey:c016cd38fb4417197e4255835313c1f88109bf58c228f3e6744294618e759246",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43605", "10.65.0.27:43605", "172.17.0.1:43605"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:16.293581934Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2840853021707292,
-				"StableID":   "nhb5ViPdBP11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-				"DiscoKey":   "discokey:4055bce3048d4e0ffc8f70f95eb7213323d462e1bc99243bfb5bee31e2e80e04",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36462", "10.65.0.27:36462", "172.17.0.1:36462"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:17.368045596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1551285198776965,
-				"StableID":   "nLgatdda7D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-				"DiscoKey":   "discokey:f363a09fed2d76397cd6b2d2d95f893792b3956b89b249e9c9bd43b57afcb74d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:33062", "10.65.0.27:33062", "172.17.0.1:33062"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:17.903847157Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6554432136778471,
-				"StableID":   "nan4LSpWBt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:ae38f33dd023b5f91c0e4dc1cbfb2b7153dea3bb0932426d3d197f0d94a3dd59",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:58427", "10.65.0.27:58427", "172.17.0.1:58427"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:18.439405592Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1791779879240666,
-				"StableID":   "nBhTG72WzE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:3ca1dd6a433bfb855ed34d3783a43c551797b8ec207b360faee58d877406714d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34378", "10.65.0.27:34378", "172.17.0.1:34378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:18.964362818Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3222725073547543,
-				"StableID":   "n8Df3LXaAS11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-				"KeyExpiry":  "2026-11-03T08:11:19Z",
-				"DiscoKey":   "discokey:6e5286a9fdee75f0e8531f5ebb4a990e2cb095209cb39a5d08173edc9e23d917",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33087", "10.65.0.27:33087", "172.17.0.1:33087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:19.504368893Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4627319385202296": {
-				"ID":          4627319385202296,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2840853021707292,
-				"StableID":   "nhb5ViPdBP11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       2840853021707292,
-				"Key":        "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-				"DiscoKey":   "discokey:4055bce3048d4e0ffc8f70f95eb7213323d462e1bc99243bfb5bee31e2e80e04",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36462", "10.65.0.27:36462", "172.17.0.1:36462"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:11:17.368045596Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"magicdns-aaaa":                          null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"magicdns-aaaa",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-			"MachineKey": "mkey:2fa0b5c49b0d4310342a1b7dab846adee90d8cd2647b51f52a813d50de293006",
-			"Peers": [{
-				"ID":         7658909703055079,
-				"StableID":   "n6Gnk6ajo221CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-				"DiscoKey":   "discokey:a09d7a285129d8a17fcbccf94ea4fcb68e0cb04526be612d47c16a59bdfb7b70",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:34358", "10.65.0.27:34358", "172.17.0.1:34358"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:15.757748538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4832676183267219,
-				"StableID":   "neWQb6Djje11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-				"DiscoKey":   "discokey:c016cd38fb4417197e4255835313c1f88109bf58c228f3e6744294618e759246",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43605", "10.65.0.27:43605", "172.17.0.1:43605"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:16.293581934Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4627319385202296,
-				"StableID":   "nRDTZMqi8d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-				"DiscoKey":   "discokey:33e9da7d9ef4b9736e7a24bc4ce82931a627b0b0a50441859c756298798d4249",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34541", "10.65.0.27:34541", "172.17.0.1:34541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:16.827586741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1551285198776965,
-				"StableID":   "nLgatdda7D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-				"DiscoKey":   "discokey:f363a09fed2d76397cd6b2d2d95f893792b3956b89b249e9c9bd43b57afcb74d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:33062", "10.65.0.27:33062", "172.17.0.1:33062"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:17.903847157Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6554432136778471,
-				"StableID":   "nan4LSpWBt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:ae38f33dd023b5f91c0e4dc1cbfb2b7153dea3bb0932426d3d197f0d94a3dd59",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:58427", "10.65.0.27:58427", "172.17.0.1:58427"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:18.439405592Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1791779879240666,
-				"StableID":   "nBhTG72WzE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:3ca1dd6a433bfb855ed34d3783a43c551797b8ec207b360faee58d877406714d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34378", "10.65.0.27:34378", "172.17.0.1:34378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:18.964362818Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3222725073547543,
-				"StableID":   "n8Df3LXaAS11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-				"KeyExpiry":  "2026-11-03T08:11:19Z",
-				"DiscoKey":   "discokey:6e5286a9fdee75f0e8531f5ebb4a990e2cb095209cb39a5d08173edc9e23d917",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33087", "10.65.0.27:33087", "172.17.0.1:33087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:19.504368893Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2840853021707292": {
-				"ID":          2840853021707292,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1551285198776965,
-				"StableID":   "nLgatdda7D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1551285198776965,
-				"Key":        "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-				"DiscoKey":   "discokey:f363a09fed2d76397cd6b2d2d95f893792b3956b89b249e9c9bd43b57afcb74d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:33062", "10.65.0.27:33062", "172.17.0.1:33062"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:17.903847157Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"magicdns-aaaa":                          null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"magicdns-aaaa",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-			"MachineKey": "mkey:dd47b660fc845be3c1c96847ac6048ae46dad521d514b13e63dee7a6e052924c",
-			"Peers": [{
-				"ID":         7658909703055079,
-				"StableID":   "n6Gnk6ajo221CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-				"DiscoKey":   "discokey:a09d7a285129d8a17fcbccf94ea4fcb68e0cb04526be612d47c16a59bdfb7b70",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:34358", "10.65.0.27:34358", "172.17.0.1:34358"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:15.757748538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4832676183267219,
-				"StableID":   "neWQb6Djje11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-				"DiscoKey":   "discokey:c016cd38fb4417197e4255835313c1f88109bf58c228f3e6744294618e759246",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43605", "10.65.0.27:43605", "172.17.0.1:43605"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:16.293581934Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4627319385202296,
-				"StableID":   "nRDTZMqi8d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-				"DiscoKey":   "discokey:33e9da7d9ef4b9736e7a24bc4ce82931a627b0b0a50441859c756298798d4249",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34541", "10.65.0.27:34541", "172.17.0.1:34541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:16.827586741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2840853021707292,
-				"StableID":   "nhb5ViPdBP11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-				"DiscoKey":   "discokey:4055bce3048d4e0ffc8f70f95eb7213323d462e1bc99243bfb5bee31e2e80e04",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36462", "10.65.0.27:36462", "172.17.0.1:36462"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:17.368045596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6554432136778471,
-				"StableID":   "nan4LSpWBt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:ae38f33dd023b5f91c0e4dc1cbfb2b7153dea3bb0932426d3d197f0d94a3dd59",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:58427", "10.65.0.27:58427", "172.17.0.1:58427"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:18.439405592Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1791779879240666,
-				"StableID":   "nBhTG72WzE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:3ca1dd6a433bfb855ed34d3783a43c551797b8ec207b360faee58d877406714d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34378", "10.65.0.27:34378", "172.17.0.1:34378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:18.964362818Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3222725073547543,
-				"StableID":   "n8Df3LXaAS11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-				"KeyExpiry":  "2026-11-03T08:11:19Z",
-				"DiscoKey":   "discokey:6e5286a9fdee75f0e8531f5ebb4a990e2cb095209cb39a5d08173edc9e23d917",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33087", "10.65.0.27:33087", "172.17.0.1:33087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:19.504368893Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1551285198776965": {
-				"ID":          1551285198776965,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3222725073547543,
-				"StableID":   "n8Df3LXaAS11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-				"KeyExpiry":  "2026-11-03T08:11:19Z",
-				"DiscoKey":   "discokey:6e5286a9fdee75f0e8531f5ebb4a990e2cb095209cb39a5d08173edc9e23d917",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33087", "10.65.0.27:33087", "172.17.0.1:33087"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:19.504368893Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"magicdns-aaaa":                          null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"magicdns-aaaa",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-			"MachineKey": "mkey:c93a56530f3145899060465e4a0caa6fa7b0aa72f4b3a9972d2fa0c6ce06c426",
-			"Peers": [{
-				"ID":         7658909703055079,
-				"StableID":   "n6Gnk6ajo221CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-				"DiscoKey":   "discokey:a09d7a285129d8a17fcbccf94ea4fcb68e0cb04526be612d47c16a59bdfb7b70",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:34358", "10.65.0.27:34358", "172.17.0.1:34358"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:15.757748538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4832676183267219,
-				"StableID":   "neWQb6Djje11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-				"DiscoKey":   "discokey:c016cd38fb4417197e4255835313c1f88109bf58c228f3e6744294618e759246",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43605", "10.65.0.27:43605", "172.17.0.1:43605"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:16.293581934Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4627319385202296,
-				"StableID":   "nRDTZMqi8d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-				"DiscoKey":   "discokey:33e9da7d9ef4b9736e7a24bc4ce82931a627b0b0a50441859c756298798d4249",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34541", "10.65.0.27:34541", "172.17.0.1:34541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:16.827586741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2840853021707292,
-				"StableID":   "nhb5ViPdBP11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-				"DiscoKey":   "discokey:4055bce3048d4e0ffc8f70f95eb7213323d462e1bc99243bfb5bee31e2e80e04",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36462", "10.65.0.27:36462", "172.17.0.1:36462"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:17.368045596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1551285198776965,
-				"StableID":   "nLgatdda7D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-				"DiscoKey":   "discokey:f363a09fed2d76397cd6b2d2d95f893792b3956b89b249e9c9bd43b57afcb74d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:33062", "10.65.0.27:33062", "172.17.0.1:33062"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:17.903847157Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6554432136778471,
-				"StableID":   "nan4LSpWBt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:ae38f33dd023b5f91c0e4dc1cbfb2b7153dea3bb0932426d3d197f0d94a3dd59",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:58427", "10.65.0.27:58427", "172.17.0.1:58427"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:18.439405592Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1791779879240666,
-				"StableID":   "nBhTG72WzE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:3ca1dd6a433bfb855ed34d3783a43c551797b8ec207b360faee58d877406714d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34378", "10.65.0.27:34378", "172.17.0.1:34378"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:18.964362818Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1791779879240666,
-				"StableID":   "nBhTG72WzE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:3ca1dd6a433bfb855ed34d3783a43c551797b8ec207b360faee58d877406714d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34378", "10.65.0.27:34378", "172.17.0.1:34378"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:18.964362818Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"magicdns-aaaa":                          null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"magicdns-aaaa",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0b550f844b740ff4b456eb519f4d611ee5814ee260de370c319fd156146dc336",
-			"MachineKey": "mkey:59f35ebe427d17985d2aaa11de34480366e1d8e7eeef4374ed2007623976974d",
-			"Peers": [{
-				"ID":         7658909703055079,
-				"StableID":   "n6Gnk6ajo221CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cc9fbd78a34cf52a656d1b2c57cd493df8820bd72689fd93267c89116b0bf314",
-				"DiscoKey":   "discokey:a09d7a285129d8a17fcbccf94ea4fcb68e0cb04526be612d47c16a59bdfb7b70",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:34358", "10.65.0.27:34358", "172.17.0.1:34358"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:15.757748538Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4832676183267219,
-				"StableID":   "neWQb6Djje11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:afcdec023374a10ad562ae444a3a05bf584d43b70221d40d31a7f029a844d010",
-				"DiscoKey":   "discokey:c016cd38fb4417197e4255835313c1f88109bf58c228f3e6744294618e759246",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43605", "10.65.0.27:43605", "172.17.0.1:43605"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:16.293581934Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4627319385202296,
-				"StableID":   "nRDTZMqi8d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9c6dfff95b7a9434b521372e49715fcb12d18f8706bb821d054e4554d2990359",
-				"DiscoKey":   "discokey:33e9da7d9ef4b9736e7a24bc4ce82931a627b0b0a50441859c756298798d4249",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34541", "10.65.0.27:34541", "172.17.0.1:34541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:16.827586741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2840853021707292,
-				"StableID":   "nhb5ViPdBP11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1273fa3649843c22e620a17a7d3106c053c6662dbc878736714a3fbfc1d1f29",
-				"DiscoKey":   "discokey:4055bce3048d4e0ffc8f70f95eb7213323d462e1bc99243bfb5bee31e2e80e04",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:36462", "10.65.0.27:36462", "172.17.0.1:36462"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:17.368045596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1551285198776965,
-				"StableID":   "nLgatdda7D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b4ede85528818c588797cf61689477f7edcd745ddccaab43e46561d59a81205f",
-				"DiscoKey":   "discokey:f363a09fed2d76397cd6b2d2d95f893792b3956b89b249e9c9bd43b57afcb74d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:33062", "10.65.0.27:33062", "172.17.0.1:33062"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:17.903847157Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6554432136778471,
-				"StableID":   "nan4LSpWBt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:43e35486dc58ce608d1552c5664884d70930231f4023949359d38864c24bf879",
-				"KeyExpiry":  "2026-11-03T08:11:18Z",
-				"DiscoKey":   "discokey:ae38f33dd023b5f91c0e4dc1cbfb2b7153dea3bb0932426d3d197f0d94a3dd59",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:58427", "10.65.0.27:58427", "172.17.0.1:58427"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:18.439405592Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3222725073547543,
-				"StableID":   "n8Df3LXaAS11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3a9e512b5e5165a8ef2d6cfa80d159cc9427c6ddac6a73d39633e137260e7d22",
-				"KeyExpiry":  "2026-11-03T08:11:19Z",
-				"DiscoKey":   "discokey:6e5286a9fdee75f0e8531f5ebb4a990e2cb095209cb39a5d08173edc9e23d917",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33087", "10.65.0.27:33087", "172.17.0.1:33087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:19.504368893Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c5-taildrive-share.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c5-taildrive-share.hujson
deleted file mode 100644
index b88fcc72e..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c5-taildrive-share.hujson
+++ /dev/null
@@ -1,7735 +0,0 @@
-// nodeattrs-attr-c5-taildrive-share
-//
-// taildrive sharer pair: drive:share + drive:access on autogroup:member
-//
-// Nodes with filter rules: 7 of 7
-// Captured at:    2026-05-07T08:11:50Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c5-taildrive-share",
-	"description":    "taildrive sharer pair: drive:share + drive:access on autogroup:member",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:11:50.470547319Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                    \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"taildrive sharer pair: drive:share + drive:access on autogroup:member\",\n    \"id\": \"nodeattrs-attr-c5-taildrive-share\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"drive:share\",\n                    \"drive:access\"\n                ],\n                \"target\": [\n                    \"autogroup:member\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c5-taildrive-share.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["drive:share", "drive:access"], "target": ["autogroup:member"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8468766203007303,
-				"StableID":   "neJ5SQ8X8921CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       8468766203007303,
-				"Key":        "nodekey:01c6de535b6a2f67caf5d98f12217a9a5682b4a0f30b11f904895d3f4e4c2c2c",
-				"DiscoKey":   "discokey:30928bc19c0fe644ababa14f78996cd48407ea7a596be97b595ca66c91d8ca45",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37459", "10.65.0.27:37459", "172.17.0.1:37459"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:56.124556683Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:01c6de535b6a2f67caf5d98f12217a9a5682b4a0f30b11f904895d3f4e4c2c2c",
-			"MachineKey": "mkey:eadce5a4fa9c1f3fd38d242f531d391fc6b84867d4005f5cf72fca3e00f7d676",
-			"Peers": [{
-				"ID":         311097956964094,
-				"StableID":   "nHNp9v1uR311CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:05dc6427b0a55c71368fe862b0ea063e2dca7728f4744e60c4ebe66b2b998855",
-				"DiscoKey":   "discokey:065d8bfbbb118f23f858945b68ffa59d81723e2687ee41027b953852f01eba7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44159", "10.65.0.27:44159", "172.17.0.1:44159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:56.669704589Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3538956855003918,
-				"StableID":   "nZNvgwPodU11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:24ec9d8169e345185f6d88599d50f6b24abf9a372db210bd48414be823c3fa28",
-				"DiscoKey":   "discokey:deb168ac31d7bd9ad8654d9fae9b39494ac9f574c9028e53ef682a9c4b245715",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52573", "10.65.0.27:52573", "172.17.0.1:52573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:57.212125152Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4204554379279269,
-				"StableID":   "nLvFgoWFqZ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a0248f44daeef543d8aa2eb4686f4d7362b08aa90eeddccd42b3b536c46d01f",
-				"DiscoKey":   "discokey:5ae9d7da6dc54303007669fd3690e0e433d06e6ea70055ce5e25f589fe66ad3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46656", "10.65.0.27:46656", "172.17.0.1:46656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:57.787315577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8293800744555374,
-				"StableID":   "nZaa1k5Hm721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1c845a36cb85a922fdebb18c3b5c96480af6f5b841315257832149d8df295c15",
-				"DiscoKey":   "discokey:2c1c538098e86274fc27878c24edef5df89cd587d7278b5207bcd293fbcafd3d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:58.316162445Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1230248254895008,
-				"StableID":   "ndjsV4YBcA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:3184042d25d95600354a7463f473a618a612ea8ffc4909fef9194c8a53abba3b",
-				"KeyExpiry":  "2026-11-03T08:11:58Z",
-				"DiscoKey":   "discokey:054a584b844aa90ce6512cca960375478b50adc0276231745590ef37396cc208",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46436", "10.65.0.27:46436", "172.17.0.1:46436"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:58.847683508Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5586433749781782,
-				"StableID":   "nh2EdD97dk11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:3037cf7747dd18544af62717ecce4a34cd7e5faa340242a77a26fce7aa0a7161",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:a50129f2c51b79e50ba32e79b1160f859ac2d1ccebe3625424cb95b3cbc8b007",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:52493", "10.65.0.27:52493", "172.17.0.1:52493"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:59.394648578Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         118352256636166,
-				"StableID":   "nREAexubv111CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:843ea7e2d324b6ebe99b5ea804c721a0c042c75a225f407625d8429bd3cf6d37",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:7efee679fcfb846b66be84789392d1a245fcec243a2e87bd504b747adbe2603d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:50675", "10.65.0.27:50675", "172.17.0.1:50675"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:59.921443278Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8468766203007303": {
-				"ID":          8468766203007303,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         311097956964094,
-				"StableID":   "nHNp9v1uR311CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       311097956964094,
-				"Key":        "nodekey:05dc6427b0a55c71368fe862b0ea063e2dca7728f4744e60c4ebe66b2b998855",
-				"DiscoKey":   "discokey:065d8bfbbb118f23f858945b68ffa59d81723e2687ee41027b953852f01eba7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44159", "10.65.0.27:44159", "172.17.0.1:44159"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:11:56.669704589Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:05dc6427b0a55c71368fe862b0ea063e2dca7728f4744e60c4ebe66b2b998855",
-			"MachineKey": "mkey:3e23902cb90f9282e07808cbfedf92412937973860bbf69cf8a9faaf88e8d906",
-			"Peers": [{
-				"ID":         8468766203007303,
-				"StableID":   "neJ5SQ8X8921CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:01c6de535b6a2f67caf5d98f12217a9a5682b4a0f30b11f904895d3f4e4c2c2c",
-				"DiscoKey":   "discokey:30928bc19c0fe644ababa14f78996cd48407ea7a596be97b595ca66c91d8ca45",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37459", "10.65.0.27:37459", "172.17.0.1:37459"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:56.124556683Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3538956855003918,
-				"StableID":   "nZNvgwPodU11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:24ec9d8169e345185f6d88599d50f6b24abf9a372db210bd48414be823c3fa28",
-				"DiscoKey":   "discokey:deb168ac31d7bd9ad8654d9fae9b39494ac9f574c9028e53ef682a9c4b245715",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52573", "10.65.0.27:52573", "172.17.0.1:52573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:57.212125152Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4204554379279269,
-				"StableID":   "nLvFgoWFqZ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a0248f44daeef543d8aa2eb4686f4d7362b08aa90eeddccd42b3b536c46d01f",
-				"DiscoKey":   "discokey:5ae9d7da6dc54303007669fd3690e0e433d06e6ea70055ce5e25f589fe66ad3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46656", "10.65.0.27:46656", "172.17.0.1:46656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:57.787315577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8293800744555374,
-				"StableID":   "nZaa1k5Hm721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1c845a36cb85a922fdebb18c3b5c96480af6f5b841315257832149d8df295c15",
-				"DiscoKey":   "discokey:2c1c538098e86274fc27878c24edef5df89cd587d7278b5207bcd293fbcafd3d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:58.316162445Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1230248254895008,
-				"StableID":   "ndjsV4YBcA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:3184042d25d95600354a7463f473a618a612ea8ffc4909fef9194c8a53abba3b",
-				"KeyExpiry":  "2026-11-03T08:11:58Z",
-				"DiscoKey":   "discokey:054a584b844aa90ce6512cca960375478b50adc0276231745590ef37396cc208",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46436", "10.65.0.27:46436", "172.17.0.1:46436"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:58.847683508Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5586433749781782,
-				"StableID":   "nh2EdD97dk11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:3037cf7747dd18544af62717ecce4a34cd7e5faa340242a77a26fce7aa0a7161",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:a50129f2c51b79e50ba32e79b1160f859ac2d1ccebe3625424cb95b3cbc8b007",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:52493", "10.65.0.27:52493", "172.17.0.1:52493"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:59.394648578Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         118352256636166,
-				"StableID":   "nREAexubv111CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:843ea7e2d324b6ebe99b5ea804c721a0c042c75a225f407625d8429bd3cf6d37",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:7efee679fcfb846b66be84789392d1a245fcec243a2e87bd504b747adbe2603d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:50675", "10.65.0.27:50675", "172.17.0.1:50675"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:59.921443278Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "311097956964094": {
-				"ID":          311097956964094,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3538956855003918,
-				"StableID":   "nZNvgwPodU11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       3538956855003918,
-				"Key":        "nodekey:24ec9d8169e345185f6d88599d50f6b24abf9a372db210bd48414be823c3fa28",
-				"DiscoKey":   "discokey:deb168ac31d7bd9ad8654d9fae9b39494ac9f574c9028e53ef682a9c4b245715",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52573", "10.65.0.27:52573", "172.17.0.1:52573"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:57.212125152Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:24ec9d8169e345185f6d88599d50f6b24abf9a372db210bd48414be823c3fa28",
-			"MachineKey": "mkey:61e1a9362d4267eaa364da4a7acd3aeaef105fb7a7d0df23fa00094b28022360",
-			"Peers": [{
-				"ID":         8468766203007303,
-				"StableID":   "neJ5SQ8X8921CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:01c6de535b6a2f67caf5d98f12217a9a5682b4a0f30b11f904895d3f4e4c2c2c",
-				"DiscoKey":   "discokey:30928bc19c0fe644ababa14f78996cd48407ea7a596be97b595ca66c91d8ca45",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37459", "10.65.0.27:37459", "172.17.0.1:37459"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:56.124556683Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         311097956964094,
-				"StableID":   "nHNp9v1uR311CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:05dc6427b0a55c71368fe862b0ea063e2dca7728f4744e60c4ebe66b2b998855",
-				"DiscoKey":   "discokey:065d8bfbbb118f23f858945b68ffa59d81723e2687ee41027b953852f01eba7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44159", "10.65.0.27:44159", "172.17.0.1:44159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:56.669704589Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4204554379279269,
-				"StableID":   "nLvFgoWFqZ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a0248f44daeef543d8aa2eb4686f4d7362b08aa90eeddccd42b3b536c46d01f",
-				"DiscoKey":   "discokey:5ae9d7da6dc54303007669fd3690e0e433d06e6ea70055ce5e25f589fe66ad3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46656", "10.65.0.27:46656", "172.17.0.1:46656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:57.787315577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8293800744555374,
-				"StableID":   "nZaa1k5Hm721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1c845a36cb85a922fdebb18c3b5c96480af6f5b841315257832149d8df295c15",
-				"DiscoKey":   "discokey:2c1c538098e86274fc27878c24edef5df89cd587d7278b5207bcd293fbcafd3d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:58.316162445Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1230248254895008,
-				"StableID":   "ndjsV4YBcA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:3184042d25d95600354a7463f473a618a612ea8ffc4909fef9194c8a53abba3b",
-				"KeyExpiry":  "2026-11-03T08:11:58Z",
-				"DiscoKey":   "discokey:054a584b844aa90ce6512cca960375478b50adc0276231745590ef37396cc208",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46436", "10.65.0.27:46436", "172.17.0.1:46436"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:58.847683508Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5586433749781782,
-				"StableID":   "nh2EdD97dk11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:3037cf7747dd18544af62717ecce4a34cd7e5faa340242a77a26fce7aa0a7161",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:a50129f2c51b79e50ba32e79b1160f859ac2d1ccebe3625424cb95b3cbc8b007",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:52493", "10.65.0.27:52493", "172.17.0.1:52493"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:59.394648578Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         118352256636166,
-				"StableID":   "nREAexubv111CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:843ea7e2d324b6ebe99b5ea804c721a0c042c75a225f407625d8429bd3cf6d37",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:7efee679fcfb846b66be84789392d1a245fcec243a2e87bd504b747adbe2603d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:50675", "10.65.0.27:50675", "172.17.0.1:50675"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:59.921443278Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3538956855003918": {
-				"ID":          3538956855003918,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4204554379279269,
-				"StableID":   "nLvFgoWFqZ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       4204554379279269,
-				"Key":        "nodekey:1a0248f44daeef543d8aa2eb4686f4d7362b08aa90eeddccd42b3b536c46d01f",
-				"DiscoKey":   "discokey:5ae9d7da6dc54303007669fd3690e0e433d06e6ea70055ce5e25f589fe66ad3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46656", "10.65.0.27:46656", "172.17.0.1:46656"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:11:57.787315577Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1a0248f44daeef543d8aa2eb4686f4d7362b08aa90eeddccd42b3b536c46d01f",
-			"MachineKey": "mkey:00f200902bf04e1e005816546d7a46a7b89ab72d533cb66d115bccf9b53de51e",
-			"Peers": [{
-				"ID":         8468766203007303,
-				"StableID":   "neJ5SQ8X8921CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:01c6de535b6a2f67caf5d98f12217a9a5682b4a0f30b11f904895d3f4e4c2c2c",
-				"DiscoKey":   "discokey:30928bc19c0fe644ababa14f78996cd48407ea7a596be97b595ca66c91d8ca45",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37459", "10.65.0.27:37459", "172.17.0.1:37459"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:56.124556683Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         311097956964094,
-				"StableID":   "nHNp9v1uR311CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:05dc6427b0a55c71368fe862b0ea063e2dca7728f4744e60c4ebe66b2b998855",
-				"DiscoKey":   "discokey:065d8bfbbb118f23f858945b68ffa59d81723e2687ee41027b953852f01eba7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44159", "10.65.0.27:44159", "172.17.0.1:44159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:56.669704589Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3538956855003918,
-				"StableID":   "nZNvgwPodU11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:24ec9d8169e345185f6d88599d50f6b24abf9a372db210bd48414be823c3fa28",
-				"DiscoKey":   "discokey:deb168ac31d7bd9ad8654d9fae9b39494ac9f574c9028e53ef682a9c4b245715",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52573", "10.65.0.27:52573", "172.17.0.1:52573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:57.212125152Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8293800744555374,
-				"StableID":   "nZaa1k5Hm721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1c845a36cb85a922fdebb18c3b5c96480af6f5b841315257832149d8df295c15",
-				"DiscoKey":   "discokey:2c1c538098e86274fc27878c24edef5df89cd587d7278b5207bcd293fbcafd3d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:58.316162445Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1230248254895008,
-				"StableID":   "ndjsV4YBcA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:3184042d25d95600354a7463f473a618a612ea8ffc4909fef9194c8a53abba3b",
-				"KeyExpiry":  "2026-11-03T08:11:58Z",
-				"DiscoKey":   "discokey:054a584b844aa90ce6512cca960375478b50adc0276231745590ef37396cc208",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46436", "10.65.0.27:46436", "172.17.0.1:46436"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:58.847683508Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5586433749781782,
-				"StableID":   "nh2EdD97dk11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:3037cf7747dd18544af62717ecce4a34cd7e5faa340242a77a26fce7aa0a7161",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:a50129f2c51b79e50ba32e79b1160f859ac2d1ccebe3625424cb95b3cbc8b007",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:52493", "10.65.0.27:52493", "172.17.0.1:52493"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:59.394648578Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         118352256636166,
-				"StableID":   "nREAexubv111CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:843ea7e2d324b6ebe99b5ea804c721a0c042c75a225f407625d8429bd3cf6d37",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:7efee679fcfb846b66be84789392d1a245fcec243a2e87bd504b747adbe2603d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:50675", "10.65.0.27:50675", "172.17.0.1:50675"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:59.921443278Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4204554379279269": {
-				"ID":          4204554379279269,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8293800744555374,
-				"StableID":   "nZaa1k5Hm721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       8293800744555374,
-				"Key":        "nodekey:1c845a36cb85a922fdebb18c3b5c96480af6f5b841315257832149d8df295c15",
-				"DiscoKey":   "discokey:2c1c538098e86274fc27878c24edef5df89cd587d7278b5207bcd293fbcafd3d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:58.316162445Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1c845a36cb85a922fdebb18c3b5c96480af6f5b841315257832149d8df295c15",
-			"MachineKey": "mkey:7956544a2a1e8965a950d04062464c1e5f720a429453bbe014913f86175b2f1e",
-			"Peers": [{
-				"ID":         8468766203007303,
-				"StableID":   "neJ5SQ8X8921CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:01c6de535b6a2f67caf5d98f12217a9a5682b4a0f30b11f904895d3f4e4c2c2c",
-				"DiscoKey":   "discokey:30928bc19c0fe644ababa14f78996cd48407ea7a596be97b595ca66c91d8ca45",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37459", "10.65.0.27:37459", "172.17.0.1:37459"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:56.124556683Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         311097956964094,
-				"StableID":   "nHNp9v1uR311CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:05dc6427b0a55c71368fe862b0ea063e2dca7728f4744e60c4ebe66b2b998855",
-				"DiscoKey":   "discokey:065d8bfbbb118f23f858945b68ffa59d81723e2687ee41027b953852f01eba7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44159", "10.65.0.27:44159", "172.17.0.1:44159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:56.669704589Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3538956855003918,
-				"StableID":   "nZNvgwPodU11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:24ec9d8169e345185f6d88599d50f6b24abf9a372db210bd48414be823c3fa28",
-				"DiscoKey":   "discokey:deb168ac31d7bd9ad8654d9fae9b39494ac9f574c9028e53ef682a9c4b245715",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52573", "10.65.0.27:52573", "172.17.0.1:52573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:57.212125152Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4204554379279269,
-				"StableID":   "nLvFgoWFqZ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a0248f44daeef543d8aa2eb4686f4d7362b08aa90eeddccd42b3b536c46d01f",
-				"DiscoKey":   "discokey:5ae9d7da6dc54303007669fd3690e0e433d06e6ea70055ce5e25f589fe66ad3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46656", "10.65.0.27:46656", "172.17.0.1:46656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:57.787315577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1230248254895008,
-				"StableID":   "ndjsV4YBcA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:3184042d25d95600354a7463f473a618a612ea8ffc4909fef9194c8a53abba3b",
-				"KeyExpiry":  "2026-11-03T08:11:58Z",
-				"DiscoKey":   "discokey:054a584b844aa90ce6512cca960375478b50adc0276231745590ef37396cc208",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46436", "10.65.0.27:46436", "172.17.0.1:46436"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:58.847683508Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5586433749781782,
-				"StableID":   "nh2EdD97dk11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:3037cf7747dd18544af62717ecce4a34cd7e5faa340242a77a26fce7aa0a7161",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:a50129f2c51b79e50ba32e79b1160f859ac2d1ccebe3625424cb95b3cbc8b007",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:52493", "10.65.0.27:52493", "172.17.0.1:52493"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:59.394648578Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         118352256636166,
-				"StableID":   "nREAexubv111CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:843ea7e2d324b6ebe99b5ea804c721a0c042c75a225f407625d8429bd3cf6d37",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:7efee679fcfb846b66be84789392d1a245fcec243a2e87bd504b747adbe2603d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:50675", "10.65.0.27:50675", "172.17.0.1:50675"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:59.921443278Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8293800744555374": {
-				"ID":          8293800744555374,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         118352256636166,
-				"StableID":   "nREAexubv111CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:843ea7e2d324b6ebe99b5ea804c721a0c042c75a225f407625d8429bd3cf6d37",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:7efee679fcfb846b66be84789392d1a245fcec243a2e87bd504b747adbe2603d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:50675", "10.65.0.27:50675", "172.17.0.1:50675"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:59.921443278Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"drive:share":                            null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"drive:share",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:843ea7e2d324b6ebe99b5ea804c721a0c042c75a225f407625d8429bd3cf6d37",
-			"MachineKey": "mkey:4ab3ec7eb22a1f9f97fe35efdec2fc4cc9405e8682e1f11c7b6ae3a5ea022a1b",
-			"Peers": [{
-				"ID":         8468766203007303,
-				"StableID":   "neJ5SQ8X8921CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:01c6de535b6a2f67caf5d98f12217a9a5682b4a0f30b11f904895d3f4e4c2c2c",
-				"DiscoKey":   "discokey:30928bc19c0fe644ababa14f78996cd48407ea7a596be97b595ca66c91d8ca45",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37459", "10.65.0.27:37459", "172.17.0.1:37459"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:56.124556683Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         311097956964094,
-				"StableID":   "nHNp9v1uR311CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:05dc6427b0a55c71368fe862b0ea063e2dca7728f4744e60c4ebe66b2b998855",
-				"DiscoKey":   "discokey:065d8bfbbb118f23f858945b68ffa59d81723e2687ee41027b953852f01eba7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44159", "10.65.0.27:44159", "172.17.0.1:44159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:56.669704589Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3538956855003918,
-				"StableID":   "nZNvgwPodU11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:24ec9d8169e345185f6d88599d50f6b24abf9a372db210bd48414be823c3fa28",
-				"DiscoKey":   "discokey:deb168ac31d7bd9ad8654d9fae9b39494ac9f574c9028e53ef682a9c4b245715",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52573", "10.65.0.27:52573", "172.17.0.1:52573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:57.212125152Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4204554379279269,
-				"StableID":   "nLvFgoWFqZ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a0248f44daeef543d8aa2eb4686f4d7362b08aa90eeddccd42b3b536c46d01f",
-				"DiscoKey":   "discokey:5ae9d7da6dc54303007669fd3690e0e433d06e6ea70055ce5e25f589fe66ad3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46656", "10.65.0.27:46656", "172.17.0.1:46656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:57.787315577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8293800744555374,
-				"StableID":   "nZaa1k5Hm721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1c845a36cb85a922fdebb18c3b5c96480af6f5b841315257832149d8df295c15",
-				"DiscoKey":   "discokey:2c1c538098e86274fc27878c24edef5df89cd587d7278b5207bcd293fbcafd3d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:58.316162445Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1230248254895008,
-				"StableID":   "ndjsV4YBcA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:3184042d25d95600354a7463f473a618a612ea8ffc4909fef9194c8a53abba3b",
-				"KeyExpiry":  "2026-11-03T08:11:58Z",
-				"DiscoKey":   "discokey:054a584b844aa90ce6512cca960375478b50adc0276231745590ef37396cc208",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46436", "10.65.0.27:46436", "172.17.0.1:46436"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:58.847683508Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5586433749781782,
-				"StableID":   "nh2EdD97dk11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:3037cf7747dd18544af62717ecce4a34cd7e5faa340242a77a26fce7aa0a7161",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:a50129f2c51b79e50ba32e79b1160f859ac2d1ccebe3625424cb95b3cbc8b007",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:52493", "10.65.0.27:52493", "172.17.0.1:52493"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:11:59.394648578Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5586433749781782,
-				"StableID":   "nh2EdD97dk11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:3037cf7747dd18544af62717ecce4a34cd7e5faa340242a77a26fce7aa0a7161",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:a50129f2c51b79e50ba32e79b1160f859ac2d1ccebe3625424cb95b3cbc8b007",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:52493", "10.65.0.27:52493", "172.17.0.1:52493"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:11:59.394648578Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"drive:share":                            null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"drive:share",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3037cf7747dd18544af62717ecce4a34cd7e5faa340242a77a26fce7aa0a7161",
-			"MachineKey": "mkey:077fd46b18caadb92cc7e494106ac94c476247554b53e4022ae36ef8ad498344",
-			"Peers": [{
-				"ID":         8468766203007303,
-				"StableID":   "neJ5SQ8X8921CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:01c6de535b6a2f67caf5d98f12217a9a5682b4a0f30b11f904895d3f4e4c2c2c",
-				"DiscoKey":   "discokey:30928bc19c0fe644ababa14f78996cd48407ea7a596be97b595ca66c91d8ca45",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37459", "10.65.0.27:37459", "172.17.0.1:37459"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:11:56.124556683Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         311097956964094,
-				"StableID":   "nHNp9v1uR311CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:05dc6427b0a55c71368fe862b0ea063e2dca7728f4744e60c4ebe66b2b998855",
-				"DiscoKey":   "discokey:065d8bfbbb118f23f858945b68ffa59d81723e2687ee41027b953852f01eba7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44159", "10.65.0.27:44159", "172.17.0.1:44159"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:11:56.669704589Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3538956855003918,
-				"StableID":   "nZNvgwPodU11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:24ec9d8169e345185f6d88599d50f6b24abf9a372db210bd48414be823c3fa28",
-				"DiscoKey":   "discokey:deb168ac31d7bd9ad8654d9fae9b39494ac9f574c9028e53ef682a9c4b245715",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52573", "10.65.0.27:52573", "172.17.0.1:52573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:11:57.212125152Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4204554379279269,
-				"StableID":   "nLvFgoWFqZ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a0248f44daeef543d8aa2eb4686f4d7362b08aa90eeddccd42b3b536c46d01f",
-				"DiscoKey":   "discokey:5ae9d7da6dc54303007669fd3690e0e433d06e6ea70055ce5e25f589fe66ad3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46656", "10.65.0.27:46656", "172.17.0.1:46656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:11:57.787315577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8293800744555374,
-				"StableID":   "nZaa1k5Hm721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1c845a36cb85a922fdebb18c3b5c96480af6f5b841315257832149d8df295c15",
-				"DiscoKey":   "discokey:2c1c538098e86274fc27878c24edef5df89cd587d7278b5207bcd293fbcafd3d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:11:58.316162445Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1230248254895008,
-				"StableID":   "ndjsV4YBcA11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:3184042d25d95600354a7463f473a618a612ea8ffc4909fef9194c8a53abba3b",
-				"KeyExpiry":  "2026-11-03T08:11:58Z",
-				"DiscoKey":   "discokey:054a584b844aa90ce6512cca960375478b50adc0276231745590ef37396cc208",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46436", "10.65.0.27:46436", "172.17.0.1:46436"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:11:58.847683508Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         118352256636166,
-				"StableID":   "nREAexubv111CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:843ea7e2d324b6ebe99b5ea804c721a0c042c75a225f407625d8429bd3cf6d37",
-				"KeyExpiry":  "2026-11-03T08:11:59Z",
-				"DiscoKey":   "discokey:7efee679fcfb846b66be84789392d1a245fcec243a2e87bd504b747adbe2603d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:50675", "10.65.0.27:50675", "172.17.0.1:50675"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:11:59.921443278Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c6-taildrive-access-only.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c6-taildrive-access-only.hujson
deleted file mode 100644
index d6ff14188..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c6-taildrive-access-only.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-attr-c6-taildrive-access-only
-//
-// taildrive accessor only: drive:access on tag:client
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:12:28Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c6-taildrive-access-only",
-	"description":    "taildrive accessor only: drive:access on tag:client",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:12:28.843106766Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                          \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"taildrive accessor only: drive:access on tag:client\",\n    \"id\": \"nodeattrs-attr-c6-taildrive-access-only\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"drive:access\"\n                ],\n                \"target\": [\n                    \"tag:client\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c6-taildrive-access-only.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["drive:access"], "target": ["tag:client"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8899944865282834,
-				"StableID":   "n9pJKgToVC21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       8899944865282834,
-				"Key":        "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-				"DiscoKey":   "discokey:1b9c4416fe3054d9c85fc32fdca81acab08337018c3d26cc20be9c15d7709b24",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:12:34.460125Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-			"MachineKey": "mkey:1e4cb07b57047b2c90e8013395bef7c28254589a74ada8651d8fe5d61fa71502",
-			"Peers": [{
-				"ID":         3947524896837908,
-				"StableID":   "nDoEUYnqpX11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-				"DiscoKey":   "discokey:b4343ab7f5d6ea192c7b27aa683e2f9d92d8460a178118aa2181b2710e048801",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34573", "10.65.0.27:34573", "172.17.0.1:34573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:12:34.990538449Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5763813365734324,
-				"StableID":   "nmhwszbS1n11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-				"DiscoKey":   "discokey:67b592187e759d9dab96fb4bacb1d250560741459215b3602415a391d8b24019",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34265", "10.65.0.27:34265", "172.17.0.1:34265"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:12:35.52120029Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6884580165941638,
-				"StableID":   "nXPN8KF3mv11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-				"DiscoKey":   "discokey:18d1c65ffe2f3702fb3a17368c29f1d46fe484bce6352b8fbce6ebfc30642a15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41658", "10.65.0.27:41658", "172.17.0.1:41658"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:12:36.074435692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3875950357367403,
-				"StableID":   "nzihWKeRGX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-				"DiscoKey":   "discokey:7d761751886edbe0d6bc303321ac4fb4ed6559157ad95c5fae3435e582ad5e13",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48480", "10.65.0.27:48480", "172.17.0.1:48480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:12:36.598890826Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         482966022603365,
-				"StableID":   "nCSXaWhjm411CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:5b7c8e5bbdaf93fb7eb3ade27fb8e492723c2ad01d97e8c33d8282fd1333863d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:43685", "10.65.0.27:43685", "172.17.0.1:43685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:12:37.139907723Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3998166470353831,
-				"StableID":   "nx9du64nDY11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:84aebc016199bcaa781b8cd12d2864efe710ba014b060d720f463ed954a1432e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50114", "10.65.0.27:50114", "172.17.0.1:50114"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:12:37.683636985Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4010318191073126,
-				"StableID":   "nhQdrzFHKY11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-				"KeyExpiry":  "2026-11-03T08:12:38Z",
-				"DiscoKey":   "discokey:979d6a3daa616c89a8a89e3058cb126e89f8a6268e936bbf625f9ca6b3773b32",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42682", "10.65.0.27:42682", "172.17.0.1:42682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:12:38.223488813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8899944865282834": {
-				"ID":          8899944865282834,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3947524896837908,
-				"StableID":   "nDoEUYnqpX11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3947524896837908,
-				"Key":        "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-				"DiscoKey":   "discokey:b4343ab7f5d6ea192c7b27aa683e2f9d92d8460a178118aa2181b2710e048801",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34573", "10.65.0.27:34573", "172.17.0.1:34573"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:12:34.990538449Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-			"MachineKey": "mkey:c0db441580e0951db60237cc117a95b9309d4233a4d0df6561d52ec9f5b23a00",
-			"Peers": [{
-				"ID":         8899944865282834,
-				"StableID":   "n9pJKgToVC21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-				"DiscoKey":   "discokey:1b9c4416fe3054d9c85fc32fdca81acab08337018c3d26cc20be9c15d7709b24",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:12:34.460125Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5763813365734324,
-				"StableID":   "nmhwszbS1n11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-				"DiscoKey":   "discokey:67b592187e759d9dab96fb4bacb1d250560741459215b3602415a391d8b24019",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34265", "10.65.0.27:34265", "172.17.0.1:34265"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:12:35.52120029Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6884580165941638,
-				"StableID":   "nXPN8KF3mv11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-				"DiscoKey":   "discokey:18d1c65ffe2f3702fb3a17368c29f1d46fe484bce6352b8fbce6ebfc30642a15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41658", "10.65.0.27:41658", "172.17.0.1:41658"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:12:36.074435692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3875950357367403,
-				"StableID":   "nzihWKeRGX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-				"DiscoKey":   "discokey:7d761751886edbe0d6bc303321ac4fb4ed6559157ad95c5fae3435e582ad5e13",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48480", "10.65.0.27:48480", "172.17.0.1:48480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:12:36.598890826Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         482966022603365,
-				"StableID":   "nCSXaWhjm411CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:5b7c8e5bbdaf93fb7eb3ade27fb8e492723c2ad01d97e8c33d8282fd1333863d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:43685", "10.65.0.27:43685", "172.17.0.1:43685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:12:37.139907723Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3998166470353831,
-				"StableID":   "nx9du64nDY11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:84aebc016199bcaa781b8cd12d2864efe710ba014b060d720f463ed954a1432e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50114", "10.65.0.27:50114", "172.17.0.1:50114"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:12:37.683636985Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4010318191073126,
-				"StableID":   "nhQdrzFHKY11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-				"KeyExpiry":  "2026-11-03T08:12:38Z",
-				"DiscoKey":   "discokey:979d6a3daa616c89a8a89e3058cb126e89f8a6268e936bbf625f9ca6b3773b32",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42682", "10.65.0.27:42682", "172.17.0.1:42682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:12:38.223488813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3947524896837908": {
-				"ID":          3947524896837908,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         482966022603365,
-				"StableID":   "nCSXaWhjm411CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:5b7c8e5bbdaf93fb7eb3ade27fb8e492723c2ad01d97e8c33d8282fd1333863d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:43685", "10.65.0.27:43685", "172.17.0.1:43685"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:12:37.139907723Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-			"MachineKey": "mkey:41246cd83991b40be6764feb9ab20d7033f26959adf239b321c7afd3db4e476f",
-			"Peers": [{
-				"ID":         8899944865282834,
-				"StableID":   "n9pJKgToVC21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-				"DiscoKey":   "discokey:1b9c4416fe3054d9c85fc32fdca81acab08337018c3d26cc20be9c15d7709b24",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:12:34.460125Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3947524896837908,
-				"StableID":   "nDoEUYnqpX11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-				"DiscoKey":   "discokey:b4343ab7f5d6ea192c7b27aa683e2f9d92d8460a178118aa2181b2710e048801",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34573", "10.65.0.27:34573", "172.17.0.1:34573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:12:34.990538449Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5763813365734324,
-				"StableID":   "nmhwszbS1n11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-				"DiscoKey":   "discokey:67b592187e759d9dab96fb4bacb1d250560741459215b3602415a391d8b24019",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34265", "10.65.0.27:34265", "172.17.0.1:34265"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:12:35.52120029Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6884580165941638,
-				"StableID":   "nXPN8KF3mv11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-				"DiscoKey":   "discokey:18d1c65ffe2f3702fb3a17368c29f1d46fe484bce6352b8fbce6ebfc30642a15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41658", "10.65.0.27:41658", "172.17.0.1:41658"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:12:36.074435692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3875950357367403,
-				"StableID":   "nzihWKeRGX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-				"DiscoKey":   "discokey:7d761751886edbe0d6bc303321ac4fb4ed6559157ad95c5fae3435e582ad5e13",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48480", "10.65.0.27:48480", "172.17.0.1:48480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:12:36.598890826Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3998166470353831,
-				"StableID":   "nx9du64nDY11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:84aebc016199bcaa781b8cd12d2864efe710ba014b060d720f463ed954a1432e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50114", "10.65.0.27:50114", "172.17.0.1:50114"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:12:37.683636985Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4010318191073126,
-				"StableID":   "nhQdrzFHKY11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-				"KeyExpiry":  "2026-11-03T08:12:38Z",
-				"DiscoKey":   "discokey:979d6a3daa616c89a8a89e3058cb126e89f8a6268e936bbf625f9ca6b3773b32",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42682", "10.65.0.27:42682", "172.17.0.1:42682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:12:38.223488813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5763813365734324,
-				"StableID":   "nmhwszbS1n11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5763813365734324,
-				"Key":        "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-				"DiscoKey":   "discokey:67b592187e759d9dab96fb4bacb1d250560741459215b3602415a391d8b24019",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34265", "10.65.0.27:34265", "172.17.0.1:34265"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:12:35.52120029Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-			"MachineKey": "mkey:1267f40531b337771f80bce557660c2fc5fa09b605d5d8e4892865871c2a6f4f",
-			"Peers": [{
-				"ID":         8899944865282834,
-				"StableID":   "n9pJKgToVC21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-				"DiscoKey":   "discokey:1b9c4416fe3054d9c85fc32fdca81acab08337018c3d26cc20be9c15d7709b24",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:12:34.460125Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3947524896837908,
-				"StableID":   "nDoEUYnqpX11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-				"DiscoKey":   "discokey:b4343ab7f5d6ea192c7b27aa683e2f9d92d8460a178118aa2181b2710e048801",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34573", "10.65.0.27:34573", "172.17.0.1:34573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:12:34.990538449Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6884580165941638,
-				"StableID":   "nXPN8KF3mv11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-				"DiscoKey":   "discokey:18d1c65ffe2f3702fb3a17368c29f1d46fe484bce6352b8fbce6ebfc30642a15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41658", "10.65.0.27:41658", "172.17.0.1:41658"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:12:36.074435692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3875950357367403,
-				"StableID":   "nzihWKeRGX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-				"DiscoKey":   "discokey:7d761751886edbe0d6bc303321ac4fb4ed6559157ad95c5fae3435e582ad5e13",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48480", "10.65.0.27:48480", "172.17.0.1:48480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:12:36.598890826Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         482966022603365,
-				"StableID":   "nCSXaWhjm411CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:5b7c8e5bbdaf93fb7eb3ade27fb8e492723c2ad01d97e8c33d8282fd1333863d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:43685", "10.65.0.27:43685", "172.17.0.1:43685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:12:37.139907723Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3998166470353831,
-				"StableID":   "nx9du64nDY11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:84aebc016199bcaa781b8cd12d2864efe710ba014b060d720f463ed954a1432e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50114", "10.65.0.27:50114", "172.17.0.1:50114"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:12:37.683636985Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4010318191073126,
-				"StableID":   "nhQdrzFHKY11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-				"KeyExpiry":  "2026-11-03T08:12:38Z",
-				"DiscoKey":   "discokey:979d6a3daa616c89a8a89e3058cb126e89f8a6268e936bbf625f9ca6b3773b32",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42682", "10.65.0.27:42682", "172.17.0.1:42682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:12:38.223488813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5763813365734324": {
-				"ID":          5763813365734324,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6884580165941638,
-				"StableID":   "nXPN8KF3mv11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       6884580165941638,
-				"Key":        "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-				"DiscoKey":   "discokey:18d1c65ffe2f3702fb3a17368c29f1d46fe484bce6352b8fbce6ebfc30642a15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41658", "10.65.0.27:41658", "172.17.0.1:41658"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:12:36.074435692Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-			"MachineKey": "mkey:eb12d62dcd4c727ee6b705d7ed3627732bc0cee1a1ce357158dae38302bcdf21",
-			"Peers": [{
-				"ID":         8899944865282834,
-				"StableID":   "n9pJKgToVC21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-				"DiscoKey":   "discokey:1b9c4416fe3054d9c85fc32fdca81acab08337018c3d26cc20be9c15d7709b24",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:12:34.460125Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3947524896837908,
-				"StableID":   "nDoEUYnqpX11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-				"DiscoKey":   "discokey:b4343ab7f5d6ea192c7b27aa683e2f9d92d8460a178118aa2181b2710e048801",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34573", "10.65.0.27:34573", "172.17.0.1:34573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:12:34.990538449Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5763813365734324,
-				"StableID":   "nmhwszbS1n11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-				"DiscoKey":   "discokey:67b592187e759d9dab96fb4bacb1d250560741459215b3602415a391d8b24019",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34265", "10.65.0.27:34265", "172.17.0.1:34265"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:12:35.52120029Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3875950357367403,
-				"StableID":   "nzihWKeRGX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-				"DiscoKey":   "discokey:7d761751886edbe0d6bc303321ac4fb4ed6559157ad95c5fae3435e582ad5e13",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48480", "10.65.0.27:48480", "172.17.0.1:48480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:12:36.598890826Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         482966022603365,
-				"StableID":   "nCSXaWhjm411CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:5b7c8e5bbdaf93fb7eb3ade27fb8e492723c2ad01d97e8c33d8282fd1333863d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:43685", "10.65.0.27:43685", "172.17.0.1:43685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:12:37.139907723Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3998166470353831,
-				"StableID":   "nx9du64nDY11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:84aebc016199bcaa781b8cd12d2864efe710ba014b060d720f463ed954a1432e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50114", "10.65.0.27:50114", "172.17.0.1:50114"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:12:37.683636985Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4010318191073126,
-				"StableID":   "nhQdrzFHKY11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-				"KeyExpiry":  "2026-11-03T08:12:38Z",
-				"DiscoKey":   "discokey:979d6a3daa616c89a8a89e3058cb126e89f8a6268e936bbf625f9ca6b3773b32",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42682", "10.65.0.27:42682", "172.17.0.1:42682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:12:38.223488813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6884580165941638": {
-				"ID":          6884580165941638,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3875950357367403,
-				"StableID":   "nzihWKeRGX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       3875950357367403,
-				"Key":        "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-				"DiscoKey":   "discokey:7d761751886edbe0d6bc303321ac4fb4ed6559157ad95c5fae3435e582ad5e13",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48480", "10.65.0.27:48480", "172.17.0.1:48480"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:12:36.598890826Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-			"MachineKey": "mkey:7a70d5622f892eed7b5341b8c3bbf488236b4f4d1e918a67778ff7d867f07041",
-			"Peers": [{
-				"ID":         8899944865282834,
-				"StableID":   "n9pJKgToVC21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-				"DiscoKey":   "discokey:1b9c4416fe3054d9c85fc32fdca81acab08337018c3d26cc20be9c15d7709b24",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:12:34.460125Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3947524896837908,
-				"StableID":   "nDoEUYnqpX11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-				"DiscoKey":   "discokey:b4343ab7f5d6ea192c7b27aa683e2f9d92d8460a178118aa2181b2710e048801",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34573", "10.65.0.27:34573", "172.17.0.1:34573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:12:34.990538449Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5763813365734324,
-				"StableID":   "nmhwszbS1n11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-				"DiscoKey":   "discokey:67b592187e759d9dab96fb4bacb1d250560741459215b3602415a391d8b24019",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34265", "10.65.0.27:34265", "172.17.0.1:34265"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:12:35.52120029Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6884580165941638,
-				"StableID":   "nXPN8KF3mv11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-				"DiscoKey":   "discokey:18d1c65ffe2f3702fb3a17368c29f1d46fe484bce6352b8fbce6ebfc30642a15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41658", "10.65.0.27:41658", "172.17.0.1:41658"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:12:36.074435692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         482966022603365,
-				"StableID":   "nCSXaWhjm411CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:5b7c8e5bbdaf93fb7eb3ade27fb8e492723c2ad01d97e8c33d8282fd1333863d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:43685", "10.65.0.27:43685", "172.17.0.1:43685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:12:37.139907723Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3998166470353831,
-				"StableID":   "nx9du64nDY11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:84aebc016199bcaa781b8cd12d2864efe710ba014b060d720f463ed954a1432e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50114", "10.65.0.27:50114", "172.17.0.1:50114"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:12:37.683636985Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4010318191073126,
-				"StableID":   "nhQdrzFHKY11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-				"KeyExpiry":  "2026-11-03T08:12:38Z",
-				"DiscoKey":   "discokey:979d6a3daa616c89a8a89e3058cb126e89f8a6268e936bbf625f9ca6b3773b32",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42682", "10.65.0.27:42682", "172.17.0.1:42682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:12:38.223488813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3875950357367403": {
-				"ID":          3875950357367403,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4010318191073126,
-				"StableID":   "nhQdrzFHKY11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-				"KeyExpiry":  "2026-11-03T08:12:38Z",
-				"DiscoKey":   "discokey:979d6a3daa616c89a8a89e3058cb126e89f8a6268e936bbf625f9ca6b3773b32",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42682", "10.65.0.27:42682", "172.17.0.1:42682"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:12:38.223488813Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-			"MachineKey": "mkey:0c4cfc251b35765817400551bc72eadde695110da4c9ed5ac8fdefb15aa55f56",
-			"Peers": [{
-				"ID":         8899944865282834,
-				"StableID":   "n9pJKgToVC21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-				"DiscoKey":   "discokey:1b9c4416fe3054d9c85fc32fdca81acab08337018c3d26cc20be9c15d7709b24",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:12:34.460125Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3947524896837908,
-				"StableID":   "nDoEUYnqpX11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-				"DiscoKey":   "discokey:b4343ab7f5d6ea192c7b27aa683e2f9d92d8460a178118aa2181b2710e048801",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34573", "10.65.0.27:34573", "172.17.0.1:34573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:12:34.990538449Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5763813365734324,
-				"StableID":   "nmhwszbS1n11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-				"DiscoKey":   "discokey:67b592187e759d9dab96fb4bacb1d250560741459215b3602415a391d8b24019",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34265", "10.65.0.27:34265", "172.17.0.1:34265"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:12:35.52120029Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6884580165941638,
-				"StableID":   "nXPN8KF3mv11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-				"DiscoKey":   "discokey:18d1c65ffe2f3702fb3a17368c29f1d46fe484bce6352b8fbce6ebfc30642a15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41658", "10.65.0.27:41658", "172.17.0.1:41658"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:12:36.074435692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3875950357367403,
-				"StableID":   "nzihWKeRGX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-				"DiscoKey":   "discokey:7d761751886edbe0d6bc303321ac4fb4ed6559157ad95c5fae3435e582ad5e13",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48480", "10.65.0.27:48480", "172.17.0.1:48480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:12:36.598890826Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         482966022603365,
-				"StableID":   "nCSXaWhjm411CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:5b7c8e5bbdaf93fb7eb3ade27fb8e492723c2ad01d97e8c33d8282fd1333863d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:43685", "10.65.0.27:43685", "172.17.0.1:43685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:12:37.139907723Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3998166470353831,
-				"StableID":   "nx9du64nDY11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:84aebc016199bcaa781b8cd12d2864efe710ba014b060d720f463ed954a1432e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50114", "10.65.0.27:50114", "172.17.0.1:50114"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:12:37.683636985Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3998166470353831,
-				"StableID":   "nx9du64nDY11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:84aebc016199bcaa781b8cd12d2864efe710ba014b060d720f463ed954a1432e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50114", "10.65.0.27:50114", "172.17.0.1:50114"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:12:37.683636985Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c6506fb04b7fe93096e2bb344bb779208a2c737d9995fbf2bea04939b74bd76d",
-			"MachineKey": "mkey:1f76e18ab41117ac8b2211977eb71a74177955c968a0f0bcb29a6addaa1d0f36",
-			"Peers": [{
-				"ID":         8899944865282834,
-				"StableID":   "n9pJKgToVC21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:86e9f2f83ccf71992b3cc9676c695a0604cefa481e2ea1f59f6178a92bd4ee44",
-				"DiscoKey":   "discokey:1b9c4416fe3054d9c85fc32fdca81acab08337018c3d26cc20be9c15d7709b24",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:12:34.460125Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3947524896837908,
-				"StableID":   "nDoEUYnqpX11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f0974957e5c29ad63627839d20e1dfec55b3db66585f2da14513ad709260f232",
-				"DiscoKey":   "discokey:b4343ab7f5d6ea192c7b27aa683e2f9d92d8460a178118aa2181b2710e048801",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34573", "10.65.0.27:34573", "172.17.0.1:34573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:12:34.990538449Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5763813365734324,
-				"StableID":   "nmhwszbS1n11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28d7054b735815615069b0d1372435079de15be8e157c9ae2a33f24af048025f",
-				"DiscoKey":   "discokey:67b592187e759d9dab96fb4bacb1d250560741459215b3602415a391d8b24019",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34265", "10.65.0.27:34265", "172.17.0.1:34265"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:12:35.52120029Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6884580165941638,
-				"StableID":   "nXPN8KF3mv11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a7719ee8f39692c15bd32adc1f58bf0e6f136036d3f1326be7debdc9ff96f834",
-				"DiscoKey":   "discokey:18d1c65ffe2f3702fb3a17368c29f1d46fe484bce6352b8fbce6ebfc30642a15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41658", "10.65.0.27:41658", "172.17.0.1:41658"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:12:36.074435692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3875950357367403,
-				"StableID":   "nzihWKeRGX11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6d7782efa8708cefa8453a1852a177769f16aed1a2faeb3c038842661e984e5a",
-				"DiscoKey":   "discokey:7d761751886edbe0d6bc303321ac4fb4ed6559157ad95c5fae3435e582ad5e13",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48480", "10.65.0.27:48480", "172.17.0.1:48480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:12:36.598890826Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         482966022603365,
-				"StableID":   "nCSXaWhjm411CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:17189354d34e0539327bc274cb9613f24aa2de06bfdb7e8b355c0b4846fd2469",
-				"KeyExpiry":  "2026-11-03T08:12:37Z",
-				"DiscoKey":   "discokey:5b7c8e5bbdaf93fb7eb3ade27fb8e492723c2ad01d97e8c33d8282fd1333863d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:43685", "10.65.0.27:43685", "172.17.0.1:43685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:12:37.139907723Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4010318191073126,
-				"StableID":   "nhQdrzFHKY11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c41f50ac4db23289e3a9b4e9757f72b0f25c50254d975f0182b10632a5112c4e",
-				"KeyExpiry":  "2026-11-03T08:12:38Z",
-				"DiscoKey":   "discokey:979d6a3daa616c89a8a89e3058cb126e89f8a6268e936bbf625f9ca6b3773b32",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42682", "10.65.0.27:42682", "172.17.0.1:42682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:12:38.223488813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c7-file-sharing.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c7-file-sharing.hujson
deleted file mode 100644
index aef463a91..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c7-file-sharing.hujson
+++ /dev/null
@@ -1,8821 +0,0 @@
-// nodeattrs-attr-c7-file-sharing
-//
-// single attr https://tailscale.com/cap/file-sharing via wildcard
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:13:09Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c7-file-sharing",
-	"description":    "single attr https://tailscale.com/cap/file-sharing via wildcard",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:13:09.257980085Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                 \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"single attr https://tailscale.com/cap/file-sharing via wildcard\",\n    \"id\": \"nodeattrs-attr-c7-file-sharing\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"https://tailscale.com/cap/file-sharing\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c7-file-sharing.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["https://tailscale.com/cap/file-sharing"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2433893495435010,
-				"StableID":   "n3qTinFK1L11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       2433893495435010,
-				"Key":        "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-				"DiscoKey":   "discokey:07f50ac332d7edf0879dec0ccd5e8aaad45b4a7107fa17782b60d09524d5ab7c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47891", "10.65.0.27:47891", "172.17.0.1:47891"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:14.69972411Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-			"MachineKey": "mkey:c73c77bc8ad94923e3749176c6be9003ef392f0df34e7fb483c7153e2ead2350",
-			"Peers": [{
-				"ID":         7865335796963565,
-				"StableID":   "nA9Soy2ER421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-				"DiscoKey":   "discokey:a1f536aa184f07eaaf9a9bd01dba9d192290fad9dc8d1d437b0dfb4ad418aa70",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:39936", "10.65.0.27:39936", "172.17.0.1:39936"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:15.21394732Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4968832837315811,
-				"StableID":   "npZAs9pPof11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-				"DiscoKey":   "discokey:81538edd2d3b846d169960d0bf21d2e1196a3c670ebda063a94cd7eeb19dc17b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58285", "10.65.0.27:58285", "172.17.0.1:58285"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:15.75164236Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6993057014040780,
-				"StableID":   "nVdTjUkAcw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-				"DiscoKey":   "discokey:8ff31e796bac3ed2ad43b55bca9d4d332072dfa63434e4b98a05e332aa728530",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45683", "10.65.0.27:45683", "172.17.0.1:45683"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:16.310652053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2516621410646646,
-				"StableID":   "nux2JsNneL11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-				"DiscoKey":   "discokey:285dd7289b7aec37526c45b8db1e7240af4736cb3d560a5b9947d0e85e07235b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:47573", "10.65.0.27:47573", "172.17.0.1:47573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:16.828786442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8127211931957134,
-				"StableID":   "nMCe6R5qT621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:a200efd18f17ced61b7ca849cb5e78e12bba7fc724ba7b4f6922779e2b663027",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59318", "10.65.0.27:59318", "172.17.0.1:59318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:17.383383475Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4199870566478808,
-				"StableID":   "nwvMBjU8oZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:8d1fbb7b70d3ad81ad8eda29932a9da00a5d7dbf30743a3e575a3774b2e05072",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:37069", "10.65.0.27:37069", "172.17.0.1:37069"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:17.915476073Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1134762223146391,
-				"StableID":   "n6GErCHwr911CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-				"KeyExpiry":  "2026-11-03T08:13:18Z",
-				"DiscoKey":   "discokey:3ef6ec0bcc11c94db1f46b3469e21e8bc3df31e7a30c17e037824631b936c261",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35123", "10.65.0.27:35123", "172.17.0.1:35123"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:18.465137155Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2433893495435010": {
-				"ID":          2433893495435010,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7865335796963565,
-				"StableID":   "nA9Soy2ER421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       7865335796963565,
-				"Key":        "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-				"DiscoKey":   "discokey:a1f536aa184f07eaaf9a9bd01dba9d192290fad9dc8d1d437b0dfb4ad418aa70",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:39936", "10.65.0.27:39936", "172.17.0.1:39936"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:13:15.21394732Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-			"MachineKey": "mkey:42e28e09aeae753a4699245053f0a9c35217ea059c35831ecaf0444c5547d24b",
-			"Peers": [{
-				"ID":         2433893495435010,
-				"StableID":   "n3qTinFK1L11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-				"DiscoKey":   "discokey:07f50ac332d7edf0879dec0ccd5e8aaad45b4a7107fa17782b60d09524d5ab7c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47891", "10.65.0.27:47891", "172.17.0.1:47891"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:14.69972411Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4968832837315811,
-				"StableID":   "npZAs9pPof11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-				"DiscoKey":   "discokey:81538edd2d3b846d169960d0bf21d2e1196a3c670ebda063a94cd7eeb19dc17b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58285", "10.65.0.27:58285", "172.17.0.1:58285"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:15.75164236Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6993057014040780,
-				"StableID":   "nVdTjUkAcw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-				"DiscoKey":   "discokey:8ff31e796bac3ed2ad43b55bca9d4d332072dfa63434e4b98a05e332aa728530",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45683", "10.65.0.27:45683", "172.17.0.1:45683"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:16.310652053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2516621410646646,
-				"StableID":   "nux2JsNneL11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-				"DiscoKey":   "discokey:285dd7289b7aec37526c45b8db1e7240af4736cb3d560a5b9947d0e85e07235b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:47573", "10.65.0.27:47573", "172.17.0.1:47573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:16.828786442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8127211931957134,
-				"StableID":   "nMCe6R5qT621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:a200efd18f17ced61b7ca849cb5e78e12bba7fc724ba7b4f6922779e2b663027",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59318", "10.65.0.27:59318", "172.17.0.1:59318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:17.383383475Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4199870566478808,
-				"StableID":   "nwvMBjU8oZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:8d1fbb7b70d3ad81ad8eda29932a9da00a5d7dbf30743a3e575a3774b2e05072",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:37069", "10.65.0.27:37069", "172.17.0.1:37069"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:17.915476073Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1134762223146391,
-				"StableID":   "n6GErCHwr911CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-				"KeyExpiry":  "2026-11-03T08:13:18Z",
-				"DiscoKey":   "discokey:3ef6ec0bcc11c94db1f46b3469e21e8bc3df31e7a30c17e037824631b936c261",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35123", "10.65.0.27:35123", "172.17.0.1:35123"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:18.465137155Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7865335796963565": {
-				"ID":          7865335796963565,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8127211931957134,
-				"StableID":   "nMCe6R5qT621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:a200efd18f17ced61b7ca849cb5e78e12bba7fc724ba7b4f6922779e2b663027",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59318", "10.65.0.27:59318", "172.17.0.1:59318"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:17.383383475Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-			"MachineKey": "mkey:c74acacfa24f4686eef4c4d8f86bcab020fc1bb9194395340ecf626712770a14",
-			"Peers": [{
-				"ID":         2433893495435010,
-				"StableID":   "n3qTinFK1L11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-				"DiscoKey":   "discokey:07f50ac332d7edf0879dec0ccd5e8aaad45b4a7107fa17782b60d09524d5ab7c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47891", "10.65.0.27:47891", "172.17.0.1:47891"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:14.69972411Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7865335796963565,
-				"StableID":   "nA9Soy2ER421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-				"DiscoKey":   "discokey:a1f536aa184f07eaaf9a9bd01dba9d192290fad9dc8d1d437b0dfb4ad418aa70",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:39936", "10.65.0.27:39936", "172.17.0.1:39936"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:15.21394732Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4968832837315811,
-				"StableID":   "npZAs9pPof11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-				"DiscoKey":   "discokey:81538edd2d3b846d169960d0bf21d2e1196a3c670ebda063a94cd7eeb19dc17b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58285", "10.65.0.27:58285", "172.17.0.1:58285"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:15.75164236Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6993057014040780,
-				"StableID":   "nVdTjUkAcw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-				"DiscoKey":   "discokey:8ff31e796bac3ed2ad43b55bca9d4d332072dfa63434e4b98a05e332aa728530",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45683", "10.65.0.27:45683", "172.17.0.1:45683"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:16.310652053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2516621410646646,
-				"StableID":   "nux2JsNneL11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-				"DiscoKey":   "discokey:285dd7289b7aec37526c45b8db1e7240af4736cb3d560a5b9947d0e85e07235b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:47573", "10.65.0.27:47573", "172.17.0.1:47573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:16.828786442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4199870566478808,
-				"StableID":   "nwvMBjU8oZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:8d1fbb7b70d3ad81ad8eda29932a9da00a5d7dbf30743a3e575a3774b2e05072",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:37069", "10.65.0.27:37069", "172.17.0.1:37069"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:17.915476073Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1134762223146391,
-				"StableID":   "n6GErCHwr911CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-				"KeyExpiry":  "2026-11-03T08:13:18Z",
-				"DiscoKey":   "discokey:3ef6ec0bcc11c94db1f46b3469e21e8bc3df31e7a30c17e037824631b936c261",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35123", "10.65.0.27:35123", "172.17.0.1:35123"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:18.465137155Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4968832837315811,
-				"StableID":   "npZAs9pPof11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       4968832837315811,
-				"Key":        "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-				"DiscoKey":   "discokey:81538edd2d3b846d169960d0bf21d2e1196a3c670ebda063a94cd7eeb19dc17b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58285", "10.65.0.27:58285", "172.17.0.1:58285"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:15.75164236Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-			"MachineKey": "mkey:5b183ab210368acf871eba66259281543a4df055309ba8810a7f9f701b1fe209",
-			"Peers": [{
-				"ID":         2433893495435010,
-				"StableID":   "n3qTinFK1L11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-				"DiscoKey":   "discokey:07f50ac332d7edf0879dec0ccd5e8aaad45b4a7107fa17782b60d09524d5ab7c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47891", "10.65.0.27:47891", "172.17.0.1:47891"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:14.69972411Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7865335796963565,
-				"StableID":   "nA9Soy2ER421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-				"DiscoKey":   "discokey:a1f536aa184f07eaaf9a9bd01dba9d192290fad9dc8d1d437b0dfb4ad418aa70",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:39936", "10.65.0.27:39936", "172.17.0.1:39936"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:15.21394732Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6993057014040780,
-				"StableID":   "nVdTjUkAcw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-				"DiscoKey":   "discokey:8ff31e796bac3ed2ad43b55bca9d4d332072dfa63434e4b98a05e332aa728530",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45683", "10.65.0.27:45683", "172.17.0.1:45683"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:16.310652053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2516621410646646,
-				"StableID":   "nux2JsNneL11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-				"DiscoKey":   "discokey:285dd7289b7aec37526c45b8db1e7240af4736cb3d560a5b9947d0e85e07235b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:47573", "10.65.0.27:47573", "172.17.0.1:47573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:16.828786442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8127211931957134,
-				"StableID":   "nMCe6R5qT621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:a200efd18f17ced61b7ca849cb5e78e12bba7fc724ba7b4f6922779e2b663027",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59318", "10.65.0.27:59318", "172.17.0.1:59318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:17.383383475Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4199870566478808,
-				"StableID":   "nwvMBjU8oZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:8d1fbb7b70d3ad81ad8eda29932a9da00a5d7dbf30743a3e575a3774b2e05072",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:37069", "10.65.0.27:37069", "172.17.0.1:37069"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:17.915476073Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1134762223146391,
-				"StableID":   "n6GErCHwr911CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-				"KeyExpiry":  "2026-11-03T08:13:18Z",
-				"DiscoKey":   "discokey:3ef6ec0bcc11c94db1f46b3469e21e8bc3df31e7a30c17e037824631b936c261",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35123", "10.65.0.27:35123", "172.17.0.1:35123"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:18.465137155Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4968832837315811": {
-				"ID":          4968832837315811,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6993057014040780,
-				"StableID":   "nVdTjUkAcw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       6993057014040780,
-				"Key":        "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-				"DiscoKey":   "discokey:8ff31e796bac3ed2ad43b55bca9d4d332072dfa63434e4b98a05e332aa728530",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45683", "10.65.0.27:45683", "172.17.0.1:45683"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:13:16.310652053Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-			"MachineKey": "mkey:1bfa87dc2b9a9d413c406f8f1bbad47add4797a4129634e17b2f7d7e9f3e4703",
-			"Peers": [{
-				"ID":         2433893495435010,
-				"StableID":   "n3qTinFK1L11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-				"DiscoKey":   "discokey:07f50ac332d7edf0879dec0ccd5e8aaad45b4a7107fa17782b60d09524d5ab7c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47891", "10.65.0.27:47891", "172.17.0.1:47891"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:14.69972411Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7865335796963565,
-				"StableID":   "nA9Soy2ER421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-				"DiscoKey":   "discokey:a1f536aa184f07eaaf9a9bd01dba9d192290fad9dc8d1d437b0dfb4ad418aa70",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:39936", "10.65.0.27:39936", "172.17.0.1:39936"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:15.21394732Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4968832837315811,
-				"StableID":   "npZAs9pPof11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-				"DiscoKey":   "discokey:81538edd2d3b846d169960d0bf21d2e1196a3c670ebda063a94cd7eeb19dc17b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58285", "10.65.0.27:58285", "172.17.0.1:58285"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:15.75164236Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2516621410646646,
-				"StableID":   "nux2JsNneL11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-				"DiscoKey":   "discokey:285dd7289b7aec37526c45b8db1e7240af4736cb3d560a5b9947d0e85e07235b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:47573", "10.65.0.27:47573", "172.17.0.1:47573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:16.828786442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8127211931957134,
-				"StableID":   "nMCe6R5qT621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:a200efd18f17ced61b7ca849cb5e78e12bba7fc724ba7b4f6922779e2b663027",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59318", "10.65.0.27:59318", "172.17.0.1:59318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:17.383383475Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4199870566478808,
-				"StableID":   "nwvMBjU8oZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:8d1fbb7b70d3ad81ad8eda29932a9da00a5d7dbf30743a3e575a3774b2e05072",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:37069", "10.65.0.27:37069", "172.17.0.1:37069"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:17.915476073Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1134762223146391,
-				"StableID":   "n6GErCHwr911CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-				"KeyExpiry":  "2026-11-03T08:13:18Z",
-				"DiscoKey":   "discokey:3ef6ec0bcc11c94db1f46b3469e21e8bc3df31e7a30c17e037824631b936c261",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35123", "10.65.0.27:35123", "172.17.0.1:35123"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:18.465137155Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6993057014040780": {
-				"ID":          6993057014040780,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2516621410646646,
-				"StableID":   "nux2JsNneL11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       2516621410646646,
-				"Key":        "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-				"DiscoKey":   "discokey:285dd7289b7aec37526c45b8db1e7240af4736cb3d560a5b9947d0e85e07235b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:47573", "10.65.0.27:47573", "172.17.0.1:47573"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:16.828786442Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-			"MachineKey": "mkey:60b5a9b08090086132a63ff2218bd4c6b0fa38cd2a293eabd5d8213e31fd7b72",
-			"Peers": [{
-				"ID":         2433893495435010,
-				"StableID":   "n3qTinFK1L11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-				"DiscoKey":   "discokey:07f50ac332d7edf0879dec0ccd5e8aaad45b4a7107fa17782b60d09524d5ab7c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47891", "10.65.0.27:47891", "172.17.0.1:47891"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:14.69972411Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7865335796963565,
-				"StableID":   "nA9Soy2ER421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-				"DiscoKey":   "discokey:a1f536aa184f07eaaf9a9bd01dba9d192290fad9dc8d1d437b0dfb4ad418aa70",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:39936", "10.65.0.27:39936", "172.17.0.1:39936"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:15.21394732Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4968832837315811,
-				"StableID":   "npZAs9pPof11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-				"DiscoKey":   "discokey:81538edd2d3b846d169960d0bf21d2e1196a3c670ebda063a94cd7eeb19dc17b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58285", "10.65.0.27:58285", "172.17.0.1:58285"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:15.75164236Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6993057014040780,
-				"StableID":   "nVdTjUkAcw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-				"DiscoKey":   "discokey:8ff31e796bac3ed2ad43b55bca9d4d332072dfa63434e4b98a05e332aa728530",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45683", "10.65.0.27:45683", "172.17.0.1:45683"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:16.310652053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8127211931957134,
-				"StableID":   "nMCe6R5qT621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:a200efd18f17ced61b7ca849cb5e78e12bba7fc724ba7b4f6922779e2b663027",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59318", "10.65.0.27:59318", "172.17.0.1:59318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:17.383383475Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4199870566478808,
-				"StableID":   "nwvMBjU8oZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:8d1fbb7b70d3ad81ad8eda29932a9da00a5d7dbf30743a3e575a3774b2e05072",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:37069", "10.65.0.27:37069", "172.17.0.1:37069"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:17.915476073Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1134762223146391,
-				"StableID":   "n6GErCHwr911CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-				"KeyExpiry":  "2026-11-03T08:13:18Z",
-				"DiscoKey":   "discokey:3ef6ec0bcc11c94db1f46b3469e21e8bc3df31e7a30c17e037824631b936c261",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35123", "10.65.0.27:35123", "172.17.0.1:35123"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:18.465137155Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2516621410646646": {
-				"ID":          2516621410646646,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1134762223146391,
-				"StableID":   "n6GErCHwr911CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-				"KeyExpiry":  "2026-11-03T08:13:18Z",
-				"DiscoKey":   "discokey:3ef6ec0bcc11c94db1f46b3469e21e8bc3df31e7a30c17e037824631b936c261",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35123", "10.65.0.27:35123", "172.17.0.1:35123"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:18.465137155Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-			"MachineKey": "mkey:b5aef7cf1cb8e648d5d17169361be5d96c4cd7bba4d159d1538fb4aabb11cc74",
-			"Peers": [{
-				"ID":         2433893495435010,
-				"StableID":   "n3qTinFK1L11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-				"DiscoKey":   "discokey:07f50ac332d7edf0879dec0ccd5e8aaad45b4a7107fa17782b60d09524d5ab7c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47891", "10.65.0.27:47891", "172.17.0.1:47891"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:14.69972411Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7865335796963565,
-				"StableID":   "nA9Soy2ER421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-				"DiscoKey":   "discokey:a1f536aa184f07eaaf9a9bd01dba9d192290fad9dc8d1d437b0dfb4ad418aa70",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:39936", "10.65.0.27:39936", "172.17.0.1:39936"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:15.21394732Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4968832837315811,
-				"StableID":   "npZAs9pPof11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-				"DiscoKey":   "discokey:81538edd2d3b846d169960d0bf21d2e1196a3c670ebda063a94cd7eeb19dc17b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58285", "10.65.0.27:58285", "172.17.0.1:58285"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:15.75164236Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6993057014040780,
-				"StableID":   "nVdTjUkAcw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-				"DiscoKey":   "discokey:8ff31e796bac3ed2ad43b55bca9d4d332072dfa63434e4b98a05e332aa728530",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45683", "10.65.0.27:45683", "172.17.0.1:45683"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:16.310652053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2516621410646646,
-				"StableID":   "nux2JsNneL11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-				"DiscoKey":   "discokey:285dd7289b7aec37526c45b8db1e7240af4736cb3d560a5b9947d0e85e07235b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:47573", "10.65.0.27:47573", "172.17.0.1:47573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:16.828786442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8127211931957134,
-				"StableID":   "nMCe6R5qT621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:a200efd18f17ced61b7ca849cb5e78e12bba7fc724ba7b4f6922779e2b663027",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59318", "10.65.0.27:59318", "172.17.0.1:59318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:17.383383475Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4199870566478808,
-				"StableID":   "nwvMBjU8oZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:8d1fbb7b70d3ad81ad8eda29932a9da00a5d7dbf30743a3e575a3774b2e05072",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:37069", "10.65.0.27:37069", "172.17.0.1:37069"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:17.915476073Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4199870566478808,
-				"StableID":   "nwvMBjU8oZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:8d1fbb7b70d3ad81ad8eda29932a9da00a5d7dbf30743a3e575a3774b2e05072",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:37069", "10.65.0.27:37069", "172.17.0.1:37069"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:17.915476073Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e365839da2d61140f67031e8cdecaec3c128e05b71b99f25ae3d6b349eeb956f",
-			"MachineKey": "mkey:1ba2ee2d614547af4834fe44481b94f0dfe49a46a25f7f5fb88f953b8faacc53",
-			"Peers": [{
-				"ID":         2433893495435010,
-				"StableID":   "n3qTinFK1L11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bcecb951cef19c6df47fbf279aeb761a64a237f0fe6362063711afc20677e76a",
-				"DiscoKey":   "discokey:07f50ac332d7edf0879dec0ccd5e8aaad45b4a7107fa17782b60d09524d5ab7c",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47891", "10.65.0.27:47891", "172.17.0.1:47891"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:14.69972411Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7865335796963565,
-				"StableID":   "nA9Soy2ER421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:046abb57a497a9b66530caa0c6448f06211f398e453f3e054410be3be57b1a59",
-				"DiscoKey":   "discokey:a1f536aa184f07eaaf9a9bd01dba9d192290fad9dc8d1d437b0dfb4ad418aa70",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:39936", "10.65.0.27:39936", "172.17.0.1:39936"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:15.21394732Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4968832837315811,
-				"StableID":   "npZAs9pPof11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:315260f16f3e398e6f05ebed4ae88266eabb27e82e6b948f366f33282c3d1b2f",
-				"DiscoKey":   "discokey:81538edd2d3b846d169960d0bf21d2e1196a3c670ebda063a94cd7eeb19dc17b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58285", "10.65.0.27:58285", "172.17.0.1:58285"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:15.75164236Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6993057014040780,
-				"StableID":   "nVdTjUkAcw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8942f2c2483994c81a033734dda9010206364c82d57fb71d7b50a5cdec6fb238",
-				"DiscoKey":   "discokey:8ff31e796bac3ed2ad43b55bca9d4d332072dfa63434e4b98a05e332aa728530",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45683", "10.65.0.27:45683", "172.17.0.1:45683"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:16.310652053Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2516621410646646,
-				"StableID":   "nux2JsNneL11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c319dc6b2b7394c0fa07586af6890c0d0745d6c021fddc5fd953595a62f6f3f",
-				"DiscoKey":   "discokey:285dd7289b7aec37526c45b8db1e7240af4736cb3d560a5b9947d0e85e07235b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:47573", "10.65.0.27:47573", "172.17.0.1:47573"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:16.828786442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8127211931957134,
-				"StableID":   "nMCe6R5qT621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:f26268777e68260878afaa3ee44a64a965efb24dc19e1254d45154368c74df23",
-				"KeyExpiry":  "2026-11-03T08:13:17Z",
-				"DiscoKey":   "discokey:a200efd18f17ced61b7ca849cb5e78e12bba7fc724ba7b4f6922779e2b663027",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59318", "10.65.0.27:59318", "172.17.0.1:59318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:17.383383475Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1134762223146391,
-				"StableID":   "n6GErCHwr911CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ac6235b1cae9061aea98c3e1353a5862511242e1e8e6160b3f0e5ec6522abe59",
-				"KeyExpiry":  "2026-11-03T08:13:18Z",
-				"DiscoKey":   "discokey:3ef6ec0bcc11c94db1f46b3469e21e8bc3df31e7a30c17e037824631b936c261",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35123", "10.65.0.27:35123", "172.17.0.1:35123"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:18.465137155Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c8-admin.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c8-admin.hujson
deleted file mode 100644
index 12d6a3322..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c8-admin.hujson
+++ /dev/null
@@ -1,8831 +0,0 @@
-// nodeattrs-attr-c8-admin
-//
-// single attr https://tailscale.com/cap/is-admin via wildcard
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:13:49Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c8-admin",
-	"description":    "single attr https://tailscale.com/cap/is-admin via wildcard",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:13:49.507874557Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                          \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"single attr https://tailscale.com/cap/is-admin via wildcard\",\n    \"id\": \"nodeattrs-attr-c8-admin\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"https://tailscale.com/cap/is-admin\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c8-admin.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["https://tailscale.com/cap/is-admin"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1717589738234841,
-				"StableID":   "nnMNZrAuQE11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1717589738234841,
-				"Key":        "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-				"DiscoKey":   "discokey:1475a4e4697719cf42ea284c0a893b5c86c646fe328dedd07eae9e754a99df52",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35443", "10.65.0.27:35443", "172.17.0.1:35443"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:55.066895114Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-			"MachineKey": "mkey:a45717283b3a30d8f155675086803b4eee84179c1b5307f120091cb26ad0bf5a",
-			"Peers": [{
-				"ID":         3241148570645706,
-				"StableID":   "nbVyPfUvJS11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-				"DiscoKey":   "discokey:52c674208a7e9280a5c854400cb8cf75af538f901d3fb5a3ca8aec97ef62c179",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44849", "10.65.0.27:44849", "172.17.0.1:44849"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:55.604719062Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7147981618253020,
-				"StableID":   "nmmXVfMLpx11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-				"DiscoKey":   "discokey:81150595deaf916319a72161ee945a8e09a92d18ef2c7a035944c4ef9ebbb113",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44611", "10.65.0.27:44611", "172.17.0.1:44611"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:56.146224844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2134812223061768,
-				"StableID":   "nRKCq2urfH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-				"DiscoKey":   "discokey:d48a264af06b4436412d54d6967ad2e4f753dde619f08684883658b0880a5242",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:53243", "10.65.0.27:53243", "172.17.0.1:53243"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:56.693151314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4746083736955843,
-				"StableID":   "nYfodAaW4e11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-				"DiscoKey":   "discokey:c269288ddd3f6f789355fddfd540c0304b05b50786561882293568bf18806056",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37244", "10.65.0.27:37244", "172.17.0.1:37244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:57.232730778Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         144934815911988,
-				"StableID":   "nbUpN8Ce8211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-				"KeyExpiry":  "2026-11-03T08:13:57Z",
-				"DiscoKey":   "discokey:e4879b56a027444cf44aa36445fe7ce7a35a45fceeeb605d5ddfd016a3ef523a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45407", "10.65.0.27:45407", "172.17.0.1:45407"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:57.764540174Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1740436279900976,
-				"StableID":   "nD9EDyJFbE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:d811df4ad18aa6408aa2a23b87e96c403d5877f1e064c25b641c223c3111f274",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38759", "10.65.0.27:38759", "172.17.0.1:38759"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:58.305866179Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         871457961259742,
-				"StableID":   "n16Qsvigo711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:8fbaa53830c35d6be24653f75e1fe7f0ffe71167dd27a81fa3ea2198370a216c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:37963", "10.65.0.27:37963", "172.17.0.1:37963"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:58.840688391Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1717589738234841": {
-				"ID":          1717589738234841,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3241148570645706,
-				"StableID":   "nbVyPfUvJS11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3241148570645706,
-				"Key":        "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-				"DiscoKey":   "discokey:52c674208a7e9280a5c854400cb8cf75af538f901d3fb5a3ca8aec97ef62c179",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44849", "10.65.0.27:44849", "172.17.0.1:44849"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:13:55.604719062Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-			"MachineKey": "mkey:fa7672c749b3fbdf1c7d34f9473f41cd05cab29e56f7d45120e00ba83044e517",
-			"Peers": [{
-				"ID":         1717589738234841,
-				"StableID":   "nnMNZrAuQE11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-				"DiscoKey":   "discokey:1475a4e4697719cf42ea284c0a893b5c86c646fe328dedd07eae9e754a99df52",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35443", "10.65.0.27:35443", "172.17.0.1:35443"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:55.066895114Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7147981618253020,
-				"StableID":   "nmmXVfMLpx11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-				"DiscoKey":   "discokey:81150595deaf916319a72161ee945a8e09a92d18ef2c7a035944c4ef9ebbb113",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44611", "10.65.0.27:44611", "172.17.0.1:44611"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:56.146224844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2134812223061768,
-				"StableID":   "nRKCq2urfH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-				"DiscoKey":   "discokey:d48a264af06b4436412d54d6967ad2e4f753dde619f08684883658b0880a5242",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:53243", "10.65.0.27:53243", "172.17.0.1:53243"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:56.693151314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4746083736955843,
-				"StableID":   "nYfodAaW4e11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-				"DiscoKey":   "discokey:c269288ddd3f6f789355fddfd540c0304b05b50786561882293568bf18806056",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37244", "10.65.0.27:37244", "172.17.0.1:37244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:57.232730778Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         144934815911988,
-				"StableID":   "nbUpN8Ce8211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-				"KeyExpiry":  "2026-11-03T08:13:57Z",
-				"DiscoKey":   "discokey:e4879b56a027444cf44aa36445fe7ce7a35a45fceeeb605d5ddfd016a3ef523a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45407", "10.65.0.27:45407", "172.17.0.1:45407"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:57.764540174Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1740436279900976,
-				"StableID":   "nD9EDyJFbE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:d811df4ad18aa6408aa2a23b87e96c403d5877f1e064c25b641c223c3111f274",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38759", "10.65.0.27:38759", "172.17.0.1:38759"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:58.305866179Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         871457961259742,
-				"StableID":   "n16Qsvigo711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:8fbaa53830c35d6be24653f75e1fe7f0ffe71167dd27a81fa3ea2198370a216c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:37963", "10.65.0.27:37963", "172.17.0.1:37963"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:58.840688391Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3241148570645706": {
-				"ID":          3241148570645706,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         144934815911988,
-				"StableID":   "nbUpN8Ce8211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-				"KeyExpiry":  "2026-11-03T08:13:57Z",
-				"DiscoKey":   "discokey:e4879b56a027444cf44aa36445fe7ce7a35a45fceeeb605d5ddfd016a3ef523a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45407", "10.65.0.27:45407", "172.17.0.1:45407"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:57.764540174Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-			"MachineKey": "mkey:6ccea6fb380f29acc5446cb15e076cc75b6d059f50f022b73cfd19af6810697d",
-			"Peers": [{
-				"ID":         1717589738234841,
-				"StableID":   "nnMNZrAuQE11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-				"DiscoKey":   "discokey:1475a4e4697719cf42ea284c0a893b5c86c646fe328dedd07eae9e754a99df52",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35443", "10.65.0.27:35443", "172.17.0.1:35443"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:55.066895114Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3241148570645706,
-				"StableID":   "nbVyPfUvJS11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-				"DiscoKey":   "discokey:52c674208a7e9280a5c854400cb8cf75af538f901d3fb5a3ca8aec97ef62c179",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44849", "10.65.0.27:44849", "172.17.0.1:44849"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:55.604719062Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7147981618253020,
-				"StableID":   "nmmXVfMLpx11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-				"DiscoKey":   "discokey:81150595deaf916319a72161ee945a8e09a92d18ef2c7a035944c4ef9ebbb113",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44611", "10.65.0.27:44611", "172.17.0.1:44611"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:56.146224844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2134812223061768,
-				"StableID":   "nRKCq2urfH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-				"DiscoKey":   "discokey:d48a264af06b4436412d54d6967ad2e4f753dde619f08684883658b0880a5242",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:53243", "10.65.0.27:53243", "172.17.0.1:53243"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:56.693151314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4746083736955843,
-				"StableID":   "nYfodAaW4e11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-				"DiscoKey":   "discokey:c269288ddd3f6f789355fddfd540c0304b05b50786561882293568bf18806056",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37244", "10.65.0.27:37244", "172.17.0.1:37244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:57.232730778Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1740436279900976,
-				"StableID":   "nD9EDyJFbE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:d811df4ad18aa6408aa2a23b87e96c403d5877f1e064c25b641c223c3111f274",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38759", "10.65.0.27:38759", "172.17.0.1:38759"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:58.305866179Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         871457961259742,
-				"StableID":   "n16Qsvigo711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:8fbaa53830c35d6be24653f75e1fe7f0ffe71167dd27a81fa3ea2198370a216c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:37963", "10.65.0.27:37963", "172.17.0.1:37963"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:58.840688391Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7147981618253020,
-				"StableID":   "nmmXVfMLpx11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       7147981618253020,
-				"Key":        "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-				"DiscoKey":   "discokey:81150595deaf916319a72161ee945a8e09a92d18ef2c7a035944c4ef9ebbb113",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44611", "10.65.0.27:44611", "172.17.0.1:44611"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:56.146224844Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-			"MachineKey": "mkey:6f02a3410ad710a2ff99747582cc2e9356f0b88290b25948bda54b3e747c325e",
-			"Peers": [{
-				"ID":         1717589738234841,
-				"StableID":   "nnMNZrAuQE11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-				"DiscoKey":   "discokey:1475a4e4697719cf42ea284c0a893b5c86c646fe328dedd07eae9e754a99df52",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35443", "10.65.0.27:35443", "172.17.0.1:35443"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:55.066895114Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3241148570645706,
-				"StableID":   "nbVyPfUvJS11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-				"DiscoKey":   "discokey:52c674208a7e9280a5c854400cb8cf75af538f901d3fb5a3ca8aec97ef62c179",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44849", "10.65.0.27:44849", "172.17.0.1:44849"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:55.604719062Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2134812223061768,
-				"StableID":   "nRKCq2urfH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-				"DiscoKey":   "discokey:d48a264af06b4436412d54d6967ad2e4f753dde619f08684883658b0880a5242",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:53243", "10.65.0.27:53243", "172.17.0.1:53243"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:56.693151314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4746083736955843,
-				"StableID":   "nYfodAaW4e11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-				"DiscoKey":   "discokey:c269288ddd3f6f789355fddfd540c0304b05b50786561882293568bf18806056",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37244", "10.65.0.27:37244", "172.17.0.1:37244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:57.232730778Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         144934815911988,
-				"StableID":   "nbUpN8Ce8211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-				"KeyExpiry":  "2026-11-03T08:13:57Z",
-				"DiscoKey":   "discokey:e4879b56a027444cf44aa36445fe7ce7a35a45fceeeb605d5ddfd016a3ef523a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45407", "10.65.0.27:45407", "172.17.0.1:45407"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:57.764540174Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1740436279900976,
-				"StableID":   "nD9EDyJFbE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:d811df4ad18aa6408aa2a23b87e96c403d5877f1e064c25b641c223c3111f274",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38759", "10.65.0.27:38759", "172.17.0.1:38759"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:58.305866179Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         871457961259742,
-				"StableID":   "n16Qsvigo711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:8fbaa53830c35d6be24653f75e1fe7f0ffe71167dd27a81fa3ea2198370a216c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:37963", "10.65.0.27:37963", "172.17.0.1:37963"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:58.840688391Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7147981618253020": {
-				"ID":          7147981618253020,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2134812223061768,
-				"StableID":   "nRKCq2urfH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       2134812223061768,
-				"Key":        "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-				"DiscoKey":   "discokey:d48a264af06b4436412d54d6967ad2e4f753dde619f08684883658b0880a5242",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:53243", "10.65.0.27:53243", "172.17.0.1:53243"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:13:56.693151314Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-			"MachineKey": "mkey:c0bc45393dd528ca4e7ee0d350b360b26cfe82629b0a7e6c421ab9c206c4932f",
-			"Peers": [{
-				"ID":         1717589738234841,
-				"StableID":   "nnMNZrAuQE11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-				"DiscoKey":   "discokey:1475a4e4697719cf42ea284c0a893b5c86c646fe328dedd07eae9e754a99df52",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35443", "10.65.0.27:35443", "172.17.0.1:35443"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:55.066895114Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3241148570645706,
-				"StableID":   "nbVyPfUvJS11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-				"DiscoKey":   "discokey:52c674208a7e9280a5c854400cb8cf75af538f901d3fb5a3ca8aec97ef62c179",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44849", "10.65.0.27:44849", "172.17.0.1:44849"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:55.604719062Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7147981618253020,
-				"StableID":   "nmmXVfMLpx11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-				"DiscoKey":   "discokey:81150595deaf916319a72161ee945a8e09a92d18ef2c7a035944c4ef9ebbb113",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44611", "10.65.0.27:44611", "172.17.0.1:44611"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:56.146224844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4746083736955843,
-				"StableID":   "nYfodAaW4e11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-				"DiscoKey":   "discokey:c269288ddd3f6f789355fddfd540c0304b05b50786561882293568bf18806056",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37244", "10.65.0.27:37244", "172.17.0.1:37244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:57.232730778Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         144934815911988,
-				"StableID":   "nbUpN8Ce8211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-				"KeyExpiry":  "2026-11-03T08:13:57Z",
-				"DiscoKey":   "discokey:e4879b56a027444cf44aa36445fe7ce7a35a45fceeeb605d5ddfd016a3ef523a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45407", "10.65.0.27:45407", "172.17.0.1:45407"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:57.764540174Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1740436279900976,
-				"StableID":   "nD9EDyJFbE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:d811df4ad18aa6408aa2a23b87e96c403d5877f1e064c25b641c223c3111f274",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38759", "10.65.0.27:38759", "172.17.0.1:38759"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:58.305866179Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         871457961259742,
-				"StableID":   "n16Qsvigo711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:8fbaa53830c35d6be24653f75e1fe7f0ffe71167dd27a81fa3ea2198370a216c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:37963", "10.65.0.27:37963", "172.17.0.1:37963"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:58.840688391Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2134812223061768": {
-				"ID":          2134812223061768,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4746083736955843,
-				"StableID":   "nYfodAaW4e11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       4746083736955843,
-				"Key":        "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-				"DiscoKey":   "discokey:c269288ddd3f6f789355fddfd540c0304b05b50786561882293568bf18806056",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37244", "10.65.0.27:37244", "172.17.0.1:37244"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:57.232730778Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-			"MachineKey": "mkey:c557118d36b6d4e02665759b0b5fa6cb9e293767d7ca01db8f81ca48cb10a14c",
-			"Peers": [{
-				"ID":         1717589738234841,
-				"StableID":   "nnMNZrAuQE11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-				"DiscoKey":   "discokey:1475a4e4697719cf42ea284c0a893b5c86c646fe328dedd07eae9e754a99df52",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35443", "10.65.0.27:35443", "172.17.0.1:35443"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:55.066895114Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3241148570645706,
-				"StableID":   "nbVyPfUvJS11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-				"DiscoKey":   "discokey:52c674208a7e9280a5c854400cb8cf75af538f901d3fb5a3ca8aec97ef62c179",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44849", "10.65.0.27:44849", "172.17.0.1:44849"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:55.604719062Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7147981618253020,
-				"StableID":   "nmmXVfMLpx11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-				"DiscoKey":   "discokey:81150595deaf916319a72161ee945a8e09a92d18ef2c7a035944c4ef9ebbb113",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44611", "10.65.0.27:44611", "172.17.0.1:44611"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:56.146224844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2134812223061768,
-				"StableID":   "nRKCq2urfH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-				"DiscoKey":   "discokey:d48a264af06b4436412d54d6967ad2e4f753dde619f08684883658b0880a5242",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:53243", "10.65.0.27:53243", "172.17.0.1:53243"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:56.693151314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         144934815911988,
-				"StableID":   "nbUpN8Ce8211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-				"KeyExpiry":  "2026-11-03T08:13:57Z",
-				"DiscoKey":   "discokey:e4879b56a027444cf44aa36445fe7ce7a35a45fceeeb605d5ddfd016a3ef523a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45407", "10.65.0.27:45407", "172.17.0.1:45407"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:57.764540174Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1740436279900976,
-				"StableID":   "nD9EDyJFbE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:d811df4ad18aa6408aa2a23b87e96c403d5877f1e064c25b641c223c3111f274",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38759", "10.65.0.27:38759", "172.17.0.1:38759"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:58.305866179Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         871457961259742,
-				"StableID":   "n16Qsvigo711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:8fbaa53830c35d6be24653f75e1fe7f0ffe71167dd27a81fa3ea2198370a216c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:37963", "10.65.0.27:37963", "172.17.0.1:37963"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:58.840688391Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4746083736955843": {
-				"ID":          4746083736955843,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         871457961259742,
-				"StableID":   "n16Qsvigo711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:8fbaa53830c35d6be24653f75e1fe7f0ffe71167dd27a81fa3ea2198370a216c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:37963", "10.65.0.27:37963", "172.17.0.1:37963"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:58.840688391Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-			"MachineKey": "mkey:cf7127ba4e9b60e3c7ca6612387a78849643521006557e52957ecd79571ff91c",
-			"Peers": [{
-				"ID":         1717589738234841,
-				"StableID":   "nnMNZrAuQE11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-				"DiscoKey":   "discokey:1475a4e4697719cf42ea284c0a893b5c86c646fe328dedd07eae9e754a99df52",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35443", "10.65.0.27:35443", "172.17.0.1:35443"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:55.066895114Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3241148570645706,
-				"StableID":   "nbVyPfUvJS11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-				"DiscoKey":   "discokey:52c674208a7e9280a5c854400cb8cf75af538f901d3fb5a3ca8aec97ef62c179",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44849", "10.65.0.27:44849", "172.17.0.1:44849"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:55.604719062Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7147981618253020,
-				"StableID":   "nmmXVfMLpx11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-				"DiscoKey":   "discokey:81150595deaf916319a72161ee945a8e09a92d18ef2c7a035944c4ef9ebbb113",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44611", "10.65.0.27:44611", "172.17.0.1:44611"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:56.146224844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2134812223061768,
-				"StableID":   "nRKCq2urfH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-				"DiscoKey":   "discokey:d48a264af06b4436412d54d6967ad2e4f753dde619f08684883658b0880a5242",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:53243", "10.65.0.27:53243", "172.17.0.1:53243"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:56.693151314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4746083736955843,
-				"StableID":   "nYfodAaW4e11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-				"DiscoKey":   "discokey:c269288ddd3f6f789355fddfd540c0304b05b50786561882293568bf18806056",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37244", "10.65.0.27:37244", "172.17.0.1:37244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:57.232730778Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         144934815911988,
-				"StableID":   "nbUpN8Ce8211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-				"KeyExpiry":  "2026-11-03T08:13:57Z",
-				"DiscoKey":   "discokey:e4879b56a027444cf44aa36445fe7ce7a35a45fceeeb605d5ddfd016a3ef523a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45407", "10.65.0.27:45407", "172.17.0.1:45407"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:57.764540174Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1740436279900976,
-				"StableID":   "nD9EDyJFbE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:d811df4ad18aa6408aa2a23b87e96c403d5877f1e064c25b641c223c3111f274",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38759", "10.65.0.27:38759", "172.17.0.1:38759"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:13:58.305866179Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1740436279900976,
-				"StableID":   "nD9EDyJFbE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:d811df4ad18aa6408aa2a23b87e96c403d5877f1e064c25b641c223c3111f274",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38759", "10.65.0.27:38759", "172.17.0.1:38759"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:13:58.305866179Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0505844f48a62d08fec0e277707f41cd3d7dc5f0bd6c45a24ca56124f9055360",
-			"MachineKey": "mkey:c3c127023ed841890f7e46af54fbcf8048b2042aa023f08c766b6d627fed9c42",
-			"Peers": [{
-				"ID":         1717589738234841,
-				"StableID":   "nnMNZrAuQE11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5a107ba71d864d89d006cc34464ef88a39e2fd45073a8f19c1875d7e0c945365",
-				"DiscoKey":   "discokey:1475a4e4697719cf42ea284c0a893b5c86c646fe328dedd07eae9e754a99df52",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35443", "10.65.0.27:35443", "172.17.0.1:35443"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:13:55.066895114Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3241148570645706,
-				"StableID":   "nbVyPfUvJS11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1a459602844f40cddba5b8b1c37b85938511fe43ef1daddd7fb339e58e2db306",
-				"DiscoKey":   "discokey:52c674208a7e9280a5c854400cb8cf75af538f901d3fb5a3ca8aec97ef62c179",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44849", "10.65.0.27:44849", "172.17.0.1:44849"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:13:55.604719062Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7147981618253020,
-				"StableID":   "nmmXVfMLpx11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d4ada77b4349547b1c2f51e81ac48020a531f2e4c760fca960064eea69356e71",
-				"DiscoKey":   "discokey:81150595deaf916319a72161ee945a8e09a92d18ef2c7a035944c4ef9ebbb113",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44611", "10.65.0.27:44611", "172.17.0.1:44611"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:13:56.146224844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2134812223061768,
-				"StableID":   "nRKCq2urfH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d97042012a8fbbc10e95d2b6b15cd02b4c22fa9b81010fa31977c79902354169",
-				"DiscoKey":   "discokey:d48a264af06b4436412d54d6967ad2e4f753dde619f08684883658b0880a5242",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:53243", "10.65.0.27:53243", "172.17.0.1:53243"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:13:56.693151314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4746083736955843,
-				"StableID":   "nYfodAaW4e11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:44fa9234a8a869588b0e59baa67d3e0a8ea780067eac326097b9b8f6771cf978",
-				"DiscoKey":   "discokey:c269288ddd3f6f789355fddfd540c0304b05b50786561882293568bf18806056",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37244", "10.65.0.27:37244", "172.17.0.1:37244"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:13:57.232730778Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         144934815911988,
-				"StableID":   "nbUpN8Ce8211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a328f0f8ea382dae5183cbf75ace62d01e6b80325d9bc7c522b1993999746c2c",
-				"KeyExpiry":  "2026-11-03T08:13:57Z",
-				"DiscoKey":   "discokey:e4879b56a027444cf44aa36445fe7ce7a35a45fceeeb605d5ddfd016a3ef523a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45407", "10.65.0.27:45407", "172.17.0.1:45407"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:13:57.764540174Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         871457961259742,
-				"StableID":   "n16Qsvigo711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a8d3a45b0a39110c3b6964ce4f4d677e94aae78875d00c36aaca474067298261",
-				"KeyExpiry":  "2026-11-03T08:13:58Z",
-				"DiscoKey":   "discokey:8fbaa53830c35d6be24653f75e1fe7f0ffe71167dd27a81fa3ea2198370a216c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:37963", "10.65.0.27:37963", "172.17.0.1:37963"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:13:58.840688391Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c9-ssh.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c9-ssh.hujson
deleted file mode 100644
index 65d113bdf..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-attr-c9-ssh.hujson
+++ /dev/null
@@ -1,8813 +0,0 @@
-// nodeattrs-attr-c9-ssh
-//
-// single attr https://tailscale.com/cap/ssh via wildcard
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:14:29Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-attr-c9-ssh",
-	"description":    "single attr https://tailscale.com/cap/ssh via wildcard",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:14:29.808720424Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                        \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"single attr https://tailscale.com/cap/ssh via wildcard\",\n    \"id\": \"nodeattrs-attr-c9-ssh\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"https://tailscale.com/cap/ssh\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-attr-c9-ssh.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["https://tailscale.com/cap/ssh"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1453967967464402,
-				"StableID":   "nssWQqGWMC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1453967967464402,
-				"Key":        "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-				"DiscoKey":   "discokey:567e6e5601d01aaa39821252fa252aa74feda56adbb5df9c9b5527041a9d862b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39746", "10.65.0.27:39746", "172.17.0.1:39746"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:14:35.347283676Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-			"MachineKey": "mkey:5fa4d03abe296f735a1a2d1a88cf59e7aafa87e17fb55ed58436ca70a888d54a",
-			"Peers": [{
-				"ID":         6718203501197323,
-				"StableID":   "nirdzCpgTu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-				"DiscoKey":   "discokey:62cb2ae16fa12941c893dfa6938dce73acf1028b366e1ec7c5fbccc99b432b57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51655", "10.65.0.27:51655", "172.17.0.1:51655"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:14:35.864119857Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2022230157894388,
-				"StableID":   "nfJaFKZsnG11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-				"DiscoKey":   "discokey:4b96752a8b4292f8c61e7127668fe4c6dc2656707bc62a7731d23818dc91444a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:32972", "10.65.0.27:32972", "172.17.0.1:32972"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:14:36.401840229Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3505305668796290,
-				"StableID":   "noZabHSZNU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-				"DiscoKey":   "discokey:1e380be6da4272996aee8dae67fdace4fdc69148efd350129f940a42e3aa2a3d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48113", "10.65.0.27:48113", "172.17.0.1:48113"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:14:36.949242155Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5999991453080829,
-				"StableID":   "ncpnhsbQro11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-				"DiscoKey":   "discokey:c2652bda89555f7d2aa0b60e2e8bb42566b0b93caac74177201c02f3b4782b2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40779", "10.65.0.27:40779", "172.17.0.1:40779"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:14:37.486718305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5030188995269887,
-				"StableID":   "nUsTS3YBHg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:9f225be468b7e5a25935a0bbf4f1fe9f39b1d684211d2c4c3f4380bf70e29174",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:38186", "10.65.0.27:38186", "172.17.0.1:38186"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:14:38.027696551Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4787676988770942,
-				"StableID":   "nMAMs3AMPe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:f55c932d6a382631c04f37395b79feac00bef445696d184134c7179364c4575e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49497", "10.65.0.27:49497", "172.17.0.1:49497"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:14:38.579568312Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6641762596024556,
-				"StableID":   "nw8sxmq4st11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-				"KeyExpiry":  "2026-11-03T08:14:39Z",
-				"DiscoKey":   "discokey:b995b59e2bf754a6086d50da7149d5b5bf73a988cfcdb54514f87525e9258b1e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:14:39.101059906Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1453967967464402": {
-				"ID":          1453967967464402,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6718203501197323,
-				"StableID":   "nirdzCpgTu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       6718203501197323,
-				"Key":        "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-				"DiscoKey":   "discokey:62cb2ae16fa12941c893dfa6938dce73acf1028b366e1ec7c5fbccc99b432b57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51655", "10.65.0.27:51655", "172.17.0.1:51655"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:14:35.864119857Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-			"MachineKey": "mkey:e288afb6f8345ffcd28cbf1093e16057dd79a4c24b919f93e227a3f299c97d3d",
-			"Peers": [{
-				"ID":         1453967967464402,
-				"StableID":   "nssWQqGWMC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-				"DiscoKey":   "discokey:567e6e5601d01aaa39821252fa252aa74feda56adbb5df9c9b5527041a9d862b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39746", "10.65.0.27:39746", "172.17.0.1:39746"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:14:35.347283676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2022230157894388,
-				"StableID":   "nfJaFKZsnG11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-				"DiscoKey":   "discokey:4b96752a8b4292f8c61e7127668fe4c6dc2656707bc62a7731d23818dc91444a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:32972", "10.65.0.27:32972", "172.17.0.1:32972"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:14:36.401840229Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3505305668796290,
-				"StableID":   "noZabHSZNU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-				"DiscoKey":   "discokey:1e380be6da4272996aee8dae67fdace4fdc69148efd350129f940a42e3aa2a3d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48113", "10.65.0.27:48113", "172.17.0.1:48113"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:14:36.949242155Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5999991453080829,
-				"StableID":   "ncpnhsbQro11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-				"DiscoKey":   "discokey:c2652bda89555f7d2aa0b60e2e8bb42566b0b93caac74177201c02f3b4782b2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40779", "10.65.0.27:40779", "172.17.0.1:40779"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:14:37.486718305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5030188995269887,
-				"StableID":   "nUsTS3YBHg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:9f225be468b7e5a25935a0bbf4f1fe9f39b1d684211d2c4c3f4380bf70e29174",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:38186", "10.65.0.27:38186", "172.17.0.1:38186"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:14:38.027696551Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4787676988770942,
-				"StableID":   "nMAMs3AMPe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:f55c932d6a382631c04f37395b79feac00bef445696d184134c7179364c4575e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49497", "10.65.0.27:49497", "172.17.0.1:49497"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:14:38.579568312Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6641762596024556,
-				"StableID":   "nw8sxmq4st11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-				"KeyExpiry":  "2026-11-03T08:14:39Z",
-				"DiscoKey":   "discokey:b995b59e2bf754a6086d50da7149d5b5bf73a988cfcdb54514f87525e9258b1e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:14:39.101059906Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6718203501197323": {
-				"ID":          6718203501197323,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5030188995269887,
-				"StableID":   "nUsTS3YBHg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:9f225be468b7e5a25935a0bbf4f1fe9f39b1d684211d2c4c3f4380bf70e29174",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:38186", "10.65.0.27:38186", "172.17.0.1:38186"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:14:38.027696551Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-			"MachineKey": "mkey:ee94d6b7fcbad76cde3bbc2a50b8580f8ed225ada3359fa81338828351c1683d",
-			"Peers": [{
-				"ID":         1453967967464402,
-				"StableID":   "nssWQqGWMC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-				"DiscoKey":   "discokey:567e6e5601d01aaa39821252fa252aa74feda56adbb5df9c9b5527041a9d862b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39746", "10.65.0.27:39746", "172.17.0.1:39746"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:14:35.347283676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6718203501197323,
-				"StableID":   "nirdzCpgTu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-				"DiscoKey":   "discokey:62cb2ae16fa12941c893dfa6938dce73acf1028b366e1ec7c5fbccc99b432b57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51655", "10.65.0.27:51655", "172.17.0.1:51655"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:14:35.864119857Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2022230157894388,
-				"StableID":   "nfJaFKZsnG11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-				"DiscoKey":   "discokey:4b96752a8b4292f8c61e7127668fe4c6dc2656707bc62a7731d23818dc91444a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:32972", "10.65.0.27:32972", "172.17.0.1:32972"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:14:36.401840229Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3505305668796290,
-				"StableID":   "noZabHSZNU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-				"DiscoKey":   "discokey:1e380be6da4272996aee8dae67fdace4fdc69148efd350129f940a42e3aa2a3d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48113", "10.65.0.27:48113", "172.17.0.1:48113"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:14:36.949242155Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5999991453080829,
-				"StableID":   "ncpnhsbQro11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-				"DiscoKey":   "discokey:c2652bda89555f7d2aa0b60e2e8bb42566b0b93caac74177201c02f3b4782b2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40779", "10.65.0.27:40779", "172.17.0.1:40779"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:14:37.486718305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4787676988770942,
-				"StableID":   "nMAMs3AMPe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:f55c932d6a382631c04f37395b79feac00bef445696d184134c7179364c4575e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49497", "10.65.0.27:49497", "172.17.0.1:49497"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:14:38.579568312Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6641762596024556,
-				"StableID":   "nw8sxmq4st11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-				"KeyExpiry":  "2026-11-03T08:14:39Z",
-				"DiscoKey":   "discokey:b995b59e2bf754a6086d50da7149d5b5bf73a988cfcdb54514f87525e9258b1e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:14:39.101059906Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2022230157894388,
-				"StableID":   "nfJaFKZsnG11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       2022230157894388,
-				"Key":        "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-				"DiscoKey":   "discokey:4b96752a8b4292f8c61e7127668fe4c6dc2656707bc62a7731d23818dc91444a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:32972", "10.65.0.27:32972", "172.17.0.1:32972"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:14:36.401840229Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-			"MachineKey": "mkey:27968090c16af08dd27641bb384d261bc65fcc16f2b90507d54217c36e0ffb53",
-			"Peers": [{
-				"ID":         1453967967464402,
-				"StableID":   "nssWQqGWMC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-				"DiscoKey":   "discokey:567e6e5601d01aaa39821252fa252aa74feda56adbb5df9c9b5527041a9d862b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39746", "10.65.0.27:39746", "172.17.0.1:39746"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:14:35.347283676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6718203501197323,
-				"StableID":   "nirdzCpgTu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-				"DiscoKey":   "discokey:62cb2ae16fa12941c893dfa6938dce73acf1028b366e1ec7c5fbccc99b432b57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51655", "10.65.0.27:51655", "172.17.0.1:51655"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:14:35.864119857Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3505305668796290,
-				"StableID":   "noZabHSZNU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-				"DiscoKey":   "discokey:1e380be6da4272996aee8dae67fdace4fdc69148efd350129f940a42e3aa2a3d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48113", "10.65.0.27:48113", "172.17.0.1:48113"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:14:36.949242155Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5999991453080829,
-				"StableID":   "ncpnhsbQro11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-				"DiscoKey":   "discokey:c2652bda89555f7d2aa0b60e2e8bb42566b0b93caac74177201c02f3b4782b2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40779", "10.65.0.27:40779", "172.17.0.1:40779"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:14:37.486718305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5030188995269887,
-				"StableID":   "nUsTS3YBHg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:9f225be468b7e5a25935a0bbf4f1fe9f39b1d684211d2c4c3f4380bf70e29174",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:38186", "10.65.0.27:38186", "172.17.0.1:38186"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:14:38.027696551Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4787676988770942,
-				"StableID":   "nMAMs3AMPe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:f55c932d6a382631c04f37395b79feac00bef445696d184134c7179364c4575e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49497", "10.65.0.27:49497", "172.17.0.1:49497"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:14:38.579568312Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6641762596024556,
-				"StableID":   "nw8sxmq4st11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-				"KeyExpiry":  "2026-11-03T08:14:39Z",
-				"DiscoKey":   "discokey:b995b59e2bf754a6086d50da7149d5b5bf73a988cfcdb54514f87525e9258b1e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:14:39.101059906Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2022230157894388": {
-				"ID":          2022230157894388,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3505305668796290,
-				"StableID":   "noZabHSZNU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       3505305668796290,
-				"Key":        "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-				"DiscoKey":   "discokey:1e380be6da4272996aee8dae67fdace4fdc69148efd350129f940a42e3aa2a3d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48113", "10.65.0.27:48113", "172.17.0.1:48113"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:14:36.949242155Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-			"MachineKey": "mkey:ec230de67508839968cba8e940cdf190ee61b5b829d7b0fea1e40db74d418e68",
-			"Peers": [{
-				"ID":         1453967967464402,
-				"StableID":   "nssWQqGWMC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-				"DiscoKey":   "discokey:567e6e5601d01aaa39821252fa252aa74feda56adbb5df9c9b5527041a9d862b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39746", "10.65.0.27:39746", "172.17.0.1:39746"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:14:35.347283676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6718203501197323,
-				"StableID":   "nirdzCpgTu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-				"DiscoKey":   "discokey:62cb2ae16fa12941c893dfa6938dce73acf1028b366e1ec7c5fbccc99b432b57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51655", "10.65.0.27:51655", "172.17.0.1:51655"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:14:35.864119857Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2022230157894388,
-				"StableID":   "nfJaFKZsnG11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-				"DiscoKey":   "discokey:4b96752a8b4292f8c61e7127668fe4c6dc2656707bc62a7731d23818dc91444a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:32972", "10.65.0.27:32972", "172.17.0.1:32972"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:14:36.401840229Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5999991453080829,
-				"StableID":   "ncpnhsbQro11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-				"DiscoKey":   "discokey:c2652bda89555f7d2aa0b60e2e8bb42566b0b93caac74177201c02f3b4782b2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40779", "10.65.0.27:40779", "172.17.0.1:40779"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:14:37.486718305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5030188995269887,
-				"StableID":   "nUsTS3YBHg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:9f225be468b7e5a25935a0bbf4f1fe9f39b1d684211d2c4c3f4380bf70e29174",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:38186", "10.65.0.27:38186", "172.17.0.1:38186"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:14:38.027696551Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4787676988770942,
-				"StableID":   "nMAMs3AMPe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:f55c932d6a382631c04f37395b79feac00bef445696d184134c7179364c4575e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49497", "10.65.0.27:49497", "172.17.0.1:49497"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:14:38.579568312Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6641762596024556,
-				"StableID":   "nw8sxmq4st11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-				"KeyExpiry":  "2026-11-03T08:14:39Z",
-				"DiscoKey":   "discokey:b995b59e2bf754a6086d50da7149d5b5bf73a988cfcdb54514f87525e9258b1e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:14:39.101059906Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3505305668796290": {
-				"ID":          3505305668796290,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5999991453080829,
-				"StableID":   "ncpnhsbQro11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       5999991453080829,
-				"Key":        "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-				"DiscoKey":   "discokey:c2652bda89555f7d2aa0b60e2e8bb42566b0b93caac74177201c02f3b4782b2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40779", "10.65.0.27:40779", "172.17.0.1:40779"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:14:37.486718305Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-			"MachineKey": "mkey:b615251a69619255a5e8cd693593dc2b47d222da8474e62b0d962fd2c5faf672",
-			"Peers": [{
-				"ID":         1453967967464402,
-				"StableID":   "nssWQqGWMC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-				"DiscoKey":   "discokey:567e6e5601d01aaa39821252fa252aa74feda56adbb5df9c9b5527041a9d862b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39746", "10.65.0.27:39746", "172.17.0.1:39746"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:14:35.347283676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6718203501197323,
-				"StableID":   "nirdzCpgTu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-				"DiscoKey":   "discokey:62cb2ae16fa12941c893dfa6938dce73acf1028b366e1ec7c5fbccc99b432b57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51655", "10.65.0.27:51655", "172.17.0.1:51655"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:14:35.864119857Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2022230157894388,
-				"StableID":   "nfJaFKZsnG11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-				"DiscoKey":   "discokey:4b96752a8b4292f8c61e7127668fe4c6dc2656707bc62a7731d23818dc91444a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:32972", "10.65.0.27:32972", "172.17.0.1:32972"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:14:36.401840229Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3505305668796290,
-				"StableID":   "noZabHSZNU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-				"DiscoKey":   "discokey:1e380be6da4272996aee8dae67fdace4fdc69148efd350129f940a42e3aa2a3d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48113", "10.65.0.27:48113", "172.17.0.1:48113"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:14:36.949242155Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5030188995269887,
-				"StableID":   "nUsTS3YBHg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:9f225be468b7e5a25935a0bbf4f1fe9f39b1d684211d2c4c3f4380bf70e29174",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:38186", "10.65.0.27:38186", "172.17.0.1:38186"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:14:38.027696551Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4787676988770942,
-				"StableID":   "nMAMs3AMPe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:f55c932d6a382631c04f37395b79feac00bef445696d184134c7179364c4575e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49497", "10.65.0.27:49497", "172.17.0.1:49497"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:14:38.579568312Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6641762596024556,
-				"StableID":   "nw8sxmq4st11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-				"KeyExpiry":  "2026-11-03T08:14:39Z",
-				"DiscoKey":   "discokey:b995b59e2bf754a6086d50da7149d5b5bf73a988cfcdb54514f87525e9258b1e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:14:39.101059906Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5999991453080829": {
-				"ID":          5999991453080829,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6641762596024556,
-				"StableID":   "nw8sxmq4st11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-				"KeyExpiry":  "2026-11-03T08:14:39Z",
-				"DiscoKey":   "discokey:b995b59e2bf754a6086d50da7149d5b5bf73a988cfcdb54514f87525e9258b1e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:14:39.101059906Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-			"MachineKey": "mkey:81725739aad2bf0f09dde8286abd05e195301660350aac716a8bda27c8946458",
-			"Peers": [{
-				"ID":         1453967967464402,
-				"StableID":   "nssWQqGWMC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-				"DiscoKey":   "discokey:567e6e5601d01aaa39821252fa252aa74feda56adbb5df9c9b5527041a9d862b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39746", "10.65.0.27:39746", "172.17.0.1:39746"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:14:35.347283676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6718203501197323,
-				"StableID":   "nirdzCpgTu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-				"DiscoKey":   "discokey:62cb2ae16fa12941c893dfa6938dce73acf1028b366e1ec7c5fbccc99b432b57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51655", "10.65.0.27:51655", "172.17.0.1:51655"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:14:35.864119857Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2022230157894388,
-				"StableID":   "nfJaFKZsnG11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-				"DiscoKey":   "discokey:4b96752a8b4292f8c61e7127668fe4c6dc2656707bc62a7731d23818dc91444a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:32972", "10.65.0.27:32972", "172.17.0.1:32972"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:14:36.401840229Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3505305668796290,
-				"StableID":   "noZabHSZNU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-				"DiscoKey":   "discokey:1e380be6da4272996aee8dae67fdace4fdc69148efd350129f940a42e3aa2a3d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48113", "10.65.0.27:48113", "172.17.0.1:48113"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:14:36.949242155Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5999991453080829,
-				"StableID":   "ncpnhsbQro11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-				"DiscoKey":   "discokey:c2652bda89555f7d2aa0b60e2e8bb42566b0b93caac74177201c02f3b4782b2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40779", "10.65.0.27:40779", "172.17.0.1:40779"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:14:37.486718305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5030188995269887,
-				"StableID":   "nUsTS3YBHg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:9f225be468b7e5a25935a0bbf4f1fe9f39b1d684211d2c4c3f4380bf70e29174",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:38186", "10.65.0.27:38186", "172.17.0.1:38186"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:14:38.027696551Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4787676988770942,
-				"StableID":   "nMAMs3AMPe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:f55c932d6a382631c04f37395b79feac00bef445696d184134c7179364c4575e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49497", "10.65.0.27:49497", "172.17.0.1:49497"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:14:38.579568312Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4787676988770942,
-				"StableID":   "nMAMs3AMPe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:f55c932d6a382631c04f37395b79feac00bef445696d184134c7179364c4575e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49497", "10.65.0.27:49497", "172.17.0.1:49497"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:14:38.579568312Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f2a2c28b82f2906577cf6b23dbfd875953e22ee391d304c8a8370e6b115b7f34",
-			"MachineKey": "mkey:e64682bc433038e6adac7100cbace29783975920da6296e4665a98b35d66d036",
-			"Peers": [{
-				"ID":         1453967967464402,
-				"StableID":   "nssWQqGWMC11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f95cca169ebc6bfed2d598899e98c4a7c6c7fc36b5806c78625f5d691acdb560",
-				"DiscoKey":   "discokey:567e6e5601d01aaa39821252fa252aa74feda56adbb5df9c9b5527041a9d862b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39746", "10.65.0.27:39746", "172.17.0.1:39746"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:14:35.347283676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6718203501197323,
-				"StableID":   "nirdzCpgTu11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f47ebd86f4701ac2c6de8df7b8cb565c5cc627a6b82b913d715ba1588a800b3c",
-				"DiscoKey":   "discokey:62cb2ae16fa12941c893dfa6938dce73acf1028b366e1ec7c5fbccc99b432b57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51655", "10.65.0.27:51655", "172.17.0.1:51655"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:14:35.864119857Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2022230157894388,
-				"StableID":   "nfJaFKZsnG11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8de2105decc84cf636c1ebb19908c15a852bf091a8f4cb99d9dde157d6e35c3a",
-				"DiscoKey":   "discokey:4b96752a8b4292f8c61e7127668fe4c6dc2656707bc62a7731d23818dc91444a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:32972", "10.65.0.27:32972", "172.17.0.1:32972"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:14:36.401840229Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3505305668796290,
-				"StableID":   "noZabHSZNU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d037f0b8fab5d6966de5f4ae59893cb2cd6273b1c62b521b5f4d9e001426660",
-				"DiscoKey":   "discokey:1e380be6da4272996aee8dae67fdace4fdc69148efd350129f940a42e3aa2a3d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48113", "10.65.0.27:48113", "172.17.0.1:48113"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:14:36.949242155Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5999991453080829,
-				"StableID":   "ncpnhsbQro11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f61d2025bc118f303b2209ce2c87aca207d2a35b97bba252d5bddfac44ed9664",
-				"DiscoKey":   "discokey:c2652bda89555f7d2aa0b60e2e8bb42566b0b93caac74177201c02f3b4782b2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40779", "10.65.0.27:40779", "172.17.0.1:40779"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:14:37.486718305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5030188995269887,
-				"StableID":   "nUsTS3YBHg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a521e1438cb16827ba80fdcedf4dc8bc8eae3052003ff7220370847acb903b37",
-				"KeyExpiry":  "2026-11-03T08:14:38Z",
-				"DiscoKey":   "discokey:9f225be468b7e5a25935a0bbf4f1fe9f39b1d684211d2c4c3f4380bf70e29174",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:38186", "10.65.0.27:38186", "172.17.0.1:38186"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:14:38.027696551Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6641762596024556,
-				"StableID":   "nw8sxmq4st11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3e422f786954c02bef5cff861b26cac3ae50586460cf5672fb9e639008715956",
-				"KeyExpiry":  "2026-11-03T08:14:39Z",
-				"DiscoKey":   "discokey:b995b59e2bf754a6086d50da7149d5b5bf73a988cfcdb54514f87525e9258b1e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:14:39.101059906Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e1-empty.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e1-empty.hujson
deleted file mode 100644
index d37087577..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e1-empty.hujson
+++ /dev/null
@@ -1,8818 +0,0 @@
-// nodeattrs-error-e1-empty
-//
-// empty attr and empty ipPool: SaaS accepts (200); compiles to no-op
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:15:10Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-error-e1-empty",
-	"description":    "empty attr and empty ipPool: SaaS accepts (200); compiles to no-op",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:15:10.095797553Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                           \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"empty attr and empty ipPool: SaaS accepts (200); compiles to no-op\",\n    \"id\": \"nodeattrs-error-e1-empty\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-error-e1-empty.hujson",
-		"full_policy": {"nodeAttrs": [{"target": ["*"]}], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6171614504274608,
-				"StableID":   "nHRR3Br8Cq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       6171614504274608,
-				"Key":        "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-				"DiscoKey":   "discokey:d8f9424e14618e445e1adc3ba549271b58730c1aefd83560a5d8f73b1bf58f27",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46790", "10.65.0.27:46790", "172.17.0.1:46790"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:15.748152843Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-			"MachineKey": "mkey:85d80726f1405bc9c4a3d7b8e505c4a29d875f1515c7810f744486c2a41c7e2b",
-			"Peers": [{
-				"ID":         4909517527040247,
-				"StableID":   "n22g1dhXLf11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-				"DiscoKey":   "discokey:2a459cec48d043f6676781784783621b2c394cd99a326ddbddee9215ee24fa47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36731", "10.65.0.27:36731", "172.17.0.1:36731"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:16.28468664Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4621689823915918,
-				"StableID":   "n9kMWNxA6d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-				"DiscoKey":   "discokey:83d92a1644bc569a20e41371ddf430ff59d2d7df5db8efd7c452c5d9af3efe4d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60471", "10.65.0.27:60471", "172.17.0.1:60471"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:16.826364802Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8323441203034478,
-				"StableID":   "nKMxpoghz721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-				"DiscoKey":   "discokey:b8d5e3958ea7c42e213427da6c690f8e60573bc7c283b5f8fffa2b48592a9d47",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41088", "10.65.0.27:41088", "172.17.0.1:41088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:17.369652686Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5048499279734678,
-				"StableID":   "nFXSatWURg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-				"DiscoKey":   "discokey:f2af81d97ebfec03888f9f380ab7cba19620cfcec7bc62ca757e2151814fbb69",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58153", "10.65.0.27:58153", "172.17.0.1:58153"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:17.915264922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2132010897761457,
-				"StableID":   "n6FoJ3KbeH11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:9ff22be2770059498432ae6e90241481508ca09022205e2215f1a988114ef473",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59856", "10.65.0.27:59856", "172.17.0.1:59856"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:18.445275164Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7487513278510407,
-				"StableID":   "nWtxd5H7U121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:372e23b048710fd974aaaf4ca5460d9cb2f862f9d0c80a981dd36e112692e668",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50450", "10.65.0.27:50450", "172.17.0.1:50450"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:18.997389204Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1450274043966481,
-				"StableID":   "npJ33vEqKC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-				"KeyExpiry":  "2026-11-03T08:15:19Z",
-				"DiscoKey":   "discokey:0248bc823a26fdbea5a39786fd8ee0a9aed41baff9407afdc096b17d85caf36e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:38376", "10.65.0.27:38376", "172.17.0.1:38376"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:19.535641195Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6171614504274608": {
-				"ID":          6171614504274608,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4909517527040247,
-				"StableID":   "n22g1dhXLf11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       4909517527040247,
-				"Key":        "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-				"DiscoKey":   "discokey:2a459cec48d043f6676781784783621b2c394cd99a326ddbddee9215ee24fa47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36731", "10.65.0.27:36731", "172.17.0.1:36731"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:15:16.28468664Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-			"MachineKey": "mkey:6c8ac23880fad80627c5281cec32a1a5ac8b916028387664e9f487c0de1dcf2c",
-			"Peers": [{
-				"ID":         6171614504274608,
-				"StableID":   "nHRR3Br8Cq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-				"DiscoKey":   "discokey:d8f9424e14618e445e1adc3ba549271b58730c1aefd83560a5d8f73b1bf58f27",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46790", "10.65.0.27:46790", "172.17.0.1:46790"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:15.748152843Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4621689823915918,
-				"StableID":   "n9kMWNxA6d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-				"DiscoKey":   "discokey:83d92a1644bc569a20e41371ddf430ff59d2d7df5db8efd7c452c5d9af3efe4d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60471", "10.65.0.27:60471", "172.17.0.1:60471"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:16.826364802Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8323441203034478,
-				"StableID":   "nKMxpoghz721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-				"DiscoKey":   "discokey:b8d5e3958ea7c42e213427da6c690f8e60573bc7c283b5f8fffa2b48592a9d47",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41088", "10.65.0.27:41088", "172.17.0.1:41088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:17.369652686Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5048499279734678,
-				"StableID":   "nFXSatWURg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-				"DiscoKey":   "discokey:f2af81d97ebfec03888f9f380ab7cba19620cfcec7bc62ca757e2151814fbb69",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58153", "10.65.0.27:58153", "172.17.0.1:58153"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:17.915264922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2132010897761457,
-				"StableID":   "n6FoJ3KbeH11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:9ff22be2770059498432ae6e90241481508ca09022205e2215f1a988114ef473",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59856", "10.65.0.27:59856", "172.17.0.1:59856"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:18.445275164Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7487513278510407,
-				"StableID":   "nWtxd5H7U121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:372e23b048710fd974aaaf4ca5460d9cb2f862f9d0c80a981dd36e112692e668",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50450", "10.65.0.27:50450", "172.17.0.1:50450"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:18.997389204Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1450274043966481,
-				"StableID":   "npJ33vEqKC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-				"KeyExpiry":  "2026-11-03T08:15:19Z",
-				"DiscoKey":   "discokey:0248bc823a26fdbea5a39786fd8ee0a9aed41baff9407afdc096b17d85caf36e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:38376", "10.65.0.27:38376", "172.17.0.1:38376"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:19.535641195Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4909517527040247": {
-				"ID":          4909517527040247,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2132010897761457,
-				"StableID":   "n6FoJ3KbeH11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:9ff22be2770059498432ae6e90241481508ca09022205e2215f1a988114ef473",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59856", "10.65.0.27:59856", "172.17.0.1:59856"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:18.445275164Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-			"MachineKey": "mkey:ee2d4177e37c7dcf9f3e1eeb50f83d1bd5d506405fb9ff4e908a37e53337d154",
-			"Peers": [{
-				"ID":         6171614504274608,
-				"StableID":   "nHRR3Br8Cq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-				"DiscoKey":   "discokey:d8f9424e14618e445e1adc3ba549271b58730c1aefd83560a5d8f73b1bf58f27",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46790", "10.65.0.27:46790", "172.17.0.1:46790"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:15.748152843Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4909517527040247,
-				"StableID":   "n22g1dhXLf11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-				"DiscoKey":   "discokey:2a459cec48d043f6676781784783621b2c394cd99a326ddbddee9215ee24fa47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36731", "10.65.0.27:36731", "172.17.0.1:36731"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:16.28468664Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4621689823915918,
-				"StableID":   "n9kMWNxA6d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-				"DiscoKey":   "discokey:83d92a1644bc569a20e41371ddf430ff59d2d7df5db8efd7c452c5d9af3efe4d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60471", "10.65.0.27:60471", "172.17.0.1:60471"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:16.826364802Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8323441203034478,
-				"StableID":   "nKMxpoghz721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-				"DiscoKey":   "discokey:b8d5e3958ea7c42e213427da6c690f8e60573bc7c283b5f8fffa2b48592a9d47",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41088", "10.65.0.27:41088", "172.17.0.1:41088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:17.369652686Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5048499279734678,
-				"StableID":   "nFXSatWURg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-				"DiscoKey":   "discokey:f2af81d97ebfec03888f9f380ab7cba19620cfcec7bc62ca757e2151814fbb69",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58153", "10.65.0.27:58153", "172.17.0.1:58153"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:17.915264922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7487513278510407,
-				"StableID":   "nWtxd5H7U121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:372e23b048710fd974aaaf4ca5460d9cb2f862f9d0c80a981dd36e112692e668",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50450", "10.65.0.27:50450", "172.17.0.1:50450"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:18.997389204Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1450274043966481,
-				"StableID":   "npJ33vEqKC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-				"KeyExpiry":  "2026-11-03T08:15:19Z",
-				"DiscoKey":   "discokey:0248bc823a26fdbea5a39786fd8ee0a9aed41baff9407afdc096b17d85caf36e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:38376", "10.65.0.27:38376", "172.17.0.1:38376"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:19.535641195Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4621689823915918,
-				"StableID":   "n9kMWNxA6d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       4621689823915918,
-				"Key":        "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-				"DiscoKey":   "discokey:83d92a1644bc569a20e41371ddf430ff59d2d7df5db8efd7c452c5d9af3efe4d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60471", "10.65.0.27:60471", "172.17.0.1:60471"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:16.826364802Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-			"MachineKey": "mkey:c0de630b3e67fce3ea824c106fd0c64470c0caf17b2d1bd51b0ac2ece9986e72",
-			"Peers": [{
-				"ID":         6171614504274608,
-				"StableID":   "nHRR3Br8Cq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-				"DiscoKey":   "discokey:d8f9424e14618e445e1adc3ba549271b58730c1aefd83560a5d8f73b1bf58f27",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46790", "10.65.0.27:46790", "172.17.0.1:46790"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:15.748152843Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4909517527040247,
-				"StableID":   "n22g1dhXLf11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-				"DiscoKey":   "discokey:2a459cec48d043f6676781784783621b2c394cd99a326ddbddee9215ee24fa47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36731", "10.65.0.27:36731", "172.17.0.1:36731"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:16.28468664Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8323441203034478,
-				"StableID":   "nKMxpoghz721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-				"DiscoKey":   "discokey:b8d5e3958ea7c42e213427da6c690f8e60573bc7c283b5f8fffa2b48592a9d47",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41088", "10.65.0.27:41088", "172.17.0.1:41088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:17.369652686Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5048499279734678,
-				"StableID":   "nFXSatWURg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-				"DiscoKey":   "discokey:f2af81d97ebfec03888f9f380ab7cba19620cfcec7bc62ca757e2151814fbb69",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58153", "10.65.0.27:58153", "172.17.0.1:58153"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:17.915264922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2132010897761457,
-				"StableID":   "n6FoJ3KbeH11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:9ff22be2770059498432ae6e90241481508ca09022205e2215f1a988114ef473",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59856", "10.65.0.27:59856", "172.17.0.1:59856"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:18.445275164Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7487513278510407,
-				"StableID":   "nWtxd5H7U121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:372e23b048710fd974aaaf4ca5460d9cb2f862f9d0c80a981dd36e112692e668",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50450", "10.65.0.27:50450", "172.17.0.1:50450"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:18.997389204Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1450274043966481,
-				"StableID":   "npJ33vEqKC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-				"KeyExpiry":  "2026-11-03T08:15:19Z",
-				"DiscoKey":   "discokey:0248bc823a26fdbea5a39786fd8ee0a9aed41baff9407afdc096b17d85caf36e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:38376", "10.65.0.27:38376", "172.17.0.1:38376"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:19.535641195Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4621689823915918": {
-				"ID":          4621689823915918,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8323441203034478,
-				"StableID":   "nKMxpoghz721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       8323441203034478,
-				"Key":        "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-				"DiscoKey":   "discokey:b8d5e3958ea7c42e213427da6c690f8e60573bc7c283b5f8fffa2b48592a9d47",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41088", "10.65.0.27:41088", "172.17.0.1:41088"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:15:17.369652686Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-			"MachineKey": "mkey:78fd60a9b331df3bdf8e9c4d172bf1122460232c7ca75ef39b9640981fd00b4f",
-			"Peers": [{
-				"ID":         6171614504274608,
-				"StableID":   "nHRR3Br8Cq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-				"DiscoKey":   "discokey:d8f9424e14618e445e1adc3ba549271b58730c1aefd83560a5d8f73b1bf58f27",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46790", "10.65.0.27:46790", "172.17.0.1:46790"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:15.748152843Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4909517527040247,
-				"StableID":   "n22g1dhXLf11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-				"DiscoKey":   "discokey:2a459cec48d043f6676781784783621b2c394cd99a326ddbddee9215ee24fa47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36731", "10.65.0.27:36731", "172.17.0.1:36731"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:16.28468664Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4621689823915918,
-				"StableID":   "n9kMWNxA6d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-				"DiscoKey":   "discokey:83d92a1644bc569a20e41371ddf430ff59d2d7df5db8efd7c452c5d9af3efe4d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60471", "10.65.0.27:60471", "172.17.0.1:60471"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:16.826364802Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5048499279734678,
-				"StableID":   "nFXSatWURg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-				"DiscoKey":   "discokey:f2af81d97ebfec03888f9f380ab7cba19620cfcec7bc62ca757e2151814fbb69",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58153", "10.65.0.27:58153", "172.17.0.1:58153"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:17.915264922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2132010897761457,
-				"StableID":   "n6FoJ3KbeH11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:9ff22be2770059498432ae6e90241481508ca09022205e2215f1a988114ef473",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59856", "10.65.0.27:59856", "172.17.0.1:59856"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:18.445275164Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7487513278510407,
-				"StableID":   "nWtxd5H7U121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:372e23b048710fd974aaaf4ca5460d9cb2f862f9d0c80a981dd36e112692e668",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50450", "10.65.0.27:50450", "172.17.0.1:50450"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:18.997389204Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1450274043966481,
-				"StableID":   "npJ33vEqKC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-				"KeyExpiry":  "2026-11-03T08:15:19Z",
-				"DiscoKey":   "discokey:0248bc823a26fdbea5a39786fd8ee0a9aed41baff9407afdc096b17d85caf36e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:38376", "10.65.0.27:38376", "172.17.0.1:38376"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:19.535641195Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8323441203034478": {
-				"ID":          8323441203034478,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5048499279734678,
-				"StableID":   "nFXSatWURg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       5048499279734678,
-				"Key":        "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-				"DiscoKey":   "discokey:f2af81d97ebfec03888f9f380ab7cba19620cfcec7bc62ca757e2151814fbb69",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58153", "10.65.0.27:58153", "172.17.0.1:58153"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:17.915264922Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-			"MachineKey": "mkey:286fd404e6b4a03a10503039b98d8e7b8321201295218d3b7ca12edc4401a178",
-			"Peers": [{
-				"ID":         6171614504274608,
-				"StableID":   "nHRR3Br8Cq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-				"DiscoKey":   "discokey:d8f9424e14618e445e1adc3ba549271b58730c1aefd83560a5d8f73b1bf58f27",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46790", "10.65.0.27:46790", "172.17.0.1:46790"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:15.748152843Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4909517527040247,
-				"StableID":   "n22g1dhXLf11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-				"DiscoKey":   "discokey:2a459cec48d043f6676781784783621b2c394cd99a326ddbddee9215ee24fa47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36731", "10.65.0.27:36731", "172.17.0.1:36731"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:16.28468664Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4621689823915918,
-				"StableID":   "n9kMWNxA6d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-				"DiscoKey":   "discokey:83d92a1644bc569a20e41371ddf430ff59d2d7df5db8efd7c452c5d9af3efe4d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60471", "10.65.0.27:60471", "172.17.0.1:60471"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:16.826364802Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8323441203034478,
-				"StableID":   "nKMxpoghz721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-				"DiscoKey":   "discokey:b8d5e3958ea7c42e213427da6c690f8e60573bc7c283b5f8fffa2b48592a9d47",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41088", "10.65.0.27:41088", "172.17.0.1:41088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:17.369652686Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2132010897761457,
-				"StableID":   "n6FoJ3KbeH11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:9ff22be2770059498432ae6e90241481508ca09022205e2215f1a988114ef473",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59856", "10.65.0.27:59856", "172.17.0.1:59856"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:18.445275164Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7487513278510407,
-				"StableID":   "nWtxd5H7U121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:372e23b048710fd974aaaf4ca5460d9cb2f862f9d0c80a981dd36e112692e668",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50450", "10.65.0.27:50450", "172.17.0.1:50450"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:18.997389204Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1450274043966481,
-				"StableID":   "npJ33vEqKC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-				"KeyExpiry":  "2026-11-03T08:15:19Z",
-				"DiscoKey":   "discokey:0248bc823a26fdbea5a39786fd8ee0a9aed41baff9407afdc096b17d85caf36e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:38376", "10.65.0.27:38376", "172.17.0.1:38376"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:19.535641195Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5048499279734678": {
-				"ID":          5048499279734678,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1450274043966481,
-				"StableID":   "npJ33vEqKC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-				"KeyExpiry":  "2026-11-03T08:15:19Z",
-				"DiscoKey":   "discokey:0248bc823a26fdbea5a39786fd8ee0a9aed41baff9407afdc096b17d85caf36e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:38376", "10.65.0.27:38376", "172.17.0.1:38376"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:19.535641195Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-			"MachineKey": "mkey:e38b5a36e9d24962cca12e87eda848f9217d9df102df44901aec45c819a73178",
-			"Peers": [{
-				"ID":         6171614504274608,
-				"StableID":   "nHRR3Br8Cq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-				"DiscoKey":   "discokey:d8f9424e14618e445e1adc3ba549271b58730c1aefd83560a5d8f73b1bf58f27",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46790", "10.65.0.27:46790", "172.17.0.1:46790"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:15.748152843Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4909517527040247,
-				"StableID":   "n22g1dhXLf11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-				"DiscoKey":   "discokey:2a459cec48d043f6676781784783621b2c394cd99a326ddbddee9215ee24fa47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36731", "10.65.0.27:36731", "172.17.0.1:36731"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:16.28468664Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4621689823915918,
-				"StableID":   "n9kMWNxA6d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-				"DiscoKey":   "discokey:83d92a1644bc569a20e41371ddf430ff59d2d7df5db8efd7c452c5d9af3efe4d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60471", "10.65.0.27:60471", "172.17.0.1:60471"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:16.826364802Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8323441203034478,
-				"StableID":   "nKMxpoghz721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-				"DiscoKey":   "discokey:b8d5e3958ea7c42e213427da6c690f8e60573bc7c283b5f8fffa2b48592a9d47",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41088", "10.65.0.27:41088", "172.17.0.1:41088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:17.369652686Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5048499279734678,
-				"StableID":   "nFXSatWURg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-				"DiscoKey":   "discokey:f2af81d97ebfec03888f9f380ab7cba19620cfcec7bc62ca757e2151814fbb69",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58153", "10.65.0.27:58153", "172.17.0.1:58153"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:17.915264922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2132010897761457,
-				"StableID":   "n6FoJ3KbeH11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:9ff22be2770059498432ae6e90241481508ca09022205e2215f1a988114ef473",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59856", "10.65.0.27:59856", "172.17.0.1:59856"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:18.445275164Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7487513278510407,
-				"StableID":   "nWtxd5H7U121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:372e23b048710fd974aaaf4ca5460d9cb2f862f9d0c80a981dd36e112692e668",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50450", "10.65.0.27:50450", "172.17.0.1:50450"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:18.997389204Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7487513278510407,
-				"StableID":   "nWtxd5H7U121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:372e23b048710fd974aaaf4ca5460d9cb2f862f9d0c80a981dd36e112692e668",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50450", "10.65.0.27:50450", "172.17.0.1:50450"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:18.997389204Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:34027ddaf4ca62f562b5d694400d97c6e616d1a3bbacf2bbca704ecf942a0e1e",
-			"MachineKey": "mkey:d99a3162e266daa72fe57e3b50e040e78bb22d5cc7ab80b7dcc15f5923e3f972",
-			"Peers": [{
-				"ID":         6171614504274608,
-				"StableID":   "nHRR3Br8Cq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67d30e5a5c7e4c60732a308a79df0adab057a4e46939e7b04a2814b5382aac27",
-				"DiscoKey":   "discokey:d8f9424e14618e445e1adc3ba549271b58730c1aefd83560a5d8f73b1bf58f27",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46790", "10.65.0.27:46790", "172.17.0.1:46790"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:15.748152843Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4909517527040247,
-				"StableID":   "n22g1dhXLf11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0bd60d97b9ea9aa2cd26b41d29c6ee2c24d9ab9f31b7e5ffb0378528e26d9f75",
-				"DiscoKey":   "discokey:2a459cec48d043f6676781784783621b2c394cd99a326ddbddee9215ee24fa47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36731", "10.65.0.27:36731", "172.17.0.1:36731"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:16.28468664Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4621689823915918,
-				"StableID":   "n9kMWNxA6d11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f059d664be200542dfc8d540e7206a522b9b5a3c20388a64d7f8d43875bfcc2c",
-				"DiscoKey":   "discokey:83d92a1644bc569a20e41371ddf430ff59d2d7df5db8efd7c452c5d9af3efe4d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60471", "10.65.0.27:60471", "172.17.0.1:60471"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:16.826364802Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8323441203034478,
-				"StableID":   "nKMxpoghz721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c62a8ee876513659c9ef6caf23b4b382d73cc1b48054e5cbc1a8eff330f6932f",
-				"DiscoKey":   "discokey:b8d5e3958ea7c42e213427da6c690f8e60573bc7c283b5f8fffa2b48592a9d47",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:41088", "10.65.0.27:41088", "172.17.0.1:41088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:17.369652686Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5048499279734678,
-				"StableID":   "nFXSatWURg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5adfcc84f1137f27ff4bb79db663250ffce3b67ec359f41a223c5c3d77b01c73",
-				"DiscoKey":   "discokey:f2af81d97ebfec03888f9f380ab7cba19620cfcec7bc62ca757e2151814fbb69",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58153", "10.65.0.27:58153", "172.17.0.1:58153"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:17.915264922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2132010897761457,
-				"StableID":   "n6FoJ3KbeH11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:667f9caaf713285fb28f658a1bdec319b6781a748154c69ab62e9fa184b9db38",
-				"KeyExpiry":  "2026-11-03T08:15:18Z",
-				"DiscoKey":   "discokey:9ff22be2770059498432ae6e90241481508ca09022205e2215f1a988114ef473",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59856", "10.65.0.27:59856", "172.17.0.1:59856"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:18.445275164Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1450274043966481,
-				"StableID":   "npJ33vEqKC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da8a04f46db91e1bf382ba7d359e0734aa12acaba555a2f2bc2e46d4ec932a3e",
-				"KeyExpiry":  "2026-11-03T08:15:19Z",
-				"DiscoKey":   "discokey:0248bc823a26fdbea5a39786fd8ee0a9aed41baff9407afdc096b17d85caf36e",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:38376", "10.65.0.27:38376", "172.17.0.1:38376"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:19.535641195Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e2-bad-target.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e2-bad-target.hujson
deleted file mode 100644
index ae9f40405..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e2-bad-target.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-error-e2-bad-target
-//
-// unparseable target -- SaaS rejects
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:15:50Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-error-e2-bad-target",
-	"description":    "unparseable target -- SaaS rejects",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:15:50.599531359Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"error":          true,
-	"input": {
-		"api_response_code": 400,
-		"api_response_body": {"message": "\"%bogus%\": invalid address"},
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"unparseable target -- SaaS rejects\",\n    \"id\": \"nodeattrs-error-e2-bad-target\",\n    \"options\": {\n        \"expect_api_error\": true\n    },\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"%bogus%\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-error-e2-bad-target.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["%bogus%"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         626411437528998,
-				"StableID":   "nqcygSmht511CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       626411437528998,
-				"Key":        "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-				"DiscoKey":   "discokey:a5ea6e9571a93989353d964c279ffe4d468054ea67e0d4b5f93e96540fe47904",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52318", "10.65.0.27:52318", "172.17.0.1:52318"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:56.172588933Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-			"MachineKey": "mkey:ee6b026ce6ccd8e15be8eaa3710ee9cee91975cb7b0b2df80640e80b21798932",
-			"Peers": [{
-				"ID":         1638064023089236,
-				"StableID":   "nys9SXAtnD11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-				"DiscoKey":   "discokey:fe96e222370476457d5280a3bbf5026c8668e042e4250c3d57dce47b30c5d16a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35102", "10.65.0.27:35102", "172.17.0.1:35102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:56.698931167Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5031650928352953,
-				"StableID":   "nxUeTPwqHg11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-				"DiscoKey":   "discokey:f72f4c25fb66fd212c8e4710284ba17141a5d0d0fe8fba549a8941f41d7a4363",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41082", "10.65.0.27:41082", "172.17.0.1:41082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:57.23619817Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1942647517737240,
-				"StableID":   "nb8orF4qAG11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-				"DiscoKey":   "discokey:0d5fd090def579721bc38520418953609d9e6921c21cf030e3435b0ed521a229",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43088", "10.65.0.27:43088", "172.17.0.1:43088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:57.77110064Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3632429486558704,
-				"StableID":   "nj2J4Gm8NV11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-				"DiscoKey":   "discokey:a9c28a0f56d5e536862e5c23099ae72c866870b5e35d5054941323235362ed77",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58444", "10.65.0.27:58444", "172.17.0.1:58444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:58.296326321Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4784675930762949,
-				"StableID":   "nCgcekKzMe11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-				"KeyExpiry":  "2026-11-03T08:15:58Z",
-				"DiscoKey":   "discokey:6c821ad017300cc2ad7a1eeac201653cbca9f06ecf3d936b8086358ecf5d633f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60775", "10.65.0.27:60775", "172.17.0.1:60775"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:58.840731834Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5412187480203150,
-				"StableID":   "nuAhTHzBGj11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:91d0b280a057f0d5a33448c969af513c79f207bb0b58b2182d071409bd8e280a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38058", "10.65.0.27:38058", "172.17.0.1:38058"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:59.368902933Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         388239982040221,
-				"StableID":   "nvhMkYQq2411CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:88eced49999e795e09bf266eecf4f029bc52f66ab2a9371ae5c8929152a8b51b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57044", "10.65.0.27:57044", "172.17.0.1:57044"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:59.905122063Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "626411437528998": {
-				"ID":          626411437528998,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1638064023089236,
-				"StableID":   "nys9SXAtnD11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1638064023089236,
-				"Key":        "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-				"DiscoKey":   "discokey:fe96e222370476457d5280a3bbf5026c8668e042e4250c3d57dce47b30c5d16a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35102", "10.65.0.27:35102", "172.17.0.1:35102"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:15:56.698931167Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-			"MachineKey": "mkey:f5d8d42dc6c829332b5c36b96038a1b52eff402ba001d7c830844f4a18f2530c",
-			"Peers": [{
-				"ID":         626411437528998,
-				"StableID":   "nqcygSmht511CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-				"DiscoKey":   "discokey:a5ea6e9571a93989353d964c279ffe4d468054ea67e0d4b5f93e96540fe47904",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52318", "10.65.0.27:52318", "172.17.0.1:52318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:56.172588933Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5031650928352953,
-				"StableID":   "nxUeTPwqHg11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-				"DiscoKey":   "discokey:f72f4c25fb66fd212c8e4710284ba17141a5d0d0fe8fba549a8941f41d7a4363",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41082", "10.65.0.27:41082", "172.17.0.1:41082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:57.23619817Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1942647517737240,
-				"StableID":   "nb8orF4qAG11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-				"DiscoKey":   "discokey:0d5fd090def579721bc38520418953609d9e6921c21cf030e3435b0ed521a229",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43088", "10.65.0.27:43088", "172.17.0.1:43088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:57.77110064Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3632429486558704,
-				"StableID":   "nj2J4Gm8NV11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-				"DiscoKey":   "discokey:a9c28a0f56d5e536862e5c23099ae72c866870b5e35d5054941323235362ed77",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58444", "10.65.0.27:58444", "172.17.0.1:58444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:58.296326321Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4784675930762949,
-				"StableID":   "nCgcekKzMe11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-				"KeyExpiry":  "2026-11-03T08:15:58Z",
-				"DiscoKey":   "discokey:6c821ad017300cc2ad7a1eeac201653cbca9f06ecf3d936b8086358ecf5d633f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60775", "10.65.0.27:60775", "172.17.0.1:60775"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:58.840731834Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5412187480203150,
-				"StableID":   "nuAhTHzBGj11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:91d0b280a057f0d5a33448c969af513c79f207bb0b58b2182d071409bd8e280a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38058", "10.65.0.27:38058", "172.17.0.1:38058"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:59.368902933Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         388239982040221,
-				"StableID":   "nvhMkYQq2411CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:88eced49999e795e09bf266eecf4f029bc52f66ab2a9371ae5c8929152a8b51b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57044", "10.65.0.27:57044", "172.17.0.1:57044"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:59.905122063Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1638064023089236": {
-				"ID":          1638064023089236,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4784675930762949,
-				"StableID":   "nCgcekKzMe11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-				"KeyExpiry":  "2026-11-03T08:15:58Z",
-				"DiscoKey":   "discokey:6c821ad017300cc2ad7a1eeac201653cbca9f06ecf3d936b8086358ecf5d633f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60775", "10.65.0.27:60775", "172.17.0.1:60775"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:58.840731834Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-			"MachineKey": "mkey:dd7e82ad3663677b84e549453d17436f0ad01419ab6ee7fa1ab94265f95e844d",
-			"Peers": [{
-				"ID":         626411437528998,
-				"StableID":   "nqcygSmht511CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-				"DiscoKey":   "discokey:a5ea6e9571a93989353d964c279ffe4d468054ea67e0d4b5f93e96540fe47904",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52318", "10.65.0.27:52318", "172.17.0.1:52318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:56.172588933Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1638064023089236,
-				"StableID":   "nys9SXAtnD11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-				"DiscoKey":   "discokey:fe96e222370476457d5280a3bbf5026c8668e042e4250c3d57dce47b30c5d16a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35102", "10.65.0.27:35102", "172.17.0.1:35102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:56.698931167Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5031650928352953,
-				"StableID":   "nxUeTPwqHg11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-				"DiscoKey":   "discokey:f72f4c25fb66fd212c8e4710284ba17141a5d0d0fe8fba549a8941f41d7a4363",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41082", "10.65.0.27:41082", "172.17.0.1:41082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:57.23619817Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1942647517737240,
-				"StableID":   "nb8orF4qAG11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-				"DiscoKey":   "discokey:0d5fd090def579721bc38520418953609d9e6921c21cf030e3435b0ed521a229",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43088", "10.65.0.27:43088", "172.17.0.1:43088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:57.77110064Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3632429486558704,
-				"StableID":   "nj2J4Gm8NV11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-				"DiscoKey":   "discokey:a9c28a0f56d5e536862e5c23099ae72c866870b5e35d5054941323235362ed77",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58444", "10.65.0.27:58444", "172.17.0.1:58444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:58.296326321Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5412187480203150,
-				"StableID":   "nuAhTHzBGj11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:91d0b280a057f0d5a33448c969af513c79f207bb0b58b2182d071409bd8e280a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38058", "10.65.0.27:38058", "172.17.0.1:38058"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:59.368902933Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         388239982040221,
-				"StableID":   "nvhMkYQq2411CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:88eced49999e795e09bf266eecf4f029bc52f66ab2a9371ae5c8929152a8b51b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57044", "10.65.0.27:57044", "172.17.0.1:57044"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:59.905122063Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5031650928352953,
-				"StableID":   "nxUeTPwqHg11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5031650928352953,
-				"Key":        "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-				"DiscoKey":   "discokey:f72f4c25fb66fd212c8e4710284ba17141a5d0d0fe8fba549a8941f41d7a4363",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41082", "10.65.0.27:41082", "172.17.0.1:41082"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:57.23619817Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-			"MachineKey": "mkey:026713262b1d863a7b9abba2c922c490c2bd14c7685bf6b53315cd4cd308282d",
-			"Peers": [{
-				"ID":         626411437528998,
-				"StableID":   "nqcygSmht511CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-				"DiscoKey":   "discokey:a5ea6e9571a93989353d964c279ffe4d468054ea67e0d4b5f93e96540fe47904",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52318", "10.65.0.27:52318", "172.17.0.1:52318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:56.172588933Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1638064023089236,
-				"StableID":   "nys9SXAtnD11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-				"DiscoKey":   "discokey:fe96e222370476457d5280a3bbf5026c8668e042e4250c3d57dce47b30c5d16a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35102", "10.65.0.27:35102", "172.17.0.1:35102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:56.698931167Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1942647517737240,
-				"StableID":   "nb8orF4qAG11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-				"DiscoKey":   "discokey:0d5fd090def579721bc38520418953609d9e6921c21cf030e3435b0ed521a229",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43088", "10.65.0.27:43088", "172.17.0.1:43088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:57.77110064Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3632429486558704,
-				"StableID":   "nj2J4Gm8NV11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-				"DiscoKey":   "discokey:a9c28a0f56d5e536862e5c23099ae72c866870b5e35d5054941323235362ed77",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58444", "10.65.0.27:58444", "172.17.0.1:58444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:58.296326321Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4784675930762949,
-				"StableID":   "nCgcekKzMe11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-				"KeyExpiry":  "2026-11-03T08:15:58Z",
-				"DiscoKey":   "discokey:6c821ad017300cc2ad7a1eeac201653cbca9f06ecf3d936b8086358ecf5d633f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60775", "10.65.0.27:60775", "172.17.0.1:60775"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:58.840731834Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5412187480203150,
-				"StableID":   "nuAhTHzBGj11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:91d0b280a057f0d5a33448c969af513c79f207bb0b58b2182d071409bd8e280a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38058", "10.65.0.27:38058", "172.17.0.1:38058"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:59.368902933Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         388239982040221,
-				"StableID":   "nvhMkYQq2411CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:88eced49999e795e09bf266eecf4f029bc52f66ab2a9371ae5c8929152a8b51b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57044", "10.65.0.27:57044", "172.17.0.1:57044"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:59.905122063Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5031650928352953": {
-				"ID":          5031650928352953,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1942647517737240,
-				"StableID":   "nb8orF4qAG11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1942647517737240,
-				"Key":        "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-				"DiscoKey":   "discokey:0d5fd090def579721bc38520418953609d9e6921c21cf030e3435b0ed521a229",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43088", "10.65.0.27:43088", "172.17.0.1:43088"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:15:57.77110064Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-			"MachineKey": "mkey:d31cda183410b2d29bb345419200c4194d45ca77754a7d6c8f75563d72a3e625",
-			"Peers": [{
-				"ID":         626411437528998,
-				"StableID":   "nqcygSmht511CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-				"DiscoKey":   "discokey:a5ea6e9571a93989353d964c279ffe4d468054ea67e0d4b5f93e96540fe47904",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52318", "10.65.0.27:52318", "172.17.0.1:52318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:56.172588933Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1638064023089236,
-				"StableID":   "nys9SXAtnD11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-				"DiscoKey":   "discokey:fe96e222370476457d5280a3bbf5026c8668e042e4250c3d57dce47b30c5d16a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35102", "10.65.0.27:35102", "172.17.0.1:35102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:56.698931167Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5031650928352953,
-				"StableID":   "nxUeTPwqHg11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-				"DiscoKey":   "discokey:f72f4c25fb66fd212c8e4710284ba17141a5d0d0fe8fba549a8941f41d7a4363",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41082", "10.65.0.27:41082", "172.17.0.1:41082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:57.23619817Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3632429486558704,
-				"StableID":   "nj2J4Gm8NV11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-				"DiscoKey":   "discokey:a9c28a0f56d5e536862e5c23099ae72c866870b5e35d5054941323235362ed77",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58444", "10.65.0.27:58444", "172.17.0.1:58444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:58.296326321Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4784675930762949,
-				"StableID":   "nCgcekKzMe11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-				"KeyExpiry":  "2026-11-03T08:15:58Z",
-				"DiscoKey":   "discokey:6c821ad017300cc2ad7a1eeac201653cbca9f06ecf3d936b8086358ecf5d633f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60775", "10.65.0.27:60775", "172.17.0.1:60775"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:58.840731834Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5412187480203150,
-				"StableID":   "nuAhTHzBGj11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:91d0b280a057f0d5a33448c969af513c79f207bb0b58b2182d071409bd8e280a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38058", "10.65.0.27:38058", "172.17.0.1:38058"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:59.368902933Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         388239982040221,
-				"StableID":   "nvhMkYQq2411CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:88eced49999e795e09bf266eecf4f029bc52f66ab2a9371ae5c8929152a8b51b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57044", "10.65.0.27:57044", "172.17.0.1:57044"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:59.905122063Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1942647517737240": {
-				"ID":          1942647517737240,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3632429486558704,
-				"StableID":   "nj2J4Gm8NV11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       3632429486558704,
-				"Key":        "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-				"DiscoKey":   "discokey:a9c28a0f56d5e536862e5c23099ae72c866870b5e35d5054941323235362ed77",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58444", "10.65.0.27:58444", "172.17.0.1:58444"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:58.296326321Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-			"MachineKey": "mkey:c0c68305537b3a2ef81254af8adc3289b71e72db310604cc557622da0056f55c",
-			"Peers": [{
-				"ID":         626411437528998,
-				"StableID":   "nqcygSmht511CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-				"DiscoKey":   "discokey:a5ea6e9571a93989353d964c279ffe4d468054ea67e0d4b5f93e96540fe47904",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52318", "10.65.0.27:52318", "172.17.0.1:52318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:56.172588933Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1638064023089236,
-				"StableID":   "nys9SXAtnD11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-				"DiscoKey":   "discokey:fe96e222370476457d5280a3bbf5026c8668e042e4250c3d57dce47b30c5d16a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35102", "10.65.0.27:35102", "172.17.0.1:35102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:56.698931167Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5031650928352953,
-				"StableID":   "nxUeTPwqHg11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-				"DiscoKey":   "discokey:f72f4c25fb66fd212c8e4710284ba17141a5d0d0fe8fba549a8941f41d7a4363",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41082", "10.65.0.27:41082", "172.17.0.1:41082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:57.23619817Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1942647517737240,
-				"StableID":   "nb8orF4qAG11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-				"DiscoKey":   "discokey:0d5fd090def579721bc38520418953609d9e6921c21cf030e3435b0ed521a229",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43088", "10.65.0.27:43088", "172.17.0.1:43088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:57.77110064Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4784675930762949,
-				"StableID":   "nCgcekKzMe11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-				"KeyExpiry":  "2026-11-03T08:15:58Z",
-				"DiscoKey":   "discokey:6c821ad017300cc2ad7a1eeac201653cbca9f06ecf3d936b8086358ecf5d633f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60775", "10.65.0.27:60775", "172.17.0.1:60775"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:58.840731834Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5412187480203150,
-				"StableID":   "nuAhTHzBGj11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:91d0b280a057f0d5a33448c969af513c79f207bb0b58b2182d071409bd8e280a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38058", "10.65.0.27:38058", "172.17.0.1:38058"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:59.368902933Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         388239982040221,
-				"StableID":   "nvhMkYQq2411CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:88eced49999e795e09bf266eecf4f029bc52f66ab2a9371ae5c8929152a8b51b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57044", "10.65.0.27:57044", "172.17.0.1:57044"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:59.905122063Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3632429486558704": {
-				"ID":          3632429486558704,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         388239982040221,
-				"StableID":   "nvhMkYQq2411CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:88eced49999e795e09bf266eecf4f029bc52f66ab2a9371ae5c8929152a8b51b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57044", "10.65.0.27:57044", "172.17.0.1:57044"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:59.905122063Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-			"MachineKey": "mkey:fdbc82e5027e2b0876ec227fa05ec6bef5b8d8eb6622f8cd2b99f636f251ff06",
-			"Peers": [{
-				"ID":         626411437528998,
-				"StableID":   "nqcygSmht511CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-				"DiscoKey":   "discokey:a5ea6e9571a93989353d964c279ffe4d468054ea67e0d4b5f93e96540fe47904",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52318", "10.65.0.27:52318", "172.17.0.1:52318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:56.172588933Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1638064023089236,
-				"StableID":   "nys9SXAtnD11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-				"DiscoKey":   "discokey:fe96e222370476457d5280a3bbf5026c8668e042e4250c3d57dce47b30c5d16a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35102", "10.65.0.27:35102", "172.17.0.1:35102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:56.698931167Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5031650928352953,
-				"StableID":   "nxUeTPwqHg11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-				"DiscoKey":   "discokey:f72f4c25fb66fd212c8e4710284ba17141a5d0d0fe8fba549a8941f41d7a4363",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41082", "10.65.0.27:41082", "172.17.0.1:41082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:57.23619817Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1942647517737240,
-				"StableID":   "nb8orF4qAG11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-				"DiscoKey":   "discokey:0d5fd090def579721bc38520418953609d9e6921c21cf030e3435b0ed521a229",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43088", "10.65.0.27:43088", "172.17.0.1:43088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:57.77110064Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3632429486558704,
-				"StableID":   "nj2J4Gm8NV11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-				"DiscoKey":   "discokey:a9c28a0f56d5e536862e5c23099ae72c866870b5e35d5054941323235362ed77",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58444", "10.65.0.27:58444", "172.17.0.1:58444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:58.296326321Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4784675930762949,
-				"StableID":   "nCgcekKzMe11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-				"KeyExpiry":  "2026-11-03T08:15:58Z",
-				"DiscoKey":   "discokey:6c821ad017300cc2ad7a1eeac201653cbca9f06ecf3d936b8086358ecf5d633f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60775", "10.65.0.27:60775", "172.17.0.1:60775"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:58.840731834Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5412187480203150,
-				"StableID":   "nuAhTHzBGj11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:91d0b280a057f0d5a33448c969af513c79f207bb0b58b2182d071409bd8e280a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38058", "10.65.0.27:38058", "172.17.0.1:38058"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:15:59.368902933Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5412187480203150,
-				"StableID":   "nuAhTHzBGj11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:91d0b280a057f0d5a33448c969af513c79f207bb0b58b2182d071409bd8e280a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38058", "10.65.0.27:38058", "172.17.0.1:38058"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:15:59.368902933Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4326b47be3ce831953ba5032ff965ec5da722a36a270e0e672aa58ecc3c79d1e",
-			"MachineKey": "mkey:f27aa512bbba88365f9fa71baefcbe05d274f17488be959be8854bed9958722c",
-			"Peers": [{
-				"ID":         626411437528998,
-				"StableID":   "nqcygSmht511CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3705e4b00e8c1d05adc7b956103e5827accd0100004a569796934a6a857cf933",
-				"DiscoKey":   "discokey:a5ea6e9571a93989353d964c279ffe4d468054ea67e0d4b5f93e96540fe47904",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52318", "10.65.0.27:52318", "172.17.0.1:52318"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:15:56.172588933Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1638064023089236,
-				"StableID":   "nys9SXAtnD11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee53818ffcd45e6be2ad56cc912fdce29ce22ddeebdc9ed522006a3ccd05d318",
-				"DiscoKey":   "discokey:fe96e222370476457d5280a3bbf5026c8668e042e4250c3d57dce47b30c5d16a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35102", "10.65.0.27:35102", "172.17.0.1:35102"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:15:56.698931167Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5031650928352953,
-				"StableID":   "nxUeTPwqHg11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:94a06e19f3bf7a799773f8b0e5c96ce041ebb6981e06a50b5522dc24af26b60f",
-				"DiscoKey":   "discokey:f72f4c25fb66fd212c8e4710284ba17141a5d0d0fe8fba549a8941f41d7a4363",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41082", "10.65.0.27:41082", "172.17.0.1:41082"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:15:57.23619817Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1942647517737240,
-				"StableID":   "nb8orF4qAG11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce5ba8a688877329132cabff2b1cbbf8f807c2b93c06131111b210512e30fb5e",
-				"DiscoKey":   "discokey:0d5fd090def579721bc38520418953609d9e6921c21cf030e3435b0ed521a229",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43088", "10.65.0.27:43088", "172.17.0.1:43088"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:15:57.77110064Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3632429486558704,
-				"StableID":   "nj2J4Gm8NV11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bdc712937ddf9bac95366edcd14c1a39a9b3d78bb2ac5b20492c114dcb6bd520",
-				"DiscoKey":   "discokey:a9c28a0f56d5e536862e5c23099ae72c866870b5e35d5054941323235362ed77",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58444", "10.65.0.27:58444", "172.17.0.1:58444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:15:58.296326321Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4784675930762949,
-				"StableID":   "nCgcekKzMe11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:a9618ad9576ec4fee7b6d58eed9c4a98534fb367dbf8edc53b32f31729dd3160",
-				"KeyExpiry":  "2026-11-03T08:15:58Z",
-				"DiscoKey":   "discokey:6c821ad017300cc2ad7a1eeac201653cbca9f06ecf3d936b8086358ecf5d633f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60775", "10.65.0.27:60775", "172.17.0.1:60775"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:15:58.840731834Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         388239982040221,
-				"StableID":   "nvhMkYQq2411CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7d25c9db27fef80aad0c7e216b3c820f4f1becba6cfdf56acadeb13f65d44b15",
-				"KeyExpiry":  "2026-11-03T08:15:59Z",
-				"DiscoKey":   "discokey:88eced49999e795e09bf266eecf4f029bc52f66ab2a9371ae5c8929152a8b51b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57044", "10.65.0.27:57044", "172.17.0.1:57044"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:15:59.905122063Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e3-autogroup-self.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e3-autogroup-self.hujson
deleted file mode 100644
index 4be57cfa1..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e3-autogroup-self.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-error-e3-autogroup-self
-//
-// autogroup:self in target -- SaaS rejects
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:16:21Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-error-e3-autogroup-self",
-	"description":    "autogroup:self in target -- SaaS rejects",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:16:21.671611434Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"error":          true,
-	"input": {
-		"api_response_code": 500,
-		"api_response_body": {"message": "internal server error"},
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                    \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"autogroup:self in target -- SaaS rejects\",\n    \"id\": \"nodeattrs-error-e3-autogroup-self\",\n    \"options\": {\n        \"expect_api_error\": true\n    },\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"autogroup:self\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-error-e3-autogroup-self.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["autogroup:self"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6493310843067060,
-				"StableID":   "n9HQuNGqhs11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       6493310843067060,
-				"Key":        "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-				"DiscoKey":   "discokey:c823acbf86132e3d0bbc87952a7121c26591eaebd04c854f7610897c51f25d6b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43480", "10.65.0.27:43480", "172.17.0.1:43480"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:16:27.279268292Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-			"MachineKey": "mkey:0341610ff9dbf4f41c729d522f2e52b2da354b5df11ed4fe89b8a5a21fa9c522",
-			"Peers": [{
-				"ID":         3666700708283300,
-				"StableID":   "nRKjZa1fdV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-				"DiscoKey":   "discokey:d676b4b9853dba233d6d53fa981a2b39537a095484a339e0bccbb51d81a41f6a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46897", "10.65.0.27:46897", "172.17.0.1:46897"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:27.798891597Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         868810231330146,
-				"StableID":   "nVYR3xAVn711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-				"DiscoKey":   "discokey:21c53afd57c61d84517f83923be018eafba0385a14b419b68f824ff970be6c68",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44971", "10.65.0.27:44971", "172.17.0.1:44971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:28.344332672Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5420482538446906,
-				"StableID":   "nuYRMKtwKj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-				"DiscoKey":   "discokey:e3a1f5eca91f63708d81a03b6e8ef3f7e9b82e153e194fa25e4be84978951a17",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56765", "10.65.0.27:56765", "172.17.0.1:56765"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:16:28.895070381Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3821792648447582,
-				"StableID":   "n77JEi1uqW11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-				"DiscoKey":   "discokey:9370392ce5b631dcae672d26ef06b3230a8b28419765062a01de86c6330b7d47",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:51520", "10.65.0.27:51520", "172.17.0.1:51520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:16:29.439445476Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8915693336002287,
-				"StableID":   "n6EDkS9wcC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-				"KeyExpiry":  "2026-11-03T08:16:29Z",
-				"DiscoKey":   "discokey:14a163cc36182673699197860266bbe006189c89977f3c9fbc9a20099d120c52",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:50789", "10.65.0.27:50789", "172.17.0.1:50789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:16:29.976462172Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6062636420013819,
-				"StableID":   "nJ8zuLBnLp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-				"KeyExpiry":  "2026-11-03T08:16:30Z",
-				"DiscoKey":   "discokey:d82f3394183fe9ea409b7c13d50a6e83b18dd55d14b2f958cbdbbbcdfeb7972b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42949", "10.65.0.27:42949", "172.17.0.1:42949"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:16:30.511961699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2024951992798032,
-				"StableID":   "nXruUC47pG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-				"KeyExpiry":  "2026-11-03T08:16:31Z",
-				"DiscoKey":   "discokey:104fd22cf8c6fc40b26b15849f4fab738360be4d1a933b9dae8230aceaddc048",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59324", "10.65.0.27:59324", "172.17.0.1:59324"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:16:31.061153118Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6493310843067060": {
-				"ID":          6493310843067060,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3666700708283300,
-				"StableID":   "nRKjZa1fdV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3666700708283300,
-				"Key":        "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-				"DiscoKey":   "discokey:d676b4b9853dba233d6d53fa981a2b39537a095484a339e0bccbb51d81a41f6a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46897", "10.65.0.27:46897", "172.17.0.1:46897"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:16:27.798891597Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-			"MachineKey": "mkey:8afd93928b806c98f171ee77759c879561751b8cf02e321b41fe73f2abc3f045",
-			"Peers": [{
-				"ID":         6493310843067060,
-				"StableID":   "n9HQuNGqhs11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-				"DiscoKey":   "discokey:c823acbf86132e3d0bbc87952a7121c26591eaebd04c854f7610897c51f25d6b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43480", "10.65.0.27:43480", "172.17.0.1:43480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:27.279268292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         868810231330146,
-				"StableID":   "nVYR3xAVn711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-				"DiscoKey":   "discokey:21c53afd57c61d84517f83923be018eafba0385a14b419b68f824ff970be6c68",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44971", "10.65.0.27:44971", "172.17.0.1:44971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:28.344332672Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5420482538446906,
-				"StableID":   "nuYRMKtwKj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-				"DiscoKey":   "discokey:e3a1f5eca91f63708d81a03b6e8ef3f7e9b82e153e194fa25e4be84978951a17",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56765", "10.65.0.27:56765", "172.17.0.1:56765"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:16:28.895070381Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3821792648447582,
-				"StableID":   "n77JEi1uqW11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-				"DiscoKey":   "discokey:9370392ce5b631dcae672d26ef06b3230a8b28419765062a01de86c6330b7d47",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:51520", "10.65.0.27:51520", "172.17.0.1:51520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:16:29.439445476Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8915693336002287,
-				"StableID":   "n6EDkS9wcC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-				"KeyExpiry":  "2026-11-03T08:16:29Z",
-				"DiscoKey":   "discokey:14a163cc36182673699197860266bbe006189c89977f3c9fbc9a20099d120c52",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:50789", "10.65.0.27:50789", "172.17.0.1:50789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:16:29.976462172Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6062636420013819,
-				"StableID":   "nJ8zuLBnLp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-				"KeyExpiry":  "2026-11-03T08:16:30Z",
-				"DiscoKey":   "discokey:d82f3394183fe9ea409b7c13d50a6e83b18dd55d14b2f958cbdbbbcdfeb7972b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42949", "10.65.0.27:42949", "172.17.0.1:42949"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:16:30.511961699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2024951992798032,
-				"StableID":   "nXruUC47pG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-				"KeyExpiry":  "2026-11-03T08:16:31Z",
-				"DiscoKey":   "discokey:104fd22cf8c6fc40b26b15849f4fab738360be4d1a933b9dae8230aceaddc048",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59324", "10.65.0.27:59324", "172.17.0.1:59324"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:16:31.061153118Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3666700708283300": {
-				"ID":          3666700708283300,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8915693336002287,
-				"StableID":   "n6EDkS9wcC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-				"KeyExpiry":  "2026-11-03T08:16:29Z",
-				"DiscoKey":   "discokey:14a163cc36182673699197860266bbe006189c89977f3c9fbc9a20099d120c52",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:50789", "10.65.0.27:50789", "172.17.0.1:50789"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:16:29.976462172Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-			"MachineKey": "mkey:7b4e2118388210986639426d08b2dcbbcdb1391ae303a06e3f3ba24ba5ac8a43",
-			"Peers": [{
-				"ID":         6493310843067060,
-				"StableID":   "n9HQuNGqhs11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-				"DiscoKey":   "discokey:c823acbf86132e3d0bbc87952a7121c26591eaebd04c854f7610897c51f25d6b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43480", "10.65.0.27:43480", "172.17.0.1:43480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:27.279268292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3666700708283300,
-				"StableID":   "nRKjZa1fdV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-				"DiscoKey":   "discokey:d676b4b9853dba233d6d53fa981a2b39537a095484a339e0bccbb51d81a41f6a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46897", "10.65.0.27:46897", "172.17.0.1:46897"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:27.798891597Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         868810231330146,
-				"StableID":   "nVYR3xAVn711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-				"DiscoKey":   "discokey:21c53afd57c61d84517f83923be018eafba0385a14b419b68f824ff970be6c68",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44971", "10.65.0.27:44971", "172.17.0.1:44971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:28.344332672Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5420482538446906,
-				"StableID":   "nuYRMKtwKj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-				"DiscoKey":   "discokey:e3a1f5eca91f63708d81a03b6e8ef3f7e9b82e153e194fa25e4be84978951a17",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56765", "10.65.0.27:56765", "172.17.0.1:56765"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:16:28.895070381Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3821792648447582,
-				"StableID":   "n77JEi1uqW11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-				"DiscoKey":   "discokey:9370392ce5b631dcae672d26ef06b3230a8b28419765062a01de86c6330b7d47",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:51520", "10.65.0.27:51520", "172.17.0.1:51520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:16:29.439445476Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6062636420013819,
-				"StableID":   "nJ8zuLBnLp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-				"KeyExpiry":  "2026-11-03T08:16:30Z",
-				"DiscoKey":   "discokey:d82f3394183fe9ea409b7c13d50a6e83b18dd55d14b2f958cbdbbbcdfeb7972b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42949", "10.65.0.27:42949", "172.17.0.1:42949"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:16:30.511961699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2024951992798032,
-				"StableID":   "nXruUC47pG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-				"KeyExpiry":  "2026-11-03T08:16:31Z",
-				"DiscoKey":   "discokey:104fd22cf8c6fc40b26b15849f4fab738360be4d1a933b9dae8230aceaddc048",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59324", "10.65.0.27:59324", "172.17.0.1:59324"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:16:31.061153118Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         868810231330146,
-				"StableID":   "nVYR3xAVn711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       868810231330146,
-				"Key":        "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-				"DiscoKey":   "discokey:21c53afd57c61d84517f83923be018eafba0385a14b419b68f824ff970be6c68",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44971", "10.65.0.27:44971", "172.17.0.1:44971"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:16:28.344332672Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-			"MachineKey": "mkey:3d8a949b155513a0d39b0986a971f962b83c37aaffcc5906ed80508cfa97285b",
-			"Peers": [{
-				"ID":         6493310843067060,
-				"StableID":   "n9HQuNGqhs11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-				"DiscoKey":   "discokey:c823acbf86132e3d0bbc87952a7121c26591eaebd04c854f7610897c51f25d6b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43480", "10.65.0.27:43480", "172.17.0.1:43480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:27.279268292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3666700708283300,
-				"StableID":   "nRKjZa1fdV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-				"DiscoKey":   "discokey:d676b4b9853dba233d6d53fa981a2b39537a095484a339e0bccbb51d81a41f6a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46897", "10.65.0.27:46897", "172.17.0.1:46897"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:27.798891597Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5420482538446906,
-				"StableID":   "nuYRMKtwKj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-				"DiscoKey":   "discokey:e3a1f5eca91f63708d81a03b6e8ef3f7e9b82e153e194fa25e4be84978951a17",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56765", "10.65.0.27:56765", "172.17.0.1:56765"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:16:28.895070381Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3821792648447582,
-				"StableID":   "n77JEi1uqW11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-				"DiscoKey":   "discokey:9370392ce5b631dcae672d26ef06b3230a8b28419765062a01de86c6330b7d47",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:51520", "10.65.0.27:51520", "172.17.0.1:51520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:16:29.439445476Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8915693336002287,
-				"StableID":   "n6EDkS9wcC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-				"KeyExpiry":  "2026-11-03T08:16:29Z",
-				"DiscoKey":   "discokey:14a163cc36182673699197860266bbe006189c89977f3c9fbc9a20099d120c52",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:50789", "10.65.0.27:50789", "172.17.0.1:50789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:16:29.976462172Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6062636420013819,
-				"StableID":   "nJ8zuLBnLp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-				"KeyExpiry":  "2026-11-03T08:16:30Z",
-				"DiscoKey":   "discokey:d82f3394183fe9ea409b7c13d50a6e83b18dd55d14b2f958cbdbbbcdfeb7972b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42949", "10.65.0.27:42949", "172.17.0.1:42949"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:16:30.511961699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2024951992798032,
-				"StableID":   "nXruUC47pG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-				"KeyExpiry":  "2026-11-03T08:16:31Z",
-				"DiscoKey":   "discokey:104fd22cf8c6fc40b26b15849f4fab738360be4d1a933b9dae8230aceaddc048",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59324", "10.65.0.27:59324", "172.17.0.1:59324"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:16:31.061153118Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "868810231330146": {
-				"ID":          868810231330146,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5420482538446906,
-				"StableID":   "nuYRMKtwKj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       5420482538446906,
-				"Key":        "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-				"DiscoKey":   "discokey:e3a1f5eca91f63708d81a03b6e8ef3f7e9b82e153e194fa25e4be84978951a17",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56765", "10.65.0.27:56765", "172.17.0.1:56765"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:16:28.895070381Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-			"MachineKey": "mkey:183062d2607c35807c1623108d0f82f52732667cdad2fa8754edefe0c9de105c",
-			"Peers": [{
-				"ID":         6493310843067060,
-				"StableID":   "n9HQuNGqhs11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-				"DiscoKey":   "discokey:c823acbf86132e3d0bbc87952a7121c26591eaebd04c854f7610897c51f25d6b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43480", "10.65.0.27:43480", "172.17.0.1:43480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:27.279268292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3666700708283300,
-				"StableID":   "nRKjZa1fdV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-				"DiscoKey":   "discokey:d676b4b9853dba233d6d53fa981a2b39537a095484a339e0bccbb51d81a41f6a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46897", "10.65.0.27:46897", "172.17.0.1:46897"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:27.798891597Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         868810231330146,
-				"StableID":   "nVYR3xAVn711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-				"DiscoKey":   "discokey:21c53afd57c61d84517f83923be018eafba0385a14b419b68f824ff970be6c68",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44971", "10.65.0.27:44971", "172.17.0.1:44971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:28.344332672Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3821792648447582,
-				"StableID":   "n77JEi1uqW11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-				"DiscoKey":   "discokey:9370392ce5b631dcae672d26ef06b3230a8b28419765062a01de86c6330b7d47",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:51520", "10.65.0.27:51520", "172.17.0.1:51520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:16:29.439445476Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8915693336002287,
-				"StableID":   "n6EDkS9wcC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-				"KeyExpiry":  "2026-11-03T08:16:29Z",
-				"DiscoKey":   "discokey:14a163cc36182673699197860266bbe006189c89977f3c9fbc9a20099d120c52",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:50789", "10.65.0.27:50789", "172.17.0.1:50789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:16:29.976462172Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6062636420013819,
-				"StableID":   "nJ8zuLBnLp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-				"KeyExpiry":  "2026-11-03T08:16:30Z",
-				"DiscoKey":   "discokey:d82f3394183fe9ea409b7c13d50a6e83b18dd55d14b2f958cbdbbbcdfeb7972b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42949", "10.65.0.27:42949", "172.17.0.1:42949"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:16:30.511961699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2024951992798032,
-				"StableID":   "nXruUC47pG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-				"KeyExpiry":  "2026-11-03T08:16:31Z",
-				"DiscoKey":   "discokey:104fd22cf8c6fc40b26b15849f4fab738360be4d1a933b9dae8230aceaddc048",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59324", "10.65.0.27:59324", "172.17.0.1:59324"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:16:31.061153118Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5420482538446906": {
-				"ID":          5420482538446906,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3821792648447582,
-				"StableID":   "n77JEi1uqW11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       3821792648447582,
-				"Key":        "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-				"DiscoKey":   "discokey:9370392ce5b631dcae672d26ef06b3230a8b28419765062a01de86c6330b7d47",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:51520", "10.65.0.27:51520", "172.17.0.1:51520"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:16:29.439445476Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-			"MachineKey": "mkey:4f720f28017c77fc5e458ab11213b204c656c5f757853aa3bdd684c7f875cf51",
-			"Peers": [{
-				"ID":         6493310843067060,
-				"StableID":   "n9HQuNGqhs11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-				"DiscoKey":   "discokey:c823acbf86132e3d0bbc87952a7121c26591eaebd04c854f7610897c51f25d6b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43480", "10.65.0.27:43480", "172.17.0.1:43480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:27.279268292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3666700708283300,
-				"StableID":   "nRKjZa1fdV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-				"DiscoKey":   "discokey:d676b4b9853dba233d6d53fa981a2b39537a095484a339e0bccbb51d81a41f6a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46897", "10.65.0.27:46897", "172.17.0.1:46897"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:27.798891597Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         868810231330146,
-				"StableID":   "nVYR3xAVn711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-				"DiscoKey":   "discokey:21c53afd57c61d84517f83923be018eafba0385a14b419b68f824ff970be6c68",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44971", "10.65.0.27:44971", "172.17.0.1:44971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:28.344332672Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5420482538446906,
-				"StableID":   "nuYRMKtwKj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-				"DiscoKey":   "discokey:e3a1f5eca91f63708d81a03b6e8ef3f7e9b82e153e194fa25e4be84978951a17",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56765", "10.65.0.27:56765", "172.17.0.1:56765"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:16:28.895070381Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8915693336002287,
-				"StableID":   "n6EDkS9wcC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-				"KeyExpiry":  "2026-11-03T08:16:29Z",
-				"DiscoKey":   "discokey:14a163cc36182673699197860266bbe006189c89977f3c9fbc9a20099d120c52",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:50789", "10.65.0.27:50789", "172.17.0.1:50789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:16:29.976462172Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6062636420013819,
-				"StableID":   "nJ8zuLBnLp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-				"KeyExpiry":  "2026-11-03T08:16:30Z",
-				"DiscoKey":   "discokey:d82f3394183fe9ea409b7c13d50a6e83b18dd55d14b2f958cbdbbbcdfeb7972b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42949", "10.65.0.27:42949", "172.17.0.1:42949"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:16:30.511961699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2024951992798032,
-				"StableID":   "nXruUC47pG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-				"KeyExpiry":  "2026-11-03T08:16:31Z",
-				"DiscoKey":   "discokey:104fd22cf8c6fc40b26b15849f4fab738360be4d1a933b9dae8230aceaddc048",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59324", "10.65.0.27:59324", "172.17.0.1:59324"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:16:31.061153118Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3821792648447582": {
-				"ID":          3821792648447582,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2024951992798032,
-				"StableID":   "nXruUC47pG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-				"KeyExpiry":  "2026-11-03T08:16:31Z",
-				"DiscoKey":   "discokey:104fd22cf8c6fc40b26b15849f4fab738360be4d1a933b9dae8230aceaddc048",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59324", "10.65.0.27:59324", "172.17.0.1:59324"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:16:31.061153118Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-			"MachineKey": "mkey:509128cbf351185ae832e7c9b4bb8846c59c0df6498ea9c9c236c0bba3f3b27d",
-			"Peers": [{
-				"ID":         6493310843067060,
-				"StableID":   "n9HQuNGqhs11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-				"DiscoKey":   "discokey:c823acbf86132e3d0bbc87952a7121c26591eaebd04c854f7610897c51f25d6b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43480", "10.65.0.27:43480", "172.17.0.1:43480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:27.279268292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3666700708283300,
-				"StableID":   "nRKjZa1fdV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-				"DiscoKey":   "discokey:d676b4b9853dba233d6d53fa981a2b39537a095484a339e0bccbb51d81a41f6a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46897", "10.65.0.27:46897", "172.17.0.1:46897"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:27.798891597Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         868810231330146,
-				"StableID":   "nVYR3xAVn711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-				"DiscoKey":   "discokey:21c53afd57c61d84517f83923be018eafba0385a14b419b68f824ff970be6c68",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44971", "10.65.0.27:44971", "172.17.0.1:44971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:28.344332672Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5420482538446906,
-				"StableID":   "nuYRMKtwKj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-				"DiscoKey":   "discokey:e3a1f5eca91f63708d81a03b6e8ef3f7e9b82e153e194fa25e4be84978951a17",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56765", "10.65.0.27:56765", "172.17.0.1:56765"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:16:28.895070381Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3821792648447582,
-				"StableID":   "n77JEi1uqW11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-				"DiscoKey":   "discokey:9370392ce5b631dcae672d26ef06b3230a8b28419765062a01de86c6330b7d47",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:51520", "10.65.0.27:51520", "172.17.0.1:51520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:16:29.439445476Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8915693336002287,
-				"StableID":   "n6EDkS9wcC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-				"KeyExpiry":  "2026-11-03T08:16:29Z",
-				"DiscoKey":   "discokey:14a163cc36182673699197860266bbe006189c89977f3c9fbc9a20099d120c52",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:50789", "10.65.0.27:50789", "172.17.0.1:50789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:16:29.976462172Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6062636420013819,
-				"StableID":   "nJ8zuLBnLp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-				"KeyExpiry":  "2026-11-03T08:16:30Z",
-				"DiscoKey":   "discokey:d82f3394183fe9ea409b7c13d50a6e83b18dd55d14b2f958cbdbbbcdfeb7972b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42949", "10.65.0.27:42949", "172.17.0.1:42949"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:16:30.511961699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6062636420013819,
-				"StableID":   "nJ8zuLBnLp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-				"KeyExpiry":  "2026-11-03T08:16:30Z",
-				"DiscoKey":   "discokey:d82f3394183fe9ea409b7c13d50a6e83b18dd55d14b2f958cbdbbbcdfeb7972b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42949", "10.65.0.27:42949", "172.17.0.1:42949"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:16:30.511961699Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d3f099813674b31ebdc69443d61aa15370c788d48b0bce9eeeb9da842f179402",
-			"MachineKey": "mkey:52ac9befbd635f511d6afb8c43c939c4afa7bfb0b773f7023e4ae3c4dda15971",
-			"Peers": [{
-				"ID":         6493310843067060,
-				"StableID":   "n9HQuNGqhs11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e300fdaff84ff9ddd70eee4c480ff6bb4118a0d60b6632bfd85fef511ca571e",
-				"DiscoKey":   "discokey:c823acbf86132e3d0bbc87952a7121c26591eaebd04c854f7610897c51f25d6b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43480", "10.65.0.27:43480", "172.17.0.1:43480"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:27.279268292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3666700708283300,
-				"StableID":   "nRKjZa1fdV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b164ec81fef664997aeb6269f4d8abc49abf8fb214d253cffbd327ec06c09050",
-				"DiscoKey":   "discokey:d676b4b9853dba233d6d53fa981a2b39537a095484a339e0bccbb51d81a41f6a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46897", "10.65.0.27:46897", "172.17.0.1:46897"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:27.798891597Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         868810231330146,
-				"StableID":   "nVYR3xAVn711CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e721a06bc363d412130dda24b57fe63d9e3634752d64fc5d9153c9c80513f35",
-				"DiscoKey":   "discokey:21c53afd57c61d84517f83923be018eafba0385a14b419b68f824ff970be6c68",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:44971", "10.65.0.27:44971", "172.17.0.1:44971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:28.344332672Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5420482538446906,
-				"StableID":   "nuYRMKtwKj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ab506a05e4bd7343cfdeba5f396e729f4398821d2b696006867a16b82f31f55a",
-				"DiscoKey":   "discokey:e3a1f5eca91f63708d81a03b6e8ef3f7e9b82e153e194fa25e4be84978951a17",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56765", "10.65.0.27:56765", "172.17.0.1:56765"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:16:28.895070381Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3821792648447582,
-				"StableID":   "n77JEi1uqW11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:243aa76ec723b4a6616305c6d25f6137893ee7fed4a35fec066bc767a0470430",
-				"DiscoKey":   "discokey:9370392ce5b631dcae672d26ef06b3230a8b28419765062a01de86c6330b7d47",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:51520", "10.65.0.27:51520", "172.17.0.1:51520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:16:29.439445476Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8915693336002287,
-				"StableID":   "n6EDkS9wcC21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:c2756fe4904cef23d153bfb343009e29000b48dc6dd3aab4b495137315c29f67",
-				"KeyExpiry":  "2026-11-03T08:16:29Z",
-				"DiscoKey":   "discokey:14a163cc36182673699197860266bbe006189c89977f3c9fbc9a20099d120c52",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:50789", "10.65.0.27:50789", "172.17.0.1:50789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:16:29.976462172Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         2024951992798032,
-				"StableID":   "nXruUC47pG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:47278c69d13ce5b7ff01b76424d90b0017eda3b7038794aa2979d4f8d115636f",
-				"KeyExpiry":  "2026-11-03T08:16:31Z",
-				"DiscoKey":   "discokey:104fd22cf8c6fc40b26b15849f4fab738360be4d1a933b9dae8230aceaddc048",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59324", "10.65.0.27:59324", "172.17.0.1:59324"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:16:31.061153118Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e4-reserved-ippool.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e4-reserved-ippool.hujson
deleted file mode 100644
index ee49584b7..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e4-reserved-ippool.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-error-e4-reserved-ippool
-//
-// ipPool overlaps reserved Quad100 range -- SaaS rejects
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:16:52Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-error-e4-reserved-ippool",
-	"description":    "ipPool overlaps reserved Quad100 range -- SaaS rejects",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:16:52.863068661Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"error":          true,
-	"input": {
-		"api_response_code": 400,
-		"api_response_body": {"message": "IPPool(100.100.100.0/24): network within reserved range"},
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                     \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"ipPool overlaps reserved Quad100 range -- SaaS rejects\",\n    \"id\": \"nodeattrs-error-e4-reserved-ippool\",\n    \"options\": {\n        \"expect_api_error\": true\n    },\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"ipPool\": [\n                    \"100.100.100.0/24\"\n                ],\n                \"target\": [\n                    \"autogroup:admin\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-error-e4-reserved-ippool.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"ipPool": ["100.100.100.0/24"], "target": ["autogroup:admin"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1208867656022482,
-				"StableID":   "n5p1CQuVSA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1208867656022482,
-				"Key":        "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-				"DiscoKey":   "discokey:745edce24b78ce63aae97c3bd7e68c22df7cc7ab5839b2bea4de9a742bcc5e6a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53166", "10.65.0.27:53166", "172.17.0.1:53166"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:16:58.374375222Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-			"MachineKey": "mkey:7620e8a8db09493b912601af02cf4a38871b5955fdc9454f8cd689e98d538a18",
-			"Peers": [{
-				"ID":         6815401026984652,
-				"StableID":   "n5VbWd2iDv11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-				"DiscoKey":   "discokey:f808fd45cafbb83d114d276b4eda3eb53cbb10d681085a29bbccab8764064920",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:48661", "10.65.0.27:48661", "172.17.0.1:48661"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:58.903760119Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2365943354742694,
-				"StableID":   "nXM3UZKYUK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-				"DiscoKey":   "discokey:18ecbf6954c481d91098ebce7a65d08c12f86c596df399d9ca6d843075bd033b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53577", "10.65.0.27:53577", "172.17.0.1:53577"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:59.450830111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7471804704064592,
-				"StableID":   "nRfth6ezL121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-				"DiscoKey":   "discokey:e94f5b5396e25129a01344ca2e173021519e7f2a100abe03f0775b032634881c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51632", "10.65.0.27:51632", "172.17.0.1:51632"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:00.000316746Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1500017616983631,
-				"StableID":   "nLF9FKvMiC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-				"DiscoKey":   "discokey:caca66b378d45813a88b6da8a2bbacbfbca677d708cf741ad5ea4647daca5940",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49807", "10.65.0.27:49807", "172.17.0.1:49807"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:00.523135181Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7131275504079096,
-				"StableID":   "nD9cPsWmgx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:598649df2f9b33f0641ce12d644215530b7b38fa3585bd68161939e596a8c822",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41225", "10.65.0.27:41225", "172.17.0.1:41225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:01.05224865Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7409897414588360,
-				"StableID":   "nPxUXXSxrz11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:8af266d16e1e17a9b199e4113b0b6d75d656467ec2762f97fe5903c080a9ae06",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60229", "10.65.0.27:60229", "172.17.0.1:60229"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:01.592690305Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2698901483673030,
-				"StableID":   "n9LBAoZL5N11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-				"KeyExpiry":  "2026-11-03T08:17:02Z",
-				"DiscoKey":   "discokey:6a88b2a975ee22a9a141324e424a397b18532cb47ffab15afcb417d73316fd13",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39150", "10.65.0.27:39150", "172.17.0.1:39150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:02.152065586Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1208867656022482": {
-				"ID":          1208867656022482,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6815401026984652,
-				"StableID":   "n5VbWd2iDv11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       6815401026984652,
-				"Key":        "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-				"DiscoKey":   "discokey:f808fd45cafbb83d114d276b4eda3eb53cbb10d681085a29bbccab8764064920",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:48661", "10.65.0.27:48661", "172.17.0.1:48661"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:16:58.903760119Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-			"MachineKey": "mkey:ecb5ae04ce26fefa0f8524e6bf3cea52840d1f4acc34807783bf10c5f6e87100",
-			"Peers": [{
-				"ID":         1208867656022482,
-				"StableID":   "n5p1CQuVSA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-				"DiscoKey":   "discokey:745edce24b78ce63aae97c3bd7e68c22df7cc7ab5839b2bea4de9a742bcc5e6a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53166", "10.65.0.27:53166", "172.17.0.1:53166"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:58.374375222Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2365943354742694,
-				"StableID":   "nXM3UZKYUK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-				"DiscoKey":   "discokey:18ecbf6954c481d91098ebce7a65d08c12f86c596df399d9ca6d843075bd033b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53577", "10.65.0.27:53577", "172.17.0.1:53577"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:59.450830111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7471804704064592,
-				"StableID":   "nRfth6ezL121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-				"DiscoKey":   "discokey:e94f5b5396e25129a01344ca2e173021519e7f2a100abe03f0775b032634881c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51632", "10.65.0.27:51632", "172.17.0.1:51632"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:00.000316746Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1500017616983631,
-				"StableID":   "nLF9FKvMiC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-				"DiscoKey":   "discokey:caca66b378d45813a88b6da8a2bbacbfbca677d708cf741ad5ea4647daca5940",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49807", "10.65.0.27:49807", "172.17.0.1:49807"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:00.523135181Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7131275504079096,
-				"StableID":   "nD9cPsWmgx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:598649df2f9b33f0641ce12d644215530b7b38fa3585bd68161939e596a8c822",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41225", "10.65.0.27:41225", "172.17.0.1:41225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:01.05224865Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7409897414588360,
-				"StableID":   "nPxUXXSxrz11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:8af266d16e1e17a9b199e4113b0b6d75d656467ec2762f97fe5903c080a9ae06",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60229", "10.65.0.27:60229", "172.17.0.1:60229"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:01.592690305Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2698901483673030,
-				"StableID":   "n9LBAoZL5N11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-				"KeyExpiry":  "2026-11-03T08:17:02Z",
-				"DiscoKey":   "discokey:6a88b2a975ee22a9a141324e424a397b18532cb47ffab15afcb417d73316fd13",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39150", "10.65.0.27:39150", "172.17.0.1:39150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:02.152065586Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6815401026984652": {
-				"ID":          6815401026984652,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7131275504079096,
-				"StableID":   "nD9cPsWmgx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:598649df2f9b33f0641ce12d644215530b7b38fa3585bd68161939e596a8c822",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41225", "10.65.0.27:41225", "172.17.0.1:41225"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:01.05224865Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-			"MachineKey": "mkey:6bacb5da73c458b9d51a2851baeef59be47690330e2c799e20e235eda1047055",
-			"Peers": [{
-				"ID":         1208867656022482,
-				"StableID":   "n5p1CQuVSA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-				"DiscoKey":   "discokey:745edce24b78ce63aae97c3bd7e68c22df7cc7ab5839b2bea4de9a742bcc5e6a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53166", "10.65.0.27:53166", "172.17.0.1:53166"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:58.374375222Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6815401026984652,
-				"StableID":   "n5VbWd2iDv11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-				"DiscoKey":   "discokey:f808fd45cafbb83d114d276b4eda3eb53cbb10d681085a29bbccab8764064920",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:48661", "10.65.0.27:48661", "172.17.0.1:48661"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:58.903760119Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2365943354742694,
-				"StableID":   "nXM3UZKYUK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-				"DiscoKey":   "discokey:18ecbf6954c481d91098ebce7a65d08c12f86c596df399d9ca6d843075bd033b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53577", "10.65.0.27:53577", "172.17.0.1:53577"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:59.450830111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7471804704064592,
-				"StableID":   "nRfth6ezL121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-				"DiscoKey":   "discokey:e94f5b5396e25129a01344ca2e173021519e7f2a100abe03f0775b032634881c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51632", "10.65.0.27:51632", "172.17.0.1:51632"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:00.000316746Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1500017616983631,
-				"StableID":   "nLF9FKvMiC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-				"DiscoKey":   "discokey:caca66b378d45813a88b6da8a2bbacbfbca677d708cf741ad5ea4647daca5940",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49807", "10.65.0.27:49807", "172.17.0.1:49807"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:00.523135181Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7409897414588360,
-				"StableID":   "nPxUXXSxrz11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:8af266d16e1e17a9b199e4113b0b6d75d656467ec2762f97fe5903c080a9ae06",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60229", "10.65.0.27:60229", "172.17.0.1:60229"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:01.592690305Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2698901483673030,
-				"StableID":   "n9LBAoZL5N11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-				"KeyExpiry":  "2026-11-03T08:17:02Z",
-				"DiscoKey":   "discokey:6a88b2a975ee22a9a141324e424a397b18532cb47ffab15afcb417d73316fd13",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39150", "10.65.0.27:39150", "172.17.0.1:39150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:02.152065586Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2365943354742694,
-				"StableID":   "nXM3UZKYUK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       2365943354742694,
-				"Key":        "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-				"DiscoKey":   "discokey:18ecbf6954c481d91098ebce7a65d08c12f86c596df399d9ca6d843075bd033b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53577", "10.65.0.27:53577", "172.17.0.1:53577"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:16:59.450830111Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-			"MachineKey": "mkey:6f4888ac6e98c0caa3a3aa4154f93cc172d49497c67b226ec5752c9fd0ac9b1d",
-			"Peers": [{
-				"ID":         1208867656022482,
-				"StableID":   "n5p1CQuVSA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-				"DiscoKey":   "discokey:745edce24b78ce63aae97c3bd7e68c22df7cc7ab5839b2bea4de9a742bcc5e6a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53166", "10.65.0.27:53166", "172.17.0.1:53166"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:58.374375222Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6815401026984652,
-				"StableID":   "n5VbWd2iDv11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-				"DiscoKey":   "discokey:f808fd45cafbb83d114d276b4eda3eb53cbb10d681085a29bbccab8764064920",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:48661", "10.65.0.27:48661", "172.17.0.1:48661"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:58.903760119Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7471804704064592,
-				"StableID":   "nRfth6ezL121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-				"DiscoKey":   "discokey:e94f5b5396e25129a01344ca2e173021519e7f2a100abe03f0775b032634881c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51632", "10.65.0.27:51632", "172.17.0.1:51632"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:00.000316746Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1500017616983631,
-				"StableID":   "nLF9FKvMiC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-				"DiscoKey":   "discokey:caca66b378d45813a88b6da8a2bbacbfbca677d708cf741ad5ea4647daca5940",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49807", "10.65.0.27:49807", "172.17.0.1:49807"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:00.523135181Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7131275504079096,
-				"StableID":   "nD9cPsWmgx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:598649df2f9b33f0641ce12d644215530b7b38fa3585bd68161939e596a8c822",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41225", "10.65.0.27:41225", "172.17.0.1:41225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:01.05224865Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7409897414588360,
-				"StableID":   "nPxUXXSxrz11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:8af266d16e1e17a9b199e4113b0b6d75d656467ec2762f97fe5903c080a9ae06",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60229", "10.65.0.27:60229", "172.17.0.1:60229"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:01.592690305Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2698901483673030,
-				"StableID":   "n9LBAoZL5N11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-				"KeyExpiry":  "2026-11-03T08:17:02Z",
-				"DiscoKey":   "discokey:6a88b2a975ee22a9a141324e424a397b18532cb47ffab15afcb417d73316fd13",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39150", "10.65.0.27:39150", "172.17.0.1:39150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:02.152065586Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2365943354742694": {
-				"ID":          2365943354742694,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7471804704064592,
-				"StableID":   "nRfth6ezL121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       7471804704064592,
-				"Key":        "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-				"DiscoKey":   "discokey:e94f5b5396e25129a01344ca2e173021519e7f2a100abe03f0775b032634881c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51632", "10.65.0.27:51632", "172.17.0.1:51632"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:17:00.000316746Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-			"MachineKey": "mkey:57a0c3ead43ba9046123a210f16ea25ba3b67dcd75568a680a7fc554528ebd08",
-			"Peers": [{
-				"ID":         1208867656022482,
-				"StableID":   "n5p1CQuVSA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-				"DiscoKey":   "discokey:745edce24b78ce63aae97c3bd7e68c22df7cc7ab5839b2bea4de9a742bcc5e6a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53166", "10.65.0.27:53166", "172.17.0.1:53166"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:58.374375222Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6815401026984652,
-				"StableID":   "n5VbWd2iDv11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-				"DiscoKey":   "discokey:f808fd45cafbb83d114d276b4eda3eb53cbb10d681085a29bbccab8764064920",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:48661", "10.65.0.27:48661", "172.17.0.1:48661"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:58.903760119Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2365943354742694,
-				"StableID":   "nXM3UZKYUK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-				"DiscoKey":   "discokey:18ecbf6954c481d91098ebce7a65d08c12f86c596df399d9ca6d843075bd033b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53577", "10.65.0.27:53577", "172.17.0.1:53577"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:59.450830111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1500017616983631,
-				"StableID":   "nLF9FKvMiC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-				"DiscoKey":   "discokey:caca66b378d45813a88b6da8a2bbacbfbca677d708cf741ad5ea4647daca5940",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49807", "10.65.0.27:49807", "172.17.0.1:49807"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:00.523135181Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7131275504079096,
-				"StableID":   "nD9cPsWmgx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:598649df2f9b33f0641ce12d644215530b7b38fa3585bd68161939e596a8c822",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41225", "10.65.0.27:41225", "172.17.0.1:41225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:01.05224865Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7409897414588360,
-				"StableID":   "nPxUXXSxrz11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:8af266d16e1e17a9b199e4113b0b6d75d656467ec2762f97fe5903c080a9ae06",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60229", "10.65.0.27:60229", "172.17.0.1:60229"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:01.592690305Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2698901483673030,
-				"StableID":   "n9LBAoZL5N11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-				"KeyExpiry":  "2026-11-03T08:17:02Z",
-				"DiscoKey":   "discokey:6a88b2a975ee22a9a141324e424a397b18532cb47ffab15afcb417d73316fd13",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39150", "10.65.0.27:39150", "172.17.0.1:39150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:02.152065586Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7471804704064592": {
-				"ID":          7471804704064592,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1500017616983631,
-				"StableID":   "nLF9FKvMiC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1500017616983631,
-				"Key":        "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-				"DiscoKey":   "discokey:caca66b378d45813a88b6da8a2bbacbfbca677d708cf741ad5ea4647daca5940",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49807", "10.65.0.27:49807", "172.17.0.1:49807"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:00.523135181Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-			"MachineKey": "mkey:d10ba061a5600b1391acb5286a6ae9ae7ab0476fe3da9b85a1399a2dd22c3f35",
-			"Peers": [{
-				"ID":         1208867656022482,
-				"StableID":   "n5p1CQuVSA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-				"DiscoKey":   "discokey:745edce24b78ce63aae97c3bd7e68c22df7cc7ab5839b2bea4de9a742bcc5e6a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53166", "10.65.0.27:53166", "172.17.0.1:53166"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:58.374375222Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6815401026984652,
-				"StableID":   "n5VbWd2iDv11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-				"DiscoKey":   "discokey:f808fd45cafbb83d114d276b4eda3eb53cbb10d681085a29bbccab8764064920",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:48661", "10.65.0.27:48661", "172.17.0.1:48661"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:58.903760119Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2365943354742694,
-				"StableID":   "nXM3UZKYUK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-				"DiscoKey":   "discokey:18ecbf6954c481d91098ebce7a65d08c12f86c596df399d9ca6d843075bd033b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53577", "10.65.0.27:53577", "172.17.0.1:53577"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:59.450830111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7471804704064592,
-				"StableID":   "nRfth6ezL121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-				"DiscoKey":   "discokey:e94f5b5396e25129a01344ca2e173021519e7f2a100abe03f0775b032634881c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51632", "10.65.0.27:51632", "172.17.0.1:51632"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:00.000316746Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7131275504079096,
-				"StableID":   "nD9cPsWmgx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:598649df2f9b33f0641ce12d644215530b7b38fa3585bd68161939e596a8c822",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41225", "10.65.0.27:41225", "172.17.0.1:41225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:01.05224865Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7409897414588360,
-				"StableID":   "nPxUXXSxrz11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:8af266d16e1e17a9b199e4113b0b6d75d656467ec2762f97fe5903c080a9ae06",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60229", "10.65.0.27:60229", "172.17.0.1:60229"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:01.592690305Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2698901483673030,
-				"StableID":   "n9LBAoZL5N11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-				"KeyExpiry":  "2026-11-03T08:17:02Z",
-				"DiscoKey":   "discokey:6a88b2a975ee22a9a141324e424a397b18532cb47ffab15afcb417d73316fd13",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39150", "10.65.0.27:39150", "172.17.0.1:39150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:02.152065586Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1500017616983631": {
-				"ID":          1500017616983631,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2698901483673030,
-				"StableID":   "n9LBAoZL5N11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-				"KeyExpiry":  "2026-11-03T08:17:02Z",
-				"DiscoKey":   "discokey:6a88b2a975ee22a9a141324e424a397b18532cb47ffab15afcb417d73316fd13",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39150", "10.65.0.27:39150", "172.17.0.1:39150"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:02.152065586Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-			"MachineKey": "mkey:01c79d55b296c8970aaf476076b824c87765a8660beacf38b814a18447b56857",
-			"Peers": [{
-				"ID":         1208867656022482,
-				"StableID":   "n5p1CQuVSA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-				"DiscoKey":   "discokey:745edce24b78ce63aae97c3bd7e68c22df7cc7ab5839b2bea4de9a742bcc5e6a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53166", "10.65.0.27:53166", "172.17.0.1:53166"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:58.374375222Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6815401026984652,
-				"StableID":   "n5VbWd2iDv11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-				"DiscoKey":   "discokey:f808fd45cafbb83d114d276b4eda3eb53cbb10d681085a29bbccab8764064920",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:48661", "10.65.0.27:48661", "172.17.0.1:48661"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:58.903760119Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2365943354742694,
-				"StableID":   "nXM3UZKYUK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-				"DiscoKey":   "discokey:18ecbf6954c481d91098ebce7a65d08c12f86c596df399d9ca6d843075bd033b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53577", "10.65.0.27:53577", "172.17.0.1:53577"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:59.450830111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7471804704064592,
-				"StableID":   "nRfth6ezL121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-				"DiscoKey":   "discokey:e94f5b5396e25129a01344ca2e173021519e7f2a100abe03f0775b032634881c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51632", "10.65.0.27:51632", "172.17.0.1:51632"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:00.000316746Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1500017616983631,
-				"StableID":   "nLF9FKvMiC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-				"DiscoKey":   "discokey:caca66b378d45813a88b6da8a2bbacbfbca677d708cf741ad5ea4647daca5940",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49807", "10.65.0.27:49807", "172.17.0.1:49807"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:00.523135181Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7131275504079096,
-				"StableID":   "nD9cPsWmgx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:598649df2f9b33f0641ce12d644215530b7b38fa3585bd68161939e596a8c822",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41225", "10.65.0.27:41225", "172.17.0.1:41225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:01.05224865Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7409897414588360,
-				"StableID":   "nPxUXXSxrz11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:8af266d16e1e17a9b199e4113b0b6d75d656467ec2762f97fe5903c080a9ae06",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60229", "10.65.0.27:60229", "172.17.0.1:60229"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:01.592690305Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7409897414588360,
-				"StableID":   "nPxUXXSxrz11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:8af266d16e1e17a9b199e4113b0b6d75d656467ec2762f97fe5903c080a9ae06",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60229", "10.65.0.27:60229", "172.17.0.1:60229"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:01.592690305Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8d0214d70c83cf4232f2452d5be7d173dab600d405f4d877de3e8d8fd9b2b47a",
-			"MachineKey": "mkey:3852d1ee4b725c2820a8aef86c85108f5fdbb640ddcc69c7b3e3f4404be77d5f",
-			"Peers": [{
-				"ID":         1208867656022482,
-				"StableID":   "n5p1CQuVSA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:002aced4d2bc4cc7fb1c1003910f61a39075b4b2cf5d35594cfdbd079e55520d",
-				"DiscoKey":   "discokey:745edce24b78ce63aae97c3bd7e68c22df7cc7ab5839b2bea4de9a742bcc5e6a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53166", "10.65.0.27:53166", "172.17.0.1:53166"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:16:58.374375222Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6815401026984652,
-				"StableID":   "n5VbWd2iDv11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:43ff015670f9605401fe5d273481fcb311ea93835c8e1ca590d8759642bf6418",
-				"DiscoKey":   "discokey:f808fd45cafbb83d114d276b4eda3eb53cbb10d681085a29bbccab8764064920",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:48661", "10.65.0.27:48661", "172.17.0.1:48661"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:16:58.903760119Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2365943354742694,
-				"StableID":   "nXM3UZKYUK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0f9607186cb58646e9eaae203a7f1e6e9a9d2cd51f411576652baf117bacb037",
-				"DiscoKey":   "discokey:18ecbf6954c481d91098ebce7a65d08c12f86c596df399d9ca6d843075bd033b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53577", "10.65.0.27:53577", "172.17.0.1:53577"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:16:59.450830111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7471804704064592,
-				"StableID":   "nRfth6ezL121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fbb098fa7c2a36dba6df2d9c78faed20f459ad3fa883f5f89e2cdcab24106c63",
-				"DiscoKey":   "discokey:e94f5b5396e25129a01344ca2e173021519e7f2a100abe03f0775b032634881c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51632", "10.65.0.27:51632", "172.17.0.1:51632"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:00.000316746Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1500017616983631,
-				"StableID":   "nLF9FKvMiC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:96a0f0516b7ce99565d9fe467a6269c92c45b98421cf9bdc803a1407b281820c",
-				"DiscoKey":   "discokey:caca66b378d45813a88b6da8a2bbacbfbca677d708cf741ad5ea4647daca5940",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49807", "10.65.0.27:49807", "172.17.0.1:49807"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:00.523135181Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7131275504079096,
-				"StableID":   "nD9cPsWmgx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6731b443461f58e31c374e0528ff29b8de6b600810c927ac734c034994997255",
-				"KeyExpiry":  "2026-11-03T08:17:01Z",
-				"DiscoKey":   "discokey:598649df2f9b33f0641ce12d644215530b7b38fa3585bd68161939e596a8c822",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41225", "10.65.0.27:41225", "172.17.0.1:41225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:01.05224865Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         2698901483673030,
-				"StableID":   "n9LBAoZL5N11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:da4deb2af6062811b289f9490caa7adb9d0e89310e34e606ce4fabeeea870607",
-				"KeyExpiry":  "2026-11-03T08:17:02Z",
-				"DiscoKey":   "discokey:6a88b2a975ee22a9a141324e424a397b18532cb47ffab15afcb417d73316fd13",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39150", "10.65.0.27:39150", "172.17.0.1:39150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:02.152065586Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e5-empty-target-array.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e5-empty-target-array.hujson
deleted file mode 100644
index 08bfcf622..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e5-empty-target-array.hujson
+++ /dev/null
@@ -1,8821 +0,0 @@
-// nodeattrs-error-e5-empty-target-array
-//
-// target: [] -- empty target array
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:17:24Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-error-e5-empty-target-array",
-	"description":    "target: [] -- empty target array",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:17:24.04099414Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                        \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"target: [] -- empty target array\",\n    \"id\": \"nodeattrs-error-e5-empty-target-array\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": []\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-error-e5-empty-target-array.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": []}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7343278277502242,
-				"StableID":   "nm8TWAUnLz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       7343278277502242,
-				"Key":        "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-				"DiscoKey":   "discokey:6746a34f18a7e172cf22e6b49abe3706e60ecf5f8f9dcc119a63e93a94b50731",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:32812", "10.65.0.27:32812", "172.17.0.1:32812"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:29.689211347Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-			"MachineKey": "mkey:0913c1503790c38738c4e342a1e36e9c532d6b24b88af9c4c6fd4d89cb899c5c",
-			"Peers": [{
-				"ID":         5418875717363796,
-				"StableID":   "n9MN5EgDKj11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-				"DiscoKey":   "discokey:b48c80d54c45e9a0f605d9a06ebbe791f18589b52faff1ff967582c91ffcc35a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41498", "10.65.0.27:41498", "172.17.0.1:41498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:17:30.2256768Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2334575128189720,
-				"StableID":   "nskfh8LLEK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-				"DiscoKey":   "discokey:8b3f402c8c3fb47ccf00e855c3864939e4e0fd616ca88676af843673ac8e002a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39251", "10.65.0.27:39251", "172.17.0.1:39251"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:17:30.770543526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7475590247997013,
-				"StableID":   "nGQ3Gc5iN121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-				"DiscoKey":   "discokey:c3609de52a5d618c7fe5f61d0b8b24f2e9e67c11d249ae530be1d76f3b42a94f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56365", "10.65.0.27:56365", "172.17.0.1:56365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:31.313544026Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6022496813288201,
-				"StableID":   "nrVVKBnb2p11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-				"DiscoKey":   "discokey:625b4f923d008eebe271d7c6b57c6cf3d940747d9e49484de289241073b4561b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52023", "10.65.0.27:52023", "172.17.0.1:52023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:31.848599305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8105798483265913,
-				"StableID":   "nQesxha8J621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:8998d75600b89bcef0f1fd27b5fc0a2919010bd57bbf150f745a81c154ed6133",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33178", "10.65.0.27:33178", "172.17.0.1:33178"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:32.383638733Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5250334691142448,
-				"StableID":   "n7vKjaPtzh11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:cbd56a5b224d24d8124b595ab69ac6cc03ad67f3a1297f00fa1d3e00f273360a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48619", "10.65.0.27:48619", "172.17.0.1:48619"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:32.925538029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         878701255800308,
-				"StableID":   "nTQE1Yzxr711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-				"KeyExpiry":  "2026-11-03T08:17:33Z",
-				"DiscoKey":   "discokey:dbaa8e99d761b7dc99f1ddbf20dad18f2fb8137ff832555643b55eb9b94cb836",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58842", "10.65.0.27:58842", "172.17.0.1:58842"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:33.468149708Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7343278277502242": {
-				"ID":          7343278277502242,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5418875717363796,
-				"StableID":   "n9MN5EgDKj11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       5418875717363796,
-				"Key":        "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-				"DiscoKey":   "discokey:b48c80d54c45e9a0f605d9a06ebbe791f18589b52faff1ff967582c91ffcc35a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41498", "10.65.0.27:41498", "172.17.0.1:41498"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:17:30.2256768Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-			"MachineKey": "mkey:52caef8425c9d997f04fca9ea659fe2c61fc04d568f4139292863fc092d30554",
-			"Peers": [{
-				"ID":         7343278277502242,
-				"StableID":   "nm8TWAUnLz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-				"DiscoKey":   "discokey:6746a34f18a7e172cf22e6b49abe3706e60ecf5f8f9dcc119a63e93a94b50731",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:32812", "10.65.0.27:32812", "172.17.0.1:32812"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:17:29.689211347Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2334575128189720,
-				"StableID":   "nskfh8LLEK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-				"DiscoKey":   "discokey:8b3f402c8c3fb47ccf00e855c3864939e4e0fd616ca88676af843673ac8e002a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39251", "10.65.0.27:39251", "172.17.0.1:39251"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:17:30.770543526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7475590247997013,
-				"StableID":   "nGQ3Gc5iN121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-				"DiscoKey":   "discokey:c3609de52a5d618c7fe5f61d0b8b24f2e9e67c11d249ae530be1d76f3b42a94f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56365", "10.65.0.27:56365", "172.17.0.1:56365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:31.313544026Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6022496813288201,
-				"StableID":   "nrVVKBnb2p11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-				"DiscoKey":   "discokey:625b4f923d008eebe271d7c6b57c6cf3d940747d9e49484de289241073b4561b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52023", "10.65.0.27:52023", "172.17.0.1:52023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:31.848599305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8105798483265913,
-				"StableID":   "nQesxha8J621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:8998d75600b89bcef0f1fd27b5fc0a2919010bd57bbf150f745a81c154ed6133",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33178", "10.65.0.27:33178", "172.17.0.1:33178"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:32.383638733Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5250334691142448,
-				"StableID":   "n7vKjaPtzh11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:cbd56a5b224d24d8124b595ab69ac6cc03ad67f3a1297f00fa1d3e00f273360a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48619", "10.65.0.27:48619", "172.17.0.1:48619"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:32.925538029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         878701255800308,
-				"StableID":   "nTQE1Yzxr711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-				"KeyExpiry":  "2026-11-03T08:17:33Z",
-				"DiscoKey":   "discokey:dbaa8e99d761b7dc99f1ddbf20dad18f2fb8137ff832555643b55eb9b94cb836",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58842", "10.65.0.27:58842", "172.17.0.1:58842"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:33.468149708Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5418875717363796": {
-				"ID":          5418875717363796,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8105798483265913,
-				"StableID":   "nQesxha8J621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:8998d75600b89bcef0f1fd27b5fc0a2919010bd57bbf150f745a81c154ed6133",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33178", "10.65.0.27:33178", "172.17.0.1:33178"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:32.383638733Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-			"MachineKey": "mkey:86228c9b133bb2f249d5db95e1de0b0fbec281218a847779ce59a21a7cd39a01",
-			"Peers": [{
-				"ID":         7343278277502242,
-				"StableID":   "nm8TWAUnLz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-				"DiscoKey":   "discokey:6746a34f18a7e172cf22e6b49abe3706e60ecf5f8f9dcc119a63e93a94b50731",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:32812", "10.65.0.27:32812", "172.17.0.1:32812"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:17:29.689211347Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5418875717363796,
-				"StableID":   "n9MN5EgDKj11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-				"DiscoKey":   "discokey:b48c80d54c45e9a0f605d9a06ebbe791f18589b52faff1ff967582c91ffcc35a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41498", "10.65.0.27:41498", "172.17.0.1:41498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:17:30.2256768Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2334575128189720,
-				"StableID":   "nskfh8LLEK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-				"DiscoKey":   "discokey:8b3f402c8c3fb47ccf00e855c3864939e4e0fd616ca88676af843673ac8e002a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39251", "10.65.0.27:39251", "172.17.0.1:39251"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:17:30.770543526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7475590247997013,
-				"StableID":   "nGQ3Gc5iN121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-				"DiscoKey":   "discokey:c3609de52a5d618c7fe5f61d0b8b24f2e9e67c11d249ae530be1d76f3b42a94f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56365", "10.65.0.27:56365", "172.17.0.1:56365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:31.313544026Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6022496813288201,
-				"StableID":   "nrVVKBnb2p11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-				"DiscoKey":   "discokey:625b4f923d008eebe271d7c6b57c6cf3d940747d9e49484de289241073b4561b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52023", "10.65.0.27:52023", "172.17.0.1:52023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:31.848599305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5250334691142448,
-				"StableID":   "n7vKjaPtzh11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:cbd56a5b224d24d8124b595ab69ac6cc03ad67f3a1297f00fa1d3e00f273360a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48619", "10.65.0.27:48619", "172.17.0.1:48619"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:32.925538029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         878701255800308,
-				"StableID":   "nTQE1Yzxr711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-				"KeyExpiry":  "2026-11-03T08:17:33Z",
-				"DiscoKey":   "discokey:dbaa8e99d761b7dc99f1ddbf20dad18f2fb8137ff832555643b55eb9b94cb836",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58842", "10.65.0.27:58842", "172.17.0.1:58842"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:33.468149708Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2334575128189720,
-				"StableID":   "nskfh8LLEK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       2334575128189720,
-				"Key":        "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-				"DiscoKey":   "discokey:8b3f402c8c3fb47ccf00e855c3864939e4e0fd616ca88676af843673ac8e002a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39251", "10.65.0.27:39251", "172.17.0.1:39251"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:30.770543526Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-			"MachineKey": "mkey:4d31897db9783c1f4ceae4534516decabb241499121f1bab83a81ff9f1789853",
-			"Peers": [{
-				"ID":         7343278277502242,
-				"StableID":   "nm8TWAUnLz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-				"DiscoKey":   "discokey:6746a34f18a7e172cf22e6b49abe3706e60ecf5f8f9dcc119a63e93a94b50731",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:32812", "10.65.0.27:32812", "172.17.0.1:32812"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:17:29.689211347Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5418875717363796,
-				"StableID":   "n9MN5EgDKj11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-				"DiscoKey":   "discokey:b48c80d54c45e9a0f605d9a06ebbe791f18589b52faff1ff967582c91ffcc35a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41498", "10.65.0.27:41498", "172.17.0.1:41498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:17:30.2256768Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7475590247997013,
-				"StableID":   "nGQ3Gc5iN121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-				"DiscoKey":   "discokey:c3609de52a5d618c7fe5f61d0b8b24f2e9e67c11d249ae530be1d76f3b42a94f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56365", "10.65.0.27:56365", "172.17.0.1:56365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:31.313544026Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6022496813288201,
-				"StableID":   "nrVVKBnb2p11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-				"DiscoKey":   "discokey:625b4f923d008eebe271d7c6b57c6cf3d940747d9e49484de289241073b4561b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52023", "10.65.0.27:52023", "172.17.0.1:52023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:31.848599305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8105798483265913,
-				"StableID":   "nQesxha8J621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:8998d75600b89bcef0f1fd27b5fc0a2919010bd57bbf150f745a81c154ed6133",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33178", "10.65.0.27:33178", "172.17.0.1:33178"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:32.383638733Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5250334691142448,
-				"StableID":   "n7vKjaPtzh11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:cbd56a5b224d24d8124b595ab69ac6cc03ad67f3a1297f00fa1d3e00f273360a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48619", "10.65.0.27:48619", "172.17.0.1:48619"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:32.925538029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         878701255800308,
-				"StableID":   "nTQE1Yzxr711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-				"KeyExpiry":  "2026-11-03T08:17:33Z",
-				"DiscoKey":   "discokey:dbaa8e99d761b7dc99f1ddbf20dad18f2fb8137ff832555643b55eb9b94cb836",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58842", "10.65.0.27:58842", "172.17.0.1:58842"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:33.468149708Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2334575128189720": {
-				"ID":          2334575128189720,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7475590247997013,
-				"StableID":   "nGQ3Gc5iN121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       7475590247997013,
-				"Key":        "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-				"DiscoKey":   "discokey:c3609de52a5d618c7fe5f61d0b8b24f2e9e67c11d249ae530be1d76f3b42a94f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56365", "10.65.0.27:56365", "172.17.0.1:56365"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:17:31.313544026Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-			"MachineKey": "mkey:5dc6621dcbeb4b75574df45661f9a5ccd0fc6bbab398c678238ce18f81da6e4d",
-			"Peers": [{
-				"ID":         7343278277502242,
-				"StableID":   "nm8TWAUnLz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-				"DiscoKey":   "discokey:6746a34f18a7e172cf22e6b49abe3706e60ecf5f8f9dcc119a63e93a94b50731",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:32812", "10.65.0.27:32812", "172.17.0.1:32812"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:17:29.689211347Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5418875717363796,
-				"StableID":   "n9MN5EgDKj11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-				"DiscoKey":   "discokey:b48c80d54c45e9a0f605d9a06ebbe791f18589b52faff1ff967582c91ffcc35a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41498", "10.65.0.27:41498", "172.17.0.1:41498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:17:30.2256768Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2334575128189720,
-				"StableID":   "nskfh8LLEK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-				"DiscoKey":   "discokey:8b3f402c8c3fb47ccf00e855c3864939e4e0fd616ca88676af843673ac8e002a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39251", "10.65.0.27:39251", "172.17.0.1:39251"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:17:30.770543526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6022496813288201,
-				"StableID":   "nrVVKBnb2p11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-				"DiscoKey":   "discokey:625b4f923d008eebe271d7c6b57c6cf3d940747d9e49484de289241073b4561b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52023", "10.65.0.27:52023", "172.17.0.1:52023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:31.848599305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8105798483265913,
-				"StableID":   "nQesxha8J621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:8998d75600b89bcef0f1fd27b5fc0a2919010bd57bbf150f745a81c154ed6133",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33178", "10.65.0.27:33178", "172.17.0.1:33178"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:32.383638733Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5250334691142448,
-				"StableID":   "n7vKjaPtzh11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:cbd56a5b224d24d8124b595ab69ac6cc03ad67f3a1297f00fa1d3e00f273360a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48619", "10.65.0.27:48619", "172.17.0.1:48619"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:32.925538029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         878701255800308,
-				"StableID":   "nTQE1Yzxr711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-				"KeyExpiry":  "2026-11-03T08:17:33Z",
-				"DiscoKey":   "discokey:dbaa8e99d761b7dc99f1ddbf20dad18f2fb8137ff832555643b55eb9b94cb836",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58842", "10.65.0.27:58842", "172.17.0.1:58842"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:33.468149708Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7475590247997013": {
-				"ID":          7475590247997013,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6022496813288201,
-				"StableID":   "nrVVKBnb2p11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       6022496813288201,
-				"Key":        "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-				"DiscoKey":   "discokey:625b4f923d008eebe271d7c6b57c6cf3d940747d9e49484de289241073b4561b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52023", "10.65.0.27:52023", "172.17.0.1:52023"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:31.848599305Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-			"MachineKey": "mkey:e61697db76b4c37f167c5f51f084c42f3d27574b97fdc5af5fe97c4f15f7dd52",
-			"Peers": [{
-				"ID":         7343278277502242,
-				"StableID":   "nm8TWAUnLz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-				"DiscoKey":   "discokey:6746a34f18a7e172cf22e6b49abe3706e60ecf5f8f9dcc119a63e93a94b50731",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:32812", "10.65.0.27:32812", "172.17.0.1:32812"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:17:29.689211347Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5418875717363796,
-				"StableID":   "n9MN5EgDKj11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-				"DiscoKey":   "discokey:b48c80d54c45e9a0f605d9a06ebbe791f18589b52faff1ff967582c91ffcc35a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41498", "10.65.0.27:41498", "172.17.0.1:41498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:17:30.2256768Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2334575128189720,
-				"StableID":   "nskfh8LLEK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-				"DiscoKey":   "discokey:8b3f402c8c3fb47ccf00e855c3864939e4e0fd616ca88676af843673ac8e002a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39251", "10.65.0.27:39251", "172.17.0.1:39251"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:17:30.770543526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7475590247997013,
-				"StableID":   "nGQ3Gc5iN121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-				"DiscoKey":   "discokey:c3609de52a5d618c7fe5f61d0b8b24f2e9e67c11d249ae530be1d76f3b42a94f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56365", "10.65.0.27:56365", "172.17.0.1:56365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:31.313544026Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8105798483265913,
-				"StableID":   "nQesxha8J621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:8998d75600b89bcef0f1fd27b5fc0a2919010bd57bbf150f745a81c154ed6133",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33178", "10.65.0.27:33178", "172.17.0.1:33178"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:32.383638733Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5250334691142448,
-				"StableID":   "n7vKjaPtzh11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:cbd56a5b224d24d8124b595ab69ac6cc03ad67f3a1297f00fa1d3e00f273360a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48619", "10.65.0.27:48619", "172.17.0.1:48619"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:32.925538029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         878701255800308,
-				"StableID":   "nTQE1Yzxr711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-				"KeyExpiry":  "2026-11-03T08:17:33Z",
-				"DiscoKey":   "discokey:dbaa8e99d761b7dc99f1ddbf20dad18f2fb8137ff832555643b55eb9b94cb836",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58842", "10.65.0.27:58842", "172.17.0.1:58842"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:33.468149708Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6022496813288201": {
-				"ID":          6022496813288201,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         878701255800308,
-				"StableID":   "nTQE1Yzxr711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-				"KeyExpiry":  "2026-11-03T08:17:33Z",
-				"DiscoKey":   "discokey:dbaa8e99d761b7dc99f1ddbf20dad18f2fb8137ff832555643b55eb9b94cb836",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58842", "10.65.0.27:58842", "172.17.0.1:58842"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:33.468149708Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-			"MachineKey": "mkey:8309aa4a3fbf5b827ae2a61e209e2784f0ff610648297df267a6a2f7e526734e",
-			"Peers": [{
-				"ID":         7343278277502242,
-				"StableID":   "nm8TWAUnLz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-				"DiscoKey":   "discokey:6746a34f18a7e172cf22e6b49abe3706e60ecf5f8f9dcc119a63e93a94b50731",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:32812", "10.65.0.27:32812", "172.17.0.1:32812"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:17:29.689211347Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5418875717363796,
-				"StableID":   "n9MN5EgDKj11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-				"DiscoKey":   "discokey:b48c80d54c45e9a0f605d9a06ebbe791f18589b52faff1ff967582c91ffcc35a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41498", "10.65.0.27:41498", "172.17.0.1:41498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:17:30.2256768Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2334575128189720,
-				"StableID":   "nskfh8LLEK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-				"DiscoKey":   "discokey:8b3f402c8c3fb47ccf00e855c3864939e4e0fd616ca88676af843673ac8e002a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39251", "10.65.0.27:39251", "172.17.0.1:39251"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:17:30.770543526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7475590247997013,
-				"StableID":   "nGQ3Gc5iN121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-				"DiscoKey":   "discokey:c3609de52a5d618c7fe5f61d0b8b24f2e9e67c11d249ae530be1d76f3b42a94f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56365", "10.65.0.27:56365", "172.17.0.1:56365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:31.313544026Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6022496813288201,
-				"StableID":   "nrVVKBnb2p11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-				"DiscoKey":   "discokey:625b4f923d008eebe271d7c6b57c6cf3d940747d9e49484de289241073b4561b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52023", "10.65.0.27:52023", "172.17.0.1:52023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:31.848599305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8105798483265913,
-				"StableID":   "nQesxha8J621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:8998d75600b89bcef0f1fd27b5fc0a2919010bd57bbf150f745a81c154ed6133",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33178", "10.65.0.27:33178", "172.17.0.1:33178"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:32.383638733Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5250334691142448,
-				"StableID":   "n7vKjaPtzh11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:cbd56a5b224d24d8124b595ab69ac6cc03ad67f3a1297f00fa1d3e00f273360a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48619", "10.65.0.27:48619", "172.17.0.1:48619"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:17:32.925538029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5250334691142448,
-				"StableID":   "n7vKjaPtzh11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:cbd56a5b224d24d8124b595ab69ac6cc03ad67f3a1297f00fa1d3e00f273360a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48619", "10.65.0.27:48619", "172.17.0.1:48619"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:17:32.925538029Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:87b218db3b542733add817dd5d6f79cbd373cf74fb9038c4043ea6d346cd2a7f",
-			"MachineKey": "mkey:a8a4f00705d257fe0b16f93b9c8ab6cb6bf05ce0565b16e0aa99385c68d4851c",
-			"Peers": [{
-				"ID":         7343278277502242,
-				"StableID":   "nm8TWAUnLz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1522702f908710a63fe518d66a54c49dd80ac7827f302aa13b576b7b8f6b5148",
-				"DiscoKey":   "discokey:6746a34f18a7e172cf22e6b49abe3706e60ecf5f8f9dcc119a63e93a94b50731",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:32812", "10.65.0.27:32812", "172.17.0.1:32812"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:17:29.689211347Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5418875717363796,
-				"StableID":   "n9MN5EgDKj11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4fdf7f84d73af221ba7ae6c41fee272f5e635318a1e05b66cf8bcb84c703fd72",
-				"DiscoKey":   "discokey:b48c80d54c45e9a0f605d9a06ebbe791f18589b52faff1ff967582c91ffcc35a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41498", "10.65.0.27:41498", "172.17.0.1:41498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:17:30.2256768Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2334575128189720,
-				"StableID":   "nskfh8LLEK11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:30b955d6556bef34a056d15afc033c66c53c4989a4279a096120bb2060031846",
-				"DiscoKey":   "discokey:8b3f402c8c3fb47ccf00e855c3864939e4e0fd616ca88676af843673ac8e002a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39251", "10.65.0.27:39251", "172.17.0.1:39251"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:17:30.770543526Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7475590247997013,
-				"StableID":   "nGQ3Gc5iN121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:539330f4442e5b347cd365bd617325fee2534b0044bf8b48ccc428c27797a417",
-				"DiscoKey":   "discokey:c3609de52a5d618c7fe5f61d0b8b24f2e9e67c11d249ae530be1d76f3b42a94f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56365", "10.65.0.27:56365", "172.17.0.1:56365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:17:31.313544026Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6022496813288201,
-				"StableID":   "nrVVKBnb2p11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:aa499956525c53eca9957d664ea8066779878d56b5e5a98789a0b18445a14f3d",
-				"DiscoKey":   "discokey:625b4f923d008eebe271d7c6b57c6cf3d940747d9e49484de289241073b4561b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52023", "10.65.0.27:52023", "172.17.0.1:52023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:17:31.848599305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8105798483265913,
-				"StableID":   "nQesxha8J621CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:dea176d7a377fafa30bf3905ec19de7c25bf561971cd4b6fd687847d5b13c124",
-				"KeyExpiry":  "2026-11-03T08:17:32Z",
-				"DiscoKey":   "discokey:8998d75600b89bcef0f1fd27b5fc0a2919010bd57bbf150f745a81c154ed6133",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33178", "10.65.0.27:33178", "172.17.0.1:33178"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:17:32.383638733Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         878701255800308,
-				"StableID":   "nTQE1Yzxr711CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:c4a2ad48bf16403376b0819cf5c2eeca22cdd5a1713360c47a1e78b3bea9991f",
-				"KeyExpiry":  "2026-11-03T08:17:33Z",
-				"DiscoKey":   "discokey:dbaa8e99d761b7dc99f1ddbf20dad18f2fb8137ff832555643b55eb9b94cb836",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58842", "10.65.0.27:58842", "172.17.0.1:58842"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:17:33.468149708Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e6-tag-not-defined.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e6-tag-not-defined.hujson
deleted file mode 100644
index 4c7e664ed..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e6-tag-not-defined.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-error-e6-tag-not-defined
-//
-// target references undefined tag
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-06T15:40:49Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-error-e6-tag-not-defined",
-	"description":    "target references undefined tag",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-06T15:40:49.466810554Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"error":          true,
-	"input": {
-		"api_response_code": 400,
-		"api_response_body": {"message": "tag not found: \"tag:undefined-tag\""},
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                     \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"target references undefined tag\",\n    \"id\": \"nodeattrs-error-e6-tag-not-defined\",\n    \"options\": {\n        \"expect_api_error\": true\n    },\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"funnel\"\n                ],\n                \"target\": [\n                    \"tag:undefined-tag\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-error-e6-tag-not-defined.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["funnel"], "target": ["tag:undefined-tag"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4830435904802942,
-				"StableID":   "nFDhrtMiie11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       4830435904802942,
-				"Key":        "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-				"DiscoKey":   "discokey:bdbfaeb791d68d1b79bfc6ebbdea10390749203c87085dd13bb8e80813d07311",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43486", "10.65.0.27:43486", "172.17.0.1:43486"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-06T15:40:51.008534293Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-			"MachineKey": "mkey:cf486c4b2e4aa603b7dfd26179b68af9e226da7470011478a626add11e21457c",
-			"Peers": [{
-				"ID":         7980747859636263,
-				"StableID":   "nSrzZNiVK521CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-				"DiscoKey":   "discokey:c7ddb4a844aa892a1ecf48b617c151210e0ab9e4fb152c7df636febd5daf2776",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51523", "10.65.0.27:51523", "172.17.0.1:51523"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-06T15:40:51.517481582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8410941347036547,
-				"StableID":   "nnvUvfALg821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-				"DiscoKey":   "discokey:6a8600fa1ab85ee5b9d6365320b19d8dbfd71dc870df40c1f415384420f5941b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34756", "10.65.0.27:34756", "172.17.0.1:34756"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-06T15:40:52.069357599Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8910268775516081,
-				"StableID":   "nWXouneUaC21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-				"DiscoKey":   "discokey:61f545efc276b157c4ee86fca6e336190ef713805f1f027394cc5d386755426b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:52546", "10.65.0.27:52546", "172.17.0.1:52546"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-06T15:40:52.606237035Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7038802157048158,
-				"StableID":   "nfscN2Qtxw11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-				"DiscoKey":   "discokey:50afb6cc073a802792c791fde2221dee82308dcda511849e166601e31475c761",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:54538", "10.65.0.27:54538", "172.17.0.1:54538"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-06T15:40:53.131660568Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7720613921123214,
-				"StableID":   "n3F9DHSgH321CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-				"KeyExpiry":  "2026-11-02T15:40:53Z",
-				"DiscoKey":   "discokey:f64fc141f08cfdd0d54d295f171679faeeede143eb346e90eb18f5f462fbb82b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33844", "10.65.0.27:33844", "172.17.0.1:33844"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-06T15:40:53.671874813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5046976042723692,
-				"StableID":   "nHwbL9WnQg11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:94bd00517d3dac4e4287753e526529f7ad35ff7c29b1f06bf453c08acb240e71",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:56168", "10.65.0.27:56168", "172.17.0.1:56168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-06T15:40:54.199991065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3632134459209156,
-				"StableID":   "nFc1Wm11NV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:4bcde07ed5927ee1d8fea7984938c0be7cc9873e479d8a2895311d5aeebe6818",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53337", "10.65.0.27:53337", "172.17.0.1:53337"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-06T15:40:54.759738873Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4830435904802942": {
-				"ID":          4830435904802942,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7980747859636263,
-				"StableID":   "nSrzZNiVK521CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       7980747859636263,
-				"Key":        "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-				"DiscoKey":   "discokey:c7ddb4a844aa892a1ecf48b617c151210e0ab9e4fb152c7df636febd5daf2776",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51523", "10.65.0.27:51523", "172.17.0.1:51523"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-06T15:40:51.517481582Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-			"MachineKey": "mkey:dfb977f44bdc52ebd1a45e6c693e1f676fb578e007c8d056aa114c52c659ed15",
-			"Peers": [{
-				"ID":         4830435904802942,
-				"StableID":   "nFDhrtMiie11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-				"DiscoKey":   "discokey:bdbfaeb791d68d1b79bfc6ebbdea10390749203c87085dd13bb8e80813d07311",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43486", "10.65.0.27:43486", "172.17.0.1:43486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-06T15:40:51.008534293Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8410941347036547,
-				"StableID":   "nnvUvfALg821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-				"DiscoKey":   "discokey:6a8600fa1ab85ee5b9d6365320b19d8dbfd71dc870df40c1f415384420f5941b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34756", "10.65.0.27:34756", "172.17.0.1:34756"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-06T15:40:52.069357599Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8910268775516081,
-				"StableID":   "nWXouneUaC21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-				"DiscoKey":   "discokey:61f545efc276b157c4ee86fca6e336190ef713805f1f027394cc5d386755426b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:52546", "10.65.0.27:52546", "172.17.0.1:52546"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-06T15:40:52.606237035Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7038802157048158,
-				"StableID":   "nfscN2Qtxw11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-				"DiscoKey":   "discokey:50afb6cc073a802792c791fde2221dee82308dcda511849e166601e31475c761",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:54538", "10.65.0.27:54538", "172.17.0.1:54538"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-06T15:40:53.131660568Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7720613921123214,
-				"StableID":   "n3F9DHSgH321CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-				"KeyExpiry":  "2026-11-02T15:40:53Z",
-				"DiscoKey":   "discokey:f64fc141f08cfdd0d54d295f171679faeeede143eb346e90eb18f5f462fbb82b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33844", "10.65.0.27:33844", "172.17.0.1:33844"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-06T15:40:53.671874813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5046976042723692,
-				"StableID":   "nHwbL9WnQg11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:94bd00517d3dac4e4287753e526529f7ad35ff7c29b1f06bf453c08acb240e71",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:56168", "10.65.0.27:56168", "172.17.0.1:56168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-06T15:40:54.199991065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3632134459209156,
-				"StableID":   "nFc1Wm11NV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:4bcde07ed5927ee1d8fea7984938c0be7cc9873e479d8a2895311d5aeebe6818",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53337", "10.65.0.27:53337", "172.17.0.1:53337"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-06T15:40:54.759738873Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7980747859636263": {
-				"ID":          7980747859636263,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7720613921123214,
-				"StableID":   "n3F9DHSgH321CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-				"KeyExpiry":  "2026-11-02T15:40:53Z",
-				"DiscoKey":   "discokey:f64fc141f08cfdd0d54d295f171679faeeede143eb346e90eb18f5f462fbb82b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33844", "10.65.0.27:33844", "172.17.0.1:33844"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-06T15:40:53.671874813Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-			"MachineKey": "mkey:03e48df3dc77582630459607570e5af7ce6d8d519bda56200ca40c40208d1d78",
-			"Peers": [{
-				"ID":         4830435904802942,
-				"StableID":   "nFDhrtMiie11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-				"DiscoKey":   "discokey:bdbfaeb791d68d1b79bfc6ebbdea10390749203c87085dd13bb8e80813d07311",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43486", "10.65.0.27:43486", "172.17.0.1:43486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-06T15:40:51.008534293Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7980747859636263,
-				"StableID":   "nSrzZNiVK521CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-				"DiscoKey":   "discokey:c7ddb4a844aa892a1ecf48b617c151210e0ab9e4fb152c7df636febd5daf2776",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51523", "10.65.0.27:51523", "172.17.0.1:51523"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-06T15:40:51.517481582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8410941347036547,
-				"StableID":   "nnvUvfALg821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-				"DiscoKey":   "discokey:6a8600fa1ab85ee5b9d6365320b19d8dbfd71dc870df40c1f415384420f5941b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34756", "10.65.0.27:34756", "172.17.0.1:34756"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-06T15:40:52.069357599Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8910268775516081,
-				"StableID":   "nWXouneUaC21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-				"DiscoKey":   "discokey:61f545efc276b157c4ee86fca6e336190ef713805f1f027394cc5d386755426b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:52546", "10.65.0.27:52546", "172.17.0.1:52546"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-06T15:40:52.606237035Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7038802157048158,
-				"StableID":   "nfscN2Qtxw11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-				"DiscoKey":   "discokey:50afb6cc073a802792c791fde2221dee82308dcda511849e166601e31475c761",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:54538", "10.65.0.27:54538", "172.17.0.1:54538"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-06T15:40:53.131660568Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5046976042723692,
-				"StableID":   "nHwbL9WnQg11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:94bd00517d3dac4e4287753e526529f7ad35ff7c29b1f06bf453c08acb240e71",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:56168", "10.65.0.27:56168", "172.17.0.1:56168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-06T15:40:54.199991065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3632134459209156,
-				"StableID":   "nFc1Wm11NV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:4bcde07ed5927ee1d8fea7984938c0be7cc9873e479d8a2895311d5aeebe6818",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53337", "10.65.0.27:53337", "172.17.0.1:53337"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-06T15:40:54.759738873Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8410941347036547,
-				"StableID":   "nnvUvfALg821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       8410941347036547,
-				"Key":        "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-				"DiscoKey":   "discokey:6a8600fa1ab85ee5b9d6365320b19d8dbfd71dc870df40c1f415384420f5941b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34756", "10.65.0.27:34756", "172.17.0.1:34756"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-06T15:40:52.069357599Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-			"MachineKey": "mkey:84a39118694ac33d07b088de8f0ef52557edb49b42d5d52bb2090ba4e1a3f12d",
-			"Peers": [{
-				"ID":         4830435904802942,
-				"StableID":   "nFDhrtMiie11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-				"DiscoKey":   "discokey:bdbfaeb791d68d1b79bfc6ebbdea10390749203c87085dd13bb8e80813d07311",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43486", "10.65.0.27:43486", "172.17.0.1:43486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-06T15:40:51.008534293Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7980747859636263,
-				"StableID":   "nSrzZNiVK521CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-				"DiscoKey":   "discokey:c7ddb4a844aa892a1ecf48b617c151210e0ab9e4fb152c7df636febd5daf2776",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51523", "10.65.0.27:51523", "172.17.0.1:51523"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-06T15:40:51.517481582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8910268775516081,
-				"StableID":   "nWXouneUaC21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-				"DiscoKey":   "discokey:61f545efc276b157c4ee86fca6e336190ef713805f1f027394cc5d386755426b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:52546", "10.65.0.27:52546", "172.17.0.1:52546"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-06T15:40:52.606237035Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7038802157048158,
-				"StableID":   "nfscN2Qtxw11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-				"DiscoKey":   "discokey:50afb6cc073a802792c791fde2221dee82308dcda511849e166601e31475c761",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:54538", "10.65.0.27:54538", "172.17.0.1:54538"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-06T15:40:53.131660568Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7720613921123214,
-				"StableID":   "n3F9DHSgH321CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-				"KeyExpiry":  "2026-11-02T15:40:53Z",
-				"DiscoKey":   "discokey:f64fc141f08cfdd0d54d295f171679faeeede143eb346e90eb18f5f462fbb82b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33844", "10.65.0.27:33844", "172.17.0.1:33844"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-06T15:40:53.671874813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5046976042723692,
-				"StableID":   "nHwbL9WnQg11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:94bd00517d3dac4e4287753e526529f7ad35ff7c29b1f06bf453c08acb240e71",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:56168", "10.65.0.27:56168", "172.17.0.1:56168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-06T15:40:54.199991065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3632134459209156,
-				"StableID":   "nFc1Wm11NV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:4bcde07ed5927ee1d8fea7984938c0be7cc9873e479d8a2895311d5aeebe6818",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53337", "10.65.0.27:53337", "172.17.0.1:53337"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-06T15:40:54.759738873Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8410941347036547": {
-				"ID":          8410941347036547,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8910268775516081,
-				"StableID":   "nWXouneUaC21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       8910268775516081,
-				"Key":        "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-				"DiscoKey":   "discokey:61f545efc276b157c4ee86fca6e336190ef713805f1f027394cc5d386755426b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:52546", "10.65.0.27:52546", "172.17.0.1:52546"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-06T15:40:52.606237035Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-			"MachineKey": "mkey:6e3b0f4120dde7f2e7701a7444efea325a876ec5d201fb7524e50b9d90b21461",
-			"Peers": [{
-				"ID":         4830435904802942,
-				"StableID":   "nFDhrtMiie11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-				"DiscoKey":   "discokey:bdbfaeb791d68d1b79bfc6ebbdea10390749203c87085dd13bb8e80813d07311",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43486", "10.65.0.27:43486", "172.17.0.1:43486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-06T15:40:51.008534293Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7980747859636263,
-				"StableID":   "nSrzZNiVK521CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-				"DiscoKey":   "discokey:c7ddb4a844aa892a1ecf48b617c151210e0ab9e4fb152c7df636febd5daf2776",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51523", "10.65.0.27:51523", "172.17.0.1:51523"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-06T15:40:51.517481582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8410941347036547,
-				"StableID":   "nnvUvfALg821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-				"DiscoKey":   "discokey:6a8600fa1ab85ee5b9d6365320b19d8dbfd71dc870df40c1f415384420f5941b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34756", "10.65.0.27:34756", "172.17.0.1:34756"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-06T15:40:52.069357599Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7038802157048158,
-				"StableID":   "nfscN2Qtxw11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-				"DiscoKey":   "discokey:50afb6cc073a802792c791fde2221dee82308dcda511849e166601e31475c761",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:54538", "10.65.0.27:54538", "172.17.0.1:54538"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-06T15:40:53.131660568Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7720613921123214,
-				"StableID":   "n3F9DHSgH321CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-				"KeyExpiry":  "2026-11-02T15:40:53Z",
-				"DiscoKey":   "discokey:f64fc141f08cfdd0d54d295f171679faeeede143eb346e90eb18f5f462fbb82b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33844", "10.65.0.27:33844", "172.17.0.1:33844"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-06T15:40:53.671874813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5046976042723692,
-				"StableID":   "nHwbL9WnQg11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:94bd00517d3dac4e4287753e526529f7ad35ff7c29b1f06bf453c08acb240e71",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:56168", "10.65.0.27:56168", "172.17.0.1:56168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-06T15:40:54.199991065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3632134459209156,
-				"StableID":   "nFc1Wm11NV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:4bcde07ed5927ee1d8fea7984938c0be7cc9873e479d8a2895311d5aeebe6818",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53337", "10.65.0.27:53337", "172.17.0.1:53337"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-06T15:40:54.759738873Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8910268775516081": {
-				"ID":          8910268775516081,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7038802157048158,
-				"StableID":   "nfscN2Qtxw11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7038802157048158,
-				"Key":        "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-				"DiscoKey":   "discokey:50afb6cc073a802792c791fde2221dee82308dcda511849e166601e31475c761",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:54538", "10.65.0.27:54538", "172.17.0.1:54538"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-06T15:40:53.131660568Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-			"MachineKey": "mkey:7b7cb56f0d2528825c7d5ce02d78a7301475b5892c8e0a022a94a2877296ca58",
-			"Peers": [{
-				"ID":         4830435904802942,
-				"StableID":   "nFDhrtMiie11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-				"DiscoKey":   "discokey:bdbfaeb791d68d1b79bfc6ebbdea10390749203c87085dd13bb8e80813d07311",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43486", "10.65.0.27:43486", "172.17.0.1:43486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-06T15:40:51.008534293Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7980747859636263,
-				"StableID":   "nSrzZNiVK521CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-				"DiscoKey":   "discokey:c7ddb4a844aa892a1ecf48b617c151210e0ab9e4fb152c7df636febd5daf2776",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51523", "10.65.0.27:51523", "172.17.0.1:51523"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-06T15:40:51.517481582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8410941347036547,
-				"StableID":   "nnvUvfALg821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-				"DiscoKey":   "discokey:6a8600fa1ab85ee5b9d6365320b19d8dbfd71dc870df40c1f415384420f5941b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34756", "10.65.0.27:34756", "172.17.0.1:34756"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-06T15:40:52.069357599Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8910268775516081,
-				"StableID":   "nWXouneUaC21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-				"DiscoKey":   "discokey:61f545efc276b157c4ee86fca6e336190ef713805f1f027394cc5d386755426b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:52546", "10.65.0.27:52546", "172.17.0.1:52546"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-06T15:40:52.606237035Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7720613921123214,
-				"StableID":   "n3F9DHSgH321CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-				"KeyExpiry":  "2026-11-02T15:40:53Z",
-				"DiscoKey":   "discokey:f64fc141f08cfdd0d54d295f171679faeeede143eb346e90eb18f5f462fbb82b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33844", "10.65.0.27:33844", "172.17.0.1:33844"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-06T15:40:53.671874813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5046976042723692,
-				"StableID":   "nHwbL9WnQg11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:94bd00517d3dac4e4287753e526529f7ad35ff7c29b1f06bf453c08acb240e71",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:56168", "10.65.0.27:56168", "172.17.0.1:56168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-06T15:40:54.199991065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3632134459209156,
-				"StableID":   "nFc1Wm11NV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:4bcde07ed5927ee1d8fea7984938c0be7cc9873e479d8a2895311d5aeebe6818",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53337", "10.65.0.27:53337", "172.17.0.1:53337"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-06T15:40:54.759738873Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7038802157048158": {
-				"ID":          7038802157048158,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3632134459209156,
-				"StableID":   "nFc1Wm11NV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:4bcde07ed5927ee1d8fea7984938c0be7cc9873e479d8a2895311d5aeebe6818",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53337", "10.65.0.27:53337", "172.17.0.1:53337"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-06T15:40:54.759738873Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-			"MachineKey": "mkey:a261c85caef09699b2923e3633b4252aa1635665b68c70b74273c9066d5cb446",
-			"Peers": [{
-				"ID":         4830435904802942,
-				"StableID":   "nFDhrtMiie11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-				"DiscoKey":   "discokey:bdbfaeb791d68d1b79bfc6ebbdea10390749203c87085dd13bb8e80813d07311",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43486", "10.65.0.27:43486", "172.17.0.1:43486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-06T15:40:51.008534293Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7980747859636263,
-				"StableID":   "nSrzZNiVK521CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-				"DiscoKey":   "discokey:c7ddb4a844aa892a1ecf48b617c151210e0ab9e4fb152c7df636febd5daf2776",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51523", "10.65.0.27:51523", "172.17.0.1:51523"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-06T15:40:51.517481582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8410941347036547,
-				"StableID":   "nnvUvfALg821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-				"DiscoKey":   "discokey:6a8600fa1ab85ee5b9d6365320b19d8dbfd71dc870df40c1f415384420f5941b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34756", "10.65.0.27:34756", "172.17.0.1:34756"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-06T15:40:52.069357599Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8910268775516081,
-				"StableID":   "nWXouneUaC21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-				"DiscoKey":   "discokey:61f545efc276b157c4ee86fca6e336190ef713805f1f027394cc5d386755426b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:52546", "10.65.0.27:52546", "172.17.0.1:52546"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-06T15:40:52.606237035Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7038802157048158,
-				"StableID":   "nfscN2Qtxw11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-				"DiscoKey":   "discokey:50afb6cc073a802792c791fde2221dee82308dcda511849e166601e31475c761",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:54538", "10.65.0.27:54538", "172.17.0.1:54538"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-06T15:40:53.131660568Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7720613921123214,
-				"StableID":   "n3F9DHSgH321CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-				"KeyExpiry":  "2026-11-02T15:40:53Z",
-				"DiscoKey":   "discokey:f64fc141f08cfdd0d54d295f171679faeeede143eb346e90eb18f5f462fbb82b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33844", "10.65.0.27:33844", "172.17.0.1:33844"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-06T15:40:53.671874813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5046976042723692,
-				"StableID":   "nHwbL9WnQg11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:94bd00517d3dac4e4287753e526529f7ad35ff7c29b1f06bf453c08acb240e71",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:56168", "10.65.0.27:56168", "172.17.0.1:56168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-06T15:40:54.199991065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5046976042723692,
-				"StableID":   "nHwbL9WnQg11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:94bd00517d3dac4e4287753e526529f7ad35ff7c29b1f06bf453c08acb240e71",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:56168", "10.65.0.27:56168", "172.17.0.1:56168"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-06T15:40:54.199991065Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:eca925b85aa7fceab2ebd22ce8ab8b7037147598ad59dbc1858e2b57d667380f",
-			"MachineKey": "mkey:4d4583205617ede4692dad74942c36f1cf4cdcae40ed054ddb79c94718d3087a",
-			"Peers": [{
-				"ID":         4830435904802942,
-				"StableID":   "nFDhrtMiie11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de1d64de914d8215e6e2a5fe0a008dfe10175b7324ec3855eef9a7a383e99a3d",
-				"DiscoKey":   "discokey:bdbfaeb791d68d1b79bfc6ebbdea10390749203c87085dd13bb8e80813d07311",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43486", "10.65.0.27:43486", "172.17.0.1:43486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-06T15:40:51.008534293Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7980747859636263,
-				"StableID":   "nSrzZNiVK521CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ad3938c0f85a1bf537b75cc9285581a654d396201735cfe2551d8735af1cdf7d",
-				"DiscoKey":   "discokey:c7ddb4a844aa892a1ecf48b617c151210e0ab9e4fb152c7df636febd5daf2776",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51523", "10.65.0.27:51523", "172.17.0.1:51523"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-06T15:40:51.517481582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8410941347036547,
-				"StableID":   "nnvUvfALg821CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9a740286ad406b57caa83807c288f1cf4f7a6dd112c94a100f11036c3a395634",
-				"DiscoKey":   "discokey:6a8600fa1ab85ee5b9d6365320b19d8dbfd71dc870df40c1f415384420f5941b",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34756", "10.65.0.27:34756", "172.17.0.1:34756"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-06T15:40:52.069357599Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8910268775516081,
-				"StableID":   "nWXouneUaC21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5ccfd7e85e9aa522fff476cde3c477088df770d623109eeb2db7afca4c3ab334",
-				"DiscoKey":   "discokey:61f545efc276b157c4ee86fca6e336190ef713805f1f027394cc5d386755426b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:52546", "10.65.0.27:52546", "172.17.0.1:52546"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-06T15:40:52.606237035Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7038802157048158,
-				"StableID":   "nfscN2Qtxw11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1b742e57ab2c61e09c18297bc7e9384888d2f855e78866c092594afad1421001",
-				"DiscoKey":   "discokey:50afb6cc073a802792c791fde2221dee82308dcda511849e166601e31475c761",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:54538", "10.65.0.27:54538", "172.17.0.1:54538"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-06T15:40:53.131660568Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7720613921123214,
-				"StableID":   "n3F9DHSgH321CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:9aeb77360a08492f6705634bf2fbda4bbdec96378c48bb0370426ecd9d6eff00",
-				"KeyExpiry":  "2026-11-02T15:40:53Z",
-				"DiscoKey":   "discokey:f64fc141f08cfdd0d54d295f171679faeeede143eb346e90eb18f5f462fbb82b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33844", "10.65.0.27:33844", "172.17.0.1:33844"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-06T15:40:53.671874813Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3632134459209156,
-				"StableID":   "nFc1Wm11NV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:287ceb1c6111e832ec6c014c78574dceb8b75a5ecf029f67cb92f6a7ac817878",
-				"KeyExpiry":  "2026-11-02T15:40:54Z",
-				"DiscoKey":   "discokey:4bcde07ed5927ee1d8fea7984938c0be7cc9873e479d8a2895311d5aeebe6818",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53337", "10.65.0.27:53337", "172.17.0.1:53337"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-06T15:40:54.759738873Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e7-empty-nodeAttrs.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e7-empty-nodeAttrs.hujson
deleted file mode 100644
index 81645c9e5..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-error-e7-empty-nodeAttrs.hujson
+++ /dev/null
@@ -1,8818 +0,0 @@
-// nodeattrs-error-e7-empty-nodeAttrs
-//
-// empty nodeAttrs array (no entries)
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:20:17Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-error-e7-empty-nodeAttrs",
-	"description":    "empty nodeAttrs array (no entries)",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:20:17.82579103Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                     \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"empty nodeAttrs array (no entries)\",\n    \"id\": \"nodeattrs-error-e7-empty-nodeAttrs\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-error-e7-empty-nodeAttrs.hujson",
-		"full_policy": {"nodeAttrs": [], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2362053322290241,
-				"StableID":   "nEwucr8nSK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       2362053322290241,
-				"Key":        "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-				"DiscoKey":   "discokey:82a80e0ab0e72d4bc58837ca967b1e3f20cc746527c259e9be830a4840818559",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:44141", "10.65.0.27:44141", "172.17.0.1:44141"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:20:23.450771046Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-			"MachineKey": "mkey:514618091d1b6809b10925acdcaf671eac9189860ebc9edfa4e132e58c4bab29",
-			"Peers": [{
-				"ID":         8069123640113507,
-				"StableID":   "nNnLfKCX1621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-				"DiscoKey":   "discokey:e6d4273de4f3d191caf609c496f5b5d1b685c4b5c23b8fb2ec6fc67da817d970",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33914", "10.65.0.27:33914", "172.17.0.1:33914"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:20:23.958508353Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3102230672006371,
-				"StableID":   "nnvvPgL1ER11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-				"DiscoKey":   "discokey:08b8972a6bb25f0e21398315abf757cda4bdb9034b0dd62c73cfacc2dd438270",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48842", "10.65.0.27:48842", "172.17.0.1:48842"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:20:24.499985382Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8586444951487606,
-				"StableID":   "nDUtTEMp3A21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-				"DiscoKey":   "discokey:ee389fb8c75d8826a120e474bfa5a745633b77a46bc8ab7029719cc86dc9c22d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57961", "10.65.0.27:57961", "172.17.0.1:57961"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:20:25.031373546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8412977866163749,
-				"StableID":   "neBL9SfFh821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-				"DiscoKey":   "discokey:7df79dcd326d663559f420a2d35c16f3b01e5b673067f3a955685028cba84001",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:36359", "10.65.0.27:36359", "172.17.0.1:36359"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:20:25.569875707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3135406274480916,
-				"StableID":   "ndyKnko2VR11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:eb98ffe847a7ef7c81ca50cc06152026d14696db09185585fd6a3bbb8eaec203",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56768", "10.65.0.27:56768", "172.17.0.1:56768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:20:26.103624711Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6050449836196195,
-				"StableID":   "nLMVEL4GFp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:315174b64770af371e5f7e50c4ad30992fe752d06656660e21aff49ea597755a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36116", "10.65.0.27:36116", "172.17.0.1:36116"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:20:26.648200008Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6891902984500351,
-				"StableID":   "n8jaX5cMpv11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-				"KeyExpiry":  "2026-11-03T08:20:27Z",
-				"DiscoKey":   "discokey:0d76bc027118938ee747f19ac43beb5f10664f2e8fff20a99faacf6356924b77",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35259", "10.65.0.27:35259", "172.17.0.1:35259"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:20:27.183304201Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2362053322290241": {
-				"ID":          2362053322290241,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8069123640113507,
-				"StableID":   "nNnLfKCX1621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       8069123640113507,
-				"Key":        "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-				"DiscoKey":   "discokey:e6d4273de4f3d191caf609c496f5b5d1b685c4b5c23b8fb2ec6fc67da817d970",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33914", "10.65.0.27:33914", "172.17.0.1:33914"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:20:23.958508353Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-			"MachineKey": "mkey:9e4c0b144cc251ab1e4439f50880d068252fb5afe1b43666ca14320acc8fff78",
-			"Peers": [{
-				"ID":         2362053322290241,
-				"StableID":   "nEwucr8nSK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-				"DiscoKey":   "discokey:82a80e0ab0e72d4bc58837ca967b1e3f20cc746527c259e9be830a4840818559",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:44141", "10.65.0.27:44141", "172.17.0.1:44141"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:20:23.450771046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3102230672006371,
-				"StableID":   "nnvvPgL1ER11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-				"DiscoKey":   "discokey:08b8972a6bb25f0e21398315abf757cda4bdb9034b0dd62c73cfacc2dd438270",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48842", "10.65.0.27:48842", "172.17.0.1:48842"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:20:24.499985382Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8586444951487606,
-				"StableID":   "nDUtTEMp3A21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-				"DiscoKey":   "discokey:ee389fb8c75d8826a120e474bfa5a745633b77a46bc8ab7029719cc86dc9c22d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57961", "10.65.0.27:57961", "172.17.0.1:57961"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:20:25.031373546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8412977866163749,
-				"StableID":   "neBL9SfFh821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-				"DiscoKey":   "discokey:7df79dcd326d663559f420a2d35c16f3b01e5b673067f3a955685028cba84001",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:36359", "10.65.0.27:36359", "172.17.0.1:36359"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:20:25.569875707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3135406274480916,
-				"StableID":   "ndyKnko2VR11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:eb98ffe847a7ef7c81ca50cc06152026d14696db09185585fd6a3bbb8eaec203",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56768", "10.65.0.27:56768", "172.17.0.1:56768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:20:26.103624711Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6050449836196195,
-				"StableID":   "nLMVEL4GFp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:315174b64770af371e5f7e50c4ad30992fe752d06656660e21aff49ea597755a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36116", "10.65.0.27:36116", "172.17.0.1:36116"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:20:26.648200008Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6891902984500351,
-				"StableID":   "n8jaX5cMpv11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-				"KeyExpiry":  "2026-11-03T08:20:27Z",
-				"DiscoKey":   "discokey:0d76bc027118938ee747f19ac43beb5f10664f2e8fff20a99faacf6356924b77",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35259", "10.65.0.27:35259", "172.17.0.1:35259"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:20:27.183304201Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8069123640113507": {
-				"ID":          8069123640113507,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3135406274480916,
-				"StableID":   "ndyKnko2VR11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:eb98ffe847a7ef7c81ca50cc06152026d14696db09185585fd6a3bbb8eaec203",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56768", "10.65.0.27:56768", "172.17.0.1:56768"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:20:26.103624711Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-			"MachineKey": "mkey:ac1318d3114a995c4cf373a695095b447df2f63a8baa4af8014ff8d20dc20e5d",
-			"Peers": [{
-				"ID":         2362053322290241,
-				"StableID":   "nEwucr8nSK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-				"DiscoKey":   "discokey:82a80e0ab0e72d4bc58837ca967b1e3f20cc746527c259e9be830a4840818559",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:44141", "10.65.0.27:44141", "172.17.0.1:44141"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:20:23.450771046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8069123640113507,
-				"StableID":   "nNnLfKCX1621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-				"DiscoKey":   "discokey:e6d4273de4f3d191caf609c496f5b5d1b685c4b5c23b8fb2ec6fc67da817d970",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33914", "10.65.0.27:33914", "172.17.0.1:33914"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:20:23.958508353Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3102230672006371,
-				"StableID":   "nnvvPgL1ER11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-				"DiscoKey":   "discokey:08b8972a6bb25f0e21398315abf757cda4bdb9034b0dd62c73cfacc2dd438270",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48842", "10.65.0.27:48842", "172.17.0.1:48842"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:20:24.499985382Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8586444951487606,
-				"StableID":   "nDUtTEMp3A21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-				"DiscoKey":   "discokey:ee389fb8c75d8826a120e474bfa5a745633b77a46bc8ab7029719cc86dc9c22d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57961", "10.65.0.27:57961", "172.17.0.1:57961"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:20:25.031373546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8412977866163749,
-				"StableID":   "neBL9SfFh821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-				"DiscoKey":   "discokey:7df79dcd326d663559f420a2d35c16f3b01e5b673067f3a955685028cba84001",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:36359", "10.65.0.27:36359", "172.17.0.1:36359"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:20:25.569875707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6050449836196195,
-				"StableID":   "nLMVEL4GFp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:315174b64770af371e5f7e50c4ad30992fe752d06656660e21aff49ea597755a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36116", "10.65.0.27:36116", "172.17.0.1:36116"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:20:26.648200008Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6891902984500351,
-				"StableID":   "n8jaX5cMpv11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-				"KeyExpiry":  "2026-11-03T08:20:27Z",
-				"DiscoKey":   "discokey:0d76bc027118938ee747f19ac43beb5f10664f2e8fff20a99faacf6356924b77",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35259", "10.65.0.27:35259", "172.17.0.1:35259"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:20:27.183304201Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3102230672006371,
-				"StableID":   "nnvvPgL1ER11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       3102230672006371,
-				"Key":        "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-				"DiscoKey":   "discokey:08b8972a6bb25f0e21398315abf757cda4bdb9034b0dd62c73cfacc2dd438270",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48842", "10.65.0.27:48842", "172.17.0.1:48842"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:20:24.499985382Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-			"MachineKey": "mkey:53cbd3b972c7032313bb8ae5e984fce9e8c790dcf470549c62832d87386dce6c",
-			"Peers": [{
-				"ID":         2362053322290241,
-				"StableID":   "nEwucr8nSK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-				"DiscoKey":   "discokey:82a80e0ab0e72d4bc58837ca967b1e3f20cc746527c259e9be830a4840818559",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:44141", "10.65.0.27:44141", "172.17.0.1:44141"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:20:23.450771046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8069123640113507,
-				"StableID":   "nNnLfKCX1621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-				"DiscoKey":   "discokey:e6d4273de4f3d191caf609c496f5b5d1b685c4b5c23b8fb2ec6fc67da817d970",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33914", "10.65.0.27:33914", "172.17.0.1:33914"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:20:23.958508353Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8586444951487606,
-				"StableID":   "nDUtTEMp3A21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-				"DiscoKey":   "discokey:ee389fb8c75d8826a120e474bfa5a745633b77a46bc8ab7029719cc86dc9c22d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57961", "10.65.0.27:57961", "172.17.0.1:57961"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:20:25.031373546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8412977866163749,
-				"StableID":   "neBL9SfFh821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-				"DiscoKey":   "discokey:7df79dcd326d663559f420a2d35c16f3b01e5b673067f3a955685028cba84001",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:36359", "10.65.0.27:36359", "172.17.0.1:36359"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:20:25.569875707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3135406274480916,
-				"StableID":   "ndyKnko2VR11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:eb98ffe847a7ef7c81ca50cc06152026d14696db09185585fd6a3bbb8eaec203",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56768", "10.65.0.27:56768", "172.17.0.1:56768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:20:26.103624711Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6050449836196195,
-				"StableID":   "nLMVEL4GFp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:315174b64770af371e5f7e50c4ad30992fe752d06656660e21aff49ea597755a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36116", "10.65.0.27:36116", "172.17.0.1:36116"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:20:26.648200008Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6891902984500351,
-				"StableID":   "n8jaX5cMpv11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-				"KeyExpiry":  "2026-11-03T08:20:27Z",
-				"DiscoKey":   "discokey:0d76bc027118938ee747f19ac43beb5f10664f2e8fff20a99faacf6356924b77",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35259", "10.65.0.27:35259", "172.17.0.1:35259"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:20:27.183304201Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3102230672006371": {
-				"ID":          3102230672006371,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8586444951487606,
-				"StableID":   "nDUtTEMp3A21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       8586444951487606,
-				"Key":        "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-				"DiscoKey":   "discokey:ee389fb8c75d8826a120e474bfa5a745633b77a46bc8ab7029719cc86dc9c22d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57961", "10.65.0.27:57961", "172.17.0.1:57961"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:20:25.031373546Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-			"MachineKey": "mkey:1e0c3168da296345c894070e5c05d65c7e4344b1a7b16f2a3a8a801e5db4831e",
-			"Peers": [{
-				"ID":         2362053322290241,
-				"StableID":   "nEwucr8nSK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-				"DiscoKey":   "discokey:82a80e0ab0e72d4bc58837ca967b1e3f20cc746527c259e9be830a4840818559",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:44141", "10.65.0.27:44141", "172.17.0.1:44141"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:20:23.450771046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8069123640113507,
-				"StableID":   "nNnLfKCX1621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-				"DiscoKey":   "discokey:e6d4273de4f3d191caf609c496f5b5d1b685c4b5c23b8fb2ec6fc67da817d970",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33914", "10.65.0.27:33914", "172.17.0.1:33914"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:20:23.958508353Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3102230672006371,
-				"StableID":   "nnvvPgL1ER11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-				"DiscoKey":   "discokey:08b8972a6bb25f0e21398315abf757cda4bdb9034b0dd62c73cfacc2dd438270",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48842", "10.65.0.27:48842", "172.17.0.1:48842"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:20:24.499985382Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8412977866163749,
-				"StableID":   "neBL9SfFh821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-				"DiscoKey":   "discokey:7df79dcd326d663559f420a2d35c16f3b01e5b673067f3a955685028cba84001",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:36359", "10.65.0.27:36359", "172.17.0.1:36359"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:20:25.569875707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3135406274480916,
-				"StableID":   "ndyKnko2VR11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:eb98ffe847a7ef7c81ca50cc06152026d14696db09185585fd6a3bbb8eaec203",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56768", "10.65.0.27:56768", "172.17.0.1:56768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:20:26.103624711Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6050449836196195,
-				"StableID":   "nLMVEL4GFp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:315174b64770af371e5f7e50c4ad30992fe752d06656660e21aff49ea597755a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36116", "10.65.0.27:36116", "172.17.0.1:36116"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:20:26.648200008Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6891902984500351,
-				"StableID":   "n8jaX5cMpv11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-				"KeyExpiry":  "2026-11-03T08:20:27Z",
-				"DiscoKey":   "discokey:0d76bc027118938ee747f19ac43beb5f10664f2e8fff20a99faacf6356924b77",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35259", "10.65.0.27:35259", "172.17.0.1:35259"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:20:27.183304201Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8586444951487606": {
-				"ID":          8586444951487606,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8412977866163749,
-				"StableID":   "neBL9SfFh821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       8412977866163749,
-				"Key":        "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-				"DiscoKey":   "discokey:7df79dcd326d663559f420a2d35c16f3b01e5b673067f3a955685028cba84001",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:36359", "10.65.0.27:36359", "172.17.0.1:36359"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:20:25.569875707Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-			"MachineKey": "mkey:fe66cd0711bde46c54f88a468e8ec19a31114bd2148a68266855bde6fd413534",
-			"Peers": [{
-				"ID":         2362053322290241,
-				"StableID":   "nEwucr8nSK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-				"DiscoKey":   "discokey:82a80e0ab0e72d4bc58837ca967b1e3f20cc746527c259e9be830a4840818559",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:44141", "10.65.0.27:44141", "172.17.0.1:44141"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:20:23.450771046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8069123640113507,
-				"StableID":   "nNnLfKCX1621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-				"DiscoKey":   "discokey:e6d4273de4f3d191caf609c496f5b5d1b685c4b5c23b8fb2ec6fc67da817d970",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33914", "10.65.0.27:33914", "172.17.0.1:33914"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:20:23.958508353Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3102230672006371,
-				"StableID":   "nnvvPgL1ER11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-				"DiscoKey":   "discokey:08b8972a6bb25f0e21398315abf757cda4bdb9034b0dd62c73cfacc2dd438270",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48842", "10.65.0.27:48842", "172.17.0.1:48842"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:20:24.499985382Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8586444951487606,
-				"StableID":   "nDUtTEMp3A21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-				"DiscoKey":   "discokey:ee389fb8c75d8826a120e474bfa5a745633b77a46bc8ab7029719cc86dc9c22d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57961", "10.65.0.27:57961", "172.17.0.1:57961"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:20:25.031373546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3135406274480916,
-				"StableID":   "ndyKnko2VR11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:eb98ffe847a7ef7c81ca50cc06152026d14696db09185585fd6a3bbb8eaec203",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56768", "10.65.0.27:56768", "172.17.0.1:56768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:20:26.103624711Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6050449836196195,
-				"StableID":   "nLMVEL4GFp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:315174b64770af371e5f7e50c4ad30992fe752d06656660e21aff49ea597755a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36116", "10.65.0.27:36116", "172.17.0.1:36116"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:20:26.648200008Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6891902984500351,
-				"StableID":   "n8jaX5cMpv11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-				"KeyExpiry":  "2026-11-03T08:20:27Z",
-				"DiscoKey":   "discokey:0d76bc027118938ee747f19ac43beb5f10664f2e8fff20a99faacf6356924b77",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35259", "10.65.0.27:35259", "172.17.0.1:35259"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:20:27.183304201Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8412977866163749": {
-				"ID":          8412977866163749,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6891902984500351,
-				"StableID":   "n8jaX5cMpv11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-				"KeyExpiry":  "2026-11-03T08:20:27Z",
-				"DiscoKey":   "discokey:0d76bc027118938ee747f19ac43beb5f10664f2e8fff20a99faacf6356924b77",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35259", "10.65.0.27:35259", "172.17.0.1:35259"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:20:27.183304201Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-			"MachineKey": "mkey:171991929e2315e3e97a76d96c6804ff1b4d981146cfda03730464197acb5f05",
-			"Peers": [{
-				"ID":         2362053322290241,
-				"StableID":   "nEwucr8nSK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-				"DiscoKey":   "discokey:82a80e0ab0e72d4bc58837ca967b1e3f20cc746527c259e9be830a4840818559",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:44141", "10.65.0.27:44141", "172.17.0.1:44141"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:20:23.450771046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8069123640113507,
-				"StableID":   "nNnLfKCX1621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-				"DiscoKey":   "discokey:e6d4273de4f3d191caf609c496f5b5d1b685c4b5c23b8fb2ec6fc67da817d970",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33914", "10.65.0.27:33914", "172.17.0.1:33914"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:20:23.958508353Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3102230672006371,
-				"StableID":   "nnvvPgL1ER11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-				"DiscoKey":   "discokey:08b8972a6bb25f0e21398315abf757cda4bdb9034b0dd62c73cfacc2dd438270",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48842", "10.65.0.27:48842", "172.17.0.1:48842"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:20:24.499985382Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8586444951487606,
-				"StableID":   "nDUtTEMp3A21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-				"DiscoKey":   "discokey:ee389fb8c75d8826a120e474bfa5a745633b77a46bc8ab7029719cc86dc9c22d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57961", "10.65.0.27:57961", "172.17.0.1:57961"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:20:25.031373546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8412977866163749,
-				"StableID":   "neBL9SfFh821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-				"DiscoKey":   "discokey:7df79dcd326d663559f420a2d35c16f3b01e5b673067f3a955685028cba84001",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:36359", "10.65.0.27:36359", "172.17.0.1:36359"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:20:25.569875707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3135406274480916,
-				"StableID":   "ndyKnko2VR11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:eb98ffe847a7ef7c81ca50cc06152026d14696db09185585fd6a3bbb8eaec203",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56768", "10.65.0.27:56768", "172.17.0.1:56768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:20:26.103624711Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6050449836196195,
-				"StableID":   "nLMVEL4GFp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:315174b64770af371e5f7e50c4ad30992fe752d06656660e21aff49ea597755a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36116", "10.65.0.27:36116", "172.17.0.1:36116"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:20:26.648200008Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6050449836196195,
-				"StableID":   "nLMVEL4GFp11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:315174b64770af371e5f7e50c4ad30992fe752d06656660e21aff49ea597755a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36116", "10.65.0.27:36116", "172.17.0.1:36116"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:20:26.648200008Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ffc9a02a26b4fe474ba1074a21c54b941879b58c47dcce8367ee62a6fc5bd95d",
-			"MachineKey": "mkey:fbf356acd7c01095f9723884be7eeade4331360998318253f82eb15b65549f13",
-			"Peers": [{
-				"ID":         2362053322290241,
-				"StableID":   "nEwucr8nSK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:10c2cacb0d3e1dfb7fa7300fed01d56f733fdeed914c0274acce87238541e00d",
-				"DiscoKey":   "discokey:82a80e0ab0e72d4bc58837ca967b1e3f20cc746527c259e9be830a4840818559",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:44141", "10.65.0.27:44141", "172.17.0.1:44141"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:20:23.450771046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8069123640113507,
-				"StableID":   "nNnLfKCX1621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3cf00d5dff4cd4ada826ae930bf63e575542ea9c5ef897c83ee35448ecfeb04a",
-				"DiscoKey":   "discokey:e6d4273de4f3d191caf609c496f5b5d1b685c4b5c23b8fb2ec6fc67da817d970",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33914", "10.65.0.27:33914", "172.17.0.1:33914"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:20:23.958508353Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3102230672006371,
-				"StableID":   "nnvvPgL1ER11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a3cb2120420f8da10f1919b1112dbef0ed45efc15894c838b3cecb057534d04c",
-				"DiscoKey":   "discokey:08b8972a6bb25f0e21398315abf757cda4bdb9034b0dd62c73cfacc2dd438270",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48842", "10.65.0.27:48842", "172.17.0.1:48842"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:20:24.499985382Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8586444951487606,
-				"StableID":   "nDUtTEMp3A21CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b839a183dddcda8d29b7a4d0d2928c218b1854d3b699292014646c69bd59f21f",
-				"DiscoKey":   "discokey:ee389fb8c75d8826a120e474bfa5a745633b77a46bc8ab7029719cc86dc9c22d",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57961", "10.65.0.27:57961", "172.17.0.1:57961"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:20:25.031373546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8412977866163749,
-				"StableID":   "neBL9SfFh821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3107f9df7bd9b46511c756b69fe9c8e69db944a665ac57d708039d3ac1ed2e19",
-				"DiscoKey":   "discokey:7df79dcd326d663559f420a2d35c16f3b01e5b673067f3a955685028cba84001",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:36359", "10.65.0.27:36359", "172.17.0.1:36359"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:20:25.569875707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3135406274480916,
-				"StableID":   "ndyKnko2VR11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:23f8caa6269d53610a134f985ead233f17368da1b1c9876f0d7d18df8d821f73",
-				"KeyExpiry":  "2026-11-03T08:20:26Z",
-				"DiscoKey":   "discokey:eb98ffe847a7ef7c81ca50cc06152026d14696db09185585fd6a3bbb8eaec203",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56768", "10.65.0.27:56768", "172.17.0.1:56768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:20:26.103624711Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6891902984500351,
-				"StableID":   "n8jaX5cMpv11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e00bf536de6508ce8af402f7185e15f2f205273cccaa90954e2d0d99293b7706",
-				"KeyExpiry":  "2026-11-03T08:20:27Z",
-				"DiscoKey":   "discokey:0d76bc027118938ee747f19ac43beb5f10664f2e8fff20a99faacf6356924b77",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35259", "10.65.0.27:35259", "172.17.0.1:35259"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:20:27.183304201Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-funnel-f1-tag.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-funnel-f1-tag.hujson
deleted file mode 100644
index 9662a629d..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-funnel-f1-tag.hujson
+++ /dev/null
@@ -1,8827 +0,0 @@
-// nodeattrs-funnel-f1-tag
-//
-// funnel cap on tag:server
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:20:58Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-funnel-f1-tag",
-	"description":    "funnel cap on tag:server",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:20:58.169811353Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                          \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"funnel cap on tag:server\",\n    \"id\": \"nodeattrs-funnel-f1-tag\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"funnel\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-funnel-f1-tag.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["funnel"], "target": ["tag:server"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6381562387479905,
-				"StableID":   "nnwmYipDqr11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       6381562387479905,
-				"Key":        "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-				"DiscoKey":   "discokey:e0cd790ad2a66685e81e7ed8e260835e3df3c13611e1a25a6a0da8f8d7438d15",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:56755", "10.65.0.27:56755", "172.17.0.1:56755"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:03.784088521Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-			"MachineKey": "mkey:e08815a7878c9b6c3139199708e5450a3478eaad428b8f51d8c32675674a956e",
-			"Peers": [{
-				"ID":         7178896172059210,
-				"StableID":   "nMUVktRL4y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-				"DiscoKey":   "discokey:3f29e7d2c844298f63e0e189c8a41e71e696c80beca8b755efcb0d168eb8e015",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41696", "10.65.0.27:41696", "172.17.0.1:41696"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:04.320428616Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2217764684537281,
-				"StableID":   "nWd4oDvRKJ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-				"DiscoKey":   "discokey:986208c8fc8e1a4380cd1880cab5c814c94a1f5935066fe35900831aff2cad61",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54298", "10.65.0.27:54298", "172.17.0.1:54298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:04.866309667Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1029423402308004,
-				"StableID":   "n1R6y1DE3911CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-				"DiscoKey":   "discokey:0e9cd0c1059599917bbaad6a96c8cca89c21fea27c787a43735b960253b2cd70",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48314", "10.65.0.27:48314", "172.17.0.1:48314"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:05.40795218Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2193881428340882,
-				"StableID":   "nFbFEcYc8J11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-				"DiscoKey":   "discokey:b41cfc0a489ab6baf705fe93e1ea2b56d8a3682c7f9c30e6cb5752194527ab3b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53498", "10.65.0.27:53498", "172.17.0.1:53498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:05.943749546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6578716284495797,
-				"StableID":   "nS9iJqiWNt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-				"KeyExpiry":  "2026-11-03T08:21:06Z",
-				"DiscoKey":   "discokey:9a5014af7f4ebab3428c3ad55c17059805a97e6161f62716cbda2674ee37612c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53958", "10.65.0.27:53958", "172.17.0.1:53958"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:06.48191922Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7819333006260238,
-				"StableID":   "nhCVitcP4421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:fc396068aa5941c5461c660ff2ae7105dba7699cea79fc02199cd218ed88d932",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48136", "10.65.0.27:48136", "172.17.0.1:48136"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:07.026827171Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1280523531439311,
-				"StableID":   "nS2YXYBxzA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:1ba40a2e69342eccb06c1d06c3083fe6611e33e3881ed780edc6489fa1943b0c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47818", "10.65.0.27:47818", "172.17.0.1:47818"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:07.578974918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6381562387479905": {
-				"ID":          6381562387479905,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7178896172059210,
-				"StableID":   "nMUVktRL4y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       7178896172059210,
-				"Key":        "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-				"DiscoKey":   "discokey:3f29e7d2c844298f63e0e189c8a41e71e696c80beca8b755efcb0d168eb8e015",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41696", "10.65.0.27:41696", "172.17.0.1:41696"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:21:04.320428616Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-			"MachineKey": "mkey:81c740bc1b956c410bc1d80cfedc358e674a9767efd389144238fb6a98a2d02e",
-			"Peers": [{
-				"ID":         6381562387479905,
-				"StableID":   "nnwmYipDqr11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-				"DiscoKey":   "discokey:e0cd790ad2a66685e81e7ed8e260835e3df3c13611e1a25a6a0da8f8d7438d15",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:56755", "10.65.0.27:56755", "172.17.0.1:56755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:03.784088521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2217764684537281,
-				"StableID":   "nWd4oDvRKJ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-				"DiscoKey":   "discokey:986208c8fc8e1a4380cd1880cab5c814c94a1f5935066fe35900831aff2cad61",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54298", "10.65.0.27:54298", "172.17.0.1:54298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:04.866309667Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1029423402308004,
-				"StableID":   "n1R6y1DE3911CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-				"DiscoKey":   "discokey:0e9cd0c1059599917bbaad6a96c8cca89c21fea27c787a43735b960253b2cd70",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48314", "10.65.0.27:48314", "172.17.0.1:48314"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:05.40795218Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2193881428340882,
-				"StableID":   "nFbFEcYc8J11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-				"DiscoKey":   "discokey:b41cfc0a489ab6baf705fe93e1ea2b56d8a3682c7f9c30e6cb5752194527ab3b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53498", "10.65.0.27:53498", "172.17.0.1:53498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:05.943749546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6578716284495797,
-				"StableID":   "nS9iJqiWNt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-				"KeyExpiry":  "2026-11-03T08:21:06Z",
-				"DiscoKey":   "discokey:9a5014af7f4ebab3428c3ad55c17059805a97e6161f62716cbda2674ee37612c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53958", "10.65.0.27:53958", "172.17.0.1:53958"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:06.48191922Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7819333006260238,
-				"StableID":   "nhCVitcP4421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:fc396068aa5941c5461c660ff2ae7105dba7699cea79fc02199cd218ed88d932",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48136", "10.65.0.27:48136", "172.17.0.1:48136"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:07.026827171Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1280523531439311,
-				"StableID":   "nS2YXYBxzA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:1ba40a2e69342eccb06c1d06c3083fe6611e33e3881ed780edc6489fa1943b0c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47818", "10.65.0.27:47818", "172.17.0.1:47818"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:07.578974918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7178896172059210": {
-				"ID":          7178896172059210,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6578716284495797,
-				"StableID":   "nS9iJqiWNt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-				"KeyExpiry":  "2026-11-03T08:21:06Z",
-				"DiscoKey":   "discokey:9a5014af7f4ebab3428c3ad55c17059805a97e6161f62716cbda2674ee37612c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53958", "10.65.0.27:53958", "172.17.0.1:53958"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:06.48191922Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-			"MachineKey": "mkey:d8dd64310eee21a895ba766d7f41c4a250d8c0e504bb6e08ef1cae2bf6615b06",
-			"Peers": [{
-				"ID":         6381562387479905,
-				"StableID":   "nnwmYipDqr11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-				"DiscoKey":   "discokey:e0cd790ad2a66685e81e7ed8e260835e3df3c13611e1a25a6a0da8f8d7438d15",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:56755", "10.65.0.27:56755", "172.17.0.1:56755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:03.784088521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7178896172059210,
-				"StableID":   "nMUVktRL4y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-				"DiscoKey":   "discokey:3f29e7d2c844298f63e0e189c8a41e71e696c80beca8b755efcb0d168eb8e015",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41696", "10.65.0.27:41696", "172.17.0.1:41696"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:04.320428616Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2217764684537281,
-				"StableID":   "nWd4oDvRKJ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-				"DiscoKey":   "discokey:986208c8fc8e1a4380cd1880cab5c814c94a1f5935066fe35900831aff2cad61",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54298", "10.65.0.27:54298", "172.17.0.1:54298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:04.866309667Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1029423402308004,
-				"StableID":   "n1R6y1DE3911CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-				"DiscoKey":   "discokey:0e9cd0c1059599917bbaad6a96c8cca89c21fea27c787a43735b960253b2cd70",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48314", "10.65.0.27:48314", "172.17.0.1:48314"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:05.40795218Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2193881428340882,
-				"StableID":   "nFbFEcYc8J11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-				"DiscoKey":   "discokey:b41cfc0a489ab6baf705fe93e1ea2b56d8a3682c7f9c30e6cb5752194527ab3b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53498", "10.65.0.27:53498", "172.17.0.1:53498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:05.943749546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7819333006260238,
-				"StableID":   "nhCVitcP4421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:fc396068aa5941c5461c660ff2ae7105dba7699cea79fc02199cd218ed88d932",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48136", "10.65.0.27:48136", "172.17.0.1:48136"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:07.026827171Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1280523531439311,
-				"StableID":   "nS2YXYBxzA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:1ba40a2e69342eccb06c1d06c3083fe6611e33e3881ed780edc6489fa1943b0c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47818", "10.65.0.27:47818", "172.17.0.1:47818"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:07.578974918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2217764684537281,
-				"StableID":   "nWd4oDvRKJ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       2217764684537281,
-				"Key":        "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-				"DiscoKey":   "discokey:986208c8fc8e1a4380cd1880cab5c814c94a1f5935066fe35900831aff2cad61",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54298", "10.65.0.27:54298", "172.17.0.1:54298"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:04.866309667Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-			"MachineKey": "mkey:ddd646aa73c1067c5c82bf909cfd29dc58e76e9ef2a4c108c7e16a287bd1df33",
-			"Peers": [{
-				"ID":         6381562387479905,
-				"StableID":   "nnwmYipDqr11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-				"DiscoKey":   "discokey:e0cd790ad2a66685e81e7ed8e260835e3df3c13611e1a25a6a0da8f8d7438d15",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:56755", "10.65.0.27:56755", "172.17.0.1:56755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:03.784088521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7178896172059210,
-				"StableID":   "nMUVktRL4y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-				"DiscoKey":   "discokey:3f29e7d2c844298f63e0e189c8a41e71e696c80beca8b755efcb0d168eb8e015",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41696", "10.65.0.27:41696", "172.17.0.1:41696"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:04.320428616Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1029423402308004,
-				"StableID":   "n1R6y1DE3911CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-				"DiscoKey":   "discokey:0e9cd0c1059599917bbaad6a96c8cca89c21fea27c787a43735b960253b2cd70",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48314", "10.65.0.27:48314", "172.17.0.1:48314"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:05.40795218Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2193881428340882,
-				"StableID":   "nFbFEcYc8J11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-				"DiscoKey":   "discokey:b41cfc0a489ab6baf705fe93e1ea2b56d8a3682c7f9c30e6cb5752194527ab3b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53498", "10.65.0.27:53498", "172.17.0.1:53498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:05.943749546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6578716284495797,
-				"StableID":   "nS9iJqiWNt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-				"KeyExpiry":  "2026-11-03T08:21:06Z",
-				"DiscoKey":   "discokey:9a5014af7f4ebab3428c3ad55c17059805a97e6161f62716cbda2674ee37612c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53958", "10.65.0.27:53958", "172.17.0.1:53958"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:06.48191922Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7819333006260238,
-				"StableID":   "nhCVitcP4421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:fc396068aa5941c5461c660ff2ae7105dba7699cea79fc02199cd218ed88d932",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48136", "10.65.0.27:48136", "172.17.0.1:48136"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:07.026827171Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1280523531439311,
-				"StableID":   "nS2YXYBxzA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:1ba40a2e69342eccb06c1d06c3083fe6611e33e3881ed780edc6489fa1943b0c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47818", "10.65.0.27:47818", "172.17.0.1:47818"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:07.578974918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2217764684537281": {
-				"ID":          2217764684537281,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1029423402308004,
-				"StableID":   "n1R6y1DE3911CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1029423402308004,
-				"Key":        "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-				"DiscoKey":   "discokey:0e9cd0c1059599917bbaad6a96c8cca89c21fea27c787a43735b960253b2cd70",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48314", "10.65.0.27:48314", "172.17.0.1:48314"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:21:05.40795218Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-			"MachineKey": "mkey:8566d42055c98081ba722e2aa326b0ed8074318084655a62bbe5e3a5c5fc9710",
-			"Peers": [{
-				"ID":         6381562387479905,
-				"StableID":   "nnwmYipDqr11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-				"DiscoKey":   "discokey:e0cd790ad2a66685e81e7ed8e260835e3df3c13611e1a25a6a0da8f8d7438d15",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:56755", "10.65.0.27:56755", "172.17.0.1:56755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:03.784088521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7178896172059210,
-				"StableID":   "nMUVktRL4y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-				"DiscoKey":   "discokey:3f29e7d2c844298f63e0e189c8a41e71e696c80beca8b755efcb0d168eb8e015",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41696", "10.65.0.27:41696", "172.17.0.1:41696"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:04.320428616Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2217764684537281,
-				"StableID":   "nWd4oDvRKJ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-				"DiscoKey":   "discokey:986208c8fc8e1a4380cd1880cab5c814c94a1f5935066fe35900831aff2cad61",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54298", "10.65.0.27:54298", "172.17.0.1:54298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:04.866309667Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2193881428340882,
-				"StableID":   "nFbFEcYc8J11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-				"DiscoKey":   "discokey:b41cfc0a489ab6baf705fe93e1ea2b56d8a3682c7f9c30e6cb5752194527ab3b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53498", "10.65.0.27:53498", "172.17.0.1:53498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:05.943749546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6578716284495797,
-				"StableID":   "nS9iJqiWNt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-				"KeyExpiry":  "2026-11-03T08:21:06Z",
-				"DiscoKey":   "discokey:9a5014af7f4ebab3428c3ad55c17059805a97e6161f62716cbda2674ee37612c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53958", "10.65.0.27:53958", "172.17.0.1:53958"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:06.48191922Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7819333006260238,
-				"StableID":   "nhCVitcP4421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:fc396068aa5941c5461c660ff2ae7105dba7699cea79fc02199cd218ed88d932",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48136", "10.65.0.27:48136", "172.17.0.1:48136"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:07.026827171Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1280523531439311,
-				"StableID":   "nS2YXYBxzA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:1ba40a2e69342eccb06c1d06c3083fe6611e33e3881ed780edc6489fa1943b0c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47818", "10.65.0.27:47818", "172.17.0.1:47818"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:07.578974918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1029423402308004": {
-				"ID":          1029423402308004,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2193881428340882,
-				"StableID":   "nFbFEcYc8J11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       2193881428340882,
-				"Key":        "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-				"DiscoKey":   "discokey:b41cfc0a489ab6baf705fe93e1ea2b56d8a3682c7f9c30e6cb5752194527ab3b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53498", "10.65.0.27:53498", "172.17.0.1:53498"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:05.943749546Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-owner":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-			"MachineKey": "mkey:6d285c1b4bf0cac8e6458f4c22261f70270c6b51932e91d0319ec7733723fe33",
-			"Peers": [{
-				"ID":         6381562387479905,
-				"StableID":   "nnwmYipDqr11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-				"DiscoKey":   "discokey:e0cd790ad2a66685e81e7ed8e260835e3df3c13611e1a25a6a0da8f8d7438d15",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:56755", "10.65.0.27:56755", "172.17.0.1:56755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:03.784088521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7178896172059210,
-				"StableID":   "nMUVktRL4y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-				"DiscoKey":   "discokey:3f29e7d2c844298f63e0e189c8a41e71e696c80beca8b755efcb0d168eb8e015",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41696", "10.65.0.27:41696", "172.17.0.1:41696"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:04.320428616Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2217764684537281,
-				"StableID":   "nWd4oDvRKJ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-				"DiscoKey":   "discokey:986208c8fc8e1a4380cd1880cab5c814c94a1f5935066fe35900831aff2cad61",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54298", "10.65.0.27:54298", "172.17.0.1:54298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:04.866309667Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1029423402308004,
-				"StableID":   "n1R6y1DE3911CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-				"DiscoKey":   "discokey:0e9cd0c1059599917bbaad6a96c8cca89c21fea27c787a43735b960253b2cd70",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48314", "10.65.0.27:48314", "172.17.0.1:48314"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:05.40795218Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6578716284495797,
-				"StableID":   "nS9iJqiWNt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-				"KeyExpiry":  "2026-11-03T08:21:06Z",
-				"DiscoKey":   "discokey:9a5014af7f4ebab3428c3ad55c17059805a97e6161f62716cbda2674ee37612c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53958", "10.65.0.27:53958", "172.17.0.1:53958"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:06.48191922Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7819333006260238,
-				"StableID":   "nhCVitcP4421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:fc396068aa5941c5461c660ff2ae7105dba7699cea79fc02199cd218ed88d932",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48136", "10.65.0.27:48136", "172.17.0.1:48136"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:07.026827171Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1280523531439311,
-				"StableID":   "nS2YXYBxzA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:1ba40a2e69342eccb06c1d06c3083fe6611e33e3881ed780edc6489fa1943b0c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47818", "10.65.0.27:47818", "172.17.0.1:47818"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:07.578974918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2193881428340882": {
-				"ID":          2193881428340882,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1280523531439311,
-				"StableID":   "nS2YXYBxzA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:1ba40a2e69342eccb06c1d06c3083fe6611e33e3881ed780edc6489fa1943b0c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47818", "10.65.0.27:47818", "172.17.0.1:47818"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:07.578974918Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-			"MachineKey": "mkey:10b3803907fe18c0c94f212bbe68caac62aac277d969b9bd5396bceedabef738",
-			"Peers": [{
-				"ID":         6381562387479905,
-				"StableID":   "nnwmYipDqr11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-				"DiscoKey":   "discokey:e0cd790ad2a66685e81e7ed8e260835e3df3c13611e1a25a6a0da8f8d7438d15",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:56755", "10.65.0.27:56755", "172.17.0.1:56755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:03.784088521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7178896172059210,
-				"StableID":   "nMUVktRL4y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-				"DiscoKey":   "discokey:3f29e7d2c844298f63e0e189c8a41e71e696c80beca8b755efcb0d168eb8e015",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41696", "10.65.0.27:41696", "172.17.0.1:41696"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:04.320428616Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2217764684537281,
-				"StableID":   "nWd4oDvRKJ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-				"DiscoKey":   "discokey:986208c8fc8e1a4380cd1880cab5c814c94a1f5935066fe35900831aff2cad61",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54298", "10.65.0.27:54298", "172.17.0.1:54298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:04.866309667Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1029423402308004,
-				"StableID":   "n1R6y1DE3911CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-				"DiscoKey":   "discokey:0e9cd0c1059599917bbaad6a96c8cca89c21fea27c787a43735b960253b2cd70",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48314", "10.65.0.27:48314", "172.17.0.1:48314"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:05.40795218Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2193881428340882,
-				"StableID":   "nFbFEcYc8J11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-				"DiscoKey":   "discokey:b41cfc0a489ab6baf705fe93e1ea2b56d8a3682c7f9c30e6cb5752194527ab3b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53498", "10.65.0.27:53498", "172.17.0.1:53498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:05.943749546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6578716284495797,
-				"StableID":   "nS9iJqiWNt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-				"KeyExpiry":  "2026-11-03T08:21:06Z",
-				"DiscoKey":   "discokey:9a5014af7f4ebab3428c3ad55c17059805a97e6161f62716cbda2674ee37612c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53958", "10.65.0.27:53958", "172.17.0.1:53958"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:06.48191922Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7819333006260238,
-				"StableID":   "nhCVitcP4421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:fc396068aa5941c5461c660ff2ae7105dba7699cea79fc02199cd218ed88d932",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48136", "10.65.0.27:48136", "172.17.0.1:48136"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:07.026827171Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7819333006260238,
-				"StableID":   "nhCVitcP4421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:fc396068aa5941c5461c660ff2ae7105dba7699cea79fc02199cd218ed88d932",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48136", "10.65.0.27:48136", "172.17.0.1:48136"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:07.026827171Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:885b00c6c7524243e5b34a907c750d8785589b34a4dde4264fb288836906c317",
-			"MachineKey": "mkey:0befc9836c2a515992baa0fa443f7e2ed02e172068ff39b12a011c41fd220e3d",
-			"Peers": [{
-				"ID":         6381562387479905,
-				"StableID":   "nnwmYipDqr11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:50ae567489554451e22e81b8c77f876111cb309c64e7b33c9376d121d5177778",
-				"DiscoKey":   "discokey:e0cd790ad2a66685e81e7ed8e260835e3df3c13611e1a25a6a0da8f8d7438d15",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:56755", "10.65.0.27:56755", "172.17.0.1:56755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:03.784088521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7178896172059210,
-				"StableID":   "nMUVktRL4y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8839610a292fcc2fa3051f98c438ed7e4235ad8467cc88b142bad74f29042e70",
-				"DiscoKey":   "discokey:3f29e7d2c844298f63e0e189c8a41e71e696c80beca8b755efcb0d168eb8e015",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:41696", "10.65.0.27:41696", "172.17.0.1:41696"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:04.320428616Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2217764684537281,
-				"StableID":   "nWd4oDvRKJ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c015f76a1a91675e1685eb7a8fb01638a4ac2ec3cdf3752369d0d9bd8c5aad7f",
-				"DiscoKey":   "discokey:986208c8fc8e1a4380cd1880cab5c814c94a1f5935066fe35900831aff2cad61",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54298", "10.65.0.27:54298", "172.17.0.1:54298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:04.866309667Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1029423402308004,
-				"StableID":   "n1R6y1DE3911CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6acba015440c15ca2182d735492bc4c7f7cde7d7c7e8a58e60f3ec6667a93473",
-				"DiscoKey":   "discokey:0e9cd0c1059599917bbaad6a96c8cca89c21fea27c787a43735b960253b2cd70",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:48314", "10.65.0.27:48314", "172.17.0.1:48314"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:05.40795218Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2193881428340882,
-				"StableID":   "nFbFEcYc8J11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f326f56fb6267ea5ac047e288abba4b3ab31a4dc739de8051a2ea2fac34a0c6d",
-				"DiscoKey":   "discokey:b41cfc0a489ab6baf705fe93e1ea2b56d8a3682c7f9c30e6cb5752194527ab3b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:53498", "10.65.0.27:53498", "172.17.0.1:53498"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:05.943749546Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6578716284495797,
-				"StableID":   "nS9iJqiWNt11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:91cc06df1414089b3996508725f8f4371f765083dea4102e28ffda5537469c54",
-				"KeyExpiry":  "2026-11-03T08:21:06Z",
-				"DiscoKey":   "discokey:9a5014af7f4ebab3428c3ad55c17059805a97e6161f62716cbda2674ee37612c",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53958", "10.65.0.27:53958", "172.17.0.1:53958"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:06.48191922Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1280523531439311,
-				"StableID":   "nS2YXYBxzA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:cde88990649d95831d05125cd05fe27f6fb4ed0cda58b755530e7214c0208f5d",
-				"KeyExpiry":  "2026-11-03T08:21:07Z",
-				"DiscoKey":   "discokey:1ba40a2e69342eccb06c1d06c3083fe6611e33e3881ed780edc6489fa1943b0c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47818", "10.65.0.27:47818", "172.17.0.1:47818"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:07.578974918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-funnel-f2-user.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-funnel-f2-user.hujson
deleted file mode 100644
index 84a1294ac..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-funnel-f2-user.hujson
+++ /dev/null
@@ -1,8827 +0,0 @@
-// nodeattrs-funnel-f2-user
-//
-// funnel cap on a user
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:21:38Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-funnel-f2-user",
-	"description":    "funnel cap on a user",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:21:38.616582926Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                           \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"funnel cap on a user\",\n    \"id\": \"nodeattrs-funnel-f2-user\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"funnel\"\n                ],\n                \"target\": [\n                    \"odin@example.com\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-funnel-f2-user.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["funnel"], "target": ["odin@example.com"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2354552682013718,
-				"StableID":   "nF7viA7PPK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       2354552682013718,
-				"Key":        "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-				"DiscoKey":   "discokey:2ac38b35105cdfced10fad72bf08361bc9abe2e02f53afe412d24ff76e2e6747",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33441", "10.65.0.27:33441", "172.17.0.1:33441"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:44.221239246Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-			"MachineKey": "mkey:64e610dc4d5899bc94f33caafc4e822d671c502af02eb5328f4189c97a039728",
-			"Peers": [{
-				"ID":         7915991111030489,
-				"StableID":   "nebjSUfAp421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-				"DiscoKey":   "discokey:6675dc7a40b394043b128c4fec74489c1fcfffe485778d1b8d7ca071f1d82706",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57982", "10.65.0.27:57982", "172.17.0.1:57982"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:44.767796569Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4946935651224486,
-				"StableID":   "n58nWScUdf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-				"DiscoKey":   "discokey:f90f098954f58dbb8175c2f091cd21c1bb1a087c7eea2874bcbdb836b46f6b33",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33508", "10.65.0.27:33508", "172.17.0.1:33508"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:45.292712079Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1381085677579226,
-				"StableID":   "n3sG2BnVnB11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-				"DiscoKey":   "discokey:ca862c9390f498c7c4de018251cb5febc221747d8c5dab0b83e8f326d613952f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47529", "10.65.0.27:47529", "172.17.0.1:47529"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:45.834223361Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1659707739013611,
-				"StableID":   "nUTgV4igxD11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-				"DiscoKey":   "discokey:4df3a44e60ab98adae21d7f923abc0a8f133cc2939582b203296e8a576cf6a27",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57783", "10.65.0.27:57783", "172.17.0.1:57783"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:46.366607983Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7164174282474991,
-				"StableID":   "np1FnBifwx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-				"KeyExpiry":  "2026-11-03T08:21:46Z",
-				"DiscoKey":   "discokey:2e880c2cf89012bba06d178b288a960a56f6e2b118b4a71b18216a3c4014f740",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:46.896002162Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3851345076913440,
-				"StableID":   "norq8fJH5X11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:38ce12ec25e063082b62c32ecd4c6401bb64c224deebcaf5a36eb04089dbd017",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50059", "10.65.0.27:50059", "172.17.0.1:50059"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:47.429567665Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1225304814586878,
-				"StableID":   "n719cRgwZA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:0a113099fa6792957b556c96e7dc027c8342550ce3c69f1b7155def76f2e3178",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54517", "10.65.0.27:54517", "172.17.0.1:54517"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:47.973252288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2354552682013718": {
-				"ID":          2354552682013718,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7915991111030489,
-				"StableID":   "nebjSUfAp421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       7915991111030489,
-				"Key":        "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-				"DiscoKey":   "discokey:6675dc7a40b394043b128c4fec74489c1fcfffe485778d1b8d7ca071f1d82706",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57982", "10.65.0.27:57982", "172.17.0.1:57982"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:21:44.767796569Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-			"MachineKey": "mkey:4fc16a964694627b6cdbf0a50d836b28d798e15ab10f63371ceab5f131fbc51f",
-			"Peers": [{
-				"ID":         2354552682013718,
-				"StableID":   "nF7viA7PPK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-				"DiscoKey":   "discokey:2ac38b35105cdfced10fad72bf08361bc9abe2e02f53afe412d24ff76e2e6747",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33441", "10.65.0.27:33441", "172.17.0.1:33441"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:44.221239246Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4946935651224486,
-				"StableID":   "n58nWScUdf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-				"DiscoKey":   "discokey:f90f098954f58dbb8175c2f091cd21c1bb1a087c7eea2874bcbdb836b46f6b33",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33508", "10.65.0.27:33508", "172.17.0.1:33508"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:45.292712079Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1381085677579226,
-				"StableID":   "n3sG2BnVnB11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-				"DiscoKey":   "discokey:ca862c9390f498c7c4de018251cb5febc221747d8c5dab0b83e8f326d613952f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47529", "10.65.0.27:47529", "172.17.0.1:47529"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:45.834223361Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1659707739013611,
-				"StableID":   "nUTgV4igxD11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-				"DiscoKey":   "discokey:4df3a44e60ab98adae21d7f923abc0a8f133cc2939582b203296e8a576cf6a27",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57783", "10.65.0.27:57783", "172.17.0.1:57783"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:46.366607983Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7164174282474991,
-				"StableID":   "np1FnBifwx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-				"KeyExpiry":  "2026-11-03T08:21:46Z",
-				"DiscoKey":   "discokey:2e880c2cf89012bba06d178b288a960a56f6e2b118b4a71b18216a3c4014f740",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:46.896002162Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3851345076913440,
-				"StableID":   "norq8fJH5X11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:38ce12ec25e063082b62c32ecd4c6401bb64c224deebcaf5a36eb04089dbd017",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50059", "10.65.0.27:50059", "172.17.0.1:50059"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:47.429567665Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1225304814586878,
-				"StableID":   "n719cRgwZA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:0a113099fa6792957b556c96e7dc027c8342550ce3c69f1b7155def76f2e3178",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54517", "10.65.0.27:54517", "172.17.0.1:54517"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:47.973252288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7915991111030489": {
-				"ID":          7915991111030489,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7164174282474991,
-				"StableID":   "np1FnBifwx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-				"KeyExpiry":  "2026-11-03T08:21:46Z",
-				"DiscoKey":   "discokey:2e880c2cf89012bba06d178b288a960a56f6e2b118b4a71b18216a3c4014f740",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:46.896002162Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-			"MachineKey": "mkey:7e7114c856e3ec4e0bfb6f0c1733af593f57533bb80d76283f0e7251772ed063",
-			"Peers": [{
-				"ID":         2354552682013718,
-				"StableID":   "nF7viA7PPK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-				"DiscoKey":   "discokey:2ac38b35105cdfced10fad72bf08361bc9abe2e02f53afe412d24ff76e2e6747",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33441", "10.65.0.27:33441", "172.17.0.1:33441"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:44.221239246Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7915991111030489,
-				"StableID":   "nebjSUfAp421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-				"DiscoKey":   "discokey:6675dc7a40b394043b128c4fec74489c1fcfffe485778d1b8d7ca071f1d82706",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57982", "10.65.0.27:57982", "172.17.0.1:57982"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:44.767796569Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4946935651224486,
-				"StableID":   "n58nWScUdf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-				"DiscoKey":   "discokey:f90f098954f58dbb8175c2f091cd21c1bb1a087c7eea2874bcbdb836b46f6b33",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33508", "10.65.0.27:33508", "172.17.0.1:33508"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:45.292712079Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1381085677579226,
-				"StableID":   "n3sG2BnVnB11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-				"DiscoKey":   "discokey:ca862c9390f498c7c4de018251cb5febc221747d8c5dab0b83e8f326d613952f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47529", "10.65.0.27:47529", "172.17.0.1:47529"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:45.834223361Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1659707739013611,
-				"StableID":   "nUTgV4igxD11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-				"DiscoKey":   "discokey:4df3a44e60ab98adae21d7f923abc0a8f133cc2939582b203296e8a576cf6a27",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57783", "10.65.0.27:57783", "172.17.0.1:57783"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:46.366607983Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3851345076913440,
-				"StableID":   "norq8fJH5X11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:38ce12ec25e063082b62c32ecd4c6401bb64c224deebcaf5a36eb04089dbd017",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50059", "10.65.0.27:50059", "172.17.0.1:50059"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:47.429567665Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1225304814586878,
-				"StableID":   "n719cRgwZA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:0a113099fa6792957b556c96e7dc027c8342550ce3c69f1b7155def76f2e3178",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54517", "10.65.0.27:54517", "172.17.0.1:54517"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:47.973252288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4946935651224486,
-				"StableID":   "n58nWScUdf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       4946935651224486,
-				"Key":        "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-				"DiscoKey":   "discokey:f90f098954f58dbb8175c2f091cd21c1bb1a087c7eea2874bcbdb836b46f6b33",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33508", "10.65.0.27:33508", "172.17.0.1:33508"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:45.292712079Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-			"MachineKey": "mkey:15832271a2724473f3efc022af6b42013c4273eab2b757d722127e587791c461",
-			"Peers": [{
-				"ID":         2354552682013718,
-				"StableID":   "nF7viA7PPK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-				"DiscoKey":   "discokey:2ac38b35105cdfced10fad72bf08361bc9abe2e02f53afe412d24ff76e2e6747",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33441", "10.65.0.27:33441", "172.17.0.1:33441"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:44.221239246Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7915991111030489,
-				"StableID":   "nebjSUfAp421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-				"DiscoKey":   "discokey:6675dc7a40b394043b128c4fec74489c1fcfffe485778d1b8d7ca071f1d82706",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57982", "10.65.0.27:57982", "172.17.0.1:57982"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:44.767796569Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1381085677579226,
-				"StableID":   "n3sG2BnVnB11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-				"DiscoKey":   "discokey:ca862c9390f498c7c4de018251cb5febc221747d8c5dab0b83e8f326d613952f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47529", "10.65.0.27:47529", "172.17.0.1:47529"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:45.834223361Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1659707739013611,
-				"StableID":   "nUTgV4igxD11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-				"DiscoKey":   "discokey:4df3a44e60ab98adae21d7f923abc0a8f133cc2939582b203296e8a576cf6a27",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57783", "10.65.0.27:57783", "172.17.0.1:57783"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:46.366607983Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7164174282474991,
-				"StableID":   "np1FnBifwx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-				"KeyExpiry":  "2026-11-03T08:21:46Z",
-				"DiscoKey":   "discokey:2e880c2cf89012bba06d178b288a960a56f6e2b118b4a71b18216a3c4014f740",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:46.896002162Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3851345076913440,
-				"StableID":   "norq8fJH5X11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:38ce12ec25e063082b62c32ecd4c6401bb64c224deebcaf5a36eb04089dbd017",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50059", "10.65.0.27:50059", "172.17.0.1:50059"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:47.429567665Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1225304814586878,
-				"StableID":   "n719cRgwZA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:0a113099fa6792957b556c96e7dc027c8342550ce3c69f1b7155def76f2e3178",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54517", "10.65.0.27:54517", "172.17.0.1:54517"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:47.973252288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4946935651224486": {
-				"ID":          4946935651224486,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1381085677579226,
-				"StableID":   "n3sG2BnVnB11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1381085677579226,
-				"Key":        "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-				"DiscoKey":   "discokey:ca862c9390f498c7c4de018251cb5febc221747d8c5dab0b83e8f326d613952f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47529", "10.65.0.27:47529", "172.17.0.1:47529"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:21:45.834223361Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-			"MachineKey": "mkey:38d67dbdcc09703a3107171492d37f7106e97e3f86035928e58d1de563c96c7f",
-			"Peers": [{
-				"ID":         2354552682013718,
-				"StableID":   "nF7viA7PPK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-				"DiscoKey":   "discokey:2ac38b35105cdfced10fad72bf08361bc9abe2e02f53afe412d24ff76e2e6747",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33441", "10.65.0.27:33441", "172.17.0.1:33441"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:44.221239246Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7915991111030489,
-				"StableID":   "nebjSUfAp421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-				"DiscoKey":   "discokey:6675dc7a40b394043b128c4fec74489c1fcfffe485778d1b8d7ca071f1d82706",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57982", "10.65.0.27:57982", "172.17.0.1:57982"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:44.767796569Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4946935651224486,
-				"StableID":   "n58nWScUdf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-				"DiscoKey":   "discokey:f90f098954f58dbb8175c2f091cd21c1bb1a087c7eea2874bcbdb836b46f6b33",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33508", "10.65.0.27:33508", "172.17.0.1:33508"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:45.292712079Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1659707739013611,
-				"StableID":   "nUTgV4igxD11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-				"DiscoKey":   "discokey:4df3a44e60ab98adae21d7f923abc0a8f133cc2939582b203296e8a576cf6a27",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57783", "10.65.0.27:57783", "172.17.0.1:57783"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:46.366607983Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7164174282474991,
-				"StableID":   "np1FnBifwx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-				"KeyExpiry":  "2026-11-03T08:21:46Z",
-				"DiscoKey":   "discokey:2e880c2cf89012bba06d178b288a960a56f6e2b118b4a71b18216a3c4014f740",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:46.896002162Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3851345076913440,
-				"StableID":   "norq8fJH5X11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:38ce12ec25e063082b62c32ecd4c6401bb64c224deebcaf5a36eb04089dbd017",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50059", "10.65.0.27:50059", "172.17.0.1:50059"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:47.429567665Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1225304814586878,
-				"StableID":   "n719cRgwZA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:0a113099fa6792957b556c96e7dc027c8342550ce3c69f1b7155def76f2e3178",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54517", "10.65.0.27:54517", "172.17.0.1:54517"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:47.973252288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1381085677579226": {
-				"ID":          1381085677579226,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1659707739013611,
-				"StableID":   "nUTgV4igxD11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1659707739013611,
-				"Key":        "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-				"DiscoKey":   "discokey:4df3a44e60ab98adae21d7f923abc0a8f133cc2939582b203296e8a576cf6a27",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57783", "10.65.0.27:57783", "172.17.0.1:57783"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:46.366607983Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-			"MachineKey": "mkey:d034aeb71fcbd08fca4fa6542cd2e8d3291e789663fa92a5d4dbd0fe038b5b3c",
-			"Peers": [{
-				"ID":         2354552682013718,
-				"StableID":   "nF7viA7PPK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-				"DiscoKey":   "discokey:2ac38b35105cdfced10fad72bf08361bc9abe2e02f53afe412d24ff76e2e6747",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33441", "10.65.0.27:33441", "172.17.0.1:33441"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:44.221239246Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7915991111030489,
-				"StableID":   "nebjSUfAp421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-				"DiscoKey":   "discokey:6675dc7a40b394043b128c4fec74489c1fcfffe485778d1b8d7ca071f1d82706",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57982", "10.65.0.27:57982", "172.17.0.1:57982"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:44.767796569Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4946935651224486,
-				"StableID":   "n58nWScUdf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-				"DiscoKey":   "discokey:f90f098954f58dbb8175c2f091cd21c1bb1a087c7eea2874bcbdb836b46f6b33",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33508", "10.65.0.27:33508", "172.17.0.1:33508"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:45.292712079Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1381085677579226,
-				"StableID":   "n3sG2BnVnB11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-				"DiscoKey":   "discokey:ca862c9390f498c7c4de018251cb5febc221747d8c5dab0b83e8f326d613952f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47529", "10.65.0.27:47529", "172.17.0.1:47529"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:45.834223361Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7164174282474991,
-				"StableID":   "np1FnBifwx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-				"KeyExpiry":  "2026-11-03T08:21:46Z",
-				"DiscoKey":   "discokey:2e880c2cf89012bba06d178b288a960a56f6e2b118b4a71b18216a3c4014f740",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:46.896002162Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3851345076913440,
-				"StableID":   "norq8fJH5X11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:38ce12ec25e063082b62c32ecd4c6401bb64c224deebcaf5a36eb04089dbd017",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50059", "10.65.0.27:50059", "172.17.0.1:50059"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:47.429567665Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1225304814586878,
-				"StableID":   "n719cRgwZA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:0a113099fa6792957b556c96e7dc027c8342550ce3c69f1b7155def76f2e3178",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54517", "10.65.0.27:54517", "172.17.0.1:54517"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:47.973252288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1659707739013611": {
-				"ID":          1659707739013611,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1225304814586878,
-				"StableID":   "n719cRgwZA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:0a113099fa6792957b556c96e7dc027c8342550ce3c69f1b7155def76f2e3178",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54517", "10.65.0.27:54517", "172.17.0.1:54517"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:47.973252288Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                                         [false],
-					"funnel":                                                      null,
-					"https://tailscale.com/cap/file-sharing":                      null,
-					"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000": null,
-					"https://tailscale.com/cap/is-admin":                          null,
-					"https://tailscale.com/cap/is-owner":                          null,
-					"https://tailscale.com/cap/ssh":                               null,
-					"https://tailscale.com/cap/tailnet-lock":                      null,
-					"https://tailscale.com/cap/warn-funnel-no-https":              null,
-					"probe-udp-lifetime":                                          null,
-					"ssh-behavior-v1":                                             null,
-					"ssh-env-vars":                                                null,
-					"store-appc-routes":                                           null,
-					"tailnet-display-name":                                        ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"funnel",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/funnel-ports?ports=443,8443,10000",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"https://tailscale.com/cap/warn-funnel-no-https",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-			"MachineKey": "mkey:dc8b32aedefeba622fbb2dd3a2cbda9891e195671f23ad73219e63f663231023",
-			"Peers": [{
-				"ID":         2354552682013718,
-				"StableID":   "nF7viA7PPK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-				"DiscoKey":   "discokey:2ac38b35105cdfced10fad72bf08361bc9abe2e02f53afe412d24ff76e2e6747",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33441", "10.65.0.27:33441", "172.17.0.1:33441"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:44.221239246Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7915991111030489,
-				"StableID":   "nebjSUfAp421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-				"DiscoKey":   "discokey:6675dc7a40b394043b128c4fec74489c1fcfffe485778d1b8d7ca071f1d82706",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57982", "10.65.0.27:57982", "172.17.0.1:57982"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:44.767796569Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4946935651224486,
-				"StableID":   "n58nWScUdf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-				"DiscoKey":   "discokey:f90f098954f58dbb8175c2f091cd21c1bb1a087c7eea2874bcbdb836b46f6b33",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33508", "10.65.0.27:33508", "172.17.0.1:33508"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:45.292712079Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1381085677579226,
-				"StableID":   "n3sG2BnVnB11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-				"DiscoKey":   "discokey:ca862c9390f498c7c4de018251cb5febc221747d8c5dab0b83e8f326d613952f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47529", "10.65.0.27:47529", "172.17.0.1:47529"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:45.834223361Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1659707739013611,
-				"StableID":   "nUTgV4igxD11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-				"DiscoKey":   "discokey:4df3a44e60ab98adae21d7f923abc0a8f133cc2939582b203296e8a576cf6a27",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57783", "10.65.0.27:57783", "172.17.0.1:57783"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:46.366607983Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7164174282474991,
-				"StableID":   "np1FnBifwx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-				"KeyExpiry":  "2026-11-03T08:21:46Z",
-				"DiscoKey":   "discokey:2e880c2cf89012bba06d178b288a960a56f6e2b118b4a71b18216a3c4014f740",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:46.896002162Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3851345076913440,
-				"StableID":   "norq8fJH5X11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:38ce12ec25e063082b62c32ecd4c6401bb64c224deebcaf5a36eb04089dbd017",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50059", "10.65.0.27:50059", "172.17.0.1:50059"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:21:47.429567665Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3851345076913440,
-				"StableID":   "norq8fJH5X11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:38ce12ec25e063082b62c32ecd4c6401bb64c224deebcaf5a36eb04089dbd017",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50059", "10.65.0.27:50059", "172.17.0.1:50059"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:21:47.429567665Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d74fb64740b9d188280667164dec7dc54027112f0acc8d46cd4babd26c17d46b",
-			"MachineKey": "mkey:e5c67db2507da821dae2354057291bc5edf1d6790087152ce735cd35fa61ed27",
-			"Peers": [{
-				"ID":         2354552682013718,
-				"StableID":   "nF7viA7PPK11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8fbe57f7c4bcfa488e37a90a93c47d51e1633e51dfd664148d9bf636ff21426c",
-				"DiscoKey":   "discokey:2ac38b35105cdfced10fad72bf08361bc9abe2e02f53afe412d24ff76e2e6747",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33441", "10.65.0.27:33441", "172.17.0.1:33441"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:21:44.221239246Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7915991111030489,
-				"StableID":   "nebjSUfAp421CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c4e9a1144a1bce2e0cc84eda786ba86ef539dd0d12f0f7cb82450843b109e65",
-				"DiscoKey":   "discokey:6675dc7a40b394043b128c4fec74489c1fcfffe485778d1b8d7ca071f1d82706",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:57982", "10.65.0.27:57982", "172.17.0.1:57982"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:21:44.767796569Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4946935651224486,
-				"StableID":   "n58nWScUdf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ed66182cdb84c67ef3334151c31bfd43facf42f3ec6296d72cfd79b9f10d467e",
-				"DiscoKey":   "discokey:f90f098954f58dbb8175c2f091cd21c1bb1a087c7eea2874bcbdb836b46f6b33",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33508", "10.65.0.27:33508", "172.17.0.1:33508"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:21:45.292712079Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1381085677579226,
-				"StableID":   "n3sG2BnVnB11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f24d94de7159fcdf7ba9e91b64463cda45aeb03bead2270a3da5561a3261cb29",
-				"DiscoKey":   "discokey:ca862c9390f498c7c4de018251cb5febc221747d8c5dab0b83e8f326d613952f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47529", "10.65.0.27:47529", "172.17.0.1:47529"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:21:45.834223361Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1659707739013611,
-				"StableID":   "nUTgV4igxD11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:26201c2e8f471759a7a0fb60710d116729ec869e9656e76e70523ff82ae5c27c",
-				"DiscoKey":   "discokey:4df3a44e60ab98adae21d7f923abc0a8f133cc2939582b203296e8a576cf6a27",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57783", "10.65.0.27:57783", "172.17.0.1:57783"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:21:46.366607983Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7164174282474991,
-				"StableID":   "np1FnBifwx11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:455f7130343d39496628a99346bd2efd600bc70ba07449156bc0c247ca8ff942",
-				"KeyExpiry":  "2026-11-03T08:21:46Z",
-				"DiscoKey":   "discokey:2e880c2cf89012bba06d178b288a960a56f6e2b118b4a71b18216a3c4014f740",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44909", "10.65.0.27:44909", "172.17.0.1:44909"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:21:46.896002162Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1225304814586878,
-				"StableID":   "n719cRgwZA11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:6782d570e3cf7f7dc29b486ba3ee343ec549a9d3bc88f5cfc498a9b2cb413d01",
-				"KeyExpiry":  "2026-11-03T08:21:47Z",
-				"DiscoKey":   "discokey:0a113099fa6792957b556c96e7dc027c8342550ce3c69f1b7155def76f2e3178",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54517", "10.65.0.27:54517", "172.17.0.1:54517"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:21:47.973252288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h1-with-acls.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h1-with-acls.hujson
deleted file mode 100644
index d611e2ad7..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h1-with-acls.hujson
+++ /dev/null
@@ -1,8816 +0,0 @@
-// nodeattrs-interaction-h1-with-acls
-//
-// nodeAttrs alongside acls
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:22:18Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-interaction-h1-with-acls",
-	"description":    "nodeAttrs alongside acls",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:22:18.878722455Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                     \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"nodeAttrs alongside acls\",\n    \"id\": \"nodeattrs-interaction-h1-with-acls\",\n    \"options\": {},\n    \"policy\": {\n        \"acls\": [\n            {\n                \"action\": \"accept\",\n                \"dst\": [\n                    \"*:*\"\n                ],\n                \"src\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-interaction-h1-with-acls.hujson",
-		"full_policy": {
-			"acls":      [{"action": "accept", "dst": ["*:*"], "src": ["*"]}],
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["tag:server"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1410180188702206,
-				"StableID":   "nPBkLT3g1C11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1410180188702206,
-				"Key":        "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-				"DiscoKey":   "discokey:a5f38e68cfb17f0d3860af66adca020f147fb1fd9b0ecd0401794de8eb426462",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35956", "10.65.0.27:35956", "172.17.0.1:35956"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:22:24.473615904Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-			"MachineKey": "mkey:6d97be0390992260f8804eae85931b5ee0618ccb8fee753884fd8403dd5d0d56",
-			"Peers": [{
-				"ID":         693721057716932,
-				"StableID":   "nFYPLosBR611CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-				"DiscoKey":   "discokey:6e71c6ad0cc6e18fdbf10f81ec590d4c5f1fc08956fb012c362514541b1bb57e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35692", "10.65.0.27:35692", "172.17.0.1:35692"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:22:24.953467233Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8546938533674923,
-				"StableID":   "nng5cmavj921CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-				"DiscoKey":   "discokey:f2130a803dc39a2041684ddd967990dfde517bcded3f5c89e6d405d1ff1c7076",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43561", "10.65.0.27:43561", "172.17.0.1:43561"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:22:25.482375444Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4885499348460219,
-				"StableID":   "nAxNpSne9f11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-				"DiscoKey":   "discokey:ceb3e052aa7fe7706683ab3fa5f30a893ba80b650925aed7548c47539cc3496e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47133", "10.65.0.27:47133", "172.17.0.1:47133"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:22:26.017460174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2007073167984570,
-				"StableID":   "nRiRxhQ1gG11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-				"DiscoKey":   "discokey:ffa98260567e7583b1f79f1642b7da858d7cbdce4518d69e49150c239bbe196e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:43843", "10.65.0.27:43843", "172.17.0.1:43843"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:22:26.542578346Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4916221786446099,
-				"StableID":   "nGVYTyoZPf11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:9bafe8fdf786b834331bfb66f6328f698aadcc6cfa8c45b40833a434e749be49",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:22:27.089450977Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6489388615172605,
-				"StableID":   "nEdD4dE4gs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:3223dc89db4e4aef4cb09fbd5f623e958f934dec9454bddbaa952a5108b58904",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48287", "10.65.0.27:48287", "172.17.0.1:48287"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:22:27.608186196Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5613799184264469,
-				"StableID":   "n6KxM9zVqk11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-				"KeyExpiry":  "2026-11-03T08:22:28Z",
-				"DiscoKey":   "discokey:4acee92c36ffd3a3f9b39e762a44514a73a3d96787ed55d6c469c2cef8ca8e0b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36924", "10.65.0.27:36924", "172.17.0.1:36924"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:22:28.143494996Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1410180188702206": {
-				"ID":          1410180188702206,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         693721057716932,
-				"StableID":   "nFYPLosBR611CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       693721057716932,
-				"Key":        "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-				"DiscoKey":   "discokey:6e71c6ad0cc6e18fdbf10f81ec590d4c5f1fc08956fb012c362514541b1bb57e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35692", "10.65.0.27:35692", "172.17.0.1:35692"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:22:24.953467233Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-			"MachineKey": "mkey:e361499871dca1193b5171289657c2aff913bc4e25efd3a0c2a39d4724db1d37",
-			"Peers": [{
-				"ID":         1410180188702206,
-				"StableID":   "nPBkLT3g1C11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-				"DiscoKey":   "discokey:a5f38e68cfb17f0d3860af66adca020f147fb1fd9b0ecd0401794de8eb426462",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35956", "10.65.0.27:35956", "172.17.0.1:35956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:22:24.473615904Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8546938533674923,
-				"StableID":   "nng5cmavj921CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-				"DiscoKey":   "discokey:f2130a803dc39a2041684ddd967990dfde517bcded3f5c89e6d405d1ff1c7076",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43561", "10.65.0.27:43561", "172.17.0.1:43561"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:22:25.482375444Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4885499348460219,
-				"StableID":   "nAxNpSne9f11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-				"DiscoKey":   "discokey:ceb3e052aa7fe7706683ab3fa5f30a893ba80b650925aed7548c47539cc3496e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47133", "10.65.0.27:47133", "172.17.0.1:47133"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:22:26.017460174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2007073167984570,
-				"StableID":   "nRiRxhQ1gG11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-				"DiscoKey":   "discokey:ffa98260567e7583b1f79f1642b7da858d7cbdce4518d69e49150c239bbe196e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:43843", "10.65.0.27:43843", "172.17.0.1:43843"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:22:26.542578346Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4916221786446099,
-				"StableID":   "nGVYTyoZPf11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:9bafe8fdf786b834331bfb66f6328f698aadcc6cfa8c45b40833a434e749be49",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:22:27.089450977Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6489388615172605,
-				"StableID":   "nEdD4dE4gs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:3223dc89db4e4aef4cb09fbd5f623e958f934dec9454bddbaa952a5108b58904",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48287", "10.65.0.27:48287", "172.17.0.1:48287"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:22:27.608186196Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5613799184264469,
-				"StableID":   "n6KxM9zVqk11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-				"KeyExpiry":  "2026-11-03T08:22:28Z",
-				"DiscoKey":   "discokey:4acee92c36ffd3a3f9b39e762a44514a73a3d96787ed55d6c469c2cef8ca8e0b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36924", "10.65.0.27:36924", "172.17.0.1:36924"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:22:28.143494996Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "693721057716932": {
-				"ID":          693721057716932,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4916221786446099,
-				"StableID":   "nGVYTyoZPf11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:9bafe8fdf786b834331bfb66f6328f698aadcc6cfa8c45b40833a434e749be49",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:22:27.089450977Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-			"MachineKey": "mkey:eed6fd860b81738995a38e0346d9eb4049d5764235b927c374b32f76dcf0aa59",
-			"Peers": [{
-				"ID":         1410180188702206,
-				"StableID":   "nPBkLT3g1C11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-				"DiscoKey":   "discokey:a5f38e68cfb17f0d3860af66adca020f147fb1fd9b0ecd0401794de8eb426462",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35956", "10.65.0.27:35956", "172.17.0.1:35956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:22:24.473615904Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         693721057716932,
-				"StableID":   "nFYPLosBR611CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-				"DiscoKey":   "discokey:6e71c6ad0cc6e18fdbf10f81ec590d4c5f1fc08956fb012c362514541b1bb57e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35692", "10.65.0.27:35692", "172.17.0.1:35692"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:22:24.953467233Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8546938533674923,
-				"StableID":   "nng5cmavj921CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-				"DiscoKey":   "discokey:f2130a803dc39a2041684ddd967990dfde517bcded3f5c89e6d405d1ff1c7076",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43561", "10.65.0.27:43561", "172.17.0.1:43561"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:22:25.482375444Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4885499348460219,
-				"StableID":   "nAxNpSne9f11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-				"DiscoKey":   "discokey:ceb3e052aa7fe7706683ab3fa5f30a893ba80b650925aed7548c47539cc3496e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47133", "10.65.0.27:47133", "172.17.0.1:47133"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:22:26.017460174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2007073167984570,
-				"StableID":   "nRiRxhQ1gG11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-				"DiscoKey":   "discokey:ffa98260567e7583b1f79f1642b7da858d7cbdce4518d69e49150c239bbe196e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:43843", "10.65.0.27:43843", "172.17.0.1:43843"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:22:26.542578346Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6489388615172605,
-				"StableID":   "nEdD4dE4gs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:3223dc89db4e4aef4cb09fbd5f623e958f934dec9454bddbaa952a5108b58904",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48287", "10.65.0.27:48287", "172.17.0.1:48287"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:22:27.608186196Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5613799184264469,
-				"StableID":   "n6KxM9zVqk11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-				"KeyExpiry":  "2026-11-03T08:22:28Z",
-				"DiscoKey":   "discokey:4acee92c36ffd3a3f9b39e762a44514a73a3d96787ed55d6c469c2cef8ca8e0b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36924", "10.65.0.27:36924", "172.17.0.1:36924"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:22:28.143494996Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8546938533674923,
-				"StableID":   "nng5cmavj921CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       8546938533674923,
-				"Key":        "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-				"DiscoKey":   "discokey:f2130a803dc39a2041684ddd967990dfde517bcded3f5c89e6d405d1ff1c7076",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43561", "10.65.0.27:43561", "172.17.0.1:43561"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:22:25.482375444Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-			"MachineKey": "mkey:51e35ee95707b3a8713f052b1c25c269cb48cae778e8f81b62e8bdaf90dcbc61",
-			"Peers": [{
-				"ID":         1410180188702206,
-				"StableID":   "nPBkLT3g1C11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-				"DiscoKey":   "discokey:a5f38e68cfb17f0d3860af66adca020f147fb1fd9b0ecd0401794de8eb426462",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35956", "10.65.0.27:35956", "172.17.0.1:35956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:22:24.473615904Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         693721057716932,
-				"StableID":   "nFYPLosBR611CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-				"DiscoKey":   "discokey:6e71c6ad0cc6e18fdbf10f81ec590d4c5f1fc08956fb012c362514541b1bb57e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35692", "10.65.0.27:35692", "172.17.0.1:35692"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:22:24.953467233Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4885499348460219,
-				"StableID":   "nAxNpSne9f11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-				"DiscoKey":   "discokey:ceb3e052aa7fe7706683ab3fa5f30a893ba80b650925aed7548c47539cc3496e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47133", "10.65.0.27:47133", "172.17.0.1:47133"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:22:26.017460174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2007073167984570,
-				"StableID":   "nRiRxhQ1gG11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-				"DiscoKey":   "discokey:ffa98260567e7583b1f79f1642b7da858d7cbdce4518d69e49150c239bbe196e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:43843", "10.65.0.27:43843", "172.17.0.1:43843"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:22:26.542578346Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4916221786446099,
-				"StableID":   "nGVYTyoZPf11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:9bafe8fdf786b834331bfb66f6328f698aadcc6cfa8c45b40833a434e749be49",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:22:27.089450977Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6489388615172605,
-				"StableID":   "nEdD4dE4gs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:3223dc89db4e4aef4cb09fbd5f623e958f934dec9454bddbaa952a5108b58904",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48287", "10.65.0.27:48287", "172.17.0.1:48287"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:22:27.608186196Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5613799184264469,
-				"StableID":   "n6KxM9zVqk11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-				"KeyExpiry":  "2026-11-03T08:22:28Z",
-				"DiscoKey":   "discokey:4acee92c36ffd3a3f9b39e762a44514a73a3d96787ed55d6c469c2cef8ca8e0b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36924", "10.65.0.27:36924", "172.17.0.1:36924"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:22:28.143494996Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8546938533674923": {
-				"ID":          8546938533674923,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4885499348460219,
-				"StableID":   "nAxNpSne9f11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       4885499348460219,
-				"Key":        "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-				"DiscoKey":   "discokey:ceb3e052aa7fe7706683ab3fa5f30a893ba80b650925aed7548c47539cc3496e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47133", "10.65.0.27:47133", "172.17.0.1:47133"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:22:26.017460174Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-			"MachineKey": "mkey:d2f1861247e1b52520e9b5afac83c9d2ae61276380951165ac403faeb5ee170c",
-			"Peers": [{
-				"ID":         1410180188702206,
-				"StableID":   "nPBkLT3g1C11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-				"DiscoKey":   "discokey:a5f38e68cfb17f0d3860af66adca020f147fb1fd9b0ecd0401794de8eb426462",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35956", "10.65.0.27:35956", "172.17.0.1:35956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:22:24.473615904Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         693721057716932,
-				"StableID":   "nFYPLosBR611CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-				"DiscoKey":   "discokey:6e71c6ad0cc6e18fdbf10f81ec590d4c5f1fc08956fb012c362514541b1bb57e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35692", "10.65.0.27:35692", "172.17.0.1:35692"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:22:24.953467233Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8546938533674923,
-				"StableID":   "nng5cmavj921CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-				"DiscoKey":   "discokey:f2130a803dc39a2041684ddd967990dfde517bcded3f5c89e6d405d1ff1c7076",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43561", "10.65.0.27:43561", "172.17.0.1:43561"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:22:25.482375444Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2007073167984570,
-				"StableID":   "nRiRxhQ1gG11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-				"DiscoKey":   "discokey:ffa98260567e7583b1f79f1642b7da858d7cbdce4518d69e49150c239bbe196e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:43843", "10.65.0.27:43843", "172.17.0.1:43843"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:22:26.542578346Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4916221786446099,
-				"StableID":   "nGVYTyoZPf11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:9bafe8fdf786b834331bfb66f6328f698aadcc6cfa8c45b40833a434e749be49",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:22:27.089450977Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6489388615172605,
-				"StableID":   "nEdD4dE4gs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:3223dc89db4e4aef4cb09fbd5f623e958f934dec9454bddbaa952a5108b58904",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48287", "10.65.0.27:48287", "172.17.0.1:48287"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:22:27.608186196Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5613799184264469,
-				"StableID":   "n6KxM9zVqk11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-				"KeyExpiry":  "2026-11-03T08:22:28Z",
-				"DiscoKey":   "discokey:4acee92c36ffd3a3f9b39e762a44514a73a3d96787ed55d6c469c2cef8ca8e0b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36924", "10.65.0.27:36924", "172.17.0.1:36924"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:22:28.143494996Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4885499348460219": {
-				"ID":          4885499348460219,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2007073167984570,
-				"StableID":   "nRiRxhQ1gG11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       2007073167984570,
-				"Key":        "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-				"DiscoKey":   "discokey:ffa98260567e7583b1f79f1642b7da858d7cbdce4518d69e49150c239bbe196e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:43843", "10.65.0.27:43843", "172.17.0.1:43843"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:22:26.542578346Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-			"MachineKey": "mkey:dc63db4a78a04c3975566bbb6fdc9d24c8045ee72cc1c92e4855cbcbc4a9c904",
-			"Peers": [{
-				"ID":         1410180188702206,
-				"StableID":   "nPBkLT3g1C11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-				"DiscoKey":   "discokey:a5f38e68cfb17f0d3860af66adca020f147fb1fd9b0ecd0401794de8eb426462",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35956", "10.65.0.27:35956", "172.17.0.1:35956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:22:24.473615904Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         693721057716932,
-				"StableID":   "nFYPLosBR611CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-				"DiscoKey":   "discokey:6e71c6ad0cc6e18fdbf10f81ec590d4c5f1fc08956fb012c362514541b1bb57e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35692", "10.65.0.27:35692", "172.17.0.1:35692"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:22:24.953467233Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8546938533674923,
-				"StableID":   "nng5cmavj921CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-				"DiscoKey":   "discokey:f2130a803dc39a2041684ddd967990dfde517bcded3f5c89e6d405d1ff1c7076",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43561", "10.65.0.27:43561", "172.17.0.1:43561"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:22:25.482375444Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4885499348460219,
-				"StableID":   "nAxNpSne9f11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-				"DiscoKey":   "discokey:ceb3e052aa7fe7706683ab3fa5f30a893ba80b650925aed7548c47539cc3496e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47133", "10.65.0.27:47133", "172.17.0.1:47133"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:22:26.017460174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4916221786446099,
-				"StableID":   "nGVYTyoZPf11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:9bafe8fdf786b834331bfb66f6328f698aadcc6cfa8c45b40833a434e749be49",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:22:27.089450977Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6489388615172605,
-				"StableID":   "nEdD4dE4gs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:3223dc89db4e4aef4cb09fbd5f623e958f934dec9454bddbaa952a5108b58904",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48287", "10.65.0.27:48287", "172.17.0.1:48287"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:22:27.608186196Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5613799184264469,
-				"StableID":   "n6KxM9zVqk11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-				"KeyExpiry":  "2026-11-03T08:22:28Z",
-				"DiscoKey":   "discokey:4acee92c36ffd3a3f9b39e762a44514a73a3d96787ed55d6c469c2cef8ca8e0b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36924", "10.65.0.27:36924", "172.17.0.1:36924"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:22:28.143494996Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2007073167984570": {
-				"ID":          2007073167984570,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5613799184264469,
-				"StableID":   "n6KxM9zVqk11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-				"KeyExpiry":  "2026-11-03T08:22:28Z",
-				"DiscoKey":   "discokey:4acee92c36ffd3a3f9b39e762a44514a73a3d96787ed55d6c469c2cef8ca8e0b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36924", "10.65.0.27:36924", "172.17.0.1:36924"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:22:28.143494996Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-			"MachineKey": "mkey:d9df34feb408400260e003cf3799e229661b543fa54511ad1941062a43693711",
-			"Peers": [{
-				"ID":         1410180188702206,
-				"StableID":   "nPBkLT3g1C11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-				"DiscoKey":   "discokey:a5f38e68cfb17f0d3860af66adca020f147fb1fd9b0ecd0401794de8eb426462",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35956", "10.65.0.27:35956", "172.17.0.1:35956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:22:24.473615904Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         693721057716932,
-				"StableID":   "nFYPLosBR611CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-				"DiscoKey":   "discokey:6e71c6ad0cc6e18fdbf10f81ec590d4c5f1fc08956fb012c362514541b1bb57e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35692", "10.65.0.27:35692", "172.17.0.1:35692"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:22:24.953467233Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8546938533674923,
-				"StableID":   "nng5cmavj921CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-				"DiscoKey":   "discokey:f2130a803dc39a2041684ddd967990dfde517bcded3f5c89e6d405d1ff1c7076",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43561", "10.65.0.27:43561", "172.17.0.1:43561"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:22:25.482375444Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4885499348460219,
-				"StableID":   "nAxNpSne9f11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-				"DiscoKey":   "discokey:ceb3e052aa7fe7706683ab3fa5f30a893ba80b650925aed7548c47539cc3496e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47133", "10.65.0.27:47133", "172.17.0.1:47133"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:22:26.017460174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2007073167984570,
-				"StableID":   "nRiRxhQ1gG11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-				"DiscoKey":   "discokey:ffa98260567e7583b1f79f1642b7da858d7cbdce4518d69e49150c239bbe196e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:43843", "10.65.0.27:43843", "172.17.0.1:43843"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:22:26.542578346Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4916221786446099,
-				"StableID":   "nGVYTyoZPf11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:9bafe8fdf786b834331bfb66f6328f698aadcc6cfa8c45b40833a434e749be49",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:22:27.089450977Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6489388615172605,
-				"StableID":   "nEdD4dE4gs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:3223dc89db4e4aef4cb09fbd5f623e958f934dec9454bddbaa952a5108b58904",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48287", "10.65.0.27:48287", "172.17.0.1:48287"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:22:27.608186196Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6489388615172605,
-				"StableID":   "nEdD4dE4gs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:3223dc89db4e4aef4cb09fbd5f623e958f934dec9454bddbaa952a5108b58904",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48287", "10.65.0.27:48287", "172.17.0.1:48287"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:22:27.608186196Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:81ce9d10407da9b58753b7fb936623d19cfda0b56b014a2292dbe748747b3e38",
-			"MachineKey": "mkey:170fda539aa0bf48e5f1d926908da536e51994fbe95762bea662e7213587ba2e",
-			"Peers": [{
-				"ID":         1410180188702206,
-				"StableID":   "nPBkLT3g1C11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fbe1aef558d7c8c5e66eedd823114401abda634140bea9ccda59473257eb811",
-				"DiscoKey":   "discokey:a5f38e68cfb17f0d3860af66adca020f147fb1fd9b0ecd0401794de8eb426462",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35956", "10.65.0.27:35956", "172.17.0.1:35956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:22:24.473615904Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         693721057716932,
-				"StableID":   "nFYPLosBR611CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1305db6909c5ead5bc8367d23a72e1bc04decb36fffed0709e9e43432bcd6574",
-				"DiscoKey":   "discokey:6e71c6ad0cc6e18fdbf10f81ec590d4c5f1fc08956fb012c362514541b1bb57e",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35692", "10.65.0.27:35692", "172.17.0.1:35692"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:22:24.953467233Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8546938533674923,
-				"StableID":   "nng5cmavj921CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:514935335e1d7a51f202be09601d688ece8308bff62267b3a703740563b7cf76",
-				"DiscoKey":   "discokey:f2130a803dc39a2041684ddd967990dfde517bcded3f5c89e6d405d1ff1c7076",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43561", "10.65.0.27:43561", "172.17.0.1:43561"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:22:25.482375444Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4885499348460219,
-				"StableID":   "nAxNpSne9f11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af83e6118873b8d05d9c05046ce43451ce86ef779a1a3ff5c7dfd01454dd0932",
-				"DiscoKey":   "discokey:ceb3e052aa7fe7706683ab3fa5f30a893ba80b650925aed7548c47539cc3496e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47133", "10.65.0.27:47133", "172.17.0.1:47133"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:22:26.017460174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2007073167984570,
-				"StableID":   "nRiRxhQ1gG11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7065b3e9786088bb661d784e741ec9940f73384d8029437281e95bf261465c12",
-				"DiscoKey":   "discokey:ffa98260567e7583b1f79f1642b7da858d7cbdce4518d69e49150c239bbe196e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:43843", "10.65.0.27:43843", "172.17.0.1:43843"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:22:26.542578346Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4916221786446099,
-				"StableID":   "nGVYTyoZPf11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:93c91258e80a71ccdffa4aad888564cc2a0bcabaa9b5d75e4c4d1c05b9fa7d04",
-				"KeyExpiry":  "2026-11-03T08:22:27Z",
-				"DiscoKey":   "discokey:9bafe8fdf786b834331bfb66f6328f698aadcc6cfa8c45b40833a434e749be49",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:22:27.089450977Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5613799184264469,
-				"StableID":   "n6KxM9zVqk11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ed5be981f281aabeb43619419234a7d8ea0f47d62328695b821e812766aa2d24",
-				"KeyExpiry":  "2026-11-03T08:22:28Z",
-				"DiscoKey":   "discokey:4acee92c36ffd3a3f9b39e762a44514a73a3d96787ed55d6c469c2cef8ca8e0b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36924", "10.65.0.27:36924", "172.17.0.1:36924"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:22:28.143494996Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h2-with-grants.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h2-with-grants.hujson
deleted file mode 100644
index a249fc601..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h2-with-grants.hujson
+++ /dev/null
@@ -1,7308 +0,0 @@
-// nodeattrs-interaction-h2-with-grants
-//
-// nodeAttrs alongside grants (taildrive shape)
-//
-// Nodes with filter rules: 2 of 8
-// Captured at:    2026-05-07T08:22:59Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-interaction-h2-with-grants",
-	"description":    "nodeAttrs alongside grants (taildrive shape)",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:22:59.082417123Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                       \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"nodeAttrs alongside grants (taildrive shape)\",\n    \"id\": \"nodeattrs-interaction-h2-with-grants\",\n    \"options\": {},\n    \"policy\": {\n        \"grants\": [\n            {\n                \"app\": {\n                    \"tailscale.com/cap/drive\": [\n                        {\n                            \"access\": \"rw\",\n                            \"shares\": [\n                                \"*\"\n                            ]\n                        }\n                    ]\n                },\n                \"dst\": [\n                    \"tag:server\"\n                ],\n                \"ip\": [\n                    \"*\"\n                ],\n                \"src\": [\n                    \"tag:client\"\n                ]\n            }\n        ],\n        \"groups\": {\n            \"group:admins\": [\n                \"odin@example.com\"\n            ],\n            \"group:developers\": [\n                \"thor@example.org\",\n                \"odin@example.com\"\n            ],\n            \"group:monitors\": [\n                \"freya@example.com\"\n            ]\n        },\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-interaction-h2-with-grants.hujson",
-		"full_policy": {
-			"grants": [{
-				"app": {"tailscale.com/cap/drive": [{"access": "rw", "shares": ["*"]}]},
-				"dst": ["tag:server"],
-				"ip":  ["*"],
-				"src": ["tag:client"]
-			}],
-			"groups": {
-				"group:admins":     ["odin@example.com"],
-				"group:developers": ["thor@example.org", "odin@example.com"],
-				"group:monitors":   ["freya@example.com"]
-			},
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["tag:server"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": ["100.64.0.10", "fd7a:115c:a1e0::a"], "CapGrant": [{
-			"Dsts":   ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"CapMap": {"tailscale.com/cap/drive-sharer": null}
-		}]}],
-		"packet_filter_matches": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-			"SrcCaps": null,
-			"Dsts":    [],
-			"Caps": [{
-				"Dst":    "100.64.0.11/32",
-				"Cap":    "tailscale.com/cap/drive-sharer",
-				"Values": null
-			}, {
-				"Dst":    "fd7a:115c:a1e0::b/128",
-				"Cap":    "tailscale.com/cap/drive-sharer",
-				"Values": null
-			}]
-		}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         341968739061360,
-				"StableID":   "nFzKTTwsf311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       341968739061360,
-				"Key":        "nodekey:e1ae3f590f819a16fd1b8c2f72839eaec93f4a61711f8f84f3db63b5ec6f3d6b",
-				"DiscoKey":   "discokey:b05b6d05bf10aa60aac30b292a4d997dd08a968a12b993ea45f0e37b40bd1b4b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:60985", "10.65.0.27:60985", "172.17.0.1:60985"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:23:04.708767847Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e1ae3f590f819a16fd1b8c2f72839eaec93f4a61711f8f84f3db63b5ec6f3d6b",
-			"MachineKey": "mkey:05e315d4d849e0ad8f9bcff0506c65cf6822b7a916458e4289a7d8e328303679",
-			"Peers": [{
-				"ID":         1140432938964180,
-				"StableID":   "nm74btEWu911CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d9a6aa53d55ae5153095031b1e99cd9e58dcb13dcd5149d9261aa30c7d8d5d5e",
-				"DiscoKey":   "discokey:e1e0afecc34821bebc182942f8e99c582f93b52cda097a59adb552be66f5873a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57140", "10.65.0.27:57140", "172.17.0.1:57140"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:23:06.87887642Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{
-				"IPProto": [6, 17, 1, 58],
-				"Srcs":    ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"SrcCaps": null,
-				"Dsts":    [],
-				"Caps": [{
-					"Dst":    "100.64.0.11/32",
-					"Cap":    "tailscale.com/cap/drive-sharer",
-					"Values": null
-				}, {
-					"Dst":    "fd7a:115c:a1e0::b/128",
-					"Cap":    "tailscale.com/cap/drive-sharer",
-					"Values": null
-				}]
-			}],
-			"PacketFilterRules": [{"SrcIPs": ["100.64.0.10", "fd7a:115c:a1e0::a"], "CapGrant": [{
-				"Dsts":   ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"CapMap": {"tailscale.com/cap/drive-sharer": null}
-			}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "341968739061360": {
-				"ID":          341968739061360,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         7156894933682095,
-			"StableID":   "nCbweeVNtx11CNTRL",
-			"Name":       "exit.tail78f774.ts.net.",
-			"User":       7156894933682095,
-			"Key":        "nodekey:ac83635d2398fd7247a8b07b04c5005dd12737c4c8683c774ac786d7f8e0e271",
-			"DiscoKey":   "discokey:dbafe7ca977513ba83a5b5652f2a8a7a5d046123520f4629b9f184006c0f6e2f",
-			"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"Endpoints":  ["77.164.248.136:43826", "10.65.0.27:43826", "172.17.0.1:43826"],
-			"Hostinfo": {
-				"Hostname":    "exit",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-07T08:23:05.256917156Z",
-			"Tags":              ["tag:exit"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "exit",
-			"ComputedNameWithHost": "exit"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:ac83635d2398fd7247a8b07b04c5005dd12737c4c8683c774ac786d7f8e0e271",
-		"MachineKey":        "mkey:9ede4c3840b6a574675279f58c9537c4a8e18eaff396fc6516268a6665d3446b",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"7156894933682095": {
-			"ID":          7156894933682095,
-			"LoginName":   "exit.tail78f774.ts.net",
-			"DisplayName": "exit"
-		}}
-	}}, "ivysaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         7411164580890536,
-			"StableID":   "nVB1g8jXsz11CNTRL",
-			"Name":       "ivysaur.tail78f774.ts.net.",
-			"User":       4538565228176803,
-			"Key":        "nodekey:b3abf1c01ac21f010254c0e9da592eaaedfa111e2a18fd5091f7651cd724392c",
-			"KeyExpiry":  "2026-11-03T08:23:07Z",
-			"DiscoKey":   "discokey:b28ac636cdc4ee692b64dfcd4e3d0c4eaa084332bbbe02741e4a5f7dcd20a840",
-			"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"Endpoints":  ["77.164.248.136:34955", "10.65.0.27:34955", "172.17.0.1:34955"],
-			"Hostinfo": {"Hostname": "ivysaur", "Services": [
-				{"Proto": "peerapi4", "Port": 50358},
-				{"Proto": "peerapi6", "Port": 50358},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-07T08:23:07.424748473Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "ivysaur",
-			"ComputedNameWithHost": "ivysaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:b3abf1c01ac21f010254c0e9da592eaaedfa111e2a18fd5091f7651cd724392c",
-		"MachineKey":        "mkey:f6edb84d2b9bb6b15d1ca008cb35c689bbdd3daeda8dfe01a51c78ed15244137",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4538565228176803": {
-			"ID":          4538565228176803,
-			"LoginName":   "thor@example.org",
-			"DisplayName": "thor"
-		}}
-	}}, "prod": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         1903129624305228,
-			"StableID":   "nVXSwJzvrF11CNTRL",
-			"Name":       "prod.tail78f774.ts.net.",
-			"User":       1903129624305228,
-			"Key":        "nodekey:afc6bc86c3e68cb579f221640158de9e656ad02706a5e1a869c485da0ed41e22",
-			"DiscoKey":   "discokey:5c96a08d1859aabf9c3a835507dff484bf2c505340e83730e54b0a5d6b0c9a29",
-			"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-			"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-			"Endpoints":  ["77.164.248.136:43240", "10.65.0.27:43240", "172.17.0.1:43240"],
-			"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-				{"Proto": "peerapi4", "Port": 39161},
-				{"Proto": "peerapi6", "Port": 39161},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-07T08:23:05.792516889Z",
-			"Tags":              ["tag:prod"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "prod",
-			"ComputedNameWithHost": "prod"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:afc6bc86c3e68cb579f221640158de9e656ad02706a5e1a869c485da0ed41e22",
-		"MachineKey":        "mkey:a056055da368885c51aee5f687551d842543db26756088c59004c77180190951",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"1903129624305228": {
-			"ID":          1903129624305228,
-			"LoginName":   "prod.tail78f774.ts.net",
-			"DisplayName": "prod"
-		}}
-	}}, "router": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         6512431668371272,
-			"StableID":   "nuf3m8YVrs11CNTRL",
-			"Name":       "router.tail78f774.ts.net.",
-			"User":       6512431668371272,
-			"Key":        "nodekey:144351a4ebe36d5be3aa5d7e344fba9360e9e72fb98fdc7b7a4fffe9aedc8a0c",
-			"DiscoKey":   "discokey:c7ed32c6339399adfe961b3d57de8b5c6992694110825b593fb9740460e9dd5f",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"Endpoints":  ["77.164.248.136:57964", "10.65.0.27:57964", "172.17.0.1:57964"],
-			"Hostinfo": {
-				"Hostname":    "router",
-				"RoutableIPs": ["10.33.0.0/16"],
-				"RequestTags": ["tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-07T08:23:06.338535373Z",
-			"Tags":              ["tag:router"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "router",
-			"ComputedNameWithHost": "router"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:144351a4ebe36d5be3aa5d7e344fba9360e9e72fb98fdc7b7a4fffe9aedc8a0c",
-		"MachineKey":        "mkey:180279ddd0fdd0dd60ba7a76ad949b22b48c37d4a64328d8adf69035aeb7c67a",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"6512431668371272": {
-			"ID":          6512431668371272,
-			"LoginName":   "router.tail78f774.ts.net",
-			"DisplayName": "router"
-		}}
-	}}, "server": {
-		"packet_filter_rules": [{"SrcIPs": ["100.64.0.11", "fd7a:115c:a1e0::b"], "DstPorts": [
-			{"IP": "100.64.0.10", "Ports": {"First": 0, "Last": 65535}},
-			{"IP": "fd7a:115c:a1e0::a", "Ports": {"First": 0, "Last": 65535}}
-		]}, {"SrcIPs": ["100.64.0.11", "fd7a:115c:a1e0::b"], "CapGrant": [{
-			"Dsts":   ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-			"CapMap": {"tailscale.com/cap/drive": [{"access": "rw", "shares": ["*"]}]}
-		}]}],
-		"packet_filter_matches": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"SrcCaps": null,
-			"Dsts": [
-				{"Net": "100.64.0.10/32", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "fd7a:115c:a1e0::a/128", "Ports": {"First": 0, "Last": 65535}}
-			],
-			"Caps": []
-		}, {
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"SrcCaps": null,
-			"Dsts":    [],
-			"Caps": [{
-				"Dst":    "100.64.0.10/32",
-				"Cap":    "tailscale.com/cap/drive",
-				"Values": [{"access": "rw", "shares": ["*"]}]
-			}, {
-				"Dst":    "fd7a:115c:a1e0::a/128",
-				"Cap":    "tailscale.com/cap/drive",
-				"Values": [{"access": "rw", "shares": ["*"]}]
-			}]
-		}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1140432938964180,
-				"StableID":   "nm74btEWu911CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1140432938964180,
-				"Key":        "nodekey:d9a6aa53d55ae5153095031b1e99cd9e58dcb13dcd5149d9261aa30c7d8d5d5e",
-				"DiscoKey":   "discokey:e1e0afecc34821bebc182942f8e99c582f93b52cda097a59adb552be66f5873a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57140", "10.65.0.27:57140", "172.17.0.1:57140"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:23:06.87887642Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d9a6aa53d55ae5153095031b1e99cd9e58dcb13dcd5149d9261aa30c7d8d5d5e",
-			"MachineKey": "mkey:744e0ff14207ff70e431bcd833d275932763107360688ebb7a9a8b5df841ce55",
-			"Peers": [{
-				"ID":         341968739061360,
-				"StableID":   "nFzKTTwsf311CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e1ae3f590f819a16fd1b8c2f72839eaec93f4a61711f8f84f3db63b5ec6f3d6b",
-				"DiscoKey":   "discokey:b05b6d05bf10aa60aac30b292a4d997dd08a968a12b993ea45f0e37b40bd1b4b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:60985", "10.65.0.27:60985", "172.17.0.1:60985"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:23:04.708767847Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{
-				"IPProto": [6, 17, 1, 58],
-				"Srcs":    ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"SrcCaps": null,
-				"Dsts": [
-					{"Net": "100.64.0.10/32", "Ports": {"First": 0, "Last": 65535}},
-					{"Net": "fd7a:115c:a1e0::a/128", "Ports": {"First": 0, "Last": 65535}}
-				],
-				"Caps": []
-			}, {
-				"IPProto": [6, 17, 1, 58],
-				"Srcs":    ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"SrcCaps": null,
-				"Dsts":    [],
-				"Caps": [{
-					"Dst":    "100.64.0.10/32",
-					"Cap":    "tailscale.com/cap/drive",
-					"Values": [{"access": "rw", "shares": ["*"]}]
-				}, {
-					"Dst":    "fd7a:115c:a1e0::a/128",
-					"Cap":    "tailscale.com/cap/drive",
-					"Values": [{"access": "rw", "shares": ["*"]}]
-				}]
-			}],
-			"PacketFilterRules": [{"SrcIPs": ["100.64.0.11", "fd7a:115c:a1e0::b"], "DstPorts": [
-				{"IP": "100.64.0.10", "Ports": {"First": 0, "Last": 65535}},
-				{"IP": "fd7a:115c:a1e0::a", "Ports": {"First": 0, "Last": 65535}}
-			]}, {"SrcIPs": ["100.64.0.11", "fd7a:115c:a1e0::b"], "CapGrant": [{
-				"Dsts":   ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"CapMap": {"tailscale.com/cap/drive": [{"access": "rw", "shares": ["*"]}]}
-			}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1140432938964180": {
-				"ID":          1140432938964180,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}}
-		}
-	}, "user-tid": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         6550947190266259,
-			"StableID":   "nGRGYuGw9t11CNTRL",
-			"Name":       "user-tid.tail78f774.ts.net.",
-			"User":       4156223528223174,
-			"Key":        "nodekey:c4d9ab55820f5bd1b813adf17b4abae64680bb40aeeea47f9bd8875466fa3208",
-			"KeyExpiry":  "2026-11-03T08:23:08Z",
-			"DiscoKey":   "discokey:52e317afcda38514d5f2718b4d868b00d54b0916ec25d1aeeb51819ad576927a",
-			"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"Endpoints":  ["77.164.248.136:52653", "10.65.0.27:52653", "172.17.0.1:52653"],
-			"Hostinfo": {"Hostname": "user-tid", "Services": [
-				{"Proto": "peerapi4", "Port": 51523},
-				{"Proto": "peerapi6", "Port": 51523},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-07T08:23:08.50754298Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "user-tid",
-			"ComputedNameWithHost": "user-tid"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:c4d9ab55820f5bd1b813adf17b4abae64680bb40aeeea47f9bd8875466fa3208",
-		"MachineKey":        "mkey:529dd302e1f4dd34cefb7b312840380acf8e1d5b20b07c96ed151c78f873d063",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4156223528223174": {
-			"ID":          4156223528223174,
-			"LoginName":   "odin@example.com",
-			"DisplayName": "odin"
-		}}
-	}}, "venusaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         5670226498147787,
-			"StableID":   "nGj3sdE4Hm11CNTRL",
-			"Name":       "venusaur.tail78f774.ts.net.",
-			"User":       3982058329734709,
-			"Key":        "nodekey:55997d552bbbdc976fe8c391a33016f86e4b39888ce2168e9b60d8c85a30b347",
-			"KeyExpiry":  "2026-11-03T08:23:07Z",
-			"DiscoKey":   "discokey:89873846447d500bae3b3ab7d4d99ab411e3db9aacf6d26cc53f8b6c3d010220",
-			"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"Endpoints":  ["77.164.248.136:41640", "10.65.0.27:41640", "172.17.0.1:41640"],
-			"Hostinfo": {"Hostname": "venusaur", "Services": [
-				{"Proto": "peerapi4", "Port": 62496},
-				{"Proto": "peerapi6", "Port": 62496},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-07T08:23:07.968710393Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "venusaur",
-			"ComputedNameWithHost": "venusaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:55997d552bbbdc976fe8c391a33016f86e4b39888ce2168e9b60d8c85a30b347",
-		"MachineKey":        "mkey:fbba4b09fc6165aa713d27c65f2d71a14d06341c34797002b686505505411d0d",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"3982058329734709": {
-			"ID":          3982058329734709,
-			"LoginName":   "freya@example.com",
-			"DisplayName": "freya"
-		}}
-	}}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h3-policy-uses-everything.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h3-policy-uses-everything.hujson
deleted file mode 100644
index 740008549..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-interaction-h3-policy-uses-everything.hujson
+++ /dev/null
@@ -1,7408 +0,0 @@
-// nodeattrs-interaction-h3-policy-uses-everything
-//
-// acls + grants + nodeAttrs in one policy
-//
-// Nodes with filter rules: 3 of 8
-// Captured at:    2026-05-07T08:23:39Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-interaction-h3-policy-uses-everything",
-	"description":    "acls + grants + nodeAttrs in one policy",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:23:39.55455048Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                                  \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"acls + grants + nodeAttrs in one policy\",\n    \"id\": \"nodeattrs-interaction-h3-policy-uses-everything\",\n    \"options\": {},\n    \"policy\": {\n        \"acls\": [\n            {\n                \"action\": \"accept\",\n                \"dst\": [\n                    \"tag:server:*\"\n                ],\n                \"src\": [\n                    \"group:developers\"\n                ]\n            }\n        ],\n        \"grants\": [\n            {\n                \"app\": {\n                    \"tailscale.com/cap/drive\": [\n                        {\n                            \"access\": \"rw\",\n                            \"shares\": [\n                                \"*\"\n                            ]\n                        }\n                    ]\n                },\n                \"dst\": [\n                    \"tag:server\"\n                ],\n                \"src\": [\n                    \"group:developers\"\n                ]\n            }\n        ],\n        \"groups\": {\n            \"group:admins\": [\n                \"odin@example.com\"\n            ],\n            \"group:developers\": [\n                \"thor@example.org\",\n                \"odin@example.com\"\n            ],\n            \"group:monitors\": [\n                \"freya@example.com\"\n            ]\n        },\n        \"hosts\": {\n            \"office\": \"100.64.0.10\"\n        },\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"autogroup:member\"\n                ]\n            },\n            {\n                \"attr\": [\n                    \"disable-captive-portal-detection\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            },\n            {\n                \"attr\": [\n                    \"nextdns:exit-profile\"\n                ],\n                \"target\": [\n                    \"tag:exit\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-interaction-h3-policy-uses-everything.hujson",
-		"full_policy": {"acls": [
-			{"action": "accept", "dst": ["tag:server:*"], "src": ["group:developers"]}
-		], "grants": [{
-			"app": {"tailscale.com/cap/drive": [{"access": "rw", "shares": ["*"]}]},
-			"dst": ["tag:server"],
-			"src": ["group:developers"]
-		}], "groups": {
-			"group:admins":     ["odin@example.com"],
-			"group:developers": ["thor@example.org", "odin@example.com"],
-			"group:monitors":   ["freya@example.com"]
-		}, "hosts": {"office": "100.64.0.10"}, "nodeAttrs": [
-			{"attr": ["randomize-client-port"], "target": ["autogroup:member"]},
-			{"attr": ["disable-captive-portal-detection"], "target": ["tag:server"]},
-			{"attr": ["nextdns:exit-profile"], "target": ["tag:exit"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         308766712502910,
-			"StableID":   "nsPb48nqQ311CNTRL",
-			"Name":       "client.tail78f774.ts.net.",
-			"User":       308766712502910,
-			"Key":        "nodekey:473dca61cb03e18f2c4ffc9874c92bb583a3bf82598c24cbeff5b07c029c614c",
-			"DiscoKey":   "discokey:2e91ea5404148028b50c89d88f8bd7e571636bd733d88f7ff425fe16e005200d",
-			"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-			"Endpoints":  ["77.164.248.136:39443", "10.65.0.27:39443", "172.17.0.1:39443"],
-			"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-				{"Proto": "peerapi4", "Port": 36186},
-				{"Proto": "peerapi6", "Port": 36186},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-07T08:23:45.15646953Z",
-			"Tags":              ["tag:client"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "client",
-			"ComputedNameWithHost": "client"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:473dca61cb03e18f2c4ffc9874c92bb583a3bf82598c24cbeff5b07c029c614c",
-		"MachineKey":        "mkey:62e30465c5ede42550a7146d2b46859c4486312392aa92c0c7986867a3524e3b",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"308766712502910": {
-			"ID":          308766712502910,
-			"LoginName":   "client.tail78f774.ts.net",
-			"DisplayName": "client"
-		}}
-	}}, "exit": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2680191901486659,
-			"StableID":   "nrN1Tb6svM11CNTRL",
-			"Name":       "exit.tail78f774.ts.net.",
-			"User":       2680191901486659,
-			"Key":        "nodekey:e64e724f7ff9dca603f2a7da02e23460a433c3efedfde91012a23a0a0b6ddf69",
-			"DiscoKey":   "discokey:754c80e118e28658182d54bb87fece7f081dfaf35d88c07e94468d428da56b3b",
-			"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-			"Endpoints":  ["77.164.248.136:40705", "10.65.0.27:40705", "172.17.0.1:40705"],
-			"Hostinfo": {
-				"Hostname":    "exit",
-				"RoutableIPs": ["0.0.0.0/0", "::/0"],
-				"RequestTags": ["tag:exit"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-07T08:23:45.703161935Z",
-			"Tags":              ["tag:exit"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"nextdns:exit-profile":                   null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "exit",
-			"ComputedNameWithHost": "exit"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"nextdns:exit-profile",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:e64e724f7ff9dca603f2a7da02e23460a433c3efedfde91012a23a0a0b6ddf69",
-		"MachineKey":        "mkey:cea4b87c4a77332e2f5735b7f5924ac9278da5b55102cc25d5f6ae36d9527e6e",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"2680191901486659": {
-			"ID":          2680191901486659,
-			"LoginName":   "exit.tail78f774.ts.net",
-			"DisplayName": "exit"
-		}}
-	}}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": ["100.64.0.10", "fd7a:115c:a1e0::a"], "CapGrant": [{
-			"Dsts":   ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"CapMap": {"tailscale.com/cap/drive-sharer": null}
-		}]}],
-		"packet_filter_matches": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-			"SrcCaps": null,
-			"Dsts":    [],
-			"Caps": [{
-				"Dst":    "100.64.0.16/32",
-				"Cap":    "tailscale.com/cap/drive-sharer",
-				"Values": null
-			}, {
-				"Dst":    "fd7a:115c:a1e0::10/128",
-				"Cap":    "tailscale.com/cap/drive-sharer",
-				"Values": null
-			}]
-		}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1984271304065068,
-				"StableID":   "nRThKfSgVG11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b951eba2e1cd079f3b7b25f1de595a7ad04d8a4ca4b58218432ebdcc8a6ec20b",
-				"KeyExpiry":  "2026-11-03T08:23:47Z",
-				"DiscoKey":   "discokey:7d0f8c2e4cce2b8f516d3e8ad0dbb3313b811c94b688f5a34bc0feda84f5e211",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:53558", "10.65.0.27:53558", "172.17.0.1:53558"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:23:47.826043704Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b951eba2e1cd079f3b7b25f1de595a7ad04d8a4ca4b58218432ebdcc8a6ec20b",
-			"MachineKey": "mkey:85a27b79172bf27726da74ef29391b39e8363cf0dbdf9f6a8010ffcab55db566",
-			"Peers": [{
-				"ID":         7139249563881172,
-				"StableID":   "nBERkqyNkx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7e5e78e2320d0af21412e8ac9e5925f21e1ac475812008a955cb75269eb7f272",
-				"DiscoKey":   "discokey:0ffda4ff063c20a4c92fc8f997a5c45b6883ad145640a4e216e6968f7948136e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58983", "10.65.0.27:58983", "172.17.0.1:58983"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:23:47.306024896Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{
-				"IPProto": [6, 17, 1, 58],
-				"Srcs":    ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"SrcCaps": null,
-				"Dsts":    [],
-				"Caps": [{
-					"Dst":    "100.64.0.16/32",
-					"Cap":    "tailscale.com/cap/drive-sharer",
-					"Values": null
-				}, {
-					"Dst":    "fd7a:115c:a1e0::10/128",
-					"Cap":    "tailscale.com/cap/drive-sharer",
-					"Values": null
-				}]
-			}],
-			"PacketFilterRules": [{"SrcIPs": ["100.64.0.10", "fd7a:115c:a1e0::a"], "CapGrant": [{
-				"Dsts":   ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"CapMap": {"tailscale.com/cap/drive-sharer": null}
-			}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         3748040342469937,
-			"StableID":   "nvhAWXfVGW11CNTRL",
-			"Name":       "prod.tail78f774.ts.net.",
-			"User":       3748040342469937,
-			"Key":        "nodekey:bd237cea4fe15a1df1404290d48ad636faa939d604286fbe8695584843a49348",
-			"DiscoKey":   "discokey:41bfdfc378d33a62712c80f78d8c9f95ddd8052ac1601733f09700177bee0329",
-			"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-			"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-			"Endpoints":  ["77.164.248.136:51011", "10.65.0.27:51011", "172.17.0.1:51011"],
-			"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-				{"Proto": "peerapi4", "Port": 39161},
-				{"Proto": "peerapi6", "Port": 39161},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-07T08:23:46.224452403Z",
-			"Tags":              ["tag:prod"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "prod",
-			"ComputedNameWithHost": "prod"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:bd237cea4fe15a1df1404290d48ad636faa939d604286fbe8695584843a49348",
-		"MachineKey":        "mkey:3c4f892980d0dc088f0006f6ea265f78a44373cb47bb5d9f284366c6839bb05a",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"3748040342469937": {
-			"ID":          3748040342469937,
-			"LoginName":   "prod.tail78f774.ts.net",
-			"DisplayName": "prod"
-		}}
-	}}, "router": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         4798467574035189,
-			"StableID":   "nrsMwAcEUe11CNTRL",
-			"Name":       "router.tail78f774.ts.net.",
-			"User":       4798467574035189,
-			"Key":        "nodekey:8eda999296a28943124fd47cb94b05c529d341bcef2bd67a241ffa2cf7e71816",
-			"DiscoKey":   "discokey:0cbc4835d8bec6e10580a4feef1cae74fbd2c2d46af777712c765baea871cd39",
-			"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-			"Endpoints":  ["77.164.248.136:51470", "10.65.0.27:51470", "172.17.0.1:51470"],
-			"Hostinfo": {
-				"Hostname":    "router",
-				"RoutableIPs": ["10.33.0.0/16"],
-				"RequestTags": ["tag:router"],
-				"Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]
-			},
-			"Created":           "2026-05-07T08:23:46.758276273Z",
-			"Tags":              ["tag:router"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "router",
-			"ComputedNameWithHost": "router"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:8eda999296a28943124fd47cb94b05c529d341bcef2bd67a241ffa2cf7e71816",
-		"MachineKey":        "mkey:5548636112de23605efa114b27f58f50a0d3f99849b3bfc114313ec4bd08373d",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4798467574035189": {
-			"ID":          4798467574035189,
-			"LoginName":   "router.tail78f774.ts.net",
-			"DisplayName": "router"
-		}}
-	}}, "server": {"packet_filter_rules": [{
-		"SrcIPs": ["100.64.0.15", "100.64.0.16", "fd7a:115c:a1e0::f", "fd7a:115c:a1e0::10"],
-		"CapGrant": [{
-			"Dsts":   ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-			"CapMap": {"tailscale.com/cap/drive": [{"access": "rw", "shares": ["*"]}]}
-		}]
-	}, {
-		"SrcIPs": ["100.64.0.15", "100.64.0.16", "fd7a:115c:a1e0::f", "fd7a:115c:a1e0::10"],
-		"DstPorts": [
-			{"IP": "100.64.0.10", "Ports": {"First": 0, "Last": 65535}},
-			{"IP": "fd7a:115c:a1e0::a", "Ports": {"First": 0, "Last": 65535}}
-		]
-	}], "packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-		"100.64.0.15/32",
-		"100.64.0.16/32",
-		"fd7a:115c:a1e0::f/128",
-		"fd7a:115c:a1e0::10/128"
-	], "SrcCaps": null, "Dsts": [], "Caps": [{
-		"Dst":    "100.64.0.10/32",
-		"Cap":    "tailscale.com/cap/drive",
-		"Values": [{"access": "rw", "shares": ["*"]}]
-	}, {
-		"Dst":    "fd7a:115c:a1e0::a/128",
-		"Cap":    "tailscale.com/cap/drive",
-		"Values": [{"access": "rw", "shares": ["*"]}]
-	}]}, {"IPProto": [6, 17, 1, 58], "Srcs": [
-		"100.64.0.15/32",
-		"100.64.0.16/32",
-		"fd7a:115c:a1e0::f/128",
-		"fd7a:115c:a1e0::10/128"
-	], "SrcCaps": null, "Dsts": [
-		{"Net": "100.64.0.10/32", "Ports": {"First": 0, "Last": 65535}},
-		{"Net": "fd7a:115c:a1e0::a/128", "Ports": {"First": 0, "Last": 65535}}
-	], "Caps": []}], "netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         7139249563881172,
-			"StableID":   "nBERkqyNkx11CNTRL",
-			"Name":       "server.tail78f774.ts.net.",
-			"User":       7139249563881172,
-			"Key":        "nodekey:7e5e78e2320d0af21412e8ac9e5925f21e1ac475812008a955cb75269eb7f272",
-			"DiscoKey":   "discokey:0ffda4ff063c20a4c92fc8f997a5c45b6883ad145640a4e216e6968f7948136e",
-			"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-			"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-			"Endpoints":  ["77.164.248.136:58983", "10.65.0.27:58983", "172.17.0.1:58983"],
-			"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-				{"Proto": "peerapi4", "Port": 48588},
-				{"Proto": "peerapi6", "Port": 48588},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-07T08:23:47.306024896Z",
-			"Tags":              ["tag:server"],
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"disable-captive-portal-detection":       null,
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-owner":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "server",
-			"ComputedNameWithHost": "server"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"disable-captive-portal-detection",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-owner",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":    "nodekey:7e5e78e2320d0af21412e8ac9e5925f21e1ac475812008a955cb75269eb7f272",
-		"MachineKey": "mkey:951631e676fd588e0bcca51ba1342453e08a5f00ca6a8e9a7207b9bd3a1c6606",
-		"Peers": [{
-			"ID":         1984271304065068,
-			"StableID":   "nRThKfSgVG11CNTRL",
-			"Name":       "ivysaur.tail78f774.ts.net.",
-			"User":       4538565228176803,
-			"Key":        "nodekey:b951eba2e1cd079f3b7b25f1de595a7ad04d8a4ca4b58218432ebdcc8a6ec20b",
-			"KeyExpiry":  "2026-11-03T08:23:47Z",
-			"DiscoKey":   "discokey:7d0f8c2e4cce2b8f516d3e8ad0dbb3313b811c94b688f5a34bc0feda84f5e211",
-			"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-			"Endpoints":  ["77.164.248.136:53558", "10.65.0.27:53558", "172.17.0.1:53558"],
-			"HomeDERP":   14,
-			"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-				{"Proto": "peerapi4", "Port": 50358},
-				{"Proto": "peerapi6", "Port": 50358}
-			]},
-			"Created":              "2026-05-07T08:23:47.826043704Z",
-			"Cap":                  131,
-			"Online":               true,
-			"ComputedName":         "ivysaur",
-			"ComputedNameWithHost": "ivysaur"
-		}, {
-			"ID":         1299363992675457,
-			"StableID":   "ngi3a96V9B11CNTRL",
-			"Name":       "user-tid.tail78f774.ts.net.",
-			"User":       4156223528223174,
-			"Key":        "nodekey:2d673e8c294ef2629a22b5623314fb58a501c7b7675de5fb9cc026d84d3f0c5a",
-			"KeyExpiry":  "2026-11-03T08:23:48Z",
-			"DiscoKey":   "discokey:0aba185196eba3ed285fec354c8a441ee993d503943f6271281d461ef8075659",
-			"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"Endpoints":  ["77.164.248.136:36339", "10.65.0.27:36339", "172.17.0.1:36339"],
-			"HomeDERP":   14,
-			"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-				{"Proto": "peerapi4", "Port": 51523},
-				{"Proto": "peerapi6", "Port": 51523}
-			]},
-			"Created":              "2026-05-07T08:23:48.884530664Z",
-			"Cap":                  131,
-			"Online":               true,
-			"ComputedName":         "user-tid",
-			"ComputedNameWithHost": "user-tid"
-		}],
-		"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.64.0.15/32",
-			"100.64.0.16/32",
-			"fd7a:115c:a1e0::f/128",
-			"fd7a:115c:a1e0::10/128"
-		], "SrcCaps": null, "Dsts": [], "Caps": [{
-			"Dst":    "100.64.0.10/32",
-			"Cap":    "tailscale.com/cap/drive",
-			"Values": [{"access": "rw", "shares": ["*"]}]
-		}, {
-			"Dst":    "fd7a:115c:a1e0::a/128",
-			"Cap":    "tailscale.com/cap/drive",
-			"Values": [{"access": "rw", "shares": ["*"]}]
-		}]}, {"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.64.0.15/32",
-			"100.64.0.16/32",
-			"fd7a:115c:a1e0::f/128",
-			"fd7a:115c:a1e0::10/128"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "100.64.0.10/32", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "fd7a:115c:a1e0::a/128", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"PacketFilterRules": [{
-			"SrcIPs": ["100.64.0.15", "100.64.0.16", "fd7a:115c:a1e0::f", "fd7a:115c:a1e0::10"],
-			"CapGrant": [{
-				"Dsts":   ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"CapMap": {"tailscale.com/cap/drive": [{"access": "rw", "shares": ["*"]}]}
-			}]
-		}, {
-			"SrcIPs": ["100.64.0.15", "100.64.0.16", "fd7a:115c:a1e0::f", "fd7a:115c:a1e0::10"],
-			"DstPorts": [
-				{"IP": "100.64.0.10", "Ports": {"First": 0, "Last": 65535}},
-				{"IP": "fd7a:115c:a1e0::a", "Ports": {"First": 0, "Last": 65535}}
-			]
-		}],
-		"SSHPolicy":       {"rules": []},
-		"CollectServices": false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"4156223528223174": {
-			"ID":          4156223528223174,
-			"LoginName":   "odin@example.com",
-			"DisplayName": "odin"
-		}, "4538565228176803": {
-			"ID":          4538565228176803,
-			"LoginName":   "thor@example.org",
-			"DisplayName": "thor"
-		}, "7139249563881172": {
-			"ID":          7139249563881172,
-			"LoginName":   "server.tail78f774.ts.net",
-			"DisplayName": "server"
-		}}
-	}}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": ["100.64.0.10", "fd7a:115c:a1e0::a"], "CapGrant": [{
-			"Dsts":   ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-			"CapMap": {"tailscale.com/cap/drive-sharer": null}
-		}]}],
-		"packet_filter_matches": [{
-			"IPProto": [6, 17, 1, 58],
-			"Srcs":    ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-			"SrcCaps": null,
-			"Dsts":    [],
-			"Caps": [{
-				"Dst":    "100.64.0.15/32",
-				"Cap":    "tailscale.com/cap/drive-sharer",
-				"Values": null
-			}, {
-				"Dst":    "fd7a:115c:a1e0::f/128",
-				"Cap":    "tailscale.com/cap/drive-sharer",
-				"Values": null
-			}]
-		}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1299363992675457,
-				"StableID":   "ngi3a96V9B11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2d673e8c294ef2629a22b5623314fb58a501c7b7675de5fb9cc026d84d3f0c5a",
-				"KeyExpiry":  "2026-11-03T08:23:48Z",
-				"DiscoKey":   "discokey:0aba185196eba3ed285fec354c8a441ee993d503943f6271281d461ef8075659",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:36339", "10.65.0.27:36339", "172.17.0.1:36339"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:23:48.884530664Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2d673e8c294ef2629a22b5623314fb58a501c7b7675de5fb9cc026d84d3f0c5a",
-			"MachineKey": "mkey:7eefa5f600ca9fe16eeb01c8c6c02e1761a2321b7e287fac45c19fdf78a64704",
-			"Peers": [{
-				"ID":         7139249563881172,
-				"StableID":   "nBERkqyNkx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7e5e78e2320d0af21412e8ac9e5925f21e1ac475812008a955cb75269eb7f272",
-				"DiscoKey":   "discokey:0ffda4ff063c20a4c92fc8f997a5c45b6883ad145640a4e216e6968f7948136e",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:58983", "10.65.0.27:58983", "172.17.0.1:58983"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:23:47.306024896Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{
-				"IPProto": [6, 17, 1, 58],
-				"Srcs":    ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"SrcCaps": null,
-				"Dsts":    [],
-				"Caps": [{
-					"Dst":    "100.64.0.15/32",
-					"Cap":    "tailscale.com/cap/drive-sharer",
-					"Values": null
-				}, {
-					"Dst":    "fd7a:115c:a1e0::f/128",
-					"Cap":    "tailscale.com/cap/drive-sharer",
-					"Values": null
-				}]
-			}],
-			"PacketFilterRules": [{"SrcIPs": ["100.64.0.10", "fd7a:115c:a1e0::a"], "CapGrant": [{
-				"Dsts":   ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"CapMap": {"tailscale.com/cap/drive-sharer": null}
-			}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}}
-		}
-	}, "venusaur": {"netmap": {
-		"Cached": false,
-		"SelfNode": {
-			"ID":         2150651626216391,
-			"StableID":   "nkfbeLy2oH11CNTRL",
-			"Name":       "venusaur.tail78f774.ts.net.",
-			"User":       3982058329734709,
-			"Key":        "nodekey:ac2e1b75cc30bd75bba1d0950540ef30387e9865b3838b796cd9c076a8d35254",
-			"KeyExpiry":  "2026-11-03T08:23:48Z",
-			"DiscoKey":   "discokey:06584b62e131f16edf4a0d12993c766e4ff3b7308c819f34324fc3dcb664576e",
-			"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-			"Endpoints":  ["77.164.248.136:34283", "10.65.0.27:34283", "172.17.0.1:34283"],
-			"Hostinfo": {"Hostname": "venusaur", "Services": [
-				{"Proto": "peerapi4", "Port": 62496},
-				{"Proto": "peerapi6", "Port": 62496},
-				{"Proto": "peerapi-dns-proxy", "Port": 1}
-			]},
-			"Created":           "2026-05-07T08:23:48.35898088Z",
-			"MachineAuthorized": true,
-			"CapMap": {
-				"default-auto-update":                    [false],
-				"https://tailscale.com/cap/file-sharing": null,
-				"https://tailscale.com/cap/is-admin":     null,
-				"https://tailscale.com/cap/ssh":          null,
-				"https://tailscale.com/cap/tailnet-lock": null,
-				"probe-udp-lifetime":                     null,
-				"randomize-client-port":                  null,
-				"ssh-behavior-v1":                        null,
-				"ssh-env-vars":                           null,
-				"store-appc-routes":                      null,
-				"tailnet-display-name":                   ["odin@example.com"]
-			},
-			"ComputedName":         "venusaur",
-			"ComputedNameWithHost": "venusaur"
-		},
-		"AllCaps": [
-			"default-auto-update",
-			"https://tailscale.com/cap/file-sharing",
-			"https://tailscale.com/cap/is-admin",
-			"https://tailscale.com/cap/ssh",
-			"https://tailscale.com/cap/tailnet-lock",
-			"probe-udp-lifetime",
-			"randomize-client-port",
-			"ssh-behavior-v1",
-			"ssh-env-vars",
-			"store-appc-routes",
-			"tailnet-display-name"
-		],
-		"NodeKey":           "nodekey:ac2e1b75cc30bd75bba1d0950540ef30387e9865b3838b796cd9c076a8d35254",
-		"MachineKey":        "mkey:6b06c58359c270dc805ea14d31469ddc0db9d6a3c4d40caadf109bc877d78e72",
-		"Peers":             [],
-		"DNS":               {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-		"PacketFilter":      [],
-		"PacketFilterRules": null,
-		"SSHPolicy":         {"rules": []},
-		"CollectServices":   false,
-		"DERPMap": {"Regions": {"1": {
-			"RegionID":   1,
-			"RegionCode": "nyc",
-			"RegionName": "New York City",
-			"Latitude":   40.7128,
-			"Longitude":  -74.006,
-			"Nodes": [{
-				"Name":      "1h",
-				"RegionID":  1,
-				"HostName":  "derp1h.tailscale.com",
-				"IPv4":      "199.38.181.93",
-				"IPv6":      "2607:f740:f::afd",
-				"CanPort80": true
-			}, {
-				"Name":      "1g",
-				"RegionID":  1,
-				"HostName":  "derp1g.tailscale.com",
-				"IPv4":      "209.177.145.120",
-				"IPv6":      "2607:f740:f::3eb",
-				"CanPort80": true
-			}, {
-				"Name":      "1i",
-				"RegionID":  1,
-				"HostName":  "derp1i.tailscale.com",
-				"IPv4":      "199.38.181.103",
-				"IPv6":      "2607:f740:f::e19",
-				"CanPort80": true
-			}, {
-				"Name":      "1f",
-				"RegionID":  1,
-				"HostName":  "derp1f.tailscale.com",
-				"IPv4":      "199.38.181.104",
-				"IPv6":      "2607:f740:f::bc",
-				"CanPort80": true
-			}]
-		}, "10": {
-			"RegionID":   10,
-			"RegionCode": "sea",
-			"RegionName": "Seattle",
-			"Latitude":   47.609722,
-			"Longitude":  -122.333056,
-			"Nodes": [{
-				"Name":      "10c",
-				"RegionID":  10,
-				"HostName":  "derp10c.tailscale.com",
-				"IPv4":      "192.73.240.121",
-				"IPv6":      "2607:f740:14::40c",
-				"CanPort80": true
-			}, {
-				"Name":      "10d",
-				"RegionID":  10,
-				"HostName":  "derp10d.tailscale.com",
-				"IPv4":      "192.73.240.132",
-				"IPv6":      "2607:f740:14::500",
-				"CanPort80": true
-			}, {
-				"Name":      "10b",
-				"RegionID":  10,
-				"HostName":  "derp10b.tailscale.com",
-				"IPv4":      "192.73.240.161",
-				"IPv6":      "2607:f740:14::61c",
-				"CanPort80": true
-			}]
-		}, "11": {
-			"RegionID":   11,
-			"RegionCode": "sao",
-			"RegionName": "São Paulo",
-			"Latitude":   -23.55,
-			"Longitude":  -46.633333,
-			"Nodes": [{
-				"Name":      "11f",
-				"RegionID":  11,
-				"HostName":  "derp11f.tailscale.com",
-				"IPv4":      "172.237.61.197",
-				"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-				"CanPort80": true
-			}, {
-				"Name":      "11g",
-				"RegionID":  11,
-				"HostName":  "derp11g.tailscale.com",
-				"IPv4":      "172.237.61.190",
-				"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-				"CanPort80": true
-			}, {
-				"Name":      "11e",
-				"RegionID":  11,
-				"HostName":  "derp11e.tailscale.com",
-				"IPv4":      "172.237.61.194",
-				"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-				"CanPort80": true
-			}]
-		}, "12": {
-			"RegionID":   12,
-			"RegionCode": "ord",
-			"RegionName": "Chicago",
-			"Latitude":   41.881944,
-			"Longitude":  -87.627778,
-			"Nodes": [{
-				"Name":      "12e",
-				"RegionID":  12,
-				"HostName":  "derp12e.tailscale.com",
-				"IPv4":      "209.177.158.15",
-				"IPv6":      "2607:f740:e::b17",
-				"CanPort80": true
-			}, {
-				"Name":      "12f",
-				"RegionID":  12,
-				"HostName":  "derp12f.tailscale.com",
-				"IPv4":      "199.38.182.118",
-				"IPv6":      "2607:f740:e::4c8",
-				"CanPort80": true
-			}, {
-				"Name":      "12d",
-				"RegionID":  12,
-				"HostName":  "derp12d.tailscale.com",
-				"IPv4":      "209.177.158.246",
-				"IPv6":      "2607:f740:e::811",
-				"CanPort80": true
-			}]
-		}, "13": {
-			"RegionID":   13,
-			"RegionCode": "den",
-			"RegionName": "Denver",
-			"Latitude":   39.7392,
-			"Longitude":  -104.9849,
-			"Nodes": [{
-				"Name":      "13c",
-				"RegionID":  13,
-				"HostName":  "derp13c.tailscale.com",
-				"IPv4":      "192.73.242.28",
-				"IPv6":      "2607:f740:16::5c",
-				"CanPort80": true
-			}, {
-				"Name":      "13d",
-				"RegionID":  13,
-				"HostName":  "derp13d.tailscale.com",
-				"IPv4":      "192.73.242.204",
-				"IPv6":      "2607:f740:16::c23",
-				"CanPort80": true
-			}, {
-				"Name":      "13b",
-				"RegionID":  13,
-				"HostName":  "derp13b.tailscale.com",
-				"IPv4":      "192.73.242.187",
-				"IPv6":      "2607:f740:16::640",
-				"CanPort80": true
-			}]
-		}, "14": {
-			"RegionID":   14,
-			"RegionCode": "ams",
-			"RegionName": "Amsterdam",
-			"Latitude":   52.372778,
-			"Longitude":  4.893611,
-			"Nodes": [{
-				"Name":      "14c",
-				"RegionID":  14,
-				"HostName":  "derp14c.tailscale.com",
-				"IPv4":      "176.58.93.147",
-				"IPv6":      "2a00:dd80:3c::b09",
-				"CanPort80": true
-			}, {
-				"Name":      "14d",
-				"RegionID":  14,
-				"HostName":  "derp14d.tailscale.com",
-				"IPv4":      "176.58.93.154",
-				"IPv6":      "2a00:dd80:3c::3d5",
-				"CanPort80": true
-			}, {
-				"Name":      "14b",
-				"RegionID":  14,
-				"HostName":  "derp14b.tailscale.com",
-				"IPv4":      "176.58.93.248",
-				"IPv6":      "2a00:dd80:3c::807",
-				"CanPort80": true
-			}]
-		}, "15": {
-			"RegionID":   15,
-			"RegionCode": "jnb",
-			"RegionName": "Johannesburg",
-			"Latitude":   -26.204444,
-			"Longitude":  28.045556,
-			"Nodes": [{
-				"Name":      "15c",
-				"RegionID":  15,
-				"HostName":  "derp15c.tailscale.com",
-				"IPv4":      "102.67.165.185",
-				"IPv6":      "2c0f:edb0:0:10::b59",
-				"CanPort80": true
-			}, {
-				"Name":      "15d",
-				"RegionID":  15,
-				"HostName":  "derp15d.tailscale.com",
-				"IPv4":      "102.67.165.36",
-				"IPv6":      "2c0f:edb0:0:10::599",
-				"CanPort80": true
-			}, {
-				"Name":      "15b",
-				"RegionID":  15,
-				"HostName":  "derp15b.tailscale.com",
-				"IPv4":      "102.67.165.90",
-				"IPv6":      "2c0f:edb0:0:10::963",
-				"CanPort80": true
-			}]
-		}, "16": {
-			"RegionID":   16,
-			"RegionCode": "mia",
-			"RegionName": "Miami",
-			"Latitude":   25.78,
-			"Longitude":  -80.21,
-			"Nodes": [{
-				"Name":      "16c",
-				"RegionID":  16,
-				"HostName":  "derp16c.tailscale.com",
-				"IPv4":      "192.73.243.229",
-				"IPv6":      "2607:f740:17::4e4",
-				"CanPort80": true
-			}, {
-				"Name":      "16d",
-				"RegionID":  16,
-				"HostName":  "derp16d.tailscale.com",
-				"IPv4":      "192.73.243.141",
-				"IPv6":      "2607:f740:17::475",
-				"CanPort80": true
-			}, {
-				"Name":      "16b",
-				"RegionID":  16,
-				"HostName":  "derp16b.tailscale.com",
-				"IPv4":      "192.73.243.135",
-				"IPv6":      "2607:f740:17::476",
-				"CanPort80": true
-			}]
-		}, "17": {
-			"RegionID":   17,
-			"RegionCode": "lax",
-			"RegionName": "Los Angeles",
-			"Latitude":   34.05,
-			"Longitude":  -118.25,
-			"Nodes": [{
-				"Name":      "17c",
-				"RegionID":  17,
-				"HostName":  "derp17c.tailscale.com",
-				"IPv4":      "208.111.40.12",
-				"IPv6":      "2607:f740:c::10",
-				"CanPort80": true
-			}, {
-				"Name":      "17d",
-				"RegionID":  17,
-				"HostName":  "derp17d.tailscale.com",
-				"IPv4":      "208.111.40.216",
-				"IPv6":      "2607:f740:c::e1b",
-				"CanPort80": true
-			}, {
-				"Name":      "17b",
-				"RegionID":  17,
-				"HostName":  "derp17b.tailscale.com",
-				"IPv4":      "192.73.244.245",
-				"IPv6":      "2607:f740:c::646",
-				"CanPort80": true
-			}]
-		}, "18": {
-			"RegionID":   18,
-			"RegionCode": "par",
-			"RegionName": "Paris",
-			"Latitude":   48.856667,
-			"Longitude":  2.352222,
-			"Nodes": [{
-				"Name":      "18c",
-				"RegionID":  18,
-				"HostName":  "derp18c.tailscale.com",
-				"IPv4":      "176.58.90.207",
-				"IPv6":      "2a00:dd80:3e::c19",
-				"CanPort80": true
-			}, {
-				"Name":      "18d",
-				"RegionID":  18,
-				"HostName":  "derp18d.tailscale.com",
-				"IPv4":      "176.58.90.104",
-				"IPv6":      "2a00:dd80:3e::f2e",
-				"CanPort80": true
-			}, {
-				"Name":      "18b",
-				"RegionID":  18,
-				"HostName":  "derp18b.tailscale.com",
-				"IPv4":      "176.58.90.147",
-				"IPv6":      "2a00:dd80:3e::363",
-				"CanPort80": true
-			}]
-		}, "19": {
-			"RegionID":   19,
-			"RegionCode": "mad",
-			"RegionName": "Madrid",
-			"Latitude":   40.416944,
-			"Longitude":  -3.703333,
-			"Nodes": [{
-				"Name":      "19c",
-				"RegionID":  19,
-				"HostName":  "derp19c.tailscale.com",
-				"IPv4":      "45.159.97.61",
-				"IPv6":      "2a00:dd80:14:10::20",
-				"CanPort80": true
-			}, {
-				"Name":      "19d",
-				"RegionID":  19,
-				"HostName":  "derp19d.tailscale.com",
-				"IPv4":      "45.159.97.233",
-				"IPv6":      "2a00:dd80:14:10::34a",
-				"CanPort80": true
-			}, {
-				"Name":      "19b",
-				"RegionID":  19,
-				"HostName":  "derp19b.tailscale.com",
-				"IPv4":      "45.159.97.144",
-				"IPv6":      "2a00:dd80:14:10::335",
-				"CanPort80": true
-			}]
-		}, "2": {
-			"RegionID":   2,
-			"RegionCode": "sfo",
-			"RegionName": "San Francisco",
-			"Latitude":   37.7775,
-			"Longitude":  -122.416389,
-			"Nodes": [{
-				"Name":      "2e",
-				"RegionID":  2,
-				"HostName":  "derp2e.tailscale.com",
-				"IPv4":      "192.73.252.134",
-				"IPv6":      "2607:f740:0:3f::44c",
-				"CanPort80": true
-			}, {
-				"Name":      "2f",
-				"RegionID":  2,
-				"HostName":  "derp2f.tailscale.com",
-				"IPv4":      "208.111.34.178",
-				"IPv6":      "2607:f740:0:3f::f4",
-				"CanPort80": true
-			}, {
-				"Name":      "2d",
-				"RegionID":  2,
-				"HostName":  "derp2d.tailscale.com",
-				"IPv4":      "192.73.252.65",
-				"IPv6":      "2607:f740:0:3f::287",
-				"CanPort80": true
-			}]
-		}, "20": {
-			"RegionID":   20,
-			"RegionCode": "hkg",
-			"RegionName": "Hong Kong",
-			"Latitude":   22.3193,
-			"Longitude":  114.1694,
-			"Nodes": [{
-				"Name":      "20c",
-				"RegionID":  20,
-				"HostName":  "derp20c.tailscale.com",
-				"IPv4":      "205.147.105.30",
-				"IPv6":      "2403:2500:8000:1::5fb",
-				"CanPort80": true
-			}, {
-				"Name":      "20d",
-				"RegionID":  20,
-				"HostName":  "derp20d.tailscale.com",
-				"IPv4":      "205.147.105.78",
-				"IPv6":      "2403:2500:8000:1::e9a",
-				"CanPort80": true
-			}, {
-				"Name":      "20b",
-				"RegionID":  20,
-				"HostName":  "derp20b.tailscale.com",
-				"IPv4":      "103.6.84.152",
-				"IPv6":      "2403:2500:8000:1::ef6",
-				"CanPort80": true
-			}]
-		}, "21": {
-			"RegionID":   21,
-			"RegionCode": "tor",
-			"RegionName": "Toronto",
-			"Latitude":   43.741667,
-			"Longitude":  -79.373333,
-			"Nodes": [{
-				"Name":      "21c",
-				"RegionID":  21,
-				"HostName":  "derp21c.tailscale.com",
-				"IPv4":      "162.248.221.215",
-				"IPv6":      "2607:f740:50::f10",
-				"CanPort80": true
-			}, {
-				"Name":      "21d",
-				"RegionID":  21,
-				"HostName":  "derp21d.tailscale.com",
-				"IPv4":      "162.248.221.248",
-				"IPv6":      "2607:f740:50::ca4",
-				"CanPort80": true
-			}, {
-				"Name":      "21b",
-				"RegionID":  21,
-				"HostName":  "derp21b.tailscale.com",
-				"IPv4":      "162.248.221.199",
-				"IPv6":      "2607:f740:50::1d1",
-				"CanPort80": true
-			}]
-		}, "22": {
-			"RegionID":   22,
-			"RegionCode": "waw",
-			"RegionName": "Warsaw",
-			"Latitude":   52.23,
-			"Longitude":  21.011111,
-			"Nodes": [{
-				"Name":      "22c",
-				"RegionID":  22,
-				"HostName":  "derp22c.tailscale.com",
-				"IPv4":      "45.159.98.253",
-				"IPv6":      "2a00:dd80:40:100::3f",
-				"CanPort80": true
-			}, {
-				"Name":      "22d",
-				"RegionID":  22,
-				"HostName":  "derp22d.tailscale.com",
-				"IPv4":      "45.159.98.145",
-				"IPv6":      "2a00:dd80:40:100::211",
-				"CanPort80": true
-			}, {
-				"Name":      "22b",
-				"RegionID":  22,
-				"HostName":  "derp22b.tailscale.com",
-				"IPv4":      "45.159.98.196",
-				"IPv6":      "2a00:dd80:40:100::316",
-				"CanPort80": true
-			}]
-		}, "23": {
-			"RegionID":   23,
-			"RegionCode": "dbi",
-			"RegionName": "Dubai",
-			"Latitude":   25.263056,
-			"Longitude":  55.297222,
-			"Nodes": [{
-				"Name":      "23c",
-				"RegionID":  23,
-				"HostName":  "derp23c.tailscale.com",
-				"IPv4":      "185.34.3.207",
-				"IPv6":      "2a00:dd80:3f:100::a50",
-				"CanPort80": true
-			}, {
-				"Name":      "23d",
-				"RegionID":  23,
-				"HostName":  "derp23d.tailscale.com",
-				"IPv4":      "185.34.3.75",
-				"IPv6":      "2a00:dd80:3f:100::97e",
-				"CanPort80": true
-			}, {
-				"Name":      "23b",
-				"RegionID":  23,
-				"HostName":  "derp23b.tailscale.com",
-				"IPv4":      "185.34.3.232",
-				"IPv6":      "2a00:dd80:3f:100::76f",
-				"CanPort80": true
-			}]
-		}, "24": {
-			"RegionID":   24,
-			"RegionCode": "hnl",
-			"RegionName": "Honolulu",
-			"Latitude":   21.306944,
-			"Longitude":  -157.858333,
-			"Nodes": [{
-				"Name":      "24c",
-				"RegionID":  24,
-				"HostName":  "derp24c.tailscale.com",
-				"IPv4":      "208.83.233.233",
-				"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-				"CanPort80": true
-			}, {
-				"Name":      "24d",
-				"RegionID":  24,
-				"HostName":  "derp24d.tailscale.com",
-				"IPv4":      "208.72.155.133",
-				"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-				"CanPort80": true
-			}, {
-				"Name":      "24b",
-				"RegionID":  24,
-				"HostName":  "derp24b.tailscale.com",
-				"IPv4":      "208.83.234.151",
-				"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-				"CanPort80": true
-			}]
-		}, "25": {
-			"RegionID":   25,
-			"RegionCode": "nai",
-			"RegionName": "Nairobi",
-			"Latitude":   -1.286389,
-			"Longitude":  36.817222,
-			"Nodes": [{
-				"Name":      "25c",
-				"RegionID":  25,
-				"HostName":  "derp25c.tailscale.com",
-				"IPv4":      "102.67.167.37",
-				"IPv6":      "2c0f:edb0:2000:1::2c7",
-				"CanPort80": true
-			}, {
-				"Name":      "25d",
-				"RegionID":  25,
-				"HostName":  "derp25d.tailscale.com",
-				"IPv4":      "102.67.167.188",
-				"IPv6":      "2c0f:edb0:2000:1::188",
-				"CanPort80": true
-			}, {
-				"Name":      "25b",
-				"RegionID":  25,
-				"HostName":  "derp25b.tailscale.com",
-				"IPv4":      "102.67.167.245",
-				"IPv6":      "2c0f:edb0:2000:1::2e9",
-				"CanPort80": true
-			}]
-		}, "26": {
-			"RegionID":   26,
-			"RegionCode": "nue",
-			"RegionName": "Nuremberg",
-			"Latitude":   49.453889,
-			"Longitude":  11.0775,
-			"Nodes": [{
-				"Name":      "26c",
-				"RegionID":  26,
-				"HostName":  "derp26c.tailscale.com",
-				"IPv4":      "49.12.193.137",
-				"IPv6":      "2a01:4f8:1c1c:5c70::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26d",
-				"RegionID":  26,
-				"HostName":  "derp26d.tailscale.com",
-				"IPv4":      "49.13.204.141",
-				"IPv6":      "2a01:4f8:1c0c:7d06::1",
-				"CanPort80": true
-			}, {
-				"Name":      "26b",
-				"RegionID":  26,
-				"HostName":  "derp26b.tailscale.com",
-				"IPv4":      "167.235.72.200",
-				"IPv6":      "2a01:4f8:1c1c:47b6::1",
-				"CanPort80": true
-			}]
-		}, "27": {
-			"RegionID":   27,
-			"RegionCode": "iad",
-			"RegionName": "Ashburn",
-			"Latitude":   39.03,
-			"Longitude":  -77.471111,
-			"Nodes": [{
-				"Name":      "27d",
-				"RegionID":  27,
-				"HostName":  "derp27d.tailscale.com",
-				"IPv4":      "178.156.152.106",
-				"IPv6":      "2a01:4ff:f0:3c8e::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27c",
-				"RegionID":  27,
-				"HostName":  "derp27c.tailscale.com",
-				"IPv4":      "178.156.152.91",
-				"IPv6":      "2a01:4ff:f0:3913::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27e",
-				"RegionID":  27,
-				"HostName":  "derp27e.tailscale.com",
-				"IPv4":      "178.156.134.232",
-				"IPv6":      "2a01:4ff:f0:28d4::1",
-				"CanPort80": true
-			}, {
-				"Name":      "27b",
-				"RegionID":  27,
-				"HostName":  "derp27b.tailscale.com",
-				"IPv4":      "5.161.218.233",
-				"IPv6":      "2a01:4ff:f0:3db9::1",
-				"CanPort80": true
-			}]
-		}, "28": {
-			"RegionID":   28,
-			"RegionCode": "hel",
-			"RegionName": "Helsinki",
-			"Latitude":   60.170833,
-			"Longitude":  24.9375,
-			"Nodes": [{
-				"Name":      "28c",
-				"RegionID":  28,
-				"HostName":  "derp28c.tailscale.com",
-				"IPv4":      "95.217.2.165",
-				"IPv6":      "2a01:4f9:c012:cd74::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28d",
-				"RegionID":  28,
-				"HostName":  "derp28d.tailscale.com",
-				"IPv4":      "157.180.28.32",
-				"IPv6":      "2a01:4f9:c012:2e5b::1",
-				"CanPort80": true
-			}, {
-				"Name":      "28b",
-				"RegionID":  28,
-				"HostName":  "derp28b.tailscale.com",
-				"IPv4":      "65.109.143.62",
-				"IPv6":      "2a01:4f9:c012:d55c::1",
-				"CanPort80": true
-			}]
-		}, "3": {
-			"RegionID":   3,
-			"RegionCode": "sin",
-			"RegionName": "Singapore",
-			"Latitude":   1.3521,
-			"Longitude":  103.8198,
-			"Nodes": [{
-				"Name":      "3g",
-				"RegionID":  3,
-				"HostName":  "derp3g.tailscale.com",
-				"IPv4":      "172.237.72.79",
-				"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-				"CanPort80": true
-			}, {
-				"Name":      "3f",
-				"RegionID":  3,
-				"HostName":  "derp3f.tailscale.com",
-				"IPv4":      "172.237.72.8",
-				"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-				"CanPort80": true
-			}, {
-				"Name":      "3h",
-				"RegionID":  3,
-				"HostName":  "derp3h.tailscale.com",
-				"IPv4":      "172.237.66.30",
-				"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-				"CanPort80": true
-			}, {
-				"Name":      "3e",
-				"RegionID":  3,
-				"HostName":  "derp3e.tailscale.com",
-				"IPv4":      "172.237.72.43",
-				"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-				"CanPort80": true
-			}]
-		}, "4": {
-			"RegionID":   4,
-			"RegionCode": "fra",
-			"RegionName": "Frankfurt",
-			"Latitude":   50.1109,
-			"Longitude":  8.6821,
-			"Nodes": [{
-				"Name":      "4h",
-				"RegionID":  4,
-				"HostName":  "derp4h.tailscale.com",
-				"IPv4":      "185.40.234.77",
-				"IPv6":      "2a00:dd80:20::bcf",
-				"CanPort80": true
-			}, {
-				"Name":      "4i",
-				"RegionID":  4,
-				"HostName":  "derp4i.tailscale.com",
-				"IPv4":      "185.40.234.53",
-				"IPv6":      "2a00:dd80:20::8a6",
-				"CanPort80": true
-			}, {
-				"Name":      "4g",
-				"RegionID":  4,
-				"HostName":  "derp4g.tailscale.com",
-				"IPv4":      "185.40.234.113",
-				"IPv6":      "2a00:dd80:20::8f",
-				"CanPort80": true
-			}, {
-				"Name":      "4j",
-				"RegionID":  4,
-				"HostName":  "derp4j.tailscale.com",
-				"IPv4":      "185.40.234.176",
-				"IPv6":      "2a00:dd80:20::e67",
-				"CanPort80": true
-			}, {
-				"Name":      "4f",
-				"RegionID":  4,
-				"HostName":  "derp4f.tailscale.com",
-				"IPv4":      "185.40.234.219",
-				"IPv6":      "2a00:dd80:20::a25",
-				"CanPort80": true
-			}]
-		}, "5": {
-			"RegionID":   5,
-			"RegionCode": "syd",
-			"RegionName": "Sydney",
-			"Latitude":   -33.867778,
-			"Longitude":  151.21,
-			"Nodes": [{
-				"Name":      "5f",
-				"RegionID":  5,
-				"HostName":  "derp5f.tailscale.com",
-				"IPv4":      "172.105.166.103",
-				"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-				"CanPort80": true
-			}, {
-				"Name":      "5g",
-				"RegionID":  5,
-				"HostName":  "derp5g.tailscale.com",
-				"IPv4":      "172.105.169.57",
-				"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-				"CanPort80": true
-			}, {
-				"Name":      "5e",
-				"RegionID":  5,
-				"HostName":  "derp5e.tailscale.com",
-				"IPv4":      "172.105.179.230",
-				"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-				"CanPort80": true
-			}]
-		}, "6": {
-			"RegionID":   6,
-			"RegionCode": "blr",
-			"RegionName": "Bengaluru",
-			"Latitude":   12.9716,
-			"Longitude":  77.5946,
-			"Nodes": [{
-				"Name":      "6a",
-				"RegionID":  6,
-				"HostName":  "derp6.tailscale.com",
-				"IPv4":      "68.183.90.120",
-				"IPv6":      "2400:6180:100:d0::982:d001",
-				"CanPort80": true
-			}]
-		}, "7": {
-			"RegionID":   7,
-			"RegionCode": "tok",
-			"RegionName": "Tokyo",
-			"Latitude":   35.6764,
-			"Longitude":  139.65,
-			"Nodes": [{
-				"Name":      "7g",
-				"RegionID":  7,
-				"HostName":  "derp7g.tailscale.com",
-				"IPv4":      "172.238.6.179",
-				"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-				"CanPort80": true
-			}, {
-				"Name":      "7f",
-				"RegionID":  7,
-				"HostName":  "derp7f.tailscale.com",
-				"IPv4":      "172.238.6.34",
-				"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-				"CanPort80": true
-			}, {
-				"Name":      "7h",
-				"RegionID":  7,
-				"HostName":  "derp7h.tailscale.com",
-				"IPv4":      "172.237.28.183",
-				"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-				"CanPort80": true
-			}, {
-				"Name":      "7e",
-				"RegionID":  7,
-				"HostName":  "derp7e.tailscale.com",
-				"IPv4":      "172.238.6.180",
-				"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-				"STUNOnly":  true,
-				"CanPort80": true
-			}]
-		}, "8": {
-			"RegionID":   8,
-			"RegionCode": "lhr",
-			"RegionName": "London",
-			"Latitude":   51.5072,
-			"Longitude":  0.1276,
-			"Nodes": [{
-				"Name":      "8f",
-				"RegionID":  8,
-				"HostName":  "derp8f.tailscale.com",
-				"IPv4":      "176.58.88.183",
-				"IPv6":      "2a00:dd80:3a::dfa",
-				"CanPort80": true
-			}, {
-				"Name":      "8g",
-				"RegionID":  8,
-				"HostName":  "derp8g.tailscale.com",
-				"IPv4":      "176.58.92.254",
-				"IPv6":      "2a00:dd80:3a::ed",
-				"CanPort80": true
-			}, {
-				"Name":      "8e",
-				"RegionID":  8,
-				"HostName":  "derp8e.tailscale.com",
-				"IPv4":      "176.58.92.144",
-				"IPv6":      "2a00:dd80:3a::b33",
-				"CanPort80": true
-			}]
-		}, "9": {
-			"RegionID":   9,
-			"RegionCode": "dfw",
-			"RegionName": "Dallas",
-			"Latitude":   32.779167,
-			"Longitude":  -96.808889,
-			"Nodes": [{
-				"Name":      "9e",
-				"RegionID":  9,
-				"HostName":  "derp9e.tailscale.com",
-				"IPv4":      "192.73.248.83",
-				"IPv6":      "2607:f740:100::359",
-				"CanPort80": true
-			}, {
-				"Name":      "9f",
-				"RegionID":  9,
-				"HostName":  "derp9f.tailscale.com",
-				"IPv4":      "209.177.156.197",
-				"IPv6":      "2607:f740:100::cad",
-				"CanPort80": true
-			}, {
-				"Name":      "9d",
-				"RegionID":  9,
-				"HostName":  "derp9d.tailscale.com",
-				"IPv4":      "209.177.156.94",
-				"IPv6":      "2607:f740:100::c05",
-				"CanPort80": true
-			}]
-		}}},
-		"DisplayMessages":  null,
-		"TKAEnabled":       false,
-		"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-		"Domain":           "odin@example.com",
-		"DomainAuditLogID": "",
-		"UserProfiles": {"3982058329734709": {
-			"ID":          3982058329734709,
-			"LoginName":   "freya@example.com",
-			"DisplayName": "freya"
-		}}
-	}}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g1-admin.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g1-admin.hujson
deleted file mode 100644
index 8eeedcbfc..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g1-admin.hujson
+++ /dev/null
@@ -1,8821 +0,0 @@
-// nodeattrs-ippool-g1-admin
-//
-// ipPool 100.81.0.0/16 for autogroup:admin
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:24:19Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-ippool-g1-admin",
-	"description":    "ipPool 100.81.0.0/16 for autogroup:admin",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:24:19.781226239Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                            \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"ipPool 100.81.0.0/16 for autogroup:admin\",\n    \"id\": \"nodeattrs-ippool-g1-admin\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"ipPool\": [\n                    \"100.81.0.0/16\"\n                ],\n                \"target\": [\n                    \"autogroup:admin\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-ippool-g1-admin.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"ipPool": ["100.81.0.0/16"], "target": ["autogroup:admin"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8823813717848697,
-				"StableID":   "nQzuWBdKuB21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       8823813717848697,
-				"Key":        "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-				"DiscoKey":   "discokey:701cb0f1285f817ebd56a4deaf355e1b3aeffa8c1bf3b245839b9f95ed32d246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38911", "10.65.0.27:38911", "172.17.0.1:38911"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:24:25.370305633Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-			"MachineKey": "mkey:5237bf9ec63934ca7d0f8c82d866a9d259f71d026c0d433934cd03061bf23f3c",
-			"Peers": [{
-				"ID":         6461224534885059,
-				"StableID":   "nexyiuQJTs11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-				"DiscoKey":   "discokey:48c95bf0b5b1d5feb951475601fef3014fe7ad029af7d1adc6f9528912f62d46",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52529", "10.65.0.27:52529", "172.17.0.1:52529"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:24:25.916902486Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8998245442749649,
-				"StableID":   "nS1TjfeKGD21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-				"DiscoKey":   "discokey:bf78b6924a8cbf4a1e6d799394b9ac7b35b28c08a13fe20ed2b768e3deda7323",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43960", "10.65.0.27:43960", "172.17.0.1:43960"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:24:26.472942372Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7441525939606473,
-				"StableID":   "nQaXyXGH7121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-				"DiscoKey":   "discokey:3e235b9f58b50e7e31b5b016915cc0ed77dfcbfbf5dee9168b1ebd25103ddf3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43488", "10.65.0.27:43488", "172.17.0.1:43488"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:24:27.000308165Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1537152508224010,
-				"StableID":   "n7qNRcPB1D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-				"DiscoKey":   "discokey:5b8700b468c7180586ccdf942b8813f339f758f16b947367221f104d6b400038",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:24:27.543611689Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6233657085256308,
-				"StableID":   "nZDAUsbEgq11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:daa53a9d9e083ef71e8fb00ed86234887b499a83d6aff3706a8ba71fa4b41e5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:34096", "10.65.0.27:34096", "172.17.0.1:34096"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:24:28.083261613Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5331761684269574,
-				"StableID":   "njmAHdLmdi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:6a181a7942ef76d081749c85596fe698e5f91534a981f25dc20748c74bbb4600",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54087", "10.65.0.27:54087", "172.17.0.1:54087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:24:28.633293252Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1364203956318198,
-				"StableID":   "n9J88qKreB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-				"KeyExpiry":  "2026-11-03T08:24:29Z",
-				"DiscoKey":   "discokey:966cfd06b6d529f7e1d8de6cd880f585ed32537aed674e83dfedf5f1bf4e2127",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51207", "10.65.0.27:51207", "172.17.0.1:51207"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:24:29.166741332Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8823813717848697": {
-				"ID":          8823813717848697,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6461224534885059,
-				"StableID":   "nexyiuQJTs11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       6461224534885059,
-				"Key":        "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-				"DiscoKey":   "discokey:48c95bf0b5b1d5feb951475601fef3014fe7ad029af7d1adc6f9528912f62d46",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52529", "10.65.0.27:52529", "172.17.0.1:52529"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:24:25.916902486Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-			"MachineKey": "mkey:a3eade5d56f7bb6762ed5e6563dbbfcf522756915be5dc2d2dcb9791f8a9fc25",
-			"Peers": [{
-				"ID":         8823813717848697,
-				"StableID":   "nQzuWBdKuB21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-				"DiscoKey":   "discokey:701cb0f1285f817ebd56a4deaf355e1b3aeffa8c1bf3b245839b9f95ed32d246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38911", "10.65.0.27:38911", "172.17.0.1:38911"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:24:25.370305633Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8998245442749649,
-				"StableID":   "nS1TjfeKGD21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-				"DiscoKey":   "discokey:bf78b6924a8cbf4a1e6d799394b9ac7b35b28c08a13fe20ed2b768e3deda7323",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43960", "10.65.0.27:43960", "172.17.0.1:43960"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:24:26.472942372Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7441525939606473,
-				"StableID":   "nQaXyXGH7121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-				"DiscoKey":   "discokey:3e235b9f58b50e7e31b5b016915cc0ed77dfcbfbf5dee9168b1ebd25103ddf3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43488", "10.65.0.27:43488", "172.17.0.1:43488"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:24:27.000308165Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1537152508224010,
-				"StableID":   "n7qNRcPB1D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-				"DiscoKey":   "discokey:5b8700b468c7180586ccdf942b8813f339f758f16b947367221f104d6b400038",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:24:27.543611689Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6233657085256308,
-				"StableID":   "nZDAUsbEgq11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:daa53a9d9e083ef71e8fb00ed86234887b499a83d6aff3706a8ba71fa4b41e5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:34096", "10.65.0.27:34096", "172.17.0.1:34096"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:24:28.083261613Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5331761684269574,
-				"StableID":   "njmAHdLmdi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:6a181a7942ef76d081749c85596fe698e5f91534a981f25dc20748c74bbb4600",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54087", "10.65.0.27:54087", "172.17.0.1:54087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:24:28.633293252Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1364203956318198,
-				"StableID":   "n9J88qKreB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-				"KeyExpiry":  "2026-11-03T08:24:29Z",
-				"DiscoKey":   "discokey:966cfd06b6d529f7e1d8de6cd880f585ed32537aed674e83dfedf5f1bf4e2127",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51207", "10.65.0.27:51207", "172.17.0.1:51207"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:24:29.166741332Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6461224534885059": {
-				"ID":          6461224534885059,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6233657085256308,
-				"StableID":   "nZDAUsbEgq11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:daa53a9d9e083ef71e8fb00ed86234887b499a83d6aff3706a8ba71fa4b41e5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:34096", "10.65.0.27:34096", "172.17.0.1:34096"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:24:28.083261613Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-			"MachineKey": "mkey:f2a81f9fa6c38c7f7f56c85d98e6c38c3f7f99fb7f8c5d885f79a50a8e92441c",
-			"Peers": [{
-				"ID":         8823813717848697,
-				"StableID":   "nQzuWBdKuB21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-				"DiscoKey":   "discokey:701cb0f1285f817ebd56a4deaf355e1b3aeffa8c1bf3b245839b9f95ed32d246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38911", "10.65.0.27:38911", "172.17.0.1:38911"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:24:25.370305633Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6461224534885059,
-				"StableID":   "nexyiuQJTs11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-				"DiscoKey":   "discokey:48c95bf0b5b1d5feb951475601fef3014fe7ad029af7d1adc6f9528912f62d46",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52529", "10.65.0.27:52529", "172.17.0.1:52529"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:24:25.916902486Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8998245442749649,
-				"StableID":   "nS1TjfeKGD21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-				"DiscoKey":   "discokey:bf78b6924a8cbf4a1e6d799394b9ac7b35b28c08a13fe20ed2b768e3deda7323",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43960", "10.65.0.27:43960", "172.17.0.1:43960"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:24:26.472942372Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7441525939606473,
-				"StableID":   "nQaXyXGH7121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-				"DiscoKey":   "discokey:3e235b9f58b50e7e31b5b016915cc0ed77dfcbfbf5dee9168b1ebd25103ddf3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43488", "10.65.0.27:43488", "172.17.0.1:43488"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:24:27.000308165Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1537152508224010,
-				"StableID":   "n7qNRcPB1D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-				"DiscoKey":   "discokey:5b8700b468c7180586ccdf942b8813f339f758f16b947367221f104d6b400038",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:24:27.543611689Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5331761684269574,
-				"StableID":   "njmAHdLmdi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:6a181a7942ef76d081749c85596fe698e5f91534a981f25dc20748c74bbb4600",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54087", "10.65.0.27:54087", "172.17.0.1:54087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:24:28.633293252Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1364203956318198,
-				"StableID":   "n9J88qKreB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-				"KeyExpiry":  "2026-11-03T08:24:29Z",
-				"DiscoKey":   "discokey:966cfd06b6d529f7e1d8de6cd880f585ed32537aed674e83dfedf5f1bf4e2127",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51207", "10.65.0.27:51207", "172.17.0.1:51207"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:24:29.166741332Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8998245442749649,
-				"StableID":   "nS1TjfeKGD21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       8998245442749649,
-				"Key":        "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-				"DiscoKey":   "discokey:bf78b6924a8cbf4a1e6d799394b9ac7b35b28c08a13fe20ed2b768e3deda7323",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43960", "10.65.0.27:43960", "172.17.0.1:43960"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:24:26.472942372Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-			"MachineKey": "mkey:86be85c9cd0003684931794e123657568064c242837d591daa6977344e3baa07",
-			"Peers": [{
-				"ID":         8823813717848697,
-				"StableID":   "nQzuWBdKuB21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-				"DiscoKey":   "discokey:701cb0f1285f817ebd56a4deaf355e1b3aeffa8c1bf3b245839b9f95ed32d246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38911", "10.65.0.27:38911", "172.17.0.1:38911"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:24:25.370305633Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6461224534885059,
-				"StableID":   "nexyiuQJTs11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-				"DiscoKey":   "discokey:48c95bf0b5b1d5feb951475601fef3014fe7ad029af7d1adc6f9528912f62d46",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52529", "10.65.0.27:52529", "172.17.0.1:52529"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:24:25.916902486Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7441525939606473,
-				"StableID":   "nQaXyXGH7121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-				"DiscoKey":   "discokey:3e235b9f58b50e7e31b5b016915cc0ed77dfcbfbf5dee9168b1ebd25103ddf3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43488", "10.65.0.27:43488", "172.17.0.1:43488"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:24:27.000308165Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1537152508224010,
-				"StableID":   "n7qNRcPB1D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-				"DiscoKey":   "discokey:5b8700b468c7180586ccdf942b8813f339f758f16b947367221f104d6b400038",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:24:27.543611689Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6233657085256308,
-				"StableID":   "nZDAUsbEgq11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:daa53a9d9e083ef71e8fb00ed86234887b499a83d6aff3706a8ba71fa4b41e5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:34096", "10.65.0.27:34096", "172.17.0.1:34096"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:24:28.083261613Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5331761684269574,
-				"StableID":   "njmAHdLmdi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:6a181a7942ef76d081749c85596fe698e5f91534a981f25dc20748c74bbb4600",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54087", "10.65.0.27:54087", "172.17.0.1:54087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:24:28.633293252Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1364203956318198,
-				"StableID":   "n9J88qKreB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-				"KeyExpiry":  "2026-11-03T08:24:29Z",
-				"DiscoKey":   "discokey:966cfd06b6d529f7e1d8de6cd880f585ed32537aed674e83dfedf5f1bf4e2127",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51207", "10.65.0.27:51207", "172.17.0.1:51207"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:24:29.166741332Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8998245442749649": {
-				"ID":          8998245442749649,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7441525939606473,
-				"StableID":   "nQaXyXGH7121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       7441525939606473,
-				"Key":        "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-				"DiscoKey":   "discokey:3e235b9f58b50e7e31b5b016915cc0ed77dfcbfbf5dee9168b1ebd25103ddf3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43488", "10.65.0.27:43488", "172.17.0.1:43488"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:24:27.000308165Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-			"MachineKey": "mkey:b9fa46e8f047cee7d879770968fd2b3bbaab43a40d325a2a5e395a6e2be3ba7f",
-			"Peers": [{
-				"ID":         8823813717848697,
-				"StableID":   "nQzuWBdKuB21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-				"DiscoKey":   "discokey:701cb0f1285f817ebd56a4deaf355e1b3aeffa8c1bf3b245839b9f95ed32d246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38911", "10.65.0.27:38911", "172.17.0.1:38911"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:24:25.370305633Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6461224534885059,
-				"StableID":   "nexyiuQJTs11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-				"DiscoKey":   "discokey:48c95bf0b5b1d5feb951475601fef3014fe7ad029af7d1adc6f9528912f62d46",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52529", "10.65.0.27:52529", "172.17.0.1:52529"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:24:25.916902486Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8998245442749649,
-				"StableID":   "nS1TjfeKGD21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-				"DiscoKey":   "discokey:bf78b6924a8cbf4a1e6d799394b9ac7b35b28c08a13fe20ed2b768e3deda7323",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43960", "10.65.0.27:43960", "172.17.0.1:43960"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:24:26.472942372Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1537152508224010,
-				"StableID":   "n7qNRcPB1D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-				"DiscoKey":   "discokey:5b8700b468c7180586ccdf942b8813f339f758f16b947367221f104d6b400038",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:24:27.543611689Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6233657085256308,
-				"StableID":   "nZDAUsbEgq11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:daa53a9d9e083ef71e8fb00ed86234887b499a83d6aff3706a8ba71fa4b41e5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:34096", "10.65.0.27:34096", "172.17.0.1:34096"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:24:28.083261613Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5331761684269574,
-				"StableID":   "njmAHdLmdi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:6a181a7942ef76d081749c85596fe698e5f91534a981f25dc20748c74bbb4600",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54087", "10.65.0.27:54087", "172.17.0.1:54087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:24:28.633293252Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1364203956318198,
-				"StableID":   "n9J88qKreB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-				"KeyExpiry":  "2026-11-03T08:24:29Z",
-				"DiscoKey":   "discokey:966cfd06b6d529f7e1d8de6cd880f585ed32537aed674e83dfedf5f1bf4e2127",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51207", "10.65.0.27:51207", "172.17.0.1:51207"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:24:29.166741332Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7441525939606473": {
-				"ID":          7441525939606473,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1537152508224010,
-				"StableID":   "n7qNRcPB1D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1537152508224010,
-				"Key":        "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-				"DiscoKey":   "discokey:5b8700b468c7180586ccdf942b8813f339f758f16b947367221f104d6b400038",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:24:27.543611689Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-			"MachineKey": "mkey:71ed0bba632db12a3f013b5c4e467fe26d1f71cd48404ec574fd3a363b7e2547",
-			"Peers": [{
-				"ID":         8823813717848697,
-				"StableID":   "nQzuWBdKuB21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-				"DiscoKey":   "discokey:701cb0f1285f817ebd56a4deaf355e1b3aeffa8c1bf3b245839b9f95ed32d246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38911", "10.65.0.27:38911", "172.17.0.1:38911"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:24:25.370305633Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6461224534885059,
-				"StableID":   "nexyiuQJTs11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-				"DiscoKey":   "discokey:48c95bf0b5b1d5feb951475601fef3014fe7ad029af7d1adc6f9528912f62d46",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52529", "10.65.0.27:52529", "172.17.0.1:52529"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:24:25.916902486Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8998245442749649,
-				"StableID":   "nS1TjfeKGD21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-				"DiscoKey":   "discokey:bf78b6924a8cbf4a1e6d799394b9ac7b35b28c08a13fe20ed2b768e3deda7323",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43960", "10.65.0.27:43960", "172.17.0.1:43960"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:24:26.472942372Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7441525939606473,
-				"StableID":   "nQaXyXGH7121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-				"DiscoKey":   "discokey:3e235b9f58b50e7e31b5b016915cc0ed77dfcbfbf5dee9168b1ebd25103ddf3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43488", "10.65.0.27:43488", "172.17.0.1:43488"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:24:27.000308165Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6233657085256308,
-				"StableID":   "nZDAUsbEgq11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:daa53a9d9e083ef71e8fb00ed86234887b499a83d6aff3706a8ba71fa4b41e5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:34096", "10.65.0.27:34096", "172.17.0.1:34096"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:24:28.083261613Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5331761684269574,
-				"StableID":   "njmAHdLmdi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:6a181a7942ef76d081749c85596fe698e5f91534a981f25dc20748c74bbb4600",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54087", "10.65.0.27:54087", "172.17.0.1:54087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:24:28.633293252Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1364203956318198,
-				"StableID":   "n9J88qKreB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-				"KeyExpiry":  "2026-11-03T08:24:29Z",
-				"DiscoKey":   "discokey:966cfd06b6d529f7e1d8de6cd880f585ed32537aed674e83dfedf5f1bf4e2127",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51207", "10.65.0.27:51207", "172.17.0.1:51207"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:24:29.166741332Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1537152508224010": {
-				"ID":          1537152508224010,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1364203956318198,
-				"StableID":   "n9J88qKreB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-				"KeyExpiry":  "2026-11-03T08:24:29Z",
-				"DiscoKey":   "discokey:966cfd06b6d529f7e1d8de6cd880f585ed32537aed674e83dfedf5f1bf4e2127",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51207", "10.65.0.27:51207", "172.17.0.1:51207"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:24:29.166741332Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-			"MachineKey": "mkey:373f884ff9f756380ce541126f6d9c706679449f7206082d5c6bf0a17f7fed1c",
-			"Peers": [{
-				"ID":         8823813717848697,
-				"StableID":   "nQzuWBdKuB21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-				"DiscoKey":   "discokey:701cb0f1285f817ebd56a4deaf355e1b3aeffa8c1bf3b245839b9f95ed32d246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38911", "10.65.0.27:38911", "172.17.0.1:38911"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:24:25.370305633Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6461224534885059,
-				"StableID":   "nexyiuQJTs11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-				"DiscoKey":   "discokey:48c95bf0b5b1d5feb951475601fef3014fe7ad029af7d1adc6f9528912f62d46",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52529", "10.65.0.27:52529", "172.17.0.1:52529"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:24:25.916902486Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8998245442749649,
-				"StableID":   "nS1TjfeKGD21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-				"DiscoKey":   "discokey:bf78b6924a8cbf4a1e6d799394b9ac7b35b28c08a13fe20ed2b768e3deda7323",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43960", "10.65.0.27:43960", "172.17.0.1:43960"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:24:26.472942372Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7441525939606473,
-				"StableID":   "nQaXyXGH7121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-				"DiscoKey":   "discokey:3e235b9f58b50e7e31b5b016915cc0ed77dfcbfbf5dee9168b1ebd25103ddf3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43488", "10.65.0.27:43488", "172.17.0.1:43488"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:24:27.000308165Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1537152508224010,
-				"StableID":   "n7qNRcPB1D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-				"DiscoKey":   "discokey:5b8700b468c7180586ccdf942b8813f339f758f16b947367221f104d6b400038",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:24:27.543611689Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6233657085256308,
-				"StableID":   "nZDAUsbEgq11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:daa53a9d9e083ef71e8fb00ed86234887b499a83d6aff3706a8ba71fa4b41e5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:34096", "10.65.0.27:34096", "172.17.0.1:34096"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:24:28.083261613Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5331761684269574,
-				"StableID":   "njmAHdLmdi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:6a181a7942ef76d081749c85596fe698e5f91534a981f25dc20748c74bbb4600",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54087", "10.65.0.27:54087", "172.17.0.1:54087"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:24:28.633293252Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5331761684269574,
-				"StableID":   "njmAHdLmdi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:6a181a7942ef76d081749c85596fe698e5f91534a981f25dc20748c74bbb4600",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54087", "10.65.0.27:54087", "172.17.0.1:54087"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:24:28.633293252Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1695eb629a3745b30dbbede2bd1483f3063e0aee377d73cd7fe48d9aa265de25",
-			"MachineKey": "mkey:c55143cfe40ad06fa60c72c4e7efce95afacc929a8e809c081e4c687b24d822f",
-			"Peers": [{
-				"ID":         8823813717848697,
-				"StableID":   "nQzuWBdKuB21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:832b1a8a111ef217cb44d6beb5aebc54a447b7a6fc3f727dd1daf1fb9ae06d18",
-				"DiscoKey":   "discokey:701cb0f1285f817ebd56a4deaf355e1b3aeffa8c1bf3b245839b9f95ed32d246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38911", "10.65.0.27:38911", "172.17.0.1:38911"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:24:25.370305633Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6461224534885059,
-				"StableID":   "nexyiuQJTs11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:530734c14dfcbcc158e58a1f21d9495e9c2f3c97a75af7b84233fb3c7258941c",
-				"DiscoKey":   "discokey:48c95bf0b5b1d5feb951475601fef3014fe7ad029af7d1adc6f9528912f62d46",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52529", "10.65.0.27:52529", "172.17.0.1:52529"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:24:25.916902486Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8998245442749649,
-				"StableID":   "nS1TjfeKGD21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1867704edeaa0274c6be3059a6cbe43aa6b14d898e022b978dbadb7ebe72882e",
-				"DiscoKey":   "discokey:bf78b6924a8cbf4a1e6d799394b9ac7b35b28c08a13fe20ed2b768e3deda7323",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:43960", "10.65.0.27:43960", "172.17.0.1:43960"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:24:26.472942372Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7441525939606473,
-				"StableID":   "nQaXyXGH7121CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a04cd6891ec39d324d59244695f4701249e557a0c1a482b8ee733a9541c42307",
-				"DiscoKey":   "discokey:3e235b9f58b50e7e31b5b016915cc0ed77dfcbfbf5dee9168b1ebd25103ddf3a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43488", "10.65.0.27:43488", "172.17.0.1:43488"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:24:27.000308165Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1537152508224010,
-				"StableID":   "n7qNRcPB1D11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8a6ca5af7908af5b3351d60ea3ea73d328de70e73c9aaf1f0f684d73401a7a08",
-				"DiscoKey":   "discokey:5b8700b468c7180586ccdf942b8813f339f758f16b947367221f104d6b400038",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59791", "10.65.0.27:59791", "172.17.0.1:59791"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:24:27.543611689Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6233657085256308,
-				"StableID":   "nZDAUsbEgq11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:56a7d8ccdfc6916aee76c592af908cb7c7857e3cc1240aabf46d0373fad9dc41",
-				"KeyExpiry":  "2026-11-03T08:24:28Z",
-				"DiscoKey":   "discokey:daa53a9d9e083ef71e8fb00ed86234887b499a83d6aff3706a8ba71fa4b41e5b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:34096", "10.65.0.27:34096", "172.17.0.1:34096"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:24:28.083261613Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1364203956318198,
-				"StableID":   "n9J88qKreB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e70fd602369324fd360585430ec5d29e783ac285fc591ec66619453bf42ffd2d",
-				"KeyExpiry":  "2026-11-03T08:24:29Z",
-				"DiscoKey":   "discokey:966cfd06b6d529f7e1d8de6cd880f585ed32537aed674e83dfedf5f1bf4e2127",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51207", "10.65.0.27:51207", "172.17.0.1:51207"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:24:29.166741332Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g2-group.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g2-group.hujson
deleted file mode 100644
index e25a2a097..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g2-group.hujson
+++ /dev/null
@@ -1,8826 +0,0 @@
-// nodeattrs-ippool-g2-group
-//
-// ipPool 100.85.0.0/16 for group:developers
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:25:00Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-ippool-g2-group",
-	"description":    "ipPool 100.85.0.0/16 for group:developers",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:25:00.171008241Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                            \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"ipPool 100.85.0.0/16 for group:developers\",\n    \"id\": \"nodeattrs-ippool-g2-group\",\n    \"options\": {},\n    \"policy\": {\n        \"groups\": {\n            \"group:admins\": [\n                \"odin@example.com\"\n            ],\n            \"group:developers\": [\n                \"thor@example.org\",\n                \"odin@example.com\"\n            ],\n            \"group:monitors\": [\n                \"freya@example.com\"\n            ]\n        },\n        \"nodeAttrs\": [\n            {\n                \"ipPool\": [\n                    \"100.85.0.0/16\"\n                ],\n                \"target\": [\n                    \"group:developers\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-ippool-g2-group.hujson",
-		"full_policy": {
-			"groups": {
-				"group:admins":     ["odin@example.com"],
-				"group:developers": ["thor@example.org", "odin@example.com"],
-				"group:monitors":   ["freya@example.com"]
-			},
-			"nodeAttrs": [{"ipPool": ["100.85.0.0/16"], "target": ["group:developers"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7325206984487013,
-				"StableID":   "np68ESmbCz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       7325206984487013,
-				"Key":        "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-				"DiscoKey":   "discokey:ffb440968c7d5827894cfae0da249aa8af96143a45f11127c237b7304e58477f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:57975", "10.65.0.27:57975", "172.17.0.1:57975"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:05.803296584Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-			"MachineKey": "mkey:f3bce7201f9e4a59870460edc4daa429c6e544c5f1eb91ca16b8f0f116778953",
-			"Peers": [{
-				"ID":         7173474145002442,
-				"StableID":   "nf5an61t1y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-				"DiscoKey":   "discokey:6eb1642385ca30b7e85e8bac009dc4283765568cc963769d99098d9048573362",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37010", "10.65.0.27:37010", "172.17.0.1:37010"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:06.352662578Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5446690898653625,
-				"StableID":   "n6T3QNLpXj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-				"DiscoKey":   "discokey:1db9028c2a80fc8a4abc33ed456b5a9303f7fa8b7eca69acb4bda07838f6f53c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:40128", "10.65.0.27:40128", "172.17.0.1:40128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:06.885506184Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3284248953341954,
-				"StableID":   "ndJEdkeSeS11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-				"DiscoKey":   "discokey:d301bcd02c779d64dc1e353a7b2b62b91ba6ad71bba54db3ef5a2e08bc1a6425",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46435", "10.65.0.27:46435", "172.17.0.1:46435"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:07.430823402Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8160295226154365,
-				"StableID":   "nYNzWr7pi621CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-				"DiscoKey":   "discokey:a87bf45308d5d0101fb9ee40e0bba6574f9b1b1b7513e9a602ec63184e9df74a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59949", "10.65.0.27:59949", "172.17.0.1:59949"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:07.976542383Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8765328997180824,
-				"StableID":   "n3WG27LqSB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-				"KeyExpiry":  "2026-11-03T08:25:08Z",
-				"DiscoKey":   "discokey:6032277f3390aaf3c19a9d3e4e5e9a22b08c9f21ed53403dc1e540ccad13754d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:39600", "10.65.0.27:39600", "172.17.0.1:39600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:08.520128158Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1100445585469762,
-				"StableID":   "nfhA6hqPb911CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:919c8b212cf44cb58f89d7ed9fba4f594cac2fd975e91fdf9a013e316b2cce12",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50024", "10.65.0.27:50024", "172.17.0.1:50024"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:09.059141641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8705839170304632,
-				"StableID":   "nseajgdtyA21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:2af0dadd7f6be44e725c0682875ddc58be6564c09b5dbb390bf060ac5e0d7d78",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41835", "10.65.0.27:41835", "172.17.0.1:41835"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:09.597242426Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7325206984487013": {
-				"ID":          7325206984487013,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7173474145002442,
-				"StableID":   "nf5an61t1y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       7173474145002442,
-				"Key":        "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-				"DiscoKey":   "discokey:6eb1642385ca30b7e85e8bac009dc4283765568cc963769d99098d9048573362",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37010", "10.65.0.27:37010", "172.17.0.1:37010"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:25:06.352662578Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-			"MachineKey": "mkey:fbe254fe63e36f2de3d363b2a809fc109bf117d48d351dc77272f500f06a1e04",
-			"Peers": [{
-				"ID":         7325206984487013,
-				"StableID":   "np68ESmbCz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-				"DiscoKey":   "discokey:ffb440968c7d5827894cfae0da249aa8af96143a45f11127c237b7304e58477f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:57975", "10.65.0.27:57975", "172.17.0.1:57975"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:05.803296584Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5446690898653625,
-				"StableID":   "n6T3QNLpXj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-				"DiscoKey":   "discokey:1db9028c2a80fc8a4abc33ed456b5a9303f7fa8b7eca69acb4bda07838f6f53c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:40128", "10.65.0.27:40128", "172.17.0.1:40128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:06.885506184Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3284248953341954,
-				"StableID":   "ndJEdkeSeS11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-				"DiscoKey":   "discokey:d301bcd02c779d64dc1e353a7b2b62b91ba6ad71bba54db3ef5a2e08bc1a6425",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46435", "10.65.0.27:46435", "172.17.0.1:46435"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:07.430823402Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8160295226154365,
-				"StableID":   "nYNzWr7pi621CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-				"DiscoKey":   "discokey:a87bf45308d5d0101fb9ee40e0bba6574f9b1b1b7513e9a602ec63184e9df74a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59949", "10.65.0.27:59949", "172.17.0.1:59949"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:07.976542383Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8765328997180824,
-				"StableID":   "n3WG27LqSB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-				"KeyExpiry":  "2026-11-03T08:25:08Z",
-				"DiscoKey":   "discokey:6032277f3390aaf3c19a9d3e4e5e9a22b08c9f21ed53403dc1e540ccad13754d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:39600", "10.65.0.27:39600", "172.17.0.1:39600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:08.520128158Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1100445585469762,
-				"StableID":   "nfhA6hqPb911CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:919c8b212cf44cb58f89d7ed9fba4f594cac2fd975e91fdf9a013e316b2cce12",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50024", "10.65.0.27:50024", "172.17.0.1:50024"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:09.059141641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8705839170304632,
-				"StableID":   "nseajgdtyA21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:2af0dadd7f6be44e725c0682875ddc58be6564c09b5dbb390bf060ac5e0d7d78",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41835", "10.65.0.27:41835", "172.17.0.1:41835"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:09.597242426Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7173474145002442": {
-				"ID":          7173474145002442,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8765328997180824,
-				"StableID":   "n3WG27LqSB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-				"KeyExpiry":  "2026-11-03T08:25:08Z",
-				"DiscoKey":   "discokey:6032277f3390aaf3c19a9d3e4e5e9a22b08c9f21ed53403dc1e540ccad13754d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:39600", "10.65.0.27:39600", "172.17.0.1:39600"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:08.520128158Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-			"MachineKey": "mkey:30a4dd3a7e815ea5667cf9a7fbfb1e7a7a087bbe6c3f2e04cf8d85e39eb9f75b",
-			"Peers": [{
-				"ID":         7325206984487013,
-				"StableID":   "np68ESmbCz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-				"DiscoKey":   "discokey:ffb440968c7d5827894cfae0da249aa8af96143a45f11127c237b7304e58477f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:57975", "10.65.0.27:57975", "172.17.0.1:57975"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:05.803296584Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7173474145002442,
-				"StableID":   "nf5an61t1y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-				"DiscoKey":   "discokey:6eb1642385ca30b7e85e8bac009dc4283765568cc963769d99098d9048573362",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37010", "10.65.0.27:37010", "172.17.0.1:37010"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:06.352662578Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5446690898653625,
-				"StableID":   "n6T3QNLpXj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-				"DiscoKey":   "discokey:1db9028c2a80fc8a4abc33ed456b5a9303f7fa8b7eca69acb4bda07838f6f53c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:40128", "10.65.0.27:40128", "172.17.0.1:40128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:06.885506184Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3284248953341954,
-				"StableID":   "ndJEdkeSeS11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-				"DiscoKey":   "discokey:d301bcd02c779d64dc1e353a7b2b62b91ba6ad71bba54db3ef5a2e08bc1a6425",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46435", "10.65.0.27:46435", "172.17.0.1:46435"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:07.430823402Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8160295226154365,
-				"StableID":   "nYNzWr7pi621CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-				"DiscoKey":   "discokey:a87bf45308d5d0101fb9ee40e0bba6574f9b1b1b7513e9a602ec63184e9df74a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59949", "10.65.0.27:59949", "172.17.0.1:59949"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:07.976542383Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1100445585469762,
-				"StableID":   "nfhA6hqPb911CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:919c8b212cf44cb58f89d7ed9fba4f594cac2fd975e91fdf9a013e316b2cce12",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50024", "10.65.0.27:50024", "172.17.0.1:50024"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:09.059141641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8705839170304632,
-				"StableID":   "nseajgdtyA21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:2af0dadd7f6be44e725c0682875ddc58be6564c09b5dbb390bf060ac5e0d7d78",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41835", "10.65.0.27:41835", "172.17.0.1:41835"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:09.597242426Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5446690898653625,
-				"StableID":   "n6T3QNLpXj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5446690898653625,
-				"Key":        "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-				"DiscoKey":   "discokey:1db9028c2a80fc8a4abc33ed456b5a9303f7fa8b7eca69acb4bda07838f6f53c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:40128", "10.65.0.27:40128", "172.17.0.1:40128"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:06.885506184Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-			"MachineKey": "mkey:ec229a916fb2cdd5ce074b324b950d490c1c8d7e2ee7334687b9e452ce32745e",
-			"Peers": [{
-				"ID":         7325206984487013,
-				"StableID":   "np68ESmbCz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-				"DiscoKey":   "discokey:ffb440968c7d5827894cfae0da249aa8af96143a45f11127c237b7304e58477f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:57975", "10.65.0.27:57975", "172.17.0.1:57975"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:05.803296584Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7173474145002442,
-				"StableID":   "nf5an61t1y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-				"DiscoKey":   "discokey:6eb1642385ca30b7e85e8bac009dc4283765568cc963769d99098d9048573362",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37010", "10.65.0.27:37010", "172.17.0.1:37010"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:06.352662578Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3284248953341954,
-				"StableID":   "ndJEdkeSeS11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-				"DiscoKey":   "discokey:d301bcd02c779d64dc1e353a7b2b62b91ba6ad71bba54db3ef5a2e08bc1a6425",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46435", "10.65.0.27:46435", "172.17.0.1:46435"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:07.430823402Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8160295226154365,
-				"StableID":   "nYNzWr7pi621CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-				"DiscoKey":   "discokey:a87bf45308d5d0101fb9ee40e0bba6574f9b1b1b7513e9a602ec63184e9df74a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59949", "10.65.0.27:59949", "172.17.0.1:59949"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:07.976542383Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8765328997180824,
-				"StableID":   "n3WG27LqSB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-				"KeyExpiry":  "2026-11-03T08:25:08Z",
-				"DiscoKey":   "discokey:6032277f3390aaf3c19a9d3e4e5e9a22b08c9f21ed53403dc1e540ccad13754d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:39600", "10.65.0.27:39600", "172.17.0.1:39600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:08.520128158Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1100445585469762,
-				"StableID":   "nfhA6hqPb911CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:919c8b212cf44cb58f89d7ed9fba4f594cac2fd975e91fdf9a013e316b2cce12",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50024", "10.65.0.27:50024", "172.17.0.1:50024"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:09.059141641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8705839170304632,
-				"StableID":   "nseajgdtyA21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:2af0dadd7f6be44e725c0682875ddc58be6564c09b5dbb390bf060ac5e0d7d78",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41835", "10.65.0.27:41835", "172.17.0.1:41835"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:09.597242426Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5446690898653625": {
-				"ID":          5446690898653625,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3284248953341954,
-				"StableID":   "ndJEdkeSeS11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       3284248953341954,
-				"Key":        "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-				"DiscoKey":   "discokey:d301bcd02c779d64dc1e353a7b2b62b91ba6ad71bba54db3ef5a2e08bc1a6425",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46435", "10.65.0.27:46435", "172.17.0.1:46435"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:25:07.430823402Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-			"MachineKey": "mkey:955fd1f1f53b34060c87ef5b537829c09fa64b30d164b250c9de2aedbcacdf1d",
-			"Peers": [{
-				"ID":         7325206984487013,
-				"StableID":   "np68ESmbCz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-				"DiscoKey":   "discokey:ffb440968c7d5827894cfae0da249aa8af96143a45f11127c237b7304e58477f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:57975", "10.65.0.27:57975", "172.17.0.1:57975"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:05.803296584Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7173474145002442,
-				"StableID":   "nf5an61t1y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-				"DiscoKey":   "discokey:6eb1642385ca30b7e85e8bac009dc4283765568cc963769d99098d9048573362",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37010", "10.65.0.27:37010", "172.17.0.1:37010"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:06.352662578Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5446690898653625,
-				"StableID":   "n6T3QNLpXj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-				"DiscoKey":   "discokey:1db9028c2a80fc8a4abc33ed456b5a9303f7fa8b7eca69acb4bda07838f6f53c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:40128", "10.65.0.27:40128", "172.17.0.1:40128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:06.885506184Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8160295226154365,
-				"StableID":   "nYNzWr7pi621CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-				"DiscoKey":   "discokey:a87bf45308d5d0101fb9ee40e0bba6574f9b1b1b7513e9a602ec63184e9df74a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59949", "10.65.0.27:59949", "172.17.0.1:59949"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:07.976542383Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8765328997180824,
-				"StableID":   "n3WG27LqSB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-				"KeyExpiry":  "2026-11-03T08:25:08Z",
-				"DiscoKey":   "discokey:6032277f3390aaf3c19a9d3e4e5e9a22b08c9f21ed53403dc1e540ccad13754d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:39600", "10.65.0.27:39600", "172.17.0.1:39600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:08.520128158Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1100445585469762,
-				"StableID":   "nfhA6hqPb911CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:919c8b212cf44cb58f89d7ed9fba4f594cac2fd975e91fdf9a013e316b2cce12",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50024", "10.65.0.27:50024", "172.17.0.1:50024"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:09.059141641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8705839170304632,
-				"StableID":   "nseajgdtyA21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:2af0dadd7f6be44e725c0682875ddc58be6564c09b5dbb390bf060ac5e0d7d78",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41835", "10.65.0.27:41835", "172.17.0.1:41835"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:09.597242426Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3284248953341954": {
-				"ID":          3284248953341954,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8160295226154365,
-				"StableID":   "nYNzWr7pi621CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       8160295226154365,
-				"Key":        "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-				"DiscoKey":   "discokey:a87bf45308d5d0101fb9ee40e0bba6574f9b1b1b7513e9a602ec63184e9df74a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59949", "10.65.0.27:59949", "172.17.0.1:59949"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:07.976542383Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-			"MachineKey": "mkey:017db15415dd24959e90b5fc24b45fa1cc1728e769cb802ecf527c0aed312c4f",
-			"Peers": [{
-				"ID":         7325206984487013,
-				"StableID":   "np68ESmbCz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-				"DiscoKey":   "discokey:ffb440968c7d5827894cfae0da249aa8af96143a45f11127c237b7304e58477f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:57975", "10.65.0.27:57975", "172.17.0.1:57975"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:05.803296584Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7173474145002442,
-				"StableID":   "nf5an61t1y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-				"DiscoKey":   "discokey:6eb1642385ca30b7e85e8bac009dc4283765568cc963769d99098d9048573362",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37010", "10.65.0.27:37010", "172.17.0.1:37010"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:06.352662578Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5446690898653625,
-				"StableID":   "n6T3QNLpXj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-				"DiscoKey":   "discokey:1db9028c2a80fc8a4abc33ed456b5a9303f7fa8b7eca69acb4bda07838f6f53c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:40128", "10.65.0.27:40128", "172.17.0.1:40128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:06.885506184Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3284248953341954,
-				"StableID":   "ndJEdkeSeS11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-				"DiscoKey":   "discokey:d301bcd02c779d64dc1e353a7b2b62b91ba6ad71bba54db3ef5a2e08bc1a6425",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46435", "10.65.0.27:46435", "172.17.0.1:46435"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:07.430823402Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8765328997180824,
-				"StableID":   "n3WG27LqSB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-				"KeyExpiry":  "2026-11-03T08:25:08Z",
-				"DiscoKey":   "discokey:6032277f3390aaf3c19a9d3e4e5e9a22b08c9f21ed53403dc1e540ccad13754d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:39600", "10.65.0.27:39600", "172.17.0.1:39600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:08.520128158Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1100445585469762,
-				"StableID":   "nfhA6hqPb911CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:919c8b212cf44cb58f89d7ed9fba4f594cac2fd975e91fdf9a013e316b2cce12",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50024", "10.65.0.27:50024", "172.17.0.1:50024"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:09.059141641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8705839170304632,
-				"StableID":   "nseajgdtyA21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:2af0dadd7f6be44e725c0682875ddc58be6564c09b5dbb390bf060ac5e0d7d78",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41835", "10.65.0.27:41835", "172.17.0.1:41835"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:09.597242426Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8160295226154365": {
-				"ID":          8160295226154365,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8705839170304632,
-				"StableID":   "nseajgdtyA21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:2af0dadd7f6be44e725c0682875ddc58be6564c09b5dbb390bf060ac5e0d7d78",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41835", "10.65.0.27:41835", "172.17.0.1:41835"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:09.597242426Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-			"MachineKey": "mkey:69ce01297003edc59f02d186cec96044005fda81480dc9bd8d0aff97be7e9375",
-			"Peers": [{
-				"ID":         7325206984487013,
-				"StableID":   "np68ESmbCz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-				"DiscoKey":   "discokey:ffb440968c7d5827894cfae0da249aa8af96143a45f11127c237b7304e58477f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:57975", "10.65.0.27:57975", "172.17.0.1:57975"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:05.803296584Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7173474145002442,
-				"StableID":   "nf5an61t1y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-				"DiscoKey":   "discokey:6eb1642385ca30b7e85e8bac009dc4283765568cc963769d99098d9048573362",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37010", "10.65.0.27:37010", "172.17.0.1:37010"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:06.352662578Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5446690898653625,
-				"StableID":   "n6T3QNLpXj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-				"DiscoKey":   "discokey:1db9028c2a80fc8a4abc33ed456b5a9303f7fa8b7eca69acb4bda07838f6f53c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:40128", "10.65.0.27:40128", "172.17.0.1:40128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:06.885506184Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3284248953341954,
-				"StableID":   "ndJEdkeSeS11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-				"DiscoKey":   "discokey:d301bcd02c779d64dc1e353a7b2b62b91ba6ad71bba54db3ef5a2e08bc1a6425",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46435", "10.65.0.27:46435", "172.17.0.1:46435"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:07.430823402Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8160295226154365,
-				"StableID":   "nYNzWr7pi621CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-				"DiscoKey":   "discokey:a87bf45308d5d0101fb9ee40e0bba6574f9b1b1b7513e9a602ec63184e9df74a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59949", "10.65.0.27:59949", "172.17.0.1:59949"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:07.976542383Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8765328997180824,
-				"StableID":   "n3WG27LqSB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-				"KeyExpiry":  "2026-11-03T08:25:08Z",
-				"DiscoKey":   "discokey:6032277f3390aaf3c19a9d3e4e5e9a22b08c9f21ed53403dc1e540ccad13754d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:39600", "10.65.0.27:39600", "172.17.0.1:39600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:08.520128158Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1100445585469762,
-				"StableID":   "nfhA6hqPb911CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:919c8b212cf44cb58f89d7ed9fba4f594cac2fd975e91fdf9a013e316b2cce12",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50024", "10.65.0.27:50024", "172.17.0.1:50024"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:09.059141641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1100445585469762,
-				"StableID":   "nfhA6hqPb911CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:919c8b212cf44cb58f89d7ed9fba4f594cac2fd975e91fdf9a013e316b2cce12",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50024", "10.65.0.27:50024", "172.17.0.1:50024"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:09.059141641Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f8680533b65d589e1d7aa23b19de2a7269d6020c0e819f6c9d0fd2c56ff1ea63",
-			"MachineKey": "mkey:56045e82469bf0c3e9261fae66cab026965282cc8bddeef6b9095542a5cc3273",
-			"Peers": [{
-				"ID":         7325206984487013,
-				"StableID":   "np68ESmbCz11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3f724fcc3a6d79e35a4f03d9448a9f31dc1f11cec7145cc79c3e8ef8c2e0d878",
-				"DiscoKey":   "discokey:ffb440968c7d5827894cfae0da249aa8af96143a45f11127c237b7304e58477f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:57975", "10.65.0.27:57975", "172.17.0.1:57975"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:05.803296584Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7173474145002442,
-				"StableID":   "nf5an61t1y11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0ef4684d83ea55074e8010dde77a8e856140d0277bc8e4c60796de66b7a17b62",
-				"DiscoKey":   "discokey:6eb1642385ca30b7e85e8bac009dc4283765568cc963769d99098d9048573362",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:37010", "10.65.0.27:37010", "172.17.0.1:37010"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:06.352662578Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5446690898653625,
-				"StableID":   "n6T3QNLpXj11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:295f9d8d92fb1f04ed97fc2d556288ea52f7bf8600ca3672e153af875268ce30",
-				"DiscoKey":   "discokey:1db9028c2a80fc8a4abc33ed456b5a9303f7fa8b7eca69acb4bda07838f6f53c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:40128", "10.65.0.27:40128", "172.17.0.1:40128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:06.885506184Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3284248953341954,
-				"StableID":   "ndJEdkeSeS11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:476a8b5a5dc073d838749be2c668d0037d6455a80184462e19e3868a14ac6d65",
-				"DiscoKey":   "discokey:d301bcd02c779d64dc1e353a7b2b62b91ba6ad71bba54db3ef5a2e08bc1a6425",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46435", "10.65.0.27:46435", "172.17.0.1:46435"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:07.430823402Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8160295226154365,
-				"StableID":   "nYNzWr7pi621CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:347e597da10921a1a3be656f972250183e18bb71f01aac4f8a83ad2d50614516",
-				"DiscoKey":   "discokey:a87bf45308d5d0101fb9ee40e0bba6574f9b1b1b7513e9a602ec63184e9df74a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:59949", "10.65.0.27:59949", "172.17.0.1:59949"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:07.976542383Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8765328997180824,
-				"StableID":   "n3WG27LqSB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:2e75528c39e890a61dbf3fd0ca16c2cafedc194bd989cbfa579f27bb2cfe2630",
-				"KeyExpiry":  "2026-11-03T08:25:08Z",
-				"DiscoKey":   "discokey:6032277f3390aaf3c19a9d3e4e5e9a22b08c9f21ed53403dc1e540ccad13754d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:39600", "10.65.0.27:39600", "172.17.0.1:39600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:08.520128158Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8705839170304632,
-				"StableID":   "nseajgdtyA21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e0cedf677cb7afa724b3e347778002a8f62ff7e150d278a20c1760c96c23f45a",
-				"KeyExpiry":  "2026-11-03T08:25:09Z",
-				"DiscoKey":   "discokey:2af0dadd7f6be44e725c0682875ddc58be6564c09b5dbb390bf060ac5e0d7d78",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41835", "10.65.0.27:41835", "172.17.0.1:41835"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:09.597242426Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g3-mixed.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g3-mixed.hujson
deleted file mode 100644
index 978013b55..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-ippool-g3-mixed.hujson
+++ /dev/null
@@ -1,8828 +0,0 @@
-// nodeattrs-ippool-g3-mixed
-//
-// combined attr + ipPool in a single entry
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:25:40Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-ippool-g3-mixed",
-	"description":    "combined attr + ipPool in a single entry",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:25:40.621967661Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                            \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"combined attr + ipPool in a single entry\",\n    \"id\": \"nodeattrs-ippool-g3-mixed\",\n    \"options\": {},\n    \"policy\": {\n        \"groups\": {\n            \"group:admins\": [\n                \"odin@example.com\"\n            ],\n            \"group:developers\": [\n                \"thor@example.org\",\n                \"odin@example.com\"\n            ],\n            \"group:monitors\": [\n                \"freya@example.com\"\n            ]\n        },\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"ipPool\": [\n                    \"100.86.0.0/16\"\n                ],\n                \"target\": [\n                    \"group:admins\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-ippool-g3-mixed.hujson",
-		"full_policy": {"groups": {
-			"group:admins":     ["odin@example.com"],
-			"group:developers": ["thor@example.org", "odin@example.com"],
-			"group:monitors":   ["freya@example.com"]
-		}, "nodeAttrs": [{
-			"attr":   ["randomize-client-port"],
-			"ipPool": ["100.86.0.0/16"],
-			"target": ["group:admins"]
-		}], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5480724806717612,
-				"StableID":   "nhKwJ8MEoj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       5480724806717612,
-				"Key":        "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-				"DiscoKey":   "discokey:95d448830ccb49cbaa2e63803a112894da2cd81721c64e7efd6dab66cab12f21",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43599", "10.65.0.27:43599", "172.17.0.1:43599"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:46.029968627Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-			"MachineKey": "mkey:d020fccd5b27f6cec9bba0805398fd7ec2e2ce75462f545da5e919f90d46167f",
-			"Peers": [{
-				"ID":         867020538607244,
-				"StableID":   "nyyQ2FAgm711CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-				"DiscoKey":   "discokey:cf32851ffa8159b42727557fd4a500a25709422ac6c91cc2a42cd8201ef5af47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52524", "10.65.0.27:52524", "172.17.0.1:52524"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:46.565350425Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5742347958059179,
-				"StableID":   "nQToJ8kiqm11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-				"DiscoKey":   "discokey:e4d4f42521c1deb0f501414264ecc6b265402b8a715b1cffddc53b3b13ee7e11",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41788", "10.65.0.27:41788", "172.17.0.1:41788"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:47.084522542Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8295904540328014,
-				"StableID":   "n9epE1MEn721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-				"DiscoKey":   "discokey:1af19bee2f62e93196bdbe691f9f4d9942068a68b4f94893cc4aa94cafeb500b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37184", "10.65.0.27:37184", "172.17.0.1:37184"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:47.615896797Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8393993422861764,
-				"StableID":   "nPa6uTyeY821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-				"DiscoKey":   "discokey:0b721b078e97063ae776eda2cd78e1220e3b255f86bc809115afe70e3488763b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52533", "10.65.0.27:52533", "172.17.0.1:52533"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:48.171393066Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6425289617265686,
-				"StableID":   "n3TD7rT2Bs11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-				"KeyExpiry":  "2026-11-03T08:25:48Z",
-				"DiscoKey":   "discokey:2d3fe957d0d27467a710a0c1b9c0bbdb03c00b327c5c7198adf2addd3d4cee3d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56955", "10.65.0.27:56955", "172.17.0.1:56955"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:48.720379538Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         428894380872756,
-				"StableID":   "nhdxk2LFM411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:2a1ede9a08406bd70cd5c5988bbb6bfeb54f18eea8ba338c30e993a2cd407a3f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50431", "10.65.0.27:50431", "172.17.0.1:50431"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:49.254131709Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8994367372486781,
-				"StableID":   "nAofwBnZED21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:1b4a4e9a2a6367c26f05449e8428f83631d28f9caf7b2fd6e6c2054e8743b971",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35863", "10.65.0.27:35863", "172.17.0.1:35863"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:49.806146565Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5480724806717612": {
-				"ID":          5480724806717612,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         867020538607244,
-				"StableID":   "nyyQ2FAgm711CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       867020538607244,
-				"Key":        "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-				"DiscoKey":   "discokey:cf32851ffa8159b42727557fd4a500a25709422ac6c91cc2a42cd8201ef5af47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52524", "10.65.0.27:52524", "172.17.0.1:52524"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:25:46.565350425Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-			"MachineKey": "mkey:441040a9744f51543ce68433d23fbf1eecdb9f644693e1cdbe230375f95ad05c",
-			"Peers": [{
-				"ID":         5480724806717612,
-				"StableID":   "nhKwJ8MEoj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-				"DiscoKey":   "discokey:95d448830ccb49cbaa2e63803a112894da2cd81721c64e7efd6dab66cab12f21",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43599", "10.65.0.27:43599", "172.17.0.1:43599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:46.029968627Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5742347958059179,
-				"StableID":   "nQToJ8kiqm11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-				"DiscoKey":   "discokey:e4d4f42521c1deb0f501414264ecc6b265402b8a715b1cffddc53b3b13ee7e11",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41788", "10.65.0.27:41788", "172.17.0.1:41788"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:47.084522542Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8295904540328014,
-				"StableID":   "n9epE1MEn721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-				"DiscoKey":   "discokey:1af19bee2f62e93196bdbe691f9f4d9942068a68b4f94893cc4aa94cafeb500b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37184", "10.65.0.27:37184", "172.17.0.1:37184"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:47.615896797Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8393993422861764,
-				"StableID":   "nPa6uTyeY821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-				"DiscoKey":   "discokey:0b721b078e97063ae776eda2cd78e1220e3b255f86bc809115afe70e3488763b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52533", "10.65.0.27:52533", "172.17.0.1:52533"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:48.171393066Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6425289617265686,
-				"StableID":   "n3TD7rT2Bs11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-				"KeyExpiry":  "2026-11-03T08:25:48Z",
-				"DiscoKey":   "discokey:2d3fe957d0d27467a710a0c1b9c0bbdb03c00b327c5c7198adf2addd3d4cee3d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56955", "10.65.0.27:56955", "172.17.0.1:56955"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:48.720379538Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         428894380872756,
-				"StableID":   "nhdxk2LFM411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:2a1ede9a08406bd70cd5c5988bbb6bfeb54f18eea8ba338c30e993a2cd407a3f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50431", "10.65.0.27:50431", "172.17.0.1:50431"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:49.254131709Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8994367372486781,
-				"StableID":   "nAofwBnZED21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:1b4a4e9a2a6367c26f05449e8428f83631d28f9caf7b2fd6e6c2054e8743b971",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35863", "10.65.0.27:35863", "172.17.0.1:35863"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:49.806146565Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "867020538607244": {
-				"ID":          867020538607244,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6425289617265686,
-				"StableID":   "n3TD7rT2Bs11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-				"KeyExpiry":  "2026-11-03T08:25:48Z",
-				"DiscoKey":   "discokey:2d3fe957d0d27467a710a0c1b9c0bbdb03c00b327c5c7198adf2addd3d4cee3d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56955", "10.65.0.27:56955", "172.17.0.1:56955"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:48.720379538Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-			"MachineKey": "mkey:628382b5b80a00f03b3f6cba3ef383f016baea87352b6fb39a763e949bb53a46",
-			"Peers": [{
-				"ID":         5480724806717612,
-				"StableID":   "nhKwJ8MEoj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-				"DiscoKey":   "discokey:95d448830ccb49cbaa2e63803a112894da2cd81721c64e7efd6dab66cab12f21",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43599", "10.65.0.27:43599", "172.17.0.1:43599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:46.029968627Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         867020538607244,
-				"StableID":   "nyyQ2FAgm711CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-				"DiscoKey":   "discokey:cf32851ffa8159b42727557fd4a500a25709422ac6c91cc2a42cd8201ef5af47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52524", "10.65.0.27:52524", "172.17.0.1:52524"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:46.565350425Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5742347958059179,
-				"StableID":   "nQToJ8kiqm11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-				"DiscoKey":   "discokey:e4d4f42521c1deb0f501414264ecc6b265402b8a715b1cffddc53b3b13ee7e11",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41788", "10.65.0.27:41788", "172.17.0.1:41788"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:47.084522542Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8295904540328014,
-				"StableID":   "n9epE1MEn721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-				"DiscoKey":   "discokey:1af19bee2f62e93196bdbe691f9f4d9942068a68b4f94893cc4aa94cafeb500b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37184", "10.65.0.27:37184", "172.17.0.1:37184"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:47.615896797Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8393993422861764,
-				"StableID":   "nPa6uTyeY821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-				"DiscoKey":   "discokey:0b721b078e97063ae776eda2cd78e1220e3b255f86bc809115afe70e3488763b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52533", "10.65.0.27:52533", "172.17.0.1:52533"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:48.171393066Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         428894380872756,
-				"StableID":   "nhdxk2LFM411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:2a1ede9a08406bd70cd5c5988bbb6bfeb54f18eea8ba338c30e993a2cd407a3f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50431", "10.65.0.27:50431", "172.17.0.1:50431"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:49.254131709Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8994367372486781,
-				"StableID":   "nAofwBnZED21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:1b4a4e9a2a6367c26f05449e8428f83631d28f9caf7b2fd6e6c2054e8743b971",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35863", "10.65.0.27:35863", "172.17.0.1:35863"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:49.806146565Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5742347958059179,
-				"StableID":   "nQToJ8kiqm11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5742347958059179,
-				"Key":        "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-				"DiscoKey":   "discokey:e4d4f42521c1deb0f501414264ecc6b265402b8a715b1cffddc53b3b13ee7e11",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41788", "10.65.0.27:41788", "172.17.0.1:41788"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:47.084522542Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-			"MachineKey": "mkey:d6a1ff0d0c37502397ee3a9abdb4d416ce372f80f9a08088f8ddc85c3f042c31",
-			"Peers": [{
-				"ID":         5480724806717612,
-				"StableID":   "nhKwJ8MEoj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-				"DiscoKey":   "discokey:95d448830ccb49cbaa2e63803a112894da2cd81721c64e7efd6dab66cab12f21",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43599", "10.65.0.27:43599", "172.17.0.1:43599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:46.029968627Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         867020538607244,
-				"StableID":   "nyyQ2FAgm711CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-				"DiscoKey":   "discokey:cf32851ffa8159b42727557fd4a500a25709422ac6c91cc2a42cd8201ef5af47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52524", "10.65.0.27:52524", "172.17.0.1:52524"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:46.565350425Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8295904540328014,
-				"StableID":   "n9epE1MEn721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-				"DiscoKey":   "discokey:1af19bee2f62e93196bdbe691f9f4d9942068a68b4f94893cc4aa94cafeb500b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37184", "10.65.0.27:37184", "172.17.0.1:37184"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:47.615896797Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8393993422861764,
-				"StableID":   "nPa6uTyeY821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-				"DiscoKey":   "discokey:0b721b078e97063ae776eda2cd78e1220e3b255f86bc809115afe70e3488763b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52533", "10.65.0.27:52533", "172.17.0.1:52533"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:48.171393066Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6425289617265686,
-				"StableID":   "n3TD7rT2Bs11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-				"KeyExpiry":  "2026-11-03T08:25:48Z",
-				"DiscoKey":   "discokey:2d3fe957d0d27467a710a0c1b9c0bbdb03c00b327c5c7198adf2addd3d4cee3d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56955", "10.65.0.27:56955", "172.17.0.1:56955"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:48.720379538Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         428894380872756,
-				"StableID":   "nhdxk2LFM411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:2a1ede9a08406bd70cd5c5988bbb6bfeb54f18eea8ba338c30e993a2cd407a3f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50431", "10.65.0.27:50431", "172.17.0.1:50431"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:49.254131709Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8994367372486781,
-				"StableID":   "nAofwBnZED21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:1b4a4e9a2a6367c26f05449e8428f83631d28f9caf7b2fd6e6c2054e8743b971",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35863", "10.65.0.27:35863", "172.17.0.1:35863"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:49.806146565Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5742347958059179": {
-				"ID":          5742347958059179,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8295904540328014,
-				"StableID":   "n9epE1MEn721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       8295904540328014,
-				"Key":        "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-				"DiscoKey":   "discokey:1af19bee2f62e93196bdbe691f9f4d9942068a68b4f94893cc4aa94cafeb500b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37184", "10.65.0.27:37184", "172.17.0.1:37184"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:25:47.615896797Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-			"MachineKey": "mkey:207f81afb539c733635c7d47bafd5e20d3f3f6eb6091fda644658e5bde726a3a",
-			"Peers": [{
-				"ID":         5480724806717612,
-				"StableID":   "nhKwJ8MEoj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-				"DiscoKey":   "discokey:95d448830ccb49cbaa2e63803a112894da2cd81721c64e7efd6dab66cab12f21",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43599", "10.65.0.27:43599", "172.17.0.1:43599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:46.029968627Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         867020538607244,
-				"StableID":   "nyyQ2FAgm711CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-				"DiscoKey":   "discokey:cf32851ffa8159b42727557fd4a500a25709422ac6c91cc2a42cd8201ef5af47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52524", "10.65.0.27:52524", "172.17.0.1:52524"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:46.565350425Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5742347958059179,
-				"StableID":   "nQToJ8kiqm11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-				"DiscoKey":   "discokey:e4d4f42521c1deb0f501414264ecc6b265402b8a715b1cffddc53b3b13ee7e11",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41788", "10.65.0.27:41788", "172.17.0.1:41788"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:47.084522542Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8393993422861764,
-				"StableID":   "nPa6uTyeY821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-				"DiscoKey":   "discokey:0b721b078e97063ae776eda2cd78e1220e3b255f86bc809115afe70e3488763b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52533", "10.65.0.27:52533", "172.17.0.1:52533"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:48.171393066Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6425289617265686,
-				"StableID":   "n3TD7rT2Bs11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-				"KeyExpiry":  "2026-11-03T08:25:48Z",
-				"DiscoKey":   "discokey:2d3fe957d0d27467a710a0c1b9c0bbdb03c00b327c5c7198adf2addd3d4cee3d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56955", "10.65.0.27:56955", "172.17.0.1:56955"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:48.720379538Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         428894380872756,
-				"StableID":   "nhdxk2LFM411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:2a1ede9a08406bd70cd5c5988bbb6bfeb54f18eea8ba338c30e993a2cd407a3f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50431", "10.65.0.27:50431", "172.17.0.1:50431"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:49.254131709Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8994367372486781,
-				"StableID":   "nAofwBnZED21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:1b4a4e9a2a6367c26f05449e8428f83631d28f9caf7b2fd6e6c2054e8743b971",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35863", "10.65.0.27:35863", "172.17.0.1:35863"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:49.806146565Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8295904540328014": {
-				"ID":          8295904540328014,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8393993422861764,
-				"StableID":   "nPa6uTyeY821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       8393993422861764,
-				"Key":        "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-				"DiscoKey":   "discokey:0b721b078e97063ae776eda2cd78e1220e3b255f86bc809115afe70e3488763b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52533", "10.65.0.27:52533", "172.17.0.1:52533"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:48.171393066Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-			"MachineKey": "mkey:e17a5e09a663f98c0790a102d8e4c319733e65cf1909930d567aecfb58b93566",
-			"Peers": [{
-				"ID":         5480724806717612,
-				"StableID":   "nhKwJ8MEoj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-				"DiscoKey":   "discokey:95d448830ccb49cbaa2e63803a112894da2cd81721c64e7efd6dab66cab12f21",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43599", "10.65.0.27:43599", "172.17.0.1:43599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:46.029968627Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         867020538607244,
-				"StableID":   "nyyQ2FAgm711CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-				"DiscoKey":   "discokey:cf32851ffa8159b42727557fd4a500a25709422ac6c91cc2a42cd8201ef5af47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52524", "10.65.0.27:52524", "172.17.0.1:52524"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:46.565350425Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5742347958059179,
-				"StableID":   "nQToJ8kiqm11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-				"DiscoKey":   "discokey:e4d4f42521c1deb0f501414264ecc6b265402b8a715b1cffddc53b3b13ee7e11",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41788", "10.65.0.27:41788", "172.17.0.1:41788"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:47.084522542Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8295904540328014,
-				"StableID":   "n9epE1MEn721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-				"DiscoKey":   "discokey:1af19bee2f62e93196bdbe691f9f4d9942068a68b4f94893cc4aa94cafeb500b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37184", "10.65.0.27:37184", "172.17.0.1:37184"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:47.615896797Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6425289617265686,
-				"StableID":   "n3TD7rT2Bs11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-				"KeyExpiry":  "2026-11-03T08:25:48Z",
-				"DiscoKey":   "discokey:2d3fe957d0d27467a710a0c1b9c0bbdb03c00b327c5c7198adf2addd3d4cee3d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56955", "10.65.0.27:56955", "172.17.0.1:56955"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:48.720379538Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         428894380872756,
-				"StableID":   "nhdxk2LFM411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:2a1ede9a08406bd70cd5c5988bbb6bfeb54f18eea8ba338c30e993a2cd407a3f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50431", "10.65.0.27:50431", "172.17.0.1:50431"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:49.254131709Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8994367372486781,
-				"StableID":   "nAofwBnZED21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:1b4a4e9a2a6367c26f05449e8428f83631d28f9caf7b2fd6e6c2054e8743b971",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35863", "10.65.0.27:35863", "172.17.0.1:35863"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:49.806146565Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8393993422861764": {
-				"ID":          8393993422861764,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8994367372486781,
-				"StableID":   "nAofwBnZED21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:1b4a4e9a2a6367c26f05449e8428f83631d28f9caf7b2fd6e6c2054e8743b971",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35863", "10.65.0.27:35863", "172.17.0.1:35863"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:49.806146565Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-			"MachineKey": "mkey:50ceac055c9fd89ea4da24e10e8abdab8220c4efe94f42f26a354b8248cf2e35",
-			"Peers": [{
-				"ID":         5480724806717612,
-				"StableID":   "nhKwJ8MEoj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-				"DiscoKey":   "discokey:95d448830ccb49cbaa2e63803a112894da2cd81721c64e7efd6dab66cab12f21",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43599", "10.65.0.27:43599", "172.17.0.1:43599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:46.029968627Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         867020538607244,
-				"StableID":   "nyyQ2FAgm711CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-				"DiscoKey":   "discokey:cf32851ffa8159b42727557fd4a500a25709422ac6c91cc2a42cd8201ef5af47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52524", "10.65.0.27:52524", "172.17.0.1:52524"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:46.565350425Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5742347958059179,
-				"StableID":   "nQToJ8kiqm11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-				"DiscoKey":   "discokey:e4d4f42521c1deb0f501414264ecc6b265402b8a715b1cffddc53b3b13ee7e11",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41788", "10.65.0.27:41788", "172.17.0.1:41788"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:47.084522542Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8295904540328014,
-				"StableID":   "n9epE1MEn721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-				"DiscoKey":   "discokey:1af19bee2f62e93196bdbe691f9f4d9942068a68b4f94893cc4aa94cafeb500b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37184", "10.65.0.27:37184", "172.17.0.1:37184"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:47.615896797Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8393993422861764,
-				"StableID":   "nPa6uTyeY821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-				"DiscoKey":   "discokey:0b721b078e97063ae776eda2cd78e1220e3b255f86bc809115afe70e3488763b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52533", "10.65.0.27:52533", "172.17.0.1:52533"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:48.171393066Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6425289617265686,
-				"StableID":   "n3TD7rT2Bs11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-				"KeyExpiry":  "2026-11-03T08:25:48Z",
-				"DiscoKey":   "discokey:2d3fe957d0d27467a710a0c1b9c0bbdb03c00b327c5c7198adf2addd3d4cee3d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56955", "10.65.0.27:56955", "172.17.0.1:56955"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:48.720379538Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         428894380872756,
-				"StableID":   "nhdxk2LFM411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:2a1ede9a08406bd70cd5c5988bbb6bfeb54f18eea8ba338c30e993a2cd407a3f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50431", "10.65.0.27:50431", "172.17.0.1:50431"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:25:49.254131709Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         428894380872756,
-				"StableID":   "nhdxk2LFM411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:2a1ede9a08406bd70cd5c5988bbb6bfeb54f18eea8ba338c30e993a2cd407a3f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50431", "10.65.0.27:50431", "172.17.0.1:50431"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:25:49.254131709Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2920346be0d1d4e4eff0f2a4c7944c236cbabc145438dbc9789c2dbe2ea4f41a",
-			"MachineKey": "mkey:9f42b4592b7d5798cae428dcfb3ee072eb3ebb109a39dff9950fa2a3da937c5b",
-			"Peers": [{
-				"ID":         5480724806717612,
-				"StableID":   "nhKwJ8MEoj11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3529d60acd43c84f7b01bdcf264792d193d3725a9cb8342efdc41f24b4ce5e0c",
-				"DiscoKey":   "discokey:95d448830ccb49cbaa2e63803a112894da2cd81721c64e7efd6dab66cab12f21",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43599", "10.65.0.27:43599", "172.17.0.1:43599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:25:46.029968627Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         867020538607244,
-				"StableID":   "nyyQ2FAgm711CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b7953e33cf45a65fa7a654a9e2e21c75dce98a6e1fafceabfd1efab790277076",
-				"DiscoKey":   "discokey:cf32851ffa8159b42727557fd4a500a25709422ac6c91cc2a42cd8201ef5af47",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:52524", "10.65.0.27:52524", "172.17.0.1:52524"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:25:46.565350425Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5742347958059179,
-				"StableID":   "nQToJ8kiqm11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7370bfeb6402cc3d404c2056c7ac7b684e48b562e4b899dcebad57a1576841",
-				"DiscoKey":   "discokey:e4d4f42521c1deb0f501414264ecc6b265402b8a715b1cffddc53b3b13ee7e11",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:41788", "10.65.0.27:41788", "172.17.0.1:41788"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:25:47.084522542Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8295904540328014,
-				"StableID":   "n9epE1MEn721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84df99a9aebe64402e68bdb5d7766d4b1549c1d54e378741952120306403324b",
-				"DiscoKey":   "discokey:1af19bee2f62e93196bdbe691f9f4d9942068a68b4f94893cc4aa94cafeb500b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37184", "10.65.0.27:37184", "172.17.0.1:37184"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:25:47.615896797Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8393993422861764,
-				"StableID":   "nPa6uTyeY821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8b44dea4632136a3644c4cbee4632321e051a8d9f0fbfbd3228f4b54ba427302",
-				"DiscoKey":   "discokey:0b721b078e97063ae776eda2cd78e1220e3b255f86bc809115afe70e3488763b",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52533", "10.65.0.27:52533", "172.17.0.1:52533"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:25:48.171393066Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6425289617265686,
-				"StableID":   "n3TD7rT2Bs11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:27a1757c738c65f4d19c85eff3c07da9b8092f6da8a763cc18cbeb22adc4e664",
-				"KeyExpiry":  "2026-11-03T08:25:48Z",
-				"DiscoKey":   "discokey:2d3fe957d0d27467a710a0c1b9c0bbdb03c00b327c5c7198adf2addd3d4cee3d",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56955", "10.65.0.27:56955", "172.17.0.1:56955"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:25:48.720379538Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8994367372486781,
-				"StableID":   "nAofwBnZED21CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2cf7b9a646347e7b51d7f84086fc3e9940cb2fa7df3430b21c3b2f1286ebf372",
-				"KeyExpiry":  "2026-11-03T08:25:49Z",
-				"DiscoKey":   "discokey:1b4a4e9a2a6367c26f05449e8428f83631d28f9caf7b2fd6e6c2054e8743b971",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:35863", "10.65.0.27:35863", "172.17.0.1:35863"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:25:49.806146565Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b1-union.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b1-union.hujson
deleted file mode 100644
index f8b7852d5..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b1-union.hujson
+++ /dev/null
@@ -1,8825 +0,0 @@
-// nodeattrs-merge-b1-union
-//
-// two grants on same target: attrs union
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:26:20Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-merge-b1-union",
-	"description":    "two grants on same target: attrs union",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:26:20.821805157Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                           \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"two grants on same target: attrs union\",\n    \"id\": \"nodeattrs-merge-b1-union\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            },\n            {\n                \"attr\": [\n                    \"disable-captive-portal-detection\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-merge-b1-union.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["randomize-client-port"], "target": ["tag:server"]},
-			{"attr": ["disable-captive-portal-detection"], "target": ["tag:server"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8121799417491786,
-				"StableID":   "nZpEj7uNR621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       8121799417491786,
-				"Key":        "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-				"DiscoKey":   "discokey:36656481d4be21440218ccbf7eed7f98585b5d17a8aa1cba9b752596e5fade2e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43753", "10.65.0.27:43753", "172.17.0.1:43753"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:26:26.516703258Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-			"MachineKey": "mkey:d063e8e1c1ce53c4ade33b2f1df43cc4ff8e3ae7c96a38afe236926345077b44",
-			"Peers": [{
-				"ID":         525509837969566,
-				"StableID":   "n9YjrdF17511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-				"DiscoKey":   "discokey:827009aba118261dd02f74a008a7a79d2aa1d8e67c4fe61c049a4b4588af9e1d",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36143", "10.65.0.27:36143", "172.17.0.1:36143"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:26:27.028376133Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2139774084669154,
-				"StableID":   "noXuYjE7iH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-				"DiscoKey":   "discokey:c5f4b0efd86f2b74e994fff3036aff533cf8702c1de3dff8104b3f792a63c642",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33552", "10.65.0.27:33552", "172.17.0.1:33552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:26:27.572415893Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3526338962466849,
-				"StableID":   "nnsVjow5YU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-				"DiscoKey":   "discokey:47ff3c0d8b914737d60926981ce402af715315821c7c5df6e9c9a7261315442a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44074", "10.65.0.27:44074", "172.17.0.1:44074"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:26:28.123988443Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4593150420544232,
-				"StableID":   "nyDDAqGFsc11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-				"DiscoKey":   "discokey:6b4d2826d19a4d7a65dcf8795bf52537ca08dd6ea141b40c89d588cf5934ed50",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42298", "10.65.0.27:42298", "172.17.0.1:42298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:26:28.671287311Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8818624222979249,
-				"StableID":   "nAbEdfJyrB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:23f64b893f4f9d205365258124270ca3bf4e53eacfdd1051f3c57e53ae62fa1a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48593", "10.65.0.27:48593", "172.17.0.1:48593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:26:29.202758274Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8737637665311574,
-				"StableID":   "nfHFrevHEB21CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:2926ca42012512219ced238e69c848ca5b50221849845ba9434ad7d404e03610",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49564", "10.65.0.27:49564", "172.17.0.1:49564"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:26:29.781499316Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1393016861849944,
-				"StableID":   "n7LLv4CusB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-				"KeyExpiry":  "2026-11-03T08:26:30Z",
-				"DiscoKey":   "discokey:7424561b424fb1ab6e812492d61557c365036c71befe0659c3caec7ef8c6d71b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47032", "10.65.0.27:47032", "172.17.0.1:47032"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:26:30.280171978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8121799417491786": {
-				"ID":          8121799417491786,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         525509837969566,
-				"StableID":   "n9YjrdF17511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       525509837969566,
-				"Key":        "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-				"DiscoKey":   "discokey:827009aba118261dd02f74a008a7a79d2aa1d8e67c4fe61c049a4b4588af9e1d",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36143", "10.65.0.27:36143", "172.17.0.1:36143"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:26:27.028376133Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-			"MachineKey": "mkey:f62abf26edfa569df48ccfb3f1942212c91ae0501cb419d2db20ebd4eca40965",
-			"Peers": [{
-				"ID":         8121799417491786,
-				"StableID":   "nZpEj7uNR621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-				"DiscoKey":   "discokey:36656481d4be21440218ccbf7eed7f98585b5d17a8aa1cba9b752596e5fade2e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43753", "10.65.0.27:43753", "172.17.0.1:43753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:26:26.516703258Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2139774084669154,
-				"StableID":   "noXuYjE7iH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-				"DiscoKey":   "discokey:c5f4b0efd86f2b74e994fff3036aff533cf8702c1de3dff8104b3f792a63c642",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33552", "10.65.0.27:33552", "172.17.0.1:33552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:26:27.572415893Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3526338962466849,
-				"StableID":   "nnsVjow5YU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-				"DiscoKey":   "discokey:47ff3c0d8b914737d60926981ce402af715315821c7c5df6e9c9a7261315442a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44074", "10.65.0.27:44074", "172.17.0.1:44074"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:26:28.123988443Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4593150420544232,
-				"StableID":   "nyDDAqGFsc11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-				"DiscoKey":   "discokey:6b4d2826d19a4d7a65dcf8795bf52537ca08dd6ea141b40c89d588cf5934ed50",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42298", "10.65.0.27:42298", "172.17.0.1:42298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:26:28.671287311Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8818624222979249,
-				"StableID":   "nAbEdfJyrB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:23f64b893f4f9d205365258124270ca3bf4e53eacfdd1051f3c57e53ae62fa1a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48593", "10.65.0.27:48593", "172.17.0.1:48593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:26:29.202758274Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8737637665311574,
-				"StableID":   "nfHFrevHEB21CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:2926ca42012512219ced238e69c848ca5b50221849845ba9434ad7d404e03610",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49564", "10.65.0.27:49564", "172.17.0.1:49564"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:26:29.781499316Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1393016861849944,
-				"StableID":   "n7LLv4CusB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-				"KeyExpiry":  "2026-11-03T08:26:30Z",
-				"DiscoKey":   "discokey:7424561b424fb1ab6e812492d61557c365036c71befe0659c3caec7ef8c6d71b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47032", "10.65.0.27:47032", "172.17.0.1:47032"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:26:30.280171978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "525509837969566": {
-				"ID":          525509837969566,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8818624222979249,
-				"StableID":   "nAbEdfJyrB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:23f64b893f4f9d205365258124270ca3bf4e53eacfdd1051f3c57e53ae62fa1a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48593", "10.65.0.27:48593", "172.17.0.1:48593"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:26:29.202758274Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-			"MachineKey": "mkey:c3b68eb08a7e81badbac661fc67ada5ceb6b3db91f22ab6512194ef2c8aced6b",
-			"Peers": [{
-				"ID":         8121799417491786,
-				"StableID":   "nZpEj7uNR621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-				"DiscoKey":   "discokey:36656481d4be21440218ccbf7eed7f98585b5d17a8aa1cba9b752596e5fade2e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43753", "10.65.0.27:43753", "172.17.0.1:43753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:26:26.516703258Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         525509837969566,
-				"StableID":   "n9YjrdF17511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-				"DiscoKey":   "discokey:827009aba118261dd02f74a008a7a79d2aa1d8e67c4fe61c049a4b4588af9e1d",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36143", "10.65.0.27:36143", "172.17.0.1:36143"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:26:27.028376133Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2139774084669154,
-				"StableID":   "noXuYjE7iH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-				"DiscoKey":   "discokey:c5f4b0efd86f2b74e994fff3036aff533cf8702c1de3dff8104b3f792a63c642",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33552", "10.65.0.27:33552", "172.17.0.1:33552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:26:27.572415893Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3526338962466849,
-				"StableID":   "nnsVjow5YU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-				"DiscoKey":   "discokey:47ff3c0d8b914737d60926981ce402af715315821c7c5df6e9c9a7261315442a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44074", "10.65.0.27:44074", "172.17.0.1:44074"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:26:28.123988443Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4593150420544232,
-				"StableID":   "nyDDAqGFsc11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-				"DiscoKey":   "discokey:6b4d2826d19a4d7a65dcf8795bf52537ca08dd6ea141b40c89d588cf5934ed50",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42298", "10.65.0.27:42298", "172.17.0.1:42298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:26:28.671287311Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8737637665311574,
-				"StableID":   "nfHFrevHEB21CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:2926ca42012512219ced238e69c848ca5b50221849845ba9434ad7d404e03610",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49564", "10.65.0.27:49564", "172.17.0.1:49564"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:26:29.781499316Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1393016861849944,
-				"StableID":   "n7LLv4CusB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-				"KeyExpiry":  "2026-11-03T08:26:30Z",
-				"DiscoKey":   "discokey:7424561b424fb1ab6e812492d61557c365036c71befe0659c3caec7ef8c6d71b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47032", "10.65.0.27:47032", "172.17.0.1:47032"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:26:30.280171978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2139774084669154,
-				"StableID":   "noXuYjE7iH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       2139774084669154,
-				"Key":        "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-				"DiscoKey":   "discokey:c5f4b0efd86f2b74e994fff3036aff533cf8702c1de3dff8104b3f792a63c642",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33552", "10.65.0.27:33552", "172.17.0.1:33552"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:26:27.572415893Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-			"MachineKey": "mkey:d4346caab8d234cd0b2fa44634cb3546d7d508af264a9b3125e14d9d1a339b07",
-			"Peers": [{
-				"ID":         8121799417491786,
-				"StableID":   "nZpEj7uNR621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-				"DiscoKey":   "discokey:36656481d4be21440218ccbf7eed7f98585b5d17a8aa1cba9b752596e5fade2e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43753", "10.65.0.27:43753", "172.17.0.1:43753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:26:26.516703258Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         525509837969566,
-				"StableID":   "n9YjrdF17511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-				"DiscoKey":   "discokey:827009aba118261dd02f74a008a7a79d2aa1d8e67c4fe61c049a4b4588af9e1d",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36143", "10.65.0.27:36143", "172.17.0.1:36143"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:26:27.028376133Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3526338962466849,
-				"StableID":   "nnsVjow5YU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-				"DiscoKey":   "discokey:47ff3c0d8b914737d60926981ce402af715315821c7c5df6e9c9a7261315442a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44074", "10.65.0.27:44074", "172.17.0.1:44074"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:26:28.123988443Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4593150420544232,
-				"StableID":   "nyDDAqGFsc11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-				"DiscoKey":   "discokey:6b4d2826d19a4d7a65dcf8795bf52537ca08dd6ea141b40c89d588cf5934ed50",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42298", "10.65.0.27:42298", "172.17.0.1:42298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:26:28.671287311Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8818624222979249,
-				"StableID":   "nAbEdfJyrB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:23f64b893f4f9d205365258124270ca3bf4e53eacfdd1051f3c57e53ae62fa1a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48593", "10.65.0.27:48593", "172.17.0.1:48593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:26:29.202758274Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8737637665311574,
-				"StableID":   "nfHFrevHEB21CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:2926ca42012512219ced238e69c848ca5b50221849845ba9434ad7d404e03610",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49564", "10.65.0.27:49564", "172.17.0.1:49564"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:26:29.781499316Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1393016861849944,
-				"StableID":   "n7LLv4CusB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-				"KeyExpiry":  "2026-11-03T08:26:30Z",
-				"DiscoKey":   "discokey:7424561b424fb1ab6e812492d61557c365036c71befe0659c3caec7ef8c6d71b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47032", "10.65.0.27:47032", "172.17.0.1:47032"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:26:30.280171978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2139774084669154": {
-				"ID":          2139774084669154,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3526338962466849,
-				"StableID":   "nnsVjow5YU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       3526338962466849,
-				"Key":        "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-				"DiscoKey":   "discokey:47ff3c0d8b914737d60926981ce402af715315821c7c5df6e9c9a7261315442a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44074", "10.65.0.27:44074", "172.17.0.1:44074"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:26:28.123988443Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-			"MachineKey": "mkey:19ee7882a9e66e3683c0a16c978235fc305468d7b7d7f0f04efcfed5a08d494f",
-			"Peers": [{
-				"ID":         8121799417491786,
-				"StableID":   "nZpEj7uNR621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-				"DiscoKey":   "discokey:36656481d4be21440218ccbf7eed7f98585b5d17a8aa1cba9b752596e5fade2e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43753", "10.65.0.27:43753", "172.17.0.1:43753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:26:26.516703258Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         525509837969566,
-				"StableID":   "n9YjrdF17511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-				"DiscoKey":   "discokey:827009aba118261dd02f74a008a7a79d2aa1d8e67c4fe61c049a4b4588af9e1d",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36143", "10.65.0.27:36143", "172.17.0.1:36143"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:26:27.028376133Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2139774084669154,
-				"StableID":   "noXuYjE7iH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-				"DiscoKey":   "discokey:c5f4b0efd86f2b74e994fff3036aff533cf8702c1de3dff8104b3f792a63c642",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33552", "10.65.0.27:33552", "172.17.0.1:33552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:26:27.572415893Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4593150420544232,
-				"StableID":   "nyDDAqGFsc11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-				"DiscoKey":   "discokey:6b4d2826d19a4d7a65dcf8795bf52537ca08dd6ea141b40c89d588cf5934ed50",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42298", "10.65.0.27:42298", "172.17.0.1:42298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:26:28.671287311Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8818624222979249,
-				"StableID":   "nAbEdfJyrB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:23f64b893f4f9d205365258124270ca3bf4e53eacfdd1051f3c57e53ae62fa1a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48593", "10.65.0.27:48593", "172.17.0.1:48593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:26:29.202758274Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8737637665311574,
-				"StableID":   "nfHFrevHEB21CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:2926ca42012512219ced238e69c848ca5b50221849845ba9434ad7d404e03610",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49564", "10.65.0.27:49564", "172.17.0.1:49564"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:26:29.781499316Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1393016861849944,
-				"StableID":   "n7LLv4CusB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-				"KeyExpiry":  "2026-11-03T08:26:30Z",
-				"DiscoKey":   "discokey:7424561b424fb1ab6e812492d61557c365036c71befe0659c3caec7ef8c6d71b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47032", "10.65.0.27:47032", "172.17.0.1:47032"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:26:30.280171978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3526338962466849": {
-				"ID":          3526338962466849,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4593150420544232,
-				"StableID":   "nyDDAqGFsc11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       4593150420544232,
-				"Key":        "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-				"DiscoKey":   "discokey:6b4d2826d19a4d7a65dcf8795bf52537ca08dd6ea141b40c89d588cf5934ed50",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42298", "10.65.0.27:42298", "172.17.0.1:42298"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:26:28.671287311Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-			"MachineKey": "mkey:7414d9f8e5636001f7e4a1dd1d9c9277cd2c2b8be9de75139d0e075d2903b14c",
-			"Peers": [{
-				"ID":         8121799417491786,
-				"StableID":   "nZpEj7uNR621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-				"DiscoKey":   "discokey:36656481d4be21440218ccbf7eed7f98585b5d17a8aa1cba9b752596e5fade2e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43753", "10.65.0.27:43753", "172.17.0.1:43753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:26:26.516703258Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         525509837969566,
-				"StableID":   "n9YjrdF17511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-				"DiscoKey":   "discokey:827009aba118261dd02f74a008a7a79d2aa1d8e67c4fe61c049a4b4588af9e1d",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36143", "10.65.0.27:36143", "172.17.0.1:36143"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:26:27.028376133Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2139774084669154,
-				"StableID":   "noXuYjE7iH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-				"DiscoKey":   "discokey:c5f4b0efd86f2b74e994fff3036aff533cf8702c1de3dff8104b3f792a63c642",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33552", "10.65.0.27:33552", "172.17.0.1:33552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:26:27.572415893Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3526338962466849,
-				"StableID":   "nnsVjow5YU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-				"DiscoKey":   "discokey:47ff3c0d8b914737d60926981ce402af715315821c7c5df6e9c9a7261315442a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44074", "10.65.0.27:44074", "172.17.0.1:44074"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:26:28.123988443Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8818624222979249,
-				"StableID":   "nAbEdfJyrB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:23f64b893f4f9d205365258124270ca3bf4e53eacfdd1051f3c57e53ae62fa1a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48593", "10.65.0.27:48593", "172.17.0.1:48593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:26:29.202758274Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8737637665311574,
-				"StableID":   "nfHFrevHEB21CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:2926ca42012512219ced238e69c848ca5b50221849845ba9434ad7d404e03610",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49564", "10.65.0.27:49564", "172.17.0.1:49564"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:26:29.781499316Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1393016861849944,
-				"StableID":   "n7LLv4CusB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-				"KeyExpiry":  "2026-11-03T08:26:30Z",
-				"DiscoKey":   "discokey:7424561b424fb1ab6e812492d61557c365036c71befe0659c3caec7ef8c6d71b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47032", "10.65.0.27:47032", "172.17.0.1:47032"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:26:30.280171978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4593150420544232": {
-				"ID":          4593150420544232,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1393016861849944,
-				"StableID":   "n7LLv4CusB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-				"KeyExpiry":  "2026-11-03T08:26:30Z",
-				"DiscoKey":   "discokey:7424561b424fb1ab6e812492d61557c365036c71befe0659c3caec7ef8c6d71b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47032", "10.65.0.27:47032", "172.17.0.1:47032"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:26:30.280171978Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-			"MachineKey": "mkey:5a57e44337b5b7a5a743fabbda464ac3e35e1cf73e8ff3d9b19a93710047ad10",
-			"Peers": [{
-				"ID":         8121799417491786,
-				"StableID":   "nZpEj7uNR621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-				"DiscoKey":   "discokey:36656481d4be21440218ccbf7eed7f98585b5d17a8aa1cba9b752596e5fade2e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43753", "10.65.0.27:43753", "172.17.0.1:43753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:26:26.516703258Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         525509837969566,
-				"StableID":   "n9YjrdF17511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-				"DiscoKey":   "discokey:827009aba118261dd02f74a008a7a79d2aa1d8e67c4fe61c049a4b4588af9e1d",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36143", "10.65.0.27:36143", "172.17.0.1:36143"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:26:27.028376133Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2139774084669154,
-				"StableID":   "noXuYjE7iH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-				"DiscoKey":   "discokey:c5f4b0efd86f2b74e994fff3036aff533cf8702c1de3dff8104b3f792a63c642",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33552", "10.65.0.27:33552", "172.17.0.1:33552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:26:27.572415893Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3526338962466849,
-				"StableID":   "nnsVjow5YU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-				"DiscoKey":   "discokey:47ff3c0d8b914737d60926981ce402af715315821c7c5df6e9c9a7261315442a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44074", "10.65.0.27:44074", "172.17.0.1:44074"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:26:28.123988443Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4593150420544232,
-				"StableID":   "nyDDAqGFsc11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-				"DiscoKey":   "discokey:6b4d2826d19a4d7a65dcf8795bf52537ca08dd6ea141b40c89d588cf5934ed50",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42298", "10.65.0.27:42298", "172.17.0.1:42298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:26:28.671287311Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8818624222979249,
-				"StableID":   "nAbEdfJyrB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:23f64b893f4f9d205365258124270ca3bf4e53eacfdd1051f3c57e53ae62fa1a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48593", "10.65.0.27:48593", "172.17.0.1:48593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:26:29.202758274Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8737637665311574,
-				"StableID":   "nfHFrevHEB21CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:2926ca42012512219ced238e69c848ca5b50221849845ba9434ad7d404e03610",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49564", "10.65.0.27:49564", "172.17.0.1:49564"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:26:29.781499316Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8737637665311574,
-				"StableID":   "nfHFrevHEB21CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:2926ca42012512219ced238e69c848ca5b50221849845ba9434ad7d404e03610",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:49564", "10.65.0.27:49564", "172.17.0.1:49564"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:26:29.781499316Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:614ed75a4fa9d3e298b476c7eba2e6d4a6a14df8e5094f549f7b9031b7282a7b",
-			"MachineKey": "mkey:2596b26a03564753fa2ca9c5ab59f6b95e74e5af1e8be36a079a94a9f0467342",
-			"Peers": [{
-				"ID":         8121799417491786,
-				"StableID":   "nZpEj7uNR621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8c2f86d97f698524cab9467b85c8ec0d1cd41cbe4b211b8b7244ea6f7dda9962",
-				"DiscoKey":   "discokey:36656481d4be21440218ccbf7eed7f98585b5d17a8aa1cba9b752596e5fade2e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43753", "10.65.0.27:43753", "172.17.0.1:43753"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:26:26.516703258Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         525509837969566,
-				"StableID":   "n9YjrdF17511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8139b63fde89ed2622e2522650bee9c7f0caeb543b1818a2f3cbd53fc69171f",
-				"DiscoKey":   "discokey:827009aba118261dd02f74a008a7a79d2aa1d8e67c4fe61c049a4b4588af9e1d",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:36143", "10.65.0.27:36143", "172.17.0.1:36143"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:26:27.028376133Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2139774084669154,
-				"StableID":   "noXuYjE7iH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b326c34017933f83df4be3d77f583160867366e18494ab9f04e326ad4512e170",
-				"DiscoKey":   "discokey:c5f4b0efd86f2b74e994fff3036aff533cf8702c1de3dff8104b3f792a63c642",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33552", "10.65.0.27:33552", "172.17.0.1:33552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:26:27.572415893Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3526338962466849,
-				"StableID":   "nnsVjow5YU11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:829dbee3231bf60b31e66dd481181e868920fdfaf5b184eb30faf8c7e32ee951",
-				"DiscoKey":   "discokey:47ff3c0d8b914737d60926981ce402af715315821c7c5df6e9c9a7261315442a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44074", "10.65.0.27:44074", "172.17.0.1:44074"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:26:28.123988443Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4593150420544232,
-				"StableID":   "nyDDAqGFsc11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:052da37afa3775cbb3e1ad4841cda5527e6e67ff4880e68524db7f856c11b35c",
-				"DiscoKey":   "discokey:6b4d2826d19a4d7a65dcf8795bf52537ca08dd6ea141b40c89d588cf5934ed50",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42298", "10.65.0.27:42298", "172.17.0.1:42298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:26:28.671287311Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8818624222979249,
-				"StableID":   "nAbEdfJyrB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:0a362567dc59b9eb6eb9bd1a82bc80bc2b15ed54b99c4d1a8149bec02e337e20",
-				"KeyExpiry":  "2026-11-03T08:26:29Z",
-				"DiscoKey":   "discokey:23f64b893f4f9d205365258124270ca3bf4e53eacfdd1051f3c57e53ae62fa1a",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48593", "10.65.0.27:48593", "172.17.0.1:48593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:26:29.202758274Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1393016861849944,
-				"StableID":   "n7LLv4CusB11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:34c188a269f5b10153a4e29524f94c38a84a4c70022ab6d7f52cc7d5f5015d31",
-				"KeyExpiry":  "2026-11-03T08:26:30Z",
-				"DiscoKey":   "discokey:7424561b424fb1ab6e812492d61557c365036c71befe0659c3caec7ef8c6d71b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47032", "10.65.0.27:47032", "172.17.0.1:47032"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:26:30.280171978Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b2-overlap.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b2-overlap.hujson
deleted file mode 100644
index 4364504b1..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b2-overlap.hujson
+++ /dev/null
@@ -1,8831 +0,0 @@
-// nodeattrs-merge-b2-overlap
-//
-// wildcard plus tag-specific add
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:27:01Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-merge-b2-overlap",
-	"description":    "wildcard plus tag-specific add",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:27:01.236118092Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                             \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"wildcard plus tag-specific add\",\n    \"id\": \"nodeattrs-merge-b2-overlap\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"drive:access\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            },\n            {\n                \"attr\": [\n                    \"drive:share\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-merge-b2-overlap.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["drive:access"], "target": ["*"]},
-			{"attr": ["drive:share"], "target": ["tag:server"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         418861924465356,
-				"StableID":   "nDFWwxnhG411CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       418861924465356,
-				"Key":        "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-				"DiscoKey":   "discokey:33292166f9f1d5c58e0eed04d0a6d61da81f409c061aad67977bbe0905413427",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47703", "10.65.0.27:47703", "172.17.0.1:47703"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:06.818103324Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-			"MachineKey": "mkey:65c36b4fde9696689a227781dc68dc46bcd3a56b77598602ae5eb88a2f77093b",
-			"Peers": [{
-				"ID":         6575706250626324,
-				"StableID":   "nskLvre9Mt11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-				"DiscoKey":   "discokey:43a417e0b22835cbce4f58eb6e31a64d914e371457f7a1be8a297be5e9270676",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:49772", "10.65.0.27:49772", "172.17.0.1:49772"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:07.351173869Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2121538291087858,
-				"StableID":   "nXKBvNDrZH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-				"DiscoKey":   "discokey:115418873a09600f09cdd8e8ae777d46a2c395b24df5c2ad6d5d1eda57fb5238",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51215", "10.65.0.27:51215", "172.17.0.1:51215"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:07.891539144Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6502235936065541,
-				"StableID":   "n4AwoJisms11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-				"DiscoKey":   "discokey:81581ae6f33fbd10a0914550ae8bb72e67a62cd33e3943247bb0afca8c1e4021",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35993", "10.65.0.27:35993", "172.17.0.1:35993"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:08.433019314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7065753211061375,
-				"StableID":   "n8P8jcM6Bx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-				"DiscoKey":   "discokey:634049bd6dd1f61166b0566148c6190a43a0ebeab1cf3745e60d11b7166f4975",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:08.963980414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6667321224961267,
-				"StableID":   "n8mtUvDe4u11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-				"KeyExpiry":  "2026-11-03T08:27:09Z",
-				"DiscoKey":   "discokey:5c5ef9b52d25e189ae2d27b1580f7b72eceeb2402b3d531b6e184edc01083e02",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42988", "10.65.0.27:42988", "172.17.0.1:42988"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:09.493826185Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4806016331374577,
-				"StableID":   "nz7tmAueXe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:6a33b52f715b2a76ef80e40c2f0ac9875aea820a9d384d562089ddc772946a60",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:35671", "10.65.0.27:35671", "172.17.0.1:35671"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:10.021177212Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5399942159398194,
-				"StableID":   "noRnPnKeAj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:0216d1591aff072c8f41b47b4c28f906722fc226603663de5f8478d5a671295d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58194", "10.65.0.27:58194", "172.17.0.1:58194"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:10.546689498Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "418861924465356": {
-				"ID":          418861924465356,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6575706250626324,
-				"StableID":   "nskLvre9Mt11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       6575706250626324,
-				"Key":        "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-				"DiscoKey":   "discokey:43a417e0b22835cbce4f58eb6e31a64d914e371457f7a1be8a297be5e9270676",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:49772", "10.65.0.27:49772", "172.17.0.1:49772"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:27:07.351173869Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-			"MachineKey": "mkey:604d30b272b9ed45982f3be9cbc7723a1ec3f5bf7a59f654dd7e8f8a9d12145e",
-			"Peers": [{
-				"ID":         418861924465356,
-				"StableID":   "nDFWwxnhG411CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-				"DiscoKey":   "discokey:33292166f9f1d5c58e0eed04d0a6d61da81f409c061aad67977bbe0905413427",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47703", "10.65.0.27:47703", "172.17.0.1:47703"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:06.818103324Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2121538291087858,
-				"StableID":   "nXKBvNDrZH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-				"DiscoKey":   "discokey:115418873a09600f09cdd8e8ae777d46a2c395b24df5c2ad6d5d1eda57fb5238",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51215", "10.65.0.27:51215", "172.17.0.1:51215"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:07.891539144Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6502235936065541,
-				"StableID":   "n4AwoJisms11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-				"DiscoKey":   "discokey:81581ae6f33fbd10a0914550ae8bb72e67a62cd33e3943247bb0afca8c1e4021",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35993", "10.65.0.27:35993", "172.17.0.1:35993"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:08.433019314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7065753211061375,
-				"StableID":   "n8P8jcM6Bx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-				"DiscoKey":   "discokey:634049bd6dd1f61166b0566148c6190a43a0ebeab1cf3745e60d11b7166f4975",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:08.963980414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6667321224961267,
-				"StableID":   "n8mtUvDe4u11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-				"KeyExpiry":  "2026-11-03T08:27:09Z",
-				"DiscoKey":   "discokey:5c5ef9b52d25e189ae2d27b1580f7b72eceeb2402b3d531b6e184edc01083e02",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42988", "10.65.0.27:42988", "172.17.0.1:42988"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:09.493826185Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4806016331374577,
-				"StableID":   "nz7tmAueXe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:6a33b52f715b2a76ef80e40c2f0ac9875aea820a9d384d562089ddc772946a60",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:35671", "10.65.0.27:35671", "172.17.0.1:35671"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:10.021177212Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5399942159398194,
-				"StableID":   "noRnPnKeAj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:0216d1591aff072c8f41b47b4c28f906722fc226603663de5f8478d5a671295d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58194", "10.65.0.27:58194", "172.17.0.1:58194"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:10.546689498Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6575706250626324": {
-				"ID":          6575706250626324,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6667321224961267,
-				"StableID":   "n8mtUvDe4u11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-				"KeyExpiry":  "2026-11-03T08:27:09Z",
-				"DiscoKey":   "discokey:5c5ef9b52d25e189ae2d27b1580f7b72eceeb2402b3d531b6e184edc01083e02",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42988", "10.65.0.27:42988", "172.17.0.1:42988"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:09.493826185Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-			"MachineKey": "mkey:dd7be7971511badd62cea74a8c7fbfc371ac618389f6519da424fd918279d363",
-			"Peers": [{
-				"ID":         418861924465356,
-				"StableID":   "nDFWwxnhG411CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-				"DiscoKey":   "discokey:33292166f9f1d5c58e0eed04d0a6d61da81f409c061aad67977bbe0905413427",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47703", "10.65.0.27:47703", "172.17.0.1:47703"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:06.818103324Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6575706250626324,
-				"StableID":   "nskLvre9Mt11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-				"DiscoKey":   "discokey:43a417e0b22835cbce4f58eb6e31a64d914e371457f7a1be8a297be5e9270676",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:49772", "10.65.0.27:49772", "172.17.0.1:49772"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:07.351173869Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2121538291087858,
-				"StableID":   "nXKBvNDrZH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-				"DiscoKey":   "discokey:115418873a09600f09cdd8e8ae777d46a2c395b24df5c2ad6d5d1eda57fb5238",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51215", "10.65.0.27:51215", "172.17.0.1:51215"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:07.891539144Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6502235936065541,
-				"StableID":   "n4AwoJisms11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-				"DiscoKey":   "discokey:81581ae6f33fbd10a0914550ae8bb72e67a62cd33e3943247bb0afca8c1e4021",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35993", "10.65.0.27:35993", "172.17.0.1:35993"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:08.433019314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7065753211061375,
-				"StableID":   "n8P8jcM6Bx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-				"DiscoKey":   "discokey:634049bd6dd1f61166b0566148c6190a43a0ebeab1cf3745e60d11b7166f4975",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:08.963980414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4806016331374577,
-				"StableID":   "nz7tmAueXe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:6a33b52f715b2a76ef80e40c2f0ac9875aea820a9d384d562089ddc772946a60",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:35671", "10.65.0.27:35671", "172.17.0.1:35671"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:10.021177212Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5399942159398194,
-				"StableID":   "noRnPnKeAj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:0216d1591aff072c8f41b47b4c28f906722fc226603663de5f8478d5a671295d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58194", "10.65.0.27:58194", "172.17.0.1:58194"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:10.546689498Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2121538291087858,
-				"StableID":   "nXKBvNDrZH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       2121538291087858,
-				"Key":        "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-				"DiscoKey":   "discokey:115418873a09600f09cdd8e8ae777d46a2c395b24df5c2ad6d5d1eda57fb5238",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51215", "10.65.0.27:51215", "172.17.0.1:51215"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:07.891539144Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-			"MachineKey": "mkey:3a9c927b1efacfd81a77297cbd83f09734880e43c98a159a60c45be0ab824d30",
-			"Peers": [{
-				"ID":         418861924465356,
-				"StableID":   "nDFWwxnhG411CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-				"DiscoKey":   "discokey:33292166f9f1d5c58e0eed04d0a6d61da81f409c061aad67977bbe0905413427",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47703", "10.65.0.27:47703", "172.17.0.1:47703"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:06.818103324Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6575706250626324,
-				"StableID":   "nskLvre9Mt11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-				"DiscoKey":   "discokey:43a417e0b22835cbce4f58eb6e31a64d914e371457f7a1be8a297be5e9270676",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:49772", "10.65.0.27:49772", "172.17.0.1:49772"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:07.351173869Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6502235936065541,
-				"StableID":   "n4AwoJisms11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-				"DiscoKey":   "discokey:81581ae6f33fbd10a0914550ae8bb72e67a62cd33e3943247bb0afca8c1e4021",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35993", "10.65.0.27:35993", "172.17.0.1:35993"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:08.433019314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7065753211061375,
-				"StableID":   "n8P8jcM6Bx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-				"DiscoKey":   "discokey:634049bd6dd1f61166b0566148c6190a43a0ebeab1cf3745e60d11b7166f4975",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:08.963980414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6667321224961267,
-				"StableID":   "n8mtUvDe4u11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-				"KeyExpiry":  "2026-11-03T08:27:09Z",
-				"DiscoKey":   "discokey:5c5ef9b52d25e189ae2d27b1580f7b72eceeb2402b3d531b6e184edc01083e02",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42988", "10.65.0.27:42988", "172.17.0.1:42988"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:09.493826185Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4806016331374577,
-				"StableID":   "nz7tmAueXe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:6a33b52f715b2a76ef80e40c2f0ac9875aea820a9d384d562089ddc772946a60",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:35671", "10.65.0.27:35671", "172.17.0.1:35671"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:10.021177212Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5399942159398194,
-				"StableID":   "noRnPnKeAj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:0216d1591aff072c8f41b47b4c28f906722fc226603663de5f8478d5a671295d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58194", "10.65.0.27:58194", "172.17.0.1:58194"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:10.546689498Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2121538291087858": {
-				"ID":          2121538291087858,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6502235936065541,
-				"StableID":   "n4AwoJisms11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       6502235936065541,
-				"Key":        "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-				"DiscoKey":   "discokey:81581ae6f33fbd10a0914550ae8bb72e67a62cd33e3943247bb0afca8c1e4021",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35993", "10.65.0.27:35993", "172.17.0.1:35993"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:27:08.433019314Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-			"MachineKey": "mkey:249c188972aae72ff08c45a3fe27f61def15071e8ffa3ecddf0478dbe0adc41f",
-			"Peers": [{
-				"ID":         418861924465356,
-				"StableID":   "nDFWwxnhG411CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-				"DiscoKey":   "discokey:33292166f9f1d5c58e0eed04d0a6d61da81f409c061aad67977bbe0905413427",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47703", "10.65.0.27:47703", "172.17.0.1:47703"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:06.818103324Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6575706250626324,
-				"StableID":   "nskLvre9Mt11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-				"DiscoKey":   "discokey:43a417e0b22835cbce4f58eb6e31a64d914e371457f7a1be8a297be5e9270676",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:49772", "10.65.0.27:49772", "172.17.0.1:49772"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:07.351173869Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2121538291087858,
-				"StableID":   "nXKBvNDrZH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-				"DiscoKey":   "discokey:115418873a09600f09cdd8e8ae777d46a2c395b24df5c2ad6d5d1eda57fb5238",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51215", "10.65.0.27:51215", "172.17.0.1:51215"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:07.891539144Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7065753211061375,
-				"StableID":   "n8P8jcM6Bx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-				"DiscoKey":   "discokey:634049bd6dd1f61166b0566148c6190a43a0ebeab1cf3745e60d11b7166f4975",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:08.963980414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6667321224961267,
-				"StableID":   "n8mtUvDe4u11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-				"KeyExpiry":  "2026-11-03T08:27:09Z",
-				"DiscoKey":   "discokey:5c5ef9b52d25e189ae2d27b1580f7b72eceeb2402b3d531b6e184edc01083e02",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42988", "10.65.0.27:42988", "172.17.0.1:42988"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:09.493826185Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4806016331374577,
-				"StableID":   "nz7tmAueXe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:6a33b52f715b2a76ef80e40c2f0ac9875aea820a9d384d562089ddc772946a60",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:35671", "10.65.0.27:35671", "172.17.0.1:35671"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:10.021177212Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5399942159398194,
-				"StableID":   "noRnPnKeAj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:0216d1591aff072c8f41b47b4c28f906722fc226603663de5f8478d5a671295d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58194", "10.65.0.27:58194", "172.17.0.1:58194"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:10.546689498Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6502235936065541": {
-				"ID":          6502235936065541,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7065753211061375,
-				"StableID":   "n8P8jcM6Bx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7065753211061375,
-				"Key":        "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-				"DiscoKey":   "discokey:634049bd6dd1f61166b0566148c6190a43a0ebeab1cf3745e60d11b7166f4975",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:08.963980414Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"drive:share":                            null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"drive:share",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-			"MachineKey": "mkey:7eb33c7048a839c25b77a976898849bc28a185982a8dd0862b97396f0e59c75d",
-			"Peers": [{
-				"ID":         418861924465356,
-				"StableID":   "nDFWwxnhG411CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-				"DiscoKey":   "discokey:33292166f9f1d5c58e0eed04d0a6d61da81f409c061aad67977bbe0905413427",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47703", "10.65.0.27:47703", "172.17.0.1:47703"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:06.818103324Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6575706250626324,
-				"StableID":   "nskLvre9Mt11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-				"DiscoKey":   "discokey:43a417e0b22835cbce4f58eb6e31a64d914e371457f7a1be8a297be5e9270676",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:49772", "10.65.0.27:49772", "172.17.0.1:49772"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:07.351173869Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2121538291087858,
-				"StableID":   "nXKBvNDrZH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-				"DiscoKey":   "discokey:115418873a09600f09cdd8e8ae777d46a2c395b24df5c2ad6d5d1eda57fb5238",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51215", "10.65.0.27:51215", "172.17.0.1:51215"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:07.891539144Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6502235936065541,
-				"StableID":   "n4AwoJisms11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-				"DiscoKey":   "discokey:81581ae6f33fbd10a0914550ae8bb72e67a62cd33e3943247bb0afca8c1e4021",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35993", "10.65.0.27:35993", "172.17.0.1:35993"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:08.433019314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6667321224961267,
-				"StableID":   "n8mtUvDe4u11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-				"KeyExpiry":  "2026-11-03T08:27:09Z",
-				"DiscoKey":   "discokey:5c5ef9b52d25e189ae2d27b1580f7b72eceeb2402b3d531b6e184edc01083e02",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42988", "10.65.0.27:42988", "172.17.0.1:42988"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:09.493826185Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4806016331374577,
-				"StableID":   "nz7tmAueXe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:6a33b52f715b2a76ef80e40c2f0ac9875aea820a9d384d562089ddc772946a60",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:35671", "10.65.0.27:35671", "172.17.0.1:35671"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:10.021177212Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5399942159398194,
-				"StableID":   "noRnPnKeAj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:0216d1591aff072c8f41b47b4c28f906722fc226603663de5f8478d5a671295d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58194", "10.65.0.27:58194", "172.17.0.1:58194"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:10.546689498Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7065753211061375": {
-				"ID":          7065753211061375,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5399942159398194,
-				"StableID":   "noRnPnKeAj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:0216d1591aff072c8f41b47b4c28f906722fc226603663de5f8478d5a671295d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58194", "10.65.0.27:58194", "172.17.0.1:58194"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:10.546689498Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-			"MachineKey": "mkey:8220832cdea6b90014df0700cd5a865a1e1a8fc7ad8bfd7f83d57617135c592d",
-			"Peers": [{
-				"ID":         418861924465356,
-				"StableID":   "nDFWwxnhG411CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-				"DiscoKey":   "discokey:33292166f9f1d5c58e0eed04d0a6d61da81f409c061aad67977bbe0905413427",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47703", "10.65.0.27:47703", "172.17.0.1:47703"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:06.818103324Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6575706250626324,
-				"StableID":   "nskLvre9Mt11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-				"DiscoKey":   "discokey:43a417e0b22835cbce4f58eb6e31a64d914e371457f7a1be8a297be5e9270676",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:49772", "10.65.0.27:49772", "172.17.0.1:49772"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:07.351173869Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2121538291087858,
-				"StableID":   "nXKBvNDrZH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-				"DiscoKey":   "discokey:115418873a09600f09cdd8e8ae777d46a2c395b24df5c2ad6d5d1eda57fb5238",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51215", "10.65.0.27:51215", "172.17.0.1:51215"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:07.891539144Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6502235936065541,
-				"StableID":   "n4AwoJisms11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-				"DiscoKey":   "discokey:81581ae6f33fbd10a0914550ae8bb72e67a62cd33e3943247bb0afca8c1e4021",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35993", "10.65.0.27:35993", "172.17.0.1:35993"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:08.433019314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7065753211061375,
-				"StableID":   "n8P8jcM6Bx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-				"DiscoKey":   "discokey:634049bd6dd1f61166b0566148c6190a43a0ebeab1cf3745e60d11b7166f4975",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:08.963980414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6667321224961267,
-				"StableID":   "n8mtUvDe4u11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-				"KeyExpiry":  "2026-11-03T08:27:09Z",
-				"DiscoKey":   "discokey:5c5ef9b52d25e189ae2d27b1580f7b72eceeb2402b3d531b6e184edc01083e02",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42988", "10.65.0.27:42988", "172.17.0.1:42988"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:09.493826185Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4806016331374577,
-				"StableID":   "nz7tmAueXe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:6a33b52f715b2a76ef80e40c2f0ac9875aea820a9d384d562089ddc772946a60",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:35671", "10.65.0.27:35671", "172.17.0.1:35671"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:10.021177212Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4806016331374577,
-				"StableID":   "nz7tmAueXe11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:6a33b52f715b2a76ef80e40c2f0ac9875aea820a9d384d562089ddc772946a60",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:35671", "10.65.0.27:35671", "172.17.0.1:35671"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:10.021177212Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:39b99700b546ea379104e13f59b2e2fee1265ff58c6171bd1a18f2b62c901d1a",
-			"MachineKey": "mkey:08308a0ef726a775c6a3503eb6e2f20e4f91fd8c78359a84b30780db60a8fa51",
-			"Peers": [{
-				"ID":         418861924465356,
-				"StableID":   "nDFWwxnhG411CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f3df74d0ae82776bfcec4c0349f78475dc68cb7321139e807d11addd4763ae33",
-				"DiscoKey":   "discokey:33292166f9f1d5c58e0eed04d0a6d61da81f409c061aad67977bbe0905413427",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47703", "10.65.0.27:47703", "172.17.0.1:47703"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:06.818103324Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6575706250626324,
-				"StableID":   "nskLvre9Mt11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b1d89b8e115f26ca7d4859f93833d4d5974512437501a4161e32930808e29a7a",
-				"DiscoKey":   "discokey:43a417e0b22835cbce4f58eb6e31a64d914e371457f7a1be8a297be5e9270676",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:49772", "10.65.0.27:49772", "172.17.0.1:49772"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:07.351173869Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2121538291087858,
-				"StableID":   "nXKBvNDrZH11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bac2bfd82c9e8b69032f872ba13fa1ff02353041dda6c62e20387270347eb579",
-				"DiscoKey":   "discokey:115418873a09600f09cdd8e8ae777d46a2c395b24df5c2ad6d5d1eda57fb5238",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51215", "10.65.0.27:51215", "172.17.0.1:51215"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:07.891539144Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6502235936065541,
-				"StableID":   "n4AwoJisms11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:74feacc41376d23a2c803ae64e90fc0dab34b969572f5403a54382d03f82f35d",
-				"DiscoKey":   "discokey:81581ae6f33fbd10a0914550ae8bb72e67a62cd33e3943247bb0afca8c1e4021",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35993", "10.65.0.27:35993", "172.17.0.1:35993"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:08.433019314Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7065753211061375,
-				"StableID":   "n8P8jcM6Bx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9212bef5e8282ab29e6e4618b43bff37dce5fcca054425cc7aab13af1f802d08",
-				"DiscoKey":   "discokey:634049bd6dd1f61166b0566148c6190a43a0ebeab1cf3745e60d11b7166f4975",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:08.963980414Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6667321224961267,
-				"StableID":   "n8mtUvDe4u11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:caba727c6081e0c7bd4e24413fef8fc312302af8200cef34743968157c61e405",
-				"KeyExpiry":  "2026-11-03T08:27:09Z",
-				"DiscoKey":   "discokey:5c5ef9b52d25e189ae2d27b1580f7b72eceeb2402b3d531b6e184edc01083e02",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42988", "10.65.0.27:42988", "172.17.0.1:42988"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:09.493826185Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5399942159398194,
-				"StableID":   "noRnPnKeAj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5b696abce23925cee4d14d3c5c15f3c82a2c64728f9aded74485e47133ac4b41",
-				"KeyExpiry":  "2026-11-03T08:27:10Z",
-				"DiscoKey":   "discokey:0216d1591aff072c8f41b47b4c28f906722fc226603663de5f8478d5a671295d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:58194", "10.65.0.27:58194", "172.17.0.1:58194"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:10.546689498Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b3-same-target-twice.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b3-same-target-twice.hujson
deleted file mode 100644
index ebba72ad4..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b3-same-target-twice.hujson
+++ /dev/null
@@ -1,8825 +0,0 @@
-// nodeattrs-merge-b3-same-target-twice
-//
-// same target twice with disjoint attrs
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:27:41Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-merge-b3-same-target-twice",
-	"description":    "same target twice with disjoint attrs",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:27:41.537563158Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                       \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"same target twice with disjoint attrs\",\n    \"id\": \"nodeattrs-merge-b3-same-target-twice\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            },\n            {\n                \"attr\": [\n                    \"disable-captive-portal-detection\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-merge-b3-same-target-twice.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["randomize-client-port"], "target": ["tag:server"]},
-			{"attr": ["disable-captive-portal-detection"], "target": ["tag:server"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4310192874841608,
-				"StableID":   "noggnZT6fa11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       4310192874841608,
-				"Key":        "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-				"DiscoKey":   "discokey:1b9ec3f82039280f094d7b276a4a1b6a3d8bfe32efdd909df6575b1649b2b77a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47344", "10.65.0.27:47344", "172.17.0.1:47344"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:47.100990747Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-			"MachineKey": "mkey:dee8d2711afe16836ba8a5bdba0455e37c1f24da69db3f88e374a5a34a3e7c78",
-			"Peers": [{
-				"ID":         1707186371135229,
-				"StableID":   "ncWfdgtBLE11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-				"DiscoKey":   "discokey:781647344b1d16b23d361b410bbb4a75ed378cf5b3d4cc2f3d199d863f805d78",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55203", "10.65.0.27:55203", "172.17.0.1:55203"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:47.649349669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7403186712715877,
-				"StableID":   "nGcHnMAvoz11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-				"DiscoKey":   "discokey:9afac13992ba77c85d6a7b7576c4fe43e953d606c962b9cb5889beec78e65e0a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51020", "10.65.0.27:51020", "172.17.0.1:51020"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:48.171668466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         401025965428905,
-				"StableID":   "nzBLKnGd8411CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-				"DiscoKey":   "discokey:d47f64aa3cd694823fd177318403244fe5ee8698ded83601428b3d03e572e908",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45539", "10.65.0.27:45539", "172.17.0.1:45539"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:48.721000174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7537120670884255,
-				"StableID":   "n83g21Par121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-				"DiscoKey":   "discokey:e2f7a92c9d7dd1dbbb6f22a47e70dcb42b5e335a4332ef2127ba18abbcbcca73",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:56325", "10.65.0.27:56325", "172.17.0.1:56325"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:49.258081557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1609725258487015,
-				"StableID":   "nWN9rfk3aD11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-				"KeyExpiry":  "2026-11-03T08:27:49Z",
-				"DiscoKey":   "discokey:d306d4ab483f58543a247a71c1a9e2e0cdaa4c28097caa4ca3638e8d9ccccc72",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46543", "10.65.0.27:46543", "172.17.0.1:46543"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:49.80398982Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         722940525543250,
-				"StableID":   "nDLdeTRRe611CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:5be4dfb4ca1a482f11907b626b266a03c1195dad174a0d23223306011e1c2b7c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:51065", "10.65.0.27:51065", "172.17.0.1:51065"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:50.32341084Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1975540759601683,
-				"StableID":   "nN6G197jRG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:d7b081c5a387c846def1540fc564df543715c0be39b5d1f76dc95d6a3988a657",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54369", "10.65.0.27:54369", "172.17.0.1:54369"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:50.854111481Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4310192874841608": {
-				"ID":          4310192874841608,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1707186371135229,
-				"StableID":   "ncWfdgtBLE11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1707186371135229,
-				"Key":        "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-				"DiscoKey":   "discokey:781647344b1d16b23d361b410bbb4a75ed378cf5b3d4cc2f3d199d863f805d78",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55203", "10.65.0.27:55203", "172.17.0.1:55203"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:27:47.649349669Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-			"MachineKey": "mkey:e0c164c9f998485d3998d51c0fbece68d1c17b4464d2b7cda427a2ea504c2112",
-			"Peers": [{
-				"ID":         4310192874841608,
-				"StableID":   "noggnZT6fa11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-				"DiscoKey":   "discokey:1b9ec3f82039280f094d7b276a4a1b6a3d8bfe32efdd909df6575b1649b2b77a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47344", "10.65.0.27:47344", "172.17.0.1:47344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:47.100990747Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7403186712715877,
-				"StableID":   "nGcHnMAvoz11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-				"DiscoKey":   "discokey:9afac13992ba77c85d6a7b7576c4fe43e953d606c962b9cb5889beec78e65e0a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51020", "10.65.0.27:51020", "172.17.0.1:51020"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:48.171668466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         401025965428905,
-				"StableID":   "nzBLKnGd8411CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-				"DiscoKey":   "discokey:d47f64aa3cd694823fd177318403244fe5ee8698ded83601428b3d03e572e908",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45539", "10.65.0.27:45539", "172.17.0.1:45539"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:48.721000174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7537120670884255,
-				"StableID":   "n83g21Par121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-				"DiscoKey":   "discokey:e2f7a92c9d7dd1dbbb6f22a47e70dcb42b5e335a4332ef2127ba18abbcbcca73",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:56325", "10.65.0.27:56325", "172.17.0.1:56325"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:49.258081557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1609725258487015,
-				"StableID":   "nWN9rfk3aD11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-				"KeyExpiry":  "2026-11-03T08:27:49Z",
-				"DiscoKey":   "discokey:d306d4ab483f58543a247a71c1a9e2e0cdaa4c28097caa4ca3638e8d9ccccc72",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46543", "10.65.0.27:46543", "172.17.0.1:46543"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:49.80398982Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         722940525543250,
-				"StableID":   "nDLdeTRRe611CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:5be4dfb4ca1a482f11907b626b266a03c1195dad174a0d23223306011e1c2b7c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:51065", "10.65.0.27:51065", "172.17.0.1:51065"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:50.32341084Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1975540759601683,
-				"StableID":   "nN6G197jRG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:d7b081c5a387c846def1540fc564df543715c0be39b5d1f76dc95d6a3988a657",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54369", "10.65.0.27:54369", "172.17.0.1:54369"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:50.854111481Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1707186371135229": {
-				"ID":          1707186371135229,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1609725258487015,
-				"StableID":   "nWN9rfk3aD11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-				"KeyExpiry":  "2026-11-03T08:27:49Z",
-				"DiscoKey":   "discokey:d306d4ab483f58543a247a71c1a9e2e0cdaa4c28097caa4ca3638e8d9ccccc72",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46543", "10.65.0.27:46543", "172.17.0.1:46543"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:49.80398982Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-			"MachineKey": "mkey:75763c8e01627ad83a5cb2b7ce1b2996169aa8bf537bb418942dfefa31608536",
-			"Peers": [{
-				"ID":         4310192874841608,
-				"StableID":   "noggnZT6fa11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-				"DiscoKey":   "discokey:1b9ec3f82039280f094d7b276a4a1b6a3d8bfe32efdd909df6575b1649b2b77a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47344", "10.65.0.27:47344", "172.17.0.1:47344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:47.100990747Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1707186371135229,
-				"StableID":   "ncWfdgtBLE11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-				"DiscoKey":   "discokey:781647344b1d16b23d361b410bbb4a75ed378cf5b3d4cc2f3d199d863f805d78",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55203", "10.65.0.27:55203", "172.17.0.1:55203"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:47.649349669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7403186712715877,
-				"StableID":   "nGcHnMAvoz11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-				"DiscoKey":   "discokey:9afac13992ba77c85d6a7b7576c4fe43e953d606c962b9cb5889beec78e65e0a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51020", "10.65.0.27:51020", "172.17.0.1:51020"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:48.171668466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         401025965428905,
-				"StableID":   "nzBLKnGd8411CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-				"DiscoKey":   "discokey:d47f64aa3cd694823fd177318403244fe5ee8698ded83601428b3d03e572e908",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45539", "10.65.0.27:45539", "172.17.0.1:45539"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:48.721000174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7537120670884255,
-				"StableID":   "n83g21Par121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-				"DiscoKey":   "discokey:e2f7a92c9d7dd1dbbb6f22a47e70dcb42b5e335a4332ef2127ba18abbcbcca73",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:56325", "10.65.0.27:56325", "172.17.0.1:56325"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:49.258081557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         722940525543250,
-				"StableID":   "nDLdeTRRe611CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:5be4dfb4ca1a482f11907b626b266a03c1195dad174a0d23223306011e1c2b7c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:51065", "10.65.0.27:51065", "172.17.0.1:51065"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:50.32341084Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1975540759601683,
-				"StableID":   "nN6G197jRG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:d7b081c5a387c846def1540fc564df543715c0be39b5d1f76dc95d6a3988a657",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54369", "10.65.0.27:54369", "172.17.0.1:54369"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:50.854111481Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7403186712715877,
-				"StableID":   "nGcHnMAvoz11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       7403186712715877,
-				"Key":        "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-				"DiscoKey":   "discokey:9afac13992ba77c85d6a7b7576c4fe43e953d606c962b9cb5889beec78e65e0a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51020", "10.65.0.27:51020", "172.17.0.1:51020"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:48.171668466Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-			"MachineKey": "mkey:149f3956d1b21c4a7ee7e07e94194d1313fad8063d2e0b3bebbf3985d24c6b56",
-			"Peers": [{
-				"ID":         4310192874841608,
-				"StableID":   "noggnZT6fa11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-				"DiscoKey":   "discokey:1b9ec3f82039280f094d7b276a4a1b6a3d8bfe32efdd909df6575b1649b2b77a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47344", "10.65.0.27:47344", "172.17.0.1:47344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:47.100990747Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1707186371135229,
-				"StableID":   "ncWfdgtBLE11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-				"DiscoKey":   "discokey:781647344b1d16b23d361b410bbb4a75ed378cf5b3d4cc2f3d199d863f805d78",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55203", "10.65.0.27:55203", "172.17.0.1:55203"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:47.649349669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         401025965428905,
-				"StableID":   "nzBLKnGd8411CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-				"DiscoKey":   "discokey:d47f64aa3cd694823fd177318403244fe5ee8698ded83601428b3d03e572e908",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45539", "10.65.0.27:45539", "172.17.0.1:45539"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:48.721000174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7537120670884255,
-				"StableID":   "n83g21Par121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-				"DiscoKey":   "discokey:e2f7a92c9d7dd1dbbb6f22a47e70dcb42b5e335a4332ef2127ba18abbcbcca73",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:56325", "10.65.0.27:56325", "172.17.0.1:56325"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:49.258081557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1609725258487015,
-				"StableID":   "nWN9rfk3aD11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-				"KeyExpiry":  "2026-11-03T08:27:49Z",
-				"DiscoKey":   "discokey:d306d4ab483f58543a247a71c1a9e2e0cdaa4c28097caa4ca3638e8d9ccccc72",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46543", "10.65.0.27:46543", "172.17.0.1:46543"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:49.80398982Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         722940525543250,
-				"StableID":   "nDLdeTRRe611CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:5be4dfb4ca1a482f11907b626b266a03c1195dad174a0d23223306011e1c2b7c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:51065", "10.65.0.27:51065", "172.17.0.1:51065"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:50.32341084Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1975540759601683,
-				"StableID":   "nN6G197jRG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:d7b081c5a387c846def1540fc564df543715c0be39b5d1f76dc95d6a3988a657",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54369", "10.65.0.27:54369", "172.17.0.1:54369"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:50.854111481Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7403186712715877": {
-				"ID":          7403186712715877,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         401025965428905,
-				"StableID":   "nzBLKnGd8411CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       401025965428905,
-				"Key":        "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-				"DiscoKey":   "discokey:d47f64aa3cd694823fd177318403244fe5ee8698ded83601428b3d03e572e908",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45539", "10.65.0.27:45539", "172.17.0.1:45539"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:27:48.721000174Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-			"MachineKey": "mkey:13b9c05f89596f5a02c3c0342327b000b5559f758f53fa25108d2322c779d319",
-			"Peers": [{
-				"ID":         4310192874841608,
-				"StableID":   "noggnZT6fa11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-				"DiscoKey":   "discokey:1b9ec3f82039280f094d7b276a4a1b6a3d8bfe32efdd909df6575b1649b2b77a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47344", "10.65.0.27:47344", "172.17.0.1:47344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:47.100990747Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1707186371135229,
-				"StableID":   "ncWfdgtBLE11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-				"DiscoKey":   "discokey:781647344b1d16b23d361b410bbb4a75ed378cf5b3d4cc2f3d199d863f805d78",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55203", "10.65.0.27:55203", "172.17.0.1:55203"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:47.649349669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7403186712715877,
-				"StableID":   "nGcHnMAvoz11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-				"DiscoKey":   "discokey:9afac13992ba77c85d6a7b7576c4fe43e953d606c962b9cb5889beec78e65e0a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51020", "10.65.0.27:51020", "172.17.0.1:51020"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:48.171668466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7537120670884255,
-				"StableID":   "n83g21Par121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-				"DiscoKey":   "discokey:e2f7a92c9d7dd1dbbb6f22a47e70dcb42b5e335a4332ef2127ba18abbcbcca73",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:56325", "10.65.0.27:56325", "172.17.0.1:56325"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:49.258081557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1609725258487015,
-				"StableID":   "nWN9rfk3aD11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-				"KeyExpiry":  "2026-11-03T08:27:49Z",
-				"DiscoKey":   "discokey:d306d4ab483f58543a247a71c1a9e2e0cdaa4c28097caa4ca3638e8d9ccccc72",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46543", "10.65.0.27:46543", "172.17.0.1:46543"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:49.80398982Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         722940525543250,
-				"StableID":   "nDLdeTRRe611CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:5be4dfb4ca1a482f11907b626b266a03c1195dad174a0d23223306011e1c2b7c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:51065", "10.65.0.27:51065", "172.17.0.1:51065"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:50.32341084Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1975540759601683,
-				"StableID":   "nN6G197jRG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:d7b081c5a387c846def1540fc564df543715c0be39b5d1f76dc95d6a3988a657",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54369", "10.65.0.27:54369", "172.17.0.1:54369"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:50.854111481Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "401025965428905": {
-				"ID":          401025965428905,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7537120670884255,
-				"StableID":   "n83g21Par121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7537120670884255,
-				"Key":        "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-				"DiscoKey":   "discokey:e2f7a92c9d7dd1dbbb6f22a47e70dcb42b5e335a4332ef2127ba18abbcbcca73",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:56325", "10.65.0.27:56325", "172.17.0.1:56325"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:49.258081557Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-			"MachineKey": "mkey:b3df643378a7e896cf5095f5d85b5b4f9d13fbc9c4b8df658c815231fa5d8069",
-			"Peers": [{
-				"ID":         4310192874841608,
-				"StableID":   "noggnZT6fa11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-				"DiscoKey":   "discokey:1b9ec3f82039280f094d7b276a4a1b6a3d8bfe32efdd909df6575b1649b2b77a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47344", "10.65.0.27:47344", "172.17.0.1:47344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:47.100990747Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1707186371135229,
-				"StableID":   "ncWfdgtBLE11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-				"DiscoKey":   "discokey:781647344b1d16b23d361b410bbb4a75ed378cf5b3d4cc2f3d199d863f805d78",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55203", "10.65.0.27:55203", "172.17.0.1:55203"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:47.649349669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7403186712715877,
-				"StableID":   "nGcHnMAvoz11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-				"DiscoKey":   "discokey:9afac13992ba77c85d6a7b7576c4fe43e953d606c962b9cb5889beec78e65e0a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51020", "10.65.0.27:51020", "172.17.0.1:51020"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:48.171668466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         401025965428905,
-				"StableID":   "nzBLKnGd8411CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-				"DiscoKey":   "discokey:d47f64aa3cd694823fd177318403244fe5ee8698ded83601428b3d03e572e908",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45539", "10.65.0.27:45539", "172.17.0.1:45539"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:48.721000174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1609725258487015,
-				"StableID":   "nWN9rfk3aD11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-				"KeyExpiry":  "2026-11-03T08:27:49Z",
-				"DiscoKey":   "discokey:d306d4ab483f58543a247a71c1a9e2e0cdaa4c28097caa4ca3638e8d9ccccc72",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46543", "10.65.0.27:46543", "172.17.0.1:46543"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:49.80398982Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         722940525543250,
-				"StableID":   "nDLdeTRRe611CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:5be4dfb4ca1a482f11907b626b266a03c1195dad174a0d23223306011e1c2b7c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:51065", "10.65.0.27:51065", "172.17.0.1:51065"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:50.32341084Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1975540759601683,
-				"StableID":   "nN6G197jRG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:d7b081c5a387c846def1540fc564df543715c0be39b5d1f76dc95d6a3988a657",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54369", "10.65.0.27:54369", "172.17.0.1:54369"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:50.854111481Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7537120670884255": {
-				"ID":          7537120670884255,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1975540759601683,
-				"StableID":   "nN6G197jRG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:d7b081c5a387c846def1540fc564df543715c0be39b5d1f76dc95d6a3988a657",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54369", "10.65.0.27:54369", "172.17.0.1:54369"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:50.854111481Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-			"MachineKey": "mkey:f343fb7376230a6b89771a23fae9b5e7b549c92b919243d490f5bf0860bef63a",
-			"Peers": [{
-				"ID":         4310192874841608,
-				"StableID":   "noggnZT6fa11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-				"DiscoKey":   "discokey:1b9ec3f82039280f094d7b276a4a1b6a3d8bfe32efdd909df6575b1649b2b77a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47344", "10.65.0.27:47344", "172.17.0.1:47344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:47.100990747Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1707186371135229,
-				"StableID":   "ncWfdgtBLE11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-				"DiscoKey":   "discokey:781647344b1d16b23d361b410bbb4a75ed378cf5b3d4cc2f3d199d863f805d78",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55203", "10.65.0.27:55203", "172.17.0.1:55203"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:47.649349669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7403186712715877,
-				"StableID":   "nGcHnMAvoz11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-				"DiscoKey":   "discokey:9afac13992ba77c85d6a7b7576c4fe43e953d606c962b9cb5889beec78e65e0a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51020", "10.65.0.27:51020", "172.17.0.1:51020"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:48.171668466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         401025965428905,
-				"StableID":   "nzBLKnGd8411CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-				"DiscoKey":   "discokey:d47f64aa3cd694823fd177318403244fe5ee8698ded83601428b3d03e572e908",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45539", "10.65.0.27:45539", "172.17.0.1:45539"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:48.721000174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7537120670884255,
-				"StableID":   "n83g21Par121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-				"DiscoKey":   "discokey:e2f7a92c9d7dd1dbbb6f22a47e70dcb42b5e335a4332ef2127ba18abbcbcca73",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:56325", "10.65.0.27:56325", "172.17.0.1:56325"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:49.258081557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1609725258487015,
-				"StableID":   "nWN9rfk3aD11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-				"KeyExpiry":  "2026-11-03T08:27:49Z",
-				"DiscoKey":   "discokey:d306d4ab483f58543a247a71c1a9e2e0cdaa4c28097caa4ca3638e8d9ccccc72",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46543", "10.65.0.27:46543", "172.17.0.1:46543"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:49.80398982Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         722940525543250,
-				"StableID":   "nDLdeTRRe611CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:5be4dfb4ca1a482f11907b626b266a03c1195dad174a0d23223306011e1c2b7c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:51065", "10.65.0.27:51065", "172.17.0.1:51065"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:27:50.32341084Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         722940525543250,
-				"StableID":   "nDLdeTRRe611CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:5be4dfb4ca1a482f11907b626b266a03c1195dad174a0d23223306011e1c2b7c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:51065", "10.65.0.27:51065", "172.17.0.1:51065"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:27:50.32341084Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f557a82fe8906642113f61629f01d2b6dafdde4f2b337a895ed09e7146be0633",
-			"MachineKey": "mkey:2beaa90ab310a1222603c77cd0567b58aea33a2be7cd693b0d0d2dd197462c3b",
-			"Peers": [{
-				"ID":         4310192874841608,
-				"StableID":   "noggnZT6fa11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:97e173011fe05f4ba004b9b9b15a0cf92e55991691cf47b687d73f159ec28620",
-				"DiscoKey":   "discokey:1b9ec3f82039280f094d7b276a4a1b6a3d8bfe32efdd909df6575b1649b2b77a",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:47344", "10.65.0.27:47344", "172.17.0.1:47344"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:27:47.100990747Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1707186371135229,
-				"StableID":   "ncWfdgtBLE11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:99aefcdbeb7f0f5151905fe9185157ee45ee6533a18cbf33e58d0076b923c265",
-				"DiscoKey":   "discokey:781647344b1d16b23d361b410bbb4a75ed378cf5b3d4cc2f3d199d863f805d78",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55203", "10.65.0.27:55203", "172.17.0.1:55203"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:27:47.649349669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7403186712715877,
-				"StableID":   "nGcHnMAvoz11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d58ffe0c5a141981a13724b439143f357eb5cae6e91f302e9a1927203248fe6d",
-				"DiscoKey":   "discokey:9afac13992ba77c85d6a7b7576c4fe43e953d606c962b9cb5889beec78e65e0a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51020", "10.65.0.27:51020", "172.17.0.1:51020"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:27:48.171668466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         401025965428905,
-				"StableID":   "nzBLKnGd8411CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:276c77f1712f45bcd5eb68aa15e08bf9c8d4f92de1c96aa9e2796d27b881244b",
-				"DiscoKey":   "discokey:d47f64aa3cd694823fd177318403244fe5ee8698ded83601428b3d03e572e908",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:45539", "10.65.0.27:45539", "172.17.0.1:45539"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:27:48.721000174Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7537120670884255,
-				"StableID":   "n83g21Par121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bccbfea133ea2e5a37103090e1d1bd749e3e4d944f8d9e93f8b765fc972ccc36",
-				"DiscoKey":   "discokey:e2f7a92c9d7dd1dbbb6f22a47e70dcb42b5e335a4332ef2127ba18abbcbcca73",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:56325", "10.65.0.27:56325", "172.17.0.1:56325"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:27:49.258081557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1609725258487015,
-				"StableID":   "nWN9rfk3aD11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:275aaf7244fb6b35316874054793191c82ad43a0a40db9d1edbc43abcccbb839",
-				"KeyExpiry":  "2026-11-03T08:27:49Z",
-				"DiscoKey":   "discokey:d306d4ab483f58543a247a71c1a9e2e0cdaa4c28097caa4ca3638e8d9ccccc72",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:46543", "10.65.0.27:46543", "172.17.0.1:46543"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:27:49.80398982Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1975540759601683,
-				"StableID":   "nN6G197jRG11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9cd966a9de0348326c407674b04b3d32a37459b20e07ab0a67bd21200b128809",
-				"KeyExpiry":  "2026-11-03T08:27:50Z",
-				"DiscoKey":   "discokey:d7b081c5a387c846def1540fc564df543715c0be39b5d1f76dc95d6a3988a657",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:54369", "10.65.0.27:54369", "172.17.0.1:54369"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:27:50.854111481Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b4-duplicate-attr.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b4-duplicate-attr.hujson
deleted file mode 100644
index b93ef4f17..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b4-duplicate-attr.hujson
+++ /dev/null
@@ -1,8837 +0,0 @@
-// nodeattrs-merge-b4-duplicate-attr
-//
-// same attr granted twice should be idempotent
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:28:21Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-merge-b4-duplicate-attr",
-	"description":    "same attr granted twice should be idempotent",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:28:21.886508571Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                    \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"same attr granted twice should be idempotent\",\n    \"id\": \"nodeattrs-merge-b4-duplicate-attr\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            },\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-merge-b4-duplicate-attr.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["randomize-client-port"], "target": ["tag:server"]},
-			{"attr": ["randomize-client-port"], "target": ["*"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         697490981978676,
-				"StableID":   "nFNedWutS611CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       697490981978676,
-				"Key":        "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-				"DiscoKey":   "discokey:a1dd79f4c59d6b2a9f3dd3383ee9502368fbfaa62ebb0f5e7d88b50484dad804",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:36127", "10.65.0.27:36127", "172.17.0.1:36127"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:28:27.351854761Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-			"MachineKey": "mkey:771f7b17f216eed6ff8f01b6287cd5e6be4b0f65767e5fa506d0454935d37e3c",
-			"Peers": [{
-				"ID":         954664480129263,
-				"StableID":   "nnQp1CRNT811CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-				"DiscoKey":   "discokey:0dd96fd347a4ba077c778b9ea963cb4d3f0a0d2e0bef6298b01fa4e9a3f4e132",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54544", "10.65.0.27:54544", "172.17.0.1:54544"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:28:27.890904576Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2057844127368093,
-				"StableID":   "nrmCnP515H11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-				"DiscoKey":   "discokey:779e2f5f41f2023bdb94dcef935651942d9871dbdeeb2dd233cea0f531fd9227",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51599", "10.65.0.27:51599", "172.17.0.1:51599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:28:28.430622703Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2659212127090927,
-				"StableID":   "natMdczMmM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-				"DiscoKey":   "discokey:7845d1f11c74b129fb828ee56db033336b6fa1187024863bc8c1394af80dfb15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:42066", "10.65.0.27:42066", "172.17.0.1:42066"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:28:28.975471362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         199809079682459,
-				"StableID":   "nCo8ATeVZ211CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-				"DiscoKey":   "discokey:c19d02440d2bf302bd199c4bf9c6b1823a909c098bfb869eb9f155abfac9f150",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:50177", "10.65.0.27:50177", "172.17.0.1:50177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:28:29.513566848Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         207994884714665,
-				"StableID":   "nzhbi2gCd211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:98546be6a6b1559b66c4aa5480398ad4f38f3f049c4abc9e21d19e01c272f425",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44765", "10.65.0.27:44765", "172.17.0.1:44765"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:28:30.087397648Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7833228198496818,
-				"StableID":   "njujG5dgA421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:fb576d947715226790ed2fbe6283bc25c11b9bc32f68a3a62f444083b00e1347",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54360", "10.65.0.27:54360", "172.17.0.1:54360"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:28:30.596241681Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3609483254635186,
-				"StableID":   "nDto7G1kBV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-				"KeyExpiry":  "2026-11-03T08:28:31Z",
-				"DiscoKey":   "discokey:67c04045d84a09ce1a1c93bace1f3cbb0a279666495e9dd8385c5f244a2adf71",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59789", "10.65.0.27:59789", "172.17.0.1:59789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:28:31.167430989Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "697490981978676": {
-				"ID":          697490981978676,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         954664480129263,
-				"StableID":   "nnQp1CRNT811CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       954664480129263,
-				"Key":        "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-				"DiscoKey":   "discokey:0dd96fd347a4ba077c778b9ea963cb4d3f0a0d2e0bef6298b01fa4e9a3f4e132",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54544", "10.65.0.27:54544", "172.17.0.1:54544"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:28:27.890904576Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-			"MachineKey": "mkey:f983ab7e2130276932c0ba90dd8826399105ad90adb4929c38a141476e1eeb53",
-			"Peers": [{
-				"ID":         697490981978676,
-				"StableID":   "nFNedWutS611CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-				"DiscoKey":   "discokey:a1dd79f4c59d6b2a9f3dd3383ee9502368fbfaa62ebb0f5e7d88b50484dad804",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:36127", "10.65.0.27:36127", "172.17.0.1:36127"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:28:27.351854761Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2057844127368093,
-				"StableID":   "nrmCnP515H11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-				"DiscoKey":   "discokey:779e2f5f41f2023bdb94dcef935651942d9871dbdeeb2dd233cea0f531fd9227",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51599", "10.65.0.27:51599", "172.17.0.1:51599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:28:28.430622703Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2659212127090927,
-				"StableID":   "natMdczMmM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-				"DiscoKey":   "discokey:7845d1f11c74b129fb828ee56db033336b6fa1187024863bc8c1394af80dfb15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:42066", "10.65.0.27:42066", "172.17.0.1:42066"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:28:28.975471362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         199809079682459,
-				"StableID":   "nCo8ATeVZ211CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-				"DiscoKey":   "discokey:c19d02440d2bf302bd199c4bf9c6b1823a909c098bfb869eb9f155abfac9f150",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:50177", "10.65.0.27:50177", "172.17.0.1:50177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:28:29.513566848Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         207994884714665,
-				"StableID":   "nzhbi2gCd211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:98546be6a6b1559b66c4aa5480398ad4f38f3f049c4abc9e21d19e01c272f425",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44765", "10.65.0.27:44765", "172.17.0.1:44765"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:28:30.087397648Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7833228198496818,
-				"StableID":   "njujG5dgA421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:fb576d947715226790ed2fbe6283bc25c11b9bc32f68a3a62f444083b00e1347",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54360", "10.65.0.27:54360", "172.17.0.1:54360"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:28:30.596241681Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3609483254635186,
-				"StableID":   "nDto7G1kBV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-				"KeyExpiry":  "2026-11-03T08:28:31Z",
-				"DiscoKey":   "discokey:67c04045d84a09ce1a1c93bace1f3cbb0a279666495e9dd8385c5f244a2adf71",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59789", "10.65.0.27:59789", "172.17.0.1:59789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:28:31.167430989Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "954664480129263": {
-				"ID":          954664480129263,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         207994884714665,
-				"StableID":   "nzhbi2gCd211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:98546be6a6b1559b66c4aa5480398ad4f38f3f049c4abc9e21d19e01c272f425",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44765", "10.65.0.27:44765", "172.17.0.1:44765"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:28:30.087397648Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-			"MachineKey": "mkey:79a2043e721d69d835558749a11118ac9087bea0d2d96ec8605998277379fa55",
-			"Peers": [{
-				"ID":         697490981978676,
-				"StableID":   "nFNedWutS611CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-				"DiscoKey":   "discokey:a1dd79f4c59d6b2a9f3dd3383ee9502368fbfaa62ebb0f5e7d88b50484dad804",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:36127", "10.65.0.27:36127", "172.17.0.1:36127"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:28:27.351854761Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         954664480129263,
-				"StableID":   "nnQp1CRNT811CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-				"DiscoKey":   "discokey:0dd96fd347a4ba077c778b9ea963cb4d3f0a0d2e0bef6298b01fa4e9a3f4e132",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54544", "10.65.0.27:54544", "172.17.0.1:54544"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:28:27.890904576Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2057844127368093,
-				"StableID":   "nrmCnP515H11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-				"DiscoKey":   "discokey:779e2f5f41f2023bdb94dcef935651942d9871dbdeeb2dd233cea0f531fd9227",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51599", "10.65.0.27:51599", "172.17.0.1:51599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:28:28.430622703Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2659212127090927,
-				"StableID":   "natMdczMmM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-				"DiscoKey":   "discokey:7845d1f11c74b129fb828ee56db033336b6fa1187024863bc8c1394af80dfb15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:42066", "10.65.0.27:42066", "172.17.0.1:42066"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:28:28.975471362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         199809079682459,
-				"StableID":   "nCo8ATeVZ211CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-				"DiscoKey":   "discokey:c19d02440d2bf302bd199c4bf9c6b1823a909c098bfb869eb9f155abfac9f150",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:50177", "10.65.0.27:50177", "172.17.0.1:50177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:28:29.513566848Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7833228198496818,
-				"StableID":   "njujG5dgA421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:fb576d947715226790ed2fbe6283bc25c11b9bc32f68a3a62f444083b00e1347",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54360", "10.65.0.27:54360", "172.17.0.1:54360"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:28:30.596241681Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3609483254635186,
-				"StableID":   "nDto7G1kBV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-				"KeyExpiry":  "2026-11-03T08:28:31Z",
-				"DiscoKey":   "discokey:67c04045d84a09ce1a1c93bace1f3cbb0a279666495e9dd8385c5f244a2adf71",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59789", "10.65.0.27:59789", "172.17.0.1:59789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:28:31.167430989Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2057844127368093,
-				"StableID":   "nrmCnP515H11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       2057844127368093,
-				"Key":        "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-				"DiscoKey":   "discokey:779e2f5f41f2023bdb94dcef935651942d9871dbdeeb2dd233cea0f531fd9227",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51599", "10.65.0.27:51599", "172.17.0.1:51599"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:28:28.430622703Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-			"MachineKey": "mkey:e42df955c03f9230527c1432df411ad7dee4f6a46995c020c59ee1a7ad648c11",
-			"Peers": [{
-				"ID":         697490981978676,
-				"StableID":   "nFNedWutS611CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-				"DiscoKey":   "discokey:a1dd79f4c59d6b2a9f3dd3383ee9502368fbfaa62ebb0f5e7d88b50484dad804",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:36127", "10.65.0.27:36127", "172.17.0.1:36127"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:28:27.351854761Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         954664480129263,
-				"StableID":   "nnQp1CRNT811CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-				"DiscoKey":   "discokey:0dd96fd347a4ba077c778b9ea963cb4d3f0a0d2e0bef6298b01fa4e9a3f4e132",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54544", "10.65.0.27:54544", "172.17.0.1:54544"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:28:27.890904576Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2659212127090927,
-				"StableID":   "natMdczMmM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-				"DiscoKey":   "discokey:7845d1f11c74b129fb828ee56db033336b6fa1187024863bc8c1394af80dfb15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:42066", "10.65.0.27:42066", "172.17.0.1:42066"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:28:28.975471362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         199809079682459,
-				"StableID":   "nCo8ATeVZ211CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-				"DiscoKey":   "discokey:c19d02440d2bf302bd199c4bf9c6b1823a909c098bfb869eb9f155abfac9f150",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:50177", "10.65.0.27:50177", "172.17.0.1:50177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:28:29.513566848Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         207994884714665,
-				"StableID":   "nzhbi2gCd211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:98546be6a6b1559b66c4aa5480398ad4f38f3f049c4abc9e21d19e01c272f425",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44765", "10.65.0.27:44765", "172.17.0.1:44765"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:28:30.087397648Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7833228198496818,
-				"StableID":   "njujG5dgA421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:fb576d947715226790ed2fbe6283bc25c11b9bc32f68a3a62f444083b00e1347",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54360", "10.65.0.27:54360", "172.17.0.1:54360"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:28:30.596241681Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3609483254635186,
-				"StableID":   "nDto7G1kBV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-				"KeyExpiry":  "2026-11-03T08:28:31Z",
-				"DiscoKey":   "discokey:67c04045d84a09ce1a1c93bace1f3cbb0a279666495e9dd8385c5f244a2adf71",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59789", "10.65.0.27:59789", "172.17.0.1:59789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:28:31.167430989Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2057844127368093": {
-				"ID":          2057844127368093,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2659212127090927,
-				"StableID":   "natMdczMmM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       2659212127090927,
-				"Key":        "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-				"DiscoKey":   "discokey:7845d1f11c74b129fb828ee56db033336b6fa1187024863bc8c1394af80dfb15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:42066", "10.65.0.27:42066", "172.17.0.1:42066"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:28:28.975471362Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-			"MachineKey": "mkey:2dae38c7f7232400e184c759cf7400c83d65584276b565012f97840c88ab820b",
-			"Peers": [{
-				"ID":         697490981978676,
-				"StableID":   "nFNedWutS611CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-				"DiscoKey":   "discokey:a1dd79f4c59d6b2a9f3dd3383ee9502368fbfaa62ebb0f5e7d88b50484dad804",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:36127", "10.65.0.27:36127", "172.17.0.1:36127"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:28:27.351854761Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         954664480129263,
-				"StableID":   "nnQp1CRNT811CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-				"DiscoKey":   "discokey:0dd96fd347a4ba077c778b9ea963cb4d3f0a0d2e0bef6298b01fa4e9a3f4e132",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54544", "10.65.0.27:54544", "172.17.0.1:54544"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:28:27.890904576Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2057844127368093,
-				"StableID":   "nrmCnP515H11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-				"DiscoKey":   "discokey:779e2f5f41f2023bdb94dcef935651942d9871dbdeeb2dd233cea0f531fd9227",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51599", "10.65.0.27:51599", "172.17.0.1:51599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:28:28.430622703Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         199809079682459,
-				"StableID":   "nCo8ATeVZ211CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-				"DiscoKey":   "discokey:c19d02440d2bf302bd199c4bf9c6b1823a909c098bfb869eb9f155abfac9f150",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:50177", "10.65.0.27:50177", "172.17.0.1:50177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:28:29.513566848Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         207994884714665,
-				"StableID":   "nzhbi2gCd211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:98546be6a6b1559b66c4aa5480398ad4f38f3f049c4abc9e21d19e01c272f425",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44765", "10.65.0.27:44765", "172.17.0.1:44765"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:28:30.087397648Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7833228198496818,
-				"StableID":   "njujG5dgA421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:fb576d947715226790ed2fbe6283bc25c11b9bc32f68a3a62f444083b00e1347",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54360", "10.65.0.27:54360", "172.17.0.1:54360"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:28:30.596241681Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3609483254635186,
-				"StableID":   "nDto7G1kBV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-				"KeyExpiry":  "2026-11-03T08:28:31Z",
-				"DiscoKey":   "discokey:67c04045d84a09ce1a1c93bace1f3cbb0a279666495e9dd8385c5f244a2adf71",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59789", "10.65.0.27:59789", "172.17.0.1:59789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:28:31.167430989Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2659212127090927": {
-				"ID":          2659212127090927,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         199809079682459,
-				"StableID":   "nCo8ATeVZ211CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       199809079682459,
-				"Key":        "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-				"DiscoKey":   "discokey:c19d02440d2bf302bd199c4bf9c6b1823a909c098bfb869eb9f155abfac9f150",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:50177", "10.65.0.27:50177", "172.17.0.1:50177"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:28:29.513566848Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-			"MachineKey": "mkey:9bd2b8abb43de9d8ce87f8bf082c6a7104ad3bbea37d4dab77af2878a25b4428",
-			"Peers": [{
-				"ID":         697490981978676,
-				"StableID":   "nFNedWutS611CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-				"DiscoKey":   "discokey:a1dd79f4c59d6b2a9f3dd3383ee9502368fbfaa62ebb0f5e7d88b50484dad804",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:36127", "10.65.0.27:36127", "172.17.0.1:36127"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:28:27.351854761Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         954664480129263,
-				"StableID":   "nnQp1CRNT811CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-				"DiscoKey":   "discokey:0dd96fd347a4ba077c778b9ea963cb4d3f0a0d2e0bef6298b01fa4e9a3f4e132",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54544", "10.65.0.27:54544", "172.17.0.1:54544"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:28:27.890904576Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2057844127368093,
-				"StableID":   "nrmCnP515H11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-				"DiscoKey":   "discokey:779e2f5f41f2023bdb94dcef935651942d9871dbdeeb2dd233cea0f531fd9227",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51599", "10.65.0.27:51599", "172.17.0.1:51599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:28:28.430622703Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2659212127090927,
-				"StableID":   "natMdczMmM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-				"DiscoKey":   "discokey:7845d1f11c74b129fb828ee56db033336b6fa1187024863bc8c1394af80dfb15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:42066", "10.65.0.27:42066", "172.17.0.1:42066"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:28:28.975471362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         207994884714665,
-				"StableID":   "nzhbi2gCd211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:98546be6a6b1559b66c4aa5480398ad4f38f3f049c4abc9e21d19e01c272f425",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44765", "10.65.0.27:44765", "172.17.0.1:44765"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:28:30.087397648Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7833228198496818,
-				"StableID":   "njujG5dgA421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:fb576d947715226790ed2fbe6283bc25c11b9bc32f68a3a62f444083b00e1347",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54360", "10.65.0.27:54360", "172.17.0.1:54360"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:28:30.596241681Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3609483254635186,
-				"StableID":   "nDto7G1kBV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-				"KeyExpiry":  "2026-11-03T08:28:31Z",
-				"DiscoKey":   "discokey:67c04045d84a09ce1a1c93bace1f3cbb0a279666495e9dd8385c5f244a2adf71",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59789", "10.65.0.27:59789", "172.17.0.1:59789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:28:31.167430989Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "199809079682459": {
-				"ID":          199809079682459,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3609483254635186,
-				"StableID":   "nDto7G1kBV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-				"KeyExpiry":  "2026-11-03T08:28:31Z",
-				"DiscoKey":   "discokey:67c04045d84a09ce1a1c93bace1f3cbb0a279666495e9dd8385c5f244a2adf71",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59789", "10.65.0.27:59789", "172.17.0.1:59789"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:28:31.167430989Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-			"MachineKey": "mkey:f56057415bc9e1f887d054056474015757f9cacaccf7d988f363b1bb0f4fb426",
-			"Peers": [{
-				"ID":         697490981978676,
-				"StableID":   "nFNedWutS611CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-				"DiscoKey":   "discokey:a1dd79f4c59d6b2a9f3dd3383ee9502368fbfaa62ebb0f5e7d88b50484dad804",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:36127", "10.65.0.27:36127", "172.17.0.1:36127"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:28:27.351854761Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         954664480129263,
-				"StableID":   "nnQp1CRNT811CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-				"DiscoKey":   "discokey:0dd96fd347a4ba077c778b9ea963cb4d3f0a0d2e0bef6298b01fa4e9a3f4e132",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54544", "10.65.0.27:54544", "172.17.0.1:54544"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:28:27.890904576Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2057844127368093,
-				"StableID":   "nrmCnP515H11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-				"DiscoKey":   "discokey:779e2f5f41f2023bdb94dcef935651942d9871dbdeeb2dd233cea0f531fd9227",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51599", "10.65.0.27:51599", "172.17.0.1:51599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:28:28.430622703Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2659212127090927,
-				"StableID":   "natMdczMmM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-				"DiscoKey":   "discokey:7845d1f11c74b129fb828ee56db033336b6fa1187024863bc8c1394af80dfb15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:42066", "10.65.0.27:42066", "172.17.0.1:42066"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:28:28.975471362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         199809079682459,
-				"StableID":   "nCo8ATeVZ211CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-				"DiscoKey":   "discokey:c19d02440d2bf302bd199c4bf9c6b1823a909c098bfb869eb9f155abfac9f150",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:50177", "10.65.0.27:50177", "172.17.0.1:50177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:28:29.513566848Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         207994884714665,
-				"StableID":   "nzhbi2gCd211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:98546be6a6b1559b66c4aa5480398ad4f38f3f049c4abc9e21d19e01c272f425",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44765", "10.65.0.27:44765", "172.17.0.1:44765"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:28:30.087397648Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7833228198496818,
-				"StableID":   "njujG5dgA421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:fb576d947715226790ed2fbe6283bc25c11b9bc32f68a3a62f444083b00e1347",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54360", "10.65.0.27:54360", "172.17.0.1:54360"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:28:30.596241681Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7833228198496818,
-				"StableID":   "njujG5dgA421CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:fb576d947715226790ed2fbe6283bc25c11b9bc32f68a3a62f444083b00e1347",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:54360", "10.65.0.27:54360", "172.17.0.1:54360"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:28:30.596241681Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:751203b2d18190f7d9afe7bfc76e7db5b32d5f6e5b588d8caa8d5a2520d2a855",
-			"MachineKey": "mkey:2066781d37fd0c25cb53fba167b24e5ab93de3569d68c2745ef4399359aac568",
-			"Peers": [{
-				"ID":         697490981978676,
-				"StableID":   "nFNedWutS611CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:60a239aef9485d03c7a88a7914b276e80bda108568b52e75d3190d8fade39966",
-				"DiscoKey":   "discokey:a1dd79f4c59d6b2a9f3dd3383ee9502368fbfaa62ebb0f5e7d88b50484dad804",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:36127", "10.65.0.27:36127", "172.17.0.1:36127"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:28:27.351854761Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         954664480129263,
-				"StableID":   "nnQp1CRNT811CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:67306a6a33cc72bfc8d67f0939b2795fbf5c0fede066901702da33760a5a281d",
-				"DiscoKey":   "discokey:0dd96fd347a4ba077c778b9ea963cb4d3f0a0d2e0bef6298b01fa4e9a3f4e132",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54544", "10.65.0.27:54544", "172.17.0.1:54544"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:28:27.890904576Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2057844127368093,
-				"StableID":   "nrmCnP515H11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f04e8b5bf2c94f812934f0b54745c77891b0ba8bdbe0e99f96e8fc071465e96a",
-				"DiscoKey":   "discokey:779e2f5f41f2023bdb94dcef935651942d9871dbdeeb2dd233cea0f531fd9227",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:51599", "10.65.0.27:51599", "172.17.0.1:51599"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:28:28.430622703Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2659212127090927,
-				"StableID":   "natMdczMmM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8bdd060f88c0664d51620e4bda58f72ce713df88c1113ead56c0494860700858",
-				"DiscoKey":   "discokey:7845d1f11c74b129fb828ee56db033336b6fa1187024863bc8c1394af80dfb15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:42066", "10.65.0.27:42066", "172.17.0.1:42066"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:28:28.975471362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         199809079682459,
-				"StableID":   "nCo8ATeVZ211CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c536a04479c5ceeb9431796fd920dca83644d3ae09df199a97384f095766cb49",
-				"DiscoKey":   "discokey:c19d02440d2bf302bd199c4bf9c6b1823a909c098bfb869eb9f155abfac9f150",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:50177", "10.65.0.27:50177", "172.17.0.1:50177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:28:29.513566848Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         207994884714665,
-				"StableID":   "nzhbi2gCd211CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:44c38e20b2614c88c6784c30be91a3dce538f45fb8c22e47068f2ba676730046",
-				"KeyExpiry":  "2026-11-03T08:28:30Z",
-				"DiscoKey":   "discokey:98546be6a6b1559b66c4aa5480398ad4f38f3f049c4abc9e21d19e01c272f425",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44765", "10.65.0.27:44765", "172.17.0.1:44765"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:28:30.087397648Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3609483254635186,
-				"StableID":   "nDto7G1kBV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:549f2023a0c7f91f510d660c1a1500153a04a0cdbcefd3998bad7563279ffd73",
-				"KeyExpiry":  "2026-11-03T08:28:31Z",
-				"DiscoKey":   "discokey:67c04045d84a09ce1a1c93bace1f3cbb0a279666495e9dd8385c5f244a2adf71",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59789", "10.65.0.27:59789", "172.17.0.1:59789"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:28:31.167430989Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b5-multiple-nextdns.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b5-multiple-nextdns.hujson
deleted file mode 100644
index efc0e345b..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-merge-b5-multiple-nextdns.hujson
+++ /dev/null
@@ -1,8824 +0,0 @@
-// nodeattrs-merge-b5-multiple-nextdns
-//
-// multiple nextdns profiles in single attr list
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:29:02Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-merge-b5-multiple-nextdns",
-	"description":    "multiple nextdns profiles in single attr list",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:29:02.168818659Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                      \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"multiple nextdns profiles in single attr list\",\n    \"id\": \"nodeattrs-merge-b5-multiple-nextdns\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"nextdns:abc111\",\n                    \"nextdns:def222\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-merge-b5-multiple-nextdns.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["nextdns:abc111", "nextdns:def222"], "target": ["tag:server"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2464159056232422,
-				"StableID":   "nXbcgEH2FL11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       2464159056232422,
-				"Key":        "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-				"DiscoKey":   "discokey:bfcbef81d1854d76765f69223592b65dd024359e9fed85eaee35d090165ab962",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35083", "10.65.0.27:35083", "172.17.0.1:35083"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:07.55166835Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-			"MachineKey": "mkey:0c5248150b5cc55efa370523ac0c9e3a67d773911f2de76653e4bdb377cb7674",
-			"Peers": [{
-				"ID":         7591915242913208,
-				"StableID":   "nK2ziujPH221CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-				"DiscoKey":   "discokey:60639b938125fdaed5d374a1e7dffad383f8bb82ab23b33110bd3d841f8b7d09",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50031", "10.65.0.27:50031", "172.17.0.1:50031"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:08.082887001Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5223679637569051,
-				"StableID":   "ncfSvxCpnh11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-				"DiscoKey":   "discokey:de4bc30de176bc6d616ee4c6b3cdc041681de8b533881eddb4e96ad17ad5c23d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39738", "10.65.0.27:39738", "172.17.0.1:39738"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:08.616660835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8280482218708791,
-				"StableID":   "nzrJV9EFf721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-				"DiscoKey":   "discokey:d1bcb167e33a6396f1392bf62989e8474a85bb96ec825fc892c0ea819c6ece5c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51023", "10.65.0.27:51023", "172.17.0.1:51023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:09.160185455Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4106543661811297,
-				"StableID":   "nzoNCSwr4Z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-				"DiscoKey":   "discokey:c8a7985d4e00f14329e524e42ea0c877563ab6373ab2629fffe1b73377ba1731",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40684", "10.65.0.27:40684", "172.17.0.1:40684"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:09.693529718Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         353283394217762,
-				"StableID":   "nXKXn2A1m311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:0a9f8d86d67b9bea4b8168e8ad2ab694ef1e5871524325aaef1acc81d0dbb400",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59290", "10.65.0.27:59290", "172.17.0.1:59290"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:10.235636827Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5352810715010965,
-				"StableID":   "nAyg38GJoi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:544d5ac13530bc0a65d714f476c5f2a51f9e6d12791324042fb7a73165ec9c05",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:33075", "10.65.0.27:33075", "172.17.0.1:33075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:10.76799932Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6758233200362769,
-				"StableID":   "nAy9SvKpmu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-				"KeyExpiry":  "2026-11-03T08:29:11Z",
-				"DiscoKey":   "discokey:277e7b4068c75706f44c708f934fd4ada9a540913148db45592b9b314b584d14",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:45067", "10.65.0.27:45067", "172.17.0.1:45067"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:11.293996641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2464159056232422": {
-				"ID":          2464159056232422,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7591915242913208,
-				"StableID":   "nK2ziujPH221CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       7591915242913208,
-				"Key":        "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-				"DiscoKey":   "discokey:60639b938125fdaed5d374a1e7dffad383f8bb82ab23b33110bd3d841f8b7d09",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50031", "10.65.0.27:50031", "172.17.0.1:50031"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:29:08.082887001Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-			"MachineKey": "mkey:58ba5f8fd72058596708d6c7521a622ec06753c930418b17cbbafc7f4271600c",
-			"Peers": [{
-				"ID":         2464159056232422,
-				"StableID":   "nXbcgEH2FL11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-				"DiscoKey":   "discokey:bfcbef81d1854d76765f69223592b65dd024359e9fed85eaee35d090165ab962",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35083", "10.65.0.27:35083", "172.17.0.1:35083"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:07.55166835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5223679637569051,
-				"StableID":   "ncfSvxCpnh11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-				"DiscoKey":   "discokey:de4bc30de176bc6d616ee4c6b3cdc041681de8b533881eddb4e96ad17ad5c23d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39738", "10.65.0.27:39738", "172.17.0.1:39738"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:08.616660835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8280482218708791,
-				"StableID":   "nzrJV9EFf721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-				"DiscoKey":   "discokey:d1bcb167e33a6396f1392bf62989e8474a85bb96ec825fc892c0ea819c6ece5c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51023", "10.65.0.27:51023", "172.17.0.1:51023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:09.160185455Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4106543661811297,
-				"StableID":   "nzoNCSwr4Z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-				"DiscoKey":   "discokey:c8a7985d4e00f14329e524e42ea0c877563ab6373ab2629fffe1b73377ba1731",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40684", "10.65.0.27:40684", "172.17.0.1:40684"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:09.693529718Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         353283394217762,
-				"StableID":   "nXKXn2A1m311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:0a9f8d86d67b9bea4b8168e8ad2ab694ef1e5871524325aaef1acc81d0dbb400",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59290", "10.65.0.27:59290", "172.17.0.1:59290"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:10.235636827Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5352810715010965,
-				"StableID":   "nAyg38GJoi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:544d5ac13530bc0a65d714f476c5f2a51f9e6d12791324042fb7a73165ec9c05",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:33075", "10.65.0.27:33075", "172.17.0.1:33075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:10.76799932Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6758233200362769,
-				"StableID":   "nAy9SvKpmu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-				"KeyExpiry":  "2026-11-03T08:29:11Z",
-				"DiscoKey":   "discokey:277e7b4068c75706f44c708f934fd4ada9a540913148db45592b9b314b584d14",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:45067", "10.65.0.27:45067", "172.17.0.1:45067"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:11.293996641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7591915242913208": {
-				"ID":          7591915242913208,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         353283394217762,
-				"StableID":   "nXKXn2A1m311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:0a9f8d86d67b9bea4b8168e8ad2ab694ef1e5871524325aaef1acc81d0dbb400",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59290", "10.65.0.27:59290", "172.17.0.1:59290"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:10.235636827Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-			"MachineKey": "mkey:a7fd89f1806891917c9abf2839e3ffd7e57c7a38fdf6f695b29ed1fea0f90476",
-			"Peers": [{
-				"ID":         2464159056232422,
-				"StableID":   "nXbcgEH2FL11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-				"DiscoKey":   "discokey:bfcbef81d1854d76765f69223592b65dd024359e9fed85eaee35d090165ab962",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35083", "10.65.0.27:35083", "172.17.0.1:35083"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:07.55166835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7591915242913208,
-				"StableID":   "nK2ziujPH221CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-				"DiscoKey":   "discokey:60639b938125fdaed5d374a1e7dffad383f8bb82ab23b33110bd3d841f8b7d09",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50031", "10.65.0.27:50031", "172.17.0.1:50031"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:08.082887001Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5223679637569051,
-				"StableID":   "ncfSvxCpnh11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-				"DiscoKey":   "discokey:de4bc30de176bc6d616ee4c6b3cdc041681de8b533881eddb4e96ad17ad5c23d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39738", "10.65.0.27:39738", "172.17.0.1:39738"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:08.616660835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8280482218708791,
-				"StableID":   "nzrJV9EFf721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-				"DiscoKey":   "discokey:d1bcb167e33a6396f1392bf62989e8474a85bb96ec825fc892c0ea819c6ece5c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51023", "10.65.0.27:51023", "172.17.0.1:51023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:09.160185455Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4106543661811297,
-				"StableID":   "nzoNCSwr4Z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-				"DiscoKey":   "discokey:c8a7985d4e00f14329e524e42ea0c877563ab6373ab2629fffe1b73377ba1731",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40684", "10.65.0.27:40684", "172.17.0.1:40684"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:09.693529718Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5352810715010965,
-				"StableID":   "nAyg38GJoi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:544d5ac13530bc0a65d714f476c5f2a51f9e6d12791324042fb7a73165ec9c05",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:33075", "10.65.0.27:33075", "172.17.0.1:33075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:10.76799932Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6758233200362769,
-				"StableID":   "nAy9SvKpmu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-				"KeyExpiry":  "2026-11-03T08:29:11Z",
-				"DiscoKey":   "discokey:277e7b4068c75706f44c708f934fd4ada9a540913148db45592b9b314b584d14",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:45067", "10.65.0.27:45067", "172.17.0.1:45067"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:11.293996641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5223679637569051,
-				"StableID":   "ncfSvxCpnh11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5223679637569051,
-				"Key":        "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-				"DiscoKey":   "discokey:de4bc30de176bc6d616ee4c6b3cdc041681de8b533881eddb4e96ad17ad5c23d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39738", "10.65.0.27:39738", "172.17.0.1:39738"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:08.616660835Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-			"MachineKey": "mkey:99d1313010a40a206e99fdcece89ad094c1ca6e5e4daa93f2425642baf30e20f",
-			"Peers": [{
-				"ID":         2464159056232422,
-				"StableID":   "nXbcgEH2FL11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-				"DiscoKey":   "discokey:bfcbef81d1854d76765f69223592b65dd024359e9fed85eaee35d090165ab962",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35083", "10.65.0.27:35083", "172.17.0.1:35083"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:07.55166835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7591915242913208,
-				"StableID":   "nK2ziujPH221CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-				"DiscoKey":   "discokey:60639b938125fdaed5d374a1e7dffad383f8bb82ab23b33110bd3d841f8b7d09",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50031", "10.65.0.27:50031", "172.17.0.1:50031"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:08.082887001Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8280482218708791,
-				"StableID":   "nzrJV9EFf721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-				"DiscoKey":   "discokey:d1bcb167e33a6396f1392bf62989e8474a85bb96ec825fc892c0ea819c6ece5c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51023", "10.65.0.27:51023", "172.17.0.1:51023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:09.160185455Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4106543661811297,
-				"StableID":   "nzoNCSwr4Z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-				"DiscoKey":   "discokey:c8a7985d4e00f14329e524e42ea0c877563ab6373ab2629fffe1b73377ba1731",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40684", "10.65.0.27:40684", "172.17.0.1:40684"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:09.693529718Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         353283394217762,
-				"StableID":   "nXKXn2A1m311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:0a9f8d86d67b9bea4b8168e8ad2ab694ef1e5871524325aaef1acc81d0dbb400",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59290", "10.65.0.27:59290", "172.17.0.1:59290"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:10.235636827Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5352810715010965,
-				"StableID":   "nAyg38GJoi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:544d5ac13530bc0a65d714f476c5f2a51f9e6d12791324042fb7a73165ec9c05",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:33075", "10.65.0.27:33075", "172.17.0.1:33075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:10.76799932Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6758233200362769,
-				"StableID":   "nAy9SvKpmu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-				"KeyExpiry":  "2026-11-03T08:29:11Z",
-				"DiscoKey":   "discokey:277e7b4068c75706f44c708f934fd4ada9a540913148db45592b9b314b584d14",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:45067", "10.65.0.27:45067", "172.17.0.1:45067"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:11.293996641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5223679637569051": {
-				"ID":          5223679637569051,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8280482218708791,
-				"StableID":   "nzrJV9EFf721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       8280482218708791,
-				"Key":        "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-				"DiscoKey":   "discokey:d1bcb167e33a6396f1392bf62989e8474a85bb96ec825fc892c0ea819c6ece5c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51023", "10.65.0.27:51023", "172.17.0.1:51023"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:29:09.160185455Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-			"MachineKey": "mkey:d890a58b804ae754158a2acf184ea9b2fcb06caebd59b5b69b5e6fbb0bd31b5b",
-			"Peers": [{
-				"ID":         2464159056232422,
-				"StableID":   "nXbcgEH2FL11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-				"DiscoKey":   "discokey:bfcbef81d1854d76765f69223592b65dd024359e9fed85eaee35d090165ab962",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35083", "10.65.0.27:35083", "172.17.0.1:35083"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:07.55166835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7591915242913208,
-				"StableID":   "nK2ziujPH221CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-				"DiscoKey":   "discokey:60639b938125fdaed5d374a1e7dffad383f8bb82ab23b33110bd3d841f8b7d09",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50031", "10.65.0.27:50031", "172.17.0.1:50031"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:08.082887001Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5223679637569051,
-				"StableID":   "ncfSvxCpnh11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-				"DiscoKey":   "discokey:de4bc30de176bc6d616ee4c6b3cdc041681de8b533881eddb4e96ad17ad5c23d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39738", "10.65.0.27:39738", "172.17.0.1:39738"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:08.616660835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4106543661811297,
-				"StableID":   "nzoNCSwr4Z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-				"DiscoKey":   "discokey:c8a7985d4e00f14329e524e42ea0c877563ab6373ab2629fffe1b73377ba1731",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40684", "10.65.0.27:40684", "172.17.0.1:40684"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:09.693529718Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         353283394217762,
-				"StableID":   "nXKXn2A1m311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:0a9f8d86d67b9bea4b8168e8ad2ab694ef1e5871524325aaef1acc81d0dbb400",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59290", "10.65.0.27:59290", "172.17.0.1:59290"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:10.235636827Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5352810715010965,
-				"StableID":   "nAyg38GJoi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:544d5ac13530bc0a65d714f476c5f2a51f9e6d12791324042fb7a73165ec9c05",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:33075", "10.65.0.27:33075", "172.17.0.1:33075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:10.76799932Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6758233200362769,
-				"StableID":   "nAy9SvKpmu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-				"KeyExpiry":  "2026-11-03T08:29:11Z",
-				"DiscoKey":   "discokey:277e7b4068c75706f44c708f934fd4ada9a540913148db45592b9b314b584d14",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:45067", "10.65.0.27:45067", "172.17.0.1:45067"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:11.293996641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8280482218708791": {
-				"ID":          8280482218708791,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4106543661811297,
-				"StableID":   "nzoNCSwr4Z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       4106543661811297,
-				"Key":        "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-				"DiscoKey":   "discokey:c8a7985d4e00f14329e524e42ea0c877563ab6373ab2629fffe1b73377ba1731",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40684", "10.65.0.27:40684", "172.17.0.1:40684"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:09.693529718Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc111":                         null,
-					"nextdns:def222":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc111",
-				"nextdns:def222",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-			"MachineKey": "mkey:7f10fefa910bacaf83bdb76fef5546e9289a93de303924c8c8abf2a98f03b43e",
-			"Peers": [{
-				"ID":         2464159056232422,
-				"StableID":   "nXbcgEH2FL11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-				"DiscoKey":   "discokey:bfcbef81d1854d76765f69223592b65dd024359e9fed85eaee35d090165ab962",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35083", "10.65.0.27:35083", "172.17.0.1:35083"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:07.55166835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7591915242913208,
-				"StableID":   "nK2ziujPH221CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-				"DiscoKey":   "discokey:60639b938125fdaed5d374a1e7dffad383f8bb82ab23b33110bd3d841f8b7d09",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50031", "10.65.0.27:50031", "172.17.0.1:50031"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:08.082887001Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5223679637569051,
-				"StableID":   "ncfSvxCpnh11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-				"DiscoKey":   "discokey:de4bc30de176bc6d616ee4c6b3cdc041681de8b533881eddb4e96ad17ad5c23d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39738", "10.65.0.27:39738", "172.17.0.1:39738"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:08.616660835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8280482218708791,
-				"StableID":   "nzrJV9EFf721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-				"DiscoKey":   "discokey:d1bcb167e33a6396f1392bf62989e8474a85bb96ec825fc892c0ea819c6ece5c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51023", "10.65.0.27:51023", "172.17.0.1:51023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:09.160185455Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         353283394217762,
-				"StableID":   "nXKXn2A1m311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:0a9f8d86d67b9bea4b8168e8ad2ab694ef1e5871524325aaef1acc81d0dbb400",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59290", "10.65.0.27:59290", "172.17.0.1:59290"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:10.235636827Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5352810715010965,
-				"StableID":   "nAyg38GJoi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:544d5ac13530bc0a65d714f476c5f2a51f9e6d12791324042fb7a73165ec9c05",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:33075", "10.65.0.27:33075", "172.17.0.1:33075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:10.76799932Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6758233200362769,
-				"StableID":   "nAy9SvKpmu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-				"KeyExpiry":  "2026-11-03T08:29:11Z",
-				"DiscoKey":   "discokey:277e7b4068c75706f44c708f934fd4ada9a540913148db45592b9b314b584d14",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:45067", "10.65.0.27:45067", "172.17.0.1:45067"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:11.293996641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4106543661811297": {
-				"ID":          4106543661811297,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6758233200362769,
-				"StableID":   "nAy9SvKpmu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-				"KeyExpiry":  "2026-11-03T08:29:11Z",
-				"DiscoKey":   "discokey:277e7b4068c75706f44c708f934fd4ada9a540913148db45592b9b314b584d14",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:45067", "10.65.0.27:45067", "172.17.0.1:45067"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:11.293996641Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-			"MachineKey": "mkey:c339b197caf4b4f98296d864e205a3d7be4516b162ebbd0a192c1cc24a15835b",
-			"Peers": [{
-				"ID":         2464159056232422,
-				"StableID":   "nXbcgEH2FL11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-				"DiscoKey":   "discokey:bfcbef81d1854d76765f69223592b65dd024359e9fed85eaee35d090165ab962",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35083", "10.65.0.27:35083", "172.17.0.1:35083"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:07.55166835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7591915242913208,
-				"StableID":   "nK2ziujPH221CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-				"DiscoKey":   "discokey:60639b938125fdaed5d374a1e7dffad383f8bb82ab23b33110bd3d841f8b7d09",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50031", "10.65.0.27:50031", "172.17.0.1:50031"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:08.082887001Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5223679637569051,
-				"StableID":   "ncfSvxCpnh11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-				"DiscoKey":   "discokey:de4bc30de176bc6d616ee4c6b3cdc041681de8b533881eddb4e96ad17ad5c23d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39738", "10.65.0.27:39738", "172.17.0.1:39738"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:08.616660835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8280482218708791,
-				"StableID":   "nzrJV9EFf721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-				"DiscoKey":   "discokey:d1bcb167e33a6396f1392bf62989e8474a85bb96ec825fc892c0ea819c6ece5c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51023", "10.65.0.27:51023", "172.17.0.1:51023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:09.160185455Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4106543661811297,
-				"StableID":   "nzoNCSwr4Z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-				"DiscoKey":   "discokey:c8a7985d4e00f14329e524e42ea0c877563ab6373ab2629fffe1b73377ba1731",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40684", "10.65.0.27:40684", "172.17.0.1:40684"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:09.693529718Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         353283394217762,
-				"StableID":   "nXKXn2A1m311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:0a9f8d86d67b9bea4b8168e8ad2ab694ef1e5871524325aaef1acc81d0dbb400",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59290", "10.65.0.27:59290", "172.17.0.1:59290"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:10.235636827Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5352810715010965,
-				"StableID":   "nAyg38GJoi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:544d5ac13530bc0a65d714f476c5f2a51f9e6d12791324042fb7a73165ec9c05",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:33075", "10.65.0.27:33075", "172.17.0.1:33075"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:10.76799932Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5352810715010965,
-				"StableID":   "nAyg38GJoi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:544d5ac13530bc0a65d714f476c5f2a51f9e6d12791324042fb7a73165ec9c05",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:33075", "10.65.0.27:33075", "172.17.0.1:33075"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:10.76799932Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:14e27d1017697bc5501a5dd9f5873231693fcb4cadf5509aae3bf19ea476c843",
-			"MachineKey": "mkey:e661fd38f3d8e607a858771c39ab09c3137db17c06a8335a48b83e1fc1c47407",
-			"Peers": [{
-				"ID":         2464159056232422,
-				"StableID":   "nXbcgEH2FL11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b8c90f2d92fa55f9278f90f817a50a7385245e8524178aef6d9a4899b7826502",
-				"DiscoKey":   "discokey:bfcbef81d1854d76765f69223592b65dd024359e9fed85eaee35d090165ab962",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:35083", "10.65.0.27:35083", "172.17.0.1:35083"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:07.55166835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7591915242913208,
-				"StableID":   "nK2ziujPH221CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e5d873b41f4a456b606f1cc3627398634a67cc3c31e4f3ca322b08742dfefa71",
-				"DiscoKey":   "discokey:60639b938125fdaed5d374a1e7dffad383f8bb82ab23b33110bd3d841f8b7d09",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50031", "10.65.0.27:50031", "172.17.0.1:50031"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:08.082887001Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5223679637569051,
-				"StableID":   "ncfSvxCpnh11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a60231edbe1eff1b0321c7d9ab379079a287d14f238f9d1e9beb11076ab7f774",
-				"DiscoKey":   "discokey:de4bc30de176bc6d616ee4c6b3cdc041681de8b533881eddb4e96ad17ad5c23d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39738", "10.65.0.27:39738", "172.17.0.1:39738"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:08.616660835Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8280482218708791,
-				"StableID":   "nzrJV9EFf721CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:28e6aee3595a6c311495748ebcc9e5abc51b74837b91ca5a0ff8f022f87ded1a",
-				"DiscoKey":   "discokey:d1bcb167e33a6396f1392bf62989e8474a85bb96ec825fc892c0ea819c6ece5c",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:51023", "10.65.0.27:51023", "172.17.0.1:51023"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:09.160185455Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4106543661811297,
-				"StableID":   "nzoNCSwr4Z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ee4bebb121e33197c336a348c7224d6a4035180165be3a36ed4783974477d216",
-				"DiscoKey":   "discokey:c8a7985d4e00f14329e524e42ea0c877563ab6373ab2629fffe1b73377ba1731",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40684", "10.65.0.27:40684", "172.17.0.1:40684"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:09.693529718Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         353283394217762,
-				"StableID":   "nXKXn2A1m311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:8d31a4e77294643025a33f79e4b1634d835a2e447764a72841c043d17f4e493b",
-				"KeyExpiry":  "2026-11-03T08:29:10Z",
-				"DiscoKey":   "discokey:0a9f8d86d67b9bea4b8168e8ad2ab694ef1e5871524325aaef1acc81d0dbb400",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:59290", "10.65.0.27:59290", "172.17.0.1:59290"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:10.235636827Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6758233200362769,
-				"StableID":   "nAy9SvKpmu11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:4c94c832c43628a334a26b7bfdb2654650d767b41338148fe2c63aad3238cc49",
-				"KeyExpiry":  "2026-11-03T08:29:11Z",
-				"DiscoKey":   "discokey:277e7b4068c75706f44c708f934fd4ada9a540913148db45592b9b314b584d14",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:45067", "10.65.0.27:45067", "172.17.0.1:45067"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:11.293996641Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d1-profile.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d1-profile.hujson
deleted file mode 100644
index 72c5a7a43..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d1-profile.hujson
+++ /dev/null
@@ -1,8837 +0,0 @@
-// nodeattrs-nextdns-d1-profile
-//
-// wildcard nextdns profile selection
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:29:42Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-nextdns-d1-profile",
-	"description":    "wildcard nextdns profile selection",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:29:42.307304961Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                               \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"wildcard nextdns profile selection\",\n    \"id\": \"nodeattrs-nextdns-d1-profile\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"nextdns:abc123\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-nextdns-d1-profile.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["nextdns:abc123"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4185384950428116,
-				"StableID":   "nwLjtzxZgZ11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       4185384950428116,
-				"Key":        "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-				"DiscoKey":   "discokey:f4365a83d69f5ecc2e6cfcba6011322de02eea3354eca9583cd43901274ae746",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55140", "10.65.0.27:55140", "172.17.0.1:55140"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:48.233598354Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-			"MachineKey": "mkey:dea506e43bc198d0485336a8776b97748c813f3af6e5f2e2f4663d82cf91a56c",
-			"Peers": [{
-				"ID":         7292595985686667,
-				"StableID":   "nrt8wZ8qwy11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-				"DiscoKey":   "discokey:2e24c4b7a87018b0f4349b6ed2b52816dcee2b2415333ac7cf7d1106afd0ba60",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55173", "10.65.0.27:55173", "172.17.0.1:55173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:48.699671408Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1381004056414247,
-				"StableID":   "nt9USpdTnB11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-				"DiscoKey":   "discokey:3f37d0b8e0291a2fe00a31cb8a5c115f9064a72fe44e875b88678abf6518cb79",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:45303", "10.65.0.27:45303", "172.17.0.1:45303"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:49.296273918Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6280248185832756,
-				"StableID":   "nX2zUHUL3r11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-				"DiscoKey":   "discokey:f628e6f06a9d229334322ee4ee8ab5fdee53aece32aaed0e496cbde05f922a54",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57326", "10.65.0.27:57326", "172.17.0.1:57326"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:49.768532046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7305191530948659,
-				"StableID":   "nU5w8fzX3z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-				"DiscoKey":   "discokey:e060cf40b9b2074d8f9b081a3a26d47abde744f2a6e24edc50284949fefd864c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:35486", "10.65.0.27:35486", "172.17.0.1:35486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:50.301735466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4715288183911402,
-				"StableID":   "nVWr4FdZpd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-				"KeyExpiry":  "2026-11-03T08:29:50Z",
-				"DiscoKey":   "discokey:a1d334cc8a7981cd9ef3bfc011bd90538c4f68cb3f977924de023e3c39c05f3f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45616", "10.65.0.27:45616", "172.17.0.1:45616"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:50.827533918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1796951976122668,
-				"StableID":   "ndZuk7tq2F11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:7be4fbb6a95a446d567add842b7de7559d8ad8ef6b45479bec8f2bd08936c923",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42034", "10.65.0.27:42034", "172.17.0.1:42034"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:51.358341774Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7450074887430383,
-				"StableID":   "nnkiDPq9B121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:570f6da618459a798c38b58786041b6538cf8fd869e64cb7ef997ff066effc11",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60593", "10.65.0.27:60593", "172.17.0.1:60593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:51.89685017Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4185384950428116": {
-				"ID":          4185384950428116,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7292595985686667,
-				"StableID":   "nrt8wZ8qwy11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       7292595985686667,
-				"Key":        "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-				"DiscoKey":   "discokey:2e24c4b7a87018b0f4349b6ed2b52816dcee2b2415333ac7cf7d1106afd0ba60",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55173", "10.65.0.27:55173", "172.17.0.1:55173"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:29:48.699671408Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-			"MachineKey": "mkey:054f25a325e97f229757839953b53ceb97abbb5df76dd3fa7a4fceb4edaff852",
-			"Peers": [{
-				"ID":         4185384950428116,
-				"StableID":   "nwLjtzxZgZ11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-				"DiscoKey":   "discokey:f4365a83d69f5ecc2e6cfcba6011322de02eea3354eca9583cd43901274ae746",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55140", "10.65.0.27:55140", "172.17.0.1:55140"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:48.233598354Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1381004056414247,
-				"StableID":   "nt9USpdTnB11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-				"DiscoKey":   "discokey:3f37d0b8e0291a2fe00a31cb8a5c115f9064a72fe44e875b88678abf6518cb79",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:45303", "10.65.0.27:45303", "172.17.0.1:45303"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:49.296273918Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6280248185832756,
-				"StableID":   "nX2zUHUL3r11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-				"DiscoKey":   "discokey:f628e6f06a9d229334322ee4ee8ab5fdee53aece32aaed0e496cbde05f922a54",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57326", "10.65.0.27:57326", "172.17.0.1:57326"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:49.768532046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7305191530948659,
-				"StableID":   "nU5w8fzX3z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-				"DiscoKey":   "discokey:e060cf40b9b2074d8f9b081a3a26d47abde744f2a6e24edc50284949fefd864c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:35486", "10.65.0.27:35486", "172.17.0.1:35486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:50.301735466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4715288183911402,
-				"StableID":   "nVWr4FdZpd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-				"KeyExpiry":  "2026-11-03T08:29:50Z",
-				"DiscoKey":   "discokey:a1d334cc8a7981cd9ef3bfc011bd90538c4f68cb3f977924de023e3c39c05f3f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45616", "10.65.0.27:45616", "172.17.0.1:45616"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:50.827533918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1796951976122668,
-				"StableID":   "ndZuk7tq2F11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:7be4fbb6a95a446d567add842b7de7559d8ad8ef6b45479bec8f2bd08936c923",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42034", "10.65.0.27:42034", "172.17.0.1:42034"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:51.358341774Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7450074887430383,
-				"StableID":   "nnkiDPq9B121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:570f6da618459a798c38b58786041b6538cf8fd869e64cb7ef997ff066effc11",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60593", "10.65.0.27:60593", "172.17.0.1:60593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:51.89685017Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7292595985686667": {
-				"ID":          7292595985686667,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4715288183911402,
-				"StableID":   "nVWr4FdZpd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-				"KeyExpiry":  "2026-11-03T08:29:50Z",
-				"DiscoKey":   "discokey:a1d334cc8a7981cd9ef3bfc011bd90538c4f68cb3f977924de023e3c39c05f3f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45616", "10.65.0.27:45616", "172.17.0.1:45616"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:50.827533918Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-			"MachineKey": "mkey:e050cc2762192b190642cabc2ed71d3411b84295c8bb404ff982dc85d8fcaa66",
-			"Peers": [{
-				"ID":         4185384950428116,
-				"StableID":   "nwLjtzxZgZ11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-				"DiscoKey":   "discokey:f4365a83d69f5ecc2e6cfcba6011322de02eea3354eca9583cd43901274ae746",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55140", "10.65.0.27:55140", "172.17.0.1:55140"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:48.233598354Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7292595985686667,
-				"StableID":   "nrt8wZ8qwy11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-				"DiscoKey":   "discokey:2e24c4b7a87018b0f4349b6ed2b52816dcee2b2415333ac7cf7d1106afd0ba60",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55173", "10.65.0.27:55173", "172.17.0.1:55173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:48.699671408Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1381004056414247,
-				"StableID":   "nt9USpdTnB11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-				"DiscoKey":   "discokey:3f37d0b8e0291a2fe00a31cb8a5c115f9064a72fe44e875b88678abf6518cb79",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:45303", "10.65.0.27:45303", "172.17.0.1:45303"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:49.296273918Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6280248185832756,
-				"StableID":   "nX2zUHUL3r11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-				"DiscoKey":   "discokey:f628e6f06a9d229334322ee4ee8ab5fdee53aece32aaed0e496cbde05f922a54",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57326", "10.65.0.27:57326", "172.17.0.1:57326"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:49.768532046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7305191530948659,
-				"StableID":   "nU5w8fzX3z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-				"DiscoKey":   "discokey:e060cf40b9b2074d8f9b081a3a26d47abde744f2a6e24edc50284949fefd864c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:35486", "10.65.0.27:35486", "172.17.0.1:35486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:50.301735466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1796951976122668,
-				"StableID":   "ndZuk7tq2F11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:7be4fbb6a95a446d567add842b7de7559d8ad8ef6b45479bec8f2bd08936c923",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42034", "10.65.0.27:42034", "172.17.0.1:42034"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:51.358341774Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7450074887430383,
-				"StableID":   "nnkiDPq9B121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:570f6da618459a798c38b58786041b6538cf8fd869e64cb7ef997ff066effc11",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60593", "10.65.0.27:60593", "172.17.0.1:60593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:51.89685017Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1381004056414247,
-				"StableID":   "nt9USpdTnB11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1381004056414247,
-				"Key":        "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-				"DiscoKey":   "discokey:3f37d0b8e0291a2fe00a31cb8a5c115f9064a72fe44e875b88678abf6518cb79",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:45303", "10.65.0.27:45303", "172.17.0.1:45303"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:49.296273918Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-			"MachineKey": "mkey:016eb8c219719849b51e69f79f4a9b86c9f82fda8dd5adc94c42543fb30b0a5a",
-			"Peers": [{
-				"ID":         4185384950428116,
-				"StableID":   "nwLjtzxZgZ11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-				"DiscoKey":   "discokey:f4365a83d69f5ecc2e6cfcba6011322de02eea3354eca9583cd43901274ae746",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55140", "10.65.0.27:55140", "172.17.0.1:55140"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:48.233598354Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7292595985686667,
-				"StableID":   "nrt8wZ8qwy11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-				"DiscoKey":   "discokey:2e24c4b7a87018b0f4349b6ed2b52816dcee2b2415333ac7cf7d1106afd0ba60",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55173", "10.65.0.27:55173", "172.17.0.1:55173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:48.699671408Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6280248185832756,
-				"StableID":   "nX2zUHUL3r11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-				"DiscoKey":   "discokey:f628e6f06a9d229334322ee4ee8ab5fdee53aece32aaed0e496cbde05f922a54",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57326", "10.65.0.27:57326", "172.17.0.1:57326"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:49.768532046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7305191530948659,
-				"StableID":   "nU5w8fzX3z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-				"DiscoKey":   "discokey:e060cf40b9b2074d8f9b081a3a26d47abde744f2a6e24edc50284949fefd864c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:35486", "10.65.0.27:35486", "172.17.0.1:35486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:50.301735466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4715288183911402,
-				"StableID":   "nVWr4FdZpd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-				"KeyExpiry":  "2026-11-03T08:29:50Z",
-				"DiscoKey":   "discokey:a1d334cc8a7981cd9ef3bfc011bd90538c4f68cb3f977924de023e3c39c05f3f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45616", "10.65.0.27:45616", "172.17.0.1:45616"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:50.827533918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1796951976122668,
-				"StableID":   "ndZuk7tq2F11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:7be4fbb6a95a446d567add842b7de7559d8ad8ef6b45479bec8f2bd08936c923",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42034", "10.65.0.27:42034", "172.17.0.1:42034"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:51.358341774Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7450074887430383,
-				"StableID":   "nnkiDPq9B121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:570f6da618459a798c38b58786041b6538cf8fd869e64cb7ef997ff066effc11",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60593", "10.65.0.27:60593", "172.17.0.1:60593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:51.89685017Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1381004056414247": {
-				"ID":          1381004056414247,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6280248185832756,
-				"StableID":   "nX2zUHUL3r11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       6280248185832756,
-				"Key":        "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-				"DiscoKey":   "discokey:f628e6f06a9d229334322ee4ee8ab5fdee53aece32aaed0e496cbde05f922a54",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57326", "10.65.0.27:57326", "172.17.0.1:57326"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:29:49.768532046Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-			"MachineKey": "mkey:fbe91b8d61cf5d340198ea61bb0bfe54655f4c3fb7e87ff3ba6b3cf57ca8d83a",
-			"Peers": [{
-				"ID":         4185384950428116,
-				"StableID":   "nwLjtzxZgZ11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-				"DiscoKey":   "discokey:f4365a83d69f5ecc2e6cfcba6011322de02eea3354eca9583cd43901274ae746",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55140", "10.65.0.27:55140", "172.17.0.1:55140"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:48.233598354Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7292595985686667,
-				"StableID":   "nrt8wZ8qwy11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-				"DiscoKey":   "discokey:2e24c4b7a87018b0f4349b6ed2b52816dcee2b2415333ac7cf7d1106afd0ba60",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55173", "10.65.0.27:55173", "172.17.0.1:55173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:48.699671408Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1381004056414247,
-				"StableID":   "nt9USpdTnB11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-				"DiscoKey":   "discokey:3f37d0b8e0291a2fe00a31cb8a5c115f9064a72fe44e875b88678abf6518cb79",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:45303", "10.65.0.27:45303", "172.17.0.1:45303"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:49.296273918Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7305191530948659,
-				"StableID":   "nU5w8fzX3z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-				"DiscoKey":   "discokey:e060cf40b9b2074d8f9b081a3a26d47abde744f2a6e24edc50284949fefd864c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:35486", "10.65.0.27:35486", "172.17.0.1:35486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:50.301735466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4715288183911402,
-				"StableID":   "nVWr4FdZpd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-				"KeyExpiry":  "2026-11-03T08:29:50Z",
-				"DiscoKey":   "discokey:a1d334cc8a7981cd9ef3bfc011bd90538c4f68cb3f977924de023e3c39c05f3f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45616", "10.65.0.27:45616", "172.17.0.1:45616"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:50.827533918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1796951976122668,
-				"StableID":   "ndZuk7tq2F11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:7be4fbb6a95a446d567add842b7de7559d8ad8ef6b45479bec8f2bd08936c923",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42034", "10.65.0.27:42034", "172.17.0.1:42034"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:51.358341774Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7450074887430383,
-				"StableID":   "nnkiDPq9B121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:570f6da618459a798c38b58786041b6538cf8fd869e64cb7ef997ff066effc11",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60593", "10.65.0.27:60593", "172.17.0.1:60593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:51.89685017Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6280248185832756": {
-				"ID":          6280248185832756,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7305191530948659,
-				"StableID":   "nU5w8fzX3z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7305191530948659,
-				"Key":        "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-				"DiscoKey":   "discokey:e060cf40b9b2074d8f9b081a3a26d47abde744f2a6e24edc50284949fefd864c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:35486", "10.65.0.27:35486", "172.17.0.1:35486"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:50.301735466Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-			"MachineKey": "mkey:9aa3e6c01609aaa13710bdec0345e3d3e06c09c63597da50e1cd91f3895b9830",
-			"Peers": [{
-				"ID":         4185384950428116,
-				"StableID":   "nwLjtzxZgZ11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-				"DiscoKey":   "discokey:f4365a83d69f5ecc2e6cfcba6011322de02eea3354eca9583cd43901274ae746",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55140", "10.65.0.27:55140", "172.17.0.1:55140"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:48.233598354Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7292595985686667,
-				"StableID":   "nrt8wZ8qwy11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-				"DiscoKey":   "discokey:2e24c4b7a87018b0f4349b6ed2b52816dcee2b2415333ac7cf7d1106afd0ba60",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55173", "10.65.0.27:55173", "172.17.0.1:55173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:48.699671408Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1381004056414247,
-				"StableID":   "nt9USpdTnB11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-				"DiscoKey":   "discokey:3f37d0b8e0291a2fe00a31cb8a5c115f9064a72fe44e875b88678abf6518cb79",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:45303", "10.65.0.27:45303", "172.17.0.1:45303"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:49.296273918Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6280248185832756,
-				"StableID":   "nX2zUHUL3r11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-				"DiscoKey":   "discokey:f628e6f06a9d229334322ee4ee8ab5fdee53aece32aaed0e496cbde05f922a54",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57326", "10.65.0.27:57326", "172.17.0.1:57326"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:49.768532046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4715288183911402,
-				"StableID":   "nVWr4FdZpd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-				"KeyExpiry":  "2026-11-03T08:29:50Z",
-				"DiscoKey":   "discokey:a1d334cc8a7981cd9ef3bfc011bd90538c4f68cb3f977924de023e3c39c05f3f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45616", "10.65.0.27:45616", "172.17.0.1:45616"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:50.827533918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1796951976122668,
-				"StableID":   "ndZuk7tq2F11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:7be4fbb6a95a446d567add842b7de7559d8ad8ef6b45479bec8f2bd08936c923",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42034", "10.65.0.27:42034", "172.17.0.1:42034"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:51.358341774Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7450074887430383,
-				"StableID":   "nnkiDPq9B121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:570f6da618459a798c38b58786041b6538cf8fd869e64cb7ef997ff066effc11",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60593", "10.65.0.27:60593", "172.17.0.1:60593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:51.89685017Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7305191530948659": {
-				"ID":          7305191530948659,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7450074887430383,
-				"StableID":   "nnkiDPq9B121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:570f6da618459a798c38b58786041b6538cf8fd869e64cb7ef997ff066effc11",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60593", "10.65.0.27:60593", "172.17.0.1:60593"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:51.89685017Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-			"MachineKey": "mkey:33052d78064aac43df13a78b5e2659d631dea1f00c10ef60634ae2656d6b1848",
-			"Peers": [{
-				"ID":         4185384950428116,
-				"StableID":   "nwLjtzxZgZ11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-				"DiscoKey":   "discokey:f4365a83d69f5ecc2e6cfcba6011322de02eea3354eca9583cd43901274ae746",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55140", "10.65.0.27:55140", "172.17.0.1:55140"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:48.233598354Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7292595985686667,
-				"StableID":   "nrt8wZ8qwy11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-				"DiscoKey":   "discokey:2e24c4b7a87018b0f4349b6ed2b52816dcee2b2415333ac7cf7d1106afd0ba60",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55173", "10.65.0.27:55173", "172.17.0.1:55173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:48.699671408Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1381004056414247,
-				"StableID":   "nt9USpdTnB11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-				"DiscoKey":   "discokey:3f37d0b8e0291a2fe00a31cb8a5c115f9064a72fe44e875b88678abf6518cb79",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:45303", "10.65.0.27:45303", "172.17.0.1:45303"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:49.296273918Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6280248185832756,
-				"StableID":   "nX2zUHUL3r11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-				"DiscoKey":   "discokey:f628e6f06a9d229334322ee4ee8ab5fdee53aece32aaed0e496cbde05f922a54",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57326", "10.65.0.27:57326", "172.17.0.1:57326"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:49.768532046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7305191530948659,
-				"StableID":   "nU5w8fzX3z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-				"DiscoKey":   "discokey:e060cf40b9b2074d8f9b081a3a26d47abde744f2a6e24edc50284949fefd864c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:35486", "10.65.0.27:35486", "172.17.0.1:35486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:50.301735466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4715288183911402,
-				"StableID":   "nVWr4FdZpd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-				"KeyExpiry":  "2026-11-03T08:29:50Z",
-				"DiscoKey":   "discokey:a1d334cc8a7981cd9ef3bfc011bd90538c4f68cb3f977924de023e3c39c05f3f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45616", "10.65.0.27:45616", "172.17.0.1:45616"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:50.827533918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1796951976122668,
-				"StableID":   "ndZuk7tq2F11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:7be4fbb6a95a446d567add842b7de7559d8ad8ef6b45479bec8f2bd08936c923",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42034", "10.65.0.27:42034", "172.17.0.1:42034"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:29:51.358341774Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1796951976122668,
-				"StableID":   "ndZuk7tq2F11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:7be4fbb6a95a446d567add842b7de7559d8ad8ef6b45479bec8f2bd08936c923",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42034", "10.65.0.27:42034", "172.17.0.1:42034"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:29:51.358341774Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:420a9b426ec4b6e14a02b53e89e2805a701f02738180715a20480cc2a3e2f12d",
-			"MachineKey": "mkey:20bd9526ff71b5040f5ebd378b4032ea72c73881a4e7c39ae9a7f88296116c13",
-			"Peers": [{
-				"ID":         4185384950428116,
-				"StableID":   "nwLjtzxZgZ11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:289c2a7c76285d55062881ca4a70db52312dd81640dbcb03cfa9c36296b3d677",
-				"DiscoKey":   "discokey:f4365a83d69f5ecc2e6cfcba6011322de02eea3354eca9583cd43901274ae746",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55140", "10.65.0.27:55140", "172.17.0.1:55140"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:29:48.233598354Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7292595985686667,
-				"StableID":   "nrt8wZ8qwy11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e28091589d6759cf4d6554a0dda517fb2346e59177015214452033d887f39138",
-				"DiscoKey":   "discokey:2e24c4b7a87018b0f4349b6ed2b52816dcee2b2415333ac7cf7d1106afd0ba60",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:55173", "10.65.0.27:55173", "172.17.0.1:55173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:29:48.699671408Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1381004056414247,
-				"StableID":   "nt9USpdTnB11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:408218918b616aa6974ef33ce212016b589f7230a7105d137fa71cbf562a355c",
-				"DiscoKey":   "discokey:3f37d0b8e0291a2fe00a31cb8a5c115f9064a72fe44e875b88678abf6518cb79",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:45303", "10.65.0.27:45303", "172.17.0.1:45303"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:29:49.296273918Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6280248185832756,
-				"StableID":   "nX2zUHUL3r11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:493dc7025c154591894a104b62d339c61c976f65c42043678c3ea90bdd8b5d59",
-				"DiscoKey":   "discokey:f628e6f06a9d229334322ee4ee8ab5fdee53aece32aaed0e496cbde05f922a54",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57326", "10.65.0.27:57326", "172.17.0.1:57326"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:29:49.768532046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7305191530948659,
-				"StableID":   "nU5w8fzX3z11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4d9fefed94057cb3f5f11d81f79ad3e5838ddfd5862e1609ce02b7c008f3ae07",
-				"DiscoKey":   "discokey:e060cf40b9b2074d8f9b081a3a26d47abde744f2a6e24edc50284949fefd864c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:35486", "10.65.0.27:35486", "172.17.0.1:35486"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:29:50.301735466Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4715288183911402,
-				"StableID":   "nVWr4FdZpd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:b060bfafa4d516fb6636e2ad1317e7fd780b26fce7058edcdae068008ee2a749",
-				"KeyExpiry":  "2026-11-03T08:29:50Z",
-				"DiscoKey":   "discokey:a1d334cc8a7981cd9ef3bfc011bd90538c4f68cb3f977924de023e3c39c05f3f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:45616", "10.65.0.27:45616", "172.17.0.1:45616"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:29:50.827533918Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7450074887430383,
-				"StableID":   "nnkiDPq9B121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:371736cdde6adc4ea0e32232311a459af33628d563e13a994e174fb092bb6d35",
-				"KeyExpiry":  "2026-11-03T08:29:51Z",
-				"DiscoKey":   "discokey:570f6da618459a798c38b58786041b6538cf8fd869e64cb7ef997ff066effc11",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60593", "10.65.0.27:60593", "172.17.0.1:60593"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:29:51.89685017Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d2-no-device-info.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d2-no-device-info.hujson
deleted file mode 100644
index 6ac0b5ff0..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d2-no-device-info.hujson
+++ /dev/null
@@ -1,8852 +0,0 @@
-// nodeattrs-nextdns-d2-no-device-info
-//
-// wildcard nextdns:no-device-info
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:30:22Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-nextdns-d2-no-device-info",
-	"description":    "wildcard nextdns:no-device-info",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:30:22.813665876Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                      \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"wildcard nextdns:no-device-info\",\n    \"id\": \"nodeattrs-nextdns-d2-no-device-info\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"nextdns:abc123\",\n                    \"nextdns:no-device-info\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-nextdns-d2-no-device-info.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["nextdns:abc123", "nextdns:no-device-info"], "target": ["*"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5315613529988537,
-				"StableID":   "nQGYBv9TWi11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       5315613529988537,
-				"Key":        "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-				"DiscoKey":   "discokey:a22da7fded6585f466826c720faac0a108903f70387838be0fe112264f112b74",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46579", "10.65.0.27:46579", "172.17.0.1:46579"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:30:28.227159962Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"nextdns:no-device-info":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"nextdns:no-device-info",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-			"MachineKey": "mkey:158f667a3d9c67327279f04088f311d343fefbb24929b3bc6ddd4fcf68bc0d1d",
-			"Peers": [{
-				"ID":         8277446784134481,
-				"StableID":   "nasgXUVsd721CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-				"DiscoKey":   "discokey:b5e49e6e4d3460084bff4f975d8e7b2e69c76a3524e8fc2f1f29fd20ff5e1708",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:56916", "10.65.0.27:56916", "172.17.0.1:56916"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:30:28.787726916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6814299636336647,
-				"StableID":   "nxhdPb6DDv11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-				"DiscoKey":   "discokey:47c8136e91bd6ecb9f5c2523699d446be1f3e880f4aa9eb213b70648643aae04",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34098", "10.65.0.27:34098", "172.17.0.1:34098"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:30:29.312547221Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7183122621232690,
-				"StableID":   "nDUFb9TF6y11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-				"DiscoKey":   "discokey:16195ef3dac2fd69ce8331b5aabe9a28050fd163298cff28233db64636cdae74",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43726", "10.65.0.27:43726", "172.17.0.1:43726"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:30:29.854007521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6365254161769556,
-				"StableID":   "nwJEV8Sqhr11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-				"DiscoKey":   "discokey:2df542a26fce6dad5e821a59c9d97806aeed14cd56924a4c4a567e7d20453d59",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37481", "10.65.0.27:37481", "172.17.0.1:37481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:30:30.406895442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5400176855827962,
-				"StableID":   "nDJLiMVkAj11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-				"KeyExpiry":  "2026-11-03T08:30:30Z",
-				"DiscoKey":   "discokey:d2d5ee44ff2f3f9fead036898244b89053a27d05941a8d31cce1002d9c74d97f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49252", "10.65.0.27:49252", "172.17.0.1:49252"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:30:30.937221402Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1731452147850985,
-				"StableID":   "n698E6KBXE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-				"KeyExpiry":  "2026-11-03T08:30:31Z",
-				"DiscoKey":   "discokey:f5bbf2046c650b0862e0cf6b308003283d1ba7e93b5b5af939601fd4b2f74d08",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38541", "10.65.0.27:38541", "172.17.0.1:38541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:30:31.471286682Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2247734144242216,
-				"StableID":   "nPciKYA1ZJ11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-				"KeyExpiry":  "2026-11-03T08:30:32Z",
-				"DiscoKey":   "discokey:73744eeaa40a1fb9e0b1800235e2028faa89654d1d39eab50f9fdb9eb309de4c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:55591", "10.65.0.27:55591", "172.17.0.1:55591"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:30:32.011432288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5315613529988537": {
-				"ID":          5315613529988537,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8277446784134481,
-				"StableID":   "nasgXUVsd721CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       8277446784134481,
-				"Key":        "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-				"DiscoKey":   "discokey:b5e49e6e4d3460084bff4f975d8e7b2e69c76a3524e8fc2f1f29fd20ff5e1708",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:56916", "10.65.0.27:56916", "172.17.0.1:56916"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:30:28.787726916Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"nextdns:no-device-info":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"nextdns:no-device-info",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-			"MachineKey": "mkey:f343ddfff930f4d578b25a2169adb456da00f39d45efd1af9158df36c05d647d",
-			"Peers": [{
-				"ID":         5315613529988537,
-				"StableID":   "nQGYBv9TWi11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-				"DiscoKey":   "discokey:a22da7fded6585f466826c720faac0a108903f70387838be0fe112264f112b74",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46579", "10.65.0.27:46579", "172.17.0.1:46579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:30:28.227159962Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6814299636336647,
-				"StableID":   "nxhdPb6DDv11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-				"DiscoKey":   "discokey:47c8136e91bd6ecb9f5c2523699d446be1f3e880f4aa9eb213b70648643aae04",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34098", "10.65.0.27:34098", "172.17.0.1:34098"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:30:29.312547221Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7183122621232690,
-				"StableID":   "nDUFb9TF6y11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-				"DiscoKey":   "discokey:16195ef3dac2fd69ce8331b5aabe9a28050fd163298cff28233db64636cdae74",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43726", "10.65.0.27:43726", "172.17.0.1:43726"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:30:29.854007521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6365254161769556,
-				"StableID":   "nwJEV8Sqhr11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-				"DiscoKey":   "discokey:2df542a26fce6dad5e821a59c9d97806aeed14cd56924a4c4a567e7d20453d59",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37481", "10.65.0.27:37481", "172.17.0.1:37481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:30:30.406895442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5400176855827962,
-				"StableID":   "nDJLiMVkAj11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-				"KeyExpiry":  "2026-11-03T08:30:30Z",
-				"DiscoKey":   "discokey:d2d5ee44ff2f3f9fead036898244b89053a27d05941a8d31cce1002d9c74d97f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49252", "10.65.0.27:49252", "172.17.0.1:49252"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:30:30.937221402Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1731452147850985,
-				"StableID":   "n698E6KBXE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-				"KeyExpiry":  "2026-11-03T08:30:31Z",
-				"DiscoKey":   "discokey:f5bbf2046c650b0862e0cf6b308003283d1ba7e93b5b5af939601fd4b2f74d08",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38541", "10.65.0.27:38541", "172.17.0.1:38541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:30:31.471286682Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2247734144242216,
-				"StableID":   "nPciKYA1ZJ11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-				"KeyExpiry":  "2026-11-03T08:30:32Z",
-				"DiscoKey":   "discokey:73744eeaa40a1fb9e0b1800235e2028faa89654d1d39eab50f9fdb9eb309de4c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:55591", "10.65.0.27:55591", "172.17.0.1:55591"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:30:32.011432288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8277446784134481": {
-				"ID":          8277446784134481,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5400176855827962,
-				"StableID":   "nDJLiMVkAj11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-				"KeyExpiry":  "2026-11-03T08:30:30Z",
-				"DiscoKey":   "discokey:d2d5ee44ff2f3f9fead036898244b89053a27d05941a8d31cce1002d9c74d97f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49252", "10.65.0.27:49252", "172.17.0.1:49252"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:30:30.937221402Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"nextdns:no-device-info":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"nextdns:no-device-info",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-			"MachineKey": "mkey:2aafc8f03bb7287773a489d3815c58cecb79798ff4fe45c81f69f2a15c391520",
-			"Peers": [{
-				"ID":         5315613529988537,
-				"StableID":   "nQGYBv9TWi11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-				"DiscoKey":   "discokey:a22da7fded6585f466826c720faac0a108903f70387838be0fe112264f112b74",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46579", "10.65.0.27:46579", "172.17.0.1:46579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:30:28.227159962Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8277446784134481,
-				"StableID":   "nasgXUVsd721CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-				"DiscoKey":   "discokey:b5e49e6e4d3460084bff4f975d8e7b2e69c76a3524e8fc2f1f29fd20ff5e1708",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:56916", "10.65.0.27:56916", "172.17.0.1:56916"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:30:28.787726916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6814299636336647,
-				"StableID":   "nxhdPb6DDv11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-				"DiscoKey":   "discokey:47c8136e91bd6ecb9f5c2523699d446be1f3e880f4aa9eb213b70648643aae04",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34098", "10.65.0.27:34098", "172.17.0.1:34098"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:30:29.312547221Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7183122621232690,
-				"StableID":   "nDUFb9TF6y11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-				"DiscoKey":   "discokey:16195ef3dac2fd69ce8331b5aabe9a28050fd163298cff28233db64636cdae74",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43726", "10.65.0.27:43726", "172.17.0.1:43726"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:30:29.854007521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6365254161769556,
-				"StableID":   "nwJEV8Sqhr11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-				"DiscoKey":   "discokey:2df542a26fce6dad5e821a59c9d97806aeed14cd56924a4c4a567e7d20453d59",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37481", "10.65.0.27:37481", "172.17.0.1:37481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:30:30.406895442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1731452147850985,
-				"StableID":   "n698E6KBXE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-				"KeyExpiry":  "2026-11-03T08:30:31Z",
-				"DiscoKey":   "discokey:f5bbf2046c650b0862e0cf6b308003283d1ba7e93b5b5af939601fd4b2f74d08",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38541", "10.65.0.27:38541", "172.17.0.1:38541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:30:31.471286682Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2247734144242216,
-				"StableID":   "nPciKYA1ZJ11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-				"KeyExpiry":  "2026-11-03T08:30:32Z",
-				"DiscoKey":   "discokey:73744eeaa40a1fb9e0b1800235e2028faa89654d1d39eab50f9fdb9eb309de4c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:55591", "10.65.0.27:55591", "172.17.0.1:55591"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:30:32.011432288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6814299636336647,
-				"StableID":   "nxhdPb6DDv11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       6814299636336647,
-				"Key":        "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-				"DiscoKey":   "discokey:47c8136e91bd6ecb9f5c2523699d446be1f3e880f4aa9eb213b70648643aae04",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34098", "10.65.0.27:34098", "172.17.0.1:34098"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:30:29.312547221Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"nextdns:no-device-info":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"nextdns:no-device-info",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-			"MachineKey": "mkey:5357b79e10cb81dddf826621c403b88a53a5328445199528386df8edc6bc0d57",
-			"Peers": [{
-				"ID":         5315613529988537,
-				"StableID":   "nQGYBv9TWi11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-				"DiscoKey":   "discokey:a22da7fded6585f466826c720faac0a108903f70387838be0fe112264f112b74",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46579", "10.65.0.27:46579", "172.17.0.1:46579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:30:28.227159962Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8277446784134481,
-				"StableID":   "nasgXUVsd721CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-				"DiscoKey":   "discokey:b5e49e6e4d3460084bff4f975d8e7b2e69c76a3524e8fc2f1f29fd20ff5e1708",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:56916", "10.65.0.27:56916", "172.17.0.1:56916"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:30:28.787726916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7183122621232690,
-				"StableID":   "nDUFb9TF6y11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-				"DiscoKey":   "discokey:16195ef3dac2fd69ce8331b5aabe9a28050fd163298cff28233db64636cdae74",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43726", "10.65.0.27:43726", "172.17.0.1:43726"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:30:29.854007521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6365254161769556,
-				"StableID":   "nwJEV8Sqhr11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-				"DiscoKey":   "discokey:2df542a26fce6dad5e821a59c9d97806aeed14cd56924a4c4a567e7d20453d59",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37481", "10.65.0.27:37481", "172.17.0.1:37481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:30:30.406895442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5400176855827962,
-				"StableID":   "nDJLiMVkAj11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-				"KeyExpiry":  "2026-11-03T08:30:30Z",
-				"DiscoKey":   "discokey:d2d5ee44ff2f3f9fead036898244b89053a27d05941a8d31cce1002d9c74d97f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49252", "10.65.0.27:49252", "172.17.0.1:49252"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:30:30.937221402Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1731452147850985,
-				"StableID":   "n698E6KBXE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-				"KeyExpiry":  "2026-11-03T08:30:31Z",
-				"DiscoKey":   "discokey:f5bbf2046c650b0862e0cf6b308003283d1ba7e93b5b5af939601fd4b2f74d08",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38541", "10.65.0.27:38541", "172.17.0.1:38541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:30:31.471286682Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2247734144242216,
-				"StableID":   "nPciKYA1ZJ11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-				"KeyExpiry":  "2026-11-03T08:30:32Z",
-				"DiscoKey":   "discokey:73744eeaa40a1fb9e0b1800235e2028faa89654d1d39eab50f9fdb9eb309de4c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:55591", "10.65.0.27:55591", "172.17.0.1:55591"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:30:32.011432288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6814299636336647": {
-				"ID":          6814299636336647,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7183122621232690,
-				"StableID":   "nDUFb9TF6y11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       7183122621232690,
-				"Key":        "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-				"DiscoKey":   "discokey:16195ef3dac2fd69ce8331b5aabe9a28050fd163298cff28233db64636cdae74",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43726", "10.65.0.27:43726", "172.17.0.1:43726"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:30:29.854007521Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"nextdns:no-device-info":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"nextdns:no-device-info",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-			"MachineKey": "mkey:486f400ae4f239a2e71778e17515bf9240b2a9f4cf2acadc6747032320e03a63",
-			"Peers": [{
-				"ID":         5315613529988537,
-				"StableID":   "nQGYBv9TWi11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-				"DiscoKey":   "discokey:a22da7fded6585f466826c720faac0a108903f70387838be0fe112264f112b74",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46579", "10.65.0.27:46579", "172.17.0.1:46579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:30:28.227159962Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8277446784134481,
-				"StableID":   "nasgXUVsd721CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-				"DiscoKey":   "discokey:b5e49e6e4d3460084bff4f975d8e7b2e69c76a3524e8fc2f1f29fd20ff5e1708",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:56916", "10.65.0.27:56916", "172.17.0.1:56916"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:30:28.787726916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6814299636336647,
-				"StableID":   "nxhdPb6DDv11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-				"DiscoKey":   "discokey:47c8136e91bd6ecb9f5c2523699d446be1f3e880f4aa9eb213b70648643aae04",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34098", "10.65.0.27:34098", "172.17.0.1:34098"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:30:29.312547221Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6365254161769556,
-				"StableID":   "nwJEV8Sqhr11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-				"DiscoKey":   "discokey:2df542a26fce6dad5e821a59c9d97806aeed14cd56924a4c4a567e7d20453d59",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37481", "10.65.0.27:37481", "172.17.0.1:37481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:30:30.406895442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5400176855827962,
-				"StableID":   "nDJLiMVkAj11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-				"KeyExpiry":  "2026-11-03T08:30:30Z",
-				"DiscoKey":   "discokey:d2d5ee44ff2f3f9fead036898244b89053a27d05941a8d31cce1002d9c74d97f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49252", "10.65.0.27:49252", "172.17.0.1:49252"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:30:30.937221402Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1731452147850985,
-				"StableID":   "n698E6KBXE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-				"KeyExpiry":  "2026-11-03T08:30:31Z",
-				"DiscoKey":   "discokey:f5bbf2046c650b0862e0cf6b308003283d1ba7e93b5b5af939601fd4b2f74d08",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38541", "10.65.0.27:38541", "172.17.0.1:38541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:30:31.471286682Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2247734144242216,
-				"StableID":   "nPciKYA1ZJ11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-				"KeyExpiry":  "2026-11-03T08:30:32Z",
-				"DiscoKey":   "discokey:73744eeaa40a1fb9e0b1800235e2028faa89654d1d39eab50f9fdb9eb309de4c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:55591", "10.65.0.27:55591", "172.17.0.1:55591"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:30:32.011432288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7183122621232690": {
-				"ID":          7183122621232690,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6365254161769556,
-				"StableID":   "nwJEV8Sqhr11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       6365254161769556,
-				"Key":        "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-				"DiscoKey":   "discokey:2df542a26fce6dad5e821a59c9d97806aeed14cd56924a4c4a567e7d20453d59",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37481", "10.65.0.27:37481", "172.17.0.1:37481"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:30:30.406895442Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"nextdns:no-device-info":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"nextdns:no-device-info",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-			"MachineKey": "mkey:767cf4268f1751d4904379f7323bd3e229ecf6e07d815ed472cfd3212bbe8009",
-			"Peers": [{
-				"ID":         5315613529988537,
-				"StableID":   "nQGYBv9TWi11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-				"DiscoKey":   "discokey:a22da7fded6585f466826c720faac0a108903f70387838be0fe112264f112b74",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46579", "10.65.0.27:46579", "172.17.0.1:46579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:30:28.227159962Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8277446784134481,
-				"StableID":   "nasgXUVsd721CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-				"DiscoKey":   "discokey:b5e49e6e4d3460084bff4f975d8e7b2e69c76a3524e8fc2f1f29fd20ff5e1708",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:56916", "10.65.0.27:56916", "172.17.0.1:56916"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:30:28.787726916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6814299636336647,
-				"StableID":   "nxhdPb6DDv11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-				"DiscoKey":   "discokey:47c8136e91bd6ecb9f5c2523699d446be1f3e880f4aa9eb213b70648643aae04",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34098", "10.65.0.27:34098", "172.17.0.1:34098"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:30:29.312547221Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7183122621232690,
-				"StableID":   "nDUFb9TF6y11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-				"DiscoKey":   "discokey:16195ef3dac2fd69ce8331b5aabe9a28050fd163298cff28233db64636cdae74",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43726", "10.65.0.27:43726", "172.17.0.1:43726"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:30:29.854007521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5400176855827962,
-				"StableID":   "nDJLiMVkAj11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-				"KeyExpiry":  "2026-11-03T08:30:30Z",
-				"DiscoKey":   "discokey:d2d5ee44ff2f3f9fead036898244b89053a27d05941a8d31cce1002d9c74d97f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49252", "10.65.0.27:49252", "172.17.0.1:49252"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:30:30.937221402Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1731452147850985,
-				"StableID":   "n698E6KBXE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-				"KeyExpiry":  "2026-11-03T08:30:31Z",
-				"DiscoKey":   "discokey:f5bbf2046c650b0862e0cf6b308003283d1ba7e93b5b5af939601fd4b2f74d08",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38541", "10.65.0.27:38541", "172.17.0.1:38541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:30:31.471286682Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2247734144242216,
-				"StableID":   "nPciKYA1ZJ11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-				"KeyExpiry":  "2026-11-03T08:30:32Z",
-				"DiscoKey":   "discokey:73744eeaa40a1fb9e0b1800235e2028faa89654d1d39eab50f9fdb9eb309de4c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:55591", "10.65.0.27:55591", "172.17.0.1:55591"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:30:32.011432288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6365254161769556": {
-				"ID":          6365254161769556,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2247734144242216,
-				"StableID":   "nPciKYA1ZJ11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-				"KeyExpiry":  "2026-11-03T08:30:32Z",
-				"DiscoKey":   "discokey:73744eeaa40a1fb9e0b1800235e2028faa89654d1d39eab50f9fdb9eb309de4c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:55591", "10.65.0.27:55591", "172.17.0.1:55591"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:30:32.011432288Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"nextdns:no-device-info":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"nextdns:no-device-info",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-			"MachineKey": "mkey:640c2a5cdca0ce1b6d029b7e3178d5564bef124ebf4c32c0aa7cc2c695a76b40",
-			"Peers": [{
-				"ID":         5315613529988537,
-				"StableID":   "nQGYBv9TWi11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-				"DiscoKey":   "discokey:a22da7fded6585f466826c720faac0a108903f70387838be0fe112264f112b74",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46579", "10.65.0.27:46579", "172.17.0.1:46579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:30:28.227159962Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8277446784134481,
-				"StableID":   "nasgXUVsd721CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-				"DiscoKey":   "discokey:b5e49e6e4d3460084bff4f975d8e7b2e69c76a3524e8fc2f1f29fd20ff5e1708",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:56916", "10.65.0.27:56916", "172.17.0.1:56916"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:30:28.787726916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6814299636336647,
-				"StableID":   "nxhdPb6DDv11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-				"DiscoKey":   "discokey:47c8136e91bd6ecb9f5c2523699d446be1f3e880f4aa9eb213b70648643aae04",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34098", "10.65.0.27:34098", "172.17.0.1:34098"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:30:29.312547221Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7183122621232690,
-				"StableID":   "nDUFb9TF6y11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-				"DiscoKey":   "discokey:16195ef3dac2fd69ce8331b5aabe9a28050fd163298cff28233db64636cdae74",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43726", "10.65.0.27:43726", "172.17.0.1:43726"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:30:29.854007521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6365254161769556,
-				"StableID":   "nwJEV8Sqhr11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-				"DiscoKey":   "discokey:2df542a26fce6dad5e821a59c9d97806aeed14cd56924a4c4a567e7d20453d59",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37481", "10.65.0.27:37481", "172.17.0.1:37481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:30:30.406895442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5400176855827962,
-				"StableID":   "nDJLiMVkAj11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-				"KeyExpiry":  "2026-11-03T08:30:30Z",
-				"DiscoKey":   "discokey:d2d5ee44ff2f3f9fead036898244b89053a27d05941a8d31cce1002d9c74d97f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49252", "10.65.0.27:49252", "172.17.0.1:49252"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:30:30.937221402Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1731452147850985,
-				"StableID":   "n698E6KBXE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-				"KeyExpiry":  "2026-11-03T08:30:31Z",
-				"DiscoKey":   "discokey:f5bbf2046c650b0862e0cf6b308003283d1ba7e93b5b5af939601fd4b2f74d08",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38541", "10.65.0.27:38541", "172.17.0.1:38541"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:30:31.471286682Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1731452147850985,
-				"StableID":   "n698E6KBXE11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-				"KeyExpiry":  "2026-11-03T08:30:31Z",
-				"DiscoKey":   "discokey:f5bbf2046c650b0862e0cf6b308003283d1ba7e93b5b5af939601fd4b2f74d08",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:38541", "10.65.0.27:38541", "172.17.0.1:38541"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:30:31.471286682Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:abc123":                         null,
-					"nextdns:no-device-info":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:abc123",
-				"nextdns:no-device-info",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a06ad59282b4b07355ab2091bdc2f345957d046df3d86f29b9778fa4840cd760",
-			"MachineKey": "mkey:9f48d6cffb94db8db2c8fbf6c86e1859ef6d891161e24bef8bb7a6e2b190082a",
-			"Peers": [{
-				"ID":         5315613529988537,
-				"StableID":   "nQGYBv9TWi11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:977f05f7932f3c28ffdb37153619af3c97002d0afb606319719a1fa7c808b83b",
-				"DiscoKey":   "discokey:a22da7fded6585f466826c720faac0a108903f70387838be0fe112264f112b74",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:46579", "10.65.0.27:46579", "172.17.0.1:46579"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:30:28.227159962Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8277446784134481,
-				"StableID":   "nasgXUVsd721CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1fa306ab5b3591d3dbe7d4fbb8de7e2407225b1cf301b6b4c77f5e0595a0b970",
-				"DiscoKey":   "discokey:b5e49e6e4d3460084bff4f975d8e7b2e69c76a3524e8fc2f1f29fd20ff5e1708",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:56916", "10.65.0.27:56916", "172.17.0.1:56916"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:30:28.787726916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6814299636336647,
-				"StableID":   "nxhdPb6DDv11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ce8b1f8f67dad392def2acb40105c56a471cb94e3de0906a6989371671d44e6b",
-				"DiscoKey":   "discokey:47c8136e91bd6ecb9f5c2523699d446be1f3e880f4aa9eb213b70648643aae04",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:34098", "10.65.0.27:34098", "172.17.0.1:34098"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:30:29.312547221Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7183122621232690,
-				"StableID":   "nDUFb9TF6y11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d6abd2ef6511cf6243ebcd31d30af58cb21ad1d64a6b2528b42295edac3a5163",
-				"DiscoKey":   "discokey:16195ef3dac2fd69ce8331b5aabe9a28050fd163298cff28233db64636cdae74",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:43726", "10.65.0.27:43726", "172.17.0.1:43726"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:30:29.854007521Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6365254161769556,
-				"StableID":   "nwJEV8Sqhr11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:45329bb0cf3b007db1c6d5f0982968267252feadd2fc05414dce96d92bd8a939",
-				"DiscoKey":   "discokey:2df542a26fce6dad5e821a59c9d97806aeed14cd56924a4c4a567e7d20453d59",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37481", "10.65.0.27:37481", "172.17.0.1:37481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:30:30.406895442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5400176855827962,
-				"StableID":   "nDJLiMVkAj11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:87d11ff2b240c8cc282a8fee13f4b943888218bb217e33154f4a5bcd0e0d050d",
-				"KeyExpiry":  "2026-11-03T08:30:30Z",
-				"DiscoKey":   "discokey:d2d5ee44ff2f3f9fead036898244b89053a27d05941a8d31cce1002d9c74d97f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49252", "10.65.0.27:49252", "172.17.0.1:49252"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:30:30.937221402Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         2247734144242216,
-				"StableID":   "nPciKYA1ZJ11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:85de3375cb5f75f2c3fac408980a26b5ac3b0e9166c25ef98a85167d93add956",
-				"KeyExpiry":  "2026-11-03T08:30:32Z",
-				"DiscoKey":   "discokey:73744eeaa40a1fb9e0b1800235e2028faa89654d1d39eab50f9fdb9eb309de4c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:55591", "10.65.0.27:55591", "172.17.0.1:55591"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:30:32.011432288Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d3-per-tag.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d3-per-tag.hujson
deleted file mode 100644
index 8314058da..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-nextdns-d3-per-tag.hujson
+++ /dev/null
@@ -1,8817 +0,0 @@
-// nodeattrs-nextdns-d3-per-tag
-//
-// different nextdns profiles per tag
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:31:03Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-nextdns-d3-per-tag",
-	"description":    "different nextdns profiles per tag",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:31:03.031823042Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                               \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"different nextdns profiles per tag\",\n    \"id\": \"nodeattrs-nextdns-d3-per-tag\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"nextdns:server-profile\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            },\n            {\n                \"attr\": [\n                    \"nextdns:client-profile\"\n                ],\n                \"target\": [\n                    \"tag:client\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-nextdns-d3-per-tag.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["nextdns:server-profile"], "target": ["tag:server"]},
-			{"attr": ["nextdns:client-profile"], "target": ["tag:client"]}
-		], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2041088436545597,
-				"StableID":   "nLkzk4wQwG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       2041088436545597,
-				"Key":        "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-				"DiscoKey":   "discokey:7997bb64f5b7f311e2f7807ff4ba4410a4bdca950907fb377fd9a7f954d1b903",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53685", "10.65.0.27:53685", "172.17.0.1:53685"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:08.4796458Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:client-profile":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:client-profile",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-			"MachineKey": "mkey:a18b8e1a4345792d2003ce9b9fd4efc71d19995b93815b557f065a22ad31c245",
-			"Peers": [{
-				"ID":         598310187894487,
-				"StableID":   "nY7GVTbyf511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-				"DiscoKey":   "discokey:b8dab6fa962a035942ecf8b9a79bd351470cfe6661aa81dc3e14d80c59b30f54",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44600", "10.65.0.27:44600", "172.17.0.1:44600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:09.021294067Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7435185276017776,
-				"StableID":   "nP4GF9iQ4121CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-				"DiscoKey":   "discokey:528fa52b0ac3e598d7a94a1d3b42fec27e339b9ee54fe6615fe17ce06d1aab70",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33393", "10.65.0.27:33393", "172.17.0.1:33393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:09.561385442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5111238618484869,
-				"StableID":   "nWDs69atug11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-				"DiscoKey":   "discokey:d6b75d0bee2dfd635491e654b5b933795d82934f1ead9e3ce77cb02dd0cc8128",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47920", "10.65.0.27:47920", "172.17.0.1:47920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:10.106888596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5928066840202187,
-				"StableID":   "nEtXxHGqHo11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-				"DiscoKey":   "discokey:dae2c31fb68326d946fc1b0cfbebc42275b90dcd29c7ced98e302aaff5764f2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:10.626704158Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4669338761541476,
-				"StableID":   "nMmZxTckTd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:8a14af4f965a61b35c5e495443b95e5a745781fc3a6eca0703e143fe84fb9118",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:57095", "10.65.0.27:57095", "172.17.0.1:57095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:11.158729986Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6476433198634586,
-				"StableID":   "njo4GFvBas11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:a5538efeff45b1a3072de3a723729499818d633ca6d0bc02571fe8d3d72c6b09",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:46022", "10.65.0.27:46022", "172.17.0.1:46022"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:11.69330328Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6601596783241755,
-				"StableID":   "nNiUdgksYt11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-				"KeyExpiry":  "2026-11-03T08:31:12Z",
-				"DiscoKey":   "discokey:3f62f77b734e60c384f1833eec6c893b3e94dc63424c10f6eb37c5eead00876b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57589", "10.65.0.27:57589", "172.17.0.1:57589"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:12.232101466Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2041088436545597": {
-				"ID":          2041088436545597,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         598310187894487,
-				"StableID":   "nY7GVTbyf511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       598310187894487,
-				"Key":        "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-				"DiscoKey":   "discokey:b8dab6fa962a035942ecf8b9a79bd351470cfe6661aa81dc3e14d80c59b30f54",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44600", "10.65.0.27:44600", "172.17.0.1:44600"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:31:09.021294067Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-			"MachineKey": "mkey:640e4b83d0ab735952d5f888283e7ff8ac9ee630db676afdf2c80c4f6a53c300",
-			"Peers": [{
-				"ID":         2041088436545597,
-				"StableID":   "nLkzk4wQwG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-				"DiscoKey":   "discokey:7997bb64f5b7f311e2f7807ff4ba4410a4bdca950907fb377fd9a7f954d1b903",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53685", "10.65.0.27:53685", "172.17.0.1:53685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:08.4796458Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7435185276017776,
-				"StableID":   "nP4GF9iQ4121CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-				"DiscoKey":   "discokey:528fa52b0ac3e598d7a94a1d3b42fec27e339b9ee54fe6615fe17ce06d1aab70",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33393", "10.65.0.27:33393", "172.17.0.1:33393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:09.561385442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5111238618484869,
-				"StableID":   "nWDs69atug11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-				"DiscoKey":   "discokey:d6b75d0bee2dfd635491e654b5b933795d82934f1ead9e3ce77cb02dd0cc8128",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47920", "10.65.0.27:47920", "172.17.0.1:47920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:10.106888596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5928066840202187,
-				"StableID":   "nEtXxHGqHo11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-				"DiscoKey":   "discokey:dae2c31fb68326d946fc1b0cfbebc42275b90dcd29c7ced98e302aaff5764f2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:10.626704158Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4669338761541476,
-				"StableID":   "nMmZxTckTd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:8a14af4f965a61b35c5e495443b95e5a745781fc3a6eca0703e143fe84fb9118",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:57095", "10.65.0.27:57095", "172.17.0.1:57095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:11.158729986Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6476433198634586,
-				"StableID":   "njo4GFvBas11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:a5538efeff45b1a3072de3a723729499818d633ca6d0bc02571fe8d3d72c6b09",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:46022", "10.65.0.27:46022", "172.17.0.1:46022"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:11.69330328Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6601596783241755,
-				"StableID":   "nNiUdgksYt11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-				"KeyExpiry":  "2026-11-03T08:31:12Z",
-				"DiscoKey":   "discokey:3f62f77b734e60c384f1833eec6c893b3e94dc63424c10f6eb37c5eead00876b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57589", "10.65.0.27:57589", "172.17.0.1:57589"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:12.232101466Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "598310187894487": {
-				"ID":          598310187894487,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4669338761541476,
-				"StableID":   "nMmZxTckTd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:8a14af4f965a61b35c5e495443b95e5a745781fc3a6eca0703e143fe84fb9118",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:57095", "10.65.0.27:57095", "172.17.0.1:57095"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:11.158729986Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-			"MachineKey": "mkey:60111fb66371b0290b48cce52add038b18e8c3ebdebd7c5deeab36c990f0a530",
-			"Peers": [{
-				"ID":         2041088436545597,
-				"StableID":   "nLkzk4wQwG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-				"DiscoKey":   "discokey:7997bb64f5b7f311e2f7807ff4ba4410a4bdca950907fb377fd9a7f954d1b903",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53685", "10.65.0.27:53685", "172.17.0.1:53685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:08.4796458Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         598310187894487,
-				"StableID":   "nY7GVTbyf511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-				"DiscoKey":   "discokey:b8dab6fa962a035942ecf8b9a79bd351470cfe6661aa81dc3e14d80c59b30f54",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44600", "10.65.0.27:44600", "172.17.0.1:44600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:09.021294067Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7435185276017776,
-				"StableID":   "nP4GF9iQ4121CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-				"DiscoKey":   "discokey:528fa52b0ac3e598d7a94a1d3b42fec27e339b9ee54fe6615fe17ce06d1aab70",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33393", "10.65.0.27:33393", "172.17.0.1:33393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:09.561385442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5111238618484869,
-				"StableID":   "nWDs69atug11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-				"DiscoKey":   "discokey:d6b75d0bee2dfd635491e654b5b933795d82934f1ead9e3ce77cb02dd0cc8128",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47920", "10.65.0.27:47920", "172.17.0.1:47920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:10.106888596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5928066840202187,
-				"StableID":   "nEtXxHGqHo11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-				"DiscoKey":   "discokey:dae2c31fb68326d946fc1b0cfbebc42275b90dcd29c7ced98e302aaff5764f2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:10.626704158Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6476433198634586,
-				"StableID":   "njo4GFvBas11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:a5538efeff45b1a3072de3a723729499818d633ca6d0bc02571fe8d3d72c6b09",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:46022", "10.65.0.27:46022", "172.17.0.1:46022"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:11.69330328Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6601596783241755,
-				"StableID":   "nNiUdgksYt11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-				"KeyExpiry":  "2026-11-03T08:31:12Z",
-				"DiscoKey":   "discokey:3f62f77b734e60c384f1833eec6c893b3e94dc63424c10f6eb37c5eead00876b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57589", "10.65.0.27:57589", "172.17.0.1:57589"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:12.232101466Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7435185276017776,
-				"StableID":   "nP4GF9iQ4121CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       7435185276017776,
-				"Key":        "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-				"DiscoKey":   "discokey:528fa52b0ac3e598d7a94a1d3b42fec27e339b9ee54fe6615fe17ce06d1aab70",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33393", "10.65.0.27:33393", "172.17.0.1:33393"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:09.561385442Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-			"MachineKey": "mkey:d458dbe9f28d7ac7d14add969560d9a4a12b6a8d28f0503b4a72c2dea3f79c5f",
-			"Peers": [{
-				"ID":         2041088436545597,
-				"StableID":   "nLkzk4wQwG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-				"DiscoKey":   "discokey:7997bb64f5b7f311e2f7807ff4ba4410a4bdca950907fb377fd9a7f954d1b903",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53685", "10.65.0.27:53685", "172.17.0.1:53685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:08.4796458Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         598310187894487,
-				"StableID":   "nY7GVTbyf511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-				"DiscoKey":   "discokey:b8dab6fa962a035942ecf8b9a79bd351470cfe6661aa81dc3e14d80c59b30f54",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44600", "10.65.0.27:44600", "172.17.0.1:44600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:09.021294067Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5111238618484869,
-				"StableID":   "nWDs69atug11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-				"DiscoKey":   "discokey:d6b75d0bee2dfd635491e654b5b933795d82934f1ead9e3ce77cb02dd0cc8128",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47920", "10.65.0.27:47920", "172.17.0.1:47920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:10.106888596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5928066840202187,
-				"StableID":   "nEtXxHGqHo11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-				"DiscoKey":   "discokey:dae2c31fb68326d946fc1b0cfbebc42275b90dcd29c7ced98e302aaff5764f2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:10.626704158Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4669338761541476,
-				"StableID":   "nMmZxTckTd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:8a14af4f965a61b35c5e495443b95e5a745781fc3a6eca0703e143fe84fb9118",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:57095", "10.65.0.27:57095", "172.17.0.1:57095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:11.158729986Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6476433198634586,
-				"StableID":   "njo4GFvBas11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:a5538efeff45b1a3072de3a723729499818d633ca6d0bc02571fe8d3d72c6b09",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:46022", "10.65.0.27:46022", "172.17.0.1:46022"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:11.69330328Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6601596783241755,
-				"StableID":   "nNiUdgksYt11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-				"KeyExpiry":  "2026-11-03T08:31:12Z",
-				"DiscoKey":   "discokey:3f62f77b734e60c384f1833eec6c893b3e94dc63424c10f6eb37c5eead00876b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57589", "10.65.0.27:57589", "172.17.0.1:57589"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:12.232101466Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7435185276017776": {
-				"ID":          7435185276017776,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5111238618484869,
-				"StableID":   "nWDs69atug11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       5111238618484869,
-				"Key":        "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-				"DiscoKey":   "discokey:d6b75d0bee2dfd635491e654b5b933795d82934f1ead9e3ce77cb02dd0cc8128",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47920", "10.65.0.27:47920", "172.17.0.1:47920"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:31:10.106888596Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-			"MachineKey": "mkey:ec17609303306f7dec5896636607d84eb5c7ac2296eeef73aa83ba330ed3503e",
-			"Peers": [{
-				"ID":         2041088436545597,
-				"StableID":   "nLkzk4wQwG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-				"DiscoKey":   "discokey:7997bb64f5b7f311e2f7807ff4ba4410a4bdca950907fb377fd9a7f954d1b903",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53685", "10.65.0.27:53685", "172.17.0.1:53685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:08.4796458Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         598310187894487,
-				"StableID":   "nY7GVTbyf511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-				"DiscoKey":   "discokey:b8dab6fa962a035942ecf8b9a79bd351470cfe6661aa81dc3e14d80c59b30f54",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44600", "10.65.0.27:44600", "172.17.0.1:44600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:09.021294067Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7435185276017776,
-				"StableID":   "nP4GF9iQ4121CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-				"DiscoKey":   "discokey:528fa52b0ac3e598d7a94a1d3b42fec27e339b9ee54fe6615fe17ce06d1aab70",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33393", "10.65.0.27:33393", "172.17.0.1:33393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:09.561385442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5928066840202187,
-				"StableID":   "nEtXxHGqHo11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-				"DiscoKey":   "discokey:dae2c31fb68326d946fc1b0cfbebc42275b90dcd29c7ced98e302aaff5764f2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:10.626704158Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4669338761541476,
-				"StableID":   "nMmZxTckTd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:8a14af4f965a61b35c5e495443b95e5a745781fc3a6eca0703e143fe84fb9118",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:57095", "10.65.0.27:57095", "172.17.0.1:57095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:11.158729986Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6476433198634586,
-				"StableID":   "njo4GFvBas11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:a5538efeff45b1a3072de3a723729499818d633ca6d0bc02571fe8d3d72c6b09",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:46022", "10.65.0.27:46022", "172.17.0.1:46022"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:11.69330328Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6601596783241755,
-				"StableID":   "nNiUdgksYt11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-				"KeyExpiry":  "2026-11-03T08:31:12Z",
-				"DiscoKey":   "discokey:3f62f77b734e60c384f1833eec6c893b3e94dc63424c10f6eb37c5eead00876b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57589", "10.65.0.27:57589", "172.17.0.1:57589"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:12.232101466Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5111238618484869": {
-				"ID":          5111238618484869,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5928066840202187,
-				"StableID":   "nEtXxHGqHo11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       5928066840202187,
-				"Key":        "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-				"DiscoKey":   "discokey:dae2c31fb68326d946fc1b0cfbebc42275b90dcd29c7ced98e302aaff5764f2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:10.626704158Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"nextdns:server-profile":                 null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"nextdns:server-profile",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-			"MachineKey": "mkey:fb1e4b04856b10556f6699f9ff3a29d601178a1d1fb9e087f28d4a9c12029e7b",
-			"Peers": [{
-				"ID":         2041088436545597,
-				"StableID":   "nLkzk4wQwG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-				"DiscoKey":   "discokey:7997bb64f5b7f311e2f7807ff4ba4410a4bdca950907fb377fd9a7f954d1b903",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53685", "10.65.0.27:53685", "172.17.0.1:53685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:08.4796458Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         598310187894487,
-				"StableID":   "nY7GVTbyf511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-				"DiscoKey":   "discokey:b8dab6fa962a035942ecf8b9a79bd351470cfe6661aa81dc3e14d80c59b30f54",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44600", "10.65.0.27:44600", "172.17.0.1:44600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:09.021294067Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7435185276017776,
-				"StableID":   "nP4GF9iQ4121CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-				"DiscoKey":   "discokey:528fa52b0ac3e598d7a94a1d3b42fec27e339b9ee54fe6615fe17ce06d1aab70",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33393", "10.65.0.27:33393", "172.17.0.1:33393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:09.561385442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5111238618484869,
-				"StableID":   "nWDs69atug11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-				"DiscoKey":   "discokey:d6b75d0bee2dfd635491e654b5b933795d82934f1ead9e3ce77cb02dd0cc8128",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47920", "10.65.0.27:47920", "172.17.0.1:47920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:10.106888596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4669338761541476,
-				"StableID":   "nMmZxTckTd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:8a14af4f965a61b35c5e495443b95e5a745781fc3a6eca0703e143fe84fb9118",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:57095", "10.65.0.27:57095", "172.17.0.1:57095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:11.158729986Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6476433198634586,
-				"StableID":   "njo4GFvBas11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:a5538efeff45b1a3072de3a723729499818d633ca6d0bc02571fe8d3d72c6b09",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:46022", "10.65.0.27:46022", "172.17.0.1:46022"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:11.69330328Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6601596783241755,
-				"StableID":   "nNiUdgksYt11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-				"KeyExpiry":  "2026-11-03T08:31:12Z",
-				"DiscoKey":   "discokey:3f62f77b734e60c384f1833eec6c893b3e94dc63424c10f6eb37c5eead00876b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57589", "10.65.0.27:57589", "172.17.0.1:57589"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:12.232101466Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5928066840202187": {
-				"ID":          5928066840202187,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6601596783241755,
-				"StableID":   "nNiUdgksYt11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-				"KeyExpiry":  "2026-11-03T08:31:12Z",
-				"DiscoKey":   "discokey:3f62f77b734e60c384f1833eec6c893b3e94dc63424c10f6eb37c5eead00876b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57589", "10.65.0.27:57589", "172.17.0.1:57589"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:12.232101466Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-			"MachineKey": "mkey:736d819a615ffdb83d0c2c4b1bac868430f7680c09b3e13298a1e42666166d1c",
-			"Peers": [{
-				"ID":         2041088436545597,
-				"StableID":   "nLkzk4wQwG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-				"DiscoKey":   "discokey:7997bb64f5b7f311e2f7807ff4ba4410a4bdca950907fb377fd9a7f954d1b903",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53685", "10.65.0.27:53685", "172.17.0.1:53685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:08.4796458Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         598310187894487,
-				"StableID":   "nY7GVTbyf511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-				"DiscoKey":   "discokey:b8dab6fa962a035942ecf8b9a79bd351470cfe6661aa81dc3e14d80c59b30f54",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44600", "10.65.0.27:44600", "172.17.0.1:44600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:09.021294067Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7435185276017776,
-				"StableID":   "nP4GF9iQ4121CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-				"DiscoKey":   "discokey:528fa52b0ac3e598d7a94a1d3b42fec27e339b9ee54fe6615fe17ce06d1aab70",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33393", "10.65.0.27:33393", "172.17.0.1:33393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:09.561385442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5111238618484869,
-				"StableID":   "nWDs69atug11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-				"DiscoKey":   "discokey:d6b75d0bee2dfd635491e654b5b933795d82934f1ead9e3ce77cb02dd0cc8128",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47920", "10.65.0.27:47920", "172.17.0.1:47920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:10.106888596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5928066840202187,
-				"StableID":   "nEtXxHGqHo11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-				"DiscoKey":   "discokey:dae2c31fb68326d946fc1b0cfbebc42275b90dcd29c7ced98e302aaff5764f2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:10.626704158Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4669338761541476,
-				"StableID":   "nMmZxTckTd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:8a14af4f965a61b35c5e495443b95e5a745781fc3a6eca0703e143fe84fb9118",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:57095", "10.65.0.27:57095", "172.17.0.1:57095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:11.158729986Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6476433198634586,
-				"StableID":   "njo4GFvBas11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:a5538efeff45b1a3072de3a723729499818d633ca6d0bc02571fe8d3d72c6b09",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:46022", "10.65.0.27:46022", "172.17.0.1:46022"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:11.69330328Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6476433198634586,
-				"StableID":   "njo4GFvBas11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:a5538efeff45b1a3072de3a723729499818d633ca6d0bc02571fe8d3d72c6b09",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:46022", "10.65.0.27:46022", "172.17.0.1:46022"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:11.69330328Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:aab04a025ec9105a76a1945406bad36f886e8cf3b87ad7556c9b350a43a14d07",
-			"MachineKey": "mkey:98e03da5d628d126d9bda2e84f13a109d7f0ad7e1f4cd6e3760dba6801e3a05b",
-			"Peers": [{
-				"ID":         2041088436545597,
-				"StableID":   "nLkzk4wQwG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cf51150d08d4422e683a1cf335ff91b1e63878e5f9366613b090382955fd5964",
-				"DiscoKey":   "discokey:7997bb64f5b7f311e2f7807ff4ba4410a4bdca950907fb377fd9a7f954d1b903",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53685", "10.65.0.27:53685", "172.17.0.1:53685"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:08.4796458Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         598310187894487,
-				"StableID":   "nY7GVTbyf511CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e4d322c77e19c47798f837865fd81af5f0e1a54e93bf4db0c2ca8d45d29c1b52",
-				"DiscoKey":   "discokey:b8dab6fa962a035942ecf8b9a79bd351470cfe6661aa81dc3e14d80c59b30f54",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:44600", "10.65.0.27:44600", "172.17.0.1:44600"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:09.021294067Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7435185276017776,
-				"StableID":   "nP4GF9iQ4121CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:ac6ae9c3a4b56ab94019a97a52d8b897c8b52152501b47008ef0f316aea65633",
-				"DiscoKey":   "discokey:528fa52b0ac3e598d7a94a1d3b42fec27e339b9ee54fe6615fe17ce06d1aab70",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33393", "10.65.0.27:33393", "172.17.0.1:33393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:09.561385442Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5111238618484869,
-				"StableID":   "nWDs69atug11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ab4da43b28f80e477a96a4186647047c42ae80d8ca0d1394c6cbafe29d0c555",
-				"DiscoKey":   "discokey:d6b75d0bee2dfd635491e654b5b933795d82934f1ead9e3ce77cb02dd0cc8128",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:47920", "10.65.0.27:47920", "172.17.0.1:47920"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:10.106888596Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5928066840202187,
-				"StableID":   "nEtXxHGqHo11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2093797141e9c0f5c8e305fc884e6b658427cdbd2996e71d30144eb8746a7269",
-				"DiscoKey":   "discokey:dae2c31fb68326d946fc1b0cfbebc42275b90dcd29c7ced98e302aaff5764f2c",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:10.626704158Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4669338761541476,
-				"StableID":   "nMmZxTckTd11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:e7fd4da12c10255677b0ea77e3826864ec8acbcc98cec90224b4bdc2989b4d5d",
-				"KeyExpiry":  "2026-11-03T08:31:11Z",
-				"DiscoKey":   "discokey:8a14af4f965a61b35c5e495443b95e5a745781fc3a6eca0703e143fe84fb9118",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:57095", "10.65.0.27:57095", "172.17.0.1:57095"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:11.158729986Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6601596783241755,
-				"StableID":   "nNiUdgksYt11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:3c7b0152f1702176cbea1e942b9477dde7b535958202f51fff5c27373de0513a",
-				"KeyExpiry":  "2026-11-03T08:31:12Z",
-				"DiscoKey":   "discokey:3f62f77b734e60c384f1833eec6c893b3e94dc63424c10f6eb37c5eead00876b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57589", "10.65.0.27:57589", "172.17.0.1:57589"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:12.232101466Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-devices-auto-updates-off.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-devices-auto-updates-off.hujson
deleted file mode 100644
index 9b9523089..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-devices-auto-updates-off.hujson
+++ /dev/null
@@ -1,8818 +0,0 @@
-// nodeattrs-tailnet-devices-auto-updates-off
-//
-// Tailnet setting: devices_auto_updates_on=false -- explicit off variant, expect default-auto-update [false]
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-11T16:14:50Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-tailnet-devices-auto-updates-off",
-	"description":    "Tailnet setting: devices_auto_updates_on=false -- explicit off variant, expect default-auto-update [false]",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-11T16:14:50.883098015Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {"devices_auto_updates_on": false}
-		},
-		"scenario_hujson": "                                             \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"Tailnet setting: devices_auto_updates_on=false -- explicit off variant, expect default-auto-update [false]\",\n    \"id\": \"nodeattrs-tailnet-devices-auto-updates-off\",\n    \"options\": {},\n    \"policy\": {\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {\n            \"devices_auto_updates_on\": false\n        }\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-tailnet-devices-auto-updates-off.hujson",
-		"full_policy": {"tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2165420609487202,
-				"StableID":   "nwRJ8oviuH11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       2165420609487202,
-				"Key":        "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-				"DiscoKey":   "discokey:6824a8f1dc5c402cb44c3e18ec46d8cf154843fd1709f2f2cdb62f87aeabc57d",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55653", "10.65.0.27:55653", "172.17.0.1:55653"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:56.572329192Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-			"MachineKey": "mkey:3ab8051d29e81b6c6238aa15fbfe9f3610140d75b00b82eff8967649c5e1df11",
-			"Peers": [{
-				"ID":         6200441737554829,
-				"StableID":   "nNu5wE6CRq11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-				"DiscoKey":   "discokey:7573092c16946cec2a6d1ef8894c5e056d08bee0af82f436941f59fe9ac5ae72",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:57.117088922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         50037228247953,
-				"StableID":   "nGGvWoPfP111CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-				"DiscoKey":   "discokey:4e9b639ed1a7acf8ea3c4d49993201bcb4b7be5aaa91062f7a12039101f25919",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57932", "10.65.0.27:57932", "172.17.0.1:57932"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:57.653059426Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8138765108747847,
-				"StableID":   "nWSZmPZ4Z621CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-				"DiscoKey":   "discokey:16dca632310d0675a4cdbbf76f935e1834efe0cf02e58a09f4b52e59b4d56604",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37699", "10.65.0.27:37699", "172.17.0.1:37699"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:58.204449073Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6602871901992344,
-				"StableID":   "n1oNWQFTZt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-				"DiscoKey":   "discokey:27df747166a5ada3fc45118e8e485facbc068c8d9a3c18ab232afa94549bc27a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40368", "10.65.0.27:40368", "172.17.0.1:40368"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:58.729245096Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2597208385383277,
-				"StableID":   "nL84J6GHHM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:22d694f88857706358a86e223341ba08ed4c0ad830d98f9635458aa095017562",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60298", "10.65.0.27:60298", "172.17.0.1:60298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:59.267871307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5831043763880759,
-				"StableID":   "nxjgwedtXn11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:93c5a4efaa638f5fe1033741b7b77ec46e3ed465723f7b647cad822ba07e6c5b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36512", "10.65.0.27:36512", "172.17.0.1:36512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:59.807442674Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3405190350218498,
-				"StableID":   "n5itiRaDbT11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-				"KeyExpiry":  "2026-11-07T16:15:00Z",
-				"DiscoKey":   "discokey:0c43fa1c923881fb83bc364f0a8502ef10bb8aa1a05aba4ec4bad1b069856025",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51348", "10.65.0.27:51348", "172.17.0.1:51348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:15:00.357374693Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2165420609487202": {
-				"ID":          2165420609487202,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6200441737554829,
-				"StableID":   "nNu5wE6CRq11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       6200441737554829,
-				"Key":        "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-				"DiscoKey":   "discokey:7573092c16946cec2a6d1ef8894c5e056d08bee0af82f436941f59fe9ac5ae72",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-11T16:14:57.117088922Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-			"MachineKey": "mkey:4dab9cc5708e111ed15b645a950387a79b742f024c8e4a6f90593493dcabf030",
-			"Peers": [{
-				"ID":         2165420609487202,
-				"StableID":   "nwRJ8oviuH11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-				"DiscoKey":   "discokey:6824a8f1dc5c402cb44c3e18ec46d8cf154843fd1709f2f2cdb62f87aeabc57d",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55653", "10.65.0.27:55653", "172.17.0.1:55653"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:56.572329192Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         50037228247953,
-				"StableID":   "nGGvWoPfP111CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-				"DiscoKey":   "discokey:4e9b639ed1a7acf8ea3c4d49993201bcb4b7be5aaa91062f7a12039101f25919",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57932", "10.65.0.27:57932", "172.17.0.1:57932"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:57.653059426Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8138765108747847,
-				"StableID":   "nWSZmPZ4Z621CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-				"DiscoKey":   "discokey:16dca632310d0675a4cdbbf76f935e1834efe0cf02e58a09f4b52e59b4d56604",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37699", "10.65.0.27:37699", "172.17.0.1:37699"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:58.204449073Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6602871901992344,
-				"StableID":   "n1oNWQFTZt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-				"DiscoKey":   "discokey:27df747166a5ada3fc45118e8e485facbc068c8d9a3c18ab232afa94549bc27a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40368", "10.65.0.27:40368", "172.17.0.1:40368"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:58.729245096Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2597208385383277,
-				"StableID":   "nL84J6GHHM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:22d694f88857706358a86e223341ba08ed4c0ad830d98f9635458aa095017562",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60298", "10.65.0.27:60298", "172.17.0.1:60298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:59.267871307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5831043763880759,
-				"StableID":   "nxjgwedtXn11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:93c5a4efaa638f5fe1033741b7b77ec46e3ed465723f7b647cad822ba07e6c5b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36512", "10.65.0.27:36512", "172.17.0.1:36512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:59.807442674Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3405190350218498,
-				"StableID":   "n5itiRaDbT11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-				"KeyExpiry":  "2026-11-07T16:15:00Z",
-				"DiscoKey":   "discokey:0c43fa1c923881fb83bc364f0a8502ef10bb8aa1a05aba4ec4bad1b069856025",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51348", "10.65.0.27:51348", "172.17.0.1:51348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:15:00.357374693Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6200441737554829": {
-				"ID":          6200441737554829,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2597208385383277,
-				"StableID":   "nL84J6GHHM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:22d694f88857706358a86e223341ba08ed4c0ad830d98f9635458aa095017562",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60298", "10.65.0.27:60298", "172.17.0.1:60298"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:59.267871307Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-			"MachineKey": "mkey:7fe9161c2f65278d538b394f5e9e46c8698bd2d33996a7becc925f60dfa9813c",
-			"Peers": [{
-				"ID":         2165420609487202,
-				"StableID":   "nwRJ8oviuH11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-				"DiscoKey":   "discokey:6824a8f1dc5c402cb44c3e18ec46d8cf154843fd1709f2f2cdb62f87aeabc57d",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55653", "10.65.0.27:55653", "172.17.0.1:55653"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:56.572329192Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6200441737554829,
-				"StableID":   "nNu5wE6CRq11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-				"DiscoKey":   "discokey:7573092c16946cec2a6d1ef8894c5e056d08bee0af82f436941f59fe9ac5ae72",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:57.117088922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         50037228247953,
-				"StableID":   "nGGvWoPfP111CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-				"DiscoKey":   "discokey:4e9b639ed1a7acf8ea3c4d49993201bcb4b7be5aaa91062f7a12039101f25919",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57932", "10.65.0.27:57932", "172.17.0.1:57932"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:57.653059426Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8138765108747847,
-				"StableID":   "nWSZmPZ4Z621CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-				"DiscoKey":   "discokey:16dca632310d0675a4cdbbf76f935e1834efe0cf02e58a09f4b52e59b4d56604",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37699", "10.65.0.27:37699", "172.17.0.1:37699"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:58.204449073Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6602871901992344,
-				"StableID":   "n1oNWQFTZt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-				"DiscoKey":   "discokey:27df747166a5ada3fc45118e8e485facbc068c8d9a3c18ab232afa94549bc27a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40368", "10.65.0.27:40368", "172.17.0.1:40368"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:58.729245096Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5831043763880759,
-				"StableID":   "nxjgwedtXn11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:93c5a4efaa638f5fe1033741b7b77ec46e3ed465723f7b647cad822ba07e6c5b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36512", "10.65.0.27:36512", "172.17.0.1:36512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:59.807442674Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3405190350218498,
-				"StableID":   "n5itiRaDbT11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-				"KeyExpiry":  "2026-11-07T16:15:00Z",
-				"DiscoKey":   "discokey:0c43fa1c923881fb83bc364f0a8502ef10bb8aa1a05aba4ec4bad1b069856025",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51348", "10.65.0.27:51348", "172.17.0.1:51348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:15:00.357374693Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         50037228247953,
-				"StableID":   "nGGvWoPfP111CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       50037228247953,
-				"Key":        "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-				"DiscoKey":   "discokey:4e9b639ed1a7acf8ea3c4d49993201bcb4b7be5aaa91062f7a12039101f25919",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57932", "10.65.0.27:57932", "172.17.0.1:57932"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:57.653059426Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-			"MachineKey": "mkey:329c6acff145e2dfb31daffc2f4c3dc3d3042d333d48e597ac64c5cb65bea96f",
-			"Peers": [{
-				"ID":         2165420609487202,
-				"StableID":   "nwRJ8oviuH11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-				"DiscoKey":   "discokey:6824a8f1dc5c402cb44c3e18ec46d8cf154843fd1709f2f2cdb62f87aeabc57d",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55653", "10.65.0.27:55653", "172.17.0.1:55653"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:56.572329192Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6200441737554829,
-				"StableID":   "nNu5wE6CRq11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-				"DiscoKey":   "discokey:7573092c16946cec2a6d1ef8894c5e056d08bee0af82f436941f59fe9ac5ae72",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:57.117088922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8138765108747847,
-				"StableID":   "nWSZmPZ4Z621CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-				"DiscoKey":   "discokey:16dca632310d0675a4cdbbf76f935e1834efe0cf02e58a09f4b52e59b4d56604",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37699", "10.65.0.27:37699", "172.17.0.1:37699"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:58.204449073Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6602871901992344,
-				"StableID":   "n1oNWQFTZt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-				"DiscoKey":   "discokey:27df747166a5ada3fc45118e8e485facbc068c8d9a3c18ab232afa94549bc27a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40368", "10.65.0.27:40368", "172.17.0.1:40368"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:58.729245096Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2597208385383277,
-				"StableID":   "nL84J6GHHM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:22d694f88857706358a86e223341ba08ed4c0ad830d98f9635458aa095017562",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60298", "10.65.0.27:60298", "172.17.0.1:60298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:59.267871307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5831043763880759,
-				"StableID":   "nxjgwedtXn11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:93c5a4efaa638f5fe1033741b7b77ec46e3ed465723f7b647cad822ba07e6c5b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36512", "10.65.0.27:36512", "172.17.0.1:36512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:59.807442674Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3405190350218498,
-				"StableID":   "n5itiRaDbT11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-				"KeyExpiry":  "2026-11-07T16:15:00Z",
-				"DiscoKey":   "discokey:0c43fa1c923881fb83bc364f0a8502ef10bb8aa1a05aba4ec4bad1b069856025",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51348", "10.65.0.27:51348", "172.17.0.1:51348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:15:00.357374693Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "50037228247953": {
-				"ID":          50037228247953,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8138765108747847,
-				"StableID":   "nWSZmPZ4Z621CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       8138765108747847,
-				"Key":        "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-				"DiscoKey":   "discokey:16dca632310d0675a4cdbbf76f935e1834efe0cf02e58a09f4b52e59b4d56604",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37699", "10.65.0.27:37699", "172.17.0.1:37699"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-11T16:14:58.204449073Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-			"MachineKey": "mkey:c62f903ab3ceaf92410336d91b1a8ac888ba3226ee95a1a65cb8318d8a0f7669",
-			"Peers": [{
-				"ID":         2165420609487202,
-				"StableID":   "nwRJ8oviuH11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-				"DiscoKey":   "discokey:6824a8f1dc5c402cb44c3e18ec46d8cf154843fd1709f2f2cdb62f87aeabc57d",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55653", "10.65.0.27:55653", "172.17.0.1:55653"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:56.572329192Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6200441737554829,
-				"StableID":   "nNu5wE6CRq11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-				"DiscoKey":   "discokey:7573092c16946cec2a6d1ef8894c5e056d08bee0af82f436941f59fe9ac5ae72",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:57.117088922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         50037228247953,
-				"StableID":   "nGGvWoPfP111CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-				"DiscoKey":   "discokey:4e9b639ed1a7acf8ea3c4d49993201bcb4b7be5aaa91062f7a12039101f25919",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57932", "10.65.0.27:57932", "172.17.0.1:57932"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:57.653059426Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6602871901992344,
-				"StableID":   "n1oNWQFTZt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-				"DiscoKey":   "discokey:27df747166a5ada3fc45118e8e485facbc068c8d9a3c18ab232afa94549bc27a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40368", "10.65.0.27:40368", "172.17.0.1:40368"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:58.729245096Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2597208385383277,
-				"StableID":   "nL84J6GHHM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:22d694f88857706358a86e223341ba08ed4c0ad830d98f9635458aa095017562",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60298", "10.65.0.27:60298", "172.17.0.1:60298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:59.267871307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5831043763880759,
-				"StableID":   "nxjgwedtXn11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:93c5a4efaa638f5fe1033741b7b77ec46e3ed465723f7b647cad822ba07e6c5b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36512", "10.65.0.27:36512", "172.17.0.1:36512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:59.807442674Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3405190350218498,
-				"StableID":   "n5itiRaDbT11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-				"KeyExpiry":  "2026-11-07T16:15:00Z",
-				"DiscoKey":   "discokey:0c43fa1c923881fb83bc364f0a8502ef10bb8aa1a05aba4ec4bad1b069856025",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51348", "10.65.0.27:51348", "172.17.0.1:51348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:15:00.357374693Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8138765108747847": {
-				"ID":          8138765108747847,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6602871901992344,
-				"StableID":   "n1oNWQFTZt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       6602871901992344,
-				"Key":        "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-				"DiscoKey":   "discokey:27df747166a5ada3fc45118e8e485facbc068c8d9a3c18ab232afa94549bc27a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40368", "10.65.0.27:40368", "172.17.0.1:40368"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:58.729245096Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-			"MachineKey": "mkey:3e4ef7f644698a560452652ae559a302422f6161fb2f03f4ed9d65a43842ee7b",
-			"Peers": [{
-				"ID":         2165420609487202,
-				"StableID":   "nwRJ8oviuH11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-				"DiscoKey":   "discokey:6824a8f1dc5c402cb44c3e18ec46d8cf154843fd1709f2f2cdb62f87aeabc57d",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55653", "10.65.0.27:55653", "172.17.0.1:55653"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:56.572329192Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6200441737554829,
-				"StableID":   "nNu5wE6CRq11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-				"DiscoKey":   "discokey:7573092c16946cec2a6d1ef8894c5e056d08bee0af82f436941f59fe9ac5ae72",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:57.117088922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         50037228247953,
-				"StableID":   "nGGvWoPfP111CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-				"DiscoKey":   "discokey:4e9b639ed1a7acf8ea3c4d49993201bcb4b7be5aaa91062f7a12039101f25919",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57932", "10.65.0.27:57932", "172.17.0.1:57932"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:57.653059426Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8138765108747847,
-				"StableID":   "nWSZmPZ4Z621CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-				"DiscoKey":   "discokey:16dca632310d0675a4cdbbf76f935e1834efe0cf02e58a09f4b52e59b4d56604",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37699", "10.65.0.27:37699", "172.17.0.1:37699"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:58.204449073Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2597208385383277,
-				"StableID":   "nL84J6GHHM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:22d694f88857706358a86e223341ba08ed4c0ad830d98f9635458aa095017562",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60298", "10.65.0.27:60298", "172.17.0.1:60298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:59.267871307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5831043763880759,
-				"StableID":   "nxjgwedtXn11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:93c5a4efaa638f5fe1033741b7b77ec46e3ed465723f7b647cad822ba07e6c5b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36512", "10.65.0.27:36512", "172.17.0.1:36512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:59.807442674Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3405190350218498,
-				"StableID":   "n5itiRaDbT11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-				"KeyExpiry":  "2026-11-07T16:15:00Z",
-				"DiscoKey":   "discokey:0c43fa1c923881fb83bc364f0a8502ef10bb8aa1a05aba4ec4bad1b069856025",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51348", "10.65.0.27:51348", "172.17.0.1:51348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:15:00.357374693Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6602871901992344": {
-				"ID":          6602871901992344,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3405190350218498,
-				"StableID":   "n5itiRaDbT11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-				"KeyExpiry":  "2026-11-07T16:15:00Z",
-				"DiscoKey":   "discokey:0c43fa1c923881fb83bc364f0a8502ef10bb8aa1a05aba4ec4bad1b069856025",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51348", "10.65.0.27:51348", "172.17.0.1:51348"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:15:00.357374693Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-			"MachineKey": "mkey:55a924cdeb9eb29850d4727fbc3fbda034ad741edfb7646ab99fce7cc5951362",
-			"Peers": [{
-				"ID":         2165420609487202,
-				"StableID":   "nwRJ8oviuH11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-				"DiscoKey":   "discokey:6824a8f1dc5c402cb44c3e18ec46d8cf154843fd1709f2f2cdb62f87aeabc57d",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55653", "10.65.0.27:55653", "172.17.0.1:55653"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:56.572329192Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6200441737554829,
-				"StableID":   "nNu5wE6CRq11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-				"DiscoKey":   "discokey:7573092c16946cec2a6d1ef8894c5e056d08bee0af82f436941f59fe9ac5ae72",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:57.117088922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         50037228247953,
-				"StableID":   "nGGvWoPfP111CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-				"DiscoKey":   "discokey:4e9b639ed1a7acf8ea3c4d49993201bcb4b7be5aaa91062f7a12039101f25919",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57932", "10.65.0.27:57932", "172.17.0.1:57932"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:57.653059426Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8138765108747847,
-				"StableID":   "nWSZmPZ4Z621CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-				"DiscoKey":   "discokey:16dca632310d0675a4cdbbf76f935e1834efe0cf02e58a09f4b52e59b4d56604",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37699", "10.65.0.27:37699", "172.17.0.1:37699"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:58.204449073Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6602871901992344,
-				"StableID":   "n1oNWQFTZt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-				"DiscoKey":   "discokey:27df747166a5ada3fc45118e8e485facbc068c8d9a3c18ab232afa94549bc27a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40368", "10.65.0.27:40368", "172.17.0.1:40368"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:58.729245096Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2597208385383277,
-				"StableID":   "nL84J6GHHM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:22d694f88857706358a86e223341ba08ed4c0ad830d98f9635458aa095017562",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60298", "10.65.0.27:60298", "172.17.0.1:60298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:59.267871307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5831043763880759,
-				"StableID":   "nxjgwedtXn11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:93c5a4efaa638f5fe1033741b7b77ec46e3ed465723f7b647cad822ba07e6c5b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36512", "10.65.0.27:36512", "172.17.0.1:36512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:59.807442674Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5831043763880759,
-				"StableID":   "nxjgwedtXn11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:93c5a4efaa638f5fe1033741b7b77ec46e3ed465723f7b647cad822ba07e6c5b",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:36512", "10.65.0.27:36512", "172.17.0.1:36512"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:59.807442674Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:43cfb9cc7a9cbace610db918a451f477cc54b4d2988c2ca2d31ac748a43af56a",
-			"MachineKey": "mkey:a419bf0df7ed278deb5d55e2f8a9845ad67001cdbcdbccaa4e8fad233ae03b4f",
-			"Peers": [{
-				"ID":         2165420609487202,
-				"StableID":   "nwRJ8oviuH11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6a43137525708413c2ef7f37231698772672d4d7817be963ebdc2e8918635005",
-				"DiscoKey":   "discokey:6824a8f1dc5c402cb44c3e18ec46d8cf154843fd1709f2f2cdb62f87aeabc57d",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:55653", "10.65.0.27:55653", "172.17.0.1:55653"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:56.572329192Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6200441737554829,
-				"StableID":   "nNu5wE6CRq11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4252d0798a12096d3368e7fc7212fceb1ccdb19bd47b45f11262203ed51e003a",
-				"DiscoKey":   "discokey:7573092c16946cec2a6d1ef8894c5e056d08bee0af82f436941f59fe9ac5ae72",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51602", "10.65.0.27:51602", "172.17.0.1:51602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:57.117088922Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         50037228247953,
-				"StableID":   "nGGvWoPfP111CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1da00baaadab9f3d2b07652703dfaf477a7f38db40e78e78b28630b215f69222",
-				"DiscoKey":   "discokey:4e9b639ed1a7acf8ea3c4d49993201bcb4b7be5aaa91062f7a12039101f25919",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57932", "10.65.0.27:57932", "172.17.0.1:57932"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:57.653059426Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8138765108747847,
-				"StableID":   "nWSZmPZ4Z621CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1929965179339d7ed4e1deaefb7e07f1c8cb9efdd3d90a8f70b4d3ca9063f656",
-				"DiscoKey":   "discokey:16dca632310d0675a4cdbbf76f935e1834efe0cf02e58a09f4b52e59b4d56604",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:37699", "10.65.0.27:37699", "172.17.0.1:37699"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:58.204449073Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6602871901992344,
-				"StableID":   "n1oNWQFTZt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bec759affec5914c1209f00dfdd79c548441005a2312f5ac9ec8dfdfebe4b56c",
-				"DiscoKey":   "discokey:27df747166a5ada3fc45118e8e485facbc068c8d9a3c18ab232afa94549bc27a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:40368", "10.65.0.27:40368", "172.17.0.1:40368"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:58.729245096Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2597208385383277,
-				"StableID":   "nL84J6GHHM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ee663046f74c27536dd7a3590ca401b0c3d483ec0dbb948df1f1c1f99de1e524",
-				"KeyExpiry":  "2026-11-07T16:14:59Z",
-				"DiscoKey":   "discokey:22d694f88857706358a86e223341ba08ed4c0ad830d98f9635458aa095017562",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:60298", "10.65.0.27:60298", "172.17.0.1:60298"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:59.267871307Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3405190350218498,
-				"StableID":   "n5itiRaDbT11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:256a2d3c830ad07da326a0c521b32e342b5e77471de06249829d4a19705fb47e",
-				"KeyExpiry":  "2026-11-07T16:15:00Z",
-				"DiscoKey":   "discokey:0c43fa1c923881fb83bc364f0a8502ef10bb8aa1a05aba4ec4bad1b069856025",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51348", "10.65.0.27:51348", "172.17.0.1:51348"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:15:00.357374693Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-devices-auto-updates-on.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-devices-auto-updates-on.hujson
deleted file mode 100644
index edf5f55af..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-devices-auto-updates-on.hujson
+++ /dev/null
@@ -1,8818 +0,0 @@
-// nodeattrs-tailnet-devices-auto-updates-on
-//
-// Tailnet setting: devices_auto_updates_on -- expect default-auto-update toggle
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-11T16:14:00Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-tailnet-devices-auto-updates-on",
-	"description":    "Tailnet setting: devices_auto_updates_on -- expect default-auto-update toggle",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-11T16:14:00.949732513Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {"devices_auto_updates_on": true}
-		},
-		"scenario_hujson": "                                            \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"Tailnet setting: devices_auto_updates_on -- expect default-auto-update toggle\",\n    \"id\": \"nodeattrs-tailnet-devices-auto-updates-on\",\n    \"options\": {},\n    \"policy\": {\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {\n            \"devices_auto_updates_on\": true\n        }\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-tailnet-devices-auto-updates-on.hujson",
-		"full_policy": {"tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3413850799410676,
-				"StableID":   "nP2kx959fT11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       3413850799410676,
-				"Key":        "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-				"DiscoKey":   "discokey:2129e2508628089eaf4fd4be42f8af3d95e97ea2dc259a0593025c5558376c57",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39393", "10.65.0.27:39393", "172.17.0.1:39393"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:06.610934845Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [true],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-			"MachineKey": "mkey:e10f2f70c13677f8e91b85c2f2ab0f0bc4af52405256c0f30c46d03cdd8bd36a",
-			"Peers": [{
-				"ID":         4388853942575051,
-				"StableID":   "npPuyYkiGb11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-				"DiscoKey":   "discokey:788f44a603abcd29caf8681411b79090ece5f4ddedbb47a4c784f65ffec6e261",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33160", "10.65.0.27:33160", "172.17.0.1:33160"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:07.127020111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5652642935594305,
-				"StableID":   "nWhpezL69m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-				"DiscoKey":   "discokey:6bcb3048d498063fc6afe3cc4284feaf2880d83c2970f422568d1bf6e611873e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33610", "10.65.0.27:33610", "172.17.0.1:33610"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:07.667958676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4770668431790528,
-				"StableID":   "nR7zvTNeFe11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-				"DiscoKey":   "discokey:cb39ae81a8f31d17a63014331d99947e545d973aff700709d7e04f5a54187a5a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34365", "10.65.0.27:34365", "172.17.0.1:34365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:08.21046022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6729621755598951,
-				"StableID":   "nCT33dkrYu11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-				"DiscoKey":   "discokey:170c4bd04dbe6d7387441a3612a8a640ffc1a2c9a32f198bb13b9c3933579b29",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52803", "10.65.0.27:52803", "172.17.0.1:52803"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:08.757641503Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3922141187141018,
-				"StableID":   "nT53ytzLdX11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:9730148b9c15650ca873ac0ce4f411980c1518257ae523f2e108603dbc479567",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55050", "10.65.0.27:55050", "172.17.0.1:55050"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:09.283042336Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7050310404505041,
-				"StableID":   "n6VxnYh64x11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:5f053b8091e5ba3dc6cf8c732c226c4fec145a9187003a618ec4aba20542554c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60027", "10.65.0.27:60027", "172.17.0.1:60027"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:09.827035024Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2797680983517579,
-				"StableID":   "nA2hJTL5rN11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-				"KeyExpiry":  "2026-11-07T16:14:10Z",
-				"DiscoKey":   "discokey:10cea20a0025a0708671f42bf75f82ff6e4aad8ed16908a80385a7e86329df0f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41271", "10.65.0.27:41271", "172.17.0.1:41271"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:14:10.371320111Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3413850799410676": {
-				"ID":          3413850799410676,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4388853942575051,
-				"StableID":   "npPuyYkiGb11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       4388853942575051,
-				"Key":        "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-				"DiscoKey":   "discokey:788f44a603abcd29caf8681411b79090ece5f4ddedbb47a4c784f65ffec6e261",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33160", "10.65.0.27:33160", "172.17.0.1:33160"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-11T16:14:07.127020111Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [true],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-			"MachineKey": "mkey:1b93130b0422cd5fdcbe7782eb2511acae6962afb4ad09ef90776841490b251b",
-			"Peers": [{
-				"ID":         3413850799410676,
-				"StableID":   "nP2kx959fT11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-				"DiscoKey":   "discokey:2129e2508628089eaf4fd4be42f8af3d95e97ea2dc259a0593025c5558376c57",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39393", "10.65.0.27:39393", "172.17.0.1:39393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:06.610934845Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5652642935594305,
-				"StableID":   "nWhpezL69m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-				"DiscoKey":   "discokey:6bcb3048d498063fc6afe3cc4284feaf2880d83c2970f422568d1bf6e611873e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33610", "10.65.0.27:33610", "172.17.0.1:33610"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:07.667958676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4770668431790528,
-				"StableID":   "nR7zvTNeFe11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-				"DiscoKey":   "discokey:cb39ae81a8f31d17a63014331d99947e545d973aff700709d7e04f5a54187a5a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34365", "10.65.0.27:34365", "172.17.0.1:34365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:08.21046022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6729621755598951,
-				"StableID":   "nCT33dkrYu11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-				"DiscoKey":   "discokey:170c4bd04dbe6d7387441a3612a8a640ffc1a2c9a32f198bb13b9c3933579b29",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52803", "10.65.0.27:52803", "172.17.0.1:52803"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:08.757641503Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3922141187141018,
-				"StableID":   "nT53ytzLdX11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:9730148b9c15650ca873ac0ce4f411980c1518257ae523f2e108603dbc479567",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55050", "10.65.0.27:55050", "172.17.0.1:55050"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:09.283042336Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7050310404505041,
-				"StableID":   "n6VxnYh64x11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:5f053b8091e5ba3dc6cf8c732c226c4fec145a9187003a618ec4aba20542554c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60027", "10.65.0.27:60027", "172.17.0.1:60027"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:09.827035024Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2797680983517579,
-				"StableID":   "nA2hJTL5rN11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-				"KeyExpiry":  "2026-11-07T16:14:10Z",
-				"DiscoKey":   "discokey:10cea20a0025a0708671f42bf75f82ff6e4aad8ed16908a80385a7e86329df0f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41271", "10.65.0.27:41271", "172.17.0.1:41271"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:14:10.371320111Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4388853942575051": {
-				"ID":          4388853942575051,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3922141187141018,
-				"StableID":   "nT53ytzLdX11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:9730148b9c15650ca873ac0ce4f411980c1518257ae523f2e108603dbc479567",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55050", "10.65.0.27:55050", "172.17.0.1:55050"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:09.283042336Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [true],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-			"MachineKey": "mkey:09607ab7783bc291748eea75028b9a14f40d1dd55d4b9319d7e0a8fe02b9a50f",
-			"Peers": [{
-				"ID":         3413850799410676,
-				"StableID":   "nP2kx959fT11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-				"DiscoKey":   "discokey:2129e2508628089eaf4fd4be42f8af3d95e97ea2dc259a0593025c5558376c57",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39393", "10.65.0.27:39393", "172.17.0.1:39393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:06.610934845Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4388853942575051,
-				"StableID":   "npPuyYkiGb11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-				"DiscoKey":   "discokey:788f44a603abcd29caf8681411b79090ece5f4ddedbb47a4c784f65ffec6e261",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33160", "10.65.0.27:33160", "172.17.0.1:33160"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:07.127020111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5652642935594305,
-				"StableID":   "nWhpezL69m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-				"DiscoKey":   "discokey:6bcb3048d498063fc6afe3cc4284feaf2880d83c2970f422568d1bf6e611873e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33610", "10.65.0.27:33610", "172.17.0.1:33610"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:07.667958676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4770668431790528,
-				"StableID":   "nR7zvTNeFe11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-				"DiscoKey":   "discokey:cb39ae81a8f31d17a63014331d99947e545d973aff700709d7e04f5a54187a5a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34365", "10.65.0.27:34365", "172.17.0.1:34365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:08.21046022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6729621755598951,
-				"StableID":   "nCT33dkrYu11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-				"DiscoKey":   "discokey:170c4bd04dbe6d7387441a3612a8a640ffc1a2c9a32f198bb13b9c3933579b29",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52803", "10.65.0.27:52803", "172.17.0.1:52803"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:08.757641503Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7050310404505041,
-				"StableID":   "n6VxnYh64x11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:5f053b8091e5ba3dc6cf8c732c226c4fec145a9187003a618ec4aba20542554c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60027", "10.65.0.27:60027", "172.17.0.1:60027"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:09.827035024Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2797680983517579,
-				"StableID":   "nA2hJTL5rN11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-				"KeyExpiry":  "2026-11-07T16:14:10Z",
-				"DiscoKey":   "discokey:10cea20a0025a0708671f42bf75f82ff6e4aad8ed16908a80385a7e86329df0f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41271", "10.65.0.27:41271", "172.17.0.1:41271"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:14:10.371320111Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5652642935594305,
-				"StableID":   "nWhpezL69m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5652642935594305,
-				"Key":        "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-				"DiscoKey":   "discokey:6bcb3048d498063fc6afe3cc4284feaf2880d83c2970f422568d1bf6e611873e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33610", "10.65.0.27:33610", "172.17.0.1:33610"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:07.667958676Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [true],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-			"MachineKey": "mkey:258cd85ce2c1d9c10c45cc73a0b794bc0a44d55b7bf24bc3cf987d6d94b5f36b",
-			"Peers": [{
-				"ID":         3413850799410676,
-				"StableID":   "nP2kx959fT11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-				"DiscoKey":   "discokey:2129e2508628089eaf4fd4be42f8af3d95e97ea2dc259a0593025c5558376c57",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39393", "10.65.0.27:39393", "172.17.0.1:39393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:06.610934845Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4388853942575051,
-				"StableID":   "npPuyYkiGb11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-				"DiscoKey":   "discokey:788f44a603abcd29caf8681411b79090ece5f4ddedbb47a4c784f65ffec6e261",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33160", "10.65.0.27:33160", "172.17.0.1:33160"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:07.127020111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4770668431790528,
-				"StableID":   "nR7zvTNeFe11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-				"DiscoKey":   "discokey:cb39ae81a8f31d17a63014331d99947e545d973aff700709d7e04f5a54187a5a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34365", "10.65.0.27:34365", "172.17.0.1:34365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:08.21046022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6729621755598951,
-				"StableID":   "nCT33dkrYu11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-				"DiscoKey":   "discokey:170c4bd04dbe6d7387441a3612a8a640ffc1a2c9a32f198bb13b9c3933579b29",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52803", "10.65.0.27:52803", "172.17.0.1:52803"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:08.757641503Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3922141187141018,
-				"StableID":   "nT53ytzLdX11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:9730148b9c15650ca873ac0ce4f411980c1518257ae523f2e108603dbc479567",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55050", "10.65.0.27:55050", "172.17.0.1:55050"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:09.283042336Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7050310404505041,
-				"StableID":   "n6VxnYh64x11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:5f053b8091e5ba3dc6cf8c732c226c4fec145a9187003a618ec4aba20542554c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60027", "10.65.0.27:60027", "172.17.0.1:60027"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:09.827035024Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2797680983517579,
-				"StableID":   "nA2hJTL5rN11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-				"KeyExpiry":  "2026-11-07T16:14:10Z",
-				"DiscoKey":   "discokey:10cea20a0025a0708671f42bf75f82ff6e4aad8ed16908a80385a7e86329df0f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41271", "10.65.0.27:41271", "172.17.0.1:41271"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:14:10.371320111Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5652642935594305": {
-				"ID":          5652642935594305,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4770668431790528,
-				"StableID":   "nR7zvTNeFe11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       4770668431790528,
-				"Key":        "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-				"DiscoKey":   "discokey:cb39ae81a8f31d17a63014331d99947e545d973aff700709d7e04f5a54187a5a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34365", "10.65.0.27:34365", "172.17.0.1:34365"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-11T16:14:08.21046022Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [true],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-			"MachineKey": "mkey:cbef56cbe0b188457d7651e39ad8400dc34135b7320bffbaf064053854065c3f",
-			"Peers": [{
-				"ID":         3413850799410676,
-				"StableID":   "nP2kx959fT11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-				"DiscoKey":   "discokey:2129e2508628089eaf4fd4be42f8af3d95e97ea2dc259a0593025c5558376c57",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39393", "10.65.0.27:39393", "172.17.0.1:39393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:06.610934845Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4388853942575051,
-				"StableID":   "npPuyYkiGb11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-				"DiscoKey":   "discokey:788f44a603abcd29caf8681411b79090ece5f4ddedbb47a4c784f65ffec6e261",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33160", "10.65.0.27:33160", "172.17.0.1:33160"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:07.127020111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5652642935594305,
-				"StableID":   "nWhpezL69m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-				"DiscoKey":   "discokey:6bcb3048d498063fc6afe3cc4284feaf2880d83c2970f422568d1bf6e611873e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33610", "10.65.0.27:33610", "172.17.0.1:33610"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:07.667958676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6729621755598951,
-				"StableID":   "nCT33dkrYu11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-				"DiscoKey":   "discokey:170c4bd04dbe6d7387441a3612a8a640ffc1a2c9a32f198bb13b9c3933579b29",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52803", "10.65.0.27:52803", "172.17.0.1:52803"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:08.757641503Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3922141187141018,
-				"StableID":   "nT53ytzLdX11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:9730148b9c15650ca873ac0ce4f411980c1518257ae523f2e108603dbc479567",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55050", "10.65.0.27:55050", "172.17.0.1:55050"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:09.283042336Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7050310404505041,
-				"StableID":   "n6VxnYh64x11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:5f053b8091e5ba3dc6cf8c732c226c4fec145a9187003a618ec4aba20542554c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60027", "10.65.0.27:60027", "172.17.0.1:60027"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:09.827035024Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2797680983517579,
-				"StableID":   "nA2hJTL5rN11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-				"KeyExpiry":  "2026-11-07T16:14:10Z",
-				"DiscoKey":   "discokey:10cea20a0025a0708671f42bf75f82ff6e4aad8ed16908a80385a7e86329df0f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41271", "10.65.0.27:41271", "172.17.0.1:41271"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:14:10.371320111Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4770668431790528": {
-				"ID":          4770668431790528,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6729621755598951,
-				"StableID":   "nCT33dkrYu11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       6729621755598951,
-				"Key":        "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-				"DiscoKey":   "discokey:170c4bd04dbe6d7387441a3612a8a640ffc1a2c9a32f198bb13b9c3933579b29",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52803", "10.65.0.27:52803", "172.17.0.1:52803"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:08.757641503Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [true],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-			"MachineKey": "mkey:d163cbe80b519151817d11bcf0364f61b6a4eb8641b7d340c7e20c9e27fcc109",
-			"Peers": [{
-				"ID":         3413850799410676,
-				"StableID":   "nP2kx959fT11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-				"DiscoKey":   "discokey:2129e2508628089eaf4fd4be42f8af3d95e97ea2dc259a0593025c5558376c57",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39393", "10.65.0.27:39393", "172.17.0.1:39393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:06.610934845Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4388853942575051,
-				"StableID":   "npPuyYkiGb11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-				"DiscoKey":   "discokey:788f44a603abcd29caf8681411b79090ece5f4ddedbb47a4c784f65ffec6e261",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33160", "10.65.0.27:33160", "172.17.0.1:33160"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:07.127020111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5652642935594305,
-				"StableID":   "nWhpezL69m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-				"DiscoKey":   "discokey:6bcb3048d498063fc6afe3cc4284feaf2880d83c2970f422568d1bf6e611873e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33610", "10.65.0.27:33610", "172.17.0.1:33610"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:07.667958676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4770668431790528,
-				"StableID":   "nR7zvTNeFe11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-				"DiscoKey":   "discokey:cb39ae81a8f31d17a63014331d99947e545d973aff700709d7e04f5a54187a5a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34365", "10.65.0.27:34365", "172.17.0.1:34365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:08.21046022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3922141187141018,
-				"StableID":   "nT53ytzLdX11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:9730148b9c15650ca873ac0ce4f411980c1518257ae523f2e108603dbc479567",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55050", "10.65.0.27:55050", "172.17.0.1:55050"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:09.283042336Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7050310404505041,
-				"StableID":   "n6VxnYh64x11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:5f053b8091e5ba3dc6cf8c732c226c4fec145a9187003a618ec4aba20542554c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60027", "10.65.0.27:60027", "172.17.0.1:60027"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:09.827035024Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2797680983517579,
-				"StableID":   "nA2hJTL5rN11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-				"KeyExpiry":  "2026-11-07T16:14:10Z",
-				"DiscoKey":   "discokey:10cea20a0025a0708671f42bf75f82ff6e4aad8ed16908a80385a7e86329df0f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41271", "10.65.0.27:41271", "172.17.0.1:41271"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:14:10.371320111Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6729621755598951": {
-				"ID":          6729621755598951,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2797680983517579,
-				"StableID":   "nA2hJTL5rN11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-				"KeyExpiry":  "2026-11-07T16:14:10Z",
-				"DiscoKey":   "discokey:10cea20a0025a0708671f42bf75f82ff6e4aad8ed16908a80385a7e86329df0f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41271", "10.65.0.27:41271", "172.17.0.1:41271"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:10.371320111Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [true],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-			"MachineKey": "mkey:765343fce900844084d635ec9cb081f2e0c030a70d5d554e0071a0e6a5a5d351",
-			"Peers": [{
-				"ID":         3413850799410676,
-				"StableID":   "nP2kx959fT11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-				"DiscoKey":   "discokey:2129e2508628089eaf4fd4be42f8af3d95e97ea2dc259a0593025c5558376c57",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39393", "10.65.0.27:39393", "172.17.0.1:39393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:06.610934845Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4388853942575051,
-				"StableID":   "npPuyYkiGb11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-				"DiscoKey":   "discokey:788f44a603abcd29caf8681411b79090ece5f4ddedbb47a4c784f65ffec6e261",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33160", "10.65.0.27:33160", "172.17.0.1:33160"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:07.127020111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5652642935594305,
-				"StableID":   "nWhpezL69m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-				"DiscoKey":   "discokey:6bcb3048d498063fc6afe3cc4284feaf2880d83c2970f422568d1bf6e611873e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33610", "10.65.0.27:33610", "172.17.0.1:33610"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:07.667958676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4770668431790528,
-				"StableID":   "nR7zvTNeFe11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-				"DiscoKey":   "discokey:cb39ae81a8f31d17a63014331d99947e545d973aff700709d7e04f5a54187a5a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34365", "10.65.0.27:34365", "172.17.0.1:34365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:08.21046022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6729621755598951,
-				"StableID":   "nCT33dkrYu11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-				"DiscoKey":   "discokey:170c4bd04dbe6d7387441a3612a8a640ffc1a2c9a32f198bb13b9c3933579b29",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52803", "10.65.0.27:52803", "172.17.0.1:52803"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:08.757641503Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3922141187141018,
-				"StableID":   "nT53ytzLdX11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:9730148b9c15650ca873ac0ce4f411980c1518257ae523f2e108603dbc479567",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55050", "10.65.0.27:55050", "172.17.0.1:55050"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:09.283042336Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7050310404505041,
-				"StableID":   "n6VxnYh64x11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:5f053b8091e5ba3dc6cf8c732c226c4fec145a9187003a618ec4aba20542554c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60027", "10.65.0.27:60027", "172.17.0.1:60027"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-11T16:14:09.827035024Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7050310404505041,
-				"StableID":   "n6VxnYh64x11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:5f053b8091e5ba3dc6cf8c732c226c4fec145a9187003a618ec4aba20542554c",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:60027", "10.65.0.27:60027", "172.17.0.1:60027"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-11T16:14:09.827035024Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [true],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:25b1cc839ceb6f762e70c534cb7e8c05ef1f4d2ab795642d9db9f477a4bb357e",
-			"MachineKey": "mkey:a7465f036b7a51dddab7f0427be3b74c9757c26d3e2cad034deb133771501977",
-			"Peers": [{
-				"ID":         3413850799410676,
-				"StableID":   "nP2kx959fT11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d812edb2a2183d952804687686ec9aa58ef7043e9889b40f4ab693496658e52c",
-				"DiscoKey":   "discokey:2129e2508628089eaf4fd4be42f8af3d95e97ea2dc259a0593025c5558376c57",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39393", "10.65.0.27:39393", "172.17.0.1:39393"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-11T16:14:06.610934845Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4388853942575051,
-				"StableID":   "npPuyYkiGb11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3ad641f96f342f5df862ae7388defb5155d662699901e2f4daf07e44f3905304",
-				"DiscoKey":   "discokey:788f44a603abcd29caf8681411b79090ece5f4ddedbb47a4c784f65ffec6e261",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:33160", "10.65.0.27:33160", "172.17.0.1:33160"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-11T16:14:07.127020111Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5652642935594305,
-				"StableID":   "nWhpezL69m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:07798d1d11379bef5455346e4fd211159e62f3b8cb4037a603b34581b3f47565",
-				"DiscoKey":   "discokey:6bcb3048d498063fc6afe3cc4284feaf2880d83c2970f422568d1bf6e611873e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:33610", "10.65.0.27:33610", "172.17.0.1:33610"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-11T16:14:07.667958676Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4770668431790528,
-				"StableID":   "nR7zvTNeFe11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:64ac78d2ca915358ed87ee7f7927abf8695a31fc18a7f1f94bdc6a96b6948a77",
-				"DiscoKey":   "discokey:cb39ae81a8f31d17a63014331d99947e545d973aff700709d7e04f5a54187a5a",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:34365", "10.65.0.27:34365", "172.17.0.1:34365"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-11T16:14:08.21046022Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6729621755598951,
-				"StableID":   "nCT33dkrYu11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4388c242ebfac04c6abf49165391ef05acd51d895e22009bb461cf9cdd9f243c",
-				"DiscoKey":   "discokey:170c4bd04dbe6d7387441a3612a8a640ffc1a2c9a32f198bb13b9c3933579b29",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:52803", "10.65.0.27:52803", "172.17.0.1:52803"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-11T16:14:08.757641503Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3922141187141018,
-				"StableID":   "nT53ytzLdX11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:36453adbca74a6f0a2a083cf35e715dea19c64a9c8d4817d50f83f56e5d3661c",
-				"KeyExpiry":  "2026-11-07T16:14:09Z",
-				"DiscoKey":   "discokey:9730148b9c15650ca873ac0ce4f411980c1518257ae523f2e108603dbc479567",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:55050", "10.65.0.27:55050", "172.17.0.1:55050"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-11T16:14:09.283042336Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         2797680983517579,
-				"StableID":   "nA2hJTL5rN11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:5f812c5c9dd4817cb692db557b7ef09b26f20999fd0ff0fd06edc575c1e51e43",
-				"KeyExpiry":  "2026-11-07T16:14:10Z",
-				"DiscoKey":   "discokey:10cea20a0025a0708671f42bf75f82ff6e4aad8ed16908a80385a7e86329df0f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:41271", "10.65.0.27:41271", "172.17.0.1:41271"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-11T16:14:10.371320111Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-magicdns-on.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-magicdns-on.hujson
deleted file mode 100644
index e2dd952d8..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-tailnet-magicdns-on.hujson
+++ /dev/null
@@ -1,9202 +0,0 @@
-// nodeattrs-tailnet-magicdns-on
-//
-// Tailnet setting: dns.magic_dns ON -- DNSConfig delta
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T12:41:55Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-tailnet-magicdns-on",
-	"description":    "Tailnet setting: dns.magic_dns ON -- DNSConfig delta",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T12:41:55.304151537Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": true, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"Tailnet setting: dns.magic_dns ON -- DNSConfig delta\",\n    \"id\": \"nodeattrs-tailnet-magicdns-on\",\n    \"options\": {},\n    \"policy\": {\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": true,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-tailnet-magicdns-on.hujson",
-		"full_policy": {"tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5954820057290456,
-				"StableID":   "n5969U2xVo11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       5954820057290456,
-				"Key":        "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-				"DiscoKey":   "discokey:11c4ed4d148c918a9dc7040dddcabcd9a950af049fb5c501c9d3dc2389abe410",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:52956",
-					"10.65.0.27:52956",
-					"172.17.0.1:52956",
-					"172.18.0.1:52956"
-				],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T12:42:00.905692Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-			"MachineKey": "mkey:31e8aefa25fe8764c3df5b7817a91da6bee9117494a486a98ff3a4edebdaeb29",
-			"Peers": [{
-				"ID":         3459751702144676,
-				"StableID":   "nXQDZ1pv1U11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-				"DiscoKey":   "discokey:e0dcd1b508da93f807855dd89322afc5f923f49c83dd9bcdacc6afc96e6a8757",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:45521",
-					"10.65.0.27:45521",
-					"172.17.0.1:45521",
-					"172.18.0.1:45521"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T12:42:01.412861131Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3198713035455910,
-				"StableID":   "nqQyTWmhyR11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-				"DiscoKey":   "discokey:a83de1ade812eee6e5417093cac1ad28a8e0298d1245d8a3ade47487e0909e5e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:55671",
-					"10.65.0.27:55671",
-					"172.17.0.1:55671",
-					"172.18.0.1:55671"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T12:42:01.952131448Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4468987445877474,
-				"StableID":   "nfsHGti1ub11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-				"DiscoKey":   "discokey:134eb352ca1186f62143d940168540c8d008b2b7f253a31d9d04bdafef062f58",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:36939",
-					"10.65.0.27:36939",
-					"172.17.0.1:36939",
-					"172.18.0.1:36939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T12:42:02.497924054Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5103941888467917,
-				"StableID":   "n4SF48uarg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-				"DiscoKey":   "discokey:ae72c3da527e8010b2618c9e010e20cae8dd548563288333e7a7f7ee8fb6a56f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:49407",
-					"10.65.0.27:49407",
-					"172.17.0.1:49407",
-					"172.18.0.1:49407"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T12:42:03.042835715Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1526572678371283,
-				"StableID":   "nLMw5bUPvC11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-				"KeyExpiry":  "2026-11-03T12:42:03Z",
-				"DiscoKey":   "discokey:d1b2eb7b3f9683c9cb0a4eaf8923e014be8555e1d5c4747a739b191d3cbc7809",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:48939",
-					"10.65.0.27:48939",
-					"172.17.0.1:48939",
-					"172.18.0.1:48939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T12:42:03.582165532Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7776111592703966,
-				"StableID":   "njMSQQGpi321CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:9a5c267c12359b74d600963dd3b3b23cc0493267bc633ff7b287a27f3c172078",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:59613",
-					"10.65.0.27:59613",
-					"172.17.0.1:59613",
-					"172.18.0.1:59613"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T12:42:04.126931065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3636839277133049,
-				"StableID":   "nCze9rb8QV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:68edc8287a354e445890f5955fd0c646e47982b6ff1c93b57148177323d43a59",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36807",
-					"10.65.0.27:36807",
-					"172.17.0.1:36807",
-					"172.18.0.1:36807"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T12:42:04.668648044Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {
-				"Routes": {
-					"tail78f774.ts.net.": null,
-					"ts.net.":            [{"Addr": "199.247.155.53"}, {"Addr": "2620:111:8007::53"}]
-				},
-				"Domains":             ["tail78f774.ts.net"],
-				"Proxied":             true,
-				"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]
-			},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5954820057290456": {
-				"ID":          5954820057290456,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3459751702144676,
-				"StableID":   "nXQDZ1pv1U11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3459751702144676,
-				"Key":        "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-				"DiscoKey":   "discokey:e0dcd1b508da93f807855dd89322afc5f923f49c83dd9bcdacc6afc96e6a8757",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:45521",
-					"10.65.0.27:45521",
-					"172.17.0.1:45521",
-					"172.18.0.1:45521"
-				],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T12:42:01.412861131Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-			"MachineKey": "mkey:26f5c22ed0e558a113d1b20476d95ff8dc357a9fa1fa91a5a16a1a41c33ac578",
-			"Peers": [{
-				"ID":         5954820057290456,
-				"StableID":   "n5969U2xVo11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-				"DiscoKey":   "discokey:11c4ed4d148c918a9dc7040dddcabcd9a950af049fb5c501c9d3dc2389abe410",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:52956",
-					"10.65.0.27:52956",
-					"172.17.0.1:52956",
-					"172.18.0.1:52956"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T12:42:00.905692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3198713035455910,
-				"StableID":   "nqQyTWmhyR11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-				"DiscoKey":   "discokey:a83de1ade812eee6e5417093cac1ad28a8e0298d1245d8a3ade47487e0909e5e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:55671",
-					"10.65.0.27:55671",
-					"172.17.0.1:55671",
-					"172.18.0.1:55671"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T12:42:01.952131448Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4468987445877474,
-				"StableID":   "nfsHGti1ub11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-				"DiscoKey":   "discokey:134eb352ca1186f62143d940168540c8d008b2b7f253a31d9d04bdafef062f58",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:36939",
-					"10.65.0.27:36939",
-					"172.17.0.1:36939",
-					"172.18.0.1:36939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T12:42:02.497924054Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5103941888467917,
-				"StableID":   "n4SF48uarg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-				"DiscoKey":   "discokey:ae72c3da527e8010b2618c9e010e20cae8dd548563288333e7a7f7ee8fb6a56f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:49407",
-					"10.65.0.27:49407",
-					"172.17.0.1:49407",
-					"172.18.0.1:49407"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T12:42:03.042835715Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1526572678371283,
-				"StableID":   "nLMw5bUPvC11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-				"KeyExpiry":  "2026-11-03T12:42:03Z",
-				"DiscoKey":   "discokey:d1b2eb7b3f9683c9cb0a4eaf8923e014be8555e1d5c4747a739b191d3cbc7809",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:48939",
-					"10.65.0.27:48939",
-					"172.17.0.1:48939",
-					"172.18.0.1:48939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T12:42:03.582165532Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7776111592703966,
-				"StableID":   "njMSQQGpi321CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:9a5c267c12359b74d600963dd3b3b23cc0493267bc633ff7b287a27f3c172078",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:59613",
-					"10.65.0.27:59613",
-					"172.17.0.1:59613",
-					"172.18.0.1:59613"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T12:42:04.126931065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3636839277133049,
-				"StableID":   "nCze9rb8QV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:68edc8287a354e445890f5955fd0c646e47982b6ff1c93b57148177323d43a59",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36807",
-					"10.65.0.27:36807",
-					"172.17.0.1:36807",
-					"172.18.0.1:36807"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T12:42:04.668648044Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {
-				"Routes": {
-					"tail78f774.ts.net.": null,
-					"ts.net.":            [{"Addr": "199.247.155.53"}, {"Addr": "2620:111:8007::53"}]
-				},
-				"Domains":             ["tail78f774.ts.net"],
-				"Proxied":             true,
-				"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]
-			},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3459751702144676": {
-				"ID":          3459751702144676,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1526572678371283,
-				"StableID":   "nLMw5bUPvC11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-				"KeyExpiry":  "2026-11-03T12:42:03Z",
-				"DiscoKey":   "discokey:d1b2eb7b3f9683c9cb0a4eaf8923e014be8555e1d5c4747a739b191d3cbc7809",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:48939",
-					"10.65.0.27:48939",
-					"172.17.0.1:48939",
-					"172.18.0.1:48939"
-				],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T12:42:03.582165532Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-			"MachineKey": "mkey:5e661a554af5fcfdc41474915e4929be9e8b842c172e14db67a2e348c879426f",
-			"Peers": [{
-				"ID":         5954820057290456,
-				"StableID":   "n5969U2xVo11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-				"DiscoKey":   "discokey:11c4ed4d148c918a9dc7040dddcabcd9a950af049fb5c501c9d3dc2389abe410",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:52956",
-					"10.65.0.27:52956",
-					"172.17.0.1:52956",
-					"172.18.0.1:52956"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T12:42:00.905692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3459751702144676,
-				"StableID":   "nXQDZ1pv1U11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-				"DiscoKey":   "discokey:e0dcd1b508da93f807855dd89322afc5f923f49c83dd9bcdacc6afc96e6a8757",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:45521",
-					"10.65.0.27:45521",
-					"172.17.0.1:45521",
-					"172.18.0.1:45521"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T12:42:01.412861131Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3198713035455910,
-				"StableID":   "nqQyTWmhyR11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-				"DiscoKey":   "discokey:a83de1ade812eee6e5417093cac1ad28a8e0298d1245d8a3ade47487e0909e5e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:55671",
-					"10.65.0.27:55671",
-					"172.17.0.1:55671",
-					"172.18.0.1:55671"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T12:42:01.952131448Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4468987445877474,
-				"StableID":   "nfsHGti1ub11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-				"DiscoKey":   "discokey:134eb352ca1186f62143d940168540c8d008b2b7f253a31d9d04bdafef062f58",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:36939",
-					"10.65.0.27:36939",
-					"172.17.0.1:36939",
-					"172.18.0.1:36939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T12:42:02.497924054Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5103941888467917,
-				"StableID":   "n4SF48uarg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-				"DiscoKey":   "discokey:ae72c3da527e8010b2618c9e010e20cae8dd548563288333e7a7f7ee8fb6a56f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:49407",
-					"10.65.0.27:49407",
-					"172.17.0.1:49407",
-					"172.18.0.1:49407"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T12:42:03.042835715Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7776111592703966,
-				"StableID":   "njMSQQGpi321CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:9a5c267c12359b74d600963dd3b3b23cc0493267bc633ff7b287a27f3c172078",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:59613",
-					"10.65.0.27:59613",
-					"172.17.0.1:59613",
-					"172.18.0.1:59613"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T12:42:04.126931065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3636839277133049,
-				"StableID":   "nCze9rb8QV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:68edc8287a354e445890f5955fd0c646e47982b6ff1c93b57148177323d43a59",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36807",
-					"10.65.0.27:36807",
-					"172.17.0.1:36807",
-					"172.18.0.1:36807"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T12:42:04.668648044Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {
-				"Routes": {
-					"tail78f774.ts.net.": null,
-					"ts.net.":            [{"Addr": "199.247.155.53"}, {"Addr": "2620:111:8007::53"}]
-				},
-				"Domains":             ["tail78f774.ts.net"],
-				"Proxied":             true,
-				"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]
-			},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3198713035455910,
-				"StableID":   "nqQyTWmhyR11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       3198713035455910,
-				"Key":        "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-				"DiscoKey":   "discokey:a83de1ade812eee6e5417093cac1ad28a8e0298d1245d8a3ade47487e0909e5e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:55671",
-					"10.65.0.27:55671",
-					"172.17.0.1:55671",
-					"172.18.0.1:55671"
-				],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T12:42:01.952131448Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-			"MachineKey": "mkey:cca59a70e86cc5869d6d2cc026428cd033deff1bb82654f8d268901cc8dd6e0e",
-			"Peers": [{
-				"ID":         5954820057290456,
-				"StableID":   "n5969U2xVo11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-				"DiscoKey":   "discokey:11c4ed4d148c918a9dc7040dddcabcd9a950af049fb5c501c9d3dc2389abe410",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:52956",
-					"10.65.0.27:52956",
-					"172.17.0.1:52956",
-					"172.18.0.1:52956"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T12:42:00.905692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3459751702144676,
-				"StableID":   "nXQDZ1pv1U11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-				"DiscoKey":   "discokey:e0dcd1b508da93f807855dd89322afc5f923f49c83dd9bcdacc6afc96e6a8757",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:45521",
-					"10.65.0.27:45521",
-					"172.17.0.1:45521",
-					"172.18.0.1:45521"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T12:42:01.412861131Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4468987445877474,
-				"StableID":   "nfsHGti1ub11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-				"DiscoKey":   "discokey:134eb352ca1186f62143d940168540c8d008b2b7f253a31d9d04bdafef062f58",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:36939",
-					"10.65.0.27:36939",
-					"172.17.0.1:36939",
-					"172.18.0.1:36939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T12:42:02.497924054Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5103941888467917,
-				"StableID":   "n4SF48uarg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-				"DiscoKey":   "discokey:ae72c3da527e8010b2618c9e010e20cae8dd548563288333e7a7f7ee8fb6a56f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:49407",
-					"10.65.0.27:49407",
-					"172.17.0.1:49407",
-					"172.18.0.1:49407"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T12:42:03.042835715Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1526572678371283,
-				"StableID":   "nLMw5bUPvC11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-				"KeyExpiry":  "2026-11-03T12:42:03Z",
-				"DiscoKey":   "discokey:d1b2eb7b3f9683c9cb0a4eaf8923e014be8555e1d5c4747a739b191d3cbc7809",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:48939",
-					"10.65.0.27:48939",
-					"172.17.0.1:48939",
-					"172.18.0.1:48939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T12:42:03.582165532Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7776111592703966,
-				"StableID":   "njMSQQGpi321CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:9a5c267c12359b74d600963dd3b3b23cc0493267bc633ff7b287a27f3c172078",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:59613",
-					"10.65.0.27:59613",
-					"172.17.0.1:59613",
-					"172.18.0.1:59613"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T12:42:04.126931065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3636839277133049,
-				"StableID":   "nCze9rb8QV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:68edc8287a354e445890f5955fd0c646e47982b6ff1c93b57148177323d43a59",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36807",
-					"10.65.0.27:36807",
-					"172.17.0.1:36807",
-					"172.18.0.1:36807"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T12:42:04.668648044Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {
-				"Routes": {
-					"tail78f774.ts.net.": null,
-					"ts.net.":            [{"Addr": "199.247.155.53"}, {"Addr": "2620:111:8007::53"}]
-				},
-				"Domains":             ["tail78f774.ts.net"],
-				"Proxied":             true,
-				"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]
-			},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3198713035455910": {
-				"ID":          3198713035455910,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4468987445877474,
-				"StableID":   "nfsHGti1ub11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       4468987445877474,
-				"Key":        "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-				"DiscoKey":   "discokey:134eb352ca1186f62143d940168540c8d008b2b7f253a31d9d04bdafef062f58",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:36939",
-					"10.65.0.27:36939",
-					"172.17.0.1:36939",
-					"172.18.0.1:36939"
-				],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T12:42:02.497924054Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-			"MachineKey": "mkey:4a23c829c125def941396e1cbf451921df57513c8b8b3828e433d99367c6dd71",
-			"Peers": [{
-				"ID":         5954820057290456,
-				"StableID":   "n5969U2xVo11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-				"DiscoKey":   "discokey:11c4ed4d148c918a9dc7040dddcabcd9a950af049fb5c501c9d3dc2389abe410",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:52956",
-					"10.65.0.27:52956",
-					"172.17.0.1:52956",
-					"172.18.0.1:52956"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T12:42:00.905692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3459751702144676,
-				"StableID":   "nXQDZ1pv1U11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-				"DiscoKey":   "discokey:e0dcd1b508da93f807855dd89322afc5f923f49c83dd9bcdacc6afc96e6a8757",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:45521",
-					"10.65.0.27:45521",
-					"172.17.0.1:45521",
-					"172.18.0.1:45521"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T12:42:01.412861131Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3198713035455910,
-				"StableID":   "nqQyTWmhyR11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-				"DiscoKey":   "discokey:a83de1ade812eee6e5417093cac1ad28a8e0298d1245d8a3ade47487e0909e5e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:55671",
-					"10.65.0.27:55671",
-					"172.17.0.1:55671",
-					"172.18.0.1:55671"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T12:42:01.952131448Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5103941888467917,
-				"StableID":   "n4SF48uarg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-				"DiscoKey":   "discokey:ae72c3da527e8010b2618c9e010e20cae8dd548563288333e7a7f7ee8fb6a56f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:49407",
-					"10.65.0.27:49407",
-					"172.17.0.1:49407",
-					"172.18.0.1:49407"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T12:42:03.042835715Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1526572678371283,
-				"StableID":   "nLMw5bUPvC11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-				"KeyExpiry":  "2026-11-03T12:42:03Z",
-				"DiscoKey":   "discokey:d1b2eb7b3f9683c9cb0a4eaf8923e014be8555e1d5c4747a739b191d3cbc7809",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:48939",
-					"10.65.0.27:48939",
-					"172.17.0.1:48939",
-					"172.18.0.1:48939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T12:42:03.582165532Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7776111592703966,
-				"StableID":   "njMSQQGpi321CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:9a5c267c12359b74d600963dd3b3b23cc0493267bc633ff7b287a27f3c172078",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:59613",
-					"10.65.0.27:59613",
-					"172.17.0.1:59613",
-					"172.18.0.1:59613"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T12:42:04.126931065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3636839277133049,
-				"StableID":   "nCze9rb8QV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:68edc8287a354e445890f5955fd0c646e47982b6ff1c93b57148177323d43a59",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36807",
-					"10.65.0.27:36807",
-					"172.17.0.1:36807",
-					"172.18.0.1:36807"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T12:42:04.668648044Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {
-				"Routes": {
-					"tail78f774.ts.net.": null,
-					"ts.net.":            [{"Addr": "199.247.155.53"}, {"Addr": "2620:111:8007::53"}]
-				},
-				"Domains":             ["tail78f774.ts.net"],
-				"Proxied":             true,
-				"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]
-			},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4468987445877474": {
-				"ID":          4468987445877474,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5103941888467917,
-				"StableID":   "n4SF48uarg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       5103941888467917,
-				"Key":        "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-				"DiscoKey":   "discokey:ae72c3da527e8010b2618c9e010e20cae8dd548563288333e7a7f7ee8fb6a56f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:49407",
-					"10.65.0.27:49407",
-					"172.17.0.1:49407",
-					"172.18.0.1:49407"
-				],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T12:42:03.042835715Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-			"MachineKey": "mkey:939dd2df1510a18aff1e082aa5a666d818c05f533294c947b533af97e180bf15",
-			"Peers": [{
-				"ID":         5954820057290456,
-				"StableID":   "n5969U2xVo11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-				"DiscoKey":   "discokey:11c4ed4d148c918a9dc7040dddcabcd9a950af049fb5c501c9d3dc2389abe410",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:52956",
-					"10.65.0.27:52956",
-					"172.17.0.1:52956",
-					"172.18.0.1:52956"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T12:42:00.905692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3459751702144676,
-				"StableID":   "nXQDZ1pv1U11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-				"DiscoKey":   "discokey:e0dcd1b508da93f807855dd89322afc5f923f49c83dd9bcdacc6afc96e6a8757",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:45521",
-					"10.65.0.27:45521",
-					"172.17.0.1:45521",
-					"172.18.0.1:45521"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T12:42:01.412861131Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3198713035455910,
-				"StableID":   "nqQyTWmhyR11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-				"DiscoKey":   "discokey:a83de1ade812eee6e5417093cac1ad28a8e0298d1245d8a3ade47487e0909e5e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:55671",
-					"10.65.0.27:55671",
-					"172.17.0.1:55671",
-					"172.18.0.1:55671"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T12:42:01.952131448Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4468987445877474,
-				"StableID":   "nfsHGti1ub11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-				"DiscoKey":   "discokey:134eb352ca1186f62143d940168540c8d008b2b7f253a31d9d04bdafef062f58",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:36939",
-					"10.65.0.27:36939",
-					"172.17.0.1:36939",
-					"172.18.0.1:36939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T12:42:02.497924054Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1526572678371283,
-				"StableID":   "nLMw5bUPvC11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-				"KeyExpiry":  "2026-11-03T12:42:03Z",
-				"DiscoKey":   "discokey:d1b2eb7b3f9683c9cb0a4eaf8923e014be8555e1d5c4747a739b191d3cbc7809",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:48939",
-					"10.65.0.27:48939",
-					"172.17.0.1:48939",
-					"172.18.0.1:48939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T12:42:03.582165532Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7776111592703966,
-				"StableID":   "njMSQQGpi321CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:9a5c267c12359b74d600963dd3b3b23cc0493267bc633ff7b287a27f3c172078",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:59613",
-					"10.65.0.27:59613",
-					"172.17.0.1:59613",
-					"172.18.0.1:59613"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T12:42:04.126931065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3636839277133049,
-				"StableID":   "nCze9rb8QV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:68edc8287a354e445890f5955fd0c646e47982b6ff1c93b57148177323d43a59",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36807",
-					"10.65.0.27:36807",
-					"172.17.0.1:36807",
-					"172.18.0.1:36807"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T12:42:04.668648044Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {
-				"Routes": {
-					"tail78f774.ts.net.": null,
-					"ts.net.":            [{"Addr": "199.247.155.53"}, {"Addr": "2620:111:8007::53"}]
-				},
-				"Domains":             ["tail78f774.ts.net"],
-				"Proxied":             true,
-				"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]
-			},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5103941888467917": {
-				"ID":          5103941888467917,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3636839277133049,
-				"StableID":   "nCze9rb8QV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:68edc8287a354e445890f5955fd0c646e47982b6ff1c93b57148177323d43a59",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36807",
-					"10.65.0.27:36807",
-					"172.17.0.1:36807",
-					"172.18.0.1:36807"
-				],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T12:42:04.668648044Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-			"MachineKey": "mkey:b5a3a2bacad0353404e0ba27ddc199ea671e7a345a36d9f7c24d6f8da68c143e",
-			"Peers": [{
-				"ID":         5954820057290456,
-				"StableID":   "n5969U2xVo11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-				"DiscoKey":   "discokey:11c4ed4d148c918a9dc7040dddcabcd9a950af049fb5c501c9d3dc2389abe410",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:52956",
-					"10.65.0.27:52956",
-					"172.17.0.1:52956",
-					"172.18.0.1:52956"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T12:42:00.905692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3459751702144676,
-				"StableID":   "nXQDZ1pv1U11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-				"DiscoKey":   "discokey:e0dcd1b508da93f807855dd89322afc5f923f49c83dd9bcdacc6afc96e6a8757",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:45521",
-					"10.65.0.27:45521",
-					"172.17.0.1:45521",
-					"172.18.0.1:45521"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T12:42:01.412861131Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3198713035455910,
-				"StableID":   "nqQyTWmhyR11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-				"DiscoKey":   "discokey:a83de1ade812eee6e5417093cac1ad28a8e0298d1245d8a3ade47487e0909e5e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:55671",
-					"10.65.0.27:55671",
-					"172.17.0.1:55671",
-					"172.18.0.1:55671"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T12:42:01.952131448Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4468987445877474,
-				"StableID":   "nfsHGti1ub11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-				"DiscoKey":   "discokey:134eb352ca1186f62143d940168540c8d008b2b7f253a31d9d04bdafef062f58",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:36939",
-					"10.65.0.27:36939",
-					"172.17.0.1:36939",
-					"172.18.0.1:36939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T12:42:02.497924054Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5103941888467917,
-				"StableID":   "n4SF48uarg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-				"DiscoKey":   "discokey:ae72c3da527e8010b2618c9e010e20cae8dd548563288333e7a7f7ee8fb6a56f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:49407",
-					"10.65.0.27:49407",
-					"172.17.0.1:49407",
-					"172.18.0.1:49407"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T12:42:03.042835715Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1526572678371283,
-				"StableID":   "nLMw5bUPvC11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-				"KeyExpiry":  "2026-11-03T12:42:03Z",
-				"DiscoKey":   "discokey:d1b2eb7b3f9683c9cb0a4eaf8923e014be8555e1d5c4747a739b191d3cbc7809",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:48939",
-					"10.65.0.27:48939",
-					"172.17.0.1:48939",
-					"172.18.0.1:48939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T12:42:03.582165532Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7776111592703966,
-				"StableID":   "njMSQQGpi321CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:9a5c267c12359b74d600963dd3b3b23cc0493267bc633ff7b287a27f3c172078",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:59613",
-					"10.65.0.27:59613",
-					"172.17.0.1:59613",
-					"172.18.0.1:59613"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T12:42:04.126931065Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {
-				"Routes": {
-					"tail78f774.ts.net.": null,
-					"ts.net.":            [{"Addr": "199.247.155.53"}, {"Addr": "2620:111:8007::53"}]
-				},
-				"Domains":             ["tail78f774.ts.net"],
-				"Proxied":             true,
-				"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]
-			},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7776111592703966,
-				"StableID":   "njMSQQGpi321CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:9a5c267c12359b74d600963dd3b3b23cc0493267bc633ff7b287a27f3c172078",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints": [
-					"77.164.248.136:59613",
-					"10.65.0.27:59613",
-					"172.17.0.1:59613",
-					"172.18.0.1:59613"
-				],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T12:42:04.126931065Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e42a632027c40abc6838a0632732d062cd926fccb37a1419af163fde1a37e748",
-			"MachineKey": "mkey:bbb5be82a47cd7abea7c33adfe4a6440a574e82d072533aa6706d4a1fa2e3e16",
-			"Peers": [{
-				"ID":         5954820057290456,
-				"StableID":   "n5969U2xVo11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1d3c076e0977a99070177ba2266a40468a43cab9fbefbad3887ddcd56e5ced51",
-				"DiscoKey":   "discokey:11c4ed4d148c918a9dc7040dddcabcd9a950af049fb5c501c9d3dc2389abe410",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints": [
-					"77.164.248.136:52956",
-					"10.65.0.27:52956",
-					"172.17.0.1:52956",
-					"172.18.0.1:52956"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T12:42:00.905692Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3459751702144676,
-				"StableID":   "nXQDZ1pv1U11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f2a90df430b0e2e3b56ee1fd68875958569b60c75e8f59869ecc3674aac40962",
-				"DiscoKey":   "discokey:e0dcd1b508da93f807855dd89322afc5f923f49c83dd9bcdacc6afc96e6a8757",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints": [
-					"77.164.248.136:45521",
-					"10.65.0.27:45521",
-					"172.17.0.1:45521",
-					"172.18.0.1:45521"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T12:42:01.412861131Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3198713035455910,
-				"StableID":   "nqQyTWmhyR11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c3b63a55b293a25c3009b11be3f96a75a1766cd587ad2f8db5510dee4be11e25",
-				"DiscoKey":   "discokey:a83de1ade812eee6e5417093cac1ad28a8e0298d1245d8a3ade47487e0909e5e",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints": [
-					"77.164.248.136:55671",
-					"10.65.0.27:55671",
-					"172.17.0.1:55671",
-					"172.18.0.1:55671"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T12:42:01.952131448Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4468987445877474,
-				"StableID":   "nfsHGti1ub11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8f7254d9a76fc51dc3143fb758bb81f467a48a00e3aa2c1d679a43bab540ee14",
-				"DiscoKey":   "discokey:134eb352ca1186f62143d940168540c8d008b2b7f253a31d9d04bdafef062f58",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints": [
-					"77.164.248.136:36939",
-					"10.65.0.27:36939",
-					"172.17.0.1:36939",
-					"172.18.0.1:36939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T12:42:02.497924054Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5103941888467917,
-				"StableID":   "n4SF48uarg11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:400ac9747fab07e7101fc20166abad3fb57adb2da133fec97b4a25fe71f76b5e",
-				"DiscoKey":   "discokey:ae72c3da527e8010b2618c9e010e20cae8dd548563288333e7a7f7ee8fb6a56f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints": [
-					"77.164.248.136:49407",
-					"10.65.0.27:49407",
-					"172.17.0.1:49407",
-					"172.18.0.1:49407"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T12:42:03.042835715Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1526572678371283,
-				"StableID":   "nLMw5bUPvC11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:006a5284fbdd3d9608bb3eeefe8b6dcd54e748899209b28d229b409ac5d0ee5a",
-				"KeyExpiry":  "2026-11-03T12:42:03Z",
-				"DiscoKey":   "discokey:d1b2eb7b3f9683c9cb0a4eaf8923e014be8555e1d5c4747a739b191d3cbc7809",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints": [
-					"77.164.248.136:48939",
-					"10.65.0.27:48939",
-					"172.17.0.1:48939",
-					"172.18.0.1:48939"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T12:42:03.582165532Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3636839277133049,
-				"StableID":   "nCze9rb8QV11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:26fb082257c447dc026f41a73418fb125d7d537c24f91045f3fbd0df3afb5e3c",
-				"KeyExpiry":  "2026-11-03T12:42:04Z",
-				"DiscoKey":   "discokey:68edc8287a354e445890f5955fd0c646e47982b6ff1c93b57148177323d43a59",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints": [
-					"77.164.248.136:36807",
-					"10.65.0.27:36807",
-					"172.17.0.1:36807",
-					"172.18.0.1:36807"
-				],
-				"HomeDERP": 14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T12:42:04.668648044Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {
-				"Routes": {
-					"tail78f774.ts.net.": null,
-					"ts.net.":            [{"Addr": "199.247.155.53"}, {"Addr": "2620:111:8007::53"}]
-				},
-				"Domains":             ["tail78f774.ts.net"],
-				"Proxied":             true,
-				"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]
-			},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a1-wildcard.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a1-wildcard.hujson
deleted file mode 100644
index bc42c190e..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a1-wildcard.hujson
+++ /dev/null
@@ -1,7739 +0,0 @@
-// nodeattrs-target-a1-wildcard
-//
-// wildcard target hits every node
-//
-// Nodes with filter rules: 7 of 7
-// Captured at:    2026-05-07T08:33:46Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a1-wildcard",
-	"description":    "wildcard target hits every node",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:33:46.00574018Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"capture_error":  "stabilization: tsdaemon: WaitFilterStable: timeout after 2m0s; 7/8 nodes stable",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                               \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"wildcard target hits every node\",\n    \"id\": \"nodeattrs-target-a1-wildcard\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"*\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a1-wildcard.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["*"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1237820869441655,
-				"StableID":   "nQXpWQTcfA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1237820869441655,
-				"Key":        "nodekey:9e0de950950d61d2be0b366a947b2b6e2529f311c1a7aa89c82a229af83e2735",
-				"DiscoKey":   "discokey:bc77f4ecdcdfa4a3ef61d450746636fe0095e6f05a341d0ae88535817d4d0823",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53535", "10.65.0.27:53535", "172.17.0.1:53535"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:51.487875278Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9e0de950950d61d2be0b366a947b2b6e2529f311c1a7aa89c82a229af83e2735",
-			"MachineKey": "mkey:f4d39c1619d1f57f2811947704bf05ac78030c85b15a753173ed1a2264589945",
-			"Peers": [{
-				"ID":         3351186958165746,
-				"StableID":   "nKMmtvzkAT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:17301a05231dd79edd491a174b45400b3a41f7e7da97eed5c06429c0c8d7bf30",
-				"DiscoKey":   "discokey:9037702c5387ed9f59b96ee8753e7987c2dca29038eea475c8b31225edb57456",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:53512", "10.65.0.27:53512", "172.17.0.1:53512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:51.970060959Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4935481426407015,
-				"StableID":   "n66btDjHYf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16f8a418786f82bf447a5a133569d4b7ee8ed52e7a6b04db38b16c30a8445e47",
-				"DiscoKey":   "discokey:6a5b523e5114917babc0257b8087dc8c87983093b362f56c394f41bf0243560d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54500", "10.65.0.27:54500", "172.17.0.1:54500"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:52.504569656Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2069564673691979,
-				"StableID":   "nSAjKNxJAH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:931764409e304d597339090c8a3285b06d84f6c30de35f9f2dd435335166fe6a",
-				"DiscoKey":   "discokey:784889d9c3938f641a1d1de0cb994ff4dfe0afa7e8fe43033738cf1dd92e9c4e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44795", "10.65.0.27:44795", "172.17.0.1:44795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:53.032572Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7479446591720043,
-				"StableID":   "n6Gd9zNTQ121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a47ea00e40538762542c5b070fe28c82e3aa51e63383dfd919350b4dcf4b2b5c",
-				"DiscoKey":   "discokey:3a1322f90c24c1060ed5407ddc47ccac32d20620d3ac3ccb897d6e9b238ebe12",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49461", "10.65.0.27:49461", "172.17.0.1:49461"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:53.568600583Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6355315255105000,
-				"StableID":   "nDFfLbMLdr11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:20d47fa3a2efbbbe8802cdfe6ea2fb6c19fef4d6884b4d8ba66a760879237b61",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:421f9a16b57f5ad246582ba3920a64707285acdfa78109424fdfc383dd6e8824",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44233", "10.65.0.27:44233", "172.17.0.1:44233"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:54.095761374Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6488233587742595,
-				"StableID":   "naEjEstXfs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ae6fa38f1b6d1ff86a0159b9eabec184d163b957279462285f9281569dae7f0c",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:2bada33d08ca73e483ecb3d770554d33e212aa00b5f10a66fffde79caa0c401f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41552", "10.65.0.27:41552", "172.17.0.1:41552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:54.635979029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8079843576489497,
-				"StableID":   "naPLjonN6621CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a6bf8a69b10907d049bf15c212c72f513dc163722313996471356bb6290b5731",
-				"KeyExpiry":  "2026-11-03T08:33:55Z",
-				"DiscoKey":   "discokey:1543a6a6ae26f85a66f10f520a35175b866ccc1c4f88b4ac4dc62dcbb8f43474",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60216", "10.65.0.27:60216", "172.17.0.1:60216"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:55.182353972Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1237820869441655": {
-				"ID":          1237820869441655,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3351186958165746,
-				"StableID":   "nKMmtvzkAT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3351186958165746,
-				"Key":        "nodekey:17301a05231dd79edd491a174b45400b3a41f7e7da97eed5c06429c0c8d7bf30",
-				"DiscoKey":   "discokey:9037702c5387ed9f59b96ee8753e7987c2dca29038eea475c8b31225edb57456",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:53512", "10.65.0.27:53512", "172.17.0.1:53512"],
-				"Hostinfo": {"Hostname": "exit", "RequestTags": ["tag:exit"], "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:51.970060959Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:17301a05231dd79edd491a174b45400b3a41f7e7da97eed5c06429c0c8d7bf30",
-			"MachineKey": "mkey:aba8abfa83605a918c40cb50e69fa8b145ff4221c028b90c92189cda350d972b",
-			"Peers": [{
-				"ID":         1237820869441655,
-				"StableID":   "nQXpWQTcfA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e0de950950d61d2be0b366a947b2b6e2529f311c1a7aa89c82a229af83e2735",
-				"DiscoKey":   "discokey:bc77f4ecdcdfa4a3ef61d450746636fe0095e6f05a341d0ae88535817d4d0823",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53535", "10.65.0.27:53535", "172.17.0.1:53535"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:51.487875278Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4935481426407015,
-				"StableID":   "n66btDjHYf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16f8a418786f82bf447a5a133569d4b7ee8ed52e7a6b04db38b16c30a8445e47",
-				"DiscoKey":   "discokey:6a5b523e5114917babc0257b8087dc8c87983093b362f56c394f41bf0243560d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54500", "10.65.0.27:54500", "172.17.0.1:54500"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:52.504569656Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2069564673691979,
-				"StableID":   "nSAjKNxJAH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:931764409e304d597339090c8a3285b06d84f6c30de35f9f2dd435335166fe6a",
-				"DiscoKey":   "discokey:784889d9c3938f641a1d1de0cb994ff4dfe0afa7e8fe43033738cf1dd92e9c4e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44795", "10.65.0.27:44795", "172.17.0.1:44795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:53.032572Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"LastSeen":             "2026-05-07T08:34:18.1Z",
-				"Online":               false,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7479446591720043,
-				"StableID":   "n6Gd9zNTQ121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a47ea00e40538762542c5b070fe28c82e3aa51e63383dfd919350b4dcf4b2b5c",
-				"DiscoKey":   "discokey:3a1322f90c24c1060ed5407ddc47ccac32d20620d3ac3ccb897d6e9b238ebe12",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49461", "10.65.0.27:49461", "172.17.0.1:49461"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:53.568600583Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6355315255105000,
-				"StableID":   "nDFfLbMLdr11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:20d47fa3a2efbbbe8802cdfe6ea2fb6c19fef4d6884b4d8ba66a760879237b61",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:421f9a16b57f5ad246582ba3920a64707285acdfa78109424fdfc383dd6e8824",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44233", "10.65.0.27:44233", "172.17.0.1:44233"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:54.095761374Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6488233587742595,
-				"StableID":   "naEjEstXfs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ae6fa38f1b6d1ff86a0159b9eabec184d163b957279462285f9281569dae7f0c",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:2bada33d08ca73e483ecb3d770554d33e212aa00b5f10a66fffde79caa0c401f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41552", "10.65.0.27:41552", "172.17.0.1:41552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:54.635979029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8079843576489497,
-				"StableID":   "naPLjonN6621CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a6bf8a69b10907d049bf15c212c72f513dc163722313996471356bb6290b5731",
-				"KeyExpiry":  "2026-11-03T08:33:55Z",
-				"DiscoKey":   "discokey:1543a6a6ae26f85a66f10f520a35175b866ccc1c4f88b4ac4dc62dcbb8f43474",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60216", "10.65.0.27:60216", "172.17.0.1:60216"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:55.182353972Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3351186958165746": {
-				"ID":          3351186958165746,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6355315255105000,
-				"StableID":   "nDFfLbMLdr11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:20d47fa3a2efbbbe8802cdfe6ea2fb6c19fef4d6884b4d8ba66a760879237b61",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:421f9a16b57f5ad246582ba3920a64707285acdfa78109424fdfc383dd6e8824",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44233", "10.65.0.27:44233", "172.17.0.1:44233"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:54.095761374Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:20d47fa3a2efbbbe8802cdfe6ea2fb6c19fef4d6884b4d8ba66a760879237b61",
-			"MachineKey": "mkey:3ab4b9c7d15569c76fab236db4c468115884a049e3bb61543d741d299c391820",
-			"Peers": [{
-				"ID":         1237820869441655,
-				"StableID":   "nQXpWQTcfA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e0de950950d61d2be0b366a947b2b6e2529f311c1a7aa89c82a229af83e2735",
-				"DiscoKey":   "discokey:bc77f4ecdcdfa4a3ef61d450746636fe0095e6f05a341d0ae88535817d4d0823",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53535", "10.65.0.27:53535", "172.17.0.1:53535"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:51.487875278Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3351186958165746,
-				"StableID":   "nKMmtvzkAT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:17301a05231dd79edd491a174b45400b3a41f7e7da97eed5c06429c0c8d7bf30",
-				"DiscoKey":   "discokey:9037702c5387ed9f59b96ee8753e7987c2dca29038eea475c8b31225edb57456",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:53512", "10.65.0.27:53512", "172.17.0.1:53512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:51.970060959Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4935481426407015,
-				"StableID":   "n66btDjHYf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16f8a418786f82bf447a5a133569d4b7ee8ed52e7a6b04db38b16c30a8445e47",
-				"DiscoKey":   "discokey:6a5b523e5114917babc0257b8087dc8c87983093b362f56c394f41bf0243560d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54500", "10.65.0.27:54500", "172.17.0.1:54500"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:52.504569656Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2069564673691979,
-				"StableID":   "nSAjKNxJAH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:931764409e304d597339090c8a3285b06d84f6c30de35f9f2dd435335166fe6a",
-				"DiscoKey":   "discokey:784889d9c3938f641a1d1de0cb994ff4dfe0afa7e8fe43033738cf1dd92e9c4e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44795", "10.65.0.27:44795", "172.17.0.1:44795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:53.032572Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"LastSeen":             "2026-05-07T08:34:18.1Z",
-				"Online":               false,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7479446591720043,
-				"StableID":   "n6Gd9zNTQ121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a47ea00e40538762542c5b070fe28c82e3aa51e63383dfd919350b4dcf4b2b5c",
-				"DiscoKey":   "discokey:3a1322f90c24c1060ed5407ddc47ccac32d20620d3ac3ccb897d6e9b238ebe12",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49461", "10.65.0.27:49461", "172.17.0.1:49461"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:53.568600583Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6488233587742595,
-				"StableID":   "naEjEstXfs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ae6fa38f1b6d1ff86a0159b9eabec184d163b957279462285f9281569dae7f0c",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:2bada33d08ca73e483ecb3d770554d33e212aa00b5f10a66fffde79caa0c401f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41552", "10.65.0.27:41552", "172.17.0.1:41552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:54.635979029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8079843576489497,
-				"StableID":   "naPLjonN6621CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a6bf8a69b10907d049bf15c212c72f513dc163722313996471356bb6290b5731",
-				"KeyExpiry":  "2026-11-03T08:33:55Z",
-				"DiscoKey":   "discokey:1543a6a6ae26f85a66f10f520a35175b866ccc1c4f88b4ac4dc62dcbb8f43474",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60216", "10.65.0.27:60216", "172.17.0.1:60216"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:55.182353972Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4935481426407015,
-				"StableID":   "n66btDjHYf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       4935481426407015,
-				"Key":        "nodekey:16f8a418786f82bf447a5a133569d4b7ee8ed52e7a6b04db38b16c30a8445e47",
-				"DiscoKey":   "discokey:6a5b523e5114917babc0257b8087dc8c87983093b362f56c394f41bf0243560d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54500", "10.65.0.27:54500", "172.17.0.1:54500"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:52.504569656Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:16f8a418786f82bf447a5a133569d4b7ee8ed52e7a6b04db38b16c30a8445e47",
-			"MachineKey": "mkey:faab9a7ab704c892d0f239eba32a3355ca3135127793592cbb71968120219770",
-			"Peers": [{
-				"ID":         1237820869441655,
-				"StableID":   "nQXpWQTcfA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e0de950950d61d2be0b366a947b2b6e2529f311c1a7aa89c82a229af83e2735",
-				"DiscoKey":   "discokey:bc77f4ecdcdfa4a3ef61d450746636fe0095e6f05a341d0ae88535817d4d0823",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53535", "10.65.0.27:53535", "172.17.0.1:53535"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:51.487875278Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3351186958165746,
-				"StableID":   "nKMmtvzkAT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:17301a05231dd79edd491a174b45400b3a41f7e7da97eed5c06429c0c8d7bf30",
-				"DiscoKey":   "discokey:9037702c5387ed9f59b96ee8753e7987c2dca29038eea475c8b31225edb57456",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:53512", "10.65.0.27:53512", "172.17.0.1:53512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:51.970060959Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2069564673691979,
-				"StableID":   "nSAjKNxJAH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:931764409e304d597339090c8a3285b06d84f6c30de35f9f2dd435335166fe6a",
-				"DiscoKey":   "discokey:784889d9c3938f641a1d1de0cb994ff4dfe0afa7e8fe43033738cf1dd92e9c4e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44795", "10.65.0.27:44795", "172.17.0.1:44795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:53.032572Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7479446591720043,
-				"StableID":   "n6Gd9zNTQ121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a47ea00e40538762542c5b070fe28c82e3aa51e63383dfd919350b4dcf4b2b5c",
-				"DiscoKey":   "discokey:3a1322f90c24c1060ed5407ddc47ccac32d20620d3ac3ccb897d6e9b238ebe12",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49461", "10.65.0.27:49461", "172.17.0.1:49461"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:53.568600583Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6355315255105000,
-				"StableID":   "nDFfLbMLdr11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:20d47fa3a2efbbbe8802cdfe6ea2fb6c19fef4d6884b4d8ba66a760879237b61",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:421f9a16b57f5ad246582ba3920a64707285acdfa78109424fdfc383dd6e8824",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44233", "10.65.0.27:44233", "172.17.0.1:44233"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:54.095761374Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6488233587742595,
-				"StableID":   "naEjEstXfs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ae6fa38f1b6d1ff86a0159b9eabec184d163b957279462285f9281569dae7f0c",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:2bada33d08ca73e483ecb3d770554d33e212aa00b5f10a66fffde79caa0c401f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41552", "10.65.0.27:41552", "172.17.0.1:41552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:54.635979029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8079843576489497,
-				"StableID":   "naPLjonN6621CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a6bf8a69b10907d049bf15c212c72f513dc163722313996471356bb6290b5731",
-				"KeyExpiry":  "2026-11-03T08:33:55Z",
-				"DiscoKey":   "discokey:1543a6a6ae26f85a66f10f520a35175b866ccc1c4f88b4ac4dc62dcbb8f43474",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60216", "10.65.0.27:60216", "172.17.0.1:60216"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:55.182353972Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4935481426407015": {
-				"ID":          4935481426407015,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7479446591720043,
-				"StableID":   "n6Gd9zNTQ121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7479446591720043,
-				"Key":        "nodekey:a47ea00e40538762542c5b070fe28c82e3aa51e63383dfd919350b4dcf4b2b5c",
-				"DiscoKey":   "discokey:3a1322f90c24c1060ed5407ddc47ccac32d20620d3ac3ccb897d6e9b238ebe12",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49461", "10.65.0.27:49461", "172.17.0.1:49461"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:53.568600583Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a47ea00e40538762542c5b070fe28c82e3aa51e63383dfd919350b4dcf4b2b5c",
-			"MachineKey": "mkey:4a86c87b58df7e3c4d1116ca67f3e7342f78bf9ba730a90b67320e716f277022",
-			"Peers": [{
-				"ID":         1237820869441655,
-				"StableID":   "nQXpWQTcfA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e0de950950d61d2be0b366a947b2b6e2529f311c1a7aa89c82a229af83e2735",
-				"DiscoKey":   "discokey:bc77f4ecdcdfa4a3ef61d450746636fe0095e6f05a341d0ae88535817d4d0823",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53535", "10.65.0.27:53535", "172.17.0.1:53535"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:51.487875278Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3351186958165746,
-				"StableID":   "nKMmtvzkAT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:17301a05231dd79edd491a174b45400b3a41f7e7da97eed5c06429c0c8d7bf30",
-				"DiscoKey":   "discokey:9037702c5387ed9f59b96ee8753e7987c2dca29038eea475c8b31225edb57456",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:53512", "10.65.0.27:53512", "172.17.0.1:53512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:51.970060959Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4935481426407015,
-				"StableID":   "n66btDjHYf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16f8a418786f82bf447a5a133569d4b7ee8ed52e7a6b04db38b16c30a8445e47",
-				"DiscoKey":   "discokey:6a5b523e5114917babc0257b8087dc8c87983093b362f56c394f41bf0243560d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54500", "10.65.0.27:54500", "172.17.0.1:54500"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:52.504569656Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2069564673691979,
-				"StableID":   "nSAjKNxJAH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:931764409e304d597339090c8a3285b06d84f6c30de35f9f2dd435335166fe6a",
-				"DiscoKey":   "discokey:784889d9c3938f641a1d1de0cb994ff4dfe0afa7e8fe43033738cf1dd92e9c4e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44795", "10.65.0.27:44795", "172.17.0.1:44795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:53.032572Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"LastSeen":             "2026-05-07T08:34:18.1Z",
-				"Online":               false,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6355315255105000,
-				"StableID":   "nDFfLbMLdr11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:20d47fa3a2efbbbe8802cdfe6ea2fb6c19fef4d6884b4d8ba66a760879237b61",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:421f9a16b57f5ad246582ba3920a64707285acdfa78109424fdfc383dd6e8824",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44233", "10.65.0.27:44233", "172.17.0.1:44233"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:54.095761374Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6488233587742595,
-				"StableID":   "naEjEstXfs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ae6fa38f1b6d1ff86a0159b9eabec184d163b957279462285f9281569dae7f0c",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:2bada33d08ca73e483ecb3d770554d33e212aa00b5f10a66fffde79caa0c401f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41552", "10.65.0.27:41552", "172.17.0.1:41552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:54.635979029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8079843576489497,
-				"StableID":   "naPLjonN6621CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a6bf8a69b10907d049bf15c212c72f513dc163722313996471356bb6290b5731",
-				"KeyExpiry":  "2026-11-03T08:33:55Z",
-				"DiscoKey":   "discokey:1543a6a6ae26f85a66f10f520a35175b866ccc1c4f88b4ac4dc62dcbb8f43474",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60216", "10.65.0.27:60216", "172.17.0.1:60216"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:55.182353972Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7479446591720043": {
-				"ID":          7479446591720043,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8079843576489497,
-				"StableID":   "naPLjonN6621CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a6bf8a69b10907d049bf15c212c72f513dc163722313996471356bb6290b5731",
-				"KeyExpiry":  "2026-11-03T08:33:55Z",
-				"DiscoKey":   "discokey:1543a6a6ae26f85a66f10f520a35175b866ccc1c4f88b4ac4dc62dcbb8f43474",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60216", "10.65.0.27:60216", "172.17.0.1:60216"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:55.182353972Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a6bf8a69b10907d049bf15c212c72f513dc163722313996471356bb6290b5731",
-			"MachineKey": "mkey:8244c46492795b0c4b2abbe94d7115e8b5d4715f4671cb59863f6fbcfbc54b1f",
-			"Peers": [{
-				"ID":         1237820869441655,
-				"StableID":   "nQXpWQTcfA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e0de950950d61d2be0b366a947b2b6e2529f311c1a7aa89c82a229af83e2735",
-				"DiscoKey":   "discokey:bc77f4ecdcdfa4a3ef61d450746636fe0095e6f05a341d0ae88535817d4d0823",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53535", "10.65.0.27:53535", "172.17.0.1:53535"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:51.487875278Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3351186958165746,
-				"StableID":   "nKMmtvzkAT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:17301a05231dd79edd491a174b45400b3a41f7e7da97eed5c06429c0c8d7bf30",
-				"DiscoKey":   "discokey:9037702c5387ed9f59b96ee8753e7987c2dca29038eea475c8b31225edb57456",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:53512", "10.65.0.27:53512", "172.17.0.1:53512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:51.970060959Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4935481426407015,
-				"StableID":   "n66btDjHYf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16f8a418786f82bf447a5a133569d4b7ee8ed52e7a6b04db38b16c30a8445e47",
-				"DiscoKey":   "discokey:6a5b523e5114917babc0257b8087dc8c87983093b362f56c394f41bf0243560d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54500", "10.65.0.27:54500", "172.17.0.1:54500"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:52.504569656Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2069564673691979,
-				"StableID":   "nSAjKNxJAH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:931764409e304d597339090c8a3285b06d84f6c30de35f9f2dd435335166fe6a",
-				"DiscoKey":   "discokey:784889d9c3938f641a1d1de0cb994ff4dfe0afa7e8fe43033738cf1dd92e9c4e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44795", "10.65.0.27:44795", "172.17.0.1:44795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:53.032572Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7479446591720043,
-				"StableID":   "n6Gd9zNTQ121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a47ea00e40538762542c5b070fe28c82e3aa51e63383dfd919350b4dcf4b2b5c",
-				"DiscoKey":   "discokey:3a1322f90c24c1060ed5407ddc47ccac32d20620d3ac3ccb897d6e9b238ebe12",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49461", "10.65.0.27:49461", "172.17.0.1:49461"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:53.568600583Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6355315255105000,
-				"StableID":   "nDFfLbMLdr11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:20d47fa3a2efbbbe8802cdfe6ea2fb6c19fef4d6884b4d8ba66a760879237b61",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:421f9a16b57f5ad246582ba3920a64707285acdfa78109424fdfc383dd6e8824",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44233", "10.65.0.27:44233", "172.17.0.1:44233"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:54.095761374Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6488233587742595,
-				"StableID":   "naEjEstXfs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ae6fa38f1b6d1ff86a0159b9eabec184d163b957279462285f9281569dae7f0c",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:2bada33d08ca73e483ecb3d770554d33e212aa00b5f10a66fffde79caa0c401f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41552", "10.65.0.27:41552", "172.17.0.1:41552"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:54.635979029Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6488233587742595,
-				"StableID":   "naEjEstXfs11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:ae6fa38f1b6d1ff86a0159b9eabec184d163b957279462285f9281569dae7f0c",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:2bada33d08ca73e483ecb3d770554d33e212aa00b5f10a66fffde79caa0c401f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41552", "10.65.0.27:41552", "172.17.0.1:41552"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:54.635979029Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ae6fa38f1b6d1ff86a0159b9eabec184d163b957279462285f9281569dae7f0c",
-			"MachineKey": "mkey:ce44af5b40d8069aac77d85860cd6f1b48f607c2104da094985c2c41e0062620",
-			"Peers": [{
-				"ID":         1237820869441655,
-				"StableID":   "nQXpWQTcfA11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9e0de950950d61d2be0b366a947b2b6e2529f311c1a7aa89c82a229af83e2735",
-				"DiscoKey":   "discokey:bc77f4ecdcdfa4a3ef61d450746636fe0095e6f05a341d0ae88535817d4d0823",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:53535", "10.65.0.27:53535", "172.17.0.1:53535"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:51.487875278Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3351186958165746,
-				"StableID":   "nKMmtvzkAT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:17301a05231dd79edd491a174b45400b3a41f7e7da97eed5c06429c0c8d7bf30",
-				"DiscoKey":   "discokey:9037702c5387ed9f59b96ee8753e7987c2dca29038eea475c8b31225edb57456",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:53512", "10.65.0.27:53512", "172.17.0.1:53512"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:51.970060959Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4935481426407015,
-				"StableID":   "n66btDjHYf11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:16f8a418786f82bf447a5a133569d4b7ee8ed52e7a6b04db38b16c30a8445e47",
-				"DiscoKey":   "discokey:6a5b523e5114917babc0257b8087dc8c87983093b362f56c394f41bf0243560d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:54500", "10.65.0.27:54500", "172.17.0.1:54500"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:52.504569656Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2069564673691979,
-				"StableID":   "nSAjKNxJAH11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:931764409e304d597339090c8a3285b06d84f6c30de35f9f2dd435335166fe6a",
-				"DiscoKey":   "discokey:784889d9c3938f641a1d1de0cb994ff4dfe0afa7e8fe43033738cf1dd92e9c4e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44795", "10.65.0.27:44795", "172.17.0.1:44795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:53.032572Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7479446591720043,
-				"StableID":   "n6Gd9zNTQ121CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a47ea00e40538762542c5b070fe28c82e3aa51e63383dfd919350b4dcf4b2b5c",
-				"DiscoKey":   "discokey:3a1322f90c24c1060ed5407ddc47ccac32d20620d3ac3ccb897d6e9b238ebe12",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:49461", "10.65.0.27:49461", "172.17.0.1:49461"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:53.568600583Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6355315255105000,
-				"StableID":   "nDFfLbMLdr11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:20d47fa3a2efbbbe8802cdfe6ea2fb6c19fef4d6884b4d8ba66a760879237b61",
-				"KeyExpiry":  "2026-11-03T08:33:54Z",
-				"DiscoKey":   "discokey:421f9a16b57f5ad246582ba3920a64707285acdfa78109424fdfc383dd6e8824",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44233", "10.65.0.27:44233", "172.17.0.1:44233"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:54.095761374Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8079843576489497,
-				"StableID":   "naPLjonN6621CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a6bf8a69b10907d049bf15c212c72f513dc163722313996471356bb6290b5731",
-				"KeyExpiry":  "2026-11-03T08:33:55Z",
-				"DiscoKey":   "discokey:1543a6a6ae26f85a66f10f520a35175b866ccc1c4f88b4ac4dc62dcbb8f43474",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:60216", "10.65.0.27:60216", "172.17.0.1:60216"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:55.182353972Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a10-autogroup-admin.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a10-autogroup-admin.hujson
deleted file mode 100644
index b81adc47d..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a10-autogroup-admin.hujson
+++ /dev/null
@@ -1,8827 +0,0 @@
-// nodeattrs-target-a10-autogroup-admin
-//
-// autogroup:admin target
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:31:43Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a10-autogroup-admin",
-	"description":    "autogroup:admin target",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:31:43.283761928Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                       \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"autogroup:admin target\",\n    \"id\": \"nodeattrs-target-a10-autogroup-admin\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"autogroup:admin\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a10-autogroup-admin.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["autogroup:admin"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8280176537846364,
-				"StableID":   "nyDzWRC7f721CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       8280176537846364,
-				"Key":        "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-				"DiscoKey":   "discokey:fd9e8358f6d5508d3ed251fc49752048c45b847f9975563250aab79d1e49f253",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37152", "10.65.0.27:37152", "172.17.0.1:37152"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:48.912817669Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-			"MachineKey": "mkey:5cda69cfcfc555ca1896c1bd0d411325c1b863ef7fd891003ba8b1b88f2dbc71",
-			"Peers": [{
-				"ID":         7130803258984748,
-				"StableID":   "n7N4iN7Zgx11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-				"DiscoKey":   "discokey:ad42fff2e619782131dedaaf8d57e599eb21886f77feb5dfb6adaeb7e624b57b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:42420", "10.65.0.27:42420", "172.17.0.1:42420"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:49.463436707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5135706241845172,
-				"StableID":   "n939C5Jy6h11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-				"DiscoKey":   "discokey:97a7534ae3e0490d72c8209aaabb0d82c0132f82bc7d53a36e05a9695bea754a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:49792", "10.65.0.27:49792", "172.17.0.1:49792"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:49.997987844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7049979171900435,
-				"StableID":   "n87Hutzw3x11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-				"DiscoKey":   "discokey:2d427c9c08183c64db03d7c318b3a31b30859e7e7b1ecbbc8fc1e0a0fc6b497b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39444", "10.65.0.27:39444", "172.17.0.1:39444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:50.561681752Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3296094322161593,
-				"StableID":   "nxvfJuoojS11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-				"DiscoKey":   "discokey:5aed468795e41226e5cc07c6df2f7b3a28ac658ab03a81cee0b9366029c58174",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37769", "10.65.0.27:37769", "172.17.0.1:37769"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:51.081277741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6106819033763225,
-				"StableID":   "nGgGCHnngp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-				"KeyExpiry":  "2026-11-03T08:31:51Z",
-				"DiscoKey":   "discokey:d8c8e06a1729069522a18f1d26d429dcfc3977609efed35004f01d2e0b55565b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44134", "10.65.0.27:44134", "172.17.0.1:44134"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:51.627014836Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5967735695065500,
-				"StableID":   "ndbgpEJobo11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:2c778e0778736433ed98d0c33420726e6831ff86e542f302cb6a374255a7710a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34866", "10.65.0.27:34866", "172.17.0.1:34866"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:52.142428764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4704283018109224,
-				"StableID":   "nujVFCYajd11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:ef28903340874d44803ea1ec6e56d5b4af2173f194abbff6b01e16b060fb9377",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51177", "10.65.0.27:51177", "172.17.0.1:51177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:52.680053115Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8280176537846364": {
-				"ID":          8280176537846364,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7130803258984748,
-				"StableID":   "n7N4iN7Zgx11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       7130803258984748,
-				"Key":        "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-				"DiscoKey":   "discokey:ad42fff2e619782131dedaaf8d57e599eb21886f77feb5dfb6adaeb7e624b57b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:42420", "10.65.0.27:42420", "172.17.0.1:42420"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:31:49.463436707Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-			"MachineKey": "mkey:6ceb2e9e56e2c3b3eb8db528ac015a63b12bc147b1fdb8bfb090436fb6ff7b3d",
-			"Peers": [{
-				"ID":         8280176537846364,
-				"StableID":   "nyDzWRC7f721CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-				"DiscoKey":   "discokey:fd9e8358f6d5508d3ed251fc49752048c45b847f9975563250aab79d1e49f253",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37152", "10.65.0.27:37152", "172.17.0.1:37152"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:48.912817669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5135706241845172,
-				"StableID":   "n939C5Jy6h11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-				"DiscoKey":   "discokey:97a7534ae3e0490d72c8209aaabb0d82c0132f82bc7d53a36e05a9695bea754a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:49792", "10.65.0.27:49792", "172.17.0.1:49792"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:49.997987844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7049979171900435,
-				"StableID":   "n87Hutzw3x11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-				"DiscoKey":   "discokey:2d427c9c08183c64db03d7c318b3a31b30859e7e7b1ecbbc8fc1e0a0fc6b497b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39444", "10.65.0.27:39444", "172.17.0.1:39444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:50.561681752Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3296094322161593,
-				"StableID":   "nxvfJuoojS11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-				"DiscoKey":   "discokey:5aed468795e41226e5cc07c6df2f7b3a28ac658ab03a81cee0b9366029c58174",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37769", "10.65.0.27:37769", "172.17.0.1:37769"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:51.081277741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6106819033763225,
-				"StableID":   "nGgGCHnngp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-				"KeyExpiry":  "2026-11-03T08:31:51Z",
-				"DiscoKey":   "discokey:d8c8e06a1729069522a18f1d26d429dcfc3977609efed35004f01d2e0b55565b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44134", "10.65.0.27:44134", "172.17.0.1:44134"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:51.627014836Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5967735695065500,
-				"StableID":   "ndbgpEJobo11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:2c778e0778736433ed98d0c33420726e6831ff86e542f302cb6a374255a7710a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34866", "10.65.0.27:34866", "172.17.0.1:34866"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:52.142428764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4704283018109224,
-				"StableID":   "nujVFCYajd11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:ef28903340874d44803ea1ec6e56d5b4af2173f194abbff6b01e16b060fb9377",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51177", "10.65.0.27:51177", "172.17.0.1:51177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:52.680053115Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7130803258984748": {
-				"ID":          7130803258984748,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6106819033763225,
-				"StableID":   "nGgGCHnngp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-				"KeyExpiry":  "2026-11-03T08:31:51Z",
-				"DiscoKey":   "discokey:d8c8e06a1729069522a18f1d26d429dcfc3977609efed35004f01d2e0b55565b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44134", "10.65.0.27:44134", "172.17.0.1:44134"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:51.627014836Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-			"MachineKey": "mkey:49ab05e1eae0cfb78179cfd1ee4af5e7f8f9a3d25276aa32206ac13b548f6464",
-			"Peers": [{
-				"ID":         8280176537846364,
-				"StableID":   "nyDzWRC7f721CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-				"DiscoKey":   "discokey:fd9e8358f6d5508d3ed251fc49752048c45b847f9975563250aab79d1e49f253",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37152", "10.65.0.27:37152", "172.17.0.1:37152"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:48.912817669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7130803258984748,
-				"StableID":   "n7N4iN7Zgx11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-				"DiscoKey":   "discokey:ad42fff2e619782131dedaaf8d57e599eb21886f77feb5dfb6adaeb7e624b57b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:42420", "10.65.0.27:42420", "172.17.0.1:42420"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:49.463436707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5135706241845172,
-				"StableID":   "n939C5Jy6h11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-				"DiscoKey":   "discokey:97a7534ae3e0490d72c8209aaabb0d82c0132f82bc7d53a36e05a9695bea754a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:49792", "10.65.0.27:49792", "172.17.0.1:49792"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:49.997987844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7049979171900435,
-				"StableID":   "n87Hutzw3x11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-				"DiscoKey":   "discokey:2d427c9c08183c64db03d7c318b3a31b30859e7e7b1ecbbc8fc1e0a0fc6b497b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39444", "10.65.0.27:39444", "172.17.0.1:39444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:50.561681752Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3296094322161593,
-				"StableID":   "nxvfJuoojS11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-				"DiscoKey":   "discokey:5aed468795e41226e5cc07c6df2f7b3a28ac658ab03a81cee0b9366029c58174",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37769", "10.65.0.27:37769", "172.17.0.1:37769"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:51.081277741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5967735695065500,
-				"StableID":   "ndbgpEJobo11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:2c778e0778736433ed98d0c33420726e6831ff86e542f302cb6a374255a7710a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34866", "10.65.0.27:34866", "172.17.0.1:34866"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:52.142428764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4704283018109224,
-				"StableID":   "nujVFCYajd11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:ef28903340874d44803ea1ec6e56d5b4af2173f194abbff6b01e16b060fb9377",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51177", "10.65.0.27:51177", "172.17.0.1:51177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:52.680053115Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5135706241845172,
-				"StableID":   "n939C5Jy6h11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5135706241845172,
-				"Key":        "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-				"DiscoKey":   "discokey:97a7534ae3e0490d72c8209aaabb0d82c0132f82bc7d53a36e05a9695bea754a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:49792", "10.65.0.27:49792", "172.17.0.1:49792"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:49.997987844Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-			"MachineKey": "mkey:82b1e082001eaaa9fdd9a25186e240b62270444849d77ccc0f0114e4c8fb3751",
-			"Peers": [{
-				"ID":         8280176537846364,
-				"StableID":   "nyDzWRC7f721CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-				"DiscoKey":   "discokey:fd9e8358f6d5508d3ed251fc49752048c45b847f9975563250aab79d1e49f253",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37152", "10.65.0.27:37152", "172.17.0.1:37152"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:48.912817669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7130803258984748,
-				"StableID":   "n7N4iN7Zgx11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-				"DiscoKey":   "discokey:ad42fff2e619782131dedaaf8d57e599eb21886f77feb5dfb6adaeb7e624b57b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:42420", "10.65.0.27:42420", "172.17.0.1:42420"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:49.463436707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7049979171900435,
-				"StableID":   "n87Hutzw3x11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-				"DiscoKey":   "discokey:2d427c9c08183c64db03d7c318b3a31b30859e7e7b1ecbbc8fc1e0a0fc6b497b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39444", "10.65.0.27:39444", "172.17.0.1:39444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:50.561681752Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3296094322161593,
-				"StableID":   "nxvfJuoojS11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-				"DiscoKey":   "discokey:5aed468795e41226e5cc07c6df2f7b3a28ac658ab03a81cee0b9366029c58174",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37769", "10.65.0.27:37769", "172.17.0.1:37769"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:51.081277741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6106819033763225,
-				"StableID":   "nGgGCHnngp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-				"KeyExpiry":  "2026-11-03T08:31:51Z",
-				"DiscoKey":   "discokey:d8c8e06a1729069522a18f1d26d429dcfc3977609efed35004f01d2e0b55565b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44134", "10.65.0.27:44134", "172.17.0.1:44134"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:51.627014836Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5967735695065500,
-				"StableID":   "ndbgpEJobo11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:2c778e0778736433ed98d0c33420726e6831ff86e542f302cb6a374255a7710a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34866", "10.65.0.27:34866", "172.17.0.1:34866"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:52.142428764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4704283018109224,
-				"StableID":   "nujVFCYajd11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:ef28903340874d44803ea1ec6e56d5b4af2173f194abbff6b01e16b060fb9377",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51177", "10.65.0.27:51177", "172.17.0.1:51177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:52.680053115Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5135706241845172": {
-				"ID":          5135706241845172,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7049979171900435,
-				"StableID":   "n87Hutzw3x11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       7049979171900435,
-				"Key":        "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-				"DiscoKey":   "discokey:2d427c9c08183c64db03d7c318b3a31b30859e7e7b1ecbbc8fc1e0a0fc6b497b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39444", "10.65.0.27:39444", "172.17.0.1:39444"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:31:50.561681752Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-			"MachineKey": "mkey:9d6d979d256dc4b254d9e83c59869107d4c7b530bd7e2066e838b4a7a599850b",
-			"Peers": [{
-				"ID":         8280176537846364,
-				"StableID":   "nyDzWRC7f721CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-				"DiscoKey":   "discokey:fd9e8358f6d5508d3ed251fc49752048c45b847f9975563250aab79d1e49f253",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37152", "10.65.0.27:37152", "172.17.0.1:37152"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:48.912817669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7130803258984748,
-				"StableID":   "n7N4iN7Zgx11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-				"DiscoKey":   "discokey:ad42fff2e619782131dedaaf8d57e599eb21886f77feb5dfb6adaeb7e624b57b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:42420", "10.65.0.27:42420", "172.17.0.1:42420"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:49.463436707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5135706241845172,
-				"StableID":   "n939C5Jy6h11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-				"DiscoKey":   "discokey:97a7534ae3e0490d72c8209aaabb0d82c0132f82bc7d53a36e05a9695bea754a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:49792", "10.65.0.27:49792", "172.17.0.1:49792"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:49.997987844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3296094322161593,
-				"StableID":   "nxvfJuoojS11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-				"DiscoKey":   "discokey:5aed468795e41226e5cc07c6df2f7b3a28ac658ab03a81cee0b9366029c58174",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37769", "10.65.0.27:37769", "172.17.0.1:37769"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:51.081277741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6106819033763225,
-				"StableID":   "nGgGCHnngp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-				"KeyExpiry":  "2026-11-03T08:31:51Z",
-				"DiscoKey":   "discokey:d8c8e06a1729069522a18f1d26d429dcfc3977609efed35004f01d2e0b55565b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44134", "10.65.0.27:44134", "172.17.0.1:44134"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:51.627014836Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5967735695065500,
-				"StableID":   "ndbgpEJobo11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:2c778e0778736433ed98d0c33420726e6831ff86e542f302cb6a374255a7710a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34866", "10.65.0.27:34866", "172.17.0.1:34866"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:52.142428764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4704283018109224,
-				"StableID":   "nujVFCYajd11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:ef28903340874d44803ea1ec6e56d5b4af2173f194abbff6b01e16b060fb9377",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51177", "10.65.0.27:51177", "172.17.0.1:51177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:52.680053115Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7049979171900435": {
-				"ID":          7049979171900435,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3296094322161593,
-				"StableID":   "nxvfJuoojS11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       3296094322161593,
-				"Key":        "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-				"DiscoKey":   "discokey:5aed468795e41226e5cc07c6df2f7b3a28ac658ab03a81cee0b9366029c58174",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37769", "10.65.0.27:37769", "172.17.0.1:37769"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:51.081277741Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-			"MachineKey": "mkey:4bf2e08a3622cc053ac901e068a9196ee5153689bf5e2443f2cfd0b8fb66ac71",
-			"Peers": [{
-				"ID":         8280176537846364,
-				"StableID":   "nyDzWRC7f721CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-				"DiscoKey":   "discokey:fd9e8358f6d5508d3ed251fc49752048c45b847f9975563250aab79d1e49f253",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37152", "10.65.0.27:37152", "172.17.0.1:37152"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:48.912817669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7130803258984748,
-				"StableID":   "n7N4iN7Zgx11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-				"DiscoKey":   "discokey:ad42fff2e619782131dedaaf8d57e599eb21886f77feb5dfb6adaeb7e624b57b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:42420", "10.65.0.27:42420", "172.17.0.1:42420"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:49.463436707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5135706241845172,
-				"StableID":   "n939C5Jy6h11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-				"DiscoKey":   "discokey:97a7534ae3e0490d72c8209aaabb0d82c0132f82bc7d53a36e05a9695bea754a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:49792", "10.65.0.27:49792", "172.17.0.1:49792"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:49.997987844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7049979171900435,
-				"StableID":   "n87Hutzw3x11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-				"DiscoKey":   "discokey:2d427c9c08183c64db03d7c318b3a31b30859e7e7b1ecbbc8fc1e0a0fc6b497b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39444", "10.65.0.27:39444", "172.17.0.1:39444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:50.561681752Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6106819033763225,
-				"StableID":   "nGgGCHnngp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-				"KeyExpiry":  "2026-11-03T08:31:51Z",
-				"DiscoKey":   "discokey:d8c8e06a1729069522a18f1d26d429dcfc3977609efed35004f01d2e0b55565b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44134", "10.65.0.27:44134", "172.17.0.1:44134"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:51.627014836Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5967735695065500,
-				"StableID":   "ndbgpEJobo11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:2c778e0778736433ed98d0c33420726e6831ff86e542f302cb6a374255a7710a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34866", "10.65.0.27:34866", "172.17.0.1:34866"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:52.142428764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         4704283018109224,
-				"StableID":   "nujVFCYajd11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:ef28903340874d44803ea1ec6e56d5b4af2173f194abbff6b01e16b060fb9377",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51177", "10.65.0.27:51177", "172.17.0.1:51177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:52.680053115Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3296094322161593": {
-				"ID":          3296094322161593,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4704283018109224,
-				"StableID":   "nujVFCYajd11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:ef28903340874d44803ea1ec6e56d5b4af2173f194abbff6b01e16b060fb9377",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51177", "10.65.0.27:51177", "172.17.0.1:51177"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:52.680053115Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-			"MachineKey": "mkey:aa27c71d3543b687ba5b7e2e813b9cccd0ed26a16740526d536649ef757bd94e",
-			"Peers": [{
-				"ID":         8280176537846364,
-				"StableID":   "nyDzWRC7f721CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-				"DiscoKey":   "discokey:fd9e8358f6d5508d3ed251fc49752048c45b847f9975563250aab79d1e49f253",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37152", "10.65.0.27:37152", "172.17.0.1:37152"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:48.912817669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7130803258984748,
-				"StableID":   "n7N4iN7Zgx11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-				"DiscoKey":   "discokey:ad42fff2e619782131dedaaf8d57e599eb21886f77feb5dfb6adaeb7e624b57b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:42420", "10.65.0.27:42420", "172.17.0.1:42420"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:49.463436707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5135706241845172,
-				"StableID":   "n939C5Jy6h11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-				"DiscoKey":   "discokey:97a7534ae3e0490d72c8209aaabb0d82c0132f82bc7d53a36e05a9695bea754a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:49792", "10.65.0.27:49792", "172.17.0.1:49792"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:49.997987844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7049979171900435,
-				"StableID":   "n87Hutzw3x11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-				"DiscoKey":   "discokey:2d427c9c08183c64db03d7c318b3a31b30859e7e7b1ecbbc8fc1e0a0fc6b497b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39444", "10.65.0.27:39444", "172.17.0.1:39444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:50.561681752Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3296094322161593,
-				"StableID":   "nxvfJuoojS11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-				"DiscoKey":   "discokey:5aed468795e41226e5cc07c6df2f7b3a28ac658ab03a81cee0b9366029c58174",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37769", "10.65.0.27:37769", "172.17.0.1:37769"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:51.081277741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6106819033763225,
-				"StableID":   "nGgGCHnngp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-				"KeyExpiry":  "2026-11-03T08:31:51Z",
-				"DiscoKey":   "discokey:d8c8e06a1729069522a18f1d26d429dcfc3977609efed35004f01d2e0b55565b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44134", "10.65.0.27:44134", "172.17.0.1:44134"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:51.627014836Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5967735695065500,
-				"StableID":   "ndbgpEJobo11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:2c778e0778736433ed98d0c33420726e6831ff86e542f302cb6a374255a7710a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34866", "10.65.0.27:34866", "172.17.0.1:34866"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:31:52.142428764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5967735695065500,
-				"StableID":   "ndbgpEJobo11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:2c778e0778736433ed98d0c33420726e6831ff86e542f302cb6a374255a7710a",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34866", "10.65.0.27:34866", "172.17.0.1:34866"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:31:52.142428764Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1c41354a57a7a3af14ea2e0ab5931635a23aef3428f42d9fa800bc833c2f9c69",
-			"MachineKey": "mkey:3ecf2a12a5c9f04bcf4e6f056a0a9d234479b79ab82f3ba76e4039ec8d502c75",
-			"Peers": [{
-				"ID":         8280176537846364,
-				"StableID":   "nyDzWRC7f721CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:f9a09e3d463635138246fd612411872c3f9886eb0f981278b64d0b9945c8f225",
-				"DiscoKey":   "discokey:fd9e8358f6d5508d3ed251fc49752048c45b847f9975563250aab79d1e49f253",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:37152", "10.65.0.27:37152", "172.17.0.1:37152"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:31:48.912817669Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7130803258984748,
-				"StableID":   "n7N4iN7Zgx11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a77f29138bec05b71fbdd1f94a765ae1ab2f14b7a9e81525fd6d9ab2a04b341a",
-				"DiscoKey":   "discokey:ad42fff2e619782131dedaaf8d57e599eb21886f77feb5dfb6adaeb7e624b57b",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:42420", "10.65.0.27:42420", "172.17.0.1:42420"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:31:49.463436707Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5135706241845172,
-				"StableID":   "n939C5Jy6h11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:968f01f8626de43854e5eb83d2d8f7f3d079b68408e1c170821205cca70b2a30",
-				"DiscoKey":   "discokey:97a7534ae3e0490d72c8209aaabb0d82c0132f82bc7d53a36e05a9695bea754a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:49792", "10.65.0.27:49792", "172.17.0.1:49792"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:31:49.997987844Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7049979171900435,
-				"StableID":   "n87Hutzw3x11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7fcfdbcbb386c3628d954c200226d605b00ef74fbcfd59fda5c7f9f1df997353",
-				"DiscoKey":   "discokey:2d427c9c08183c64db03d7c318b3a31b30859e7e7b1ecbbc8fc1e0a0fc6b497b",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39444", "10.65.0.27:39444", "172.17.0.1:39444"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:31:50.561681752Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3296094322161593,
-				"StableID":   "nxvfJuoojS11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d058bab5d8560485956c3a547774ab74dc24e8edeef8c6871b0210f7d2ed1548",
-				"DiscoKey":   "discokey:5aed468795e41226e5cc07c6df2f7b3a28ac658ab03a81cee0b9366029c58174",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37769", "10.65.0.27:37769", "172.17.0.1:37769"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:31:51.081277741Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6106819033763225,
-				"StableID":   "nGgGCHnngp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:85feed8cd92c3c6b74d43c44665675662a55559c30cd4203071e54d2c3dbfa21",
-				"KeyExpiry":  "2026-11-03T08:31:51Z",
-				"DiscoKey":   "discokey:d8c8e06a1729069522a18f1d26d429dcfc3977609efed35004f01d2e0b55565b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:44134", "10.65.0.27:44134", "172.17.0.1:44134"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:31:51.627014836Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4704283018109224,
-				"StableID":   "nujVFCYajd11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:9077059d5b4d15a47e6afe6fcbd1208934ef6e5d75012dea2f874930ed5a212f",
-				"KeyExpiry":  "2026-11-03T08:31:52Z",
-				"DiscoKey":   "discokey:ef28903340874d44803ea1ec6e56d5b4af2173f194abbff6b01e16b060fb9377",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:51177", "10.65.0.27:51177", "172.17.0.1:51177"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:31:52.680053115Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a11-autogroup-owner.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a11-autogroup-owner.hujson
deleted file mode 100644
index a54fe0521..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a11-autogroup-owner.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-target-a11-autogroup-owner
-//
-// autogroup:owner target
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:32:23Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a11-autogroup-owner",
-	"description":    "autogroup:owner target",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:32:23.579446413Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                       \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"autogroup:owner target\",\n    \"id\": \"nodeattrs-target-a11-autogroup-owner\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"autogroup:owner\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a11-autogroup-owner.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["autogroup:owner"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3075579259085809,
-				"StableID":   "nkvLJcFw1R11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       3075579259085809,
-				"Key":        "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-				"DiscoKey":   "discokey:fb1835df69e750ff50d04f9df050acde0444f6ab81d8e4437ec4435c6fad834e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50474", "10.65.0.27:50474", "172.17.0.1:50474"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:32:29.158528712Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-			"MachineKey": "mkey:d6dd067bb312444d8ecc9f0e2a2809148e832f553c34646c8d6fd04e607a6244",
-			"Peers": [{
-				"ID":         3695133979000671,
-				"StableID":   "nLKHLRuXrV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-				"DiscoKey":   "discokey:c9c00f82dbfe6527ceb2a495ded4a43df238442455899d6c63c35332d2146b7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54923", "10.65.0.27:54923", "172.17.0.1:54923"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:32:29.694412615Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8162192712493884,
-				"StableID":   "nPgTtnxfj621CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-				"DiscoKey":   "discokey:646e363de84795b4ca6aa632307cf98d2bf68944b39275fb43c06ecec1763a5c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39748", "10.65.0.27:39748", "172.17.0.1:39748"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:32:30.234533161Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1684672773296013,
-				"StableID":   "n8tw5qVz9E11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-				"DiscoKey":   "discokey:26c2e8526af4588feb2a66a86ed54de9f7dd1f72a4242efd794635416bdbc162",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44227", "10.65.0.27:44227", "172.17.0.1:44227"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:32:30.773091101Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8196597480944189,
-				"StableID":   "ngpmTaiF1721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-				"DiscoKey":   "discokey:341b659478f449bd9abdaf597ad0aadcafeb44028ef355ff17ab05bf6c753d53",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42667", "10.65.0.27:42667", "172.17.0.1:42667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:32:31.31272038Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1834842932598314,
-				"StableID":   "n1g6qKD1LF11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-				"KeyExpiry":  "2026-11-03T08:32:31Z",
-				"DiscoKey":   "discokey:bc27864f5f36f5c9c1292b90711f606c8292f05413d1575c9c9b2f3831452336",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56214", "10.65.0.27:56214", "172.17.0.1:56214"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:32:31.849800864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7483996253927208,
-				"StableID":   "nmbfDgtWS121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:7ed9f3b51813ea664cfdec9eec10d930e6f8d694c9bdcaf9dca341fb8a99677f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:59035", "10.65.0.27:59035", "172.17.0.1:59035"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:32:32.375299683Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5426191405664778,
-				"StableID":   "ndU9Q8rXNj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:edbb9111a3c2450a192afa89625ec099a64b30857546b9168b59670414b82b2f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39971", "10.65.0.27:39971", "172.17.0.1:39971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:32:32.977111383Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3075579259085809": {
-				"ID":          3075579259085809,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3695133979000671,
-				"StableID":   "nLKHLRuXrV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3695133979000671,
-				"Key":        "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-				"DiscoKey":   "discokey:c9c00f82dbfe6527ceb2a495ded4a43df238442455899d6c63c35332d2146b7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54923", "10.65.0.27:54923", "172.17.0.1:54923"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:32:29.694412615Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-			"MachineKey": "mkey:d21a4eb90fb440f269bf358b957db74e86d6ef0537212eb61fb18364d697795d",
-			"Peers": [{
-				"ID":         3075579259085809,
-				"StableID":   "nkvLJcFw1R11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-				"DiscoKey":   "discokey:fb1835df69e750ff50d04f9df050acde0444f6ab81d8e4437ec4435c6fad834e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50474", "10.65.0.27:50474", "172.17.0.1:50474"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:32:29.158528712Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8162192712493884,
-				"StableID":   "nPgTtnxfj621CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-				"DiscoKey":   "discokey:646e363de84795b4ca6aa632307cf98d2bf68944b39275fb43c06ecec1763a5c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39748", "10.65.0.27:39748", "172.17.0.1:39748"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:32:30.234533161Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1684672773296013,
-				"StableID":   "n8tw5qVz9E11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-				"DiscoKey":   "discokey:26c2e8526af4588feb2a66a86ed54de9f7dd1f72a4242efd794635416bdbc162",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44227", "10.65.0.27:44227", "172.17.0.1:44227"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:32:30.773091101Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8196597480944189,
-				"StableID":   "ngpmTaiF1721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-				"DiscoKey":   "discokey:341b659478f449bd9abdaf597ad0aadcafeb44028ef355ff17ab05bf6c753d53",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42667", "10.65.0.27:42667", "172.17.0.1:42667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:32:31.31272038Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1834842932598314,
-				"StableID":   "n1g6qKD1LF11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-				"KeyExpiry":  "2026-11-03T08:32:31Z",
-				"DiscoKey":   "discokey:bc27864f5f36f5c9c1292b90711f606c8292f05413d1575c9c9b2f3831452336",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56214", "10.65.0.27:56214", "172.17.0.1:56214"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:32:31.849800864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7483996253927208,
-				"StableID":   "nmbfDgtWS121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:7ed9f3b51813ea664cfdec9eec10d930e6f8d694c9bdcaf9dca341fb8a99677f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:59035", "10.65.0.27:59035", "172.17.0.1:59035"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:32:32.375299683Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5426191405664778,
-				"StableID":   "ndU9Q8rXNj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:edbb9111a3c2450a192afa89625ec099a64b30857546b9168b59670414b82b2f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39971", "10.65.0.27:39971", "172.17.0.1:39971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:32:32.977111383Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3695133979000671": {
-				"ID":          3695133979000671,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1834842932598314,
-				"StableID":   "n1g6qKD1LF11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-				"KeyExpiry":  "2026-11-03T08:32:31Z",
-				"DiscoKey":   "discokey:bc27864f5f36f5c9c1292b90711f606c8292f05413d1575c9c9b2f3831452336",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56214", "10.65.0.27:56214", "172.17.0.1:56214"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:32:31.849800864Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-			"MachineKey": "mkey:fcc411c9f7909b36cc3cbe20801e4150a0199ae174e8a25461fb7aedd618043f",
-			"Peers": [{
-				"ID":         3075579259085809,
-				"StableID":   "nkvLJcFw1R11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-				"DiscoKey":   "discokey:fb1835df69e750ff50d04f9df050acde0444f6ab81d8e4437ec4435c6fad834e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50474", "10.65.0.27:50474", "172.17.0.1:50474"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:32:29.158528712Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3695133979000671,
-				"StableID":   "nLKHLRuXrV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-				"DiscoKey":   "discokey:c9c00f82dbfe6527ceb2a495ded4a43df238442455899d6c63c35332d2146b7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54923", "10.65.0.27:54923", "172.17.0.1:54923"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:32:29.694412615Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8162192712493884,
-				"StableID":   "nPgTtnxfj621CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-				"DiscoKey":   "discokey:646e363de84795b4ca6aa632307cf98d2bf68944b39275fb43c06ecec1763a5c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39748", "10.65.0.27:39748", "172.17.0.1:39748"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:32:30.234533161Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1684672773296013,
-				"StableID":   "n8tw5qVz9E11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-				"DiscoKey":   "discokey:26c2e8526af4588feb2a66a86ed54de9f7dd1f72a4242efd794635416bdbc162",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44227", "10.65.0.27:44227", "172.17.0.1:44227"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:32:30.773091101Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8196597480944189,
-				"StableID":   "ngpmTaiF1721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-				"DiscoKey":   "discokey:341b659478f449bd9abdaf597ad0aadcafeb44028ef355ff17ab05bf6c753d53",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42667", "10.65.0.27:42667", "172.17.0.1:42667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:32:31.31272038Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7483996253927208,
-				"StableID":   "nmbfDgtWS121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:7ed9f3b51813ea664cfdec9eec10d930e6f8d694c9bdcaf9dca341fb8a99677f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:59035", "10.65.0.27:59035", "172.17.0.1:59035"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:32:32.375299683Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5426191405664778,
-				"StableID":   "ndU9Q8rXNj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:edbb9111a3c2450a192afa89625ec099a64b30857546b9168b59670414b82b2f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39971", "10.65.0.27:39971", "172.17.0.1:39971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:32:32.977111383Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8162192712493884,
-				"StableID":   "nPgTtnxfj621CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       8162192712493884,
-				"Key":        "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-				"DiscoKey":   "discokey:646e363de84795b4ca6aa632307cf98d2bf68944b39275fb43c06ecec1763a5c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39748", "10.65.0.27:39748", "172.17.0.1:39748"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:32:30.234533161Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-			"MachineKey": "mkey:74753ef26f267d947e0b6dd96ea79ebbfa7c41238edf4c29f9111d24a170ff52",
-			"Peers": [{
-				"ID":         3075579259085809,
-				"StableID":   "nkvLJcFw1R11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-				"DiscoKey":   "discokey:fb1835df69e750ff50d04f9df050acde0444f6ab81d8e4437ec4435c6fad834e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50474", "10.65.0.27:50474", "172.17.0.1:50474"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:32:29.158528712Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3695133979000671,
-				"StableID":   "nLKHLRuXrV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-				"DiscoKey":   "discokey:c9c00f82dbfe6527ceb2a495ded4a43df238442455899d6c63c35332d2146b7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54923", "10.65.0.27:54923", "172.17.0.1:54923"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:32:29.694412615Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1684672773296013,
-				"StableID":   "n8tw5qVz9E11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-				"DiscoKey":   "discokey:26c2e8526af4588feb2a66a86ed54de9f7dd1f72a4242efd794635416bdbc162",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44227", "10.65.0.27:44227", "172.17.0.1:44227"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:32:30.773091101Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8196597480944189,
-				"StableID":   "ngpmTaiF1721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-				"DiscoKey":   "discokey:341b659478f449bd9abdaf597ad0aadcafeb44028ef355ff17ab05bf6c753d53",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42667", "10.65.0.27:42667", "172.17.0.1:42667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:32:31.31272038Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1834842932598314,
-				"StableID":   "n1g6qKD1LF11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-				"KeyExpiry":  "2026-11-03T08:32:31Z",
-				"DiscoKey":   "discokey:bc27864f5f36f5c9c1292b90711f606c8292f05413d1575c9c9b2f3831452336",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56214", "10.65.0.27:56214", "172.17.0.1:56214"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:32:31.849800864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7483996253927208,
-				"StableID":   "nmbfDgtWS121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:7ed9f3b51813ea664cfdec9eec10d930e6f8d694c9bdcaf9dca341fb8a99677f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:59035", "10.65.0.27:59035", "172.17.0.1:59035"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:32:32.375299683Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5426191405664778,
-				"StableID":   "ndU9Q8rXNj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:edbb9111a3c2450a192afa89625ec099a64b30857546b9168b59670414b82b2f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39971", "10.65.0.27:39971", "172.17.0.1:39971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:32:32.977111383Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8162192712493884": {
-				"ID":          8162192712493884,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1684672773296013,
-				"StableID":   "n8tw5qVz9E11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1684672773296013,
-				"Key":        "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-				"DiscoKey":   "discokey:26c2e8526af4588feb2a66a86ed54de9f7dd1f72a4242efd794635416bdbc162",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44227", "10.65.0.27:44227", "172.17.0.1:44227"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:32:30.773091101Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-			"MachineKey": "mkey:860e57c7833e2e13db658cd912cd802e823c42355b999aa62d923787c8e9965b",
-			"Peers": [{
-				"ID":         3075579259085809,
-				"StableID":   "nkvLJcFw1R11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-				"DiscoKey":   "discokey:fb1835df69e750ff50d04f9df050acde0444f6ab81d8e4437ec4435c6fad834e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50474", "10.65.0.27:50474", "172.17.0.1:50474"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:32:29.158528712Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3695133979000671,
-				"StableID":   "nLKHLRuXrV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-				"DiscoKey":   "discokey:c9c00f82dbfe6527ceb2a495ded4a43df238442455899d6c63c35332d2146b7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54923", "10.65.0.27:54923", "172.17.0.1:54923"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:32:29.694412615Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8162192712493884,
-				"StableID":   "nPgTtnxfj621CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-				"DiscoKey":   "discokey:646e363de84795b4ca6aa632307cf98d2bf68944b39275fb43c06ecec1763a5c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39748", "10.65.0.27:39748", "172.17.0.1:39748"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:32:30.234533161Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8196597480944189,
-				"StableID":   "ngpmTaiF1721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-				"DiscoKey":   "discokey:341b659478f449bd9abdaf597ad0aadcafeb44028ef355ff17ab05bf6c753d53",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42667", "10.65.0.27:42667", "172.17.0.1:42667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:32:31.31272038Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1834842932598314,
-				"StableID":   "n1g6qKD1LF11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-				"KeyExpiry":  "2026-11-03T08:32:31Z",
-				"DiscoKey":   "discokey:bc27864f5f36f5c9c1292b90711f606c8292f05413d1575c9c9b2f3831452336",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56214", "10.65.0.27:56214", "172.17.0.1:56214"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:32:31.849800864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7483996253927208,
-				"StableID":   "nmbfDgtWS121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:7ed9f3b51813ea664cfdec9eec10d930e6f8d694c9bdcaf9dca341fb8a99677f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:59035", "10.65.0.27:59035", "172.17.0.1:59035"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:32:32.375299683Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5426191405664778,
-				"StableID":   "ndU9Q8rXNj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:edbb9111a3c2450a192afa89625ec099a64b30857546b9168b59670414b82b2f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39971", "10.65.0.27:39971", "172.17.0.1:39971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:32:32.977111383Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1684672773296013": {
-				"ID":          1684672773296013,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8196597480944189,
-				"StableID":   "ngpmTaiF1721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       8196597480944189,
-				"Key":        "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-				"DiscoKey":   "discokey:341b659478f449bd9abdaf597ad0aadcafeb44028ef355ff17ab05bf6c753d53",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42667", "10.65.0.27:42667", "172.17.0.1:42667"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:32:31.31272038Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-			"MachineKey": "mkey:ebaaf9d50378f18e8faf547ac58977781812d286c55b21cdefec40b169bc990a",
-			"Peers": [{
-				"ID":         3075579259085809,
-				"StableID":   "nkvLJcFw1R11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-				"DiscoKey":   "discokey:fb1835df69e750ff50d04f9df050acde0444f6ab81d8e4437ec4435c6fad834e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50474", "10.65.0.27:50474", "172.17.0.1:50474"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:32:29.158528712Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3695133979000671,
-				"StableID":   "nLKHLRuXrV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-				"DiscoKey":   "discokey:c9c00f82dbfe6527ceb2a495ded4a43df238442455899d6c63c35332d2146b7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54923", "10.65.0.27:54923", "172.17.0.1:54923"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:32:29.694412615Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8162192712493884,
-				"StableID":   "nPgTtnxfj621CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-				"DiscoKey":   "discokey:646e363de84795b4ca6aa632307cf98d2bf68944b39275fb43c06ecec1763a5c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39748", "10.65.0.27:39748", "172.17.0.1:39748"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:32:30.234533161Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1684672773296013,
-				"StableID":   "n8tw5qVz9E11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-				"DiscoKey":   "discokey:26c2e8526af4588feb2a66a86ed54de9f7dd1f72a4242efd794635416bdbc162",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44227", "10.65.0.27:44227", "172.17.0.1:44227"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:32:30.773091101Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1834842932598314,
-				"StableID":   "n1g6qKD1LF11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-				"KeyExpiry":  "2026-11-03T08:32:31Z",
-				"DiscoKey":   "discokey:bc27864f5f36f5c9c1292b90711f606c8292f05413d1575c9c9b2f3831452336",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56214", "10.65.0.27:56214", "172.17.0.1:56214"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:32:31.849800864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7483996253927208,
-				"StableID":   "nmbfDgtWS121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:7ed9f3b51813ea664cfdec9eec10d930e6f8d694c9bdcaf9dca341fb8a99677f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:59035", "10.65.0.27:59035", "172.17.0.1:59035"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:32:32.375299683Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5426191405664778,
-				"StableID":   "ndU9Q8rXNj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:edbb9111a3c2450a192afa89625ec099a64b30857546b9168b59670414b82b2f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39971", "10.65.0.27:39971", "172.17.0.1:39971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:32:32.977111383Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8196597480944189": {
-				"ID":          8196597480944189,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5426191405664778,
-				"StableID":   "ndU9Q8rXNj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:edbb9111a3c2450a192afa89625ec099a64b30857546b9168b59670414b82b2f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39971", "10.65.0.27:39971", "172.17.0.1:39971"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:32:32.977111383Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-			"MachineKey": "mkey:d773073bf7f78385fbe92d291770fcd16aba5f8cb915f53e098cd2bb73183051",
-			"Peers": [{
-				"ID":         3075579259085809,
-				"StableID":   "nkvLJcFw1R11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-				"DiscoKey":   "discokey:fb1835df69e750ff50d04f9df050acde0444f6ab81d8e4437ec4435c6fad834e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50474", "10.65.0.27:50474", "172.17.0.1:50474"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:32:29.158528712Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3695133979000671,
-				"StableID":   "nLKHLRuXrV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-				"DiscoKey":   "discokey:c9c00f82dbfe6527ceb2a495ded4a43df238442455899d6c63c35332d2146b7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54923", "10.65.0.27:54923", "172.17.0.1:54923"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:32:29.694412615Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8162192712493884,
-				"StableID":   "nPgTtnxfj621CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-				"DiscoKey":   "discokey:646e363de84795b4ca6aa632307cf98d2bf68944b39275fb43c06ecec1763a5c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39748", "10.65.0.27:39748", "172.17.0.1:39748"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:32:30.234533161Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1684672773296013,
-				"StableID":   "n8tw5qVz9E11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-				"DiscoKey":   "discokey:26c2e8526af4588feb2a66a86ed54de9f7dd1f72a4242efd794635416bdbc162",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44227", "10.65.0.27:44227", "172.17.0.1:44227"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:32:30.773091101Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8196597480944189,
-				"StableID":   "ngpmTaiF1721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-				"DiscoKey":   "discokey:341b659478f449bd9abdaf597ad0aadcafeb44028ef355ff17ab05bf6c753d53",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42667", "10.65.0.27:42667", "172.17.0.1:42667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:32:31.31272038Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1834842932598314,
-				"StableID":   "n1g6qKD1LF11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-				"KeyExpiry":  "2026-11-03T08:32:31Z",
-				"DiscoKey":   "discokey:bc27864f5f36f5c9c1292b90711f606c8292f05413d1575c9c9b2f3831452336",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56214", "10.65.0.27:56214", "172.17.0.1:56214"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:32:31.849800864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7483996253927208,
-				"StableID":   "nmbfDgtWS121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:7ed9f3b51813ea664cfdec9eec10d930e6f8d694c9bdcaf9dca341fb8a99677f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:59035", "10.65.0.27:59035", "172.17.0.1:59035"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:32:32.375299683Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7483996253927208,
-				"StableID":   "nmbfDgtWS121CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:7ed9f3b51813ea664cfdec9eec10d930e6f8d694c9bdcaf9dca341fb8a99677f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:59035", "10.65.0.27:59035", "172.17.0.1:59035"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:32:32.375299683Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7ca346f4000ef0702d93be1ea10126dd06fe2a9337fd1d3ca817fb095a0a426d",
-			"MachineKey": "mkey:c252933729450803a2b4f94398889c12234ebf5e89a2103e0294d8807536c577",
-			"Peers": [{
-				"ID":         3075579259085809,
-				"StableID":   "nkvLJcFw1R11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e29b783cf1fc6e450e69a6100c947c8cde69be36ce2194ab6ddc26a188745e5e",
-				"DiscoKey":   "discokey:fb1835df69e750ff50d04f9df050acde0444f6ab81d8e4437ec4435c6fad834e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50474", "10.65.0.27:50474", "172.17.0.1:50474"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:32:29.158528712Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3695133979000671,
-				"StableID":   "nLKHLRuXrV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:813f2a3a80b085a293fc2b63cb4f21b5d00eea4999888671b7b626accc9ff453",
-				"DiscoKey":   "discokey:c9c00f82dbfe6527ceb2a495ded4a43df238442455899d6c63c35332d2146b7a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54923", "10.65.0.27:54923", "172.17.0.1:54923"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:32:29.694412615Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8162192712493884,
-				"StableID":   "nPgTtnxfj621CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:90b7e7d690d304db17cd9f30e6ad6d0d76e6dcd72f28f73e814281cb65684869",
-				"DiscoKey":   "discokey:646e363de84795b4ca6aa632307cf98d2bf68944b39275fb43c06ecec1763a5c",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39748", "10.65.0.27:39748", "172.17.0.1:39748"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:32:30.234533161Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1684672773296013,
-				"StableID":   "n8tw5qVz9E11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:6318ec5d9f2783357b10c532577f3007f7ab9dfcae782f1cd565fc7886c95818",
-				"DiscoKey":   "discokey:26c2e8526af4588feb2a66a86ed54de9f7dd1f72a4242efd794635416bdbc162",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:44227", "10.65.0.27:44227", "172.17.0.1:44227"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:32:30.773091101Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8196597480944189,
-				"StableID":   "ngpmTaiF1721CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cfffe96b0348c7d95efafed1327b6596e15ca5dd4049595d87a27f988bdf283a",
-				"DiscoKey":   "discokey:341b659478f449bd9abdaf597ad0aadcafeb44028ef355ff17ab05bf6c753d53",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:42667", "10.65.0.27:42667", "172.17.0.1:42667"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:32:31.31272038Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1834842932598314,
-				"StableID":   "n1g6qKD1LF11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:6f8f023c3ac19eb092861e14f31f6cac98fd8041dc13197d0d15a8d07eccca50",
-				"KeyExpiry":  "2026-11-03T08:32:31Z",
-				"DiscoKey":   "discokey:bc27864f5f36f5c9c1292b90711f606c8292f05413d1575c9c9b2f3831452336",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56214", "10.65.0.27:56214", "172.17.0.1:56214"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:32:31.849800864Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5426191405664778,
-				"StableID":   "ndU9Q8rXNj11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:ef102882e4a6484a9c4a74d8ae3fae8ee8d8e6468a372d95e3bbdb533784f61a",
-				"KeyExpiry":  "2026-11-03T08:32:32Z",
-				"DiscoKey":   "discokey:edbb9111a3c2450a192afa89625ec099a64b30857546b9168b59670414b82b2f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39971", "10.65.0.27:39971", "172.17.0.1:39971"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:32:32.977111383Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a12-tag-vs-autogroup-member.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a12-tag-vs-autogroup-member.hujson
deleted file mode 100644
index 2ad9adc45..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a12-tag-vs-autogroup-member.hujson
+++ /dev/null
@@ -1,8827 +0,0 @@
-// nodeattrs-target-a12-tag-vs-autogroup-member
-//
-// autogroup:member excludes tagged nodes
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:33:05Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a12-tag-vs-autogroup-member",
-	"description":    "autogroup:member excludes tagged nodes",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:33:05.717499911Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                               \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"autogroup:member excludes tagged nodes\",\n    \"id\": \"nodeattrs-target-a12-tag-vs-autogroup-member\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"autogroup:member\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a12-tag-vs-autogroup-member.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["autogroup:member"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1958816962308580,
-				"StableID":   "nfCjJQo9JG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1958816962308580,
-				"Key":        "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-				"DiscoKey":   "discokey:e11e6861054b9d2b8ac34270907502b4121bedc086dacc10768b762581bc3958",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43682", "10.65.0.27:43682", "172.17.0.1:43682"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:11.203947461Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-			"MachineKey": "mkey:4078cc7683a7ddf128196de73374be5a0daa2a1043759d0adb6254e1d7739a11",
-			"Peers": [{
-				"ID":         3530845708613362,
-				"StableID":   "nFZWT7L8aU11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-				"DiscoKey":   "discokey:629e7545f08180ed1f745df62bb200a4aa388723fe60ad117fbf4fecfbfd4c68",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:11.745301733Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3435447740517613,
-				"StableID":   "nGz6hRPvpT11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-				"DiscoKey":   "discokey:013225ef074a39010d9d7eb7ac6c67bd48f2598f426a4e4bbd68f46cdf41af53",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39211", "10.65.0.27:39211", "172.17.0.1:39211"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:12.275546851Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5500055414320652,
-				"StableID":   "n9ThuV8zwj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-				"DiscoKey":   "discokey:f5660c278648e1b5c2197c6471dca0ea4887e16ae614d61bd6d6810be72c7373",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:50284", "10.65.0.27:50284", "172.17.0.1:50284"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:12.811741536Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1019287665345842,
-				"StableID":   "nVLobbxdx811CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-				"DiscoKey":   "discokey:67e0a06866ffda5c6f3d03f63c65fd3fb4626ecb392e63fe79c5db9f35058b14",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37768", "10.65.0.27:37768", "172.17.0.1:37768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:13.350146794Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2601221495443221,
-				"StableID":   "nzH66Kg6KM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-				"KeyExpiry":  "2026-11-03T08:33:13Z",
-				"DiscoKey":   "discokey:2ced89b5b348a0662f3a3ecaa4832ea28dbfa16b898cae1c878f2998bcad3d11",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56328", "10.65.0.27:56328", "172.17.0.1:56328"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:13.883405767Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3506231552967548,
-				"StableID":   "nuMyovkyNU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:6a3b0bfc9649cf44f815b2319f25114768b5528f2ef486a8c70def52b7e7921f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34483", "10.65.0.27:34483", "172.17.0.1:34483"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:14.426415557Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1421144552345418,
-				"StableID":   "nZcNcL4e6C11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:f4ce22eed8e9f54cafd00cf903cf4001ff737c2a5e0afea0fe617240aa620e5f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:44413", "10.65.0.27:44413", "172.17.0.1:44413"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:14.970225764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1958816962308580": {
-				"ID":          1958816962308580,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3530845708613362,
-				"StableID":   "nFZWT7L8aU11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3530845708613362,
-				"Key":        "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-				"DiscoKey":   "discokey:629e7545f08180ed1f745df62bb200a4aa388723fe60ad117fbf4fecfbfd4c68",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:33:11.745301733Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-			"MachineKey": "mkey:5fb8627371d7e7180dbfff025546f4b3ecd0c2a590f0749a48df20cc9965f242",
-			"Peers": [{
-				"ID":         1958816962308580,
-				"StableID":   "nfCjJQo9JG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-				"DiscoKey":   "discokey:e11e6861054b9d2b8ac34270907502b4121bedc086dacc10768b762581bc3958",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43682", "10.65.0.27:43682", "172.17.0.1:43682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:11.203947461Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3435447740517613,
-				"StableID":   "nGz6hRPvpT11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-				"DiscoKey":   "discokey:013225ef074a39010d9d7eb7ac6c67bd48f2598f426a4e4bbd68f46cdf41af53",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39211", "10.65.0.27:39211", "172.17.0.1:39211"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:12.275546851Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5500055414320652,
-				"StableID":   "n9ThuV8zwj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-				"DiscoKey":   "discokey:f5660c278648e1b5c2197c6471dca0ea4887e16ae614d61bd6d6810be72c7373",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:50284", "10.65.0.27:50284", "172.17.0.1:50284"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:12.811741536Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1019287665345842,
-				"StableID":   "nVLobbxdx811CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-				"DiscoKey":   "discokey:67e0a06866ffda5c6f3d03f63c65fd3fb4626ecb392e63fe79c5db9f35058b14",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37768", "10.65.0.27:37768", "172.17.0.1:37768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:13.350146794Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2601221495443221,
-				"StableID":   "nzH66Kg6KM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-				"KeyExpiry":  "2026-11-03T08:33:13Z",
-				"DiscoKey":   "discokey:2ced89b5b348a0662f3a3ecaa4832ea28dbfa16b898cae1c878f2998bcad3d11",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56328", "10.65.0.27:56328", "172.17.0.1:56328"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:13.883405767Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3506231552967548,
-				"StableID":   "nuMyovkyNU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:6a3b0bfc9649cf44f815b2319f25114768b5528f2ef486a8c70def52b7e7921f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34483", "10.65.0.27:34483", "172.17.0.1:34483"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:14.426415557Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1421144552345418,
-				"StableID":   "nZcNcL4e6C11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:f4ce22eed8e9f54cafd00cf903cf4001ff737c2a5e0afea0fe617240aa620e5f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:44413", "10.65.0.27:44413", "172.17.0.1:44413"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:14.970225764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3530845708613362": {
-				"ID":          3530845708613362,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2601221495443221,
-				"StableID":   "nzH66Kg6KM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-				"KeyExpiry":  "2026-11-03T08:33:13Z",
-				"DiscoKey":   "discokey:2ced89b5b348a0662f3a3ecaa4832ea28dbfa16b898cae1c878f2998bcad3d11",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56328", "10.65.0.27:56328", "172.17.0.1:56328"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:13.883405767Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-			"MachineKey": "mkey:0439f200891fce965d4b6132bfe34b4ad9e73a80510a2a8710e743b24ab3446a",
-			"Peers": [{
-				"ID":         1958816962308580,
-				"StableID":   "nfCjJQo9JG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-				"DiscoKey":   "discokey:e11e6861054b9d2b8ac34270907502b4121bedc086dacc10768b762581bc3958",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43682", "10.65.0.27:43682", "172.17.0.1:43682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:11.203947461Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3530845708613362,
-				"StableID":   "nFZWT7L8aU11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-				"DiscoKey":   "discokey:629e7545f08180ed1f745df62bb200a4aa388723fe60ad117fbf4fecfbfd4c68",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:11.745301733Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3435447740517613,
-				"StableID":   "nGz6hRPvpT11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-				"DiscoKey":   "discokey:013225ef074a39010d9d7eb7ac6c67bd48f2598f426a4e4bbd68f46cdf41af53",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39211", "10.65.0.27:39211", "172.17.0.1:39211"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:12.275546851Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5500055414320652,
-				"StableID":   "n9ThuV8zwj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-				"DiscoKey":   "discokey:f5660c278648e1b5c2197c6471dca0ea4887e16ae614d61bd6d6810be72c7373",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:50284", "10.65.0.27:50284", "172.17.0.1:50284"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:12.811741536Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1019287665345842,
-				"StableID":   "nVLobbxdx811CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-				"DiscoKey":   "discokey:67e0a06866ffda5c6f3d03f63c65fd3fb4626ecb392e63fe79c5db9f35058b14",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37768", "10.65.0.27:37768", "172.17.0.1:37768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:13.350146794Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3506231552967548,
-				"StableID":   "nuMyovkyNU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:6a3b0bfc9649cf44f815b2319f25114768b5528f2ef486a8c70def52b7e7921f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34483", "10.65.0.27:34483", "172.17.0.1:34483"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:14.426415557Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1421144552345418,
-				"StableID":   "nZcNcL4e6C11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:f4ce22eed8e9f54cafd00cf903cf4001ff737c2a5e0afea0fe617240aa620e5f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:44413", "10.65.0.27:44413", "172.17.0.1:44413"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:14.970225764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3435447740517613,
-				"StableID":   "nGz6hRPvpT11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       3435447740517613,
-				"Key":        "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-				"DiscoKey":   "discokey:013225ef074a39010d9d7eb7ac6c67bd48f2598f426a4e4bbd68f46cdf41af53",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39211", "10.65.0.27:39211", "172.17.0.1:39211"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:12.275546851Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-			"MachineKey": "mkey:07a13cf09fe4d417ee4e6fd3668b93ea889180480a2de2c5e6a7830da1324572",
-			"Peers": [{
-				"ID":         1958816962308580,
-				"StableID":   "nfCjJQo9JG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-				"DiscoKey":   "discokey:e11e6861054b9d2b8ac34270907502b4121bedc086dacc10768b762581bc3958",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43682", "10.65.0.27:43682", "172.17.0.1:43682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:11.203947461Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3530845708613362,
-				"StableID":   "nFZWT7L8aU11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-				"DiscoKey":   "discokey:629e7545f08180ed1f745df62bb200a4aa388723fe60ad117fbf4fecfbfd4c68",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:11.745301733Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5500055414320652,
-				"StableID":   "n9ThuV8zwj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-				"DiscoKey":   "discokey:f5660c278648e1b5c2197c6471dca0ea4887e16ae614d61bd6d6810be72c7373",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:50284", "10.65.0.27:50284", "172.17.0.1:50284"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:12.811741536Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1019287665345842,
-				"StableID":   "nVLobbxdx811CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-				"DiscoKey":   "discokey:67e0a06866ffda5c6f3d03f63c65fd3fb4626ecb392e63fe79c5db9f35058b14",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37768", "10.65.0.27:37768", "172.17.0.1:37768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:13.350146794Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2601221495443221,
-				"StableID":   "nzH66Kg6KM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-				"KeyExpiry":  "2026-11-03T08:33:13Z",
-				"DiscoKey":   "discokey:2ced89b5b348a0662f3a3ecaa4832ea28dbfa16b898cae1c878f2998bcad3d11",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56328", "10.65.0.27:56328", "172.17.0.1:56328"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:13.883405767Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3506231552967548,
-				"StableID":   "nuMyovkyNU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:6a3b0bfc9649cf44f815b2319f25114768b5528f2ef486a8c70def52b7e7921f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34483", "10.65.0.27:34483", "172.17.0.1:34483"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:14.426415557Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1421144552345418,
-				"StableID":   "nZcNcL4e6C11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:f4ce22eed8e9f54cafd00cf903cf4001ff737c2a5e0afea0fe617240aa620e5f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:44413", "10.65.0.27:44413", "172.17.0.1:44413"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:14.970225764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3435447740517613": {
-				"ID":          3435447740517613,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5500055414320652,
-				"StableID":   "n9ThuV8zwj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       5500055414320652,
-				"Key":        "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-				"DiscoKey":   "discokey:f5660c278648e1b5c2197c6471dca0ea4887e16ae614d61bd6d6810be72c7373",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:50284", "10.65.0.27:50284", "172.17.0.1:50284"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:33:12.811741536Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-			"MachineKey": "mkey:b2f7c2269973407e38e01e351e2d164c4a4e5d0429e112aba726ae961e9c575f",
-			"Peers": [{
-				"ID":         1958816962308580,
-				"StableID":   "nfCjJQo9JG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-				"DiscoKey":   "discokey:e11e6861054b9d2b8ac34270907502b4121bedc086dacc10768b762581bc3958",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43682", "10.65.0.27:43682", "172.17.0.1:43682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:11.203947461Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3530845708613362,
-				"StableID":   "nFZWT7L8aU11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-				"DiscoKey":   "discokey:629e7545f08180ed1f745df62bb200a4aa388723fe60ad117fbf4fecfbfd4c68",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:11.745301733Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3435447740517613,
-				"StableID":   "nGz6hRPvpT11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-				"DiscoKey":   "discokey:013225ef074a39010d9d7eb7ac6c67bd48f2598f426a4e4bbd68f46cdf41af53",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39211", "10.65.0.27:39211", "172.17.0.1:39211"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:12.275546851Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1019287665345842,
-				"StableID":   "nVLobbxdx811CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-				"DiscoKey":   "discokey:67e0a06866ffda5c6f3d03f63c65fd3fb4626ecb392e63fe79c5db9f35058b14",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37768", "10.65.0.27:37768", "172.17.0.1:37768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:13.350146794Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2601221495443221,
-				"StableID":   "nzH66Kg6KM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-				"KeyExpiry":  "2026-11-03T08:33:13Z",
-				"DiscoKey":   "discokey:2ced89b5b348a0662f3a3ecaa4832ea28dbfa16b898cae1c878f2998bcad3d11",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56328", "10.65.0.27:56328", "172.17.0.1:56328"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:13.883405767Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3506231552967548,
-				"StableID":   "nuMyovkyNU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:6a3b0bfc9649cf44f815b2319f25114768b5528f2ef486a8c70def52b7e7921f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34483", "10.65.0.27:34483", "172.17.0.1:34483"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:14.426415557Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1421144552345418,
-				"StableID":   "nZcNcL4e6C11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:f4ce22eed8e9f54cafd00cf903cf4001ff737c2a5e0afea0fe617240aa620e5f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:44413", "10.65.0.27:44413", "172.17.0.1:44413"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:14.970225764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5500055414320652": {
-				"ID":          5500055414320652,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1019287665345842,
-				"StableID":   "nVLobbxdx811CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1019287665345842,
-				"Key":        "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-				"DiscoKey":   "discokey:67e0a06866ffda5c6f3d03f63c65fd3fb4626ecb392e63fe79c5db9f35058b14",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37768", "10.65.0.27:37768", "172.17.0.1:37768"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:13.350146794Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-			"MachineKey": "mkey:21a910799c3937970861401c98016251973b0c2d966f7dab464de8e1e4acdd6f",
-			"Peers": [{
-				"ID":         1958816962308580,
-				"StableID":   "nfCjJQo9JG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-				"DiscoKey":   "discokey:e11e6861054b9d2b8ac34270907502b4121bedc086dacc10768b762581bc3958",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43682", "10.65.0.27:43682", "172.17.0.1:43682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:11.203947461Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3530845708613362,
-				"StableID":   "nFZWT7L8aU11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-				"DiscoKey":   "discokey:629e7545f08180ed1f745df62bb200a4aa388723fe60ad117fbf4fecfbfd4c68",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:11.745301733Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3435447740517613,
-				"StableID":   "nGz6hRPvpT11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-				"DiscoKey":   "discokey:013225ef074a39010d9d7eb7ac6c67bd48f2598f426a4e4bbd68f46cdf41af53",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39211", "10.65.0.27:39211", "172.17.0.1:39211"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:12.275546851Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5500055414320652,
-				"StableID":   "n9ThuV8zwj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-				"DiscoKey":   "discokey:f5660c278648e1b5c2197c6471dca0ea4887e16ae614d61bd6d6810be72c7373",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:50284", "10.65.0.27:50284", "172.17.0.1:50284"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:12.811741536Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         2601221495443221,
-				"StableID":   "nzH66Kg6KM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-				"KeyExpiry":  "2026-11-03T08:33:13Z",
-				"DiscoKey":   "discokey:2ced89b5b348a0662f3a3ecaa4832ea28dbfa16b898cae1c878f2998bcad3d11",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56328", "10.65.0.27:56328", "172.17.0.1:56328"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:13.883405767Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3506231552967548,
-				"StableID":   "nuMyovkyNU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:6a3b0bfc9649cf44f815b2319f25114768b5528f2ef486a8c70def52b7e7921f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34483", "10.65.0.27:34483", "172.17.0.1:34483"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:14.426415557Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1421144552345418,
-				"StableID":   "nZcNcL4e6C11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:f4ce22eed8e9f54cafd00cf903cf4001ff737c2a5e0afea0fe617240aa620e5f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:44413", "10.65.0.27:44413", "172.17.0.1:44413"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:14.970225764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1019287665345842": {
-				"ID":          1019287665345842,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1421144552345418,
-				"StableID":   "nZcNcL4e6C11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:f4ce22eed8e9f54cafd00cf903cf4001ff737c2a5e0afea0fe617240aa620e5f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:44413", "10.65.0.27:44413", "172.17.0.1:44413"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:14.970225764Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-			"MachineKey": "mkey:943c7cb1d78e3f8025fd5d839cf3680f6f0026342ef336f7c9e888afd913c07d",
-			"Peers": [{
-				"ID":         1958816962308580,
-				"StableID":   "nfCjJQo9JG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-				"DiscoKey":   "discokey:e11e6861054b9d2b8ac34270907502b4121bedc086dacc10768b762581bc3958",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43682", "10.65.0.27:43682", "172.17.0.1:43682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:11.203947461Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3530845708613362,
-				"StableID":   "nFZWT7L8aU11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-				"DiscoKey":   "discokey:629e7545f08180ed1f745df62bb200a4aa388723fe60ad117fbf4fecfbfd4c68",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:11.745301733Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3435447740517613,
-				"StableID":   "nGz6hRPvpT11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-				"DiscoKey":   "discokey:013225ef074a39010d9d7eb7ac6c67bd48f2598f426a4e4bbd68f46cdf41af53",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39211", "10.65.0.27:39211", "172.17.0.1:39211"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:12.275546851Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5500055414320652,
-				"StableID":   "n9ThuV8zwj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-				"DiscoKey":   "discokey:f5660c278648e1b5c2197c6471dca0ea4887e16ae614d61bd6d6810be72c7373",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:50284", "10.65.0.27:50284", "172.17.0.1:50284"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:12.811741536Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1019287665345842,
-				"StableID":   "nVLobbxdx811CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-				"DiscoKey":   "discokey:67e0a06866ffda5c6f3d03f63c65fd3fb4626ecb392e63fe79c5db9f35058b14",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37768", "10.65.0.27:37768", "172.17.0.1:37768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:13.350146794Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2601221495443221,
-				"StableID":   "nzH66Kg6KM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-				"KeyExpiry":  "2026-11-03T08:33:13Z",
-				"DiscoKey":   "discokey:2ced89b5b348a0662f3a3ecaa4832ea28dbfa16b898cae1c878f2998bcad3d11",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56328", "10.65.0.27:56328", "172.17.0.1:56328"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:13.883405767Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3506231552967548,
-				"StableID":   "nuMyovkyNU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:6a3b0bfc9649cf44f815b2319f25114768b5528f2ef486a8c70def52b7e7921f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34483", "10.65.0.27:34483", "172.17.0.1:34483"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:33:14.426415557Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3506231552967548,
-				"StableID":   "nuMyovkyNU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:6a3b0bfc9649cf44f815b2319f25114768b5528f2ef486a8c70def52b7e7921f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:34483", "10.65.0.27:34483", "172.17.0.1:34483"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:33:14.426415557Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2610cb6e102a52b18c9a061cc571804ae4fce5c87f51e7d2ab52a62554044857",
-			"MachineKey": "mkey:29a2c20c7928adcf5d362a15edc011c181a37fe393cd4c304cffd4324de05479",
-			"Peers": [{
-				"ID":         1958816962308580,
-				"StableID":   "nfCjJQo9JG11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:08824509b3896d0e0e5d3dc6735f17b484fd091f9d12bec6cbd52bc633867c79",
-				"DiscoKey":   "discokey:e11e6861054b9d2b8ac34270907502b4121bedc086dacc10768b762581bc3958",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:43682", "10.65.0.27:43682", "172.17.0.1:43682"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:33:11.203947461Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3530845708613362,
-				"StableID":   "nFZWT7L8aU11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:607fb2a305f152b615eaa00f87ea4608786376b4328f5bd0e7a9a4d5fb323e59",
-				"DiscoKey":   "discokey:629e7545f08180ed1f745df62bb200a4aa388723fe60ad117fbf4fecfbfd4c68",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:60787", "10.65.0.27:60787", "172.17.0.1:60787"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:33:11.745301733Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3435447740517613,
-				"StableID":   "nGz6hRPvpT11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:d0fd60aeef77c9cfa4d11e4261238dae075f57ca9edb7e92d42574ecddaa8b14",
-				"DiscoKey":   "discokey:013225ef074a39010d9d7eb7ac6c67bd48f2598f426a4e4bbd68f46cdf41af53",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:39211", "10.65.0.27:39211", "172.17.0.1:39211"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:33:12.275546851Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5500055414320652,
-				"StableID":   "n9ThuV8zwj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7cf1e8ead3cc780f2e10c6f44f57c959852648ec1ef4d5df2cc0388c63135321",
-				"DiscoKey":   "discokey:f5660c278648e1b5c2197c6471dca0ea4887e16ae614d61bd6d6810be72c7373",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:50284", "10.65.0.27:50284", "172.17.0.1:50284"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:33:12.811741536Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1019287665345842,
-				"StableID":   "nVLobbxdx811CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e67acccd6a28e83dbed1af49c1061ddb183e1c367f627cd9723df56396214156",
-				"DiscoKey":   "discokey:67e0a06866ffda5c6f3d03f63c65fd3fb4626ecb392e63fe79c5db9f35058b14",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37768", "10.65.0.27:37768", "172.17.0.1:37768"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:33:13.350146794Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         2601221495443221,
-				"StableID":   "nzH66Kg6KM11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:88e5f5ca859b344258b48f74d82a37947ad77ea8f9c6273091a440375bd0dd19",
-				"KeyExpiry":  "2026-11-03T08:33:13Z",
-				"DiscoKey":   "discokey:2ced89b5b348a0662f3a3ecaa4832ea28dbfa16b898cae1c878f2998bcad3d11",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:56328", "10.65.0.27:56328", "172.17.0.1:56328"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:33:13.883405767Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1421144552345418,
-				"StableID":   "nZcNcL4e6C11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:611d6d03db71a53b555a12cefe31b3345be96e9f305f505b3ddd1a08cfd54019",
-				"KeyExpiry":  "2026-11-03T08:33:14Z",
-				"DiscoKey":   "discokey:f4ce22eed8e9f54cafd00cf903cf4001ff737c2a5e0afea0fe617240aa620e5f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:44413", "10.65.0.27:44413", "172.17.0.1:44413"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:33:14.970225764Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a2-user.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a2-user.hujson
deleted file mode 100644
index ccbe28b70..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a2-user.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-target-a2-user
-//
-// user target hits only that user's untagged nodes
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:36:18Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a2-user",
-	"description":    "user target hits only that user's untagged nodes",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:36:18.71265828Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                           \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"user target hits only that user's untagged nodes\",\n    \"id\": \"nodeattrs-target-a2-user\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"odin@example.com\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a2-user.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["odin@example.com"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         872317390944425,
-				"StableID":   "nCGBjKJ5p711CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       872317390944425,
-				"Key":        "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-				"DiscoKey":   "discokey:38f1e12b91da494748c170a673575134a9fd7913ec302fe4af195e50f3d5f013",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38742", "10.65.0.27:38742", "172.17.0.1:38742"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:36:24.241857206Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-			"MachineKey": "mkey:62c61ef2ab7427070fe0ccd2e8b0e9469a9e16d708143ea2692106b12f06845b",
-			"Peers": [{
-				"ID":         4371211156393995,
-				"StableID":   "nvC7PgJj8b11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-				"DiscoKey":   "discokey:c04850741df73da0cad0c87197583c529f241b7af6176b161fd6f72717b8ec1a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54844", "10.65.0.27:54844", "172.17.0.1:54844"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:36:24.755634658Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8017593679428959,
-				"StableID":   "nv8WVFbBc521CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-				"DiscoKey":   "discokey:0f0d75a64c8571e5e4d0fff4e98e476798467c8229c65c8fed6105fc55921e4f",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58679", "10.65.0.27:58679", "172.17.0.1:58679"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:36:25.518660183Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2649624015224408,
-				"StableID":   "nump1Y82hM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-				"DiscoKey":   "discokey:02b56fc3350013f5cc7c7ce5cace40e005ee7dde2a5ed10718b4d849ce7c1e0f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56183", "10.65.0.27:56183", "172.17.0.1:56183"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:36:26.09504042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7114305316582646,
-				"StableID":   "nFus2kj5Zx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-				"DiscoKey":   "discokey:01226e88e6e9fc2b3c7b60a6264f84614c65552878c9e418f13955b737ad9e21",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60905", "10.65.0.27:60905", "172.17.0.1:60905"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:36:26.627075557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         349658022351810,
-				"StableID":   "nbd56ZvMj311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:c074d3e546ad26735cb24c2deaef46a1d1c715341174e9495af9ea80ed14a769",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49548", "10.65.0.27:49548", "172.17.0.1:49548"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:36:27.171516637Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3487718281001519,
-				"StableID":   "n2azMpSbEU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:ce987add9008831b9f938afcfae0ea6cded7fb8412f2c2eee66b5bd037eb3370",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:53481", "10.65.0.27:53481", "172.17.0.1:53481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:36:27.708235239Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         255617129750014,
-				"StableID":   "ndcJSTdmz211CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-				"KeyExpiry":  "2026-11-03T08:36:28Z",
-				"DiscoKey":   "discokey:01ef3190384bb535653bc17469dacc15d779588ca2f5b2eb8b0fdaea0b32ce6d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33168", "10.65.0.27:33168", "172.17.0.1:33168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:36:28.237490494Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "872317390944425": {
-				"ID":          872317390944425,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4371211156393995,
-				"StableID":   "nvC7PgJj8b11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       4371211156393995,
-				"Key":        "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-				"DiscoKey":   "discokey:c04850741df73da0cad0c87197583c529f241b7af6176b161fd6f72717b8ec1a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54844", "10.65.0.27:54844", "172.17.0.1:54844"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:36:24.755634658Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-			"MachineKey": "mkey:05d2652665069e35188449f66f094bcd8c209ba01637db2d5e7ce6d1dc4ba155",
-			"Peers": [{
-				"ID":         872317390944425,
-				"StableID":   "nCGBjKJ5p711CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-				"DiscoKey":   "discokey:38f1e12b91da494748c170a673575134a9fd7913ec302fe4af195e50f3d5f013",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38742", "10.65.0.27:38742", "172.17.0.1:38742"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:36:24.241857206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8017593679428959,
-				"StableID":   "nv8WVFbBc521CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-				"DiscoKey":   "discokey:0f0d75a64c8571e5e4d0fff4e98e476798467c8229c65c8fed6105fc55921e4f",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58679", "10.65.0.27:58679", "172.17.0.1:58679"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:36:25.518660183Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2649624015224408,
-				"StableID":   "nump1Y82hM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-				"DiscoKey":   "discokey:02b56fc3350013f5cc7c7ce5cace40e005ee7dde2a5ed10718b4d849ce7c1e0f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56183", "10.65.0.27:56183", "172.17.0.1:56183"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:36:26.09504042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7114305316582646,
-				"StableID":   "nFus2kj5Zx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-				"DiscoKey":   "discokey:01226e88e6e9fc2b3c7b60a6264f84614c65552878c9e418f13955b737ad9e21",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60905", "10.65.0.27:60905", "172.17.0.1:60905"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:36:26.627075557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         349658022351810,
-				"StableID":   "nbd56ZvMj311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:c074d3e546ad26735cb24c2deaef46a1d1c715341174e9495af9ea80ed14a769",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49548", "10.65.0.27:49548", "172.17.0.1:49548"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:36:27.171516637Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3487718281001519,
-				"StableID":   "n2azMpSbEU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:ce987add9008831b9f938afcfae0ea6cded7fb8412f2c2eee66b5bd037eb3370",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:53481", "10.65.0.27:53481", "172.17.0.1:53481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:36:27.708235239Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         255617129750014,
-				"StableID":   "ndcJSTdmz211CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-				"KeyExpiry":  "2026-11-03T08:36:28Z",
-				"DiscoKey":   "discokey:01ef3190384bb535653bc17469dacc15d779588ca2f5b2eb8b0fdaea0b32ce6d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33168", "10.65.0.27:33168", "172.17.0.1:33168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:36:28.237490494Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4371211156393995": {
-				"ID":          4371211156393995,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         349658022351810,
-				"StableID":   "nbd56ZvMj311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:c074d3e546ad26735cb24c2deaef46a1d1c715341174e9495af9ea80ed14a769",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49548", "10.65.0.27:49548", "172.17.0.1:49548"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:36:27.171516637Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-			"MachineKey": "mkey:a00134a344ef8fb1cb7d79bfcf0903c91805e1e871f2bb6da0ebd0faaa50f926",
-			"Peers": [{
-				"ID":         872317390944425,
-				"StableID":   "nCGBjKJ5p711CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-				"DiscoKey":   "discokey:38f1e12b91da494748c170a673575134a9fd7913ec302fe4af195e50f3d5f013",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38742", "10.65.0.27:38742", "172.17.0.1:38742"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:36:24.241857206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4371211156393995,
-				"StableID":   "nvC7PgJj8b11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-				"DiscoKey":   "discokey:c04850741df73da0cad0c87197583c529f241b7af6176b161fd6f72717b8ec1a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54844", "10.65.0.27:54844", "172.17.0.1:54844"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:36:24.755634658Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8017593679428959,
-				"StableID":   "nv8WVFbBc521CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-				"DiscoKey":   "discokey:0f0d75a64c8571e5e4d0fff4e98e476798467c8229c65c8fed6105fc55921e4f",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58679", "10.65.0.27:58679", "172.17.0.1:58679"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:36:25.518660183Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2649624015224408,
-				"StableID":   "nump1Y82hM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-				"DiscoKey":   "discokey:02b56fc3350013f5cc7c7ce5cace40e005ee7dde2a5ed10718b4d849ce7c1e0f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56183", "10.65.0.27:56183", "172.17.0.1:56183"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:36:26.09504042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7114305316582646,
-				"StableID":   "nFus2kj5Zx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-				"DiscoKey":   "discokey:01226e88e6e9fc2b3c7b60a6264f84614c65552878c9e418f13955b737ad9e21",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60905", "10.65.0.27:60905", "172.17.0.1:60905"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:36:26.627075557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3487718281001519,
-				"StableID":   "n2azMpSbEU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:ce987add9008831b9f938afcfae0ea6cded7fb8412f2c2eee66b5bd037eb3370",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:53481", "10.65.0.27:53481", "172.17.0.1:53481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:36:27.708235239Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         255617129750014,
-				"StableID":   "ndcJSTdmz211CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-				"KeyExpiry":  "2026-11-03T08:36:28Z",
-				"DiscoKey":   "discokey:01ef3190384bb535653bc17469dacc15d779588ca2f5b2eb8b0fdaea0b32ce6d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33168", "10.65.0.27:33168", "172.17.0.1:33168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:36:28.237490494Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8017593679428959,
-				"StableID":   "nv8WVFbBc521CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       8017593679428959,
-				"Key":        "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-				"DiscoKey":   "discokey:0f0d75a64c8571e5e4d0fff4e98e476798467c8229c65c8fed6105fc55921e4f",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58679", "10.65.0.27:58679", "172.17.0.1:58679"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:36:25.518660183Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-			"MachineKey": "mkey:cab64bd4a6d82ca30aa400a960d735ae3511ccde84fb72994881f75e8e989f52",
-			"Peers": [{
-				"ID":         872317390944425,
-				"StableID":   "nCGBjKJ5p711CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-				"DiscoKey":   "discokey:38f1e12b91da494748c170a673575134a9fd7913ec302fe4af195e50f3d5f013",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38742", "10.65.0.27:38742", "172.17.0.1:38742"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:36:24.241857206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4371211156393995,
-				"StableID":   "nvC7PgJj8b11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-				"DiscoKey":   "discokey:c04850741df73da0cad0c87197583c529f241b7af6176b161fd6f72717b8ec1a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54844", "10.65.0.27:54844", "172.17.0.1:54844"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:36:24.755634658Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2649624015224408,
-				"StableID":   "nump1Y82hM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-				"DiscoKey":   "discokey:02b56fc3350013f5cc7c7ce5cace40e005ee7dde2a5ed10718b4d849ce7c1e0f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56183", "10.65.0.27:56183", "172.17.0.1:56183"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:36:26.09504042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7114305316582646,
-				"StableID":   "nFus2kj5Zx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-				"DiscoKey":   "discokey:01226e88e6e9fc2b3c7b60a6264f84614c65552878c9e418f13955b737ad9e21",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60905", "10.65.0.27:60905", "172.17.0.1:60905"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:36:26.627075557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         349658022351810,
-				"StableID":   "nbd56ZvMj311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:c074d3e546ad26735cb24c2deaef46a1d1c715341174e9495af9ea80ed14a769",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49548", "10.65.0.27:49548", "172.17.0.1:49548"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:36:27.171516637Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3487718281001519,
-				"StableID":   "n2azMpSbEU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:ce987add9008831b9f938afcfae0ea6cded7fb8412f2c2eee66b5bd037eb3370",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:53481", "10.65.0.27:53481", "172.17.0.1:53481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:36:27.708235239Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         255617129750014,
-				"StableID":   "ndcJSTdmz211CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-				"KeyExpiry":  "2026-11-03T08:36:28Z",
-				"DiscoKey":   "discokey:01ef3190384bb535653bc17469dacc15d779588ca2f5b2eb8b0fdaea0b32ce6d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33168", "10.65.0.27:33168", "172.17.0.1:33168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:36:28.237490494Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8017593679428959": {
-				"ID":          8017593679428959,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2649624015224408,
-				"StableID":   "nump1Y82hM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       2649624015224408,
-				"Key":        "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-				"DiscoKey":   "discokey:02b56fc3350013f5cc7c7ce5cace40e005ee7dde2a5ed10718b4d849ce7c1e0f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56183", "10.65.0.27:56183", "172.17.0.1:56183"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:36:26.09504042Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-			"MachineKey": "mkey:469856454737ec159b4220048f8ccf89634d6cea77a27db5a45cb1d3d00b4763",
-			"Peers": [{
-				"ID":         872317390944425,
-				"StableID":   "nCGBjKJ5p711CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-				"DiscoKey":   "discokey:38f1e12b91da494748c170a673575134a9fd7913ec302fe4af195e50f3d5f013",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38742", "10.65.0.27:38742", "172.17.0.1:38742"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:36:24.241857206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4371211156393995,
-				"StableID":   "nvC7PgJj8b11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-				"DiscoKey":   "discokey:c04850741df73da0cad0c87197583c529f241b7af6176b161fd6f72717b8ec1a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54844", "10.65.0.27:54844", "172.17.0.1:54844"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:36:24.755634658Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8017593679428959,
-				"StableID":   "nv8WVFbBc521CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-				"DiscoKey":   "discokey:0f0d75a64c8571e5e4d0fff4e98e476798467c8229c65c8fed6105fc55921e4f",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58679", "10.65.0.27:58679", "172.17.0.1:58679"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:36:25.518660183Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7114305316582646,
-				"StableID":   "nFus2kj5Zx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-				"DiscoKey":   "discokey:01226e88e6e9fc2b3c7b60a6264f84614c65552878c9e418f13955b737ad9e21",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60905", "10.65.0.27:60905", "172.17.0.1:60905"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:36:26.627075557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         349658022351810,
-				"StableID":   "nbd56ZvMj311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:c074d3e546ad26735cb24c2deaef46a1d1c715341174e9495af9ea80ed14a769",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49548", "10.65.0.27:49548", "172.17.0.1:49548"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:36:27.171516637Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3487718281001519,
-				"StableID":   "n2azMpSbEU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:ce987add9008831b9f938afcfae0ea6cded7fb8412f2c2eee66b5bd037eb3370",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:53481", "10.65.0.27:53481", "172.17.0.1:53481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:36:27.708235239Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         255617129750014,
-				"StableID":   "ndcJSTdmz211CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-				"KeyExpiry":  "2026-11-03T08:36:28Z",
-				"DiscoKey":   "discokey:01ef3190384bb535653bc17469dacc15d779588ca2f5b2eb8b0fdaea0b32ce6d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33168", "10.65.0.27:33168", "172.17.0.1:33168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:36:28.237490494Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2649624015224408": {
-				"ID":          2649624015224408,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7114305316582646,
-				"StableID":   "nFus2kj5Zx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7114305316582646,
-				"Key":        "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-				"DiscoKey":   "discokey:01226e88e6e9fc2b3c7b60a6264f84614c65552878c9e418f13955b737ad9e21",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60905", "10.65.0.27:60905", "172.17.0.1:60905"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:36:26.627075557Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-			"MachineKey": "mkey:582dbf3aee05a46918422a456da40fb8e0eacfd78e85fe093e0826dea24cc404",
-			"Peers": [{
-				"ID":         872317390944425,
-				"StableID":   "nCGBjKJ5p711CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-				"DiscoKey":   "discokey:38f1e12b91da494748c170a673575134a9fd7913ec302fe4af195e50f3d5f013",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38742", "10.65.0.27:38742", "172.17.0.1:38742"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:36:24.241857206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4371211156393995,
-				"StableID":   "nvC7PgJj8b11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-				"DiscoKey":   "discokey:c04850741df73da0cad0c87197583c529f241b7af6176b161fd6f72717b8ec1a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54844", "10.65.0.27:54844", "172.17.0.1:54844"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:36:24.755634658Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8017593679428959,
-				"StableID":   "nv8WVFbBc521CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-				"DiscoKey":   "discokey:0f0d75a64c8571e5e4d0fff4e98e476798467c8229c65c8fed6105fc55921e4f",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58679", "10.65.0.27:58679", "172.17.0.1:58679"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:36:25.518660183Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2649624015224408,
-				"StableID":   "nump1Y82hM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-				"DiscoKey":   "discokey:02b56fc3350013f5cc7c7ce5cace40e005ee7dde2a5ed10718b4d849ce7c1e0f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56183", "10.65.0.27:56183", "172.17.0.1:56183"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:36:26.09504042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         349658022351810,
-				"StableID":   "nbd56ZvMj311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:c074d3e546ad26735cb24c2deaef46a1d1c715341174e9495af9ea80ed14a769",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49548", "10.65.0.27:49548", "172.17.0.1:49548"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:36:27.171516637Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3487718281001519,
-				"StableID":   "n2azMpSbEU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:ce987add9008831b9f938afcfae0ea6cded7fb8412f2c2eee66b5bd037eb3370",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:53481", "10.65.0.27:53481", "172.17.0.1:53481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:36:27.708235239Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         255617129750014,
-				"StableID":   "ndcJSTdmz211CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-				"KeyExpiry":  "2026-11-03T08:36:28Z",
-				"DiscoKey":   "discokey:01ef3190384bb535653bc17469dacc15d779588ca2f5b2eb8b0fdaea0b32ce6d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33168", "10.65.0.27:33168", "172.17.0.1:33168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:36:28.237490494Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7114305316582646": {
-				"ID":          7114305316582646,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         255617129750014,
-				"StableID":   "ndcJSTdmz211CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-				"KeyExpiry":  "2026-11-03T08:36:28Z",
-				"DiscoKey":   "discokey:01ef3190384bb535653bc17469dacc15d779588ca2f5b2eb8b0fdaea0b32ce6d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33168", "10.65.0.27:33168", "172.17.0.1:33168"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:36:28.237490494Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-			"MachineKey": "mkey:310a053a257665a3cc8d63c11b8cb18ae257539720c007c7d52ffb22beaf3232",
-			"Peers": [{
-				"ID":         872317390944425,
-				"StableID":   "nCGBjKJ5p711CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-				"DiscoKey":   "discokey:38f1e12b91da494748c170a673575134a9fd7913ec302fe4af195e50f3d5f013",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38742", "10.65.0.27:38742", "172.17.0.1:38742"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:36:24.241857206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4371211156393995,
-				"StableID":   "nvC7PgJj8b11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-				"DiscoKey":   "discokey:c04850741df73da0cad0c87197583c529f241b7af6176b161fd6f72717b8ec1a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54844", "10.65.0.27:54844", "172.17.0.1:54844"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:36:24.755634658Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8017593679428959,
-				"StableID":   "nv8WVFbBc521CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-				"DiscoKey":   "discokey:0f0d75a64c8571e5e4d0fff4e98e476798467c8229c65c8fed6105fc55921e4f",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58679", "10.65.0.27:58679", "172.17.0.1:58679"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:36:25.518660183Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2649624015224408,
-				"StableID":   "nump1Y82hM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-				"DiscoKey":   "discokey:02b56fc3350013f5cc7c7ce5cace40e005ee7dde2a5ed10718b4d849ce7c1e0f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56183", "10.65.0.27:56183", "172.17.0.1:56183"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:36:26.09504042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7114305316582646,
-				"StableID":   "nFus2kj5Zx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-				"DiscoKey":   "discokey:01226e88e6e9fc2b3c7b60a6264f84614c65552878c9e418f13955b737ad9e21",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60905", "10.65.0.27:60905", "172.17.0.1:60905"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:36:26.627075557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         349658022351810,
-				"StableID":   "nbd56ZvMj311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:c074d3e546ad26735cb24c2deaef46a1d1c715341174e9495af9ea80ed14a769",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49548", "10.65.0.27:49548", "172.17.0.1:49548"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:36:27.171516637Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3487718281001519,
-				"StableID":   "n2azMpSbEU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:ce987add9008831b9f938afcfae0ea6cded7fb8412f2c2eee66b5bd037eb3370",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:53481", "10.65.0.27:53481", "172.17.0.1:53481"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:36:27.708235239Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3487718281001519,
-				"StableID":   "n2azMpSbEU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:ce987add9008831b9f938afcfae0ea6cded7fb8412f2c2eee66b5bd037eb3370",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:53481", "10.65.0.27:53481", "172.17.0.1:53481"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:36:27.708235239Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0ca28e76350c6d239a1bac042630a4158ded6e757fd4e1dce816de5e3d082470",
-			"MachineKey": "mkey:a63be50d30ce1eb6a08a88d7bd2c323092946b1dbce5f646468f75ce6114d83d",
-			"Peers": [{
-				"ID":         872317390944425,
-				"StableID":   "nCGBjKJ5p711CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c8b0148ae14dfcb6a3e68fd54c1714c5063b35d84d646e1af294648db8c3d147",
-				"DiscoKey":   "discokey:38f1e12b91da494748c170a673575134a9fd7913ec302fe4af195e50f3d5f013",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:38742", "10.65.0.27:38742", "172.17.0.1:38742"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:36:24.241857206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4371211156393995,
-				"StableID":   "nvC7PgJj8b11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:af5a4728b3f71ce5cb65cc88c1102b1441b28dc04f683a4d2377dbdef4ca0e42",
-				"DiscoKey":   "discokey:c04850741df73da0cad0c87197583c529f241b7af6176b161fd6f72717b8ec1a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54844", "10.65.0.27:54844", "172.17.0.1:54844"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:36:24.755634658Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8017593679428959,
-				"StableID":   "nv8WVFbBc521CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:36c0ed5e694167eb52fb019d3efd2552c8259ad795c00fd7c87d53465400365c",
-				"DiscoKey":   "discokey:0f0d75a64c8571e5e4d0fff4e98e476798467c8229c65c8fed6105fc55921e4f",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58679", "10.65.0.27:58679", "172.17.0.1:58679"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:36:25.518660183Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2649624015224408,
-				"StableID":   "nump1Y82hM11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:843b69528aa761f69e4ea98910d8e4678d2bb4173f28f109984a4e6657db834b",
-				"DiscoKey":   "discokey:02b56fc3350013f5cc7c7ce5cace40e005ee7dde2a5ed10718b4d849ce7c1e0f",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:56183", "10.65.0.27:56183", "172.17.0.1:56183"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:36:26.09504042Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7114305316582646,
-				"StableID":   "nFus2kj5Zx11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bf82c5e0f7846cd063148a6a632b9ad54589d4a8312607cc3e138ba1cee3110b",
-				"DiscoKey":   "discokey:01226e88e6e9fc2b3c7b60a6264f84614c65552878c9e418f13955b737ad9e21",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60905", "10.65.0.27:60905", "172.17.0.1:60905"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:36:26.627075557Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         349658022351810,
-				"StableID":   "nbd56ZvMj311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:29854fd5f85bacd186510b6b1a83a7cbf514b4ca24a6462f9bb065852e50b168",
-				"KeyExpiry":  "2026-11-03T08:36:27Z",
-				"DiscoKey":   "discokey:c074d3e546ad26735cb24c2deaef46a1d1c715341174e9495af9ea80ed14a769",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49548", "10.65.0.27:49548", "172.17.0.1:49548"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:36:27.171516637Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         255617129750014,
-				"StableID":   "ndcJSTdmz211CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:a4f4e23505a2381623c90502133686a88c0a1305d58d15d98f85b1f217c8f355",
-				"KeyExpiry":  "2026-11-03T08:36:28Z",
-				"DiscoKey":   "discokey:01ef3190384bb535653bc17469dacc15d779588ca2f5b2eb8b0fdaea0b32ce6d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:33168", "10.65.0.27:33168", "172.17.0.1:33168"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:36:28.237490494Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a3-tag.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a3-tag.hujson
deleted file mode 100644
index f93a676aa..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a3-tag.hujson
+++ /dev/null
@@ -1,8817 +0,0 @@
-// nodeattrs-target-a3-tag
-//
-// tag target hits matching tagged nodes
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:36:59Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a3-tag",
-	"description":    "tag target hits matching tagged nodes",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:36:59.221245948Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                          \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"tag target hits matching tagged nodes\",\n    \"id\": \"nodeattrs-target-a3-tag\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"drive:share\",\n                    \"drive:access\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a3-tag.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["drive:share", "drive:access"], "target": ["tag:server"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7735050916816184,
-				"StableID":   "nMPj5wfDQ321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       7735050916816184,
-				"Key":        "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-				"DiscoKey":   "discokey:db6fab372ac5736441cda4715057d29bff2f4de8329b50d4e98342c8935f4432",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50445", "10.65.0.27:50445", "172.17.0.1:50445"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:04.873651936Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-			"MachineKey": "mkey:ad8d89b180bdc2210c265ec0c89b14d56e6f96091369f6f1ef3414cf9cdc625a",
-			"Peers": [{
-				"ID":         3422165554151237,
-				"StableID":   "ntgANCVuiT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-				"DiscoKey":   "discokey:732e81985d0f01fcb4dc9701fbbafe25a5c1a325943c981234c5ed965fc9ef2a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35795", "10.65.0.27:35795", "172.17.0.1:35795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:05.411993981Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7582787548198097,
-				"StableID":   "n4LhbJyFD221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-				"DiscoKey":   "discokey:9bbcd394c13fa27f118c4cc0a5f4b572f2627ef239a047f400422370539cdd69",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57285", "10.65.0.27:57285", "172.17.0.1:57285"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:05.946123524Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3098996075083063,
-				"StableID":   "nxHD9aNYCR11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-				"DiscoKey":   "discokey:89d99799aacef83bd643d5461e93fef2fc7ed469bc648dc28ce7c77fda515221",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:38617", "10.65.0.27:38617", "172.17.0.1:38617"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:06.492798413Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7978733218023560,
-				"StableID":   "nRT8bwnaJ521CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-				"DiscoKey":   "discokey:ec833aec0d6f40db258c27e60601a5f9d0038d15c39f33c2827d798ecd2ec410",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60761", "10.65.0.27:60761", "172.17.0.1:60761"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:07.026407234Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6012946668290018,
-				"StableID":   "nPb5iwuGxo11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-				"KeyExpiry":  "2026-11-03T08:37:07Z",
-				"DiscoKey":   "discokey:cb8a340d1a1a2bdede40f4650b958afb28556ebe3d2ae03d32c2dcdb2501106f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36520", "10.65.0.27:36520", "172.17.0.1:36520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:07.5695468Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7559290084097700,
-				"StableID":   "nudDAUjc2221CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:4f951c7bd15620a51141d8affe5936a1c705d5453761cbdc294978cfa68fc62f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:08.104684567Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6267841250060613,
-				"StableID":   "nv784ZZiwq11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:a7955f3b9a3c9af52b292b7964c2db6d35cf179b6077761ec536b2bb5294095d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49399", "10.65.0.27:49399", "172.17.0.1:49399"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:08.647916517Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7735050916816184": {
-				"ID":          7735050916816184,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3422165554151237,
-				"StableID":   "ntgANCVuiT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3422165554151237,
-				"Key":        "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-				"DiscoKey":   "discokey:732e81985d0f01fcb4dc9701fbbafe25a5c1a325943c981234c5ed965fc9ef2a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35795", "10.65.0.27:35795", "172.17.0.1:35795"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:37:05.411993981Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-			"MachineKey": "mkey:5f27f81ca271dadbcb9710d46b57c48af2a1971af119f67a77b51b0917169148",
-			"Peers": [{
-				"ID":         7735050916816184,
-				"StableID":   "nMPj5wfDQ321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-				"DiscoKey":   "discokey:db6fab372ac5736441cda4715057d29bff2f4de8329b50d4e98342c8935f4432",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50445", "10.65.0.27:50445", "172.17.0.1:50445"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:04.873651936Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7582787548198097,
-				"StableID":   "n4LhbJyFD221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-				"DiscoKey":   "discokey:9bbcd394c13fa27f118c4cc0a5f4b572f2627ef239a047f400422370539cdd69",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57285", "10.65.0.27:57285", "172.17.0.1:57285"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:05.946123524Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3098996075083063,
-				"StableID":   "nxHD9aNYCR11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-				"DiscoKey":   "discokey:89d99799aacef83bd643d5461e93fef2fc7ed469bc648dc28ce7c77fda515221",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:38617", "10.65.0.27:38617", "172.17.0.1:38617"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:06.492798413Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7978733218023560,
-				"StableID":   "nRT8bwnaJ521CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-				"DiscoKey":   "discokey:ec833aec0d6f40db258c27e60601a5f9d0038d15c39f33c2827d798ecd2ec410",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60761", "10.65.0.27:60761", "172.17.0.1:60761"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:07.026407234Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6012946668290018,
-				"StableID":   "nPb5iwuGxo11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-				"KeyExpiry":  "2026-11-03T08:37:07Z",
-				"DiscoKey":   "discokey:cb8a340d1a1a2bdede40f4650b958afb28556ebe3d2ae03d32c2dcdb2501106f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36520", "10.65.0.27:36520", "172.17.0.1:36520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:07.5695468Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7559290084097700,
-				"StableID":   "nudDAUjc2221CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:4f951c7bd15620a51141d8affe5936a1c705d5453761cbdc294978cfa68fc62f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:08.104684567Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6267841250060613,
-				"StableID":   "nv784ZZiwq11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:a7955f3b9a3c9af52b292b7964c2db6d35cf179b6077761ec536b2bb5294095d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49399", "10.65.0.27:49399", "172.17.0.1:49399"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:08.647916517Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3422165554151237": {
-				"ID":          3422165554151237,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6012946668290018,
-				"StableID":   "nPb5iwuGxo11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-				"KeyExpiry":  "2026-11-03T08:37:07Z",
-				"DiscoKey":   "discokey:cb8a340d1a1a2bdede40f4650b958afb28556ebe3d2ae03d32c2dcdb2501106f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36520", "10.65.0.27:36520", "172.17.0.1:36520"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:07.5695468Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-			"MachineKey": "mkey:6b07c3337d7b4be76ecb4812cfd4f58e0e42efb7deb3d21f383474aa2cef7311",
-			"Peers": [{
-				"ID":         7735050916816184,
-				"StableID":   "nMPj5wfDQ321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-				"DiscoKey":   "discokey:db6fab372ac5736441cda4715057d29bff2f4de8329b50d4e98342c8935f4432",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50445", "10.65.0.27:50445", "172.17.0.1:50445"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:04.873651936Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3422165554151237,
-				"StableID":   "ntgANCVuiT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-				"DiscoKey":   "discokey:732e81985d0f01fcb4dc9701fbbafe25a5c1a325943c981234c5ed965fc9ef2a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35795", "10.65.0.27:35795", "172.17.0.1:35795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:05.411993981Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7582787548198097,
-				"StableID":   "n4LhbJyFD221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-				"DiscoKey":   "discokey:9bbcd394c13fa27f118c4cc0a5f4b572f2627ef239a047f400422370539cdd69",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57285", "10.65.0.27:57285", "172.17.0.1:57285"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:05.946123524Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3098996075083063,
-				"StableID":   "nxHD9aNYCR11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-				"DiscoKey":   "discokey:89d99799aacef83bd643d5461e93fef2fc7ed469bc648dc28ce7c77fda515221",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:38617", "10.65.0.27:38617", "172.17.0.1:38617"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:06.492798413Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7978733218023560,
-				"StableID":   "nRT8bwnaJ521CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-				"DiscoKey":   "discokey:ec833aec0d6f40db258c27e60601a5f9d0038d15c39f33c2827d798ecd2ec410",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60761", "10.65.0.27:60761", "172.17.0.1:60761"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:07.026407234Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         7559290084097700,
-				"StableID":   "nudDAUjc2221CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:4f951c7bd15620a51141d8affe5936a1c705d5453761cbdc294978cfa68fc62f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:08.104684567Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6267841250060613,
-				"StableID":   "nv784ZZiwq11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:a7955f3b9a3c9af52b292b7964c2db6d35cf179b6077761ec536b2bb5294095d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49399", "10.65.0.27:49399", "172.17.0.1:49399"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:08.647916517Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7582787548198097,
-				"StableID":   "n4LhbJyFD221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       7582787548198097,
-				"Key":        "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-				"DiscoKey":   "discokey:9bbcd394c13fa27f118c4cc0a5f4b572f2627ef239a047f400422370539cdd69",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57285", "10.65.0.27:57285", "172.17.0.1:57285"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:05.946123524Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-			"MachineKey": "mkey:41f3f0ad8a3bc1243b88a088fae6cc5fcc4463c2f8f973956659b6da2fd27444",
-			"Peers": [{
-				"ID":         7735050916816184,
-				"StableID":   "nMPj5wfDQ321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-				"DiscoKey":   "discokey:db6fab372ac5736441cda4715057d29bff2f4de8329b50d4e98342c8935f4432",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50445", "10.65.0.27:50445", "172.17.0.1:50445"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:04.873651936Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3422165554151237,
-				"StableID":   "ntgANCVuiT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-				"DiscoKey":   "discokey:732e81985d0f01fcb4dc9701fbbafe25a5c1a325943c981234c5ed965fc9ef2a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35795", "10.65.0.27:35795", "172.17.0.1:35795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:05.411993981Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3098996075083063,
-				"StableID":   "nxHD9aNYCR11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-				"DiscoKey":   "discokey:89d99799aacef83bd643d5461e93fef2fc7ed469bc648dc28ce7c77fda515221",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:38617", "10.65.0.27:38617", "172.17.0.1:38617"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:06.492798413Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7978733218023560,
-				"StableID":   "nRT8bwnaJ521CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-				"DiscoKey":   "discokey:ec833aec0d6f40db258c27e60601a5f9d0038d15c39f33c2827d798ecd2ec410",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60761", "10.65.0.27:60761", "172.17.0.1:60761"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:07.026407234Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6012946668290018,
-				"StableID":   "nPb5iwuGxo11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-				"KeyExpiry":  "2026-11-03T08:37:07Z",
-				"DiscoKey":   "discokey:cb8a340d1a1a2bdede40f4650b958afb28556ebe3d2ae03d32c2dcdb2501106f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36520", "10.65.0.27:36520", "172.17.0.1:36520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:07.5695468Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7559290084097700,
-				"StableID":   "nudDAUjc2221CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:4f951c7bd15620a51141d8affe5936a1c705d5453761cbdc294978cfa68fc62f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:08.104684567Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6267841250060613,
-				"StableID":   "nv784ZZiwq11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:a7955f3b9a3c9af52b292b7964c2db6d35cf179b6077761ec536b2bb5294095d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49399", "10.65.0.27:49399", "172.17.0.1:49399"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:08.647916517Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7582787548198097": {
-				"ID":          7582787548198097,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3098996075083063,
-				"StableID":   "nxHD9aNYCR11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       3098996075083063,
-				"Key":        "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-				"DiscoKey":   "discokey:89d99799aacef83bd643d5461e93fef2fc7ed469bc648dc28ce7c77fda515221",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:38617", "10.65.0.27:38617", "172.17.0.1:38617"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:37:06.492798413Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-			"MachineKey": "mkey:1d026022939d66156d592cf7d28710d89c58cb52f4adf2baf24010038db53468",
-			"Peers": [{
-				"ID":         7735050916816184,
-				"StableID":   "nMPj5wfDQ321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-				"DiscoKey":   "discokey:db6fab372ac5736441cda4715057d29bff2f4de8329b50d4e98342c8935f4432",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50445", "10.65.0.27:50445", "172.17.0.1:50445"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:04.873651936Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3422165554151237,
-				"StableID":   "ntgANCVuiT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-				"DiscoKey":   "discokey:732e81985d0f01fcb4dc9701fbbafe25a5c1a325943c981234c5ed965fc9ef2a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35795", "10.65.0.27:35795", "172.17.0.1:35795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:05.411993981Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7582787548198097,
-				"StableID":   "n4LhbJyFD221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-				"DiscoKey":   "discokey:9bbcd394c13fa27f118c4cc0a5f4b572f2627ef239a047f400422370539cdd69",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57285", "10.65.0.27:57285", "172.17.0.1:57285"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:05.946123524Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7978733218023560,
-				"StableID":   "nRT8bwnaJ521CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-				"DiscoKey":   "discokey:ec833aec0d6f40db258c27e60601a5f9d0038d15c39f33c2827d798ecd2ec410",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60761", "10.65.0.27:60761", "172.17.0.1:60761"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:07.026407234Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6012946668290018,
-				"StableID":   "nPb5iwuGxo11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-				"KeyExpiry":  "2026-11-03T08:37:07Z",
-				"DiscoKey":   "discokey:cb8a340d1a1a2bdede40f4650b958afb28556ebe3d2ae03d32c2dcdb2501106f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36520", "10.65.0.27:36520", "172.17.0.1:36520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:07.5695468Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7559290084097700,
-				"StableID":   "nudDAUjc2221CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:4f951c7bd15620a51141d8affe5936a1c705d5453761cbdc294978cfa68fc62f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:08.104684567Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6267841250060613,
-				"StableID":   "nv784ZZiwq11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:a7955f3b9a3c9af52b292b7964c2db6d35cf179b6077761ec536b2bb5294095d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49399", "10.65.0.27:49399", "172.17.0.1:49399"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:08.647916517Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3098996075083063": {
-				"ID":          3098996075083063,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7978733218023560,
-				"StableID":   "nRT8bwnaJ521CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       7978733218023560,
-				"Key":        "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-				"DiscoKey":   "discokey:ec833aec0d6f40db258c27e60601a5f9d0038d15c39f33c2827d798ecd2ec410",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60761", "10.65.0.27:60761", "172.17.0.1:60761"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:07.026407234Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"drive:access":                           null,
-					"drive:share":                            null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"drive:access",
-				"drive:share",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-			"MachineKey": "mkey:a84a51bb80bff5b82eb2081645c130c7aed749b541fd8704e2918b14a4b5e179",
-			"Peers": [{
-				"ID":         7735050916816184,
-				"StableID":   "nMPj5wfDQ321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-				"DiscoKey":   "discokey:db6fab372ac5736441cda4715057d29bff2f4de8329b50d4e98342c8935f4432",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50445", "10.65.0.27:50445", "172.17.0.1:50445"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:04.873651936Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3422165554151237,
-				"StableID":   "ntgANCVuiT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-				"DiscoKey":   "discokey:732e81985d0f01fcb4dc9701fbbafe25a5c1a325943c981234c5ed965fc9ef2a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35795", "10.65.0.27:35795", "172.17.0.1:35795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:05.411993981Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7582787548198097,
-				"StableID":   "n4LhbJyFD221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-				"DiscoKey":   "discokey:9bbcd394c13fa27f118c4cc0a5f4b572f2627ef239a047f400422370539cdd69",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57285", "10.65.0.27:57285", "172.17.0.1:57285"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:05.946123524Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3098996075083063,
-				"StableID":   "nxHD9aNYCR11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-				"DiscoKey":   "discokey:89d99799aacef83bd643d5461e93fef2fc7ed469bc648dc28ce7c77fda515221",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:38617", "10.65.0.27:38617", "172.17.0.1:38617"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:06.492798413Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6012946668290018,
-				"StableID":   "nPb5iwuGxo11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-				"KeyExpiry":  "2026-11-03T08:37:07Z",
-				"DiscoKey":   "discokey:cb8a340d1a1a2bdede40f4650b958afb28556ebe3d2ae03d32c2dcdb2501106f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36520", "10.65.0.27:36520", "172.17.0.1:36520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:07.5695468Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7559290084097700,
-				"StableID":   "nudDAUjc2221CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:4f951c7bd15620a51141d8affe5936a1c705d5453761cbdc294978cfa68fc62f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:08.104684567Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6267841250060613,
-				"StableID":   "nv784ZZiwq11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:a7955f3b9a3c9af52b292b7964c2db6d35cf179b6077761ec536b2bb5294095d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49399", "10.65.0.27:49399", "172.17.0.1:49399"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:08.647916517Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7978733218023560": {
-				"ID":          7978733218023560,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6267841250060613,
-				"StableID":   "nv784ZZiwq11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:a7955f3b9a3c9af52b292b7964c2db6d35cf179b6077761ec536b2bb5294095d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49399", "10.65.0.27:49399", "172.17.0.1:49399"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:08.647916517Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-			"MachineKey": "mkey:251894d76791301268f91afba49a72929cc1e2120325e7d13da41035d5a0ab00",
-			"Peers": [{
-				"ID":         7735050916816184,
-				"StableID":   "nMPj5wfDQ321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-				"DiscoKey":   "discokey:db6fab372ac5736441cda4715057d29bff2f4de8329b50d4e98342c8935f4432",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50445", "10.65.0.27:50445", "172.17.0.1:50445"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:04.873651936Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3422165554151237,
-				"StableID":   "ntgANCVuiT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-				"DiscoKey":   "discokey:732e81985d0f01fcb4dc9701fbbafe25a5c1a325943c981234c5ed965fc9ef2a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35795", "10.65.0.27:35795", "172.17.0.1:35795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:05.411993981Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7582787548198097,
-				"StableID":   "n4LhbJyFD221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-				"DiscoKey":   "discokey:9bbcd394c13fa27f118c4cc0a5f4b572f2627ef239a047f400422370539cdd69",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57285", "10.65.0.27:57285", "172.17.0.1:57285"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:05.946123524Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3098996075083063,
-				"StableID":   "nxHD9aNYCR11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-				"DiscoKey":   "discokey:89d99799aacef83bd643d5461e93fef2fc7ed469bc648dc28ce7c77fda515221",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:38617", "10.65.0.27:38617", "172.17.0.1:38617"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:06.492798413Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7978733218023560,
-				"StableID":   "nRT8bwnaJ521CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-				"DiscoKey":   "discokey:ec833aec0d6f40db258c27e60601a5f9d0038d15c39f33c2827d798ecd2ec410",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60761", "10.65.0.27:60761", "172.17.0.1:60761"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:07.026407234Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6012946668290018,
-				"StableID":   "nPb5iwuGxo11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-				"KeyExpiry":  "2026-11-03T08:37:07Z",
-				"DiscoKey":   "discokey:cb8a340d1a1a2bdede40f4650b958afb28556ebe3d2ae03d32c2dcdb2501106f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36520", "10.65.0.27:36520", "172.17.0.1:36520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:07.5695468Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7559290084097700,
-				"StableID":   "nudDAUjc2221CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:4f951c7bd15620a51141d8affe5936a1c705d5453761cbdc294978cfa68fc62f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:08.104684567Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7559290084097700,
-				"StableID":   "nudDAUjc2221CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:4f951c7bd15620a51141d8affe5936a1c705d5453761cbdc294978cfa68fc62f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:08.104684567Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:079b894e4973565f8776a94500633312798334f37d4e42614f9792fd7d5a4416",
-			"MachineKey": "mkey:8bb5f009f864318e728e0e5b2e46d15cd0ddf22ddfb29b9bfe535ae34928543e",
-			"Peers": [{
-				"ID":         7735050916816184,
-				"StableID":   "nMPj5wfDQ321CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7d27ed92d067d4e581ff96c068b483c62f92815a8422b50d42ec988e2dba2f6f",
-				"DiscoKey":   "discokey:db6fab372ac5736441cda4715057d29bff2f4de8329b50d4e98342c8935f4432",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:50445", "10.65.0.27:50445", "172.17.0.1:50445"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:04.873651936Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3422165554151237,
-				"StableID":   "ntgANCVuiT11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dd2573cdca191a1ae956e8600a2030d494ab0678038d7d8742422bda47c7f742",
-				"DiscoKey":   "discokey:732e81985d0f01fcb4dc9701fbbafe25a5c1a325943c981234c5ed965fc9ef2a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:35795", "10.65.0.27:35795", "172.17.0.1:35795"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:05.411993981Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7582787548198097,
-				"StableID":   "n4LhbJyFD221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:dbbae79b1fe634d99375a4aed07a943feb2d64900f6430e484e055ac50237e3e",
-				"DiscoKey":   "discokey:9bbcd394c13fa27f118c4cc0a5f4b572f2627ef239a047f400422370539cdd69",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:57285", "10.65.0.27:57285", "172.17.0.1:57285"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:05.946123524Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3098996075083063,
-				"StableID":   "nxHD9aNYCR11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:714503ee3850aa6c70afbeb28e887c1ddd46ad8ae832bfd34d24033d61545c55",
-				"DiscoKey":   "discokey:89d99799aacef83bd643d5461e93fef2fc7ed469bc648dc28ce7c77fda515221",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:38617", "10.65.0.27:38617", "172.17.0.1:38617"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:06.492798413Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         7978733218023560,
-				"StableID":   "nRT8bwnaJ521CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:3e7453c6712936999567c18fcf73c8885136ca3111bd34409a0e85a5ca03530a",
-				"DiscoKey":   "discokey:ec833aec0d6f40db258c27e60601a5f9d0038d15c39f33c2827d798ecd2ec410",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60761", "10.65.0.27:60761", "172.17.0.1:60761"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:07.026407234Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6012946668290018,
-				"StableID":   "nPb5iwuGxo11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:341bc53b697eade413b7a41fa2424d75f6a4f7d9f158aff4b8500e2db2f02b53",
-				"KeyExpiry":  "2026-11-03T08:37:07Z",
-				"DiscoKey":   "discokey:cb8a340d1a1a2bdede40f4650b958afb28556ebe3d2ae03d32c2dcdb2501106f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36520", "10.65.0.27:36520", "172.17.0.1:36520"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:07.5695468Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6267841250060613,
-				"StableID":   "nv784ZZiwq11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:8d8b3f6b931aa6cd035e5c8313c36eb3763f7bd042a810f85e3d3dce1c825523",
-				"KeyExpiry":  "2026-11-03T08:37:08Z",
-				"DiscoKey":   "discokey:a7955f3b9a3c9af52b292b7964c2db6d35cf179b6077761ec536b2bb5294095d",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:49399", "10.65.0.27:49399", "172.17.0.1:49399"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:08.647916517Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a4-group.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a4-group.hujson
deleted file mode 100644
index 47188bf38..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a4-group.hujson
+++ /dev/null
@@ -1,8828 +0,0 @@
-// nodeattrs-target-a4-group
-//
-// group target expands to its members' nodes
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:37:39Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a4-group",
-	"description":    "group target expands to its members' nodes",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:37:39.585029931Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                            \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"group target expands to its members' nodes\",\n    \"id\": \"nodeattrs-target-a4-group\",\n    \"options\": {},\n    \"policy\": {\n        \"groups\": {\n            \"group:admins\": [\n                \"odin@example.com\"\n            ],\n            \"group:developers\": [\n                \"thor@example.org\",\n                \"odin@example.com\"\n            ],\n            \"group:monitors\": [\n                \"freya@example.com\"\n            ]\n        },\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"group:admins\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a4-group.hujson",
-		"full_policy": {
-			"groups": {
-				"group:admins":     ["odin@example.com"],
-				"group:developers": ["thor@example.org", "odin@example.com"],
-				"group:monitors":   ["freya@example.com"]
-			},
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["group:admins"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5695871160631801,
-				"StableID":   "nvbVsrsfUm11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       5695871160631801,
-				"Key":        "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-				"DiscoKey":   "discokey:61d287517d8ad75bf0f9b0ab3972dcb433c773da94cba6444b325d9da5ec9315",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:42416", "10.65.0.27:42416", "172.17.0.1:42416"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:45.179453548Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-			"MachineKey": "mkey:9a32803edd234df5a00ca2a9c8783bd6bca5a8138ff5b76b5515da4e938ded21",
-			"Peers": [{
-				"ID":         4272880145100555,
-				"StableID":   "nveedKKCNa11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-				"DiscoKey":   "discokey:fa06f832ccbdbf9df9a6fa43f50ba8a184fd14caa95cfd2e436f4b197f48ac29",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50766", "10.65.0.27:50766", "172.17.0.1:50766"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:45.652708935Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4653675770797115,
-				"StableID":   "nQss6wAfLd11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-				"DiscoKey":   "discokey:7bf47aa36610ae69327d08db761d050004e71fc21233c1c024853e92d6fcfd05",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55985", "10.65.0.27:55985", "172.17.0.1:55985"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:46.19534352Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6471308128240759,
-				"StableID":   "nYVfLtHsXs11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-				"DiscoKey":   "discokey:254ca8eed002605fdd67c5b2e1eb23bdae9921096d954edd6210ef4abc31da15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35004", "10.65.0.27:35004", "172.17.0.1:35004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:46.718562257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         9007030664140018,
-				"StableID":   "n9rRfVRJLD21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-				"DiscoKey":   "discokey:2d58a5a95051cb5b297845fd37082a8852fe852af89d252e3549b757708b1826",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57170", "10.65.0.27:57170", "172.17.0.1:57170"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:47.250167598Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4336767515172158,
-				"StableID":   "noPgkfX8sa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-				"KeyExpiry":  "2026-11-03T08:37:47Z",
-				"DiscoKey":   "discokey:cc5f50b76cedbfe6e94dfa50e89032dbd16d861d393dbc84e97e04c66e426506",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33495", "10.65.0.27:33495", "172.17.0.1:33495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:47.783390424Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4693484899917797,
-				"StableID":   "naDGXbtged11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:8f218c5bc0a047234801176bf00d0641eceb4ca623c15d03134a6f432b67bb02",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42590", "10.65.0.27:42590", "172.17.0.1:42590"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:48.318443714Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3534732670759012,
-				"StableID":   "nMjWz8StbU11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:0e5a35cceb7e8e00b818008c230521c3c356fda7ee068586dfef51099c17b63a",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53503", "10.65.0.27:53503", "172.17.0.1:53503"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:48.859619616Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5695871160631801": {
-				"ID":          5695871160631801,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4272880145100555,
-				"StableID":   "nveedKKCNa11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       4272880145100555,
-				"Key":        "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-				"DiscoKey":   "discokey:fa06f832ccbdbf9df9a6fa43f50ba8a184fd14caa95cfd2e436f4b197f48ac29",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50766", "10.65.0.27:50766", "172.17.0.1:50766"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:37:45.652708935Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-			"MachineKey": "mkey:70d90c2aa54d1caf1df7b1dcbfc3c7786af7908f12e7b77658269fb9cc4fb042",
-			"Peers": [{
-				"ID":         5695871160631801,
-				"StableID":   "nvbVsrsfUm11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-				"DiscoKey":   "discokey:61d287517d8ad75bf0f9b0ab3972dcb433c773da94cba6444b325d9da5ec9315",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:42416", "10.65.0.27:42416", "172.17.0.1:42416"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:45.179453548Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4653675770797115,
-				"StableID":   "nQss6wAfLd11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-				"DiscoKey":   "discokey:7bf47aa36610ae69327d08db761d050004e71fc21233c1c024853e92d6fcfd05",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55985", "10.65.0.27:55985", "172.17.0.1:55985"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:46.19534352Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6471308128240759,
-				"StableID":   "nYVfLtHsXs11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-				"DiscoKey":   "discokey:254ca8eed002605fdd67c5b2e1eb23bdae9921096d954edd6210ef4abc31da15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35004", "10.65.0.27:35004", "172.17.0.1:35004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:46.718562257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         9007030664140018,
-				"StableID":   "n9rRfVRJLD21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-				"DiscoKey":   "discokey:2d58a5a95051cb5b297845fd37082a8852fe852af89d252e3549b757708b1826",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57170", "10.65.0.27:57170", "172.17.0.1:57170"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:47.250167598Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4336767515172158,
-				"StableID":   "noPgkfX8sa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-				"KeyExpiry":  "2026-11-03T08:37:47Z",
-				"DiscoKey":   "discokey:cc5f50b76cedbfe6e94dfa50e89032dbd16d861d393dbc84e97e04c66e426506",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33495", "10.65.0.27:33495", "172.17.0.1:33495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:47.783390424Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4693484899917797,
-				"StableID":   "naDGXbtged11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:8f218c5bc0a047234801176bf00d0641eceb4ca623c15d03134a6f432b67bb02",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42590", "10.65.0.27:42590", "172.17.0.1:42590"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:48.318443714Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3534732670759012,
-				"StableID":   "nMjWz8StbU11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:0e5a35cceb7e8e00b818008c230521c3c356fda7ee068586dfef51099c17b63a",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53503", "10.65.0.27:53503", "172.17.0.1:53503"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:48.859619616Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4272880145100555": {
-				"ID":          4272880145100555,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4336767515172158,
-				"StableID":   "noPgkfX8sa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-				"KeyExpiry":  "2026-11-03T08:37:47Z",
-				"DiscoKey":   "discokey:cc5f50b76cedbfe6e94dfa50e89032dbd16d861d393dbc84e97e04c66e426506",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33495", "10.65.0.27:33495", "172.17.0.1:33495"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:47.783390424Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-			"MachineKey": "mkey:ff012c67b8a4b397253dbf34a972f1f91b9ce43e5c0598928e4f0e1e407bf05f",
-			"Peers": [{
-				"ID":         5695871160631801,
-				"StableID":   "nvbVsrsfUm11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-				"DiscoKey":   "discokey:61d287517d8ad75bf0f9b0ab3972dcb433c773da94cba6444b325d9da5ec9315",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:42416", "10.65.0.27:42416", "172.17.0.1:42416"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:45.179453548Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4272880145100555,
-				"StableID":   "nveedKKCNa11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-				"DiscoKey":   "discokey:fa06f832ccbdbf9df9a6fa43f50ba8a184fd14caa95cfd2e436f4b197f48ac29",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50766", "10.65.0.27:50766", "172.17.0.1:50766"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:45.652708935Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4653675770797115,
-				"StableID":   "nQss6wAfLd11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-				"DiscoKey":   "discokey:7bf47aa36610ae69327d08db761d050004e71fc21233c1c024853e92d6fcfd05",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55985", "10.65.0.27:55985", "172.17.0.1:55985"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:46.19534352Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6471308128240759,
-				"StableID":   "nYVfLtHsXs11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-				"DiscoKey":   "discokey:254ca8eed002605fdd67c5b2e1eb23bdae9921096d954edd6210ef4abc31da15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35004", "10.65.0.27:35004", "172.17.0.1:35004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:46.718562257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         9007030664140018,
-				"StableID":   "n9rRfVRJLD21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-				"DiscoKey":   "discokey:2d58a5a95051cb5b297845fd37082a8852fe852af89d252e3549b757708b1826",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57170", "10.65.0.27:57170", "172.17.0.1:57170"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:47.250167598Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4693484899917797,
-				"StableID":   "naDGXbtged11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:8f218c5bc0a047234801176bf00d0641eceb4ca623c15d03134a6f432b67bb02",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42590", "10.65.0.27:42590", "172.17.0.1:42590"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:48.318443714Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3534732670759012,
-				"StableID":   "nMjWz8StbU11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:0e5a35cceb7e8e00b818008c230521c3c356fda7ee068586dfef51099c17b63a",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53503", "10.65.0.27:53503", "172.17.0.1:53503"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:48.859619616Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4653675770797115,
-				"StableID":   "nQss6wAfLd11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       4653675770797115,
-				"Key":        "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-				"DiscoKey":   "discokey:7bf47aa36610ae69327d08db761d050004e71fc21233c1c024853e92d6fcfd05",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55985", "10.65.0.27:55985", "172.17.0.1:55985"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:46.19534352Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-			"MachineKey": "mkey:8ca9759039468e3c35f59ba1530d528950848c0e5647fe55b7eeb33fbe2dd52e",
-			"Peers": [{
-				"ID":         5695871160631801,
-				"StableID":   "nvbVsrsfUm11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-				"DiscoKey":   "discokey:61d287517d8ad75bf0f9b0ab3972dcb433c773da94cba6444b325d9da5ec9315",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:42416", "10.65.0.27:42416", "172.17.0.1:42416"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:45.179453548Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4272880145100555,
-				"StableID":   "nveedKKCNa11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-				"DiscoKey":   "discokey:fa06f832ccbdbf9df9a6fa43f50ba8a184fd14caa95cfd2e436f4b197f48ac29",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50766", "10.65.0.27:50766", "172.17.0.1:50766"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:45.652708935Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6471308128240759,
-				"StableID":   "nYVfLtHsXs11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-				"DiscoKey":   "discokey:254ca8eed002605fdd67c5b2e1eb23bdae9921096d954edd6210ef4abc31da15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35004", "10.65.0.27:35004", "172.17.0.1:35004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:46.718562257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         9007030664140018,
-				"StableID":   "n9rRfVRJLD21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-				"DiscoKey":   "discokey:2d58a5a95051cb5b297845fd37082a8852fe852af89d252e3549b757708b1826",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57170", "10.65.0.27:57170", "172.17.0.1:57170"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:47.250167598Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4336767515172158,
-				"StableID":   "noPgkfX8sa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-				"KeyExpiry":  "2026-11-03T08:37:47Z",
-				"DiscoKey":   "discokey:cc5f50b76cedbfe6e94dfa50e89032dbd16d861d393dbc84e97e04c66e426506",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33495", "10.65.0.27:33495", "172.17.0.1:33495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:47.783390424Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4693484899917797,
-				"StableID":   "naDGXbtged11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:8f218c5bc0a047234801176bf00d0641eceb4ca623c15d03134a6f432b67bb02",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42590", "10.65.0.27:42590", "172.17.0.1:42590"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:48.318443714Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3534732670759012,
-				"StableID":   "nMjWz8StbU11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:0e5a35cceb7e8e00b818008c230521c3c356fda7ee068586dfef51099c17b63a",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53503", "10.65.0.27:53503", "172.17.0.1:53503"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:48.859619616Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "4653675770797115": {
-				"ID":          4653675770797115,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6471308128240759,
-				"StableID":   "nYVfLtHsXs11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       6471308128240759,
-				"Key":        "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-				"DiscoKey":   "discokey:254ca8eed002605fdd67c5b2e1eb23bdae9921096d954edd6210ef4abc31da15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35004", "10.65.0.27:35004", "172.17.0.1:35004"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:37:46.718562257Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-			"MachineKey": "mkey:7dcbf71805465996589d35793c3da8bb8b10ced1dd9e036ba61c6aa033602b5a",
-			"Peers": [{
-				"ID":         5695871160631801,
-				"StableID":   "nvbVsrsfUm11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-				"DiscoKey":   "discokey:61d287517d8ad75bf0f9b0ab3972dcb433c773da94cba6444b325d9da5ec9315",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:42416", "10.65.0.27:42416", "172.17.0.1:42416"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:45.179453548Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4272880145100555,
-				"StableID":   "nveedKKCNa11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-				"DiscoKey":   "discokey:fa06f832ccbdbf9df9a6fa43f50ba8a184fd14caa95cfd2e436f4b197f48ac29",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50766", "10.65.0.27:50766", "172.17.0.1:50766"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:45.652708935Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4653675770797115,
-				"StableID":   "nQss6wAfLd11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-				"DiscoKey":   "discokey:7bf47aa36610ae69327d08db761d050004e71fc21233c1c024853e92d6fcfd05",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55985", "10.65.0.27:55985", "172.17.0.1:55985"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:46.19534352Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         9007030664140018,
-				"StableID":   "n9rRfVRJLD21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-				"DiscoKey":   "discokey:2d58a5a95051cb5b297845fd37082a8852fe852af89d252e3549b757708b1826",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57170", "10.65.0.27:57170", "172.17.0.1:57170"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:47.250167598Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4336767515172158,
-				"StableID":   "noPgkfX8sa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-				"KeyExpiry":  "2026-11-03T08:37:47Z",
-				"DiscoKey":   "discokey:cc5f50b76cedbfe6e94dfa50e89032dbd16d861d393dbc84e97e04c66e426506",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33495", "10.65.0.27:33495", "172.17.0.1:33495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:47.783390424Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4693484899917797,
-				"StableID":   "naDGXbtged11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:8f218c5bc0a047234801176bf00d0641eceb4ca623c15d03134a6f432b67bb02",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42590", "10.65.0.27:42590", "172.17.0.1:42590"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:48.318443714Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3534732670759012,
-				"StableID":   "nMjWz8StbU11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:0e5a35cceb7e8e00b818008c230521c3c356fda7ee068586dfef51099c17b63a",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53503", "10.65.0.27:53503", "172.17.0.1:53503"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:48.859619616Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6471308128240759": {
-				"ID":          6471308128240759,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         9007030664140018,
-				"StableID":   "n9rRfVRJLD21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       9007030664140018,
-				"Key":        "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-				"DiscoKey":   "discokey:2d58a5a95051cb5b297845fd37082a8852fe852af89d252e3549b757708b1826",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57170", "10.65.0.27:57170", "172.17.0.1:57170"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:47.250167598Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-			"MachineKey": "mkey:6856f5acf08b1ff98081085b467265d99fadc13ce58d1cfdcc2544aa9216044e",
-			"Peers": [{
-				"ID":         5695871160631801,
-				"StableID":   "nvbVsrsfUm11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-				"DiscoKey":   "discokey:61d287517d8ad75bf0f9b0ab3972dcb433c773da94cba6444b325d9da5ec9315",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:42416", "10.65.0.27:42416", "172.17.0.1:42416"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:45.179453548Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4272880145100555,
-				"StableID":   "nveedKKCNa11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-				"DiscoKey":   "discokey:fa06f832ccbdbf9df9a6fa43f50ba8a184fd14caa95cfd2e436f4b197f48ac29",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50766", "10.65.0.27:50766", "172.17.0.1:50766"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:45.652708935Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4653675770797115,
-				"StableID":   "nQss6wAfLd11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-				"DiscoKey":   "discokey:7bf47aa36610ae69327d08db761d050004e71fc21233c1c024853e92d6fcfd05",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55985", "10.65.0.27:55985", "172.17.0.1:55985"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:46.19534352Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6471308128240759,
-				"StableID":   "nYVfLtHsXs11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-				"DiscoKey":   "discokey:254ca8eed002605fdd67c5b2e1eb23bdae9921096d954edd6210ef4abc31da15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35004", "10.65.0.27:35004", "172.17.0.1:35004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:46.718562257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4336767515172158,
-				"StableID":   "noPgkfX8sa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-				"KeyExpiry":  "2026-11-03T08:37:47Z",
-				"DiscoKey":   "discokey:cc5f50b76cedbfe6e94dfa50e89032dbd16d861d393dbc84e97e04c66e426506",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33495", "10.65.0.27:33495", "172.17.0.1:33495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:47.783390424Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4693484899917797,
-				"StableID":   "naDGXbtged11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:8f218c5bc0a047234801176bf00d0641eceb4ca623c15d03134a6f432b67bb02",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42590", "10.65.0.27:42590", "172.17.0.1:42590"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:48.318443714Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         3534732670759012,
-				"StableID":   "nMjWz8StbU11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:0e5a35cceb7e8e00b818008c230521c3c356fda7ee068586dfef51099c17b63a",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53503", "10.65.0.27:53503", "172.17.0.1:53503"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:48.859619616Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "9007030664140018": {
-				"ID":          9007030664140018,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3534732670759012,
-				"StableID":   "nMjWz8StbU11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:0e5a35cceb7e8e00b818008c230521c3c356fda7ee068586dfef51099c17b63a",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53503", "10.65.0.27:53503", "172.17.0.1:53503"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:48.859619616Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-			"MachineKey": "mkey:e64c1ece0e3d56f27075c78c0692e83b8f8f02f5c25ad7d37e63be3695c8281e",
-			"Peers": [{
-				"ID":         5695871160631801,
-				"StableID":   "nvbVsrsfUm11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-				"DiscoKey":   "discokey:61d287517d8ad75bf0f9b0ab3972dcb433c773da94cba6444b325d9da5ec9315",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:42416", "10.65.0.27:42416", "172.17.0.1:42416"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:45.179453548Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4272880145100555,
-				"StableID":   "nveedKKCNa11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-				"DiscoKey":   "discokey:fa06f832ccbdbf9df9a6fa43f50ba8a184fd14caa95cfd2e436f4b197f48ac29",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50766", "10.65.0.27:50766", "172.17.0.1:50766"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:45.652708935Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4653675770797115,
-				"StableID":   "nQss6wAfLd11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-				"DiscoKey":   "discokey:7bf47aa36610ae69327d08db761d050004e71fc21233c1c024853e92d6fcfd05",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55985", "10.65.0.27:55985", "172.17.0.1:55985"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:46.19534352Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6471308128240759,
-				"StableID":   "nYVfLtHsXs11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-				"DiscoKey":   "discokey:254ca8eed002605fdd67c5b2e1eb23bdae9921096d954edd6210ef4abc31da15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35004", "10.65.0.27:35004", "172.17.0.1:35004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:46.718562257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         9007030664140018,
-				"StableID":   "n9rRfVRJLD21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-				"DiscoKey":   "discokey:2d58a5a95051cb5b297845fd37082a8852fe852af89d252e3549b757708b1826",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57170", "10.65.0.27:57170", "172.17.0.1:57170"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:47.250167598Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4336767515172158,
-				"StableID":   "noPgkfX8sa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-				"KeyExpiry":  "2026-11-03T08:37:47Z",
-				"DiscoKey":   "discokey:cc5f50b76cedbfe6e94dfa50e89032dbd16d861d393dbc84e97e04c66e426506",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33495", "10.65.0.27:33495", "172.17.0.1:33495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:47.783390424Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4693484899917797,
-				"StableID":   "naDGXbtged11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:8f218c5bc0a047234801176bf00d0641eceb4ca623c15d03134a6f432b67bb02",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42590", "10.65.0.27:42590", "172.17.0.1:42590"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:37:48.318443714Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4693484899917797,
-				"StableID":   "naDGXbtged11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:8f218c5bc0a047234801176bf00d0641eceb4ca623c15d03134a6f432b67bb02",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42590", "10.65.0.27:42590", "172.17.0.1:42590"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:37:48.318443714Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:358da9998d3c1ffb21144c9ceac3c5d1902fdbce62f05d96335b41714555ce36",
-			"MachineKey": "mkey:c202338c678f4eaad7d976056546aee13aad3b448edba8abb1a02a27160c741e",
-			"Peers": [{
-				"ID":         5695871160631801,
-				"StableID":   "nvbVsrsfUm11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8215b773876667a103e9443132e84a901ab9ca6dd3af156f428ee0799d04416e",
-				"DiscoKey":   "discokey:61d287517d8ad75bf0f9b0ab3972dcb433c773da94cba6444b325d9da5ec9315",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:42416", "10.65.0.27:42416", "172.17.0.1:42416"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:37:45.179453548Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         4272880145100555,
-				"StableID":   "nveedKKCNa11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a1cf05ff2d5f3f4d7cc41ef2854cbb9f1f6994792d894f6b3cd85a6248dd7a1c",
-				"DiscoKey":   "discokey:fa06f832ccbdbf9df9a6fa43f50ba8a184fd14caa95cfd2e436f4b197f48ac29",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:50766", "10.65.0.27:50766", "172.17.0.1:50766"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:37:45.652708935Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         4653675770797115,
-				"StableID":   "nQss6wAfLd11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:2b3247fc1281a8a1c87ee7abd4fc29c439d98019bc136953ca0d36dd8c89ab49",
-				"DiscoKey":   "discokey:7bf47aa36610ae69327d08db761d050004e71fc21233c1c024853e92d6fcfd05",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:55985", "10.65.0.27:55985", "172.17.0.1:55985"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:37:46.19534352Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6471308128240759,
-				"StableID":   "nYVfLtHsXs11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:bbb4379f85c9265f07c4c9b830caa0eb7aad7cc498d8d0e8d4f11f692c8c8853",
-				"DiscoKey":   "discokey:254ca8eed002605fdd67c5b2e1eb23bdae9921096d954edd6210ef4abc31da15",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35004", "10.65.0.27:35004", "172.17.0.1:35004"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:37:46.718562257Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         9007030664140018,
-				"StableID":   "n9rRfVRJLD21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:557dbc662a2e14da20d7fbf748fc844f2663dc8a5138ab6218559deefe071804",
-				"DiscoKey":   "discokey:2d58a5a95051cb5b297845fd37082a8852fe852af89d252e3549b757708b1826",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:57170", "10.65.0.27:57170", "172.17.0.1:57170"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:37:47.250167598Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4336767515172158,
-				"StableID":   "noPgkfX8sa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:1e8b2ecf92f6878662f12d5256abf7af31d8174751468109a9ac6407d513587d",
-				"KeyExpiry":  "2026-11-03T08:37:47Z",
-				"DiscoKey":   "discokey:cc5f50b76cedbfe6e94dfa50e89032dbd16d861d393dbc84e97e04c66e426506",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:33495", "10.65.0.27:33495", "172.17.0.1:33495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:37:47.783390424Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3534732670759012,
-				"StableID":   "nMjWz8StbU11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:7e6213c1d643193c7110ac61deda4784bd7f4b22a69f53f3e755acea58e8ef43",
-				"KeyExpiry":  "2026-11-03T08:37:48Z",
-				"DiscoKey":   "discokey:0e5a35cceb7e8e00b818008c230521c3c356fda7ee068586dfef51099c17b63a",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:53503", "10.65.0.27:53503", "172.17.0.1:53503"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:37:48.859619616Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a5-autogroup-member.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a5-autogroup-member.hujson
deleted file mode 100644
index 9f620271a..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a5-autogroup-member.hujson
+++ /dev/null
@@ -1,8827 +0,0 @@
-// nodeattrs-target-a5-autogroup-member
-//
-// autogroup:member -- untagged user-owned nodes only
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:38:19Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a5-autogroup-member",
-	"description":    "autogroup:member -- untagged user-owned nodes only",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:38:19.810848278Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                       \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"autogroup:member -- untagged user-owned nodes only\",\n    \"id\": \"nodeattrs-target-a5-autogroup-member\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"autogroup:member\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a5-autogroup-member.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["autogroup:member"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8131149812969042,
-				"StableID":   "nfK9A2XcV621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       8131149812969042,
-				"Key":        "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-				"DiscoKey":   "discokey:0ea7fd8c10d1b81246d05c946d7bbe95d57976b11a9c61a6cb39d0877c022d6f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52836", "10.65.0.27:52836", "172.17.0.1:52836"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:38:25.383093362Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-			"MachineKey": "mkey:9a5749241e3d34e13167a69f404fdce638c5152ec328223cdb9c2deb70275806",
-			"Peers": [{
-				"ID":         5781384697736594,
-				"StableID":   "nuxPK1BQ9n11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-				"DiscoKey":   "discokey:a626241a52c9065bbc0858cfe1c7362bc7fefae4900275007ec91a00ad826d74",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34527", "10.65.0.27:34527", "172.17.0.1:34527"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:38:25.930230289Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3007954697010154,
-				"StableID":   "nRCSKRsJVQ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-				"DiscoKey":   "discokey:2f1811630b9991359a48c3ae4d6de895aa7b71214ebc59df7b3f171e304cc236",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60892", "10.65.0.27:60892", "172.17.0.1:60892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:38:26.452948489Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2199413967010639,
-				"StableID":   "ngM5jms7BJ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-				"DiscoKey":   "discokey:8986d6bc95705d43a9f1c42706f8659455aa68d5b937c6d9984afd1abf4e0363",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35710", "10.65.0.27:35710", "172.17.0.1:35710"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:38:26.992277027Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1337565663149856,
-				"StableID":   "nbYhNkanSB11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-				"DiscoKey":   "discokey:40725121c697c0ec5578af2b0cc779950a9d657c1ae06735275c6a10f203676a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44128", "10.65.0.27:44128", "172.17.0.1:44128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:38:27.530253206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6052375508261218,
-				"StableID":   "njsAHDe8Gp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:6daac11bdc9690f87818ffbd3b5c1380a03f85bec94a47697106f25827413d09",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:37572", "10.65.0.27:37572", "172.17.0.1:37572"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:38:28.109014514Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1176557019693928,
-				"StableID":   "nszCu9AsBA11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:1476a38a75ddd988281f43352404913d9c2d5ca4a264b4ff66084f490b0b365f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43989", "10.65.0.27:43989", "172.17.0.1:43989"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:38:28.58815685Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7462932996129755,
-				"StableID":   "nJJmFWbyG121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-				"KeyExpiry":  "2026-11-03T08:38:29Z",
-				"DiscoKey":   "discokey:a4944c8702491324b831fb50f4b5336cc53785539e119ee5ea9ed78edfc38844",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42225", "10.65.0.27:42225", "172.17.0.1:42225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:38:29.123725229Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8131149812969042": {
-				"ID":          8131149812969042,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5781384697736594,
-				"StableID":   "nuxPK1BQ9n11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       5781384697736594,
-				"Key":        "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-				"DiscoKey":   "discokey:a626241a52c9065bbc0858cfe1c7362bc7fefae4900275007ec91a00ad826d74",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34527", "10.65.0.27:34527", "172.17.0.1:34527"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:38:25.930230289Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-			"MachineKey": "mkey:33692695185afe9508129b066c467febef548d5d5b83d42b4eccb64194320720",
-			"Peers": [{
-				"ID":         8131149812969042,
-				"StableID":   "nfK9A2XcV621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-				"DiscoKey":   "discokey:0ea7fd8c10d1b81246d05c946d7bbe95d57976b11a9c61a6cb39d0877c022d6f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52836", "10.65.0.27:52836", "172.17.0.1:52836"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:38:25.383093362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3007954697010154,
-				"StableID":   "nRCSKRsJVQ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-				"DiscoKey":   "discokey:2f1811630b9991359a48c3ae4d6de895aa7b71214ebc59df7b3f171e304cc236",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60892", "10.65.0.27:60892", "172.17.0.1:60892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:38:26.452948489Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2199413967010639,
-				"StableID":   "ngM5jms7BJ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-				"DiscoKey":   "discokey:8986d6bc95705d43a9f1c42706f8659455aa68d5b937c6d9984afd1abf4e0363",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35710", "10.65.0.27:35710", "172.17.0.1:35710"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:38:26.992277027Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1337565663149856,
-				"StableID":   "nbYhNkanSB11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-				"DiscoKey":   "discokey:40725121c697c0ec5578af2b0cc779950a9d657c1ae06735275c6a10f203676a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44128", "10.65.0.27:44128", "172.17.0.1:44128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:38:27.530253206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6052375508261218,
-				"StableID":   "njsAHDe8Gp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:6daac11bdc9690f87818ffbd3b5c1380a03f85bec94a47697106f25827413d09",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:37572", "10.65.0.27:37572", "172.17.0.1:37572"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:38:28.109014514Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1176557019693928,
-				"StableID":   "nszCu9AsBA11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:1476a38a75ddd988281f43352404913d9c2d5ca4a264b4ff66084f490b0b365f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43989", "10.65.0.27:43989", "172.17.0.1:43989"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:38:28.58815685Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7462932996129755,
-				"StableID":   "nJJmFWbyG121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-				"KeyExpiry":  "2026-11-03T08:38:29Z",
-				"DiscoKey":   "discokey:a4944c8702491324b831fb50f4b5336cc53785539e119ee5ea9ed78edfc38844",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42225", "10.65.0.27:42225", "172.17.0.1:42225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:38:29.123725229Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5781384697736594": {
-				"ID":          5781384697736594,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6052375508261218,
-				"StableID":   "njsAHDe8Gp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:6daac11bdc9690f87818ffbd3b5c1380a03f85bec94a47697106f25827413d09",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:37572", "10.65.0.27:37572", "172.17.0.1:37572"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:38:28.109014514Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-			"MachineKey": "mkey:433695e402da4a61cc13d7c63e90152c25c6ac608d199f0eae6b90713d5f0c66",
-			"Peers": [{
-				"ID":         8131149812969042,
-				"StableID":   "nfK9A2XcV621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-				"DiscoKey":   "discokey:0ea7fd8c10d1b81246d05c946d7bbe95d57976b11a9c61a6cb39d0877c022d6f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52836", "10.65.0.27:52836", "172.17.0.1:52836"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:38:25.383093362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5781384697736594,
-				"StableID":   "nuxPK1BQ9n11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-				"DiscoKey":   "discokey:a626241a52c9065bbc0858cfe1c7362bc7fefae4900275007ec91a00ad826d74",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34527", "10.65.0.27:34527", "172.17.0.1:34527"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:38:25.930230289Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3007954697010154,
-				"StableID":   "nRCSKRsJVQ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-				"DiscoKey":   "discokey:2f1811630b9991359a48c3ae4d6de895aa7b71214ebc59df7b3f171e304cc236",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60892", "10.65.0.27:60892", "172.17.0.1:60892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:38:26.452948489Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2199413967010639,
-				"StableID":   "ngM5jms7BJ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-				"DiscoKey":   "discokey:8986d6bc95705d43a9f1c42706f8659455aa68d5b937c6d9984afd1abf4e0363",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35710", "10.65.0.27:35710", "172.17.0.1:35710"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:38:26.992277027Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1337565663149856,
-				"StableID":   "nbYhNkanSB11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-				"DiscoKey":   "discokey:40725121c697c0ec5578af2b0cc779950a9d657c1ae06735275c6a10f203676a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44128", "10.65.0.27:44128", "172.17.0.1:44128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:38:27.530253206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1176557019693928,
-				"StableID":   "nszCu9AsBA11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:1476a38a75ddd988281f43352404913d9c2d5ca4a264b4ff66084f490b0b365f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43989", "10.65.0.27:43989", "172.17.0.1:43989"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:38:28.58815685Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7462932996129755,
-				"StableID":   "nJJmFWbyG121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-				"KeyExpiry":  "2026-11-03T08:38:29Z",
-				"DiscoKey":   "discokey:a4944c8702491324b831fb50f4b5336cc53785539e119ee5ea9ed78edfc38844",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42225", "10.65.0.27:42225", "172.17.0.1:42225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:38:29.123725229Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3007954697010154,
-				"StableID":   "nRCSKRsJVQ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       3007954697010154,
-				"Key":        "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-				"DiscoKey":   "discokey:2f1811630b9991359a48c3ae4d6de895aa7b71214ebc59df7b3f171e304cc236",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60892", "10.65.0.27:60892", "172.17.0.1:60892"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:38:26.452948489Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-			"MachineKey": "mkey:d0a768c5f0376a9fc881d241f7c22c281420eb732e19b92579524569aa246e4b",
-			"Peers": [{
-				"ID":         8131149812969042,
-				"StableID":   "nfK9A2XcV621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-				"DiscoKey":   "discokey:0ea7fd8c10d1b81246d05c946d7bbe95d57976b11a9c61a6cb39d0877c022d6f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52836", "10.65.0.27:52836", "172.17.0.1:52836"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:38:25.383093362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5781384697736594,
-				"StableID":   "nuxPK1BQ9n11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-				"DiscoKey":   "discokey:a626241a52c9065bbc0858cfe1c7362bc7fefae4900275007ec91a00ad826d74",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34527", "10.65.0.27:34527", "172.17.0.1:34527"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:38:25.930230289Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2199413967010639,
-				"StableID":   "ngM5jms7BJ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-				"DiscoKey":   "discokey:8986d6bc95705d43a9f1c42706f8659455aa68d5b937c6d9984afd1abf4e0363",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35710", "10.65.0.27:35710", "172.17.0.1:35710"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:38:26.992277027Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1337565663149856,
-				"StableID":   "nbYhNkanSB11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-				"DiscoKey":   "discokey:40725121c697c0ec5578af2b0cc779950a9d657c1ae06735275c6a10f203676a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44128", "10.65.0.27:44128", "172.17.0.1:44128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:38:27.530253206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6052375508261218,
-				"StableID":   "njsAHDe8Gp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:6daac11bdc9690f87818ffbd3b5c1380a03f85bec94a47697106f25827413d09",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:37572", "10.65.0.27:37572", "172.17.0.1:37572"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:38:28.109014514Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1176557019693928,
-				"StableID":   "nszCu9AsBA11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:1476a38a75ddd988281f43352404913d9c2d5ca4a264b4ff66084f490b0b365f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43989", "10.65.0.27:43989", "172.17.0.1:43989"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:38:28.58815685Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7462932996129755,
-				"StableID":   "nJJmFWbyG121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-				"KeyExpiry":  "2026-11-03T08:38:29Z",
-				"DiscoKey":   "discokey:a4944c8702491324b831fb50f4b5336cc53785539e119ee5ea9ed78edfc38844",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42225", "10.65.0.27:42225", "172.17.0.1:42225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:38:29.123725229Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3007954697010154": {
-				"ID":          3007954697010154,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2199413967010639,
-				"StableID":   "ngM5jms7BJ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       2199413967010639,
-				"Key":        "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-				"DiscoKey":   "discokey:8986d6bc95705d43a9f1c42706f8659455aa68d5b937c6d9984afd1abf4e0363",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35710", "10.65.0.27:35710", "172.17.0.1:35710"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:38:26.992277027Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-			"MachineKey": "mkey:2281764a2fdec3846659d2f1d61e4416f1aea1fb010d16ece9cdd6558c8b4d40",
-			"Peers": [{
-				"ID":         8131149812969042,
-				"StableID":   "nfK9A2XcV621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-				"DiscoKey":   "discokey:0ea7fd8c10d1b81246d05c946d7bbe95d57976b11a9c61a6cb39d0877c022d6f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52836", "10.65.0.27:52836", "172.17.0.1:52836"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:38:25.383093362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5781384697736594,
-				"StableID":   "nuxPK1BQ9n11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-				"DiscoKey":   "discokey:a626241a52c9065bbc0858cfe1c7362bc7fefae4900275007ec91a00ad826d74",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34527", "10.65.0.27:34527", "172.17.0.1:34527"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:38:25.930230289Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3007954697010154,
-				"StableID":   "nRCSKRsJVQ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-				"DiscoKey":   "discokey:2f1811630b9991359a48c3ae4d6de895aa7b71214ebc59df7b3f171e304cc236",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60892", "10.65.0.27:60892", "172.17.0.1:60892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:38:26.452948489Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1337565663149856,
-				"StableID":   "nbYhNkanSB11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-				"DiscoKey":   "discokey:40725121c697c0ec5578af2b0cc779950a9d657c1ae06735275c6a10f203676a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44128", "10.65.0.27:44128", "172.17.0.1:44128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:38:27.530253206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6052375508261218,
-				"StableID":   "njsAHDe8Gp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:6daac11bdc9690f87818ffbd3b5c1380a03f85bec94a47697106f25827413d09",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:37572", "10.65.0.27:37572", "172.17.0.1:37572"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:38:28.109014514Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1176557019693928,
-				"StableID":   "nszCu9AsBA11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:1476a38a75ddd988281f43352404913d9c2d5ca4a264b4ff66084f490b0b365f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43989", "10.65.0.27:43989", "172.17.0.1:43989"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:38:28.58815685Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7462932996129755,
-				"StableID":   "nJJmFWbyG121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-				"KeyExpiry":  "2026-11-03T08:38:29Z",
-				"DiscoKey":   "discokey:a4944c8702491324b831fb50f4b5336cc53785539e119ee5ea9ed78edfc38844",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42225", "10.65.0.27:42225", "172.17.0.1:42225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:38:29.123725229Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2199413967010639": {
-				"ID":          2199413967010639,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1337565663149856,
-				"StableID":   "nbYhNkanSB11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1337565663149856,
-				"Key":        "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-				"DiscoKey":   "discokey:40725121c697c0ec5578af2b0cc779950a9d657c1ae06735275c6a10f203676a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44128", "10.65.0.27:44128", "172.17.0.1:44128"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:38:27.530253206Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-			"MachineKey": "mkey:b9d5ef1b408c97c713a9427d8b4d7fb8f3bad7b5649ef8f0722eb72da9c1692a",
-			"Peers": [{
-				"ID":         8131149812969042,
-				"StableID":   "nfK9A2XcV621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-				"DiscoKey":   "discokey:0ea7fd8c10d1b81246d05c946d7bbe95d57976b11a9c61a6cb39d0877c022d6f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52836", "10.65.0.27:52836", "172.17.0.1:52836"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:38:25.383093362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5781384697736594,
-				"StableID":   "nuxPK1BQ9n11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-				"DiscoKey":   "discokey:a626241a52c9065bbc0858cfe1c7362bc7fefae4900275007ec91a00ad826d74",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34527", "10.65.0.27:34527", "172.17.0.1:34527"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:38:25.930230289Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3007954697010154,
-				"StableID":   "nRCSKRsJVQ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-				"DiscoKey":   "discokey:2f1811630b9991359a48c3ae4d6de895aa7b71214ebc59df7b3f171e304cc236",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60892", "10.65.0.27:60892", "172.17.0.1:60892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:38:26.452948489Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2199413967010639,
-				"StableID":   "ngM5jms7BJ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-				"DiscoKey":   "discokey:8986d6bc95705d43a9f1c42706f8659455aa68d5b937c6d9984afd1abf4e0363",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35710", "10.65.0.27:35710", "172.17.0.1:35710"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:38:26.992277027Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6052375508261218,
-				"StableID":   "njsAHDe8Gp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:6daac11bdc9690f87818ffbd3b5c1380a03f85bec94a47697106f25827413d09",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:37572", "10.65.0.27:37572", "172.17.0.1:37572"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:38:28.109014514Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1176557019693928,
-				"StableID":   "nszCu9AsBA11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:1476a38a75ddd988281f43352404913d9c2d5ca4a264b4ff66084f490b0b365f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43989", "10.65.0.27:43989", "172.17.0.1:43989"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:38:28.58815685Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         7462932996129755,
-				"StableID":   "nJJmFWbyG121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-				"KeyExpiry":  "2026-11-03T08:38:29Z",
-				"DiscoKey":   "discokey:a4944c8702491324b831fb50f4b5336cc53785539e119ee5ea9ed78edfc38844",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42225", "10.65.0.27:42225", "172.17.0.1:42225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:38:29.123725229Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1337565663149856": {
-				"ID":          1337565663149856,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7462932996129755,
-				"StableID":   "nJJmFWbyG121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-				"KeyExpiry":  "2026-11-03T08:38:29Z",
-				"DiscoKey":   "discokey:a4944c8702491324b831fb50f4b5336cc53785539e119ee5ea9ed78edfc38844",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42225", "10.65.0.27:42225", "172.17.0.1:42225"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:38:29.123725229Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-			"MachineKey": "mkey:b9d44900bd7ffaadd15def7525bee299e4c4b47932c7e8ac106b91625ed91018",
-			"Peers": [{
-				"ID":         8131149812969042,
-				"StableID":   "nfK9A2XcV621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-				"DiscoKey":   "discokey:0ea7fd8c10d1b81246d05c946d7bbe95d57976b11a9c61a6cb39d0877c022d6f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52836", "10.65.0.27:52836", "172.17.0.1:52836"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:38:25.383093362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5781384697736594,
-				"StableID":   "nuxPK1BQ9n11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-				"DiscoKey":   "discokey:a626241a52c9065bbc0858cfe1c7362bc7fefae4900275007ec91a00ad826d74",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34527", "10.65.0.27:34527", "172.17.0.1:34527"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:38:25.930230289Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3007954697010154,
-				"StableID":   "nRCSKRsJVQ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-				"DiscoKey":   "discokey:2f1811630b9991359a48c3ae4d6de895aa7b71214ebc59df7b3f171e304cc236",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60892", "10.65.0.27:60892", "172.17.0.1:60892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:38:26.452948489Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2199413967010639,
-				"StableID":   "ngM5jms7BJ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-				"DiscoKey":   "discokey:8986d6bc95705d43a9f1c42706f8659455aa68d5b937c6d9984afd1abf4e0363",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35710", "10.65.0.27:35710", "172.17.0.1:35710"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:38:26.992277027Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1337565663149856,
-				"StableID":   "nbYhNkanSB11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-				"DiscoKey":   "discokey:40725121c697c0ec5578af2b0cc779950a9d657c1ae06735275c6a10f203676a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44128", "10.65.0.27:44128", "172.17.0.1:44128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:38:27.530253206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6052375508261218,
-				"StableID":   "njsAHDe8Gp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:6daac11bdc9690f87818ffbd3b5c1380a03f85bec94a47697106f25827413d09",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:37572", "10.65.0.27:37572", "172.17.0.1:37572"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:38:28.109014514Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1176557019693928,
-				"StableID":   "nszCu9AsBA11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:1476a38a75ddd988281f43352404913d9c2d5ca4a264b4ff66084f490b0b365f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43989", "10.65.0.27:43989", "172.17.0.1:43989"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:38:28.58815685Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1176557019693928,
-				"StableID":   "nszCu9AsBA11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:1476a38a75ddd988281f43352404913d9c2d5ca4a264b4ff66084f490b0b365f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43989", "10.65.0.27:43989", "172.17.0.1:43989"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:38:28.58815685Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:49c2b139bdcc220dd3f43514ee34de10b7ab3db96d82409f4da969111434bc63",
-			"MachineKey": "mkey:f78429a7a2cd212c94adb0ce9b6b2a1957d1a296379e728a28ef57d3d15e6420",
-			"Peers": [{
-				"ID":         8131149812969042,
-				"StableID":   "nfK9A2XcV621CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:1ee85c4dbf026dd76daeadadf51a0b760de0b6469942062024f40189a52f7d1c",
-				"DiscoKey":   "discokey:0ea7fd8c10d1b81246d05c946d7bbe95d57976b11a9c61a6cb39d0877c022d6f",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:52836", "10.65.0.27:52836", "172.17.0.1:52836"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:38:25.383093362Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5781384697736594,
-				"StableID":   "nuxPK1BQ9n11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b658fde613e384933576340ed931183ebca313c8a5ddb6ab9c42a5d276536953",
-				"DiscoKey":   "discokey:a626241a52c9065bbc0858cfe1c7362bc7fefae4900275007ec91a00ad826d74",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34527", "10.65.0.27:34527", "172.17.0.1:34527"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:38:25.930230289Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3007954697010154,
-				"StableID":   "nRCSKRsJVQ11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:71b7b426513463ca3edbb8d23a37c53fe13651bd335b2a5e35bd907d06968229",
-				"DiscoKey":   "discokey:2f1811630b9991359a48c3ae4d6de895aa7b71214ebc59df7b3f171e304cc236",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:60892", "10.65.0.27:60892", "172.17.0.1:60892"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:38:26.452948489Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2199413967010639,
-				"StableID":   "ngM5jms7BJ11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:42c709fb877e548d76e0f7dc5253fb468d5f33457c7a9ba8789fefa48ebb092d",
-				"DiscoKey":   "discokey:8986d6bc95705d43a9f1c42706f8659455aa68d5b937c6d9984afd1abf4e0363",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:35710", "10.65.0.27:35710", "172.17.0.1:35710"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:38:26.992277027Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1337565663149856,
-				"StableID":   "nbYhNkanSB11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:92afa020bda1dbb08110df56f46598a627dc1ae27d02adcad4e1c30d4f056577",
-				"DiscoKey":   "discokey:40725121c697c0ec5578af2b0cc779950a9d657c1ae06735275c6a10f203676a",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44128", "10.65.0.27:44128", "172.17.0.1:44128"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:38:27.530253206Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         6052375508261218,
-				"StableID":   "njsAHDe8Gp11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d3a78c8ea45c0c0ca828ca8ef377d136ab4505fac6a0be3baa1214b9659c2e43",
-				"KeyExpiry":  "2026-11-03T08:38:28Z",
-				"DiscoKey":   "discokey:6daac11bdc9690f87818ffbd3b5c1380a03f85bec94a47697106f25827413d09",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:37572", "10.65.0.27:37572", "172.17.0.1:37572"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:38:28.109014514Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         7462932996129755,
-				"StableID":   "nJJmFWbyG121CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:91d916f0089004beb875776c13eb46cde530ec9cfe5cbf4f960140e994ec870c",
-				"KeyExpiry":  "2026-11-03T08:38:29Z",
-				"DiscoKey":   "discokey:a4944c8702491324b831fb50f4b5336cc53785539e119ee5ea9ed78edfc38844",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42225", "10.65.0.27:42225", "172.17.0.1:42225"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:38:29.123725229Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a6-autogroup-tagged.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a6-autogroup-tagged.hujson
deleted file mode 100644
index 19104a6a9..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a6-autogroup-tagged.hujson
+++ /dev/null
@@ -1,8831 +0,0 @@
-// nodeattrs-target-a6-autogroup-tagged
-//
-// autogroup:tagged -- tagged nodes only
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:39:00Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a6-autogroup-tagged",
-	"description":    "autogroup:tagged -- tagged nodes only",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:39:00.113376372Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                       \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"autogroup:tagged -- tagged nodes only\",\n    \"id\": \"nodeattrs-target-a6-autogroup-tagged\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"disable-captive-portal-detection\"\n                ],\n                \"target\": [\n                    \"autogroup:tagged\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a6-autogroup-tagged.hujson",
-		"full_policy": {"nodeAttrs": [{
-			"attr":   ["disable-captive-portal-detection"],
-			"target": ["autogroup:tagged"]
-		}], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3814331988308492,
-				"StableID":   "nVFxEw2XnW11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       3814331988308492,
-				"Key":        "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-				"DiscoKey":   "discokey:38641d2e6ac9ad9f2084f441ff68dfa309a0038b1f57952091f31efdb1d9005e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51734", "10.65.0.27:51734", "172.17.0.1:51734"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:05.707662675Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-			"MachineKey": "mkey:5d1b2a19fb5ca2f018f9d85cd8e9b3fd6216387a8a5c4eca639c375c58db120c",
-			"Peers": [{
-				"ID":         2102204042832142,
-				"StableID":   "nMz7cTL6RH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-				"DiscoKey":   "discokey:29d3297bc38fa5e8b8c860c9272a6700e64fa54556630c958fef20b370ea0c57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46695", "10.65.0.27:46695", "172.17.0.1:46695"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:06.244009033Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2312197643906012,
-				"StableID":   "nB4W3fWC4K11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-				"DiscoKey":   "discokey:66a84bdd73dd41b0e7821507f91ed0da22659cf3584e99a1845f4cafa1a6f129",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53602", "10.65.0.27:53602", "172.17.0.1:53602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:06.791479348Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3643761136982678,
-				"StableID":   "nhJgCjRGTV11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-				"DiscoKey":   "discokey:e7903078f48515ea4c6eda25fe69d2465e3d40f1cddb6208bbeb547bb8b29f75",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46080", "10.65.0.27:46080", "172.17.0.1:46080"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:07.339624273Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3195745666047483,
-				"StableID":   "nEt7CYpMxR11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-				"DiscoKey":   "discokey:a17ed4c8ccbc4223e8f17c322f9343bca2a340ead777a30e1c5c2032b129567f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48514", "10.65.0.27:48514", "172.17.0.1:48514"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:07.872003098Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4289985003352865,
-				"StableID":   "ngkCPddwVa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:61332b4865191155dcacd353169b9e937515ef322bfa79b320db73a4b433184f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41854", "10.65.0.27:41854", "172.17.0.1:41854"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:08.41639699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1937741608088729,
-				"StableID":   "nLxVRoBc8G11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:3cd44778ca72f2263c07f9ed22961e29560728d888e52209113e09f9456bbb4d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41956", "10.65.0.27:41956", "172.17.0.1:41956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:08.953599053Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1522149029828903,
-				"StableID":   "nWJsQtGPtC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-				"KeyExpiry":  "2026-11-03T08:39:09Z",
-				"DiscoKey":   "discokey:b8c652929ff1c2f8e9aac9da23bf280c3c2c707e55b681ecc97f4a32b0b2183b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47009", "10.65.0.27:47009", "172.17.0.1:47009"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:09.499042883Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3814331988308492": {
-				"ID":          3814331988308492,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2102204042832142,
-				"StableID":   "nMz7cTL6RH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       2102204042832142,
-				"Key":        "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-				"DiscoKey":   "discokey:29d3297bc38fa5e8b8c860c9272a6700e64fa54556630c958fef20b370ea0c57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46695", "10.65.0.27:46695", "172.17.0.1:46695"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:39:06.244009033Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-			"MachineKey": "mkey:1183f3142f56d077b420828154bcfc6e71c3c2a2d96c6e02618f59f4496dd075",
-			"Peers": [{
-				"ID":         3814331988308492,
-				"StableID":   "nVFxEw2XnW11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-				"DiscoKey":   "discokey:38641d2e6ac9ad9f2084f441ff68dfa309a0038b1f57952091f31efdb1d9005e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51734", "10.65.0.27:51734", "172.17.0.1:51734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:05.707662675Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2312197643906012,
-				"StableID":   "nB4W3fWC4K11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-				"DiscoKey":   "discokey:66a84bdd73dd41b0e7821507f91ed0da22659cf3584e99a1845f4cafa1a6f129",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53602", "10.65.0.27:53602", "172.17.0.1:53602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:06.791479348Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3643761136982678,
-				"StableID":   "nhJgCjRGTV11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-				"DiscoKey":   "discokey:e7903078f48515ea4c6eda25fe69d2465e3d40f1cddb6208bbeb547bb8b29f75",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46080", "10.65.0.27:46080", "172.17.0.1:46080"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:07.339624273Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3195745666047483,
-				"StableID":   "nEt7CYpMxR11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-				"DiscoKey":   "discokey:a17ed4c8ccbc4223e8f17c322f9343bca2a340ead777a30e1c5c2032b129567f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48514", "10.65.0.27:48514", "172.17.0.1:48514"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:07.872003098Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4289985003352865,
-				"StableID":   "ngkCPddwVa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:61332b4865191155dcacd353169b9e937515ef322bfa79b320db73a4b433184f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41854", "10.65.0.27:41854", "172.17.0.1:41854"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:08.41639699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1937741608088729,
-				"StableID":   "nLxVRoBc8G11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:3cd44778ca72f2263c07f9ed22961e29560728d888e52209113e09f9456bbb4d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41956", "10.65.0.27:41956", "172.17.0.1:41956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:08.953599053Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1522149029828903,
-				"StableID":   "nWJsQtGPtC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-				"KeyExpiry":  "2026-11-03T08:39:09Z",
-				"DiscoKey":   "discokey:b8c652929ff1c2f8e9aac9da23bf280c3c2c707e55b681ecc97f4a32b0b2183b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47009", "10.65.0.27:47009", "172.17.0.1:47009"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:09.499042883Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2102204042832142": {
-				"ID":          2102204042832142,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4289985003352865,
-				"StableID":   "ngkCPddwVa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:61332b4865191155dcacd353169b9e937515ef322bfa79b320db73a4b433184f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41854", "10.65.0.27:41854", "172.17.0.1:41854"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:08.41639699Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-			"MachineKey": "mkey:7411e88a76285069f0532926d4d40bec2336e110f241c73787e03ebbf83f8717",
-			"Peers": [{
-				"ID":         3814331988308492,
-				"StableID":   "nVFxEw2XnW11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-				"DiscoKey":   "discokey:38641d2e6ac9ad9f2084f441ff68dfa309a0038b1f57952091f31efdb1d9005e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51734", "10.65.0.27:51734", "172.17.0.1:51734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:05.707662675Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2102204042832142,
-				"StableID":   "nMz7cTL6RH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-				"DiscoKey":   "discokey:29d3297bc38fa5e8b8c860c9272a6700e64fa54556630c958fef20b370ea0c57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46695", "10.65.0.27:46695", "172.17.0.1:46695"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:06.244009033Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2312197643906012,
-				"StableID":   "nB4W3fWC4K11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-				"DiscoKey":   "discokey:66a84bdd73dd41b0e7821507f91ed0da22659cf3584e99a1845f4cafa1a6f129",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53602", "10.65.0.27:53602", "172.17.0.1:53602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:06.791479348Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3643761136982678,
-				"StableID":   "nhJgCjRGTV11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-				"DiscoKey":   "discokey:e7903078f48515ea4c6eda25fe69d2465e3d40f1cddb6208bbeb547bb8b29f75",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46080", "10.65.0.27:46080", "172.17.0.1:46080"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:07.339624273Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3195745666047483,
-				"StableID":   "nEt7CYpMxR11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-				"DiscoKey":   "discokey:a17ed4c8ccbc4223e8f17c322f9343bca2a340ead777a30e1c5c2032b129567f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48514", "10.65.0.27:48514", "172.17.0.1:48514"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:07.872003098Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         1937741608088729,
-				"StableID":   "nLxVRoBc8G11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:3cd44778ca72f2263c07f9ed22961e29560728d888e52209113e09f9456bbb4d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41956", "10.65.0.27:41956", "172.17.0.1:41956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:08.953599053Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1522149029828903,
-				"StableID":   "nWJsQtGPtC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-				"KeyExpiry":  "2026-11-03T08:39:09Z",
-				"DiscoKey":   "discokey:b8c652929ff1c2f8e9aac9da23bf280c3c2c707e55b681ecc97f4a32b0b2183b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47009", "10.65.0.27:47009", "172.17.0.1:47009"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:09.499042883Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2312197643906012,
-				"StableID":   "nB4W3fWC4K11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       2312197643906012,
-				"Key":        "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-				"DiscoKey":   "discokey:66a84bdd73dd41b0e7821507f91ed0da22659cf3584e99a1845f4cafa1a6f129",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53602", "10.65.0.27:53602", "172.17.0.1:53602"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:06.791479348Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-			"MachineKey": "mkey:ce2025d6e3721e7158cbcb4dc2c90b6be8e6bb1d75998b8ba5f1c8b5e0ea380e",
-			"Peers": [{
-				"ID":         3814331988308492,
-				"StableID":   "nVFxEw2XnW11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-				"DiscoKey":   "discokey:38641d2e6ac9ad9f2084f441ff68dfa309a0038b1f57952091f31efdb1d9005e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51734", "10.65.0.27:51734", "172.17.0.1:51734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:05.707662675Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2102204042832142,
-				"StableID":   "nMz7cTL6RH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-				"DiscoKey":   "discokey:29d3297bc38fa5e8b8c860c9272a6700e64fa54556630c958fef20b370ea0c57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46695", "10.65.0.27:46695", "172.17.0.1:46695"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:06.244009033Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         3643761136982678,
-				"StableID":   "nhJgCjRGTV11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-				"DiscoKey":   "discokey:e7903078f48515ea4c6eda25fe69d2465e3d40f1cddb6208bbeb547bb8b29f75",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46080", "10.65.0.27:46080", "172.17.0.1:46080"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:07.339624273Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3195745666047483,
-				"StableID":   "nEt7CYpMxR11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-				"DiscoKey":   "discokey:a17ed4c8ccbc4223e8f17c322f9343bca2a340ead777a30e1c5c2032b129567f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48514", "10.65.0.27:48514", "172.17.0.1:48514"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:07.872003098Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4289985003352865,
-				"StableID":   "ngkCPddwVa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:61332b4865191155dcacd353169b9e937515ef322bfa79b320db73a4b433184f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41854", "10.65.0.27:41854", "172.17.0.1:41854"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:08.41639699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1937741608088729,
-				"StableID":   "nLxVRoBc8G11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:3cd44778ca72f2263c07f9ed22961e29560728d888e52209113e09f9456bbb4d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41956", "10.65.0.27:41956", "172.17.0.1:41956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:08.953599053Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1522149029828903,
-				"StableID":   "nWJsQtGPtC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-				"KeyExpiry":  "2026-11-03T08:39:09Z",
-				"DiscoKey":   "discokey:b8c652929ff1c2f8e9aac9da23bf280c3c2c707e55b681ecc97f4a32b0b2183b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47009", "10.65.0.27:47009", "172.17.0.1:47009"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:09.499042883Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2312197643906012": {
-				"ID":          2312197643906012,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3643761136982678,
-				"StableID":   "nhJgCjRGTV11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       3643761136982678,
-				"Key":        "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-				"DiscoKey":   "discokey:e7903078f48515ea4c6eda25fe69d2465e3d40f1cddb6208bbeb547bb8b29f75",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46080", "10.65.0.27:46080", "172.17.0.1:46080"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:39:07.339624273Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-			"MachineKey": "mkey:4b1fc815a62be1d66967dd43beea0e9c41b2d553f2598a08f399ddb85d8b9c39",
-			"Peers": [{
-				"ID":         3814331988308492,
-				"StableID":   "nVFxEw2XnW11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-				"DiscoKey":   "discokey:38641d2e6ac9ad9f2084f441ff68dfa309a0038b1f57952091f31efdb1d9005e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51734", "10.65.0.27:51734", "172.17.0.1:51734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:05.707662675Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2102204042832142,
-				"StableID":   "nMz7cTL6RH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-				"DiscoKey":   "discokey:29d3297bc38fa5e8b8c860c9272a6700e64fa54556630c958fef20b370ea0c57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46695", "10.65.0.27:46695", "172.17.0.1:46695"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:06.244009033Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2312197643906012,
-				"StableID":   "nB4W3fWC4K11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-				"DiscoKey":   "discokey:66a84bdd73dd41b0e7821507f91ed0da22659cf3584e99a1845f4cafa1a6f129",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53602", "10.65.0.27:53602", "172.17.0.1:53602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:06.791479348Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3195745666047483,
-				"StableID":   "nEt7CYpMxR11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-				"DiscoKey":   "discokey:a17ed4c8ccbc4223e8f17c322f9343bca2a340ead777a30e1c5c2032b129567f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48514", "10.65.0.27:48514", "172.17.0.1:48514"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:07.872003098Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4289985003352865,
-				"StableID":   "ngkCPddwVa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:61332b4865191155dcacd353169b9e937515ef322bfa79b320db73a4b433184f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41854", "10.65.0.27:41854", "172.17.0.1:41854"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:08.41639699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1937741608088729,
-				"StableID":   "nLxVRoBc8G11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:3cd44778ca72f2263c07f9ed22961e29560728d888e52209113e09f9456bbb4d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41956", "10.65.0.27:41956", "172.17.0.1:41956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:08.953599053Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1522149029828903,
-				"StableID":   "nWJsQtGPtC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-				"KeyExpiry":  "2026-11-03T08:39:09Z",
-				"DiscoKey":   "discokey:b8c652929ff1c2f8e9aac9da23bf280c3c2c707e55b681ecc97f4a32b0b2183b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47009", "10.65.0.27:47009", "172.17.0.1:47009"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:09.499042883Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3643761136982678": {
-				"ID":          3643761136982678,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3195745666047483,
-				"StableID":   "nEt7CYpMxR11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       3195745666047483,
-				"Key":        "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-				"DiscoKey":   "discokey:a17ed4c8ccbc4223e8f17c322f9343bca2a340ead777a30e1c5c2032b129567f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48514", "10.65.0.27:48514", "172.17.0.1:48514"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:07.872003098Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-			"MachineKey": "mkey:4f0ef18b8f8a121b07302f1a914ef35c838e8f80b9aff466c2f57d47e1fdf657",
-			"Peers": [{
-				"ID":         3814331988308492,
-				"StableID":   "nVFxEw2XnW11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-				"DiscoKey":   "discokey:38641d2e6ac9ad9f2084f441ff68dfa309a0038b1f57952091f31efdb1d9005e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51734", "10.65.0.27:51734", "172.17.0.1:51734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:05.707662675Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2102204042832142,
-				"StableID":   "nMz7cTL6RH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-				"DiscoKey":   "discokey:29d3297bc38fa5e8b8c860c9272a6700e64fa54556630c958fef20b370ea0c57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46695", "10.65.0.27:46695", "172.17.0.1:46695"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:06.244009033Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2312197643906012,
-				"StableID":   "nB4W3fWC4K11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-				"DiscoKey":   "discokey:66a84bdd73dd41b0e7821507f91ed0da22659cf3584e99a1845f4cafa1a6f129",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53602", "10.65.0.27:53602", "172.17.0.1:53602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:06.791479348Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3643761136982678,
-				"StableID":   "nhJgCjRGTV11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-				"DiscoKey":   "discokey:e7903078f48515ea4c6eda25fe69d2465e3d40f1cddb6208bbeb547bb8b29f75",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46080", "10.65.0.27:46080", "172.17.0.1:46080"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:07.339624273Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4289985003352865,
-				"StableID":   "ngkCPddwVa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:61332b4865191155dcacd353169b9e937515ef322bfa79b320db73a4b433184f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41854", "10.65.0.27:41854", "172.17.0.1:41854"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:08.41639699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1937741608088729,
-				"StableID":   "nLxVRoBc8G11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:3cd44778ca72f2263c07f9ed22961e29560728d888e52209113e09f9456bbb4d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41956", "10.65.0.27:41956", "172.17.0.1:41956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:08.953599053Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         1522149029828903,
-				"StableID":   "nWJsQtGPtC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-				"KeyExpiry":  "2026-11-03T08:39:09Z",
-				"DiscoKey":   "discokey:b8c652929ff1c2f8e9aac9da23bf280c3c2c707e55b681ecc97f4a32b0b2183b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47009", "10.65.0.27:47009", "172.17.0.1:47009"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:09.499042883Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3195745666047483": {
-				"ID":          3195745666047483,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1522149029828903,
-				"StableID":   "nWJsQtGPtC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-				"KeyExpiry":  "2026-11-03T08:39:09Z",
-				"DiscoKey":   "discokey:b8c652929ff1c2f8e9aac9da23bf280c3c2c707e55b681ecc97f4a32b0b2183b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47009", "10.65.0.27:47009", "172.17.0.1:47009"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:09.499042883Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-			"MachineKey": "mkey:f973577ced222be722e665e09a50ed7de00c427e50a156c55246ddb6c7e97c73",
-			"Peers": [{
-				"ID":         3814331988308492,
-				"StableID":   "nVFxEw2XnW11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-				"DiscoKey":   "discokey:38641d2e6ac9ad9f2084f441ff68dfa309a0038b1f57952091f31efdb1d9005e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51734", "10.65.0.27:51734", "172.17.0.1:51734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:05.707662675Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2102204042832142,
-				"StableID":   "nMz7cTL6RH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-				"DiscoKey":   "discokey:29d3297bc38fa5e8b8c860c9272a6700e64fa54556630c958fef20b370ea0c57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46695", "10.65.0.27:46695", "172.17.0.1:46695"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:06.244009033Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2312197643906012,
-				"StableID":   "nB4W3fWC4K11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-				"DiscoKey":   "discokey:66a84bdd73dd41b0e7821507f91ed0da22659cf3584e99a1845f4cafa1a6f129",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53602", "10.65.0.27:53602", "172.17.0.1:53602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:06.791479348Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3643761136982678,
-				"StableID":   "nhJgCjRGTV11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-				"DiscoKey":   "discokey:e7903078f48515ea4c6eda25fe69d2465e3d40f1cddb6208bbeb547bb8b29f75",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46080", "10.65.0.27:46080", "172.17.0.1:46080"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:07.339624273Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3195745666047483,
-				"StableID":   "nEt7CYpMxR11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-				"DiscoKey":   "discokey:a17ed4c8ccbc4223e8f17c322f9343bca2a340ead777a30e1c5c2032b129567f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48514", "10.65.0.27:48514", "172.17.0.1:48514"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:07.872003098Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4289985003352865,
-				"StableID":   "ngkCPddwVa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:61332b4865191155dcacd353169b9e937515ef322bfa79b320db73a4b433184f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41854", "10.65.0.27:41854", "172.17.0.1:41854"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:08.41639699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1937741608088729,
-				"StableID":   "nLxVRoBc8G11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:3cd44778ca72f2263c07f9ed22961e29560728d888e52209113e09f9456bbb4d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41956", "10.65.0.27:41956", "172.17.0.1:41956"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:08.953599053Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1937741608088729,
-				"StableID":   "nLxVRoBc8G11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:3cd44778ca72f2263c07f9ed22961e29560728d888e52209113e09f9456bbb4d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:41956", "10.65.0.27:41956", "172.17.0.1:41956"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:08.953599053Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:1a2e32906573240054f395dec907bbf4a11894c1293cdf8fbab6b4103749c836",
-			"MachineKey": "mkey:98900693ac68d85a214eef54157bdb767b29ce5b0b5a47616ecefad830328419",
-			"Peers": [{
-				"ID":         3814331988308492,
-				"StableID":   "nVFxEw2XnW11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:b178db96b0c3806eea16c1cf718433c65fd9b5db99f789d856b059a5f6f3d720",
-				"DiscoKey":   "discokey:38641d2e6ac9ad9f2084f441ff68dfa309a0038b1f57952091f31efdb1d9005e",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:51734", "10.65.0.27:51734", "172.17.0.1:51734"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:05.707662675Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         2102204042832142,
-				"StableID":   "nMz7cTL6RH11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:0621d4ccc0cf00877c86f5f96a4e97f21e30153a2ba6e7884a522503ee5e986d",
-				"DiscoKey":   "discokey:29d3297bc38fa5e8b8c860c9272a6700e64fa54556630c958fef20b370ea0c57",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:46695", "10.65.0.27:46695", "172.17.0.1:46695"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:06.244009033Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2312197643906012,
-				"StableID":   "nB4W3fWC4K11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:870b7558b993961546633ea599d1ee2345441bf5605778d61e30f908c46b9704",
-				"DiscoKey":   "discokey:66a84bdd73dd41b0e7821507f91ed0da22659cf3584e99a1845f4cafa1a6f129",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53602", "10.65.0.27:53602", "172.17.0.1:53602"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:06.791479348Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         3643761136982678,
-				"StableID":   "nhJgCjRGTV11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:9cc2eb98d64747ad342dcde683463bace612baf1992619896a497d1846f03b05",
-				"DiscoKey":   "discokey:e7903078f48515ea4c6eda25fe69d2465e3d40f1cddb6208bbeb547bb8b29f75",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:46080", "10.65.0.27:46080", "172.17.0.1:46080"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:07.339624273Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         3195745666047483,
-				"StableID":   "nEt7CYpMxR11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e8deb1c43023ac1ec706e0d8c5d8cca5636ce9b52de60d98f2014806e6252547",
-				"DiscoKey":   "discokey:a17ed4c8ccbc4223e8f17c322f9343bca2a340ead777a30e1c5c2032b129567f",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:48514", "10.65.0.27:48514", "172.17.0.1:48514"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:07.872003098Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4289985003352865,
-				"StableID":   "ngkCPddwVa11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:ae394a6b177aa553789d96d6668e7b670d6cf8376b9068908d3a626f8df1a804",
-				"KeyExpiry":  "2026-11-03T08:39:08Z",
-				"DiscoKey":   "discokey:61332b4865191155dcacd353169b9e937515ef322bfa79b320db73a4b433184f",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:41854", "10.65.0.27:41854", "172.17.0.1:41854"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:08.41639699Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         1522149029828903,
-				"StableID":   "nWJsQtGPtC11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:061d1888e070e822b0cc2becfb6f036b7d52f01cdd087783624458f53bb8b94b",
-				"KeyExpiry":  "2026-11-03T08:39:09Z",
-				"DiscoKey":   "discokey:b8c652929ff1c2f8e9aac9da23bf280c3c2c707e55b681ecc97f4a32b0b2183b",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:47009", "10.65.0.27:47009", "172.17.0.1:47009"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:09.499042883Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a7-mixed.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a7-mixed.hujson
deleted file mode 100644
index 43c9941c2..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a7-mixed.hujson
+++ /dev/null
@@ -1,8825 +0,0 @@
-// nodeattrs-target-a7-mixed
-//
-// mixed targets: user + tag in a single entry
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:39:40Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a7-mixed",
-	"description":    "mixed targets: user + tag in a single entry",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:39:40.528667378Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                            \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"mixed targets: user + tag in a single entry\",\n    \"id\": \"nodeattrs-target-a7-mixed\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"thor@example.org\",\n                    \"tag:prod\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a7-mixed.hujson",
-		"full_policy": {"nodeAttrs": [{
-			"attr":   ["randomize-client-port"],
-			"target": ["thor@example.org", "tag:prod"]
-		}], "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2661646434041596,
-				"StableID":   "nsLnzRwTnM11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       2661646434041596,
-				"Key":        "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-				"DiscoKey":   "discokey:6eb7ba20dafdc14871aed6c2386d3b0ec39b9729ccb3b4d0cd721246bb95b648",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33361", "10.65.0.27:33361", "172.17.0.1:33361"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:46.111576305Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-			"MachineKey": "mkey:d24961c6146852e45a6373bd543b6378fcc817281e2f93a6487fbf5065a1121b",
-			"Peers": [{
-				"ID":         6062973524603647,
-				"StableID":   "nn88hw2wLp11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-				"DiscoKey":   "discokey:e8c9d8509f89edfcac59bfc7b76b540e9800957f6434c7a2e5d7650203d7647a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51719", "10.65.0.27:51719", "172.17.0.1:51719"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:46.637865537Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1571659147862908,
-				"StableID":   "njCA1cpoGD11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-				"DiscoKey":   "discokey:896a3dff7d2f3e5deaf32009a6c38d48d8746f16387a430d3d6c82e242c1c86d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52777", "10.65.0.27:52777", "172.17.0.1:52777"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:47.175387824Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7872843970234785,
-				"StableID":   "n4rzM9GdU421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-				"DiscoKey":   "discokey:f8419533aa205f74820fa84e427cf08f236d2d15606e12b726782f2a3406720e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33421", "10.65.0.27:33421", "172.17.0.1:33421"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:47.714668463Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6576595057229279,
-				"StableID":   "nxFWi11ZMt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-				"DiscoKey":   "discokey:1363f4d5513e4fa40acb586fdc1f9214f5bda95989286739614be598c6e09e31",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:45495", "10.65.0.27:45495", "172.17.0.1:45495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:48.246322313Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8809679517370389,
-				"StableID":   "nSwwcrLvnB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-				"KeyExpiry":  "2026-11-03T08:39:48Z",
-				"DiscoKey":   "discokey:2a69fd71d2a2e7ea7dacfec2e2df66a5b6c846ce314055e3a4ea26003f51237b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49657", "10.65.0.27:49657", "172.17.0.1:49657"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:48.775393133Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4128075977005024,
-				"StableID":   "nwJ3AFZcEZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:e66cc6ce93a73a450268030af6f756691cea2bf600a3984dba2f4052a5316064",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:39269", "10.65.0.27:39269", "172.17.0.1:39269"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:49.310246963Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2547099404539641,
-				"StableID":   "nQzKFyyatL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:f672503369038f1b9d17ca44ddb0ab0a9d7935d5aa79280460e72fe9c168a738",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57755", "10.65.0.27:57755", "172.17.0.1:57755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:49.844706275Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2661646434041596": {
-				"ID":          2661646434041596,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6062973524603647,
-				"StableID":   "nn88hw2wLp11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       6062973524603647,
-				"Key":        "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-				"DiscoKey":   "discokey:e8c9d8509f89edfcac59bfc7b76b540e9800957f6434c7a2e5d7650203d7647a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51719", "10.65.0.27:51719", "172.17.0.1:51719"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:39:46.637865537Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-			"MachineKey": "mkey:86e3f2e645a7210fd9255b85935212daf3607b121a2ee905956c12c3a3f09619",
-			"Peers": [{
-				"ID":         2661646434041596,
-				"StableID":   "nsLnzRwTnM11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-				"DiscoKey":   "discokey:6eb7ba20dafdc14871aed6c2386d3b0ec39b9729ccb3b4d0cd721246bb95b648",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33361", "10.65.0.27:33361", "172.17.0.1:33361"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:46.111576305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         1571659147862908,
-				"StableID":   "njCA1cpoGD11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-				"DiscoKey":   "discokey:896a3dff7d2f3e5deaf32009a6c38d48d8746f16387a430d3d6c82e242c1c86d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52777", "10.65.0.27:52777", "172.17.0.1:52777"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:47.175387824Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7872843970234785,
-				"StableID":   "n4rzM9GdU421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-				"DiscoKey":   "discokey:f8419533aa205f74820fa84e427cf08f236d2d15606e12b726782f2a3406720e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33421", "10.65.0.27:33421", "172.17.0.1:33421"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:47.714668463Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6576595057229279,
-				"StableID":   "nxFWi11ZMt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-				"DiscoKey":   "discokey:1363f4d5513e4fa40acb586fdc1f9214f5bda95989286739614be598c6e09e31",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:45495", "10.65.0.27:45495", "172.17.0.1:45495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:48.246322313Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8809679517370389,
-				"StableID":   "nSwwcrLvnB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-				"KeyExpiry":  "2026-11-03T08:39:48Z",
-				"DiscoKey":   "discokey:2a69fd71d2a2e7ea7dacfec2e2df66a5b6c846ce314055e3a4ea26003f51237b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49657", "10.65.0.27:49657", "172.17.0.1:49657"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:48.775393133Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4128075977005024,
-				"StableID":   "nwJ3AFZcEZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:e66cc6ce93a73a450268030af6f756691cea2bf600a3984dba2f4052a5316064",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:39269", "10.65.0.27:39269", "172.17.0.1:39269"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:49.310246963Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2547099404539641,
-				"StableID":   "nQzKFyyatL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:f672503369038f1b9d17ca44ddb0ab0a9d7935d5aa79280460e72fe9c168a738",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57755", "10.65.0.27:57755", "172.17.0.1:57755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:49.844706275Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6062973524603647": {
-				"ID":          6062973524603647,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8809679517370389,
-				"StableID":   "nSwwcrLvnB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-				"KeyExpiry":  "2026-11-03T08:39:48Z",
-				"DiscoKey":   "discokey:2a69fd71d2a2e7ea7dacfec2e2df66a5b6c846ce314055e3a4ea26003f51237b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49657", "10.65.0.27:49657", "172.17.0.1:49657"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:48.775393133Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-			"MachineKey": "mkey:eacd116504a92bd4c340cada01d1bf28bd38ab78fdda16e5fc380d2eb8229719",
-			"Peers": [{
-				"ID":         2661646434041596,
-				"StableID":   "nsLnzRwTnM11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-				"DiscoKey":   "discokey:6eb7ba20dafdc14871aed6c2386d3b0ec39b9729ccb3b4d0cd721246bb95b648",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33361", "10.65.0.27:33361", "172.17.0.1:33361"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:46.111576305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6062973524603647,
-				"StableID":   "nn88hw2wLp11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-				"DiscoKey":   "discokey:e8c9d8509f89edfcac59bfc7b76b540e9800957f6434c7a2e5d7650203d7647a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51719", "10.65.0.27:51719", "172.17.0.1:51719"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:46.637865537Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1571659147862908,
-				"StableID":   "njCA1cpoGD11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-				"DiscoKey":   "discokey:896a3dff7d2f3e5deaf32009a6c38d48d8746f16387a430d3d6c82e242c1c86d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52777", "10.65.0.27:52777", "172.17.0.1:52777"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:47.175387824Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7872843970234785,
-				"StableID":   "n4rzM9GdU421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-				"DiscoKey":   "discokey:f8419533aa205f74820fa84e427cf08f236d2d15606e12b726782f2a3406720e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33421", "10.65.0.27:33421", "172.17.0.1:33421"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:47.714668463Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6576595057229279,
-				"StableID":   "nxFWi11ZMt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-				"DiscoKey":   "discokey:1363f4d5513e4fa40acb586fdc1f9214f5bda95989286739614be598c6e09e31",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:45495", "10.65.0.27:45495", "172.17.0.1:45495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:48.246322313Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4128075977005024,
-				"StableID":   "nwJ3AFZcEZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:e66cc6ce93a73a450268030af6f756691cea2bf600a3984dba2f4052a5316064",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:39269", "10.65.0.27:39269", "172.17.0.1:39269"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:49.310246963Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2547099404539641,
-				"StableID":   "nQzKFyyatL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:f672503369038f1b9d17ca44ddb0ab0a9d7935d5aa79280460e72fe9c168a738",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57755", "10.65.0.27:57755", "172.17.0.1:57755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:49.844706275Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1571659147862908,
-				"StableID":   "njCA1cpoGD11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1571659147862908,
-				"Key":        "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-				"DiscoKey":   "discokey:896a3dff7d2f3e5deaf32009a6c38d48d8746f16387a430d3d6c82e242c1c86d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52777", "10.65.0.27:52777", "172.17.0.1:52777"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:47.175387824Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-			"MachineKey": "mkey:5d2fff56e0d1544a9e6a99665654f8d0528115a93a99d06be29822db7eab3c31",
-			"Peers": [{
-				"ID":         2661646434041596,
-				"StableID":   "nsLnzRwTnM11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-				"DiscoKey":   "discokey:6eb7ba20dafdc14871aed6c2386d3b0ec39b9729ccb3b4d0cd721246bb95b648",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33361", "10.65.0.27:33361", "172.17.0.1:33361"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:46.111576305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6062973524603647,
-				"StableID":   "nn88hw2wLp11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-				"DiscoKey":   "discokey:e8c9d8509f89edfcac59bfc7b76b540e9800957f6434c7a2e5d7650203d7647a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51719", "10.65.0.27:51719", "172.17.0.1:51719"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:46.637865537Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7872843970234785,
-				"StableID":   "n4rzM9GdU421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-				"DiscoKey":   "discokey:f8419533aa205f74820fa84e427cf08f236d2d15606e12b726782f2a3406720e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33421", "10.65.0.27:33421", "172.17.0.1:33421"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:47.714668463Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6576595057229279,
-				"StableID":   "nxFWi11ZMt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-				"DiscoKey":   "discokey:1363f4d5513e4fa40acb586fdc1f9214f5bda95989286739614be598c6e09e31",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:45495", "10.65.0.27:45495", "172.17.0.1:45495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:48.246322313Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8809679517370389,
-				"StableID":   "nSwwcrLvnB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-				"KeyExpiry":  "2026-11-03T08:39:48Z",
-				"DiscoKey":   "discokey:2a69fd71d2a2e7ea7dacfec2e2df66a5b6c846ce314055e3a4ea26003f51237b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49657", "10.65.0.27:49657", "172.17.0.1:49657"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:48.775393133Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4128075977005024,
-				"StableID":   "nwJ3AFZcEZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:e66cc6ce93a73a450268030af6f756691cea2bf600a3984dba2f4052a5316064",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:39269", "10.65.0.27:39269", "172.17.0.1:39269"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:49.310246963Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2547099404539641,
-				"StableID":   "nQzKFyyatL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:f672503369038f1b9d17ca44ddb0ab0a9d7935d5aa79280460e72fe9c168a738",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57755", "10.65.0.27:57755", "172.17.0.1:57755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:49.844706275Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1571659147862908": {
-				"ID":          1571659147862908,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7872843970234785,
-				"StableID":   "n4rzM9GdU421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       7872843970234785,
-				"Key":        "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-				"DiscoKey":   "discokey:f8419533aa205f74820fa84e427cf08f236d2d15606e12b726782f2a3406720e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33421", "10.65.0.27:33421", "172.17.0.1:33421"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:39:47.714668463Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-			"MachineKey": "mkey:ded87dd96e676eb1aca6d7b2da0d1c889a53b7ff117c5c14ff56b5a78cf11222",
-			"Peers": [{
-				"ID":         2661646434041596,
-				"StableID":   "nsLnzRwTnM11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-				"DiscoKey":   "discokey:6eb7ba20dafdc14871aed6c2386d3b0ec39b9729ccb3b4d0cd721246bb95b648",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33361", "10.65.0.27:33361", "172.17.0.1:33361"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:46.111576305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6062973524603647,
-				"StableID":   "nn88hw2wLp11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-				"DiscoKey":   "discokey:e8c9d8509f89edfcac59bfc7b76b540e9800957f6434c7a2e5d7650203d7647a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51719", "10.65.0.27:51719", "172.17.0.1:51719"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:46.637865537Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1571659147862908,
-				"StableID":   "njCA1cpoGD11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-				"DiscoKey":   "discokey:896a3dff7d2f3e5deaf32009a6c38d48d8746f16387a430d3d6c82e242c1c86d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52777", "10.65.0.27:52777", "172.17.0.1:52777"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:47.175387824Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6576595057229279,
-				"StableID":   "nxFWi11ZMt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-				"DiscoKey":   "discokey:1363f4d5513e4fa40acb586fdc1f9214f5bda95989286739614be598c6e09e31",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:45495", "10.65.0.27:45495", "172.17.0.1:45495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:48.246322313Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8809679517370389,
-				"StableID":   "nSwwcrLvnB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-				"KeyExpiry":  "2026-11-03T08:39:48Z",
-				"DiscoKey":   "discokey:2a69fd71d2a2e7ea7dacfec2e2df66a5b6c846ce314055e3a4ea26003f51237b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49657", "10.65.0.27:49657", "172.17.0.1:49657"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:48.775393133Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4128075977005024,
-				"StableID":   "nwJ3AFZcEZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:e66cc6ce93a73a450268030af6f756691cea2bf600a3984dba2f4052a5316064",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:39269", "10.65.0.27:39269", "172.17.0.1:39269"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:49.310246963Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2547099404539641,
-				"StableID":   "nQzKFyyatL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:f672503369038f1b9d17ca44ddb0ab0a9d7935d5aa79280460e72fe9c168a738",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57755", "10.65.0.27:57755", "172.17.0.1:57755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:49.844706275Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7872843970234785": {
-				"ID":          7872843970234785,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6576595057229279,
-				"StableID":   "nxFWi11ZMt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       6576595057229279,
-				"Key":        "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-				"DiscoKey":   "discokey:1363f4d5513e4fa40acb586fdc1f9214f5bda95989286739614be598c6e09e31",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:45495", "10.65.0.27:45495", "172.17.0.1:45495"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:48.246322313Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-			"MachineKey": "mkey:b4bc703ff598ff0038334a7524d16d2fcf0899defd565480557934d19356be0f",
-			"Peers": [{
-				"ID":         2661646434041596,
-				"StableID":   "nsLnzRwTnM11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-				"DiscoKey":   "discokey:6eb7ba20dafdc14871aed6c2386d3b0ec39b9729ccb3b4d0cd721246bb95b648",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33361", "10.65.0.27:33361", "172.17.0.1:33361"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:46.111576305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6062973524603647,
-				"StableID":   "nn88hw2wLp11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-				"DiscoKey":   "discokey:e8c9d8509f89edfcac59bfc7b76b540e9800957f6434c7a2e5d7650203d7647a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51719", "10.65.0.27:51719", "172.17.0.1:51719"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:46.637865537Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1571659147862908,
-				"StableID":   "njCA1cpoGD11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-				"DiscoKey":   "discokey:896a3dff7d2f3e5deaf32009a6c38d48d8746f16387a430d3d6c82e242c1c86d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52777", "10.65.0.27:52777", "172.17.0.1:52777"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:47.175387824Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7872843970234785,
-				"StableID":   "n4rzM9GdU421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-				"DiscoKey":   "discokey:f8419533aa205f74820fa84e427cf08f236d2d15606e12b726782f2a3406720e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33421", "10.65.0.27:33421", "172.17.0.1:33421"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:47.714668463Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8809679517370389,
-				"StableID":   "nSwwcrLvnB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-				"KeyExpiry":  "2026-11-03T08:39:48Z",
-				"DiscoKey":   "discokey:2a69fd71d2a2e7ea7dacfec2e2df66a5b6c846ce314055e3a4ea26003f51237b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49657", "10.65.0.27:49657", "172.17.0.1:49657"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:48.775393133Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4128075977005024,
-				"StableID":   "nwJ3AFZcEZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:e66cc6ce93a73a450268030af6f756691cea2bf600a3984dba2f4052a5316064",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:39269", "10.65.0.27:39269", "172.17.0.1:39269"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:49.310246963Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2547099404539641,
-				"StableID":   "nQzKFyyatL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:f672503369038f1b9d17ca44ddb0ab0a9d7935d5aa79280460e72fe9c168a738",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57755", "10.65.0.27:57755", "172.17.0.1:57755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:49.844706275Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6576595057229279": {
-				"ID":          6576595057229279,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2547099404539641,
-				"StableID":   "nQzKFyyatL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:f672503369038f1b9d17ca44ddb0ab0a9d7935d5aa79280460e72fe9c168a738",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57755", "10.65.0.27:57755", "172.17.0.1:57755"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:49.844706275Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-			"MachineKey": "mkey:8af6136fe7ff893c43e64083221e6e4130ac24237929fa8f5cae9fd74c556c0e",
-			"Peers": [{
-				"ID":         2661646434041596,
-				"StableID":   "nsLnzRwTnM11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-				"DiscoKey":   "discokey:6eb7ba20dafdc14871aed6c2386d3b0ec39b9729ccb3b4d0cd721246bb95b648",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33361", "10.65.0.27:33361", "172.17.0.1:33361"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:46.111576305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6062973524603647,
-				"StableID":   "nn88hw2wLp11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-				"DiscoKey":   "discokey:e8c9d8509f89edfcac59bfc7b76b540e9800957f6434c7a2e5d7650203d7647a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51719", "10.65.0.27:51719", "172.17.0.1:51719"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:46.637865537Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1571659147862908,
-				"StableID":   "njCA1cpoGD11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-				"DiscoKey":   "discokey:896a3dff7d2f3e5deaf32009a6c38d48d8746f16387a430d3d6c82e242c1c86d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52777", "10.65.0.27:52777", "172.17.0.1:52777"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:47.175387824Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7872843970234785,
-				"StableID":   "n4rzM9GdU421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-				"DiscoKey":   "discokey:f8419533aa205f74820fa84e427cf08f236d2d15606e12b726782f2a3406720e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33421", "10.65.0.27:33421", "172.17.0.1:33421"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:47.714668463Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6576595057229279,
-				"StableID":   "nxFWi11ZMt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-				"DiscoKey":   "discokey:1363f4d5513e4fa40acb586fdc1f9214f5bda95989286739614be598c6e09e31",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:45495", "10.65.0.27:45495", "172.17.0.1:45495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:48.246322313Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8809679517370389,
-				"StableID":   "nSwwcrLvnB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-				"KeyExpiry":  "2026-11-03T08:39:48Z",
-				"DiscoKey":   "discokey:2a69fd71d2a2e7ea7dacfec2e2df66a5b6c846ce314055e3a4ea26003f51237b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49657", "10.65.0.27:49657", "172.17.0.1:49657"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:48.775393133Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4128075977005024,
-				"StableID":   "nwJ3AFZcEZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:e66cc6ce93a73a450268030af6f756691cea2bf600a3984dba2f4052a5316064",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:39269", "10.65.0.27:39269", "172.17.0.1:39269"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:39:49.310246963Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4128075977005024,
-				"StableID":   "nwJ3AFZcEZ11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:e66cc6ce93a73a450268030af6f756691cea2bf600a3984dba2f4052a5316064",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:39269", "10.65.0.27:39269", "172.17.0.1:39269"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:39:49.310246963Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:034961801d969030e0388c7420ebb5c0eda389ebf4ffd034c4d18eedbdf3cc69",
-			"MachineKey": "mkey:7a3f90b362b91adb37aa13150c958e08394c2249ba0dfbe0eeaecceef8677c2a",
-			"Peers": [{
-				"ID":         2661646434041596,
-				"StableID":   "nsLnzRwTnM11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:c631bcab7628c27c855d50747ca933422222bc29564eebc87d0d3ddefdb6be7e",
-				"DiscoKey":   "discokey:6eb7ba20dafdc14871aed6c2386d3b0ec39b9729ccb3b4d0cd721246bb95b648",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:33361", "10.65.0.27:33361", "172.17.0.1:33361"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:39:46.111576305Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6062973524603647,
-				"StableID":   "nn88hw2wLp11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:4b6e235be407cffbed921f3ae1dd6e39af1b24b80b152e4b02bfa0db1d887f5b",
-				"DiscoKey":   "discokey:e8c9d8509f89edfcac59bfc7b76b540e9800957f6434c7a2e5d7650203d7647a",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:51719", "10.65.0.27:51719", "172.17.0.1:51719"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:39:46.637865537Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         1571659147862908,
-				"StableID":   "njCA1cpoGD11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:8e931eb040d33758aa9a3b064aabf452fdec06e93d47007f3054a6115ec0770d",
-				"DiscoKey":   "discokey:896a3dff7d2f3e5deaf32009a6c38d48d8746f16387a430d3d6c82e242c1c86d",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:52777", "10.65.0.27:52777", "172.17.0.1:52777"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:39:47.175387824Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         7872843970234785,
-				"StableID":   "n4rzM9GdU421CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:fca19772e917405075439f21438aa7ac806e4557d7106368dcb927d583a65d65",
-				"DiscoKey":   "discokey:f8419533aa205f74820fa84e427cf08f236d2d15606e12b726782f2a3406720e",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:33421", "10.65.0.27:33421", "172.17.0.1:33421"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:39:47.714668463Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         6576595057229279,
-				"StableID":   "nxFWi11ZMt11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a4d0c7e788f45a4d205f92fdd76054d5b32b6e2a4dea14faf7ee53d29c227010",
-				"DiscoKey":   "discokey:1363f4d5513e4fa40acb586fdc1f9214f5bda95989286739614be598c6e09e31",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:45495", "10.65.0.27:45495", "172.17.0.1:45495"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:39:48.246322313Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         8809679517370389,
-				"StableID":   "nSwwcrLvnB21CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:42b501928f8112c9c1799a7169ba564d5a65d86063196801de3bec719dec0f4d",
-				"KeyExpiry":  "2026-11-03T08:39:48Z",
-				"DiscoKey":   "discokey:2a69fd71d2a2e7ea7dacfec2e2df66a5b6c846ce314055e3a4ea26003f51237b",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:49657", "10.65.0.27:49657", "172.17.0.1:49657"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:39:48.775393133Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         2547099404539641,
-				"StableID":   "nQzKFyyatL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:2f08ff6de1266731b4224650cbfcf5c8a475b26ba2959a80c68e3ff21f2fb843",
-				"KeyExpiry":  "2026-11-03T08:39:49Z",
-				"DiscoKey":   "discokey:f672503369038f1b9d17ca44ddb0ab0a9d7935d5aa79280460e72fe9c168a738",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:57755", "10.65.0.27:57755", "172.17.0.1:57755"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:39:49.844706275Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a8-host.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a8-host.hujson
deleted file mode 100644
index 4400eaabe..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a8-host.hujson
+++ /dev/null
@@ -1,8824 +0,0 @@
-// nodeattrs-target-a8-host
-//
-// host alias target uses the policy hosts block
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:40:20Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a8-host",
-	"description":    "host alias target uses the policy hosts block",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:40:20.900747601Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                           \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"host alias target uses the policy hosts block\",\n    \"id\": \"nodeattrs-target-a8-host\",\n    \"options\": {},\n    \"policy\": {\n        \"hosts\": {\n            \"server-host\": \"100.64.0.10\"\n        },\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"server-host\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a8-host.hujson",
-		"full_policy": {
-			"hosts":     {"server-host": "100.64.0.10"},
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["server-host"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6219028762173087,
-				"StableID":   "nUhgeiLcZq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       6219028762173087,
-				"Key":        "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-				"DiscoKey":   "discokey:a8685aa12e4dbf505b7dd9fa5c16d48f39d37dae69f8349f443669efa241345b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:48554", "10.65.0.27:48554", "172.17.0.1:48554"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:40:26.378846417Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-			"MachineKey": "mkey:64d01df1d486765836c4fd0f865acd841b91ac1a2e828d6db974a972cca7ef70",
-			"Peers": [{
-				"ID":         3208432747760686,
-				"StableID":   "nuv9A6674S11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-				"DiscoKey":   "discokey:b1e2f84e3cee98ffde88136d1e8b104068ef69927a9ca3017c9162c7ae6e3b08",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:59871", "10.65.0.27:59871", "172.17.0.1:59871"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:40:26.947043731Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6448362382892149,
-				"StableID":   "na71QdYUMs11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-				"DiscoKey":   "discokey:fe9d35ff841919e28fd0219e44295d2d8584602aca2b37d088860ddc81e4a20a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58780", "10.65.0.27:58780", "172.17.0.1:58780"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:40:27.469509292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2445091498568094,
-				"StableID":   "nyiYudQP6L11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-				"DiscoKey":   "discokey:354656e086dac658592141532cf2b05adf1fdf3fce866c9d2028f203f6e90e48",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39532", "10.65.0.27:39532", "172.17.0.1:39532"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:40:28.014808421Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8690937865126243,
-				"StableID":   "n4oWRdC9sA21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-				"DiscoKey":   "discokey:d08fe1d51311e9e0074f9f24e7fb5f68550b2e33d01548738da386398b3c3221",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44060", "10.65.0.27:44060", "172.17.0.1:44060"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:40:28.597199927Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5047734037343976,
-				"StableID":   "noQAjzQ8Rg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:f9ce3e0ae4e95f3482ebb4b81366b1f8b6ce0afd8258ab5ae2247886a9ff6068",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42026", "10.65.0.27:42026", "172.17.0.1:42026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:40:29.098319486Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4251007806059754,
-				"StableID":   "n1gtvTmHCa11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:b8adb4553c18fd517c1b2bf07d7d44eb6dd9cc33be275c1b881a222554a99c31",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50651", "10.65.0.27:50651", "172.17.0.1:50651"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:40:29.64357716Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2483272046594638,
-				"StableID":   "nTh8C4MgPL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-				"KeyExpiry":  "2026-11-03T08:40:30Z",
-				"DiscoKey":   "discokey:d368ce7cfb15773de9b1231f30bd1afe7f25afe3b2941cc7b84dbd76e8170f44",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42656", "10.65.0.27:42656", "172.17.0.1:42656"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:40:30.19730235Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6219028762173087": {
-				"ID":          6219028762173087,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3208432747760686,
-				"StableID":   "nuv9A6674S11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3208432747760686,
-				"Key":        "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-				"DiscoKey":   "discokey:b1e2f84e3cee98ffde88136d1e8b104068ef69927a9ca3017c9162c7ae6e3b08",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:59871", "10.65.0.27:59871", "172.17.0.1:59871"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:40:26.947043731Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-			"MachineKey": "mkey:cd950186c6a1e049b55e3914deec19d0e471366577396be7c34da98e5ff2657f",
-			"Peers": [{
-				"ID":         6219028762173087,
-				"StableID":   "nUhgeiLcZq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-				"DiscoKey":   "discokey:a8685aa12e4dbf505b7dd9fa5c16d48f39d37dae69f8349f443669efa241345b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:48554", "10.65.0.27:48554", "172.17.0.1:48554"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:40:26.378846417Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         6448362382892149,
-				"StableID":   "na71QdYUMs11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-				"DiscoKey":   "discokey:fe9d35ff841919e28fd0219e44295d2d8584602aca2b37d088860ddc81e4a20a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58780", "10.65.0.27:58780", "172.17.0.1:58780"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:40:27.469509292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2445091498568094,
-				"StableID":   "nyiYudQP6L11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-				"DiscoKey":   "discokey:354656e086dac658592141532cf2b05adf1fdf3fce866c9d2028f203f6e90e48",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39532", "10.65.0.27:39532", "172.17.0.1:39532"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:40:28.014808421Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8690937865126243,
-				"StableID":   "n4oWRdC9sA21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-				"DiscoKey":   "discokey:d08fe1d51311e9e0074f9f24e7fb5f68550b2e33d01548738da386398b3c3221",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44060", "10.65.0.27:44060", "172.17.0.1:44060"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:40:28.597199927Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5047734037343976,
-				"StableID":   "noQAjzQ8Rg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:f9ce3e0ae4e95f3482ebb4b81366b1f8b6ce0afd8258ab5ae2247886a9ff6068",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42026", "10.65.0.27:42026", "172.17.0.1:42026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:40:29.098319486Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4251007806059754,
-				"StableID":   "n1gtvTmHCa11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:b8adb4553c18fd517c1b2bf07d7d44eb6dd9cc33be275c1b881a222554a99c31",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50651", "10.65.0.27:50651", "172.17.0.1:50651"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:40:29.64357716Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2483272046594638,
-				"StableID":   "nTh8C4MgPL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-				"KeyExpiry":  "2026-11-03T08:40:30Z",
-				"DiscoKey":   "discokey:d368ce7cfb15773de9b1231f30bd1afe7f25afe3b2941cc7b84dbd76e8170f44",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42656", "10.65.0.27:42656", "172.17.0.1:42656"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:40:30.19730235Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3208432747760686": {
-				"ID":          3208432747760686,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5047734037343976,
-				"StableID":   "noQAjzQ8Rg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:f9ce3e0ae4e95f3482ebb4b81366b1f8b6ce0afd8258ab5ae2247886a9ff6068",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42026", "10.65.0.27:42026", "172.17.0.1:42026"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:40:29.098319486Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-			"MachineKey": "mkey:261212d7981705e271b212bfbf36852ff6ae50d45a3e9cfb290684d778d5cc27",
-			"Peers": [{
-				"ID":         6219028762173087,
-				"StableID":   "nUhgeiLcZq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-				"DiscoKey":   "discokey:a8685aa12e4dbf505b7dd9fa5c16d48f39d37dae69f8349f443669efa241345b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:48554", "10.65.0.27:48554", "172.17.0.1:48554"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:40:26.378846417Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3208432747760686,
-				"StableID":   "nuv9A6674S11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-				"DiscoKey":   "discokey:b1e2f84e3cee98ffde88136d1e8b104068ef69927a9ca3017c9162c7ae6e3b08",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:59871", "10.65.0.27:59871", "172.17.0.1:59871"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:40:26.947043731Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6448362382892149,
-				"StableID":   "na71QdYUMs11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-				"DiscoKey":   "discokey:fe9d35ff841919e28fd0219e44295d2d8584602aca2b37d088860ddc81e4a20a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58780", "10.65.0.27:58780", "172.17.0.1:58780"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:40:27.469509292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2445091498568094,
-				"StableID":   "nyiYudQP6L11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-				"DiscoKey":   "discokey:354656e086dac658592141532cf2b05adf1fdf3fce866c9d2028f203f6e90e48",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39532", "10.65.0.27:39532", "172.17.0.1:39532"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:40:28.014808421Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8690937865126243,
-				"StableID":   "n4oWRdC9sA21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-				"DiscoKey":   "discokey:d08fe1d51311e9e0074f9f24e7fb5f68550b2e33d01548738da386398b3c3221",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44060", "10.65.0.27:44060", "172.17.0.1:44060"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:40:28.597199927Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         4251007806059754,
-				"StableID":   "n1gtvTmHCa11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:b8adb4553c18fd517c1b2bf07d7d44eb6dd9cc33be275c1b881a222554a99c31",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50651", "10.65.0.27:50651", "172.17.0.1:50651"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:40:29.64357716Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2483272046594638,
-				"StableID":   "nTh8C4MgPL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-				"KeyExpiry":  "2026-11-03T08:40:30Z",
-				"DiscoKey":   "discokey:d368ce7cfb15773de9b1231f30bd1afe7f25afe3b2941cc7b84dbd76e8170f44",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42656", "10.65.0.27:42656", "172.17.0.1:42656"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:40:30.19730235Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6448362382892149,
-				"StableID":   "na71QdYUMs11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       6448362382892149,
-				"Key":        "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-				"DiscoKey":   "discokey:fe9d35ff841919e28fd0219e44295d2d8584602aca2b37d088860ddc81e4a20a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58780", "10.65.0.27:58780", "172.17.0.1:58780"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:40:27.469509292Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-			"MachineKey": "mkey:087dc7c5c2e470c5a7ec9adb26cc454dd6d442bcb3dee3fdc3f90f94f97dea22",
-			"Peers": [{
-				"ID":         6219028762173087,
-				"StableID":   "nUhgeiLcZq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-				"DiscoKey":   "discokey:a8685aa12e4dbf505b7dd9fa5c16d48f39d37dae69f8349f443669efa241345b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:48554", "10.65.0.27:48554", "172.17.0.1:48554"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:40:26.378846417Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3208432747760686,
-				"StableID":   "nuv9A6674S11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-				"DiscoKey":   "discokey:b1e2f84e3cee98ffde88136d1e8b104068ef69927a9ca3017c9162c7ae6e3b08",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:59871", "10.65.0.27:59871", "172.17.0.1:59871"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:40:26.947043731Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         2445091498568094,
-				"StableID":   "nyiYudQP6L11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-				"DiscoKey":   "discokey:354656e086dac658592141532cf2b05adf1fdf3fce866c9d2028f203f6e90e48",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39532", "10.65.0.27:39532", "172.17.0.1:39532"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:40:28.014808421Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8690937865126243,
-				"StableID":   "n4oWRdC9sA21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-				"DiscoKey":   "discokey:d08fe1d51311e9e0074f9f24e7fb5f68550b2e33d01548738da386398b3c3221",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44060", "10.65.0.27:44060", "172.17.0.1:44060"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:40:28.597199927Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5047734037343976,
-				"StableID":   "noQAjzQ8Rg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:f9ce3e0ae4e95f3482ebb4b81366b1f8b6ce0afd8258ab5ae2247886a9ff6068",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42026", "10.65.0.27:42026", "172.17.0.1:42026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:40:29.098319486Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4251007806059754,
-				"StableID":   "n1gtvTmHCa11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:b8adb4553c18fd517c1b2bf07d7d44eb6dd9cc33be275c1b881a222554a99c31",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50651", "10.65.0.27:50651", "172.17.0.1:50651"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:40:29.64357716Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2483272046594638,
-				"StableID":   "nTh8C4MgPL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-				"KeyExpiry":  "2026-11-03T08:40:30Z",
-				"DiscoKey":   "discokey:d368ce7cfb15773de9b1231f30bd1afe7f25afe3b2941cc7b84dbd76e8170f44",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42656", "10.65.0.27:42656", "172.17.0.1:42656"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:40:30.19730235Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6448362382892149": {
-				"ID":          6448362382892149,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2445091498568094,
-				"StableID":   "nyiYudQP6L11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       2445091498568094,
-				"Key":        "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-				"DiscoKey":   "discokey:354656e086dac658592141532cf2b05adf1fdf3fce866c9d2028f203f6e90e48",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39532", "10.65.0.27:39532", "172.17.0.1:39532"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:40:28.014808421Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-			"MachineKey": "mkey:5b914077580f32161f34016d4203700e5011803ea3040fe3d98105d45137ed60",
-			"Peers": [{
-				"ID":         6219028762173087,
-				"StableID":   "nUhgeiLcZq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-				"DiscoKey":   "discokey:a8685aa12e4dbf505b7dd9fa5c16d48f39d37dae69f8349f443669efa241345b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:48554", "10.65.0.27:48554", "172.17.0.1:48554"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:40:26.378846417Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3208432747760686,
-				"StableID":   "nuv9A6674S11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-				"DiscoKey":   "discokey:b1e2f84e3cee98ffde88136d1e8b104068ef69927a9ca3017c9162c7ae6e3b08",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:59871", "10.65.0.27:59871", "172.17.0.1:59871"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:40:26.947043731Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6448362382892149,
-				"StableID":   "na71QdYUMs11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-				"DiscoKey":   "discokey:fe9d35ff841919e28fd0219e44295d2d8584602aca2b37d088860ddc81e4a20a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58780", "10.65.0.27:58780", "172.17.0.1:58780"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:40:27.469509292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8690937865126243,
-				"StableID":   "n4oWRdC9sA21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-				"DiscoKey":   "discokey:d08fe1d51311e9e0074f9f24e7fb5f68550b2e33d01548738da386398b3c3221",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44060", "10.65.0.27:44060", "172.17.0.1:44060"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:40:28.597199927Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5047734037343976,
-				"StableID":   "noQAjzQ8Rg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:f9ce3e0ae4e95f3482ebb4b81366b1f8b6ce0afd8258ab5ae2247886a9ff6068",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42026", "10.65.0.27:42026", "172.17.0.1:42026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:40:29.098319486Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4251007806059754,
-				"StableID":   "n1gtvTmHCa11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:b8adb4553c18fd517c1b2bf07d7d44eb6dd9cc33be275c1b881a222554a99c31",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50651", "10.65.0.27:50651", "172.17.0.1:50651"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:40:29.64357716Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2483272046594638,
-				"StableID":   "nTh8C4MgPL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-				"KeyExpiry":  "2026-11-03T08:40:30Z",
-				"DiscoKey":   "discokey:d368ce7cfb15773de9b1231f30bd1afe7f25afe3b2941cc7b84dbd76e8170f44",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42656", "10.65.0.27:42656", "172.17.0.1:42656"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:40:30.19730235Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "2445091498568094": {
-				"ID":          2445091498568094,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8690937865126243,
-				"StableID":   "n4oWRdC9sA21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       8690937865126243,
-				"Key":        "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-				"DiscoKey":   "discokey:d08fe1d51311e9e0074f9f24e7fb5f68550b2e33d01548738da386398b3c3221",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44060", "10.65.0.27:44060", "172.17.0.1:44060"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:40:28.597199927Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-			"MachineKey": "mkey:c4bcffa72ea313828ac1ebf1f9abdc8bb5f5228162c564a304026a946962e913",
-			"Peers": [{
-				"ID":         6219028762173087,
-				"StableID":   "nUhgeiLcZq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-				"DiscoKey":   "discokey:a8685aa12e4dbf505b7dd9fa5c16d48f39d37dae69f8349f443669efa241345b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:48554", "10.65.0.27:48554", "172.17.0.1:48554"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:40:26.378846417Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3208432747760686,
-				"StableID":   "nuv9A6674S11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-				"DiscoKey":   "discokey:b1e2f84e3cee98ffde88136d1e8b104068ef69927a9ca3017c9162c7ae6e3b08",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:59871", "10.65.0.27:59871", "172.17.0.1:59871"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:40:26.947043731Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6448362382892149,
-				"StableID":   "na71QdYUMs11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-				"DiscoKey":   "discokey:fe9d35ff841919e28fd0219e44295d2d8584602aca2b37d088860ddc81e4a20a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58780", "10.65.0.27:58780", "172.17.0.1:58780"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:40:27.469509292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2445091498568094,
-				"StableID":   "nyiYudQP6L11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-				"DiscoKey":   "discokey:354656e086dac658592141532cf2b05adf1fdf3fce866c9d2028f203f6e90e48",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39532", "10.65.0.27:39532", "172.17.0.1:39532"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:40:28.014808421Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5047734037343976,
-				"StableID":   "noQAjzQ8Rg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:f9ce3e0ae4e95f3482ebb4b81366b1f8b6ce0afd8258ab5ae2247886a9ff6068",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42026", "10.65.0.27:42026", "172.17.0.1:42026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:40:29.098319486Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4251007806059754,
-				"StableID":   "n1gtvTmHCa11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:b8adb4553c18fd517c1b2bf07d7d44eb6dd9cc33be275c1b881a222554a99c31",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50651", "10.65.0.27:50651", "172.17.0.1:50651"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:40:29.64357716Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         2483272046594638,
-				"StableID":   "nTh8C4MgPL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-				"KeyExpiry":  "2026-11-03T08:40:30Z",
-				"DiscoKey":   "discokey:d368ce7cfb15773de9b1231f30bd1afe7f25afe3b2941cc7b84dbd76e8170f44",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42656", "10.65.0.27:42656", "172.17.0.1:42656"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:40:30.19730235Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8690937865126243": {
-				"ID":          8690937865126243,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         2483272046594638,
-				"StableID":   "nTh8C4MgPL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-				"KeyExpiry":  "2026-11-03T08:40:30Z",
-				"DiscoKey":   "discokey:d368ce7cfb15773de9b1231f30bd1afe7f25afe3b2941cc7b84dbd76e8170f44",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42656", "10.65.0.27:42656", "172.17.0.1:42656"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:40:30.19730235Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-			"MachineKey": "mkey:4a8167cf8d3004578e2deb3bb2c18693f542b16b49196689be35a34060cf4827",
-			"Peers": [{
-				"ID":         6219028762173087,
-				"StableID":   "nUhgeiLcZq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-				"DiscoKey":   "discokey:a8685aa12e4dbf505b7dd9fa5c16d48f39d37dae69f8349f443669efa241345b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:48554", "10.65.0.27:48554", "172.17.0.1:48554"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:40:26.378846417Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3208432747760686,
-				"StableID":   "nuv9A6674S11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-				"DiscoKey":   "discokey:b1e2f84e3cee98ffde88136d1e8b104068ef69927a9ca3017c9162c7ae6e3b08",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:59871", "10.65.0.27:59871", "172.17.0.1:59871"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:40:26.947043731Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6448362382892149,
-				"StableID":   "na71QdYUMs11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-				"DiscoKey":   "discokey:fe9d35ff841919e28fd0219e44295d2d8584602aca2b37d088860ddc81e4a20a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58780", "10.65.0.27:58780", "172.17.0.1:58780"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:40:27.469509292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2445091498568094,
-				"StableID":   "nyiYudQP6L11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-				"DiscoKey":   "discokey:354656e086dac658592141532cf2b05adf1fdf3fce866c9d2028f203f6e90e48",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39532", "10.65.0.27:39532", "172.17.0.1:39532"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:40:28.014808421Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8690937865126243,
-				"StableID":   "n4oWRdC9sA21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-				"DiscoKey":   "discokey:d08fe1d51311e9e0074f9f24e7fb5f68550b2e33d01548738da386398b3c3221",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44060", "10.65.0.27:44060", "172.17.0.1:44060"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:40:28.597199927Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5047734037343976,
-				"StableID":   "noQAjzQ8Rg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:f9ce3e0ae4e95f3482ebb4b81366b1f8b6ce0afd8258ab5ae2247886a9ff6068",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42026", "10.65.0.27:42026", "172.17.0.1:42026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:40:29.098319486Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         4251007806059754,
-				"StableID":   "n1gtvTmHCa11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:b8adb4553c18fd517c1b2bf07d7d44eb6dd9cc33be275c1b881a222554a99c31",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50651", "10.65.0.27:50651", "172.17.0.1:50651"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:40:29.64357716Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4251007806059754,
-				"StableID":   "n1gtvTmHCa11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:b8adb4553c18fd517c1b2bf07d7d44eb6dd9cc33be275c1b881a222554a99c31",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:50651", "10.65.0.27:50651", "172.17.0.1:50651"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:40:29.64357716Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:991ef1eb32066c2eb2afd7e006dda9f43baba369de970796bf135ee402a90c1b",
-			"MachineKey": "mkey:de01b4794734e9ba9cfd817573bfad6a394bb56e7e792e49bcd96f4cbe22ad02",
-			"Peers": [{
-				"ID":         6219028762173087,
-				"StableID":   "nUhgeiLcZq11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a40e941085b46256752b4148b3983ed36568b7d11df9a2d455224cb5f207bf7a",
-				"DiscoKey":   "discokey:a8685aa12e4dbf505b7dd9fa5c16d48f39d37dae69f8349f443669efa241345b",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:48554", "10.65.0.27:48554", "172.17.0.1:48554"],
-				"HomeDERP":   4,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:40:26.378846417Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3208432747760686,
-				"StableID":   "nuv9A6674S11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:244748a9033f40e1e03fdc871eca6a65bae087105da20b63918ca9efbc9c606c",
-				"DiscoKey":   "discokey:b1e2f84e3cee98ffde88136d1e8b104068ef69927a9ca3017c9162c7ae6e3b08",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:59871", "10.65.0.27:59871", "172.17.0.1:59871"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:40:26.947043731Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6448362382892149,
-				"StableID":   "na71QdYUMs11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:a58bdce8faed6f7f88705876ac8469f02acf26231f7c28163003dee20653320f",
-				"DiscoKey":   "discokey:fe9d35ff841919e28fd0219e44295d2d8584602aca2b37d088860ddc81e4a20a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:58780", "10.65.0.27:58780", "172.17.0.1:58780"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:40:27.469509292Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         2445091498568094,
-				"StableID":   "nyiYudQP6L11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e548ffd10922f4ba5d0274e3dae419ac9b205b6ad5a08e5df160cae4323b8344",
-				"DiscoKey":   "discokey:354656e086dac658592141532cf2b05adf1fdf3fce866c9d2028f203f6e90e48",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:39532", "10.65.0.27:39532", "172.17.0.1:39532"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:40:28.014808421Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8690937865126243,
-				"StableID":   "n4oWRdC9sA21CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:61e836596c68c789239750471d1f6d5916507a0f461b2b1af4fa9c374fe3a749",
-				"DiscoKey":   "discokey:d08fe1d51311e9e0074f9f24e7fb5f68550b2e33d01548738da386398b3c3221",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:44060", "10.65.0.27:44060", "172.17.0.1:44060"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:40:28.597199927Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5047734037343976,
-				"StableID":   "noQAjzQ8Rg11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:d57e32d963af5af24927e2ffb28a8545e53554bd30e427b3b799f4cb6e13f270",
-				"KeyExpiry":  "2026-11-03T08:40:29Z",
-				"DiscoKey":   "discokey:f9ce3e0ae4e95f3482ebb4b81366b1f8b6ce0afd8258ab5ae2247886a9ff6068",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42026", "10.65.0.27:42026", "172.17.0.1:42026"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:40:29.098319486Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         2483272046594638,
-				"StableID":   "nTh8C4MgPL11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0a5cc1e84186c9a087f8e156971c121b28f2ef64cce28a7421c64e2deec27c45",
-				"KeyExpiry":  "2026-11-03T08:40:30Z",
-				"DiscoKey":   "discokey:d368ce7cfb15773de9b1231f30bd1afe7f25afe3b2941cc7b84dbd76e8170f44",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:42656", "10.65.0.27:42656", "172.17.0.1:42656"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:40:30.19730235Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a9-prefix.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a9-prefix.hujson
deleted file mode 100644
index e88246542..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-target-a9-prefix.hujson
+++ /dev/null
@@ -1,8823 +0,0 @@
-// nodeattrs-target-a9-prefix
-//
-// raw CIDR prefix target
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:41:01Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-target-a9-prefix",
-	"description":    "raw CIDR prefix target",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:41:01.157903546Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                             \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"raw CIDR prefix target\",\n    \"id\": \"nodeattrs-target-a9-prefix\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"randomize-client-port\"\n                ],\n                \"target\": [\n                    \"100.64.0.10/32\"\n                ]\n            }\n        ],\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-target-a9-prefix.hujson",
-		"full_policy": {
-			"nodeAttrs": [{"attr": ["randomize-client-port"], "target": ["100.64.0.10/32"]}],
-			"tagOwners": {
-				"tag:client": ["odin@example.com"],
-				"tag:exit":   ["odin@example.com"],
-				"tag:prod":   ["odin@example.com"],
-				"tag:router": ["odin@example.com"],
-				"tag:server": ["odin@example.com"]
-			}
-		}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4374191125502476,
-				"StableID":   "nMbi3ra5Ab11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       4374191125502476,
-				"Key":        "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-				"DiscoKey":   "discokey:d259e075cba3e05c9b0c10a12b6c90547ba9da0f6a042dc6d058a8dc8ee4fa04",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:40645", "10.65.0.27:40645", "172.17.0.1:40645"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:06.732944575Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-			"MachineKey": "mkey:63494ae7e87e5009f9ecc084de861cb2eb5488816d27b89431574bf395ef4164",
-			"Peers": [{
-				"ID":         5857379429632678,
-				"StableID":   "nFyVYfRpjn11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-				"DiscoKey":   "discokey:381befd5daae19df5be98c5198ece173cf1c2c06de0f38bd02b75a97ac1b8548",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54189", "10.65.0.27:54189", "172.17.0.1:54189"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:07.279073914Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8748244556805115,
-				"StableID":   "nUmfXuY6KB21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-				"DiscoKey":   "discokey:991435d3b59979ba214695866da068d6b15c4859b4d208d6d3b9c1f1b6d2724a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:37232", "10.65.0.27:37232", "172.17.0.1:37232"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:07.812994582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6954360029806353,
-				"StableID":   "nJRKkEFeJw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-				"DiscoKey":   "discokey:cd4043449c88c5386802e0de086ce09d90862c4c85774c4b4118bde058e86770",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57879", "10.65.0.27:57879", "172.17.0.1:57879"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:08.346326032Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1519261687688078,
-				"StableID":   "noKgsqR5sC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-				"DiscoKey":   "discokey:517b23987e2836e14ab3836ea5de0881340b7d9eb189547e562328e63379970d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37744", "10.65.0.27:37744", "172.17.0.1:37744"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:08.878536046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         301775227139237,
-				"StableID":   "n4UcSA8gM311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:3e1655676daebed02719f86f271581357f68f3ab6d90fa03eead8a270b659f06",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42868", "10.65.0.27:42868", "172.17.0.1:42868"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:09.414730802Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3510403929207815,
-				"StableID":   "npBpQoMsQU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:0027859df2635af38b83c17f2a3d1e87a52eb53c95df3dba14771b4bb51fc46f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48299", "10.65.0.27:48299", "172.17.0.1:48299"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:09.962149804Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5193340743569564,
-				"StableID":   "n7pTknF5Zh11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-				"KeyExpiry":  "2026-11-03T08:41:10Z",
-				"DiscoKey":   "discokey:8d619a87c5b0ad8226c6510fdd852a879846b1abe6dba61ee0f5ba8fc3df2d23",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34771", "10.65.0.27:34771", "172.17.0.1:34771"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:10.488702771Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4374191125502476": {
-				"ID":          4374191125502476,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5857379429632678,
-				"StableID":   "nFyVYfRpjn11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       5857379429632678,
-				"Key":        "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-				"DiscoKey":   "discokey:381befd5daae19df5be98c5198ece173cf1c2c06de0f38bd02b75a97ac1b8548",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54189", "10.65.0.27:54189", "172.17.0.1:54189"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:41:07.279073914Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-			"MachineKey": "mkey:f777b1e8c8c6af82f97ea4f44751f57e8cef8950cfb223a13c4820e0419a3c69",
-			"Peers": [{
-				"ID":         4374191125502476,
-				"StableID":   "nMbi3ra5Ab11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-				"DiscoKey":   "discokey:d259e075cba3e05c9b0c10a12b6c90547ba9da0f6a042dc6d058a8dc8ee4fa04",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:40645", "10.65.0.27:40645", "172.17.0.1:40645"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:06.732944575Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8748244556805115,
-				"StableID":   "nUmfXuY6KB21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-				"DiscoKey":   "discokey:991435d3b59979ba214695866da068d6b15c4859b4d208d6d3b9c1f1b6d2724a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:37232", "10.65.0.27:37232", "172.17.0.1:37232"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:07.812994582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6954360029806353,
-				"StableID":   "nJRKkEFeJw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-				"DiscoKey":   "discokey:cd4043449c88c5386802e0de086ce09d90862c4c85774c4b4118bde058e86770",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57879", "10.65.0.27:57879", "172.17.0.1:57879"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:08.346326032Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1519261687688078,
-				"StableID":   "noKgsqR5sC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-				"DiscoKey":   "discokey:517b23987e2836e14ab3836ea5de0881340b7d9eb189547e562328e63379970d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37744", "10.65.0.27:37744", "172.17.0.1:37744"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:08.878536046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         301775227139237,
-				"StableID":   "n4UcSA8gM311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:3e1655676daebed02719f86f271581357f68f3ab6d90fa03eead8a270b659f06",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42868", "10.65.0.27:42868", "172.17.0.1:42868"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:09.414730802Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3510403929207815,
-				"StableID":   "npBpQoMsQU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:0027859df2635af38b83c17f2a3d1e87a52eb53c95df3dba14771b4bb51fc46f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48299", "10.65.0.27:48299", "172.17.0.1:48299"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:09.962149804Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5193340743569564,
-				"StableID":   "n7pTknF5Zh11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-				"KeyExpiry":  "2026-11-03T08:41:10Z",
-				"DiscoKey":   "discokey:8d619a87c5b0ad8226c6510fdd852a879846b1abe6dba61ee0f5ba8fc3df2d23",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34771", "10.65.0.27:34771", "172.17.0.1:34771"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:10.488702771Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5857379429632678": {
-				"ID":          5857379429632678,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         301775227139237,
-				"StableID":   "n4UcSA8gM311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:3e1655676daebed02719f86f271581357f68f3ab6d90fa03eead8a270b659f06",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42868", "10.65.0.27:42868", "172.17.0.1:42868"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:09.414730802Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-			"MachineKey": "mkey:5033d2d244ac3ae1e8c1de65864ef4adf6bd079bcda2a71e94340390d8ca5372",
-			"Peers": [{
-				"ID":         4374191125502476,
-				"StableID":   "nMbi3ra5Ab11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-				"DiscoKey":   "discokey:d259e075cba3e05c9b0c10a12b6c90547ba9da0f6a042dc6d058a8dc8ee4fa04",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:40645", "10.65.0.27:40645", "172.17.0.1:40645"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:06.732944575Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5857379429632678,
-				"StableID":   "nFyVYfRpjn11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-				"DiscoKey":   "discokey:381befd5daae19df5be98c5198ece173cf1c2c06de0f38bd02b75a97ac1b8548",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54189", "10.65.0.27:54189", "172.17.0.1:54189"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:07.279073914Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8748244556805115,
-				"StableID":   "nUmfXuY6KB21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-				"DiscoKey":   "discokey:991435d3b59979ba214695866da068d6b15c4859b4d208d6d3b9c1f1b6d2724a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:37232", "10.65.0.27:37232", "172.17.0.1:37232"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:07.812994582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6954360029806353,
-				"StableID":   "nJRKkEFeJw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-				"DiscoKey":   "discokey:cd4043449c88c5386802e0de086ce09d90862c4c85774c4b4118bde058e86770",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57879", "10.65.0.27:57879", "172.17.0.1:57879"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:08.346326032Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1519261687688078,
-				"StableID":   "noKgsqR5sC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-				"DiscoKey":   "discokey:517b23987e2836e14ab3836ea5de0881340b7d9eb189547e562328e63379970d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37744", "10.65.0.27:37744", "172.17.0.1:37744"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:08.878536046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         3510403929207815,
-				"StableID":   "npBpQoMsQU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:0027859df2635af38b83c17f2a3d1e87a52eb53c95df3dba14771b4bb51fc46f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48299", "10.65.0.27:48299", "172.17.0.1:48299"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:09.962149804Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5193340743569564,
-				"StableID":   "n7pTknF5Zh11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-				"KeyExpiry":  "2026-11-03T08:41:10Z",
-				"DiscoKey":   "discokey:8d619a87c5b0ad8226c6510fdd852a879846b1abe6dba61ee0f5ba8fc3df2d23",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34771", "10.65.0.27:34771", "172.17.0.1:34771"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:10.488702771Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8748244556805115,
-				"StableID":   "nUmfXuY6KB21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       8748244556805115,
-				"Key":        "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-				"DiscoKey":   "discokey:991435d3b59979ba214695866da068d6b15c4859b4d208d6d3b9c1f1b6d2724a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:37232", "10.65.0.27:37232", "172.17.0.1:37232"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:07.812994582Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-			"MachineKey": "mkey:1b4b266d9d6e114ee185166459b246f795a7e639ec948bcc108b3003d057a34c",
-			"Peers": [{
-				"ID":         4374191125502476,
-				"StableID":   "nMbi3ra5Ab11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-				"DiscoKey":   "discokey:d259e075cba3e05c9b0c10a12b6c90547ba9da0f6a042dc6d058a8dc8ee4fa04",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:40645", "10.65.0.27:40645", "172.17.0.1:40645"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:06.732944575Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5857379429632678,
-				"StableID":   "nFyVYfRpjn11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-				"DiscoKey":   "discokey:381befd5daae19df5be98c5198ece173cf1c2c06de0f38bd02b75a97ac1b8548",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54189", "10.65.0.27:54189", "172.17.0.1:54189"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:07.279073914Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         6954360029806353,
-				"StableID":   "nJRKkEFeJw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-				"DiscoKey":   "discokey:cd4043449c88c5386802e0de086ce09d90862c4c85774c4b4118bde058e86770",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57879", "10.65.0.27:57879", "172.17.0.1:57879"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:08.346326032Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1519261687688078,
-				"StableID":   "noKgsqR5sC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-				"DiscoKey":   "discokey:517b23987e2836e14ab3836ea5de0881340b7d9eb189547e562328e63379970d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37744", "10.65.0.27:37744", "172.17.0.1:37744"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:08.878536046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         301775227139237,
-				"StableID":   "n4UcSA8gM311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:3e1655676daebed02719f86f271581357f68f3ab6d90fa03eead8a270b659f06",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42868", "10.65.0.27:42868", "172.17.0.1:42868"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:09.414730802Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3510403929207815,
-				"StableID":   "npBpQoMsQU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:0027859df2635af38b83c17f2a3d1e87a52eb53c95df3dba14771b4bb51fc46f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48299", "10.65.0.27:48299", "172.17.0.1:48299"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:09.962149804Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5193340743569564,
-				"StableID":   "n7pTknF5Zh11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-				"KeyExpiry":  "2026-11-03T08:41:10Z",
-				"DiscoKey":   "discokey:8d619a87c5b0ad8226c6510fdd852a879846b1abe6dba61ee0f5ba8fc3df2d23",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34771", "10.65.0.27:34771", "172.17.0.1:34771"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:10.488702771Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8748244556805115": {
-				"ID":          8748244556805115,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6954360029806353,
-				"StableID":   "nJRKkEFeJw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       6954360029806353,
-				"Key":        "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-				"DiscoKey":   "discokey:cd4043449c88c5386802e0de086ce09d90862c4c85774c4b4118bde058e86770",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57879", "10.65.0.27:57879", "172.17.0.1:57879"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:41:08.346326032Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-			"MachineKey": "mkey:0515a4172ce37e8524c80492b4e14b6ba2a8ece727721e44e5777dab8a9fb037",
-			"Peers": [{
-				"ID":         4374191125502476,
-				"StableID":   "nMbi3ra5Ab11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-				"DiscoKey":   "discokey:d259e075cba3e05c9b0c10a12b6c90547ba9da0f6a042dc6d058a8dc8ee4fa04",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:40645", "10.65.0.27:40645", "172.17.0.1:40645"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:06.732944575Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5857379429632678,
-				"StableID":   "nFyVYfRpjn11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-				"DiscoKey":   "discokey:381befd5daae19df5be98c5198ece173cf1c2c06de0f38bd02b75a97ac1b8548",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54189", "10.65.0.27:54189", "172.17.0.1:54189"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:07.279073914Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8748244556805115,
-				"StableID":   "nUmfXuY6KB21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-				"DiscoKey":   "discokey:991435d3b59979ba214695866da068d6b15c4859b4d208d6d3b9c1f1b6d2724a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:37232", "10.65.0.27:37232", "172.17.0.1:37232"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:07.812994582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         1519261687688078,
-				"StableID":   "noKgsqR5sC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-				"DiscoKey":   "discokey:517b23987e2836e14ab3836ea5de0881340b7d9eb189547e562328e63379970d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37744", "10.65.0.27:37744", "172.17.0.1:37744"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:08.878536046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         301775227139237,
-				"StableID":   "n4UcSA8gM311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:3e1655676daebed02719f86f271581357f68f3ab6d90fa03eead8a270b659f06",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42868", "10.65.0.27:42868", "172.17.0.1:42868"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:09.414730802Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3510403929207815,
-				"StableID":   "npBpQoMsQU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:0027859df2635af38b83c17f2a3d1e87a52eb53c95df3dba14771b4bb51fc46f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48299", "10.65.0.27:48299", "172.17.0.1:48299"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:09.962149804Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5193340743569564,
-				"StableID":   "n7pTknF5Zh11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-				"KeyExpiry":  "2026-11-03T08:41:10Z",
-				"DiscoKey":   "discokey:8d619a87c5b0ad8226c6510fdd852a879846b1abe6dba61ee0f5ba8fc3df2d23",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34771", "10.65.0.27:34771", "172.17.0.1:34771"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:10.488702771Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "6954360029806353": {
-				"ID":          6954360029806353,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         1519261687688078,
-				"StableID":   "noKgsqR5sC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1519261687688078,
-				"Key":        "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-				"DiscoKey":   "discokey:517b23987e2836e14ab3836ea5de0881340b7d9eb189547e562328e63379970d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37744", "10.65.0.27:37744", "172.17.0.1:37744"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:08.878536046Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-			"MachineKey": "mkey:c98ded2d98c6251b91e5f1af264c9dae0bf5634863b621d82edfeea7b8ae6420",
-			"Peers": [{
-				"ID":         4374191125502476,
-				"StableID":   "nMbi3ra5Ab11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-				"DiscoKey":   "discokey:d259e075cba3e05c9b0c10a12b6c90547ba9da0f6a042dc6d058a8dc8ee4fa04",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:40645", "10.65.0.27:40645", "172.17.0.1:40645"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:06.732944575Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5857379429632678,
-				"StableID":   "nFyVYfRpjn11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-				"DiscoKey":   "discokey:381befd5daae19df5be98c5198ece173cf1c2c06de0f38bd02b75a97ac1b8548",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54189", "10.65.0.27:54189", "172.17.0.1:54189"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:07.279073914Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8748244556805115,
-				"StableID":   "nUmfXuY6KB21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-				"DiscoKey":   "discokey:991435d3b59979ba214695866da068d6b15c4859b4d208d6d3b9c1f1b6d2724a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:37232", "10.65.0.27:37232", "172.17.0.1:37232"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:07.812994582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6954360029806353,
-				"StableID":   "nJRKkEFeJw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-				"DiscoKey":   "discokey:cd4043449c88c5386802e0de086ce09d90862c4c85774c4b4118bde058e86770",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57879", "10.65.0.27:57879", "172.17.0.1:57879"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:08.346326032Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         301775227139237,
-				"StableID":   "n4UcSA8gM311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:3e1655676daebed02719f86f271581357f68f3ab6d90fa03eead8a270b659f06",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42868", "10.65.0.27:42868", "172.17.0.1:42868"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:09.414730802Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3510403929207815,
-				"StableID":   "npBpQoMsQU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:0027859df2635af38b83c17f2a3d1e87a52eb53c95df3dba14771b4bb51fc46f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48299", "10.65.0.27:48299", "172.17.0.1:48299"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:09.962149804Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         5193340743569564,
-				"StableID":   "n7pTknF5Zh11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-				"KeyExpiry":  "2026-11-03T08:41:10Z",
-				"DiscoKey":   "discokey:8d619a87c5b0ad8226c6510fdd852a879846b1abe6dba61ee0f5ba8fc3df2d23",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34771", "10.65.0.27:34771", "172.17.0.1:34771"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:10.488702771Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "1519261687688078": {
-				"ID":          1519261687688078,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5193340743569564,
-				"StableID":   "n7pTknF5Zh11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-				"KeyExpiry":  "2026-11-03T08:41:10Z",
-				"DiscoKey":   "discokey:8d619a87c5b0ad8226c6510fdd852a879846b1abe6dba61ee0f5ba8fc3df2d23",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34771", "10.65.0.27:34771", "172.17.0.1:34771"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:10.488702771Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-			"MachineKey": "mkey:85aa60a6d7944ccc82e73bcb478b69236915e59cf681bf6d7d663acfca57d84a",
-			"Peers": [{
-				"ID":         4374191125502476,
-				"StableID":   "nMbi3ra5Ab11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-				"DiscoKey":   "discokey:d259e075cba3e05c9b0c10a12b6c90547ba9da0f6a042dc6d058a8dc8ee4fa04",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:40645", "10.65.0.27:40645", "172.17.0.1:40645"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:06.732944575Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5857379429632678,
-				"StableID":   "nFyVYfRpjn11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-				"DiscoKey":   "discokey:381befd5daae19df5be98c5198ece173cf1c2c06de0f38bd02b75a97ac1b8548",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54189", "10.65.0.27:54189", "172.17.0.1:54189"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:07.279073914Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8748244556805115,
-				"StableID":   "nUmfXuY6KB21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-				"DiscoKey":   "discokey:991435d3b59979ba214695866da068d6b15c4859b4d208d6d3b9c1f1b6d2724a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:37232", "10.65.0.27:37232", "172.17.0.1:37232"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:07.812994582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6954360029806353,
-				"StableID":   "nJRKkEFeJw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-				"DiscoKey":   "discokey:cd4043449c88c5386802e0de086ce09d90862c4c85774c4b4118bde058e86770",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57879", "10.65.0.27:57879", "172.17.0.1:57879"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:08.346326032Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1519261687688078,
-				"StableID":   "noKgsqR5sC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-				"DiscoKey":   "discokey:517b23987e2836e14ab3836ea5de0881340b7d9eb189547e562328e63379970d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37744", "10.65.0.27:37744", "172.17.0.1:37744"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:08.878536046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         301775227139237,
-				"StableID":   "n4UcSA8gM311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:3e1655676daebed02719f86f271581357f68f3ab6d90fa03eead8a270b659f06",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42868", "10.65.0.27:42868", "172.17.0.1:42868"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:09.414730802Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         3510403929207815,
-				"StableID":   "npBpQoMsQU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:0027859df2635af38b83c17f2a3d1e87a52eb53c95df3dba14771b4bb51fc46f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48299", "10.65.0.27:48299", "172.17.0.1:48299"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:09.962149804Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3510403929207815,
-				"StableID":   "npBpQoMsQU11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:0027859df2635af38b83c17f2a3d1e87a52eb53c95df3dba14771b4bb51fc46f",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:48299", "10.65.0.27:48299", "172.17.0.1:48299"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:09.962149804Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:9311e98a656a3b0d91427e61849cd0ffd0284726829c8ac8bd16b677dde27e16",
-			"MachineKey": "mkey:bbf426d842c099ac6bfc972de34d6ba5f6e44ba67019207c15f0a9e452e0bd38",
-			"Peers": [{
-				"ID":         4374191125502476,
-				"StableID":   "nMbi3ra5Ab11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e754a6331a7610fdb5943edf887a043b305d74c1933bd47a8788ae32ac71fd47",
-				"DiscoKey":   "discokey:d259e075cba3e05c9b0c10a12b6c90547ba9da0f6a042dc6d058a8dc8ee4fa04",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:40645", "10.65.0.27:40645", "172.17.0.1:40645"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:06.732944575Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5857379429632678,
-				"StableID":   "nFyVYfRpjn11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:5be9a597fa69e2bde16e9b69c8fa72a792b9765d454e8ee5b2b3e0658296e67d",
-				"DiscoKey":   "discokey:381befd5daae19df5be98c5198ece173cf1c2c06de0f38bd02b75a97ac1b8548",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:54189", "10.65.0.27:54189", "172.17.0.1:54189"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:07.279073914Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         8748244556805115,
-				"StableID":   "nUmfXuY6KB21CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e33e7a1a83c94e9b602f6dea4c44cb48a85c02d18e701260b1fd811741e9cb60",
-				"DiscoKey":   "discokey:991435d3b59979ba214695866da068d6b15c4859b4d208d6d3b9c1f1b6d2724a",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:37232", "10.65.0.27:37232", "172.17.0.1:37232"],
-				"HomeDERP":   8,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:07.812994582Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         6954360029806353,
-				"StableID":   "nJRKkEFeJw11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:12921b5487ea162e30f44d0b4e02f7073d889318db9880ce77c9250d8e72ea22",
-				"DiscoKey":   "discokey:cd4043449c88c5386802e0de086ce09d90862c4c85774c4b4118bde058e86770",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:57879", "10.65.0.27:57879", "172.17.0.1:57879"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:08.346326032Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         1519261687688078,
-				"StableID":   "noKgsqR5sC11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:53ca06b100766634e7f9667d1dda03e89670b52d245835bf54d7710ab7927802",
-				"DiscoKey":   "discokey:517b23987e2836e14ab3836ea5de0881340b7d9eb189547e562328e63379970d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:37744", "10.65.0.27:37744", "172.17.0.1:37744"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:08.878536046Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         301775227139237,
-				"StableID":   "n4UcSA8gM311CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:225e7d2d47f1dd0453f55c4b143d4886c09e207660009b2def8d3d10b4fee004",
-				"KeyExpiry":  "2026-11-03T08:41:09Z",
-				"DiscoKey":   "discokey:3e1655676daebed02719f86f271581357f68f3ab6d90fa03eead8a270b659f06",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:42868", "10.65.0.27:42868", "172.17.0.1:42868"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:09.414730802Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5193340743569564,
-				"StableID":   "n7pTknF5Zh11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:e5eb1b27dabcf7d463a8d6f74ba256ed60562a9a30d443eec1d713b4941eea24",
-				"KeyExpiry":  "2026-11-03T08:41:10Z",
-				"DiscoKey":   "discokey:8d619a87c5b0ad8226c6510fdd852a879846b1abe6dba61ee0f5ba8fc3df2d23",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:34771", "10.65.0.27:34771", "172.17.0.1:34771"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:10.488702771Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-toplevel-randomize-client-port.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-toplevel-randomize-client-port.hujson
deleted file mode 100644
index 0b3fc60e4..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-toplevel-randomize-client-port.hujson
+++ /dev/null
@@ -1,8834 +0,0 @@
-// nodeattrs-toplevel-randomize-client-port
-//
-// top-level randomizeClientPort: true stamps every node
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:41:41Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-toplevel-randomize-client-port",
-	"description":    "top-level randomizeClientPort: true stamps every node",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:41:41.471163996Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                           \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"top-level randomizeClientPort: true stamps every node\",\n    \"id\": \"nodeattrs-toplevel-randomize-client-port\",\n    \"options\": {},\n    \"policy\": {\n        \"randomizeClientPort\": true,\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-toplevel-randomize-client-port.hujson",
-		"full_policy": {"randomizeClientPort": true, "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7281941732115783,
-				"StableID":   "netg2AG1sy11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       7281941732115783,
-				"Key":        "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-				"DiscoKey":   "discokey:d9252c2a28447cbafac218440e1076b319a8f1e50190b78b50c566e2b9da4246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39366", "10.65.0.27:39366", "172.17.0.1:39366"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:46.912730396Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-			"MachineKey": "mkey:f081e37e4ba7af7c6a37293423eb2e0d53d69aa54f82fb506a7f9e0ea992fc3a",
-			"Peers": [{
-				"ID":         3637995579583122,
-				"StableID":   "nPRxdYyeQV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-				"DiscoKey":   "discokey:0475147bb998432860bb1266bd8bdb0f55b7208d8b18d93867967fb9a19aad65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34150", "10.65.0.27:34150", "172.17.0.1:34150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:47.437026577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5638129871989319,
-				"StableID":   "nnUJvS7X2m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-				"DiscoKey":   "discokey:867568c66e376e47a61ac683c312838a895d8615df6b010a81f8f1c480ca7966",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48656", "10.65.0.27:48656", "172.17.0.1:48656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:47.986305621Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         894658133067575,
-				"StableID":   "n2iAcp9Cz711CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-				"DiscoKey":   "discokey:c23c15964d2e6ced856a3aadef80532e409625a4397cc57427a7d9cd7704fb69",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:55757", "10.65.0.27:55757", "172.17.0.1:55757"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:48.502322711Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4037700469873289,
-				"StableID":   "nvRt4bYgXY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-				"DiscoKey":   "discokey:f8913768c701f87388b5f34604837884dd0c6778ba6888bc7000032917993209",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60173", "10.65.0.27:60173", "172.17.0.1:60173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:49.027704916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5379743632838756,
-				"StableID":   "nTQWm5kV1j11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-				"KeyExpiry":  "2026-11-03T08:41:49Z",
-				"DiscoKey":   "discokey:5010282929acc3b1dc9dc07f45d18d85095042fa4f7d44ce8c84d97f3a81201e",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48857", "10.65.0.27:48857", "172.17.0.1:48857"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:49.571068216Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5362660685596294,
-				"StableID":   "nZAcDA1msi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:f973398d228a91c3e6c032427ab0f5ba69ad195641f8650b8856bdd988129a0e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42899", "10.65.0.27:42899", "172.17.0.1:42899"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:50.105980388Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8507813512289860,
-				"StableID":   "nZBfSPqCS921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:e31772f93b8b757952bb53c887e971103fde1d9aebbfa130c54a6edbb32ef87c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39587", "10.65.0.27:39587", "172.17.0.1:39587"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:50.634591782Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7281941732115783": {
-				"ID":          7281941732115783,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         3637995579583122,
-				"StableID":   "nPRxdYyeQV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       3637995579583122,
-				"Key":        "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-				"DiscoKey":   "discokey:0475147bb998432860bb1266bd8bdb0f55b7208d8b18d93867967fb9a19aad65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34150", "10.65.0.27:34150", "172.17.0.1:34150"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:41:47.437026577Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-			"MachineKey": "mkey:9d10e4b1eda1c61a324907dbc4cae4ca3ac61c01149807b9ef66d8cdf2bbed4c",
-			"Peers": [{
-				"ID":         7281941732115783,
-				"StableID":   "netg2AG1sy11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-				"DiscoKey":   "discokey:d9252c2a28447cbafac218440e1076b319a8f1e50190b78b50c566e2b9da4246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39366", "10.65.0.27:39366", "172.17.0.1:39366"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:46.912730396Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         5638129871989319,
-				"StableID":   "nnUJvS7X2m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-				"DiscoKey":   "discokey:867568c66e376e47a61ac683c312838a895d8615df6b010a81f8f1c480ca7966",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48656", "10.65.0.27:48656", "172.17.0.1:48656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:47.986305621Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         894658133067575,
-				"StableID":   "n2iAcp9Cz711CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-				"DiscoKey":   "discokey:c23c15964d2e6ced856a3aadef80532e409625a4397cc57427a7d9cd7704fb69",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:55757", "10.65.0.27:55757", "172.17.0.1:55757"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:48.502322711Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4037700469873289,
-				"StableID":   "nvRt4bYgXY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-				"DiscoKey":   "discokey:f8913768c701f87388b5f34604837884dd0c6778ba6888bc7000032917993209",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60173", "10.65.0.27:60173", "172.17.0.1:60173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:49.027704916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5379743632838756,
-				"StableID":   "nTQWm5kV1j11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-				"KeyExpiry":  "2026-11-03T08:41:49Z",
-				"DiscoKey":   "discokey:5010282929acc3b1dc9dc07f45d18d85095042fa4f7d44ce8c84d97f3a81201e",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48857", "10.65.0.27:48857", "172.17.0.1:48857"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:49.571068216Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5362660685596294,
-				"StableID":   "nZAcDA1msi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:f973398d228a91c3e6c032427ab0f5ba69ad195641f8650b8856bdd988129a0e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42899", "10.65.0.27:42899", "172.17.0.1:42899"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:50.105980388Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8507813512289860,
-				"StableID":   "nZBfSPqCS921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:e31772f93b8b757952bb53c887e971103fde1d9aebbfa130c54a6edbb32ef87c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39587", "10.65.0.27:39587", "172.17.0.1:39587"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:50.634591782Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3637995579583122": {
-				"ID":          3637995579583122,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5379743632838756,
-				"StableID":   "nTQWm5kV1j11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-				"KeyExpiry":  "2026-11-03T08:41:49Z",
-				"DiscoKey":   "discokey:5010282929acc3b1dc9dc07f45d18d85095042fa4f7d44ce8c84d97f3a81201e",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48857", "10.65.0.27:48857", "172.17.0.1:48857"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:49.571068216Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-			"MachineKey": "mkey:6c998e0451ca7edb0bae022a662602ce9d3c99872dc41bda76c92f99271c5f4a",
-			"Peers": [{
-				"ID":         7281941732115783,
-				"StableID":   "netg2AG1sy11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-				"DiscoKey":   "discokey:d9252c2a28447cbafac218440e1076b319a8f1e50190b78b50c566e2b9da4246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39366", "10.65.0.27:39366", "172.17.0.1:39366"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:46.912730396Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3637995579583122,
-				"StableID":   "nPRxdYyeQV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-				"DiscoKey":   "discokey:0475147bb998432860bb1266bd8bdb0f55b7208d8b18d93867967fb9a19aad65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34150", "10.65.0.27:34150", "172.17.0.1:34150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:47.437026577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5638129871989319,
-				"StableID":   "nnUJvS7X2m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-				"DiscoKey":   "discokey:867568c66e376e47a61ac683c312838a895d8615df6b010a81f8f1c480ca7966",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48656", "10.65.0.27:48656", "172.17.0.1:48656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:47.986305621Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         894658133067575,
-				"StableID":   "n2iAcp9Cz711CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-				"DiscoKey":   "discokey:c23c15964d2e6ced856a3aadef80532e409625a4397cc57427a7d9cd7704fb69",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:55757", "10.65.0.27:55757", "172.17.0.1:55757"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:48.502322711Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4037700469873289,
-				"StableID":   "nvRt4bYgXY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-				"DiscoKey":   "discokey:f8913768c701f87388b5f34604837884dd0c6778ba6888bc7000032917993209",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60173", "10.65.0.27:60173", "172.17.0.1:60173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:49.027704916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5362660685596294,
-				"StableID":   "nZAcDA1msi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:f973398d228a91c3e6c032427ab0f5ba69ad195641f8650b8856bdd988129a0e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42899", "10.65.0.27:42899", "172.17.0.1:42899"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:50.105980388Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8507813512289860,
-				"StableID":   "nZBfSPqCS921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:e31772f93b8b757952bb53c887e971103fde1d9aebbfa130c54a6edbb32ef87c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39587", "10.65.0.27:39587", "172.17.0.1:39587"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:50.634591782Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5638129871989319,
-				"StableID":   "nnUJvS7X2m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       5638129871989319,
-				"Key":        "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-				"DiscoKey":   "discokey:867568c66e376e47a61ac683c312838a895d8615df6b010a81f8f1c480ca7966",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48656", "10.65.0.27:48656", "172.17.0.1:48656"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:47.986305621Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-			"MachineKey": "mkey:00d715177ad9b079062045d029c7f8e8747ea6c42d8776d39a1c911ce22fac10",
-			"Peers": [{
-				"ID":         7281941732115783,
-				"StableID":   "netg2AG1sy11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-				"DiscoKey":   "discokey:d9252c2a28447cbafac218440e1076b319a8f1e50190b78b50c566e2b9da4246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39366", "10.65.0.27:39366", "172.17.0.1:39366"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:46.912730396Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3637995579583122,
-				"StableID":   "nPRxdYyeQV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-				"DiscoKey":   "discokey:0475147bb998432860bb1266bd8bdb0f55b7208d8b18d93867967fb9a19aad65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34150", "10.65.0.27:34150", "172.17.0.1:34150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:47.437026577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         894658133067575,
-				"StableID":   "n2iAcp9Cz711CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-				"DiscoKey":   "discokey:c23c15964d2e6ced856a3aadef80532e409625a4397cc57427a7d9cd7704fb69",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:55757", "10.65.0.27:55757", "172.17.0.1:55757"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:48.502322711Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4037700469873289,
-				"StableID":   "nvRt4bYgXY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-				"DiscoKey":   "discokey:f8913768c701f87388b5f34604837884dd0c6778ba6888bc7000032917993209",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60173", "10.65.0.27:60173", "172.17.0.1:60173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:49.027704916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5379743632838756,
-				"StableID":   "nTQWm5kV1j11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-				"KeyExpiry":  "2026-11-03T08:41:49Z",
-				"DiscoKey":   "discokey:5010282929acc3b1dc9dc07f45d18d85095042fa4f7d44ce8c84d97f3a81201e",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48857", "10.65.0.27:48857", "172.17.0.1:48857"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:49.571068216Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5362660685596294,
-				"StableID":   "nZAcDA1msi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:f973398d228a91c3e6c032427ab0f5ba69ad195641f8650b8856bdd988129a0e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42899", "10.65.0.27:42899", "172.17.0.1:42899"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:50.105980388Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8507813512289860,
-				"StableID":   "nZBfSPqCS921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:e31772f93b8b757952bb53c887e971103fde1d9aebbfa130c54a6edbb32ef87c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39587", "10.65.0.27:39587", "172.17.0.1:39587"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:50.634591782Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5638129871989319": {
-				"ID":          5638129871989319,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         894658133067575,
-				"StableID":   "n2iAcp9Cz711CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       894658133067575,
-				"Key":        "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-				"DiscoKey":   "discokey:c23c15964d2e6ced856a3aadef80532e409625a4397cc57427a7d9cd7704fb69",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:55757", "10.65.0.27:55757", "172.17.0.1:55757"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:41:48.502322711Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-			"MachineKey": "mkey:ca7966e366f2d3b0a20cec99bf1fde968786f930f505cd21d878fa05ae83fa0c",
-			"Peers": [{
-				"ID":         7281941732115783,
-				"StableID":   "netg2AG1sy11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-				"DiscoKey":   "discokey:d9252c2a28447cbafac218440e1076b319a8f1e50190b78b50c566e2b9da4246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39366", "10.65.0.27:39366", "172.17.0.1:39366"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:46.912730396Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3637995579583122,
-				"StableID":   "nPRxdYyeQV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-				"DiscoKey":   "discokey:0475147bb998432860bb1266bd8bdb0f55b7208d8b18d93867967fb9a19aad65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34150", "10.65.0.27:34150", "172.17.0.1:34150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:47.437026577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5638129871989319,
-				"StableID":   "nnUJvS7X2m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-				"DiscoKey":   "discokey:867568c66e376e47a61ac683c312838a895d8615df6b010a81f8f1c480ca7966",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48656", "10.65.0.27:48656", "172.17.0.1:48656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:47.986305621Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         4037700469873289,
-				"StableID":   "nvRt4bYgXY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-				"DiscoKey":   "discokey:f8913768c701f87388b5f34604837884dd0c6778ba6888bc7000032917993209",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60173", "10.65.0.27:60173", "172.17.0.1:60173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:49.027704916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5379743632838756,
-				"StableID":   "nTQWm5kV1j11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-				"KeyExpiry":  "2026-11-03T08:41:49Z",
-				"DiscoKey":   "discokey:5010282929acc3b1dc9dc07f45d18d85095042fa4f7d44ce8c84d97f3a81201e",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48857", "10.65.0.27:48857", "172.17.0.1:48857"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:49.571068216Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5362660685596294,
-				"StableID":   "nZAcDA1msi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:f973398d228a91c3e6c032427ab0f5ba69ad195641f8650b8856bdd988129a0e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42899", "10.65.0.27:42899", "172.17.0.1:42899"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:50.105980388Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8507813512289860,
-				"StableID":   "nZBfSPqCS921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:e31772f93b8b757952bb53c887e971103fde1d9aebbfa130c54a6edbb32ef87c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39587", "10.65.0.27:39587", "172.17.0.1:39587"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:50.634591782Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "894658133067575": {
-				"ID":          894658133067575,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         4037700469873289,
-				"StableID":   "nvRt4bYgXY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       4037700469873289,
-				"Key":        "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-				"DiscoKey":   "discokey:f8913768c701f87388b5f34604837884dd0c6778ba6888bc7000032917993209",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60173", "10.65.0.27:60173", "172.17.0.1:60173"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:49.027704916Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-			"MachineKey": "mkey:d80985608abe1df973e58ceaea8f5215e0c84703940e1d8bbb393a46d1570961",
-			"Peers": [{
-				"ID":         7281941732115783,
-				"StableID":   "netg2AG1sy11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-				"DiscoKey":   "discokey:d9252c2a28447cbafac218440e1076b319a8f1e50190b78b50c566e2b9da4246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39366", "10.65.0.27:39366", "172.17.0.1:39366"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:46.912730396Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3637995579583122,
-				"StableID":   "nPRxdYyeQV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-				"DiscoKey":   "discokey:0475147bb998432860bb1266bd8bdb0f55b7208d8b18d93867967fb9a19aad65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34150", "10.65.0.27:34150", "172.17.0.1:34150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:47.437026577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5638129871989319,
-				"StableID":   "nnUJvS7X2m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-				"DiscoKey":   "discokey:867568c66e376e47a61ac683c312838a895d8615df6b010a81f8f1c480ca7966",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48656", "10.65.0.27:48656", "172.17.0.1:48656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:47.986305621Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         894658133067575,
-				"StableID":   "n2iAcp9Cz711CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-				"DiscoKey":   "discokey:c23c15964d2e6ced856a3aadef80532e409625a4397cc57427a7d9cd7704fb69",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:55757", "10.65.0.27:55757", "172.17.0.1:55757"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:48.502322711Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         5379743632838756,
-				"StableID":   "nTQWm5kV1j11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-				"KeyExpiry":  "2026-11-03T08:41:49Z",
-				"DiscoKey":   "discokey:5010282929acc3b1dc9dc07f45d18d85095042fa4f7d44ce8c84d97f3a81201e",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48857", "10.65.0.27:48857", "172.17.0.1:48857"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:49.571068216Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5362660685596294,
-				"StableID":   "nZAcDA1msi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:f973398d228a91c3e6c032427ab0f5ba69ad195641f8650b8856bdd988129a0e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42899", "10.65.0.27:42899", "172.17.0.1:42899"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:50.105980388Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         8507813512289860,
-				"StableID":   "nZBfSPqCS921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:e31772f93b8b757952bb53c887e971103fde1d9aebbfa130c54a6edbb32ef87c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39587", "10.65.0.27:39587", "172.17.0.1:39587"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:50.634591782Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4037700469873289": {
-				"ID":          4037700469873289,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8507813512289860,
-				"StableID":   "nZBfSPqCS921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:e31772f93b8b757952bb53c887e971103fde1d9aebbfa130c54a6edbb32ef87c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39587", "10.65.0.27:39587", "172.17.0.1:39587"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:50.634591782Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-			"MachineKey": "mkey:05412a2446c1e023e7c331f79b287e720db07b3cffa40fb3b49f5d9f77713669",
-			"Peers": [{
-				"ID":         7281941732115783,
-				"StableID":   "netg2AG1sy11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-				"DiscoKey":   "discokey:d9252c2a28447cbafac218440e1076b319a8f1e50190b78b50c566e2b9da4246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39366", "10.65.0.27:39366", "172.17.0.1:39366"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:46.912730396Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3637995579583122,
-				"StableID":   "nPRxdYyeQV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-				"DiscoKey":   "discokey:0475147bb998432860bb1266bd8bdb0f55b7208d8b18d93867967fb9a19aad65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34150", "10.65.0.27:34150", "172.17.0.1:34150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:47.437026577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5638129871989319,
-				"StableID":   "nnUJvS7X2m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-				"DiscoKey":   "discokey:867568c66e376e47a61ac683c312838a895d8615df6b010a81f8f1c480ca7966",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48656", "10.65.0.27:48656", "172.17.0.1:48656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:47.986305621Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         894658133067575,
-				"StableID":   "n2iAcp9Cz711CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-				"DiscoKey":   "discokey:c23c15964d2e6ced856a3aadef80532e409625a4397cc57427a7d9cd7704fb69",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:55757", "10.65.0.27:55757", "172.17.0.1:55757"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:48.502322711Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4037700469873289,
-				"StableID":   "nvRt4bYgXY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-				"DiscoKey":   "discokey:f8913768c701f87388b5f34604837884dd0c6778ba6888bc7000032917993209",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60173", "10.65.0.27:60173", "172.17.0.1:60173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:49.027704916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5379743632838756,
-				"StableID":   "nTQWm5kV1j11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-				"KeyExpiry":  "2026-11-03T08:41:49Z",
-				"DiscoKey":   "discokey:5010282929acc3b1dc9dc07f45d18d85095042fa4f7d44ce8c84d97f3a81201e",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48857", "10.65.0.27:48857", "172.17.0.1:48857"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:49.571068216Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         5362660685596294,
-				"StableID":   "nZAcDA1msi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:f973398d228a91c3e6c032427ab0f5ba69ad195641f8650b8856bdd988129a0e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42899", "10.65.0.27:42899", "172.17.0.1:42899"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:41:50.105980388Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5362660685596294,
-				"StableID":   "nZAcDA1msi11CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:f973398d228a91c3e6c032427ab0f5ba69ad195641f8650b8856bdd988129a0e",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:42899", "10.65.0.27:42899", "172.17.0.1:42899"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:41:50.105980388Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:d371621b34ee436487b88980d008fd66ba98e96167fd4a8b6117b0c1b50bd035",
-			"MachineKey": "mkey:9118ef9429b1d91b08cbe0073f13e998201dddd2d00d606e08cfde863146fd4f",
-			"Peers": [{
-				"ID":         7281941732115783,
-				"StableID":   "netg2AG1sy11CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:84e0e93c4d18c13373d88229bdc6c5e14bc144771adb7458bc4c3396bd0b1b6b",
-				"DiscoKey":   "discokey:d9252c2a28447cbafac218440e1076b319a8f1e50190b78b50c566e2b9da4246",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:39366", "10.65.0.27:39366", "172.17.0.1:39366"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:41:46.912730396Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         3637995579583122,
-				"StableID":   "nPRxdYyeQV11CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:25b980ad869e94dc91fe4ba090b65a275d7b10f73f3d3453e45788bbdc9a045f",
-				"DiscoKey":   "discokey:0475147bb998432860bb1266bd8bdb0f55b7208d8b18d93867967fb9a19aad65",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:34150", "10.65.0.27:34150", "172.17.0.1:34150"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:41:47.437026577Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5638129871989319,
-				"StableID":   "nnUJvS7X2m11CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:e03fd49109ca0ad5cd1b6802829893981f4e8b0901d960e07527bee15c565075",
-				"DiscoKey":   "discokey:867568c66e376e47a61ac683c312838a895d8615df6b010a81f8f1c480ca7966",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:48656", "10.65.0.27:48656", "172.17.0.1:48656"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:41:47.986305621Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         894658133067575,
-				"StableID":   "n2iAcp9Cz711CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:672672115d71a981d65cc99476303b67906d9f83c0cf231c6112ebafe021db79",
-				"DiscoKey":   "discokey:c23c15964d2e6ced856a3aadef80532e409625a4397cc57427a7d9cd7704fb69",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:55757", "10.65.0.27:55757", "172.17.0.1:55757"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:41:48.502322711Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         4037700469873289,
-				"StableID":   "nvRt4bYgXY11CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:de6f2712f0894e70b91f7350a9ec4e5f1b955b0a4e682394c7eeb2d13db30117",
-				"DiscoKey":   "discokey:f8913768c701f87388b5f34604837884dd0c6778ba6888bc7000032917993209",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60173", "10.65.0.27:60173", "172.17.0.1:60173"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:41:49.027704916Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         5379743632838756,
-				"StableID":   "nTQWm5kV1j11CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:4425ae8be063585e1dd46ef2a95f1bf2d0e0d3fc912e7aa6ddb063d7d16a6976",
-				"KeyExpiry":  "2026-11-03T08:41:49Z",
-				"DiscoKey":   "discokey:5010282929acc3b1dc9dc07f45d18d85095042fa4f7d44ce8c84d97f3a81201e",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:48857", "10.65.0.27:48857", "172.17.0.1:48857"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:41:49.571068216Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         8507813512289860,
-				"StableID":   "nZBfSPqCS921CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:717d8678d20bc95ff75da5fe063737e73bd947a798fb811d5f24e28d1532575a",
-				"KeyExpiry":  "2026-11-03T08:41:50Z",
-				"DiscoKey":   "discokey:e31772f93b8b757952bb53c887e971103fde1d9aebbfa130c54a6edbb32ef87c",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:39587", "10.65.0.27:39587", "172.17.0.1:39587"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:41:50.634591782Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-toplevel-randomize-plus-nodeattrs.hujson b/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-toplevel-randomize-plus-nodeattrs.hujson
deleted file mode 100644
index edbdaf5cd..000000000
--- a/hscontrol/policy/v2/testdata/nodeattrs_results/nodeattrs-toplevel-randomize-plus-nodeattrs.hujson
+++ /dev/null
@@ -1,8838 +0,0 @@
-// nodeattrs-toplevel-randomize-plus-nodeattrs
-//
-// top-level randomize plus per-tag nodeAttrs entry
-//
-// Nodes with filter rules: 8 of 8
-// Captured at:    2026-05-07T08:42:21Z
-// tscap version:  tscap/dev
-// schema version: 1
-{
-	"schema_version": 1,
-	"test_id":        "nodeattrs-toplevel-randomize-plus-nodeattrs",
-	"description":    "top-level randomize plus per-tag nodeAttrs entry",
-	"category":       "nodeattrs",
-	"captured_at":    "2026-05-07T08:42:21.685929321Z",
-	"tool_version":   "tscap/dev",
-	"tailnet":        "odin@example.com",
-	"input": {
-		"api_response_code": 200,
-		"tailnet": {
-			"dns":      {"magic_dns": false, "nameservers": [], "search_paths": [], "split_dns": {}},
-			"settings": {}
-		},
-		"scenario_hujson": "                                              \n{\n    \"category\": \"nodeattrs\",\n    \"description\": \"top-level randomize plus per-tag nodeAttrs entry\",\n    \"id\": \"nodeattrs-toplevel-randomize-plus-nodeattrs\",\n    \"options\": {},\n    \"policy\": {\n        \"nodeAttrs\": [\n            {\n                \"attr\": [\n                    \"disable-captive-portal-detection\"\n                ],\n                \"target\": [\n                    \"tag:server\"\n                ]\n            }\n        ],\n        \"randomizeClientPort\": true,\n        \"tagOwners\": {\n            \"tag:client\": [\n                \"odin@example.com\"\n            ],\n            \"tag:exit\": [\n                \"odin@example.com\"\n            ],\n            \"tag:prod\": [\n                \"odin@example.com\"\n            ],\n            \"tag:router\": [\n                \"odin@example.com\"\n            ],\n            \"tag:server\": [\n                \"odin@example.com\"\n            ]\n        }\n    },\n    \"tailnet\": {\n        \"dns\": {\n            \"magic_dns\": false,\n            \"nameservers\": [],\n            \"search_paths\": [],\n            \"split_dns\": {}\n        },\n        \"settings\": {}\n    },\n    \"topology\": \"../_topologies/nodeattrs.hujson\"\n}\n",
-		"scenario_path":   "scenarios/nodeattrs/nodeattrs-toplevel-randomize-plus-nodeattrs.hujson",
-		"full_policy": {"nodeAttrs": [
-			{"attr": ["disable-captive-portal-detection"], "target": ["tag:server"]}
-		], "randomizeClientPort": true, "tagOwners": {
-			"tag:client": ["odin@example.com"],
-			"tag:exit":   ["odin@example.com"],
-			"tag:prod":   ["odin@example.com"],
-			"tag:router": ["odin@example.com"],
-			"tag:server": ["odin@example.com"]
-		}}
-	},
-	"topology": {"users": [
-		{"id": 1, "name": "odin", "email": "odin@example.com"},
-		{"id": 2, "name": "thor", "email": "thor@example.org"},
-		{"id": 3, "name": "freya", "email": "freya@example.com"}
-	], "nodes": {"client": {
-		"hostname":        "client",
-		"tags":            ["tag:client"],
-		"ipv4":            "100.64.0.11",
-		"ipv6":            "fd7a:115c:a1e0::b",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "exit": {
-		"hostname":        "exit",
-		"tags":            ["tag:exit"],
-		"ipv4":            "100.64.0.14",
-		"ipv6":            "fd7a:115c:a1e0::e",
-		"routable_ips":    ["0.0.0.0/0", "::/0"],
-		"approved_routes": []
-	}, "ivysaur": {
-		"hostname":        "ivysaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.16",
-		"ipv6":            "fd7a:115c:a1e0::10",
-		"user":            "thor",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "prod": {
-		"hostname":        "prod",
-		"tags":            ["tag:prod"],
-		"ipv4":            "100.64.0.12",
-		"ipv6":            "fd7a:115c:a1e0::c",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "router": {
-		"hostname":        "router",
-		"tags":            ["tag:router"],
-		"ipv4":            "100.64.0.13",
-		"ipv6":            "fd7a:115c:a1e0::d",
-		"routable_ips":    ["10.33.0.0/16"],
-		"approved_routes": []
-	}, "server": {
-		"hostname":        "server",
-		"tags":            ["tag:server"],
-		"ipv4":            "100.64.0.10",
-		"ipv6":            "fd7a:115c:a1e0::a",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "user-tid": {
-		"hostname":        "user-tid",
-		"tags":            [],
-		"ipv4":            "100.64.0.15",
-		"ipv6":            "fd7a:115c:a1e0::f",
-		"user":            "odin",
-		"routable_ips":    [],
-		"approved_routes": []
-	}, "venusaur": {
-		"hostname":        "venusaur",
-		"tags":            [],
-		"ipv4":            "100.64.0.17",
-		"ipv6":            "fd7a:115c:a1e0::11",
-		"user":            "freya",
-		"routable_ips":    [],
-		"approved_routes": []
-	}}},
-	"captures": {"client": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8709865433690548,
-				"StableID":   "noNrqwPi1B21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       8709865433690548,
-				"Key":        "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-				"DiscoKey":   "discokey:76d2d6e03d1ab89b4b7a5e3bac6c36d90e2097ff5bf6dfa23360e0e53f59d166",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:58821", "10.65.0.27:58821", "172.17.0.1:58821"],
-				"Hostinfo": {"Hostname": "client", "RequestTags": ["tag:client"], "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:42:27.333228485Z",
-				"Tags":              ["tag:client"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-			"MachineKey": "mkey:0f90ea91718fe2797a770628a953072a9b47e34888711120759d6b6be0059310",
-			"Peers": [{
-				"ID":         8185996109091795,
-				"StableID":   "nYMxXjETv621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-				"DiscoKey":   "discokey:f6d187239fcc7b74446df7e2e215b2ecd2e6d6ee3057abca243373b200f64714",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43093", "10.65.0.27:43093", "172.17.0.1:43093"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:42:27.863154173Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7613822948337704,
-				"StableID":   "nMjhdeDKT221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-				"DiscoKey":   "discokey:6388c25082cdd54fbe6038c24cc7d8a9387b631b8b23e3d4f5c3b60878f72e55",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53840", "10.65.0.27:53840", "172.17.0.1:53840"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:42:28.408527401Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5501285570132106,
-				"StableID":   "nFDnZiSYxj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-				"DiscoKey":   "discokey:5e4a67056d2b853575f50fb7fe72c6b026781b930b687a63962f8c8f2b285826",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:54819", "10.65.0.27:54819", "172.17.0.1:54819"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:42:28.948531834Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8427660413177540,
-				"StableID":   "nP8dYCMuo821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-				"DiscoKey":   "discokey:a411ddda66bced1054f200113b1624e049d7665f7c4d613561013f33df9b837d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60042", "10.65.0.27:60042", "172.17.0.1:60042"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:42:29.494919141Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         961698831217100,
-				"StableID":   "nKiqXTCZW811CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:ae7d1ae391c88e62d2818ba35092e828be4ca170a13599c674aedd51ac738868",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36582", "10.65.0.27:36582", "172.17.0.1:36582"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:42:30.027371707Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         481614349421902,
-				"StableID":   "nyAAr9C8m411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:887e69e316c638696cbf544bbc3c80aeb6714ca0c2bc5fa41f6d79a93f5b371d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43806", "10.65.0.27:43806", "172.17.0.1:43806"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:42:30.569872675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6010792591203606,
-				"StableID":   "nqixH5LJwo11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-				"KeyExpiry":  "2026-11-03T08:42:31Z",
-				"DiscoKey":   "discokey:69d7b428500e13afc3d3fc706ce76bae35d0ccab11d0bc08b5a05e6ad4dc440f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59463", "10.65.0.27:59463", "172.17.0.1:59463"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:42:31.105304944Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8709865433690548": {
-				"ID":          8709865433690548,
-				"LoginName":   "client.tail78f774.ts.net",
-				"DisplayName": "client"
-			}}
-		}
-	}, "exit": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8185996109091795,
-				"StableID":   "nYMxXjETv621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       8185996109091795,
-				"Key":        "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-				"DiscoKey":   "discokey:f6d187239fcc7b74446df7e2e215b2ecd2e6d6ee3057abca243373b200f64714",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43093", "10.65.0.27:43093", "172.17.0.1:43093"],
-				"Hostinfo": {
-					"Hostname":    "exit",
-					"RoutableIPs": ["0.0.0.0/0", "::/0"],
-					"RequestTags": ["tag:exit"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 63957},
-						{"Proto": "peerapi6", "Port": 63957},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:42:27.863154173Z",
-				"Tags":              ["tag:exit"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-			"MachineKey": "mkey:417fd4581b93824a47b2f0f8f518a0d9fd20b1ee2d1edd17905bb424cacc6b2f",
-			"Peers": [{
-				"ID":         8709865433690548,
-				"StableID":   "noNrqwPi1B21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-				"DiscoKey":   "discokey:76d2d6e03d1ab89b4b7a5e3bac6c36d90e2097ff5bf6dfa23360e0e53f59d166",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:58821", "10.65.0.27:58821", "172.17.0.1:58821"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:42:27.333228485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         7613822948337704,
-				"StableID":   "nMjhdeDKT221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-				"DiscoKey":   "discokey:6388c25082cdd54fbe6038c24cc7d8a9387b631b8b23e3d4f5c3b60878f72e55",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53840", "10.65.0.27:53840", "172.17.0.1:53840"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:42:28.408527401Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5501285570132106,
-				"StableID":   "nFDnZiSYxj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-				"DiscoKey":   "discokey:5e4a67056d2b853575f50fb7fe72c6b026781b930b687a63962f8c8f2b285826",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:54819", "10.65.0.27:54819", "172.17.0.1:54819"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:42:28.948531834Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8427660413177540,
-				"StableID":   "nP8dYCMuo821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-				"DiscoKey":   "discokey:a411ddda66bced1054f200113b1624e049d7665f7c4d613561013f33df9b837d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60042", "10.65.0.27:60042", "172.17.0.1:60042"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:42:29.494919141Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         961698831217100,
-				"StableID":   "nKiqXTCZW811CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:ae7d1ae391c88e62d2818ba35092e828be4ca170a13599c674aedd51ac738868",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36582", "10.65.0.27:36582", "172.17.0.1:36582"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:42:30.027371707Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         481614349421902,
-				"StableID":   "nyAAr9C8m411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:887e69e316c638696cbf544bbc3c80aeb6714ca0c2bc5fa41f6d79a93f5b371d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43806", "10.65.0.27:43806", "172.17.0.1:43806"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:42:30.569872675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6010792591203606,
-				"StableID":   "nqixH5LJwo11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-				"KeyExpiry":  "2026-11-03T08:42:31Z",
-				"DiscoKey":   "discokey:69d7b428500e13afc3d3fc706ce76bae35d0ccab11d0bc08b5a05e6ad4dc440f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59463", "10.65.0.27:59463", "172.17.0.1:59463"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:42:31.105304944Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8185996109091795": {
-				"ID":          8185996109091795,
-				"LoginName":   "exit.tail78f774.ts.net",
-				"DisplayName": "exit"
-			}}
-		}
-	}, "ivysaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         961698831217100,
-				"StableID":   "nKiqXTCZW811CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:ae7d1ae391c88e62d2818ba35092e828be4ca170a13599c674aedd51ac738868",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36582", "10.65.0.27:36582", "172.17.0.1:36582"],
-				"Hostinfo": {"Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:42:30.027371707Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-			"MachineKey": "mkey:d0511c7809f3254edbdacabdf8bf413ff6ad441d139edae7b737f3f327f41818",
-			"Peers": [{
-				"ID":         8709865433690548,
-				"StableID":   "noNrqwPi1B21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-				"DiscoKey":   "discokey:76d2d6e03d1ab89b4b7a5e3bac6c36d90e2097ff5bf6dfa23360e0e53f59d166",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:58821", "10.65.0.27:58821", "172.17.0.1:58821"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:42:27.333228485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8185996109091795,
-				"StableID":   "nYMxXjETv621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-				"DiscoKey":   "discokey:f6d187239fcc7b74446df7e2e215b2ecd2e6d6ee3057abca243373b200f64714",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43093", "10.65.0.27:43093", "172.17.0.1:43093"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:42:27.863154173Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7613822948337704,
-				"StableID":   "nMjhdeDKT221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-				"DiscoKey":   "discokey:6388c25082cdd54fbe6038c24cc7d8a9387b631b8b23e3d4f5c3b60878f72e55",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53840", "10.65.0.27:53840", "172.17.0.1:53840"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:42:28.408527401Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5501285570132106,
-				"StableID":   "nFDnZiSYxj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-				"DiscoKey":   "discokey:5e4a67056d2b853575f50fb7fe72c6b026781b930b687a63962f8c8f2b285826",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:54819", "10.65.0.27:54819", "172.17.0.1:54819"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:42:28.948531834Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8427660413177540,
-				"StableID":   "nP8dYCMuo821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-				"DiscoKey":   "discokey:a411ddda66bced1054f200113b1624e049d7665f7c4d613561013f33df9b837d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60042", "10.65.0.27:60042", "172.17.0.1:60042"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:42:29.494919141Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         481614349421902,
-				"StableID":   "nyAAr9C8m411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:887e69e316c638696cbf544bbc3c80aeb6714ca0c2bc5fa41f6d79a93f5b371d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43806", "10.65.0.27:43806", "172.17.0.1:43806"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:42:30.569872675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6010792591203606,
-				"StableID":   "nqixH5LJwo11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-				"KeyExpiry":  "2026-11-03T08:42:31Z",
-				"DiscoKey":   "discokey:69d7b428500e13afc3d3fc706ce76bae35d0ccab11d0bc08b5a05e6ad4dc440f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59463", "10.65.0.27:59463", "172.17.0.1:59463"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:42:31.105304944Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "prod": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         7613822948337704,
-				"StableID":   "nMjhdeDKT221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       7613822948337704,
-				"Key":        "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-				"DiscoKey":   "discokey:6388c25082cdd54fbe6038c24cc7d8a9387b631b8b23e3d4f5c3b60878f72e55",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53840", "10.65.0.27:53840", "172.17.0.1:53840"],
-				"Hostinfo": {"Hostname": "prod", "RequestTags": ["tag:prod"], "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:42:28.408527401Z",
-				"Tags":              ["tag:prod"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-			"MachineKey": "mkey:66afa26e79b218ccfaec26a0f7eccd92bec15c0c1d8317dcf89936e6e9d7792e",
-			"Peers": [{
-				"ID":         8709865433690548,
-				"StableID":   "noNrqwPi1B21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-				"DiscoKey":   "discokey:76d2d6e03d1ab89b4b7a5e3bac6c36d90e2097ff5bf6dfa23360e0e53f59d166",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:58821", "10.65.0.27:58821", "172.17.0.1:58821"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:42:27.333228485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8185996109091795,
-				"StableID":   "nYMxXjETv621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-				"DiscoKey":   "discokey:f6d187239fcc7b74446df7e2e215b2ecd2e6d6ee3057abca243373b200f64714",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43093", "10.65.0.27:43093", "172.17.0.1:43093"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:42:27.863154173Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         5501285570132106,
-				"StableID":   "nFDnZiSYxj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-				"DiscoKey":   "discokey:5e4a67056d2b853575f50fb7fe72c6b026781b930b687a63962f8c8f2b285826",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:54819", "10.65.0.27:54819", "172.17.0.1:54819"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:42:28.948531834Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8427660413177540,
-				"StableID":   "nP8dYCMuo821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-				"DiscoKey":   "discokey:a411ddda66bced1054f200113b1624e049d7665f7c4d613561013f33df9b837d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60042", "10.65.0.27:60042", "172.17.0.1:60042"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:42:29.494919141Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         961698831217100,
-				"StableID":   "nKiqXTCZW811CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:ae7d1ae391c88e62d2818ba35092e828be4ca170a13599c674aedd51ac738868",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36582", "10.65.0.27:36582", "172.17.0.1:36582"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:42:30.027371707Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         481614349421902,
-				"StableID":   "nyAAr9C8m411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:887e69e316c638696cbf544bbc3c80aeb6714ca0c2bc5fa41f6d79a93f5b371d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43806", "10.65.0.27:43806", "172.17.0.1:43806"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:42:30.569872675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6010792591203606,
-				"StableID":   "nqixH5LJwo11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-				"KeyExpiry":  "2026-11-03T08:42:31Z",
-				"DiscoKey":   "discokey:69d7b428500e13afc3d3fc706ce76bae35d0ccab11d0bc08b5a05e6ad4dc440f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59463", "10.65.0.27:59463", "172.17.0.1:59463"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:42:31.105304944Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "7613822948337704": {
-				"ID":          7613822948337704,
-				"LoginName":   "prod.tail78f774.ts.net",
-				"DisplayName": "prod"
-			}}
-		}
-	}, "router": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         5501285570132106,
-				"StableID":   "nFDnZiSYxj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       5501285570132106,
-				"Key":        "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-				"DiscoKey":   "discokey:5e4a67056d2b853575f50fb7fe72c6b026781b930b687a63962f8c8f2b285826",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:54819", "10.65.0.27:54819", "172.17.0.1:54819"],
-				"Hostinfo": {
-					"Hostname":    "router",
-					"RoutableIPs": ["10.33.0.0/16"],
-					"RequestTags": ["tag:router"],
-					"Services": [
-						{"Proto": "peerapi4", "Port": 43119},
-						{"Proto": "peerapi6", "Port": 43119},
-						{"Proto": "peerapi-dns-proxy", "Port": 1}
-					]
-				},
-				"Created":           "2026-05-07T08:42:28.948531834Z",
-				"Tags":              ["tag:router"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-			"MachineKey": "mkey:5e64bf9349018a99b393b849d47e84f89137c88ed56585ab2be1b760c3774475",
-			"Peers": [{
-				"ID":         8709865433690548,
-				"StableID":   "noNrqwPi1B21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-				"DiscoKey":   "discokey:76d2d6e03d1ab89b4b7a5e3bac6c36d90e2097ff5bf6dfa23360e0e53f59d166",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:58821", "10.65.0.27:58821", "172.17.0.1:58821"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:42:27.333228485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8185996109091795,
-				"StableID":   "nYMxXjETv621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-				"DiscoKey":   "discokey:f6d187239fcc7b74446df7e2e215b2ecd2e6d6ee3057abca243373b200f64714",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43093", "10.65.0.27:43093", "172.17.0.1:43093"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:42:27.863154173Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7613822948337704,
-				"StableID":   "nMjhdeDKT221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-				"DiscoKey":   "discokey:6388c25082cdd54fbe6038c24cc7d8a9387b631b8b23e3d4f5c3b60878f72e55",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53840", "10.65.0.27:53840", "172.17.0.1:53840"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:42:28.408527401Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         8427660413177540,
-				"StableID":   "nP8dYCMuo821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-				"DiscoKey":   "discokey:a411ddda66bced1054f200113b1624e049d7665f7c4d613561013f33df9b837d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60042", "10.65.0.27:60042", "172.17.0.1:60042"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:42:29.494919141Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         961698831217100,
-				"StableID":   "nKiqXTCZW811CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:ae7d1ae391c88e62d2818ba35092e828be4ca170a13599c674aedd51ac738868",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36582", "10.65.0.27:36582", "172.17.0.1:36582"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:42:30.027371707Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         481614349421902,
-				"StableID":   "nyAAr9C8m411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:887e69e316c638696cbf544bbc3c80aeb6714ca0c2bc5fa41f6d79a93f5b371d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43806", "10.65.0.27:43806", "172.17.0.1:43806"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:42:30.569872675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6010792591203606,
-				"StableID":   "nqixH5LJwo11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-				"KeyExpiry":  "2026-11-03T08:42:31Z",
-				"DiscoKey":   "discokey:69d7b428500e13afc3d3fc706ce76bae35d0ccab11d0bc08b5a05e6ad4dc440f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59463", "10.65.0.27:59463", "172.17.0.1:59463"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:42:31.105304944Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "5501285570132106": {
-				"ID":          5501285570132106,
-				"LoginName":   "router.tail78f774.ts.net",
-				"DisplayName": "router"
-			}}
-		}
-	}, "server": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         8427660413177540,
-				"StableID":   "nP8dYCMuo821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       8427660413177540,
-				"Key":        "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-				"DiscoKey":   "discokey:a411ddda66bced1054f200113b1624e049d7665f7c4d613561013f33df9b837d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60042", "10.65.0.27:60042", "172.17.0.1:60042"],
-				"Hostinfo": {"Hostname": "server", "RequestTags": ["tag:server"], "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:42:29.494919141Z",
-				"Tags":              ["tag:server"],
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"disable-captive-portal-detection":       null,
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"disable-captive-portal-detection",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-			"MachineKey": "mkey:f80e0c242a742492c02296b473fb9b8fd18101eb042d7eb993c918f301be2a12",
-			"Peers": [{
-				"ID":         8709865433690548,
-				"StableID":   "noNrqwPi1B21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-				"DiscoKey":   "discokey:76d2d6e03d1ab89b4b7a5e3bac6c36d90e2097ff5bf6dfa23360e0e53f59d166",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:58821", "10.65.0.27:58821", "172.17.0.1:58821"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:42:27.333228485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8185996109091795,
-				"StableID":   "nYMxXjETv621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-				"DiscoKey":   "discokey:f6d187239fcc7b74446df7e2e215b2ecd2e6d6ee3057abca243373b200f64714",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43093", "10.65.0.27:43093", "172.17.0.1:43093"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:42:27.863154173Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7613822948337704,
-				"StableID":   "nMjhdeDKT221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-				"DiscoKey":   "discokey:6388c25082cdd54fbe6038c24cc7d8a9387b631b8b23e3d4f5c3b60878f72e55",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53840", "10.65.0.27:53840", "172.17.0.1:53840"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:42:28.408527401Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5501285570132106,
-				"StableID":   "nFDnZiSYxj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-				"DiscoKey":   "discokey:5e4a67056d2b853575f50fb7fe72c6b026781b930b687a63962f8c8f2b285826",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:54819", "10.65.0.27:54819", "172.17.0.1:54819"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:42:28.948531834Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         961698831217100,
-				"StableID":   "nKiqXTCZW811CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:ae7d1ae391c88e62d2818ba35092e828be4ca170a13599c674aedd51ac738868",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36582", "10.65.0.27:36582", "172.17.0.1:36582"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:42:30.027371707Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         481614349421902,
-				"StableID":   "nyAAr9C8m411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:887e69e316c638696cbf544bbc3c80aeb6714ca0c2bc5fa41f6d79a93f5b371d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43806", "10.65.0.27:43806", "172.17.0.1:43806"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:42:30.569872675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}, {
-				"ID":         6010792591203606,
-				"StableID":   "nqixH5LJwo11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-				"KeyExpiry":  "2026-11-03T08:42:31Z",
-				"DiscoKey":   "discokey:69d7b428500e13afc3d3fc706ce76bae35d0ccab11d0bc08b5a05e6ad4dc440f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59463", "10.65.0.27:59463", "172.17.0.1:59463"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:42:31.105304944Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}, "8427660413177540": {
-				"ID":          8427660413177540,
-				"LoginName":   "server.tail78f774.ts.net",
-				"DisplayName": "server"
-			}}
-		}
-	}, "user-tid": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         6010792591203606,
-				"StableID":   "nqixH5LJwo11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-				"KeyExpiry":  "2026-11-03T08:42:31Z",
-				"DiscoKey":   "discokey:69d7b428500e13afc3d3fc706ce76bae35d0ccab11d0bc08b5a05e6ad4dc440f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59463", "10.65.0.27:59463", "172.17.0.1:59463"],
-				"Hostinfo": {"Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:42:31.105304944Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/is-owner":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/is-owner",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-			"MachineKey": "mkey:1a2a4d6093b1632f716aa9ac180069656311c13a53f1c02838fa5a8f13cfea1a",
-			"Peers": [{
-				"ID":         8709865433690548,
-				"StableID":   "noNrqwPi1B21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-				"DiscoKey":   "discokey:76d2d6e03d1ab89b4b7a5e3bac6c36d90e2097ff5bf6dfa23360e0e53f59d166",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:58821", "10.65.0.27:58821", "172.17.0.1:58821"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:42:27.333228485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8185996109091795,
-				"StableID":   "nYMxXjETv621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-				"DiscoKey":   "discokey:f6d187239fcc7b74446df7e2e215b2ecd2e6d6ee3057abca243373b200f64714",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43093", "10.65.0.27:43093", "172.17.0.1:43093"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:42:27.863154173Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7613822948337704,
-				"StableID":   "nMjhdeDKT221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-				"DiscoKey":   "discokey:6388c25082cdd54fbe6038c24cc7d8a9387b631b8b23e3d4f5c3b60878f72e55",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53840", "10.65.0.27:53840", "172.17.0.1:53840"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:42:28.408527401Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5501285570132106,
-				"StableID":   "nFDnZiSYxj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-				"DiscoKey":   "discokey:5e4a67056d2b853575f50fb7fe72c6b026781b930b687a63962f8c8f2b285826",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:54819", "10.65.0.27:54819", "172.17.0.1:54819"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:42:28.948531834Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8427660413177540,
-				"StableID":   "nP8dYCMuo821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-				"DiscoKey":   "discokey:a411ddda66bced1054f200113b1624e049d7665f7c4d613561013f33df9b837d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60042", "10.65.0.27:60042", "172.17.0.1:60042"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:42:29.494919141Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         961698831217100,
-				"StableID":   "nKiqXTCZW811CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:ae7d1ae391c88e62d2818ba35092e828be4ca170a13599c674aedd51ac738868",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36582", "10.65.0.27:36582", "172.17.0.1:36582"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:42:30.027371707Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         481614349421902,
-				"StableID":   "nyAAr9C8m411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:887e69e316c638696cbf544bbc3c80aeb6714ca0c2bc5fa41f6d79a93f5b371d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43806", "10.65.0.27:43806", "172.17.0.1:43806"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496}
-				]},
-				"Created":              "2026-05-07T08:42:30.569872675Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}, "venusaur": {
-		"packet_filter_rules": [{"SrcIPs": [
-			"100.115.94.0-100.127.255.255",
-			"100.64.0.0-100.115.91.255",
-			"fd7a:115c:a1e0::/48"
-		], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-		"packet_filter_matches": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-			"100.115.94.0/23",
-			"100.115.96.0/19",
-			"100.115.128.0/17",
-			"100.116.0.0/14",
-			"100.120.0.0/13",
-			"100.64.0.0/11",
-			"100.96.0.0/12",
-			"100.112.0.0/15",
-			"100.114.0.0/16",
-			"100.115.0.0/18",
-			"100.115.64.0/20",
-			"100.115.80.0/21",
-			"100.115.88.0/22",
-			"fd7a:115c:a1e0::/48"
-		], "SrcCaps": null, "Dsts": [
-			{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-			{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-		], "Caps": []}],
-		"netmap": {
-			"Cached": false,
-			"SelfNode": {
-				"ID":         481614349421902,
-				"StableID":   "nyAAr9C8m411CNTRL",
-				"Name":       "venusaur.tail78f774.ts.net.",
-				"User":       3982058329734709,
-				"Key":        "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:887e69e316c638696cbf544bbc3c80aeb6714ca0c2bc5fa41f6d79a93f5b371d",
-				"Addresses":  ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"AllowedIPs": ["100.64.0.17/32", "fd7a:115c:a1e0::11/128"],
-				"Endpoints":  ["77.164.248.136:43806", "10.65.0.27:43806", "172.17.0.1:43806"],
-				"Hostinfo": {"Hostname": "venusaur", "Services": [
-					{"Proto": "peerapi4", "Port": 62496},
-					{"Proto": "peerapi6", "Port": 62496},
-					{"Proto": "peerapi-dns-proxy", "Port": 1}
-				]},
-				"Created":           "2026-05-07T08:42:30.569872675Z",
-				"MachineAuthorized": true,
-				"CapMap": {
-					"default-auto-update":                    [false],
-					"https://tailscale.com/cap/file-sharing": null,
-					"https://tailscale.com/cap/is-admin":     null,
-					"https://tailscale.com/cap/ssh":          null,
-					"https://tailscale.com/cap/tailnet-lock": null,
-					"probe-udp-lifetime":                     null,
-					"randomize-client-port":                  null,
-					"ssh-behavior-v1":                        null,
-					"ssh-env-vars":                           null,
-					"store-appc-routes":                      null,
-					"tailnet-display-name":                   ["odin@example.com"]
-				},
-				"ComputedName":         "venusaur",
-				"ComputedNameWithHost": "venusaur"
-			},
-			"AllCaps": [
-				"default-auto-update",
-				"https://tailscale.com/cap/file-sharing",
-				"https://tailscale.com/cap/is-admin",
-				"https://tailscale.com/cap/ssh",
-				"https://tailscale.com/cap/tailnet-lock",
-				"probe-udp-lifetime",
-				"randomize-client-port",
-				"ssh-behavior-v1",
-				"ssh-env-vars",
-				"store-appc-routes",
-				"tailnet-display-name"
-			],
-			"NodeKey":    "nodekey:b27f3c745561dc0aea00b94680ecac6e51638211be53978aebeb10125eeecd64",
-			"MachineKey": "mkey:864f4ffe0f43d3d51a227db46ea449b16f03261692bc3812d86796d6534b3326",
-			"Peers": [{
-				"ID":         8709865433690548,
-				"StableID":   "noNrqwPi1B21CNTRL",
-				"Name":       "client.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:cba25ae0d82ef515ee01ba4dc944cc301dbf6af0b408c6bc36896a9539f6ac76",
-				"DiscoKey":   "discokey:76d2d6e03d1ab89b4b7a5e3bac6c36d90e2097ff5bf6dfa23360e0e53f59d166",
-				"Addresses":  ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"AllowedIPs": ["100.64.0.11/32", "fd7a:115c:a1e0::b/128"],
-				"Endpoints":  ["77.164.248.136:58821", "10.65.0.27:58821", "172.17.0.1:58821"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "client", "Services": [
-					{"Proto": "peerapi4", "Port": 36186},
-					{"Proto": "peerapi6", "Port": 36186}
-				]},
-				"Created":              "2026-05-07T08:42:27.333228485Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:client"],
-				"Online":               true,
-				"ComputedName":         "client",
-				"ComputedNameWithHost": "client"
-			}, {
-				"ID":         8185996109091795,
-				"StableID":   "nYMxXjETv621CNTRL",
-				"Name":       "exit.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:491110d76b6257135729ef11764f427bc52b8f5ca0775ef150d754f6b23bd924",
-				"DiscoKey":   "discokey:f6d187239fcc7b74446df7e2e215b2ecd2e6d6ee3057abca243373b200f64714",
-				"Addresses":  ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"AllowedIPs": ["100.64.0.14/32", "fd7a:115c:a1e0::e/128"],
-				"Endpoints":  ["77.164.248.136:43093", "10.65.0.27:43093", "172.17.0.1:43093"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "exit", "Services": [
-					{"Proto": "peerapi4", "Port": 63957},
-					{"Proto": "peerapi6", "Port": 63957}
-				]},
-				"Created":              "2026-05-07T08:42:27.863154173Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:exit"],
-				"Online":               true,
-				"ComputedName":         "exit",
-				"ComputedNameWithHost": "exit"
-			}, {
-				"ID":         7613822948337704,
-				"StableID":   "nMjhdeDKT221CNTRL",
-				"Name":       "prod.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:df88d17284d89ec3274efb192eb45441665cf0bb8b59f8321adeebf023916f68",
-				"DiscoKey":   "discokey:6388c25082cdd54fbe6038c24cc7d8a9387b631b8b23e3d4f5c3b60878f72e55",
-				"Addresses":  ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"AllowedIPs": ["100.64.0.12/32", "fd7a:115c:a1e0::c/128"],
-				"Endpoints":  ["77.164.248.136:53840", "10.65.0.27:53840", "172.17.0.1:53840"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "prod", "Services": [
-					{"Proto": "peerapi4", "Port": 39161},
-					{"Proto": "peerapi6", "Port": 39161}
-				]},
-				"Created":              "2026-05-07T08:42:28.408527401Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:prod"],
-				"Online":               true,
-				"ComputedName":         "prod",
-				"ComputedNameWithHost": "prod"
-			}, {
-				"ID":         5501285570132106,
-				"StableID":   "nFDnZiSYxj11CNTRL",
-				"Name":       "router.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7c9fa017c1aea8f03b3fcf27607e4077bf0268ac1c9d6b2abd5fb01648488528",
-				"DiscoKey":   "discokey:5e4a67056d2b853575f50fb7fe72c6b026781b930b687a63962f8c8f2b285826",
-				"Addresses":  ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"AllowedIPs": ["100.64.0.13/32", "fd7a:115c:a1e0::d/128"],
-				"Endpoints":  ["77.164.248.136:54819", "10.65.0.27:54819", "172.17.0.1:54819"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "router", "Services": [
-					{"Proto": "peerapi4", "Port": 43119},
-					{"Proto": "peerapi6", "Port": 43119}
-				]},
-				"Created":              "2026-05-07T08:42:28.948531834Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:router"],
-				"Online":               true,
-				"ComputedName":         "router",
-				"ComputedNameWithHost": "router"
-			}, {
-				"ID":         8427660413177540,
-				"StableID":   "nP8dYCMuo821CNTRL",
-				"Name":       "server.tail78f774.ts.net.",
-				"User":       1260082990019555,
-				"Key":        "nodekey:7f3e5f92e668a571de20d9582822b4f19a2c888bfce1f0a9767eb618ce7e6977",
-				"DiscoKey":   "discokey:a411ddda66bced1054f200113b1624e049d7665f7c4d613561013f33df9b837d",
-				"Addresses":  ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"AllowedIPs": ["100.64.0.10/32", "fd7a:115c:a1e0::a/128"],
-				"Endpoints":  ["77.164.248.136:60042", "10.65.0.27:60042", "172.17.0.1:60042"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "server", "Services": [
-					{"Proto": "peerapi4", "Port": 48588},
-					{"Proto": "peerapi6", "Port": 48588}
-				]},
-				"Created":              "2026-05-07T08:42:29.494919141Z",
-				"Cap":                  131,
-				"Tags":                 ["tag:server"],
-				"Online":               true,
-				"ComputedName":         "server",
-				"ComputedNameWithHost": "server"
-			}, {
-				"ID":         961698831217100,
-				"StableID":   "nKiqXTCZW811CNTRL",
-				"Name":       "ivysaur.tail78f774.ts.net.",
-				"User":       4538565228176803,
-				"Key":        "nodekey:74439568407231baeff7388ed64abb7bd9f81fbf07d1f0d7446b3d74ef69806f",
-				"KeyExpiry":  "2026-11-03T08:42:30Z",
-				"DiscoKey":   "discokey:ae7d1ae391c88e62d2818ba35092e828be4ca170a13599c674aedd51ac738868",
-				"Addresses":  ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"AllowedIPs": ["100.64.0.16/32", "fd7a:115c:a1e0::10/128"],
-				"Endpoints":  ["77.164.248.136:36582", "10.65.0.27:36582", "172.17.0.1:36582"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "ivysaur", "Services": [
-					{"Proto": "peerapi4", "Port": 50358},
-					{"Proto": "peerapi6", "Port": 50358}
-				]},
-				"Created":              "2026-05-07T08:42:30.027371707Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "ivysaur",
-				"ComputedNameWithHost": "ivysaur"
-			}, {
-				"ID":         6010792591203606,
-				"StableID":   "nqixH5LJwo11CNTRL",
-				"Name":       "user-tid.tail78f774.ts.net.",
-				"User":       4156223528223174,
-				"Key":        "nodekey:0360f838a590a5e54a97c9e118f05ad2fbe2f0c069b6b9cbdf8018c6164a6d4a",
-				"KeyExpiry":  "2026-11-03T08:42:31Z",
-				"DiscoKey":   "discokey:69d7b428500e13afc3d3fc706ce76bae35d0ccab11d0bc08b5a05e6ad4dc440f",
-				"Addresses":  ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"AllowedIPs": ["100.64.0.15/32", "fd7a:115c:a1e0::f/128"],
-				"Endpoints":  ["77.164.248.136:59463", "10.65.0.27:59463", "172.17.0.1:59463"],
-				"HomeDERP":   14,
-				"Hostinfo": {"OS": "linux", "Hostname": "user-tid", "Services": [
-					{"Proto": "peerapi4", "Port": 51523},
-					{"Proto": "peerapi6", "Port": 51523}
-				]},
-				"Created":              "2026-05-07T08:42:31.105304944Z",
-				"Cap":                  131,
-				"Online":               true,
-				"ComputedName":         "user-tid",
-				"ComputedNameWithHost": "user-tid"
-			}],
-			"DNS": {"ExitNodeFilteredSet": [".ts.net", ".tailscale.net"]},
-			"PacketFilter": [{"IPProto": [6, 17, 1, 58], "Srcs": [
-				"100.115.94.0/23",
-				"100.115.96.0/19",
-				"100.115.128.0/17",
-				"100.116.0.0/14",
-				"100.120.0.0/13",
-				"100.64.0.0/11",
-				"100.96.0.0/12",
-				"100.112.0.0/15",
-				"100.114.0.0/16",
-				"100.115.0.0/18",
-				"100.115.64.0/20",
-				"100.115.80.0/21",
-				"100.115.88.0/22",
-				"fd7a:115c:a1e0::/48"
-			], "SrcCaps": null, "Dsts": [
-				{"Net": "0.0.0.0/0", "Ports": {"First": 0, "Last": 65535}},
-				{"Net": "::/0", "Ports": {"First": 0, "Last": 65535}}
-			], "Caps": []}],
-			"PacketFilterRules": [{"SrcIPs": [
-				"100.115.94.0-100.127.255.255",
-				"100.64.0.0-100.115.91.255",
-				"fd7a:115c:a1e0::/48"
-			], "DstPorts": [{"IP": "*", "Ports": {"First": 0, "Last": 65535}}]}],
-			"SSHPolicy":       {"rules": []},
-			"CollectServices": false,
-			"DERPMap": {"Regions": {"1": {
-				"RegionID":   1,
-				"RegionCode": "nyc",
-				"RegionName": "New York City",
-				"Latitude":   40.7128,
-				"Longitude":  -74.006,
-				"Nodes": [{
-					"Name":      "1h",
-					"RegionID":  1,
-					"HostName":  "derp1h.tailscale.com",
-					"IPv4":      "199.38.181.93",
-					"IPv6":      "2607:f740:f::afd",
-					"CanPort80": true
-				}, {
-					"Name":      "1g",
-					"RegionID":  1,
-					"HostName":  "derp1g.tailscale.com",
-					"IPv4":      "209.177.145.120",
-					"IPv6":      "2607:f740:f::3eb",
-					"CanPort80": true
-				}, {
-					"Name":      "1i",
-					"RegionID":  1,
-					"HostName":  "derp1i.tailscale.com",
-					"IPv4":      "199.38.181.103",
-					"IPv6":      "2607:f740:f::e19",
-					"CanPort80": true
-				}, {
-					"Name":      "1f",
-					"RegionID":  1,
-					"HostName":  "derp1f.tailscale.com",
-					"IPv4":      "199.38.181.104",
-					"IPv6":      "2607:f740:f::bc",
-					"CanPort80": true
-				}]
-			}, "10": {
-				"RegionID":   10,
-				"RegionCode": "sea",
-				"RegionName": "Seattle",
-				"Latitude":   47.609722,
-				"Longitude":  -122.333056,
-				"Nodes": [{
-					"Name":      "10c",
-					"RegionID":  10,
-					"HostName":  "derp10c.tailscale.com",
-					"IPv4":      "192.73.240.121",
-					"IPv6":      "2607:f740:14::40c",
-					"CanPort80": true
-				}, {
-					"Name":      "10d",
-					"RegionID":  10,
-					"HostName":  "derp10d.tailscale.com",
-					"IPv4":      "192.73.240.132",
-					"IPv6":      "2607:f740:14::500",
-					"CanPort80": true
-				}, {
-					"Name":      "10b",
-					"RegionID":  10,
-					"HostName":  "derp10b.tailscale.com",
-					"IPv4":      "192.73.240.161",
-					"IPv6":      "2607:f740:14::61c",
-					"CanPort80": true
-				}]
-			}, "11": {
-				"RegionID":   11,
-				"RegionCode": "sao",
-				"RegionName": "São Paulo",
-				"Latitude":   -23.55,
-				"Longitude":  -46.633333,
-				"Nodes": [{
-					"Name":      "11f",
-					"RegionID":  11,
-					"HostName":  "derp11f.tailscale.com",
-					"IPv4":      "172.237.61.197",
-					"IPv6":      "2600:3c0d::2000:3bff:fe44:6166",
-					"CanPort80": true
-				}, {
-					"Name":      "11g",
-					"RegionID":  11,
-					"HostName":  "derp11g.tailscale.com",
-					"IPv4":      "172.237.61.190",
-					"IPv6":      "2600:3c0d::2000:62ff:febe:2e67",
-					"CanPort80": true
-				}, {
-					"Name":      "11e",
-					"RegionID":  11,
-					"HostName":  "derp11e.tailscale.com",
-					"IPv4":      "172.237.61.194",
-					"IPv6":      "2600:3c0d::2000:d2ff:fe43:1790",
-					"CanPort80": true
-				}]
-			}, "12": {
-				"RegionID":   12,
-				"RegionCode": "ord",
-				"RegionName": "Chicago",
-				"Latitude":   41.881944,
-				"Longitude":  -87.627778,
-				"Nodes": [{
-					"Name":      "12e",
-					"RegionID":  12,
-					"HostName":  "derp12e.tailscale.com",
-					"IPv4":      "209.177.158.15",
-					"IPv6":      "2607:f740:e::b17",
-					"CanPort80": true
-				}, {
-					"Name":      "12f",
-					"RegionID":  12,
-					"HostName":  "derp12f.tailscale.com",
-					"IPv4":      "199.38.182.118",
-					"IPv6":      "2607:f740:e::4c8",
-					"CanPort80": true
-				}, {
-					"Name":      "12d",
-					"RegionID":  12,
-					"HostName":  "derp12d.tailscale.com",
-					"IPv4":      "209.177.158.246",
-					"IPv6":      "2607:f740:e::811",
-					"CanPort80": true
-				}]
-			}, "13": {
-				"RegionID":   13,
-				"RegionCode": "den",
-				"RegionName": "Denver",
-				"Latitude":   39.7392,
-				"Longitude":  -104.9849,
-				"Nodes": [{
-					"Name":      "13c",
-					"RegionID":  13,
-					"HostName":  "derp13c.tailscale.com",
-					"IPv4":      "192.73.242.28",
-					"IPv6":      "2607:f740:16::5c",
-					"CanPort80": true
-				}, {
-					"Name":      "13d",
-					"RegionID":  13,
-					"HostName":  "derp13d.tailscale.com",
-					"IPv4":      "192.73.242.204",
-					"IPv6":      "2607:f740:16::c23",
-					"CanPort80": true
-				}, {
-					"Name":      "13b",
-					"RegionID":  13,
-					"HostName":  "derp13b.tailscale.com",
-					"IPv4":      "192.73.242.187",
-					"IPv6":      "2607:f740:16::640",
-					"CanPort80": true
-				}]
-			}, "14": {
-				"RegionID":   14,
-				"RegionCode": "ams",
-				"RegionName": "Amsterdam",
-				"Latitude":   52.372778,
-				"Longitude":  4.893611,
-				"Nodes": [{
-					"Name":      "14c",
-					"RegionID":  14,
-					"HostName":  "derp14c.tailscale.com",
-					"IPv4":      "176.58.93.147",
-					"IPv6":      "2a00:dd80:3c::b09",
-					"CanPort80": true
-				}, {
-					"Name":      "14d",
-					"RegionID":  14,
-					"HostName":  "derp14d.tailscale.com",
-					"IPv4":      "176.58.93.154",
-					"IPv6":      "2a00:dd80:3c::3d5",
-					"CanPort80": true
-				}, {
-					"Name":      "14b",
-					"RegionID":  14,
-					"HostName":  "derp14b.tailscale.com",
-					"IPv4":      "176.58.93.248",
-					"IPv6":      "2a00:dd80:3c::807",
-					"CanPort80": true
-				}]
-			}, "15": {
-				"RegionID":   15,
-				"RegionCode": "jnb",
-				"RegionName": "Johannesburg",
-				"Latitude":   -26.204444,
-				"Longitude":  28.045556,
-				"Nodes": [{
-					"Name":      "15c",
-					"RegionID":  15,
-					"HostName":  "derp15c.tailscale.com",
-					"IPv4":      "102.67.165.185",
-					"IPv6":      "2c0f:edb0:0:10::b59",
-					"CanPort80": true
-				}, {
-					"Name":      "15d",
-					"RegionID":  15,
-					"HostName":  "derp15d.tailscale.com",
-					"IPv4":      "102.67.165.36",
-					"IPv6":      "2c0f:edb0:0:10::599",
-					"CanPort80": true
-				}, {
-					"Name":      "15b",
-					"RegionID":  15,
-					"HostName":  "derp15b.tailscale.com",
-					"IPv4":      "102.67.165.90",
-					"IPv6":      "2c0f:edb0:0:10::963",
-					"CanPort80": true
-				}]
-			}, "16": {
-				"RegionID":   16,
-				"RegionCode": "mia",
-				"RegionName": "Miami",
-				"Latitude":   25.78,
-				"Longitude":  -80.21,
-				"Nodes": [{
-					"Name":      "16c",
-					"RegionID":  16,
-					"HostName":  "derp16c.tailscale.com",
-					"IPv4":      "192.73.243.229",
-					"IPv6":      "2607:f740:17::4e4",
-					"CanPort80": true
-				}, {
-					"Name":      "16d",
-					"RegionID":  16,
-					"HostName":  "derp16d.tailscale.com",
-					"IPv4":      "192.73.243.141",
-					"IPv6":      "2607:f740:17::475",
-					"CanPort80": true
-				}, {
-					"Name":      "16b",
-					"RegionID":  16,
-					"HostName":  "derp16b.tailscale.com",
-					"IPv4":      "192.73.243.135",
-					"IPv6":      "2607:f740:17::476",
-					"CanPort80": true
-				}]
-			}, "17": {
-				"RegionID":   17,
-				"RegionCode": "lax",
-				"RegionName": "Los Angeles",
-				"Latitude":   34.05,
-				"Longitude":  -118.25,
-				"Nodes": [{
-					"Name":      "17c",
-					"RegionID":  17,
-					"HostName":  "derp17c.tailscale.com",
-					"IPv4":      "208.111.40.12",
-					"IPv6":      "2607:f740:c::10",
-					"CanPort80": true
-				}, {
-					"Name":      "17d",
-					"RegionID":  17,
-					"HostName":  "derp17d.tailscale.com",
-					"IPv4":      "208.111.40.216",
-					"IPv6":      "2607:f740:c::e1b",
-					"CanPort80": true
-				}, {
-					"Name":      "17b",
-					"RegionID":  17,
-					"HostName":  "derp17b.tailscale.com",
-					"IPv4":      "192.73.244.245",
-					"IPv6":      "2607:f740:c::646",
-					"CanPort80": true
-				}]
-			}, "18": {
-				"RegionID":   18,
-				"RegionCode": "par",
-				"RegionName": "Paris",
-				"Latitude":   48.856667,
-				"Longitude":  2.352222,
-				"Nodes": [{
-					"Name":      "18c",
-					"RegionID":  18,
-					"HostName":  "derp18c.tailscale.com",
-					"IPv4":      "176.58.90.207",
-					"IPv6":      "2a00:dd80:3e::c19",
-					"CanPort80": true
-				}, {
-					"Name":      "18d",
-					"RegionID":  18,
-					"HostName":  "derp18d.tailscale.com",
-					"IPv4":      "176.58.90.104",
-					"IPv6":      "2a00:dd80:3e::f2e",
-					"CanPort80": true
-				}, {
-					"Name":      "18b",
-					"RegionID":  18,
-					"HostName":  "derp18b.tailscale.com",
-					"IPv4":      "176.58.90.147",
-					"IPv6":      "2a00:dd80:3e::363",
-					"CanPort80": true
-				}]
-			}, "19": {
-				"RegionID":   19,
-				"RegionCode": "mad",
-				"RegionName": "Madrid",
-				"Latitude":   40.416944,
-				"Longitude":  -3.703333,
-				"Nodes": [{
-					"Name":      "19c",
-					"RegionID":  19,
-					"HostName":  "derp19c.tailscale.com",
-					"IPv4":      "45.159.97.61",
-					"IPv6":      "2a00:dd80:14:10::20",
-					"CanPort80": true
-				}, {
-					"Name":      "19d",
-					"RegionID":  19,
-					"HostName":  "derp19d.tailscale.com",
-					"IPv4":      "45.159.97.233",
-					"IPv6":      "2a00:dd80:14:10::34a",
-					"CanPort80": true
-				}, {
-					"Name":      "19b",
-					"RegionID":  19,
-					"HostName":  "derp19b.tailscale.com",
-					"IPv4":      "45.159.97.144",
-					"IPv6":      "2a00:dd80:14:10::335",
-					"CanPort80": true
-				}]
-			}, "2": {
-				"RegionID":   2,
-				"RegionCode": "sfo",
-				"RegionName": "San Francisco",
-				"Latitude":   37.7775,
-				"Longitude":  -122.416389,
-				"Nodes": [{
-					"Name":      "2e",
-					"RegionID":  2,
-					"HostName":  "derp2e.tailscale.com",
-					"IPv4":      "192.73.252.134",
-					"IPv6":      "2607:f740:0:3f::44c",
-					"CanPort80": true
-				}, {
-					"Name":      "2f",
-					"RegionID":  2,
-					"HostName":  "derp2f.tailscale.com",
-					"IPv4":      "208.111.34.178",
-					"IPv6":      "2607:f740:0:3f::f4",
-					"CanPort80": true
-				}, {
-					"Name":      "2d",
-					"RegionID":  2,
-					"HostName":  "derp2d.tailscale.com",
-					"IPv4":      "192.73.252.65",
-					"IPv6":      "2607:f740:0:3f::287",
-					"CanPort80": true
-				}]
-			}, "20": {
-				"RegionID":   20,
-				"RegionCode": "hkg",
-				"RegionName": "Hong Kong",
-				"Latitude":   22.3193,
-				"Longitude":  114.1694,
-				"Nodes": [{
-					"Name":      "20c",
-					"RegionID":  20,
-					"HostName":  "derp20c.tailscale.com",
-					"IPv4":      "205.147.105.30",
-					"IPv6":      "2403:2500:8000:1::5fb",
-					"CanPort80": true
-				}, {
-					"Name":      "20d",
-					"RegionID":  20,
-					"HostName":  "derp20d.tailscale.com",
-					"IPv4":      "205.147.105.78",
-					"IPv6":      "2403:2500:8000:1::e9a",
-					"CanPort80": true
-				}, {
-					"Name":      "20b",
-					"RegionID":  20,
-					"HostName":  "derp20b.tailscale.com",
-					"IPv4":      "103.6.84.152",
-					"IPv6":      "2403:2500:8000:1::ef6",
-					"CanPort80": true
-				}]
-			}, "21": {
-				"RegionID":   21,
-				"RegionCode": "tor",
-				"RegionName": "Toronto",
-				"Latitude":   43.741667,
-				"Longitude":  -79.373333,
-				"Nodes": [{
-					"Name":      "21c",
-					"RegionID":  21,
-					"HostName":  "derp21c.tailscale.com",
-					"IPv4":      "162.248.221.215",
-					"IPv6":      "2607:f740:50::f10",
-					"CanPort80": true
-				}, {
-					"Name":      "21d",
-					"RegionID":  21,
-					"HostName":  "derp21d.tailscale.com",
-					"IPv4":      "162.248.221.248",
-					"IPv6":      "2607:f740:50::ca4",
-					"CanPort80": true
-				}, {
-					"Name":      "21b",
-					"RegionID":  21,
-					"HostName":  "derp21b.tailscale.com",
-					"IPv4":      "162.248.221.199",
-					"IPv6":      "2607:f740:50::1d1",
-					"CanPort80": true
-				}]
-			}, "22": {
-				"RegionID":   22,
-				"RegionCode": "waw",
-				"RegionName": "Warsaw",
-				"Latitude":   52.23,
-				"Longitude":  21.011111,
-				"Nodes": [{
-					"Name":      "22c",
-					"RegionID":  22,
-					"HostName":  "derp22c.tailscale.com",
-					"IPv4":      "45.159.98.253",
-					"IPv6":      "2a00:dd80:40:100::3f",
-					"CanPort80": true
-				}, {
-					"Name":      "22d",
-					"RegionID":  22,
-					"HostName":  "derp22d.tailscale.com",
-					"IPv4":      "45.159.98.145",
-					"IPv6":      "2a00:dd80:40:100::211",
-					"CanPort80": true
-				}, {
-					"Name":      "22b",
-					"RegionID":  22,
-					"HostName":  "derp22b.tailscale.com",
-					"IPv4":      "45.159.98.196",
-					"IPv6":      "2a00:dd80:40:100::316",
-					"CanPort80": true
-				}]
-			}, "23": {
-				"RegionID":   23,
-				"RegionCode": "dbi",
-				"RegionName": "Dubai",
-				"Latitude":   25.263056,
-				"Longitude":  55.297222,
-				"Nodes": [{
-					"Name":      "23c",
-					"RegionID":  23,
-					"HostName":  "derp23c.tailscale.com",
-					"IPv4":      "185.34.3.207",
-					"IPv6":      "2a00:dd80:3f:100::a50",
-					"CanPort80": true
-				}, {
-					"Name":      "23d",
-					"RegionID":  23,
-					"HostName":  "derp23d.tailscale.com",
-					"IPv4":      "185.34.3.75",
-					"IPv6":      "2a00:dd80:3f:100::97e",
-					"CanPort80": true
-				}, {
-					"Name":      "23b",
-					"RegionID":  23,
-					"HostName":  "derp23b.tailscale.com",
-					"IPv4":      "185.34.3.232",
-					"IPv6":      "2a00:dd80:3f:100::76f",
-					"CanPort80": true
-				}]
-			}, "24": {
-				"RegionID":   24,
-				"RegionCode": "hnl",
-				"RegionName": "Honolulu",
-				"Latitude":   21.306944,
-				"Longitude":  -157.858333,
-				"Nodes": [{
-					"Name":      "24c",
-					"RegionID":  24,
-					"HostName":  "derp24c.tailscale.com",
-					"IPv4":      "208.83.233.233",
-					"IPv6":      "2001:19f0:c000:c591:5400:04ff:fe26:2c5f",
-					"CanPort80": true
-				}, {
-					"Name":      "24d",
-					"RegionID":  24,
-					"HostName":  "derp24d.tailscale.com",
-					"IPv4":      "208.72.155.133",
-					"IPv6":      "2001:19f0:c000:c564:5400:04ff:fe26:2ba8",
-					"CanPort80": true
-				}, {
-					"Name":      "24b",
-					"RegionID":  24,
-					"HostName":  "derp24b.tailscale.com",
-					"IPv4":      "208.83.234.151",
-					"IPv6":      "2001:19f0:c000:c586:5400:04ff:fe26:2ba6",
-					"CanPort80": true
-				}]
-			}, "25": {
-				"RegionID":   25,
-				"RegionCode": "nai",
-				"RegionName": "Nairobi",
-				"Latitude":   -1.286389,
-				"Longitude":  36.817222,
-				"Nodes": [{
-					"Name":      "25c",
-					"RegionID":  25,
-					"HostName":  "derp25c.tailscale.com",
-					"IPv4":      "102.67.167.37",
-					"IPv6":      "2c0f:edb0:2000:1::2c7",
-					"CanPort80": true
-				}, {
-					"Name":      "25d",
-					"RegionID":  25,
-					"HostName":  "derp25d.tailscale.com",
-					"IPv4":      "102.67.167.188",
-					"IPv6":      "2c0f:edb0:2000:1::188",
-					"CanPort80": true
-				}, {
-					"Name":      "25b",
-					"RegionID":  25,
-					"HostName":  "derp25b.tailscale.com",
-					"IPv4":      "102.67.167.245",
-					"IPv6":      "2c0f:edb0:2000:1::2e9",
-					"CanPort80": true
-				}]
-			}, "26": {
-				"RegionID":   26,
-				"RegionCode": "nue",
-				"RegionName": "Nuremberg",
-				"Latitude":   49.453889,
-				"Longitude":  11.0775,
-				"Nodes": [{
-					"Name":      "26c",
-					"RegionID":  26,
-					"HostName":  "derp26c.tailscale.com",
-					"IPv4":      "49.12.193.137",
-					"IPv6":      "2a01:4f8:1c1c:5c70::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26d",
-					"RegionID":  26,
-					"HostName":  "derp26d.tailscale.com",
-					"IPv4":      "49.13.204.141",
-					"IPv6":      "2a01:4f8:1c0c:7d06::1",
-					"CanPort80": true
-				}, {
-					"Name":      "26b",
-					"RegionID":  26,
-					"HostName":  "derp26b.tailscale.com",
-					"IPv4":      "167.235.72.200",
-					"IPv6":      "2a01:4f8:1c1c:47b6::1",
-					"CanPort80": true
-				}]
-			}, "27": {
-				"RegionID":   27,
-				"RegionCode": "iad",
-				"RegionName": "Ashburn",
-				"Latitude":   39.03,
-				"Longitude":  -77.471111,
-				"Nodes": [{
-					"Name":      "27d",
-					"RegionID":  27,
-					"HostName":  "derp27d.tailscale.com",
-					"IPv4":      "178.156.152.106",
-					"IPv6":      "2a01:4ff:f0:3c8e::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27c",
-					"RegionID":  27,
-					"HostName":  "derp27c.tailscale.com",
-					"IPv4":      "178.156.152.91",
-					"IPv6":      "2a01:4ff:f0:3913::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27e",
-					"RegionID":  27,
-					"HostName":  "derp27e.tailscale.com",
-					"IPv4":      "178.156.134.232",
-					"IPv6":      "2a01:4ff:f0:28d4::1",
-					"CanPort80": true
-				}, {
-					"Name":      "27b",
-					"RegionID":  27,
-					"HostName":  "derp27b.tailscale.com",
-					"IPv4":      "5.161.218.233",
-					"IPv6":      "2a01:4ff:f0:3db9::1",
-					"CanPort80": true
-				}]
-			}, "28": {
-				"RegionID":   28,
-				"RegionCode": "hel",
-				"RegionName": "Helsinki",
-				"Latitude":   60.170833,
-				"Longitude":  24.9375,
-				"Nodes": [{
-					"Name":      "28c",
-					"RegionID":  28,
-					"HostName":  "derp28c.tailscale.com",
-					"IPv4":      "95.217.2.165",
-					"IPv6":      "2a01:4f9:c012:cd74::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28d",
-					"RegionID":  28,
-					"HostName":  "derp28d.tailscale.com",
-					"IPv4":      "157.180.28.32",
-					"IPv6":      "2a01:4f9:c012:2e5b::1",
-					"CanPort80": true
-				}, {
-					"Name":      "28b",
-					"RegionID":  28,
-					"HostName":  "derp28b.tailscale.com",
-					"IPv4":      "65.109.143.62",
-					"IPv6":      "2a01:4f9:c012:d55c::1",
-					"CanPort80": true
-				}]
-			}, "3": {
-				"RegionID":   3,
-				"RegionCode": "sin",
-				"RegionName": "Singapore",
-				"Latitude":   1.3521,
-				"Longitude":  103.8198,
-				"Nodes": [{
-					"Name":      "3g",
-					"RegionID":  3,
-					"HostName":  "derp3g.tailscale.com",
-					"IPv4":      "172.237.72.79",
-					"IPv6":      "2600:3c15::2000:adff:fe08:6fab",
-					"CanPort80": true
-				}, {
-					"Name":      "3f",
-					"RegionID":  3,
-					"HostName":  "derp3f.tailscale.com",
-					"IPv4":      "172.237.72.8",
-					"IPv6":      "2600:3c15::2000:53ff:fe48:a668",
-					"CanPort80": true
-				}, {
-					"Name":      "3h",
-					"RegionID":  3,
-					"HostName":  "derp3h.tailscale.com",
-					"IPv4":      "172.237.66.30",
-					"IPv6":      "2600:3c15::2000:3dff:fe44:50aa",
-					"CanPort80": true
-				}, {
-					"Name":      "3e",
-					"RegionID":  3,
-					"HostName":  "derp3e.tailscale.com",
-					"IPv4":      "172.237.72.43",
-					"IPv6":      "2600:3c15::2000:6cff:fee4:d799",
-					"CanPort80": true
-				}]
-			}, "4": {
-				"RegionID":   4,
-				"RegionCode": "fra",
-				"RegionName": "Frankfurt",
-				"Latitude":   50.1109,
-				"Longitude":  8.6821,
-				"Nodes": [{
-					"Name":      "4h",
-					"RegionID":  4,
-					"HostName":  "derp4h.tailscale.com",
-					"IPv4":      "185.40.234.77",
-					"IPv6":      "2a00:dd80:20::bcf",
-					"CanPort80": true
-				}, {
-					"Name":      "4i",
-					"RegionID":  4,
-					"HostName":  "derp4i.tailscale.com",
-					"IPv4":      "185.40.234.53",
-					"IPv6":      "2a00:dd80:20::8a6",
-					"CanPort80": true
-				}, {
-					"Name":      "4g",
-					"RegionID":  4,
-					"HostName":  "derp4g.tailscale.com",
-					"IPv4":      "185.40.234.113",
-					"IPv6":      "2a00:dd80:20::8f",
-					"CanPort80": true
-				}, {
-					"Name":      "4j",
-					"RegionID":  4,
-					"HostName":  "derp4j.tailscale.com",
-					"IPv4":      "185.40.234.176",
-					"IPv6":      "2a00:dd80:20::e67",
-					"CanPort80": true
-				}, {
-					"Name":      "4f",
-					"RegionID":  4,
-					"HostName":  "derp4f.tailscale.com",
-					"IPv4":      "185.40.234.219",
-					"IPv6":      "2a00:dd80:20::a25",
-					"CanPort80": true
-				}]
-			}, "5": {
-				"RegionID":   5,
-				"RegionCode": "syd",
-				"RegionName": "Sydney",
-				"Latitude":   -33.867778,
-				"Longitude":  151.21,
-				"Nodes": [{
-					"Name":      "5f",
-					"RegionID":  5,
-					"HostName":  "derp5f.tailscale.com",
-					"IPv4":      "172.105.166.103",
-					"IPv6":      "2400:8907::2000:ccff:fe1f:80da",
-					"CanPort80": true
-				}, {
-					"Name":      "5g",
-					"RegionID":  5,
-					"HostName":  "derp5g.tailscale.com",
-					"IPv4":      "172.105.169.57",
-					"IPv6":      "2400:8907::2000:2fff:fea7:57f4",
-					"CanPort80": true
-				}, {
-					"Name":      "5e",
-					"RegionID":  5,
-					"HostName":  "derp5e.tailscale.com",
-					"IPv4":      "172.105.179.230",
-					"IPv6":      "2400:8907::2000:ceff:fe8d:4f4e",
-					"CanPort80": true
-				}]
-			}, "6": {
-				"RegionID":   6,
-				"RegionCode": "blr",
-				"RegionName": "Bengaluru",
-				"Latitude":   12.9716,
-				"Longitude":  77.5946,
-				"Nodes": [{
-					"Name":      "6a",
-					"RegionID":  6,
-					"HostName":  "derp6.tailscale.com",
-					"IPv4":      "68.183.90.120",
-					"IPv6":      "2400:6180:100:d0::982:d001",
-					"CanPort80": true
-				}]
-			}, "7": {
-				"RegionID":   7,
-				"RegionCode": "tok",
-				"RegionName": "Tokyo",
-				"Latitude":   35.6764,
-				"Longitude":  139.65,
-				"Nodes": [{
-					"Name":      "7g",
-					"RegionID":  7,
-					"HostName":  "derp7g.tailscale.com",
-					"IPv4":      "172.238.6.179",
-					"IPv6":      "2600:3c18::2000:3fff:fe80:3ebd",
-					"CanPort80": true
-				}, {
-					"Name":      "7f",
-					"RegionID":  7,
-					"HostName":  "derp7f.tailscale.com",
-					"IPv4":      "172.238.6.34",
-					"IPv6":      "2600:3c18::2000:acff:fe8e:3ed5",
-					"CanPort80": true
-				}, {
-					"Name":      "7h",
-					"RegionID":  7,
-					"HostName":  "derp7h.tailscale.com",
-					"IPv4":      "172.237.28.183",
-					"IPv6":      "2600:3c18::2000:b1ff:fea9:4560",
-					"CanPort80": true
-				}, {
-					"Name":      "7e",
-					"RegionID":  7,
-					"HostName":  "derp7e.tailscale.com",
-					"IPv4":      "172.238.6.180",
-					"IPv6":      "2600:3c18::2000:60ff:fe0f:6e83",
-					"STUNOnly":  true,
-					"CanPort80": true
-				}]
-			}, "8": {
-				"RegionID":   8,
-				"RegionCode": "lhr",
-				"RegionName": "London",
-				"Latitude":   51.5072,
-				"Longitude":  0.1276,
-				"Nodes": [{
-					"Name":      "8f",
-					"RegionID":  8,
-					"HostName":  "derp8f.tailscale.com",
-					"IPv4":      "176.58.88.183",
-					"IPv6":      "2a00:dd80:3a::dfa",
-					"CanPort80": true
-				}, {
-					"Name":      "8g",
-					"RegionID":  8,
-					"HostName":  "derp8g.tailscale.com",
-					"IPv4":      "176.58.92.254",
-					"IPv6":      "2a00:dd80:3a::ed",
-					"CanPort80": true
-				}, {
-					"Name":      "8e",
-					"RegionID":  8,
-					"HostName":  "derp8e.tailscale.com",
-					"IPv4":      "176.58.92.144",
-					"IPv6":      "2a00:dd80:3a::b33",
-					"CanPort80": true
-				}]
-			}, "9": {
-				"RegionID":   9,
-				"RegionCode": "dfw",
-				"RegionName": "Dallas",
-				"Latitude":   32.779167,
-				"Longitude":  -96.808889,
-				"Nodes": [{
-					"Name":      "9e",
-					"RegionID":  9,
-					"HostName":  "derp9e.tailscale.com",
-					"IPv4":      "192.73.248.83",
-					"IPv6":      "2607:f740:100::359",
-					"CanPort80": true
-				}, {
-					"Name":      "9f",
-					"RegionID":  9,
-					"HostName":  "derp9f.tailscale.com",
-					"IPv4":      "209.177.156.197",
-					"IPv6":      "2607:f740:100::cad",
-					"CanPort80": true
-				}, {
-					"Name":      "9d",
-					"RegionID":  9,
-					"HostName":  "derp9d.tailscale.com",
-					"IPv4":      "209.177.156.94",
-					"IPv6":      "2607:f740:100::c05",
-					"CanPort80": true
-				}]
-			}}},
-			"DisplayMessages":  null,
-			"TKAEnabled":       false,
-			"TKAHead":          "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
-			"Domain":           "odin@example.com",
-			"DomainAuditLogID": "",
-			"UserProfiles": {"1260082990019555": {
-				"ID":          1260082990019555,
-				"LoginName":   "tagged-devices",
-				"DisplayName": "Tagged Devices"
-			}, "3982058329734709": {
-				"ID":          3982058329734709,
-				"LoginName":   "freya@example.com",
-				"DisplayName": "freya"
-			}, "4156223528223174": {
-				"ID":          4156223528223174,
-				"LoginName":   "odin@example.com",
-				"DisplayName": "odin"
-			}, "4538565228176803": {
-				"ID":          4538565228176803,
-				"LoginName":   "thor@example.org",
-				"DisplayName": "thor"
-			}}
-		}
-	}}
-}
diff --git a/hscontrol/policy/v2/testdata/routes_results/routes-ea1-exitnode-field-basic.hujson b/hscontrol/policy/v2/testdata/routes_results/routes-ea1-exitnode-field-basic.hujson
index 4af24d058..8a7ba454d 100644
--- a/hscontrol/policy/v2/testdata/routes_results/routes-ea1-exitnode-field-basic.hujson
+++ b/hscontrol/policy/v2/testdata/routes_results/routes-ea1-exitnode-field-basic.hujson
@@ -273,7 +273,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -451,7 +451,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -1496,7 +1496,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -1653,7 +1653,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -2676,7 +2676,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -2854,7 +2854,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -3881,7 +3881,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -4059,7 +4059,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -5263,7 +5263,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -6306,7 +6306,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -6463,7 +6463,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -7502,7 +7502,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -7659,7 +7659,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -8708,7 +8708,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -8864,7 +8864,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -9913,7 +9913,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -10069,7 +10069,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -11112,7 +11112,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -11269,7 +11269,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
@@ -12320,7 +12320,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -13512,7 +13512,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -13669,7 +13669,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}],
diff --git a/hscontrol/policy/v2/testdata/routes_results/routes-ea11-both-fields-same-tag.hujson b/hscontrol/policy/v2/testdata/routes_results/routes-ea11-both-fields-same-tag.hujson
index 8cfbea993..bb81c3386 100644
--- a/hscontrol/policy/v2/testdata/routes_results/routes-ea11-both-fields-same-tag.hujson
+++ b/hscontrol/policy/v2/testdata/routes_results/routes-ea11-both-fields-same-tag.hujson
@@ -261,7 +261,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -453,7 +453,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -1463,7 +1463,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -1655,7 +1655,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -2664,7 +2664,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -2856,7 +2856,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -3870,7 +3870,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -4061,7 +4061,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -5074,7 +5074,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -6273,7 +6273,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -6465,7 +6465,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -7469,7 +7469,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -7661,7 +7661,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -8653,7 +8653,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -8866,7 +8866,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -9880,7 +9880,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -10071,7 +10071,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -11079,7 +11079,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -11271,7 +11271,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -12471,7 +12471,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
@@ -13479,7 +13479,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -13671,7 +13671,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}],
diff --git a/hscontrol/policy/v2/testdata/routes_results/routes-ea13-both-fields-exitnode-matches.hujson b/hscontrol/policy/v2/testdata/routes_results/routes-ea13-both-fields-exitnode-matches.hujson
index 9199b4089..8ff0bceb8 100644
--- a/hscontrol/policy/v2/testdata/routes_results/routes-ea13-both-fields-exitnode-matches.hujson
+++ b/hscontrol/policy/v2/testdata/routes_results/routes-ea13-both-fields-exitnode-matches.hujson
@@ -250,7 +250,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -407,7 +407,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -1447,7 +1447,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -1604,7 +1604,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -2643,7 +2643,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -2821,7 +2821,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -3844,7 +3844,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -4000,7 +4000,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -5199,7 +5199,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -6216,7 +6216,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -6394,7 +6394,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -7428,7 +7428,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -7606,7 +7606,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -8628,7 +8628,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -8785,7 +8785,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -9829,7 +9829,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -9985,7 +9985,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -11023,7 +11023,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -11180,7 +11180,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -12226,7 +12226,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -13413,7 +13413,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -13570,7 +13570,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
diff --git a/hscontrol/policy/v2/testdata/routes_results/routes-ea3-exitnode-field-dual-node.hujson b/hscontrol/policy/v2/testdata/routes_results/routes-ea3-exitnode-field-dual-node.hujson
index a9e7dab3c..2b7ef0661 100644
--- a/hscontrol/policy/v2/testdata/routes_results/routes-ea3-exitnode-field-dual-node.hujson
+++ b/hscontrol/policy/v2/testdata/routes_results/routes-ea3-exitnode-field-dual-node.hujson
@@ -302,7 +302,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -345,7 +345,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -1477,7 +1477,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -1520,7 +1520,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -2672,7 +2672,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -2715,7 +2715,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -3850,7 +3850,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -3893,7 +3893,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -5028,7 +5028,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -6200,7 +6200,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -6243,7 +6243,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -7348,7 +7348,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -7391,7 +7391,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -8526,7 +8526,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -8569,7 +8569,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -9725,7 +9725,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -9747,7 +9747,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -10897,7 +10897,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -10940,7 +10940,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -12093,7 +12093,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -13223,7 +13223,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit", "tag:router"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -13266,7 +13266,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
diff --git a/hscontrol/policy/v2/testdata/routes_results/routes-ea4-exitnode-plus-routes-dual-node.hujson b/hscontrol/policy/v2/testdata/routes_results/routes-ea4-exitnode-plus-routes-dual-node.hujson
index 3c4a08f3b..fb82d380b 100644
--- a/hscontrol/policy/v2/testdata/routes_results/routes-ea4-exitnode-plus-routes-dual-node.hujson
+++ b/hscontrol/policy/v2/testdata/routes_results/routes-ea4-exitnode-plus-routes-dual-node.hujson
@@ -237,7 +237,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -281,7 +281,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -1439,7 +1439,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -1483,7 +1483,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -2640,7 +2640,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -2684,7 +2684,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -3846,7 +3846,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -3890,7 +3890,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -5050,7 +5050,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -6249,7 +6249,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -6293,7 +6293,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -7445,7 +7445,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -7489,7 +7489,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -8651,7 +8651,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -8673,7 +8673,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -9856,7 +9856,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -9900,7 +9900,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -11055,7 +11055,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -11099,7 +11099,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -12278,7 +12278,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
@@ -13455,7 +13455,7 @@
 				"Tags":                 ["tag:exit", "tag:router"],
 				"PrimaryRoutes":        ["172.16.0.0/24"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "wartortle",
 				"ComputedNameWithHost": "wartortle"
 			}, {
@@ -13499,7 +13499,7 @@
 				"Cap":                  131,
 				"Tags":                 ["tag:exit"],
 				"Online":               true,
-				"CapMap":               {"suggest-exit-node": null},
+				"CapMap":               {"suggest-charmander": null},
 				"ComputedName":         "charmander",
 				"ComputedNameWithHost": "charmander"
 			}, {
diff --git a/hscontrol/policy/v2/types.go b/hscontrol/policy/v2/types.go
index 50a89f8c1..be18189cc 100644
--- a/hscontrol/policy/v2/types.go
+++ b/hscontrol/policy/v2/types.go
@@ -20,7 +20,6 @@ import (
 	"tailscale.com/tailcfg"
 	"tailscale.com/types/views"
 	"tailscale.com/util/multierr"
-	"tailscale.com/util/set"
 	"tailscale.com/util/slicesx"
 )
 
@@ -63,7 +62,7 @@ var (
 // SaaS imposes no minimum (0s is accepted) so headscale matches.
 const (
 	SSHCheckPeriodDefault = 12 * time.Hour
-	SSHCheckPeriodMax     = 7 * 24 * time.Hour
+	SSHCheckPeriodMax     = 168 * time.Hour
 )
 
 // ACL validation errors.
@@ -83,28 +82,11 @@ var (
 	ErrGrantDefaultRouteCIDR           = errors.New("to allow all IP addresses, use \"*\" or \"autogroup:internet\"")
 )
 
-// NodeAttrs validation errors.
-var (
-	ErrNodeAttrsIPPoolReserved      = errors.New("nodeAttrs ipPool must not overlap reserved Tailscale ranges")
-	ErrNodeAttrsIPPoolOutOfRange    = errors.New("nodeAttrs ipPool must be within 100.64.0.0/10")
-	ErrNodeAttrsAutogroupNotAllowed = errors.New("nodeAttrs target does not support this autogroup")
-	ErrNodeAttrUnsupported          = errors.New("nodeAttrs uses a feature headscale does not yet support")
-	ErrNodeAttrIPPoolUnsupported    = errors.New("nodeAttrs ipPool requires the IP allocator (https://github.com/juanfont/headscale/issues/2912)")
-	ErrNodeAttrTargetUnsupported    = errors.New("nodeAttrs target alias type is not supported")
-)
-
-// nodeAttrUnsupportedCaps lists caps that headscale parses but cannot act on
-// today. Each entry maps to the tracking issue an operator can follow. The
-// caps are accepted by Tailscale SaaS, but delivering them via headscale
-// without the matching server-side machinery would be misleading — nodes
-// would advertise a feature that does not work. Reject at policy load and
-// point operators at the issue.
-var nodeAttrUnsupportedCaps = map[tailcfg.NodeCapability]string{
-	tailcfg.NodeAttrFunnel: "https://github.com/juanfont/headscale/issues/2527",
-}
-
 // Policy validation errors.
 var (
+	ErrUnknownAliasType            = errors.New("unknown alias type")
+	ErrUnknownAutoApprover         = errors.New("unknown auto approver type")
+	ErrUnknownOwnerType            = errors.New("unknown owner type")
 	ErrInvalidUsername             = errors.New("username must contain @")
 	ErrUserNotFound                = errors.New("user not found")
 	ErrMultipleUsersFound          = errors.New("multiple users found")
@@ -142,6 +124,8 @@ var (
 	ErrHostNotDefined              = errors.New("host not defined in policy")
 	ErrSSHSourceAliasNotSupported  = errors.New("alias not supported for SSH source")
 	ErrSSHDestAliasNotSupported    = errors.New("alias not supported for SSH destination")
+	ErrUnknownSSHDestAlias         = errors.New("unknown SSH destination alias type")
+	ErrUnknownSSHSrcAlias          = errors.New("unknown SSH source alias type")
 	ErrUnknownField                = errors.New("unknown field")
 	ErrProtocolNoSpecificPorts     = errors.New("protocol does not support specific ports")
 	ErrTestEmptyAssertions         = errors.New("test entry must have at least one of \"accept\" or \"deny\"")
@@ -258,7 +242,26 @@ func (a AliasWithPorts) MarshalJSON() ([]byte, error) {
 		return []byte(`""`), nil
 	}
 
-	alias := a.String()
+	var alias string
+
+	switch v := a.Alias.(type) {
+	case *Username:
+		alias = string(*v)
+	case *Group:
+		alias = string(*v)
+	case *Tag:
+		alias = string(*v)
+	case *Host:
+		alias = string(*v)
+	case *Prefix:
+		alias = v.String()
+	case *AutoGroup:
+		alias = string(*v)
+	case Asterix:
+		alias = "*"
+	default:
+		return nil, fmt.Errorf("%w: %T", ErrUnknownAliasType, v)
+	}
 
 	// If no ports are specified
 	if len(a.Ports) == 0 {
@@ -318,15 +321,15 @@ func (a Asterix) resolve(_ *Policy, _ types.Users, _ views.Slice[types.NodeView]
 // IPSet merges overlapping ranges (e.g. 10.0.0.0/8 absorbs
 // 10.33.0.0/16), but Tailscale preserves individual route entries.
 func approvedSubnetRoutes(nodes views.Slice[types.NodeView]) []string {
-	seen := make(set.Set[string])
+	seen := make(map[string]bool)
 
 	var routes []string
 
 	for _, node := range nodes.All() {
 		for _, route := range node.SubnetRoutes() {
 			s := route.String()
-			if !seen.Contains(s) {
-				seen.Add(s)
+			if !seen[s] {
+				seen[s] = true
 				routes = append(routes, s)
 			}
 		}
@@ -379,12 +382,11 @@ func (u *Username) CanBeAutoApprover() bool {
 	return true
 }
 
-// resolveUser attempts to find a user in the provided [types.Users] slice that matches the [Username].
-// It prioritizes matching the [types.User.ProviderIdentifier], and if not found, it falls back to matching
-// the [types.User.Email] or [types.User.Name].
+// resolveUser attempts to find a user in the provided [types.Users] slice that matches the Username.
+// It prioritizes matching the ProviderIdentifier, and if not found, it falls back to matching the Email or Name.
 // If no matching user is found, it returns an error indicating no user matching.
 // If multiple matching users are found, it returns an error indicating multiple users matching.
-// It returns the matched [types.User] and a nil error if exactly one match is found.
+// It returns the matched types.User and a nil error if exactly one match is found.
 func (u *Username) resolveUser(users types.Users) (types.User, error) {
 	var potentialUsers types.Users
 
@@ -696,9 +698,9 @@ func (p *Prefix) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// Resolve resolves the [Prefix] to an [netipx.IPSet]. The [netipx.IPSet] will
-// contain all the IP addresses that the [Prefix] represents within Headscale.
-// It is the product of the [Prefix] and the [Policy], [types.Users], and [types.Nodes].
+// Resolve resolves the Prefix to an IPSet. The IPSet will contain all the IP
+// addresses that the Prefix represents within Headscale. It is the product
+// of the Prefix and the Policy, Users, and Nodes.
 //
 // See [Policy], [types.Users], and [types.Nodes] for more details.
 func (p *Prefix) Resolve(_ *Policy, _ types.Users, nodes views.Slice[types.NodeView]) (ResolvedAddresses, error) {
@@ -842,16 +844,16 @@ type Alias interface {
 	UnmarshalJSON(b []byte) error
 
 	// String renders the alias back to its policy-file form. Implementations
-	// are expected to return a value that round-trips through [parseAlias] for
+	// are expected to return a value that round-trips through parseAlias for
 	// any alias the parser accepted, so callers can use it as a stable
 	// identity in rendered errors and logs.
 	String() string
 
-	// Resolve resolves the [Alias] to a [netipx.IPSet]. The [netipx.IPSet] will
-	// contain all the IP addresses that the [Alias] represents within Headscale.
-	// It is the product of the [Alias] and the [Policy], [types.Users] and
-	// [types.Nodes]. This is an interface definition and the implementation is
-	// independent of the [Alias] type.
+	// Resolve resolves the Alias to an IPSet. The IPSet will contain all the IP
+	// addresses that the Alias represents within Headscale. It is the product
+	// of the Alias and the Policy, Users and Nodes.
+	// This is an interface definition and the implementation is independent of
+	// the Alias type.
 	Resolve(pol *Policy, users types.Users, nodes views.Slice[types.NodeView]) (ResolvedAddresses, error)
 
 	resolve(pol *Policy, users types.Users, nodes views.Slice[types.NodeView]) (*netipx.IPSet, error)
@@ -1109,7 +1111,24 @@ func (a *Aliases) MarshalJSON() ([]byte, error) {
 
 	aliases := make([]string, len(*a))
 	for i, alias := range *a {
-		aliases[i] = alias.String()
+		switch v := alias.(type) {
+		case *Username:
+			aliases[i] = string(*v)
+		case *Group:
+			aliases[i] = string(*v)
+		case *Tag:
+			aliases[i] = string(*v)
+		case *Host:
+			aliases[i] = string(*v)
+		case *Prefix:
+			aliases[i] = v.String()
+		case *AutoGroup:
+			aliases[i] = string(*v)
+		case Asterix:
+			aliases[i] = "*"
+		default:
+			return nil, fmt.Errorf("%w: %T", ErrUnknownAliasType, v)
+		}
 	}
 
 	return json.Marshal(aliases)
@@ -1138,7 +1157,7 @@ func buildIPSetMultiErr(ipBuilder *netipx.IPSetBuilder, errs []error) (*netipx.I
 	return ips, multierr.New(append(errs, err)...)
 }
 
-// Helper function to unmarshal a JSON string into either an [AutoApprover] or [Owner] pointer.
+// Helper function to unmarshal a JSON string into either an AutoApprover or Owner pointer.
 func unmarshalPointer[T any](
 	b []byte,
 	parseFunc func(string) (T, error),
@@ -1186,7 +1205,16 @@ func (aa AutoApprovers) MarshalJSON() ([]byte, error) {
 
 	approvers := make([]string, len(aa))
 	for i, approver := range aa {
-		approvers[i] = approver.String()
+		switch v := approver.(type) {
+		case *Username:
+			approvers[i] = string(*v)
+		case *Tag:
+			approvers[i] = string(*v)
+		case *Group:
+			approvers[i] = string(*v)
+		default:
+			return nil, fmt.Errorf("%w: %T", ErrUnknownAutoApprover, v)
+		}
 	}
 
 	return json.Marshal(approvers)
@@ -1271,7 +1299,16 @@ func (o Owners) MarshalJSON() ([]byte, error) {
 
 	owners := make([]string, len(o))
 	for i, owner := range o {
-		owners[i] = owner.String()
+		switch v := owner.(type) {
+		case *Username:
+			owners[i] = string(*v)
+		case *Group:
+			owners[i] = string(*v)
+		case *Tag:
+			owners[i] = string(*v)
+		default:
+			return nil, fmt.Errorf("%w: %T", ErrUnknownOwnerType, v)
+		}
 	}
 
 	return json.Marshal(owners)
@@ -1292,7 +1329,7 @@ func parseOwner(s string) (Owner, error) {
 
 type Usernames []Username
 
-// Groups are a map of [Group] to a list of [Username].
+// Groups are a map of Group to a list of Username.
 type Groups map[Group]Usernames
 
 func (g *Groups) Contains(group *Group) error {
@@ -1300,15 +1337,17 @@ func (g *Groups) Contains(group *Group) error {
 		return nil
 	}
 
-	if _, ok := (*g)[*group]; ok {
-		return nil
+	for defined := range map[Group]Usernames(*g) {
+		if defined == *group {
+			return nil
+		}
 	}
 
 	return fmt.Errorf("%w: %q", ErrGroupNotDefined, group)
 }
 
-// UnmarshalJSON overrides the default JSON unmarshalling for [Groups] to ensure
-// that each group name is validated using the [isGroup] function. This ensures
+// UnmarshalJSON overrides the default JSON unmarshalling for Groups to ensure
+// that each group name is validated using the isGroup function. This ensures
 // that all group names conform to the expected format, which is always prefixed
 // with "group:". If any group name is invalid, an error is returned.
 func (g *Groups) UnmarshalJSON(b []byte) error {
@@ -1355,9 +1394,11 @@ func (g *Groups) UnmarshalJSON(b []byte) error {
 		}
 	}
 
-	// Reject group-in-group references. Reverse-sort the keys so the
-	// reported (parent, child) pair names the deepest non-leaf parent
-	// first.
+	// SaaS rejects any group-in-group reference (cycle, chain,
+	// self-cycle) with `groups["X"]: "Y": group members cannot be
+	// recursive`. Iterate keys in descending alphabetical order so
+	// the reported (X, Y) pair matches the SaaS engine, which
+	// reports the deepest non-leaf parent first.
 	keys := make([]string, 0, len(rawGroups))
 	for k := range rawGroups {
 		keys = append(keys, k)
@@ -1464,7 +1505,16 @@ func (to TagOwners) MarshalJSON() ([]byte, error) {
 		ownerStrs := make([]string, len(owners))
 
 		for i, owner := range owners {
-			ownerStrs[i] = owner.String()
+			switch v := owner.(type) {
+			case *Username:
+				ownerStrs[i] = string(*v)
+			case *Group:
+				ownerStrs[i] = string(*v)
+			case *Tag:
+				ownerStrs[i] = string(*v)
+			default:
+				return nil, fmt.Errorf("%w: %T", ErrUnknownOwnerType, v)
+			}
 		}
 
 		rawTagOwners[tagStr] = ownerStrs
@@ -1473,7 +1523,7 @@ func (to TagOwners) MarshalJSON() ([]byte, error) {
 	return json.Marshal(rawTagOwners)
 }
 
-// TagOwners are a map of [Tag] to a list of the UserEntities that own the tag.
+// TagOwners are a map of Tag to a list of the UserEntities that own the tag.
 type TagOwners map[Tag]Owners
 
 func (to TagOwners) Contains(tagOwner *Tag) error {
@@ -1481,8 +1531,10 @@ func (to TagOwners) Contains(tagOwner *Tag) error {
 		return nil
 	}
 
-	if _, ok := to[*tagOwner]; ok {
-		return nil
+	for defined := range map[Tag]Owners(to) {
+		if defined == *tagOwner {
+			return nil
+		}
 	}
 
 	return fmt.Errorf("%w: %q", ErrTagNotDefined, tagOwner)
@@ -1517,9 +1569,9 @@ func (ap AutoApproverPolicy) MarshalJSON() ([]byte, error) {
 	return json.Marshal(&obj)
 }
 
-// resolveAutoApprovers resolves the [AutoApprovers] to a map of [netip.Prefix] to [netipx.IPSet].
+// resolveAutoApprovers resolves the AutoApprovers to a map of netip.Prefix to netipx.IPSet.
 // The resulting map can be used to quickly look up if a node can self-approve a route.
-// It is intended for internal use in a [PolicyManager].
+// It is intended for internal use in a PolicyManager.
 func resolveAutoApprovers(p *Policy, users types.Users, nodes views.Slice[types.NodeView]) (map[netip.Prefix]*netipx.IPSet, *netipx.IPSet, error) {
 	if p == nil {
 		return nil, nil, nil
@@ -1583,14 +1635,14 @@ func resolveAutoApprovers(p *Policy, users types.Users, nodes views.Slice[types.
 	return ret, exitNodeSet, nil
 }
 
-// Action represents the action to take for an [ACL] rule.
+// Action represents the action to take for an ACL rule.
 type Action string
 
 const (
 	ActionAccept Action = "accept"
 )
 
-// SSHAction represents the action to take for an [SSH] rule.
+// SSHAction represents the action to take for an SSH rule.
 type SSHAction string
 
 const (
@@ -1598,12 +1650,12 @@ const (
 	SSHActionCheck  SSHAction = "check"
 )
 
-// String returns the string representation of the [Action].
+// String returns the string representation of the Action.
 func (a *Action) String() string {
 	return string(*a)
 }
 
-// UnmarshalJSON implements JSON unmarshaling for [Action].
+// UnmarshalJSON implements JSON unmarshaling for Action.
 func (a *Action) UnmarshalJSON(b []byte) error {
 	str := strings.Trim(string(b), `"`)
 	switch str {
@@ -1616,19 +1668,25 @@ func (a *Action) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// MarshalJSON implements JSON marshaling for [Action].
+// MarshalJSON implements JSON marshaling for Action.
 func (a *Action) MarshalJSON() ([]byte, error) {
 	return json.Marshal(string(*a))
 }
 
-// String returns the string representation of the [SSHAction].
+// String returns the string representation of the SSHAction.
 func (a *SSHAction) String() string {
 	return string(*a)
 }
 
-// UnmarshalJSON trims surrounding whitespace before matching, lets the
-// empty string through (per-rule Validate() surfaces it later), and
-// rejects every other unknown value here.
+// UnmarshalJSON implements JSON unmarshaling for SSHAction.
+//
+// Empty strings are accepted at parse time; the per-rule validate()
+// pass surfaces them with `action must be specified` to match SaaS.
+// Non-empty unknown values fail here with `"foo" is not a valid action`.
+//
+// SaaS trims surrounding whitespace before comparing, then complains
+// about the trimmed content; the resulting error quotes the trimmed
+// value (e.g. `" Accept "` → `"Accept" is not a valid action`).
 func (a *SSHAction) UnmarshalJSON(b []byte) error {
 	str := strings.TrimSpace(strings.Trim(string(b), `"`))
 	switch str {
@@ -1645,7 +1703,7 @@ func (a *SSHAction) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// MarshalJSON implements JSON marshaling for [SSHAction].
+// MarshalJSON implements JSON marshaling for SSHAction.
 func (a *SSHAction) MarshalJSON() ([]byte, error) {
 	return json.Marshal(string(*a))
 }
@@ -1671,13 +1729,51 @@ const (
 	ProtocolNameWildcard Protocol = "*"
 )
 
-// String returns the string representation of the [Protocol].
+// String returns the string representation of the Protocol.
 func (p *Protocol) String() string {
 	return string(*p)
 }
 
-// toIANAProtocolNumbers converts a [Protocol] to its IANA protocol numbers.
-// Since validation happens during [Protocol.UnmarshalJSON], this method should not fail for valid [Protocol] values.
+// Description returns the human-readable description of the Protocol.
+func (p *Protocol) Description() string {
+	switch *p {
+	case ProtocolNameICMP:
+		return "Internet Control Message Protocol"
+	case ProtocolNameIGMP:
+		return "Internet Group Management Protocol"
+	case ProtocolNameIPv4:
+		return "IPv4 encapsulation"
+	case ProtocolNameTCP:
+		return "Transmission Control Protocol"
+	case ProtocolNameEGP:
+		return "Exterior Gateway Protocol"
+	case ProtocolNameIGP:
+		return "Interior Gateway Protocol"
+	case ProtocolNameUDP:
+		return "User Datagram Protocol"
+	case ProtocolNameGRE:
+		return "Generic Routing Encapsulation"
+	case ProtocolNameESP:
+		return "Encapsulating Security Payload"
+	case ProtocolNameAH:
+		return "Authentication Header"
+	case ProtocolNameIPv6ICMP:
+		return "Internet Control Message Protocol for IPv6"
+	case ProtocolNameSCTP:
+		return "Stream Control Transmission Protocol"
+	case ProtocolNameFC:
+		return "Fibre Channel"
+	case ProtocolNameIPInIP:
+		return "IP-in-IP Encapsulation"
+	case ProtocolNameWildcard:
+		return "Wildcard (not supported - use specific protocol)"
+	default:
+		return "Unknown Protocol"
+	}
+}
+
+// toIANAProtocolNumbers converts a Protocol to its IANA protocol numbers.
+// Since validation happens during UnmarshalJSON, this method should not fail for valid Protocol values.
 func (p *Protocol) toIANAProtocolNumbers() []int {
 	switch *p {
 	case "":
@@ -1721,13 +1817,13 @@ func (p *Protocol) toIANAProtocolNumbers() []int {
 	}
 }
 
-// UnmarshalJSON implements JSON unmarshaling for [Protocol].
+// UnmarshalJSON implements JSON unmarshaling for Protocol.
 //
 // Tailscale accepts both named ("tcp") and numeric IANA ("6") forms.
 // Storing whichever form the user wrote leaves downstream code with
 // two equivalents to handle separately, and any consumer that
 // branches on the named form would silently mishandle the numeric
-// equivalent. Canonicalising to the named form here makes [Protocol]
+// equivalent. Canonicalising to the named form here makes Protocol
 // hold one value post-parse — every downstream consumer sees the
 // same form regardless of what the user wrote.
 func (p *Protocol) UnmarshalJSON(b []byte) error {
@@ -1751,7 +1847,7 @@ func (p *Protocol) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// validate checks if the [Protocol] is valid.
+// validate checks if the Protocol is valid.
 func (p *Protocol) validate() error {
 	switch *p {
 	case "", ProtocolNameICMP, ProtocolNameIGMP, ProtocolNameIPv4, ProtocolNameIPInIP,
@@ -1783,7 +1879,7 @@ func (p *Protocol) validate() error {
 	}
 }
 
-// MarshalJSON implements JSON marshaling for [Protocol].
+// MarshalJSON implements JSON marshaling for Protocol.
 func (p *Protocol) MarshalJSON() ([]byte, error) {
 	return json.Marshal(string(*p))
 }
@@ -1805,7 +1901,7 @@ const (
 	ProtocolFC       = 133 // Fibre Channel
 )
 
-// ProtocolNumberToName maps IANA protocol numbers to their [Protocol] name strings.
+// ProtocolNumberToName maps IANA protocol numbers to their protocol name strings.
 var ProtocolNumberToName = map[int]Protocol{
 	ProtocolICMP:     ProtocolNameICMP,
 	ProtocolIGMP:     ProtocolNameIGMP,
@@ -1829,7 +1925,7 @@ type ACL struct {
 	Destinations []AliasWithPorts `json:"dst"`
 }
 
-// UnmarshalJSON implements custom unmarshalling for [ACL] that ignores fields starting with '#'.
+// UnmarshalJSON implements custom unmarshalling for ACL that ignores fields starting with '#'.
 // headscale-admin uses # in some field names to add metadata, so we will ignore
 // those to ensure it doesnt break.
 // https://github.com/GoodiesHQ/headscale-admin/blob/214a44a9c15c92d2b42383f131b51df10c84017c/src/lib/common/acl.svelte.ts#L38
@@ -1883,20 +1979,7 @@ type Grant struct {
 	Via []Tag `json:"via,omitzero"`
 }
 
-// NodeAttrGrant attaches Tailscale node capabilities (and/or an IP-pool
-// preference) to every node selected by Targets. The Targets aliases are
-// resolved exactly like ACL/grant sources, so users, groups, tags, hosts,
-// prefixes, autogroup:member, autogroup:tagged, and "*" are all valid.
-//
-// IPPool is parsed and validated for forward compatibility with the IP
-// allocator; the policy compiler does not consume it yet.
-type NodeAttrGrant struct {
-	Targets Aliases                  `json:"target"`
-	Attrs   []tailcfg.NodeCapability `json:"attr,omitempty"`
-	IPPool  []netip.Prefix           `json:"ipPool,omitempty"`
-}
-
-// aclToGrants converts an [ACL] rule to one or more equivalent [Grant] rules.
+// aclToGrants converts an ACL rule to one or more equivalent Grant rules.
 func aclToGrants(acl ACL) []Grant {
 	ret := make([]Grant, 0, len(acl.Destinations))
 
@@ -1968,8 +2051,8 @@ func aclToGrants(acl ACL) []Grant {
 // TODO(kradalby):
 // Add validation method checking:
 // All users exists
-// All groups and users are valid tag [TagOwners]
-// Everything referred to in [ACL]s exists in other
+// All groups and users are valid tag TagOwners
+// Everything referred to in ACLs exists in other
 // entities.
 type Policy struct {
 	// validated is set if the policy has been validated.
@@ -1977,20 +2060,18 @@ type Policy struct {
 	// callers using it should panic if not
 	validated bool `json:"-"`
 
-	Groups              Groups             `json:"groups,omitempty"`
-	Hosts               Hosts              `json:"hosts,omitempty"`
-	TagOwners           TagOwners          `json:"tagOwners,omitempty"`
-	ACLs                []ACL              `json:"acls,omitempty"`
-	Grants              []Grant            `json:"grants,omitempty"`
-	NodeAttrs           []NodeAttrGrant    `json:"nodeAttrs,omitempty"`
-	AutoApprovers       AutoApproverPolicy `json:"autoApprovers"`
-	SSHs                []SSH              `json:"ssh,omitempty"`
-	Tests               []PolicyTest       `json:"tests,omitempty"`
-	SSHTests            []SSHPolicyTest    `json:"sshTests,omitempty"`
-	RandomizeClientPort bool               `json:"randomizeClientPort,omitempty"`
+	Groups        Groups             `json:"groups,omitempty"`
+	Hosts         Hosts              `json:"hosts,omitempty"`
+	TagOwners     TagOwners          `json:"tagOwners,omitempty"`
+	ACLs          []ACL              `json:"acls,omitempty"`
+	Grants        []Grant            `json:"grants,omitempty"`
+	AutoApprovers AutoApproverPolicy `json:"autoApprovers"`
+	SSHs          []SSH              `json:"ssh,omitempty"`
+	Tests         []PolicyTest       `json:"tests,omitempty"`
+	SSHTests      []SSHPolicyTest    `json:"sshTests,omitempty"`
 }
 
-// MarshalJSON is deliberately not implemented for [Policy].
+// MarshalJSON is deliberately not implemented for Policy.
 // We use the default JSON marshalling behavior provided by the Go runtime.
 
 var (
@@ -1999,24 +2080,11 @@ var (
 	autogroupForDst       = []AutoGroup{AutoGroupInternet, AutoGroupMember, AutoGroupTagged, AutoGroupSelf}
 	autogroupForSSHSrc    = []AutoGroup{AutoGroupMember, AutoGroupTagged}
 	autogroupForSSHDst    = []AutoGroup{AutoGroupMember, AutoGroupTagged, AutoGroupSelf}
-	autogroupForNodeAttrs = []AutoGroup{AutoGroupMember, AutoGroupTagged}
 	autogroupNotSupported = []AutoGroup{}
 
 	errUnknownProtocolWildcard = errors.New("proto name \"*\" not known; use protocol number 0-255 or protocol name (icmp, tcp, udp, etc.)")
 )
 
-// reservedTSRanges are CGNAT subranges that Tailscale uses internally and that
-// nodeAttrs ipPool entries must not overlap.
-//
-//   - 100.100.100.0/24 is MagicDNS / TSMP
-//   - 100.115.92.0/23 is the Quad100 / IPN service range
-//
-// (See https://tailscale.com/kb/1304/ip-pool for the operator-facing list.)
-var reservedTSRanges = []netip.Prefix{
-	netip.MustParsePrefix("100.100.100.0/24"),
-	netip.MustParsePrefix("100.115.92.0/23"),
-}
-
 func validateAutogroupSupported(ag *AutoGroup) error {
 	if ag == nil {
 		return nil
@@ -2065,47 +2133,6 @@ func validateAutogroupForDst(dst *AutoGroup) error {
 	return nil
 }
 
-// validateAutogroupForNodeAttrs accepts only the autogroups that make sense
-// as a nodeAttrs target: autogroup:member and autogroup:tagged.
-// autogroup:self / autogroup:internet / autogroup:danger-all are rejected —
-// none of them describes a stable identity set that a node-level attribute
-// can attach to. autogroup:admin / autogroup:owner are rejected one layer
-// up: [AutoGroup.UnmarshalJSON] returns [ErrInvalidAutogroup] at parse time
-// because those values aren't in the allowed set, so the policy never
-// reaches this validator.
-func validateAutogroupForNodeAttrs(ag *AutoGroup) error {
-	if ag == nil {
-		return nil
-	}
-
-	if !slices.Contains(autogroupForNodeAttrs, *ag) {
-		return fmt.Errorf("%w: %q, can be %v", ErrNodeAttrsAutogroupNotAllowed, *ag, autogroupForNodeAttrs)
-	}
-
-	return nil
-}
-
-// validateNodeAttrIPPool rejects ipPool entries outside the CGNAT range or
-// overlapping the Tailscale-reserved subranges (MagicDNS, Quad100/IPN). A
-// [netip.Prefix] is considered "within" CGNAT when it is at least as specific as
-// 100.64.0.0/10 and its first address lies inside it.
-func validateNodeAttrIPPool(prefix netip.Prefix) error {
-	cgnat := tsaddr.CGNATRange()
-	masked := prefix.Masked()
-
-	if masked.Bits() < cgnat.Bits() || !cgnat.Contains(masked.Addr()) {
-		return fmt.Errorf("%w: %q", ErrNodeAttrsIPPoolOutOfRange, prefix)
-	}
-
-	for _, reserved := range reservedTSRanges {
-		if masked.Overlaps(reserved) {
-			return fmt.Errorf("%w: %q overlaps %q", ErrNodeAttrsIPPoolReserved, prefix, reserved)
-		}
-	}
-
-	return nil
-}
-
 func validateAutogroupForSSHSrc(src *AutoGroup) error {
 	if src == nil {
 		return nil
@@ -2140,9 +2167,9 @@ func validateAutogroupForSSHDst(dst *AutoGroup) error {
 
 // validateSSHSrcDstCombination validates that SSH source/destination combinations
 // follow Tailscale's security model:
-//   - Destination can be: tags, autogroup:self (if source is users/groups), or same-user
-//   - Tags/autogroup:tagged CANNOT SSH to user destinations
-//   - [Username] destinations require the source to be that same single user only.
+// - Destination can be: tags, autogroup:self (if source is users/groups), or same-user
+// - Tags/autogroup:tagged CANNOT SSH to user destinations
+// - Username destinations require the source to be that same single user only.
 func validateSSHSrcDstCombination(sources SSHSrcAliases, destinations SSHDstAliases) error {
 	// Categorize source types
 	srcHasTaggedEntities := false
@@ -2195,11 +2222,11 @@ func validateSSHSrcDstCombination(sources SSHSrcAliases, destinations SSHDstAlia
 	return nil
 }
 
-// validateACLSrcDstCombination validates that [ACL] source/destination combinations
+// validateACLSrcDstCombination validates that ACL source/destination combinations
 // follow Tailscale's security model:
-//   - autogroup:self destinations require ALL sources to be users, groups, autogroup:member, or wildcard (*)
-//   - Tags, autogroup:tagged, hosts, and raw IPs are NOT valid sources for autogroup:self
-//   - Wildcard (*) is allowed because autogroup:self evaluation narrows it per-node to the node's own IPs.
+// - autogroup:self destinations require ALL sources to be users, groups, autogroup:member, or wildcard (*)
+// - Tags, autogroup:tagged, hosts, and raw IPs are NOT valid sources for autogroup:self
+// - Wildcard (*) is allowed because autogroup:self evaluation narrows it per-node to the node's own IPs.
 func validateACLSrcDstCombination(sources Aliases, destinations []AliasWithPorts) error {
 	// Check if any destination is autogroup:self
 	hasAutogroupSelf := false
@@ -2271,17 +2298,13 @@ var tailscaleCapAllowlist = map[tailcfg.PeerCapability]bool{
 	tailcfg.PeerCapabilityWebUI:      true, // tailscale.com/cap/webui
 	tailcfg.PeerCapabilityKubernetes: true, // tailscale.com/cap/kubernetes
 	tailcfg.PeerCapabilityTsIDP:      true, // tailscale.com/cap/tsidp
-
-	// tailscale.com/cap/secrets is the capability used by setec
-	// (github.com/tailscale/setec); allow it so it can be granted via policy.
-	tailcfg.PeerCapability("tailscale.com/cap/secrets"): true,
 }
 
-// validateGrantSrcDstCombination validates [Grant]-specific source/destination
-// combinations. [Grant]s are stricter than [ACL]s: wildcard (*) sources are NOT
+// validateGrantSrcDstCombination validates grant-specific source/destination
+// combinations. Grants are stricter than ACLs: wildcard (*) sources are NOT
 // allowed with autogroup:self destinations because * includes tags, and tags
-// cannot use autogroup:self. [ACL]s allow this combination because ACL
-// autogroup:self evaluation narrows it per-node, but [Grant]s reject it at
+// cannot use autogroup:self. ACLs allow this combination because ACL
+// autogroup:self evaluation narrows it per-node, but grants reject it at
 // validation time.
 func validateGrantSrcDstCombination(sources Aliases, destinations Aliases) error {
 	hasAutogroupSelf := false
@@ -2417,26 +2440,34 @@ func (p *Policy) validate() error {
 	}
 
 	for _, ssh := range p.SSHs {
-		// Empty action and users survive parse; surface them here.
+		// SaaS rejects empty/missing `action` with `action must be
+		// specified`; an empty SSHAction survives parse intentionally
+		// so this validate pass surfaces the SaaS-aligned wording.
 		if ssh.Action == "" {
 			errs = append(errs, ErrSSHActionMustBeSpecified)
 		}
 
+		// SaaS rejects empty/missing `users` with `users must be
+		// specified`; non-canonical user strings (autogroup:*, group:,
+		// tag:, malformed localpart:) are accepted and flow through to
+		// compileSSHPolicy as literals — matching SaaS compile output.
 		if len(ssh.Users) == 0 {
 			errs = append(errs, ErrSSHUsersMustBeSpecified)
 		}
 
-		// "" and "*" are not valid login users; any other string
-		// (including autogroup, group, tag, malformed localpart) is
-		// treated as a literal user name.
 		for _, user := range ssh.Users {
+			// SaaS rejects `""` and `"*"` as user logins; everything
+			// else (including autogroup:*, group:, tag:, malformed
+			// localpart:) is accepted and treated as a literal.
 			switch user {
 			case "", "*":
 				errs = append(errs, fmt.Errorf("user %q %w", user, ErrSSHUserInvalid))
 			}
 		}
 
-		// acceptEnv entries cannot be empty; "*" and "**" are valid.
+		// SaaS rejects empty entries in `acceptEnv` with
+		// `acceptEnv values cannot be empty`. The wildcard `*` and
+		// double-glob `**` are accepted (only empty string is invalid).
 		for _, env := range ssh.AcceptEnv {
 			if env == "" {
 				errs = append(errs, ErrSSHAcceptEnvEmpty)
@@ -2500,8 +2531,11 @@ func (p *Policy) validate() error {
 					errs = append(errs, err)
 				}
 			case *Host:
-				// Hosts-table aliases are valid on ACL dst but
-				// rejected here for SSH dst.
+				// SaaS rejects every hosts-table alias on an SSH
+				// dst with `invalid dst "alias"`, whether the
+				// alias resolves to a single IP or a CIDR. The
+				// equivalent ACL rule accepts the same aliases,
+				// so reject here rather than at parse time.
 				errs = append(errs, fmt.Errorf("%w %q", ErrSSHDestinationHostAlias, string(*dst)))
 			}
 		}
@@ -2665,68 +2699,6 @@ func (p *Policy) validate() error {
 		}
 	}
 
-	for _, na := range p.NodeAttrs {
-		// SaaS accepts entries with neither attr nor ipPool (they
-		// compile to a no-op); headscale follows suit so policies
-		// captured against SaaS round-trip cleanly.
-		for _, target := range na.Targets {
-			switch t := target.(type) {
-			case *Host:
-				if !p.Hosts.exist(*t) {
-					errs = append(errs, fmt.Errorf("%w: %q", ErrHostNotDefined, *t))
-				}
-			case *AutoGroup:
-				err := validateAutogroupSupported(t)
-				if err != nil {
-					errs = append(errs, err)
-
-					continue
-				}
-
-				err = validateAutogroupForNodeAttrs(t)
-				if err != nil {
-					errs = append(errs, err)
-				}
-			case *Group:
-				err := p.Groups.Contains(t)
-				if err != nil {
-					errs = append(errs, err)
-				}
-			case *Tag:
-				err := p.TagOwners.Contains(t)
-				if err != nil {
-					errs = append(errs, err)
-				}
-			case *Username, *Prefix, Asterix:
-				// User / prefix / wildcard targets are accepted at
-				// parse time and resolved at compile time (where a
-				// typo'd username surfaces as a propagated Resolve
-				// error from compileNodeAttrs). Mirrors the grant
-				// source-side validation shape.
-			default:
-				errs = append(errs, fmt.Errorf("%w: %q (%T)", ErrNodeAttrTargetUnsupported, target, target))
-			}
-		}
-
-		for _, attr := range na.Attrs {
-			issue, ok := nodeAttrUnsupportedCaps[attr]
-			if ok {
-				errs = append(errs, fmt.Errorf("%w: %q tracked in %s", ErrNodeAttrUnsupported, attr, issue))
-			}
-		}
-
-		if len(na.IPPool) > 0 {
-			errs = append(errs, ErrNodeAttrIPPoolUnsupported)
-		}
-
-		for _, prefix := range na.IPPool {
-			err := validateNodeAttrIPPool(prefix)
-			if err != nil {
-				errs = append(errs, err)
-			}
-		}
-	}
-
 	for _, tagOwners := range p.TagOwners {
 		for _, tagOwner := range tagOwners {
 			switch tagOwner := tagOwner.(type) {
@@ -2813,14 +2785,14 @@ func (p *Policy) validate() error {
 
 // SSHCheckPeriod represents the check period for SSH "check" mode rules.
 // nil means not specified (runtime default of 12h applies).
-// [SSHCheckPeriod.Always]=true means "always" (check on every request).
-// [SSHCheckPeriod.Duration] is an explicit period (min 1m, max 168h).
+// Always=true means "always" (check on every request).
+// Duration is an explicit period (min 1m, max 168h).
 type SSHCheckPeriod struct {
 	Always   bool
 	Duration time.Duration
 }
 
-// UnmarshalJSON implements JSON unmarshaling for [SSHCheckPeriod].
+// UnmarshalJSON implements JSON unmarshaling for SSHCheckPeriod.
 func (p *SSHCheckPeriod) UnmarshalJSON(b []byte) error {
 	str := strings.Trim(string(b), `"`)
 	if str == "always" {
@@ -2839,7 +2811,7 @@ func (p *SSHCheckPeriod) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// MarshalJSON implements JSON marshaling for [SSHCheckPeriod].
+// MarshalJSON implements JSON marshaling for SSHCheckPeriod.
 func (p SSHCheckPeriod) MarshalJSON() ([]byte, error) {
 	if p.Always {
 		return []byte(`"always"`), nil
@@ -2848,18 +2820,22 @@ func (p SSHCheckPeriod) MarshalJSON() ([]byte, error) {
 	return fmt.Appendf(nil, "%q", p.Duration.String()), nil
 }
 
-// Validate rejects negative durations and anything above the inclusive
-// 168h max.
+// Validate checks that the SSHCheckPeriod is within allowed bounds.
+// SaaS rejects negative durations with `must be a positive duration`
+// and anything above 168h with `is above the max (168h)`; the 168h
+// upper bound is inclusive.
 func (p *SSHCheckPeriod) Validate() error {
 	if p.Always {
 		return nil
 	}
 
 	if p.Duration < 0 {
+		// SaaS body: `checkPeriod -1m0s must be a positive duration`.
 		return fmt.Errorf("checkPeriod %s %w", p.Duration, ErrSSHCheckPeriodNegative)
 	}
 
 	if p.Duration > SSHCheckPeriodMax {
+		// SaaS body: `checkPeriod 200h0m0s is above the max (168h)`.
 		return fmt.Errorf("checkPeriod %s %w", p.Duration, ErrSSHCheckPeriodAboveMax)
 	}
 
@@ -2876,11 +2852,11 @@ type SSH struct {
 	AcceptEnv    []string        `json:"acceptEnv,omitempty"`
 }
 
-// SSHSrcAliases is a list of aliases that can be used as sources in an [SSH] rule.
+// SSHSrcAliases is a list of aliases that can be used as sources in an SSH rule.
 // It can be a list of usernames, groups, tags or autogroups.
 type SSHSrcAliases []Alias
 
-// MarshalJSON marshals the [Groups] to JSON.
+// MarshalJSON marshals the Groups to JSON.
 func (g *Groups) MarshalJSON() ([]byte, error) {
 	if *g == nil {
 		return []byte("{}"), nil
@@ -2945,7 +2921,7 @@ func (a *SSHDstAliases) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// MarshalJSON marshals the [SSHDstAliases] to JSON.
+// MarshalJSON marshals the SSHDstAliases to JSON.
 func (a SSHDstAliases) MarshalJSON() ([]byte, error) {
 	if a == nil {
 		return []byte("[]"), nil
@@ -2953,15 +2929,28 @@ func (a SSHDstAliases) MarshalJSON() ([]byte, error) {
 
 	aliases := make([]string, len(a))
 	for i, alias := range a {
-		// A wildcard renders as "*" so it gets rejected during unmarshal
-		// with a proper error message explaining alternatives.
-		aliases[i] = alias.String()
+		switch v := alias.(type) {
+		case *Username:
+			aliases[i] = string(*v)
+		case *Tag:
+			aliases[i] = string(*v)
+		case *AutoGroup:
+			aliases[i] = string(*v)
+		case *Host:
+			aliases[i] = string(*v)
+		case Asterix:
+			// Marshal wildcard as "*" so it gets rejected during unmarshal
+			// with a proper error message explaining alternatives
+			aliases[i] = "*"
+		default:
+			return nil, fmt.Errorf("%w: %T", ErrUnknownSSHDestAlias, v)
+		}
 	}
 
 	return json.Marshal(aliases)
 }
 
-// MarshalJSON marshals the [SSHSrcAliases] to JSON.
+// MarshalJSON marshals the SSHSrcAliases to JSON.
 func (a *SSHSrcAliases) MarshalJSON() ([]byte, error) {
 	if a == nil || *a == nil {
 		return []byte("[]"), nil
@@ -2969,7 +2958,20 @@ func (a *SSHSrcAliases) MarshalJSON() ([]byte, error) {
 
 	aliases := make([]string, len(*a))
 	for i, alias := range *a {
-		aliases[i] = alias.String()
+		switch v := alias.(type) {
+		case *Username:
+			aliases[i] = string(*v)
+		case *Group:
+			aliases[i] = string(*v)
+		case *Tag:
+			aliases[i] = string(*v)
+		case *AutoGroup:
+			aliases[i] = string(*v)
+		case Asterix:
+			aliases[i] = "*"
+		default:
+			return nil, fmt.Errorf("%w: %T", ErrUnknownSSHSrcAlias, v)
+		}
 	}
 
 	return json.Marshal(aliases)
@@ -2993,7 +2995,7 @@ func (a *SSHSrcAliases) Resolve(p *Policy, users types.Users, nodes views.Slice[
 	return newResolvedAddresses(buildIPSetMultiErr(&ips, errs))
 }
 
-// SSHDstAliases is a list of aliases that can be used as destinations in an [SSH] rule.
+// SSHDstAliases is a list of aliases that can be used as destinations in an SSH rule.
 // It can be a list of usernames, tags or autogroups.
 type SSHDstAliases []Alias
 
@@ -3013,18 +3015,20 @@ func (u SSHUsers) ContainsNonRoot() bool {
 }
 
 // ContainsLocalpart returns true if any entry is a canonical
-// `localpart:*@<domain>` form. Non-canonical strings starting with
-// `localpart:` are treated as literal usernames.
+// `localpart:*@<domain>` form. Non-canonical strings that merely start
+// with `localpart:` (e.g. `localpart:`, `localpart:foo`) are treated as
+// literal user names per SaaS behaviour.
 func (u SSHUsers) ContainsLocalpart() bool {
 	return slices.ContainsFunc(u, func(user SSHUser) bool {
 		return user.IsCanonicalLocalpart()
 	})
 }
 
-// NormalUsers returns users that land in the compiled literal user map
-// (everything except root, autogroup:nonroot, and canonical
-// `localpart:*@<domain>`). Malformed `localpart:` strings stay here as
-// literals.
+// NormalUsers returns SSH users handled by the literal user map: every
+// entry except root, autogroup:nonroot, and canonical
+// `localpart:*@<domain>`. Malformed `localpart:` strings flow through
+// here so they end up in the compiled SSHUsers map literally — matching
+// SaaS, which also keeps them verbatim.
 func (u SSHUsers) NormalUsers() []SSHUser {
 	return slicesx.Filter(nil, u, func(user SSHUser) bool {
 		return user != "root" && user != SSHUser(AutoGroupNonRoot) && !user.IsCanonicalLocalpart()
@@ -3040,20 +3044,20 @@ func (u SSHUsers) LocalpartEntries() []SSHUser {
 	})
 }
 
-type SSHUser string //nolint:recvcheck // UnmarshalJSON requires pointer receiver; string-newtype methods use value receivers by convention
+type SSHUser string
 
 func (u SSHUser) String() string {
 	return string(u)
 }
 
-// IsLocalpart returns true if the [SSHUser] has the literal `localpart:`
+// IsLocalpart returns true if the SSHUser has the literal `localpart:`
 // prefix. It is a syntactic check only — non-canonical shapes still
 // pass.
 func (u SSHUser) IsLocalpart() bool {
 	return strings.HasPrefix(string(u), SSHUserLocalpartPrefix)
 }
 
-// IsCanonicalLocalpart reports whether the [SSHUser] parses as the
+// IsCanonicalLocalpart reports whether the SSHUser parses as the
 // canonical `localpart:*@<domain>` form that resolution acts on.
 func (u SSHUser) IsCanonicalLocalpart() bool {
 	if !u.IsLocalpart() {
@@ -3095,14 +3099,17 @@ func (u SSHUser) ParseLocalpart() (string, error) {
 	return domain, nil
 }
 
-// MarshalJSON marshals the [SSHUser] to JSON.
+// MarshalJSON marshals the SSHUser to JSON.
 func (u SSHUser) MarshalJSON() ([]byte, error) {
 	return json.Marshal(string(u))
 }
 
-// UnmarshalJSON trims surrounding whitespace per element. A whitespace-
-// only entry collapses to `""` and surfaces as `user "" is not valid` in
-// the per-rule [Policy.validate] pass.
+// UnmarshalJSON trims surrounding whitespace per element so a policy
+// like `"users": [" root"]` stores `"root"` and compiles to the same
+// `sshUsers: {"root": "root"}` map SaaS produces. A whitespace-only
+// entry like `[" "]` collapses to `""` and falls through to the
+// per-rule validate() pass, which surfaces the SaaS-aligned
+// `user "" is not valid`.
 func (u *SSHUser) UnmarshalJSON(b []byte) error {
 	var s string
 	if err := json.Unmarshal(b, &s); err != nil { //nolint:noinlineerr
@@ -3114,7 +3121,7 @@ func (u *SSHUser) UnmarshalJSON(b []byte) error {
 	return nil
 }
 
-// unmarshalPolicy takes a byte slice and unmarshals it into a [Policy] struct.
+// unmarshalPolicy takes a byte slice and unmarshals it into a Policy struct.
 // In addition to unmarshalling, it will also validate the policy.
 // This is the only entrypoint of reading a policy from a file or other source.
 func unmarshalPolicy(b []byte) (*Policy, error) {
@@ -3141,13 +3148,14 @@ func unmarshalPolicy(b []byte) (*Policy, error) {
 			}
 
 			// Non-tag entries in grant.via surface as type errors on
-			// []Tag; rephrase to the wire-compatible body.
+			// []Tag; match SaaS wording instead of Go's JSON diagnostic.
 			if strings.Contains(string(serr.JSONPointer), "/via/") {
 				return nil, ErrGrantViaNotATag
 			}
 
 			// Non-ASCII tag-name failures surface from Tag.Validate
-			// at unmarshal time. Reshape to `tagOwners["tag:X"]: …`.
+			// at unmarshal time. Reshape the error to mirror SaaS
+			// (`tagOwners["tag:X"]: …`).
 			if errors.Is(serr.Err, ErrTagNameMustStartWithLetter) {
 				ptr := serr.JSONPointer
 				name := ptr.LastToken()
@@ -3166,8 +3174,8 @@ func unmarshalPolicy(b []byte) (*Policy, error) {
 	return &policy, nil
 }
 
-// validateProtocolPortCompatibility checks that only TCP, UDP, and SCTP [Protocol]s
-// can have specific ports. All other [Protocol]s should only use wildcard ports.
+// validateProtocolPortCompatibility checks that only TCP, UDP, and SCTP protocols
+// can have specific ports. All other protocols should only use wildcard ports.
 func validateProtocolPortCompatibility(protocol Protocol, destinations []AliasWithPorts) error {
 	// Only TCP, UDP, and SCTP support specific ports
 	supportsSpecificPorts := protocol == ProtocolNameTCP || protocol == ProtocolNameUDP || protocol == ProtocolNameSCTP || protocol == ""
@@ -3193,7 +3201,7 @@ func validateProtocolPortCompatibility(protocol Protocol, destinations []AliasWi
 // follow: a tests entry describes one connection attempt to one specific
 // destination port over a connection-oriented protocol and asserts
 // whether that attempt is allowed or denied. The same shapes remain
-// valid inside [ACL] or [Grant] destinations where the rule does not apply.
+// valid inside ACL or Grant destinations where the rule does not apply.
 func validateTests(pol *Policy, tests []PolicyTest) error {
 	var errs []error
 
@@ -3234,10 +3242,10 @@ func validateTests(pol *Policy, tests []PolicyTest) error {
 // validateTestDestination enforces that a tests-block dst describes one
 // connection attempt to one specific host on one specific port. SaaS
 // rejects three shapes that violate the rule: autogroup:internet (routed
-// by exit-node [tailcfg.Node.AllowedIPs], not the packet filter); multi-port
+// by exit-node AllowedIPs, not the packet filter); multi-port
 // (range/list/wildcard, no single allow/deny answer); and CIDR ranges
 // — both raw `/N` syntax and `hosts:`-table aliases whose RHS is a
-// multi-host prefix. Bare IP literals reach this function as *[Prefix]
+// multi-host prefix. Bare IP literals reach this function as *Prefix
 // /32 or /128 just like explicit `/32` / `/128` does, so the CIDR
 // check inspects the raw input string for `/` rather than the parsed
 // alias type.
@@ -3271,10 +3279,15 @@ func validateTestDestination(pol *Policy, dst string) error {
 	return nil
 }
 
-// validateSSHTests enforces parse-time shape on every sshTests entry:
-// non-empty src, at least one dst, and each dst describing a single
-// SSH-reachable host. Login-user assertions land with the engine so
-// failures surface through the same errSSHPolicyTestsFailed wrapper.
+// validateSSHTests enforces the parse-time shape rules an sshTests entry
+// must satisfy: a non-empty src alias, at least one dst, and a dst list
+// whose entries each describe a single SSH-reachable host. Login-user
+// assertions (accept/deny/check) are not validated here — SaaS reports
+// empty assertion arrays and empty user strings through the same
+// "test(s) failed" body it uses for true evaluation failures, so those
+// cases stay with the engine. Both the parse-time errors and the
+// engine-time failures share the errSSHPolicyTestsFailed wrapper so
+// callers see one consistent body.
 func validateSSHTests(pol *Policy, tests []SSHPolicyTest) error {
 	var errs []error
 
@@ -3302,38 +3315,44 @@ func validateSSHTests(pol *Policy, tests []SSHPolicyTest) error {
 	return nil
 }
 
-// validateSSHTestDestination rejects sshTests dst shapes that cannot
-// name a single SSH-reachable host:
-//
-//   - `host:port` suffixes (parsed as an unknown tag),
-//   - multi-host CIDRs (raw `/N` or a hosts: entry resolving wider),
-//   - autogroup:internet (valid as ACL dst only).
-//
-// A bare IP literal (single-host /BitLen prefix) is accepted. Tag
-// entries must exist in tagOwners.
+// validateSSHTestDestination enforces that an sshTests dst entry names a
+// single SSH-reachable host. Tailscale SaaS rejects three shapes at parse
+// time: a `:port` suffix (read by the parser as an unknown tag, hence the
+// "unknown tag" error wording); a multi-host CIDR (raw `/N` narrower than
+// the address width, or a `hosts:` entry whose RHS is a multi-host prefix);
+// and autogroup:internet (only valid in ACL destinations, not SSH ones).
+// A bare IP literal — which parses to a `/BitLen` prefix — names a single
+// host and is accepted. Tag entries must reference a tag that exists in
+// tagOwners; bare hosts must resolve to a single-address prefix.
 func validateSSHTestDestination(pol *Policy, alias Alias) error {
 	dst := alias.String()
 
 	switch a := alias.(type) {
 	case *AutoGroup:
-		// autogroup:internet is the only autogroup not valid here;
-		// member/tagged/self/nonroot pass to engine evaluation.
+		// autogroup:internet is the only autogroup SaaS rejects at parse.
+		// Other autogroups (member, tagged, self, nonroot) are valid SSH
+		// dst aliases and pass through to engine evaluation.
 		if *a == AutoGroupInternet {
 			return fmt.Errorf("%w %q", ErrSSHTestDstDisallowedElement, dst)
 		}
 
 	case *Prefix:
-		// A bare IP parses as `/BitLen` and is a valid single-host dst;
-		// any narrower CIDR is a multi-host range and is rejected.
+		// SaaS accepts a bare IP (parsed to a `/BitLen` prefix) as a
+		// single SSH-reachable host but rejects a narrower CIDR like
+		// `10.0.0.0/24`. Distinguish the two by mask width: a prefix
+		// whose Bits() matches the address BitLen() is a single host
+		// and passes; anything narrower is a multi-host range and is
+		// rejected the same way as raw `/N`.
 		p := netip.Prefix(*a)
 		if p.Bits() < p.Addr().BitLen() {
 			return fmt.Errorf("%w %q", ErrSSHTestDstDisallowedElement, dst)
 		}
 
 	case *Tag:
-		// A tag must be declared in tagOwners. `tag:server:22` lands
-		// here too because isTag only checks the prefix, so the lookup
-		// misses and the colon-port suffix surfaces as unknown-tag.
+		// A tag must be declared in tagOwners. The `tag:server:22` shape
+		// reaches this branch because isTag only checks the `tag:` prefix
+		// — the colon-port suffix is preserved in the Tag string and the
+		// tagOwners lookup misses, reproducing the SaaS error wording.
 		if pol == nil {
 			return fmt.Errorf("%w %q", ErrSSHTestDstUnknownTag, string(*a))
 		}
@@ -3344,8 +3363,8 @@ func validateSSHTestDestination(pol *Policy, alias Alias) error {
 		}
 
 	case *Host:
-		// A hosts: alias that resolves to multiple addresses is a CIDR
-		// in disguise.
+		// A hosts: entry that resolves to a multi-host prefix is a CIDR
+		// in disguise — reject it the same way as raw `/N`.
 		if pol == nil {
 			return nil
 		}
diff --git a/hscontrol/policy/v2/types_test.go b/hscontrol/policy/v2/types_test.go
index 19134e5b3..1a046f126 100644
--- a/hscontrol/policy/v2/types_test.go
+++ b/hscontrol/policy/v2/types_test.go
@@ -6244,27 +6244,3 @@ func TestUnmarshalPolicySSHTests(t *testing.T) {
 		})
 	}
 }
-
-func TestValidateCapabilityName(t *testing.T) {
-	tests := []struct {
-		name    string
-		cap     string
-		wantErr error
-	}{
-		{name: "custom domain allowed", cap: "example.com/cap/foo", wantErr: nil},
-		{name: "allowlisted tailscale cap", cap: "tailscale.com/cap/drive", wantErr: nil},
-		{name: "setec secrets cap allowed", cap: "tailscale.com/cap/secrets", wantErr: nil},
-		{name: "non-allowlisted tailscale cap rejected", cap: "tailscale.com/cap/nope", wantErr: ErrCapNameTailscaleDomain},
-		{name: "url scheme rejected", cap: "https://tailscale.com/cap/drive", wantErr: ErrCapNameInvalidForm},
-	}
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			err := validateCapabilityName(tt.cap)
-			if tt.wantErr == nil {
-				require.NoError(t, err)
-			} else {
-				require.ErrorIs(t, err, tt.wantErr)
-			}
-		})
-	}
-}
diff --git a/hscontrol/policy/v2/utils.go b/hscontrol/policy/v2/utils.go
index 370ec43eb..10641259c 100644
--- a/hscontrol/policy/v2/utils.go
+++ b/hscontrol/policy/v2/utils.go
@@ -31,8 +31,8 @@ var (
 //
 // Brackets are only accepted around IPv6 addresses, not IPv4, hostnames, or other alias types.
 // Bracket stripping reduces both forms to bare "addr:port" or "addr/prefix:port",
-// which the normal [strings.LastIndex] of ":" split handles correctly because
-// port strings never contain colons.
+// which the normal LastIndex(":") split handles correctly because port strings
+// never contain colons.
 func splitDestinationAndPort(input string) (string, string, error) {
 	// Handle RFC 3986 bracketed IPv6 (e.g. "[::1]:80" or "[fd7a::1]/128:80,443").
 	// Strip brackets after validation and fall through to normal parsing.
@@ -82,7 +82,7 @@ func splitDestinationAndPort(input string) (string, string, error) {
 	return destination, port, nil
 }
 
-// parsePortRange parses a port definition string and returns a slice of [tailcfg.PortRange] structs.
+// parsePortRange parses a port definition string and returns a slice of PortRange structs.
 func parsePortRange(portDef string) ([]tailcfg.PortRange, error) {
 	if portDef == "*" {
 		return []tailcfg.PortRange{tailcfg.PortRangeAny}, nil
diff --git a/hscontrol/policy/v2/utils_test.go b/hscontrol/policy/v2/utils_test.go
index 3a02bc660..393a3b1fa 100644
--- a/hscontrol/policy/v2/utils_test.go
+++ b/hscontrol/policy/v2/utils_test.go
@@ -8,7 +8,7 @@ import (
 	"tailscale.com/tailcfg"
 )
 
-// TestSplitDestinationAndPort tests the splitDestinationAndPort function using table-driven tests.
+// TestParseDestinationAndPort tests the splitDestinationAndPort function using table-driven tests.
 func TestSplitDestinationAndPort(t *testing.T) {
 	testCases := []struct {
 		input       string
diff --git a/hscontrol/poll.go b/hscontrol/poll.go
index 35657026c..bb98f6acd 100644
--- a/hscontrol/poll.go
+++ b/hscontrol/poll.go
@@ -115,7 +115,7 @@ func (m *mapSession) serve() {
 	// This is the mechanism where the node gives us information about its
 	// current configuration.
 	//
-	// Process the [tailcfg.MapRequest] to update node state (endpoints, hostinfo, etc.)
+	// Process the MapRequest to update node state (endpoints, hostinfo, etc.)
 	c, err := m.h.state.UpdateNodeFromMapRequest(m.node.ID, m.req)
 	if err != nil {
 		httpError(m.w, err)
@@ -148,10 +148,10 @@ func (m *mapSession) serveLongPoll() {
 
 	m.log.Trace().Caller().Msg("long poll session started")
 
-	// connectGen is set by [state.State.Connect] below and captured by the deferred cleanup closure.
-	// Each Connect acquires one live session in state; the cleanup must release
-	// it with exactly one [state.State.Disconnect] call, in every exit path, or
-	// the node's session count leaks and it stays online forever.
+	// connectGen is set by Connect() below and captured by the deferred cleanup closure.
+	// It allows Disconnect() to reject stale calls from old sessions — if a newer session
+	// has called Connect() (incrementing the generation), the old session's Disconnect()
+	// sees a mismatched generation and becomes a no-op.
 	var connectGen uint64
 
 	// Clean up the session when the client disconnects
@@ -160,55 +160,49 @@ func (m *mapSession) serveLongPoll() {
 
 		stillConnected := m.h.mapBatcher.RemoveNode(m.node.ID, m.ch)
 
-		// This session never reached [state.State.Connect]; there is no
-		// session to release.
-		if connectGen == 0 {
+		// If another session already exists for this node (reconnect
+		// happened before this cleanup ran), skip the grace period
+		// entirely — the node is not actually disconnecting.
+		if stillConnected {
 			return
 		}
 
 		// When a node disconnects, it might rapidly reconnect (e.g. mobile clients, network weather).
 		// Instead of immediately marking the node as offline, we wait a few seconds to see if it reconnects.
-		// If it reconnects during the wait, the new session's Connect raises the
-		// session count, so the release below keeps the node online.
+		// If it does reconnect, the existing mapSession will be replaced and the node remains online.
+		// If it doesn't reconnect within the timeout, we mark it as offline.
 		//
 		// This avoids flapping nodes in the UI and unnecessary churn in the network.
 		// This is not my favourite solution, but it kind of works in our eventually consistent world.
-		//
-		// When another session already replaced this one (stillConnected), skip
-		// the wait — but never the release itself. A cancelled map request whose
-		// handler ran late is exactly such a session: if it kept its session
-		// acquired on this path, the surviving session's release could never
-		// take the node offline (the relogin flake).
-		if !stillConnected {
-			// Wait up to 10 seconds for the node to reconnect.
-			// 10 seconds was arbitrary chosen as a reasonable time to reconnect.
-			ticker := time.NewTicker(time.Second)
-			defer ticker.Stop()
+		ticker := time.NewTicker(time.Second)
+		defer ticker.Stop()
 
-			for range 10 {
-				if m.h.mapBatcher.IsConnected(m.node.ID) {
-					break
-				}
-
-				<-ticker.C
+		disconnected := true
+		// Wait up to 10 seconds for the node to reconnect.
+		// 10 seconds was arbitrary chosen as a reasonable time to reconnect.
+		for range 10 {
+			if m.h.mapBatcher.IsConnected(m.node.ID) {
+				disconnected = false
+				break
 			}
+
+			<-ticker.C
 		}
 
-		// Release this session. The node goes offline exactly when the last
-		// live session is released, so releases from replaced or stale
-		// sessions are harmless regardless of the order they run in.
-		disconnectChanges, err := m.h.state.Disconnect(m.node.ID, connectGen)
-		if err != nil {
-			m.log.Error().Caller().Err(err).Msg("failed to disconnect node")
-		}
+		if disconnected {
+			// Pass the generation from our Connect() call. If a newer session has
+			// connected since (bumping the generation), Disconnect() will detect
+			// the mismatch and skip the state update, preventing the race where
+			// an old grace period goroutine overwrites a newer session's online status.
+			disconnectChanges, err := m.h.state.Disconnect(m.node.ID, connectGen)
+			if err != nil {
+				m.log.Error().Caller().Err(err).Msg("failed to disconnect node")
+			}
 
-		if len(disconnectChanges) == 0 {
-			return
+			m.h.Change(disconnectChanges...)
+			m.afterServeLongPoll()
+			m.log.Info().Caller().Str(zf.Chan, fmt.Sprintf("%p", m.ch)).Msg("node has disconnected")
 		}
-
-		m.h.Change(disconnectChanges...)
-		m.afterServeLongPoll()
-		m.log.Info().Caller().Str(zf.Chan, fmt.Sprintf("%p", m.ch)).Msg("node has disconnected")
 	}()
 
 	// Set up the client stream
@@ -220,28 +214,23 @@ func (m *mapSession) serveLongPoll() {
 
 	m.keepAliveTicker = time.NewTicker(m.keepAlive)
 
-	// Process the initial [tailcfg.MapRequest] to update node state (endpoints, hostinfo, etc.)
-	// This must be done BEFORE calling [state.State.Connect] to ensure routes are properly synchronized.
-	// When nodes reconnect, they send their hostinfo with announced routes in the [tailcfg.MapRequest].
-	// We need this data in [state.NodeStore] before [state.State.Connect] sets up the primary routes, because
-	// [types.NodeView.SubnetRoutes] calculates the intersection of announced and approved routes. If we
-	// call [state.State.Connect] first, [types.NodeView.SubnetRoutes] returns empty (no announced routes yet), causing
+	// Process the initial MapRequest to update node state (endpoints, hostinfo, etc.)
+	// This must be done BEFORE calling Connect() to ensure routes are properly synchronized.
+	// When nodes reconnect, they send their hostinfo with announced routes in the MapRequest.
+	// We need this data in NodeStore before Connect() sets up the primary routes, because
+	// SubnetRoutes() calculates the intersection of announced and approved routes. If we
+	// call Connect() first, SubnetRoutes() returns empty (no announced routes yet), causing
 	// the node to be incorrectly removed from AvailableRoutes.
 	mapReqChange, err := m.h.state.UpdateNodeFromMapRequest(m.node.ID, m.req)
 	if err != nil {
 		m.log.Error().Caller().Err(err).Msg("failed to update node from initial MapRequest")
-		// Write an explicit error rather than returning silently: a bare
-		// return leaves net/http to send an empty 200, which the client
-		// reads as "unexpected EOF" and retries forever (issue #3346).
-		httpError(m.w, err)
-
 		return
 	}
 
 	// Connect the node after its state has been updated.
 	// We send two separate change notifications because these are distinct operations:
-	// 1. [state.State.UpdateNodeFromMapRequest]: processes the client's reported state (routes, endpoints, hostinfo)
-	// 2. [state.State.Connect]: marks the node online and recalculates primary routes based on the updated state
+	// 1. UpdateNodeFromMapRequest: processes the client's reported state (routes, endpoints, hostinfo)
+	// 2. Connect: marks the node online and recalculates primary routes based on the updated state
 	// While this results in two notifications, it ensures route data is synchronized before
 	// primary route selection occurs, which is critical for proper HA subnet router failover.
 	var connectChanges []change.Change
@@ -257,11 +246,6 @@ func (m *mapSession) serveLongPoll() {
 	// time between the node connecting and the batcher being ready.
 	if err := m.h.mapBatcher.AddNode(m.node.ID, m.ch, m.capVer, m.stopFromBatcher); err != nil { //nolint:noinlineerr
 		m.log.Error().Caller().Err(err).Msg("failed to add node to batcher")
-		// Write an explicit error rather than returning silently: a bare
-		// return leaves net/http to send an empty 200, which the client
-		// reads as "unexpected EOF" and retries forever (issue #3346).
-		httpError(m.w, err)
-
 		return
 	}
 
@@ -324,8 +308,8 @@ func (m *mapSession) serveLongPoll() {
 
 // writeMap writes the map response to the client.
 // It handles compression if requested and any headers that need to be set.
-// It also handles flushing the response if the [http.ResponseWriter]
-// implements [http.Flusher].
+// It also handles flushing the response if the ResponseWriter
+// implements http.Flusher.
 func (m *mapSession) writeMap(msg *tailcfg.MapResponse) error {
 	jsonBody, err := json.Marshal(msg)
 	if err != nil {
diff --git a/hscontrol/poll_test.go b/hscontrol/poll_test.go
index 71ce08d9a..4fa78f475 100644
--- a/hscontrol/poll_test.go
+++ b/hscontrol/poll_test.go
@@ -7,10 +7,8 @@ import (
 	"testing"
 	"time"
 
-	"github.com/juanfont/headscale/hscontrol/db"
 	"github.com/juanfont/headscale/hscontrol/mapper"
 	"github.com/juanfont/headscale/hscontrol/state"
-	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/types/change"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
@@ -91,131 +89,6 @@ func (w *delayedSuccessResponseWriter) WriteCount() int {
 	return w.writeCount
 }
 
-// recordingResponseWriter records the status code and whether anything was
-// written, so a test can tell an explicit error response apart from a handler
-// that returned without writing (which net/http turns into an empty 200 the
-// client reads as "unexpected EOF").
-type recordingResponseWriter struct {
-	mu     sync.Mutex
-	header http.Header
-	status int
-	writes int
-}
-
-func (w *recordingResponseWriter) Header() http.Header {
-	if w.header == nil {
-		w.header = make(http.Header)
-	}
-
-	return w.header
-}
-
-func (w *recordingResponseWriter) WriteHeader(code int) {
-	w.mu.Lock()
-	defer w.mu.Unlock()
-
-	if w.status == 0 {
-		w.status = code
-	}
-}
-
-func (w *recordingResponseWriter) Write(data []byte) (int, error) {
-	w.mu.Lock()
-	defer w.mu.Unlock()
-
-	if w.status == 0 {
-		w.status = http.StatusOK
-	}
-
-	w.writes++
-
-	return len(data), nil
-}
-
-func (w *recordingResponseWriter) Flush() {}
-
-func (w *recordingResponseWriter) statusCode() int {
-	w.mu.Lock()
-	defer w.mu.Unlock()
-
-	return w.status
-}
-
-// TestServeLongPollWritesErrorWhenInitialMapFails proves that when the initial
-// map cannot be generated (here: the node's own GivenName is invalid, so
-// WithSelfNode fails and AddNode errors), serveLongPoll writes an explicit HTTP
-// error instead of returning with no body. Returning empty leaves net/http to
-// send an empty 200, which the Tailscale client reports as
-// "PollNetMap: ... unexpected EOF" and retries forever (issue #3346).
-func TestServeLongPollWritesErrorWhenInitialMapFails(t *testing.T) {
-	app := createTestApp(t)
-	user := app.state.CreateUserForTest("self-bad-name-user")
-	createdNode := app.state.CreateRegisteredNodeForTest(user, "self-bad-name-node")
-
-	// Corrupt the node's stored name to empty so GetFQDN fails for itself,
-	// then reload state so the bad row enters the NodeStore verbatim.
-	app.mapBatcher.Close()
-	require.NoError(t, app.state.Close())
-
-	database, err := db.NewHeadscaleDatabase(app.cfg)
-	require.NoError(t, err)
-	require.NoError(t, database.DB.
-		Model(&types.Node{}).
-		Where("id = ?", createdNode.ID).
-		Update("given_name", "").Error)
-	require.NoError(t, database.Close())
-
-	app.state, err = state.NewState(app.cfg)
-	require.NoError(t, err)
-
-	app.mapBatcher = mapper.NewBatcherAndMapper(app.cfg, app.state)
-	app.mapBatcher.Start()
-
-	t.Cleanup(func() {
-		app.mapBatcher.Close()
-		require.NoError(t, app.state.Close())
-	})
-
-	nodeView, ok := app.state.GetNodeByID(createdNode.ID)
-	require.True(t, ok)
-
-	node := nodeView.AsStruct()
-
-	ctx, cancel := context.WithCancel(context.Background())
-	writer := &recordingResponseWriter{}
-	session := app.newMapSession(ctx, tailcfg.MapRequest{
-		Stream:  true,
-		Version: tailcfg.CapabilityVersion(100),
-	}, writer, node)
-
-	serveDone := make(chan struct{})
-
-	go func() {
-		session.serveLongPoll()
-		close(serveDone)
-	}()
-
-	t.Cleanup(func() {
-		// Break the post-disconnect reconnect wait so the goroutine exits.
-		dummyCh := make(chan *tailcfg.MapResponse, 1)
-		_ = app.mapBatcher.AddNode(node.ID, dummyCh, tailcfg.CapabilityVersion(100), nil)
-
-		cancel()
-
-		select {
-		case <-serveDone:
-		case <-time.After(2 * time.Second):
-		}
-
-		_ = app.mapBatcher.RemoveNode(node.ID, dummyCh)
-	})
-
-	assert.Eventually(t, func() bool {
-		return writer.statusCode() >= http.StatusInternalServerError
-	}, 2*time.Second, 10*time.Millisecond,
-		"serveLongPoll must write an HTTP error response when the initial map cannot be built, not an empty 200")
-}
-
 // TestGitHubIssue3129_TransientlyBlockedWriteDoesNotLeaveLiveStaleSession
 // tests the scenario reported in
 // https://github.com/juanfont/headscale/issues/3129.
@@ -227,7 +100,7 @@ func TestServeLongPollWritesErrorWhenInitialMapFails(t *testing.T) {
 //  3. While that write is blocked, queue enough updates to fill the buffered
 //     channel and make the next batcher send hit the stale-send timeout.
 //  4. That stale-send path removes the session from the batcher, so without an
-//     explicit teardown hook the old [mapSession.serveLongPoll] goroutine would stay alive
+//     explicit teardown hook the old serveLongPoll goroutine would stay alive
 //     but stop receiving future updates.
 //  5. Release the blocked write and verify the batcher-side stop signal makes
 //     that stale session exit instead of lingering as an orphaned goroutine.
diff --git a/hscontrol/realip.go b/hscontrol/realip.go
deleted file mode 100644
index af41aa7bd..000000000
--- a/hscontrol/realip.go
+++ /dev/null
@@ -1,121 +0,0 @@
-package hscontrol
-
-import (
-	"fmt"
-	"net"
-	"net/http"
-	"net/netip"
-	"slices"
-
-	realclientip "github.com/realclientip/realclientip-go"
-)
-
-const (
-	headerTrueClientIP  = "True-Client-IP"
-	headerXRealIP       = "X-Real-IP"
-	headerXForwardedFor = "X-Forwarded-For"
-)
-
-var proxyHeaders = [...]string{headerTrueClientIP, headerXRealIP, headerXForwardedFor}
-
-// trustedProxyRealIP rewrites r.RemoteAddr from proxy headers when the
-// peer is in trusted; for any other peer the headers are stripped so a
-// downstream handler cannot read a spoofed value. X-Forwarded-For uses
-// [realclientip.RightmostTrustedRangeStrategy] so prepending a value cannot win in a
-// proxy chain.
-func trustedProxyRealIP(trusted []netip.Prefix) (func(http.Handler) http.Handler, error) {
-	ranges := make([]net.IPNet, 0, len(trusted))
-	for _, p := range trusted {
-		ranges = append(ranges, prefixToIPNet(p))
-	}
-
-	trueClientIP, err := realclientip.NewSingleIPHeaderStrategy(headerTrueClientIP)
-	if err != nil {
-		return nil, fmt.Errorf("%s strategy: %w", headerTrueClientIP, err)
-	}
-
-	xRealIP, err := realclientip.NewSingleIPHeaderStrategy(headerXRealIP)
-	if err != nil {
-		return nil, fmt.Errorf("%s strategy: %w", headerXRealIP, err)
-	}
-
-	xForwardedFor, err := realclientip.NewRightmostTrustedRangeStrategy(headerXForwardedFor, ranges)
-	if err != nil {
-		return nil, fmt.Errorf("%s strategy: %w", headerXForwardedFor, err)
-	}
-
-	strategy := realclientip.NewChainStrategy(trueClientIP, xRealIP, xForwardedFor)
-
-	return func(next http.Handler) http.Handler {
-		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-			if !peerTrusted(r.RemoteAddr, trusted) {
-				for _, h := range proxyHeaders {
-					r.Header.Del(h)
-				}
-
-				next.ServeHTTP(w, r)
-
-				return
-			}
-
-			// Proxy headers carry no port; write the IP alone so
-			// `remote=` logs the resolved client, not the proxy's
-			// ephemeral TCP port.
-			if ip := strategy.ClientIP(r.Header, r.RemoteAddr); ip != "" {
-				r.RemoteAddr = ip
-			}
-
-			next.ServeHTTP(w, r)
-		})
-	}, nil
-}
-
-// peerTrusted returns false on unparseable input so callers fall
-// through to the header-stripping path.
-func peerTrusted(remoteAddr string, trusted []netip.Prefix) bool {
-	addr, ok := parsePeerAddr(remoteAddr)
-	if !ok {
-		return false
-	}
-
-	return slices.ContainsFunc(trusted, func(p netip.Prefix) bool {
-		return p.Contains(addr)
-	})
-}
-
-func parsePeerAddr(remoteAddr string) (netip.Addr, bool) {
-	if remoteAddr == "" {
-		return netip.Addr{}, false
-	}
-
-	ap, err := netip.ParseAddrPort(remoteAddr)
-	if err == nil {
-		return ap.Addr(), true
-	}
-
-	host, _, splitErr := net.SplitHostPort(remoteAddr)
-	if splitErr != nil {
-		host = remoteAddr
-	}
-
-	addr, err := netip.ParseAddr(host)
-	if err != nil {
-		return netip.Addr{}, false
-	}
-
-	return addr, true
-}
-
-// prefixToIPNet bridges to realclientip-go, which predates net/netip.
-func prefixToIPNet(p netip.Prefix) net.IPNet {
-	addr := p.Addr()
-	if addr.Is4() {
-		b := addr.As4()
-
-		return net.IPNet{IP: b[:], Mask: net.CIDRMask(p.Bits(), 32)}
-	}
-
-	b := addr.As16()
-
-	return net.IPNet{IP: b[:], Mask: net.CIDRMask(p.Bits(), 128)}
-}
diff --git a/hscontrol/realip_test.go b/hscontrol/realip_test.go
deleted file mode 100644
index 2d3b3371e..000000000
--- a/hscontrol/realip_test.go
+++ /dev/null
@@ -1,242 +0,0 @@
-package hscontrol
-
-import (
-	"net/http"
-	"net/http/httptest"
-	"net/netip"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-//nolint:goconst // repeated test fixtures (addresses, headers), not refactor candidates
-func TestPeerTrusted(t *testing.T) {
-	trusted := []netip.Prefix{
-		netip.MustParsePrefix("10.0.0.0/16"),
-		netip.MustParsePrefix("127.0.0.1/32"),
-		netip.MustParsePrefix("fd00::/8"),
-	}
-
-	tests := []struct {
-		name       string
-		remoteAddr string
-		want       bool
-	}{
-		{name: "v4-in-range", remoteAddr: "10.0.0.5:1234", want: true},
-		{name: "v4-edge", remoteAddr: "10.0.255.255:1", want: true},
-		{name: "v4-out-of-range", remoteAddr: "10.1.0.0:1234", want: false},
-		{name: "v4-loopback", remoteAddr: "127.0.0.1:443", want: true},
-		{name: "v6-in-range", remoteAddr: "[fd00::1]:443", want: true},
-		{name: "v6-out-of-range", remoteAddr: "[2001:db8::1]:443", want: false},
-		{name: "no-port", remoteAddr: "10.0.0.5", want: true},
-		{name: "empty", remoteAddr: "", want: false},
-		{name: "non-ip-host", remoteAddr: "localhost:8080", want: false},
-		{name: "garbage", remoteAddr: "not-a-thing", want: false},
-		{name: "unix-socket", remoteAddr: "@", want: false},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			got := peerTrusted(tt.remoteAddr, trusted)
-			assert.Equal(t, tt.want, got)
-		})
-	}
-}
-
-func TestPrefixToIPNet(t *testing.T) {
-	tests := []struct {
-		name string
-		in   netip.Prefix
-		want string
-	}{
-		{name: "v4", in: netip.MustParsePrefix("10.0.0.0/16"), want: "10.0.0.0/16"},
-		{name: "v4-host", in: netip.MustParsePrefix("127.0.0.1/32"), want: "127.0.0.1/32"},
-		{name: "v6", in: netip.MustParsePrefix("fd00::/8"), want: "fd00::/8"},
-		{name: "v6-host", in: netip.MustParsePrefix("::1/128"), want: "::1/128"},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			got := prefixToIPNet(tt.in)
-			assert.Equal(t, tt.want, got.String())
-		})
-	}
-}
-
-//nolint:goconst // repeated test fixtures (addresses, headers), not refactor candidates
-func TestTrustedProxyRealIP(t *testing.T) {
-	trusted := []netip.Prefix{
-		netip.MustParsePrefix("10.0.0.0/16"),
-		netip.MustParsePrefix("fd00::/8"),
-	}
-
-	mw, err := trustedProxyRealIP(trusted)
-	require.NoError(t, err)
-
-	tests := []struct {
-		name         string
-		remoteAddr   string
-		headers      map[string]string
-		wantRemote   string
-		wantStripped []string
-		wantKept     map[string]string
-	}{
-		{
-			name:       "untrusted/no-headers",
-			remoteAddr: "203.0.113.1:1234",
-			wantRemote: "203.0.113.1:1234",
-		},
-		{
-			name:         "untrusted/strips-x-real-ip",
-			remoteAddr:   "203.0.113.1:1234",
-			headers:      map[string]string{"X-Real-IP": "1.2.3.4"},
-			wantRemote:   "203.0.113.1:1234",
-			wantStripped: []string{"X-Real-IP"},
-		},
-		{
-			name:         "untrusted/strips-x-forwarded-for",
-			remoteAddr:   "203.0.113.1:1234",
-			headers:      map[string]string{"X-Forwarded-For": "1.2.3.4"},
-			wantRemote:   "203.0.113.1:1234",
-			wantStripped: []string{"X-Forwarded-For"},
-		},
-		{
-			name:         "untrusted/strips-true-client-ip",
-			remoteAddr:   "203.0.113.1:1234",
-			headers:      map[string]string{"True-Client-IP": "1.2.3.4"},
-			wantRemote:   "203.0.113.1:1234",
-			wantStripped: []string{"True-Client-IP"},
-		},
-		{
-			name:       "untrusted/strips-all-three",
-			remoteAddr: "203.0.113.1:1234",
-			headers: map[string]string{
-				"True-Client-IP":  "1.2.3.4",
-				"X-Real-IP":       "5.6.7.8",
-				"X-Forwarded-For": "9.10.11.12",
-			},
-			wantRemote:   "203.0.113.1:1234",
-			wantStripped: []string{"True-Client-IP", "X-Real-IP", "X-Forwarded-For"},
-		},
-		{
-			name:         "untrusted/keeps-unrelated-header",
-			remoteAddr:   "203.0.113.1:1234",
-			headers:      map[string]string{"User-Agent": "curl/8", "X-Real-IP": "1.2.3.4"},
-			wantRemote:   "203.0.113.1:1234",
-			wantStripped: []string{"X-Real-IP"},
-			wantKept:     map[string]string{"User-Agent": "curl/8"},
-		},
-		{
-			name:       "trusted/no-headers",
-			remoteAddr: "10.0.0.5:1234",
-			wantRemote: "10.0.0.5:1234",
-		},
-		{
-			name:       "trusted/x-real-ip",
-			remoteAddr: "10.0.0.5:1234",
-			headers:    map[string]string{"X-Real-IP": "1.2.3.4"},
-			wantRemote: "1.2.3.4",
-		},
-		{
-			name:       "trusted/true-client-ip-wins-over-others",
-			remoteAddr: "10.0.0.5:1234",
-			headers: map[string]string{
-				"True-Client-IP":  "1.2.3.4",
-				"X-Real-IP":       "5.6.7.8",
-				"X-Forwarded-For": "9.10.11.12",
-			},
-			wantRemote: "1.2.3.4",
-		},
-		{
-			name:       "trusted/x-real-ip-wins-over-xff",
-			remoteAddr: "10.0.0.5:1234",
-			headers: map[string]string{
-				"X-Real-IP":       "1.2.3.4",
-				"X-Forwarded-For": "9.10.11.12",
-			},
-			wantRemote: "1.2.3.4",
-		},
-		{
-			name:       "trusted/xff-rightmost-walk-discards-trusted-hop",
-			remoteAddr: "10.0.0.5:1234",
-			headers:    map[string]string{"X-Forwarded-For": "203.0.113.99, 10.0.0.5"},
-			wantRemote: "203.0.113.99",
-		},
-		{
-			name:       "trusted/xff-all-trusted-leaves-remote-alone",
-			remoteAddr: "10.0.0.5:1234",
-			headers:    map[string]string{"X-Forwarded-For": "10.0.0.99, 10.0.0.5"},
-			wantRemote: "10.0.0.5:1234",
-		},
-		{
-			name:       "trusted/ipv6-peer-v6-real-ip",
-			remoteAddr: "[fd00::1]:1234",
-			headers:    map[string]string{"X-Real-IP": "2001:db8::1"},
-			wantRemote: "2001:db8::1",
-		},
-		{
-			name:         "ipv6-untrusted-strips-header",
-			remoteAddr:   "[2001:db8::1]:1234",
-			headers:      map[string]string{"X-Real-IP": "1.2.3.4"},
-			wantRemote:   "[2001:db8::1]:1234",
-			wantStripped: []string{"X-Real-IP"},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			var observed *http.Request
-
-			handler := mw(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-				observed = r
-			}))
-
-			req := httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/", nil)
-			req.RemoteAddr = tt.remoteAddr
-
-			for k, v := range tt.headers {
-				req.Header.Set(k, v)
-			}
-
-			handler.ServeHTTP(httptest.NewRecorder(), req)
-
-			require.NotNil(t, observed, "handler must be invoked")
-			assert.Equal(t, tt.wantRemote, observed.RemoteAddr)
-
-			for _, h := range tt.wantStripped {
-				assert.Empty(t, observed.Header.Get(h), "header %s should be stripped", h)
-			}
-
-			for k, v := range tt.wantKept {
-				assert.Equal(t, v, observed.Header.Get(k), "header %s should be preserved", k)
-			}
-		})
-	}
-}
-
-func TestTrustedProxyRealIPEmptyTrusted(t *testing.T) {
-	// Sanity: factory accepts an empty slice without error. Wiring code is
-	// responsible for skipping the mount entirely, but the factory itself
-	// must remain safe for tests that compose it manually.
-	mw, err := trustedProxyRealIP(nil)
-	require.NoError(t, err)
-	require.NotNil(t, mw)
-
-	var observed *http.Request
-
-	handler := mw(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		observed = r
-	}))
-
-	req := httptest.NewRequestWithContext(t.Context(), http.MethodGet, "/", nil)
-	req.RemoteAddr = "10.0.0.5:1234"
-	req.Header.Set("X-Real-IP", "1.2.3.4")
-	handler.ServeHTTP(httptest.NewRecorder(), req)
-
-	require.NotNil(t, observed)
-	// No prefix is trusted, so even an LAN-looking peer is not trusted; the
-	// spoofed header must be stripped and RemoteAddr left alone.
-	assert.Equal(t, "10.0.0.5:1234", observed.RemoteAddr)
-	assert.Empty(t, observed.Header.Get("X-Real-IP"))
-}
diff --git a/hscontrol/scope/scope.go b/hscontrol/scope/scope.go
deleted file mode 100644
index 1a1a0a6d0..000000000
--- a/hscontrol/scope/scope.go
+++ /dev/null
@@ -1,123 +0,0 @@
-// Package scope models the OAuth capability scopes the Headscale v2 API enforces
-// and the rule for whether a granted set of scopes satisfies a required one.
-//
-// The vocabulary is taken from Tailscale's OpenAPI spec (the same scope names
-// the Terraform provider and Kubernetes operator request), so a client written
-// against Tailscale's scopes works unchanged against Headscale. The grant
-// predicate is kept here, separate from the HTTP/huma layer in
-// hscontrol/api/v2, so it can be tested exhaustively on its own.
-package scope
-
-import "strings"
-
-// Scope is an OAuth capability an operation requires and a token grants. The names
-// mirror Tailscale's API scopes; a "...:read" scope is the read-only subset of its
-// write scope.
-type Scope string
-
-const (
-	// All and AllRead are Tailscale's forward-compatible super-scopes: "all"
-	// grants every other scope, "all:read" grants every :read subset.
-	All     Scope = "all"
-	AllRead Scope = "all:read"
-
-	AuthKeys     Scope = "auth_keys"
-	AuthKeysRead Scope = "auth_keys:read"
-
-	// OAuthKeys gates managing OAuth clients (keyType:"client" on the keys
-	// resource).
-	OAuthKeys     Scope = "oauth_keys"
-	OAuthKeysRead Scope = "oauth_keys:read"
-
-	DevicesCore     Scope = "devices:core"
-	DevicesCoreRead Scope = "devices:core:read"
-
-	DevicesRoutes     Scope = "devices:routes"
-	DevicesRoutesRead Scope = "devices:routes:read"
-
-	PolicyFile     Scope = "policy_file"
-	PolicyFileRead Scope = "policy_file:read"
-
-	FeatureSettings     Scope = "feature_settings"
-	FeatureSettingsRead Scope = "feature_settings:read"
-
-	Users     Scope = "users"
-	UsersRead Scope = "users:read"
-)
-
-const readSuffix = ":read"
-
-// Known returns every scope in the vocabulary, in a stable order. Useful for
-// exhaustive iteration in tests and documentation.
-func Known() []Scope {
-	return []Scope{
-		All, AllRead,
-		AuthKeys, AuthKeysRead,
-		OAuthKeys, OAuthKeysRead,
-		DevicesCore, DevicesCoreRead,
-		DevicesRoutes, DevicesRoutesRead,
-		PolicyFile, PolicyFileRead,
-		FeatureSettings, FeatureSettingsRead,
-		Users, UsersRead,
-	}
-}
-
-// IsRead reports whether s is a read-only scope (its name ends with ":read").
-func (s Scope) IsRead() bool {
-	return strings.HasSuffix(string(s), readSuffix)
-}
-
-// IsWrite reports whether s is a non-empty write scope.
-func (s Scope) IsWrite() bool {
-	return s != "" && !s.IsRead()
-}
-
-// Parse converts scope strings (as stored on a token or client) into Scope values.
-// Unknown strings are kept as-is; they simply never satisfy any required scope.
-func Parse(ss []string) []Scope {
-	out := make([]Scope, len(ss))
-	for i, s := range ss {
-		out[i] = Scope(s)
-	}
-
-	return out
-}
-
-// Grants reports whether the granted scopes satisfy the required want scope.
-func Grants(granted []Scope, want Scope) bool {
-	for _, g := range granted {
-		if satisfies(g, want) {
-			return true
-		}
-	}
-
-	return false
-}
-
-// satisfies reports whether a single held scope satisfies want: exact match; a
-// write scope grants its own :read subset; "all" grants everything; "all:read"
-// grants any :read scope.
-func satisfies(have, want Scope) bool {
-	if have == want || have == All {
-		return true
-	}
-
-	if have == AllRead {
-		return want.IsRead()
-	}
-
-	// A write scope grants its own read subset, e.g. auth_keys ⊇ auth_keys:read.
-	return string(want) == string(have)+readSuffix
-}
-
-// RequiresTags reports whether any scope obliges a credential to carry tags:
-// devices:core and auth_keys mint tagged, tailnet-owned credentials.
-func RequiresTags(scopes []Scope) bool {
-	for _, s := range scopes {
-		if s == DevicesCore || s == AuthKeys {
-			return true
-		}
-	}
-
-	return false
-}
diff --git a/hscontrol/scope/scope_property_test.go b/hscontrol/scope/scope_property_test.go
deleted file mode 100644
index 1132ba513..000000000
--- a/hscontrol/scope/scope_property_test.go
+++ /dev/null
@@ -1,90 +0,0 @@
-package scope
-
-import (
-	"slices"
-	"testing"
-
-	"pgregory.net/rapid"
-)
-
-// scopeGen draws a scope: mostly from the real vocabulary, sometimes adversarial
-// junk (including read-like junk such as "foo:read") so the rules are exercised
-// against unknown input too.
-func scopeGen() *rapid.Generator[Scope] {
-	known := Known()
-
-	return rapid.Custom(func(t *rapid.T) Scope {
-		if rapid.Float64().Draw(t, "junkP") < 0.2 {
-			return Scope(rapid.StringMatching(`[a-z_]{1,12}(:read)?`).Draw(t, "junk"))
-		}
-
-		return rapid.SampledFrom(known).Draw(t, "vocab")
-	})
-}
-
-// TestGrantsMatchesOracle fuzzes Grants against the independent oracle over random
-// granted-sets and want-scopes (vocabulary + junk).
-func TestGrantsMatchesOracle(t *testing.T) {
-	rapid.Check(t, func(rt *rapid.T) {
-		granted := rapid.SliceOfN(scopeGen(), 0, 6).Draw(rt, "granted")
-		want := scopeGen().Draw(rt, "want")
-
-		if got, exp := Grants(granted, want), oracleGrants(granted, want); got != exp {
-			rt.Fatalf("Grants(%v, %q) = %v, oracle = %v", granted, want, got, exp)
-		}
-	})
-}
-
-// TestGrantsInvariants asserts the algebraic properties of the grant relation hold
-// for arbitrary inputs.
-func TestGrantsInvariants(t *testing.T) {
-	rapid.Check(t, func(rt *rapid.T) {
-		granted := rapid.SliceOfN(scopeGen(), 0, 6).Draw(rt, "granted")
-		want := scopeGen().Draw(rt, "want")
-
-		// Reflexivity: a scope always grants itself.
-		if !Grants([]Scope{want}, want) {
-			rt.Fatalf("reflexivity: %q does not grant itself", want)
-		}
-
-		// The empty set grants nothing.
-		if Grants(nil, want) {
-			rt.Fatalf("empty grant satisfied %q", want)
-		}
-
-		// OR-semantics: a set grants iff some member does.
-		anyMember := slices.ContainsFunc(granted, func(g Scope) bool {
-			return Grants([]Scope{g}, want)
-		})
-		if Grants(granted, want) != anyMember {
-			rt.Fatalf("OR-semantics broken for %v / %q", granted, want)
-		}
-
-		// Monotonicity: adding a scope never withdraws a grant.
-		before := Grants(granted, want)
-		extra := scopeGen().Draw(rt, "extra")
-		after := Grants(append(slices.Clone(granted), extra), want)
-
-		if before && !after {
-			rt.Fatalf("monotonicity broken: adding %q withdrew the grant of %q", extra, want)
-		}
-	})
-}
-
-// TestSuperScopeProperties fuzzes the super-scope rules.
-func TestSuperScopeProperties(t *testing.T) {
-	rapid.Check(t, func(rt *rapid.T) {
-		want := scopeGen().Draw(rt, "want")
-
-		// all grants everything.
-		if !Grants([]Scope{All}, want) {
-			rt.Fatalf("all did not grant %q", want)
-		}
-
-		// all:read grants exactly the read scopes.
-		if Grants([]Scope{AllRead}, want) != want.IsRead() {
-			rt.Fatalf("all:read grant of %q = %v, want IsRead = %v",
-				want, Grants([]Scope{AllRead}, want), want.IsRead())
-		}
-	})
-}
diff --git a/hscontrol/scope/scope_test.go b/hscontrol/scope/scope_test.go
deleted file mode 100644
index 0b59aa42a..000000000
--- a/hscontrol/scope/scope_test.go
+++ /dev/null
@@ -1,234 +0,0 @@
-package scope
-
-import (
-	"fmt"
-	"strings"
-	"testing"
-)
-
-// classify decomposes a scope into (resource, super, read) WITHOUT reusing any of
-// the production logic, so the oracle below is an independent second
-// implementation of the grant rule: a divergence between it and Grants is a real
-// bug in one of them, not a tautology.
-type classified struct {
-	resource string // "" for super-scopes; otherwise the write-scope base (e.g. "auth_keys")
-	super    bool   // all / all:read
-	read     bool   // the :read variant
-}
-
-func classify(s Scope) classified {
-	str := string(s)
-	read := strings.HasSuffix(str, ":read")
-	base := strings.TrimSuffix(str, ":read")
-
-	if base == "all" {
-		return classified{super: true, read: read}
-	}
-
-	return classified{resource: base, read: read}
-}
-
-// oracle re-derives "does have satisfy want" from the classification, independent
-// of satisfies/Grants.
-func oracle(have, want Scope) bool {
-	h, w := classify(have), classify(want)
-
-	if h.super {
-		// "all" grants everything; "all:read" grants only reads.
-		return !h.read || w.read
-	}
-
-	if h.resource != w.resource {
-		return false
-	}
-
-	// Same resource: a write scope grants both read and write; a read scope grants
-	// only read.
-	return !h.read || w.read
-}
-
-func oracleGrants(granted []Scope, want Scope) bool {
-	for _, g := range granted {
-		if oracle(g, want) {
-			return true
-		}
-	}
-
-	return false
-}
-
-// TestGrantsHandPicked pins specific (granted, want) outcomes with literal
-// expected values, independent of any oracle: the anchor for the rules.
-func TestGrantsHandPicked(t *testing.T) {
-	tests := []struct {
-		granted []Scope
-		want    Scope
-		ok      bool
-	}{
-		{granted: []Scope{AuthKeys}, want: AuthKeys, ok: true},
-		{granted: []Scope{AuthKeys}, want: AuthKeysRead, ok: true},
-		{granted: []Scope{AuthKeysRead}, want: AuthKeys, ok: false},
-		{granted: []Scope{AuthKeysRead}, want: AuthKeysRead, ok: true},
-		{granted: []Scope{DevicesCore}, want: AuthKeys, ok: false},
-		{granted: []Scope{DevicesCoreRead}, want: AuthKeysRead, ok: false},
-		{granted: []Scope{All}, want: AuthKeys, ok: true},
-		{granted: []Scope{All}, want: FeatureSettingsRead, ok: true},
-		{granted: []Scope{AllRead}, want: PolicyFileRead, ok: true},
-		{granted: []Scope{AllRead}, want: PolicyFile, ok: false},
-		{granted: []Scope{AllRead}, want: All, ok: false},
-		{granted: []Scope{DevicesCore, OAuthKeys}, want: OAuthKeys, ok: true},
-		{granted: nil, want: AuthKeysRead, ok: false},
-		{granted: []Scope{"garbage"}, want: AuthKeys, ok: false},
-		{granted: []Scope{"garbage"}, want: "garbage", ok: true},
-	}
-
-	for _, tt := range tests {
-		t.Run(fmt.Sprintf("%v_%s", tt.granted, tt.want), func(t *testing.T) {
-			if got := Grants(tt.granted, tt.want); got != tt.ok {
-				t.Errorf("Grants(%v, %q) = %v, want %v", tt.granted, tt.want, got, tt.ok)
-			}
-		})
-	}
-}
-
-// TestGrantsExhaustive checks every single-grant pair in the vocabulary against
-// the independent oracle, plus representative multi-grant cases.
-func TestGrantsExhaustive(t *testing.T) {
-	known := Known()
-
-	for _, g := range known {
-		for _, w := range known {
-			got := Grants([]Scope{g}, w)
-			exp := oracle(g, w)
-
-			if got != exp {
-				t.Errorf("Grants([%q], %q) = %v, oracle = %v", g, w, got, exp)
-			}
-		}
-	}
-
-	multi := [][]Scope{
-		{All, AuthKeysRead},
-		{AllRead, AuthKeys},
-		{AuthKeys, OAuthKeysRead},
-		{DevicesCore, DevicesRoutes, PolicyFile},
-		{AuthKeys, AuthKeys}, // duplicates
-	}
-
-	for _, granted := range multi {
-		for _, w := range known {
-			got := Grants(granted, w)
-			exp := oracleGrants(granted, w)
-
-			if got != exp {
-				t.Errorf("Grants(%v, %q) = %v, oracle = %v", granted, w, got, exp)
-			}
-		}
-	}
-}
-
-// TestWriteGrantsItsRead and friends assert the structural rules over the whole
-// vocabulary, deterministically.
-func TestWriteGrantsItsRead(t *testing.T) {
-	for _, s := range Known() {
-		if !s.IsWrite() {
-			continue
-		}
-
-		read := Scope(string(s) + ":read")
-		if !Grants([]Scope{s}, read) {
-			t.Errorf("write scope %q does not grant its read subset %q", s, read)
-		}
-	}
-}
-
-func TestReadNeverGrantsWrite(t *testing.T) {
-	for _, s := range Known() {
-		if !s.IsRead() {
-			continue
-		}
-
-		write := Scope(strings.TrimSuffix(string(s), ":read"))
-		if Grants([]Scope{s}, write) {
-			t.Errorf("read scope %q must not grant write scope %q", s, write)
-		}
-	}
-}
-
-func TestAllGrantsEverything(t *testing.T) {
-	for _, w := range Known() {
-		if !Grants([]Scope{All}, w) {
-			t.Errorf("all should grant %q", w)
-		}
-	}
-}
-
-func TestAllReadGrantsReadsOnly(t *testing.T) {
-	for _, w := range Known() {
-		got := Grants([]Scope{AllRead}, w)
-		if got != w.IsRead() {
-			t.Errorf("all:read grants %q = %v, want %v (IsRead)", w, got, w.IsRead())
-		}
-	}
-}
-
-// TestResourceIsolation: a non-super scope never grants a scope of a different
-// resource.
-func TestResourceIsolation(t *testing.T) {
-	for _, a := range Known() {
-		if a == All || a == AllRead {
-			continue
-		}
-
-		for _, b := range Known() {
-			if classify(a).resource == classify(b).resource {
-				continue
-			}
-
-			if Grants([]Scope{a}, b) {
-				t.Errorf("scope %q (resource %q) must not grant %q (resource %q)",
-					a, classify(a).resource, b, classify(b).resource)
-			}
-		}
-	}
-}
-
-func TestRequiresTags(t *testing.T) {
-	tests := []struct {
-		scopes   []Scope
-		requires bool
-	}{
-		{scopes: []Scope{DevicesCore}, requires: true},
-		{scopes: []Scope{AuthKeys}, requires: true},
-		{scopes: []Scope{OAuthKeys}, requires: false},
-		{scopes: []Scope{PolicyFile, AuthKeys}, requires: true},
-		{scopes: []Scope{DevicesCoreRead}, requires: false},
-		{scopes: nil, requires: false},
-	}
-
-	for _, tt := range tests {
-		t.Run(fmt.Sprintf("%v", tt.scopes), func(t *testing.T) {
-			if got := RequiresTags(tt.scopes); got != tt.requires {
-				t.Errorf("RequiresTags(%v) = %v, want %v", tt.scopes, got, tt.requires)
-			}
-		})
-	}
-}
-
-func TestKnownIsComplete(t *testing.T) {
-	known := Known()
-
-	seen := make(map[Scope]bool, len(known))
-	for _, s := range known {
-		if seen[s] {
-			t.Errorf("Known() contains duplicate %q", s)
-		}
-
-		seen[s] = true
-	}
-
-	// 7 resources × 2 (write+read) + 2 super-scopes = 16.
-	if len(known) != 16 {
-		t.Errorf("Known() has %d scopes, want 16", len(known))
-	}
-}
diff --git a/hscontrol/servertest/apiv2_devices_test.go b/hscontrol/servertest/apiv2_devices_test.go
deleted file mode 100644
index 5d85a46f9..000000000
--- a/hscontrol/servertest/apiv2_devices_test.go
+++ /dev/null
@@ -1,457 +0,0 @@
-package servertest_test
-
-import (
-	"fmt"
-	"net/url"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strconv"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/servertest"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	tsclient "tailscale.com/client/tailscale/v2"
-)
-
-// baselinePolicy declares tag:ci so device SetTags is permitted. Every policy
-// the device/acl tests write keeps tag:ci, so subtest order does not matter.
-const baselinePolicy = `{"tagOwners":{"tag:ci":["apiv2@"]},"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-
-// setBaselinePolicy installs baselinePolicy into both the policy manager and the
-// database so device tagging and the ACL reads work.
-func setBaselinePolicy(t *testing.T, srv *servertest.TestServer) {
-	t.Helper()
-
-	st := srv.State()
-
-	_, err := st.SetPolicy([]byte(baselinePolicy))
-	require.NoError(t, err)
-
-	_, err = st.SetPolicyInDB(baselinePolicy)
-	require.NoError(t, err)
-
-	_, err = st.ReloadPolicy()
-	require.NoError(t, err)
-}
-
-func goClient(t *testing.T, baseURL, apiKey string) *tsclient.Client {
-	t.Helper()
-
-	base, err := url.Parse(baseURL)
-	require.NoError(t, err)
-
-	return &tsclient.Client{BaseURL: base, APIKey: apiKey, Tailnet: "-"}
-}
-
-// srvNodeView reads the node straight from the server's NodeStore — the
-// authoritative state between client steps. Handlers mutate the NodeStore
-// synchronously before responding, so a read right after a 2xx is consistent.
-func srvNodeView(t *testing.T, srv *servertest.TestServer, id types.NodeID) types.NodeView {
-	t.Helper()
-
-	v, ok := srv.State().GetNodeByID(id)
-	require.Truef(t, ok, "node %d must exist server-side", id)
-	require.True(t, v.Valid())
-
-	return v
-}
-
-func approvedRoutesOf(nv types.NodeView) []string {
-	return util.PrefixesToString(nv.ApprovedRoutes().AsSlice())
-}
-
-func nodeListed(srv *servertest.TestServer, id types.NodeID) bool {
-	for _, n := range srv.State().ListNodes().All() {
-		if n.ID() == id {
-			return true
-		}
-	}
-
-	return false
-}
-
-// apiv2DevicesGoClient drives the device lifecycle through the official SDK,
-// validating each mutation three ways: the tool's own get-after-set, the
-// server-side NodeStore, and (where relevant) permutations. Tagging is done late
-// because it clears user ownership; delete is last.
-func apiv2DevicesGoClient(t *testing.T, srv *servertest.TestServer, baseURL, apiKey string, id types.NodeID) {
-	t.Helper()
-
-	ctx := t.Context()
-	dr := goClient(t, baseURL, apiKey).Devices()
-	deviceID := strconv.FormatUint(uint64(id), 10)
-
-	// Get — tool and server agree on identity and addresses.
-	dev, err := dr.Get(ctx, deviceID)
-	require.NoError(t, err)
-	assert.Equal(t, deviceID, dev.NodeID)
-	assert.NotEmpty(t, dev.Addresses)
-	assert.True(t, dev.Authorized)
-	assert.Equal(t, srvNodeView(t, srv, id).IPsAsString(), dev.Addresses)
-	assert.Equal(t, srvNodeView(t, srv, id).GivenName(), dev.Name)
-
-	// List — present in both the tool list and the server's node list.
-	devs, err := dr.List(ctx)
-	require.NoError(t, err)
-	assert.True(t, containsDevice(devs, deviceID), "created device present in list")
-	assert.True(t, nodeListed(srv, id))
-
-	// SetName — get-after-set + server-side, then a second rename.
-	require.NoError(t, dr.SetName(ctx, deviceID, "renamed-go"))
-	dev, err = dr.Get(ctx, deviceID)
-	require.NoError(t, err)
-	assert.Equal(t, "renamed-go", dev.Name)
-	assert.Equal(t, "renamed-go", srvNodeView(t, srv, id).GivenName())
-
-	require.NoError(t, dr.SetName(ctx, deviceID, "renamed-go-2"))
-	assert.Equal(t, "renamed-go-2", srvNodeView(t, srv, id).GivenName())
-
-	// SetSubnetRoutes — one, two, then exit (expands to both families).
-	require.NoError(t, dr.SetSubnetRoutes(ctx, deviceID, []string{"10.0.0.0/24"}))
-	routes, err := dr.SubnetRoutes(ctx, deviceID)
-	require.NoError(t, err)
-	assert.Contains(t, routes.Enabled, "10.0.0.0/24")
-	assert.Contains(t, approvedRoutesOf(srvNodeView(t, srv, id)), "10.0.0.0/24")
-	assert.Empty(t, srvNodeView(t, srv, id).AnnouncedRoutes(), "route enabled without being announced")
-
-	require.NoError(t, dr.SetSubnetRoutes(ctx, deviceID, []string{"10.0.0.0/24", "192.168.0.0/24"}))
-	approved := approvedRoutesOf(srvNodeView(t, srv, id))
-	assert.Contains(t, approved, "10.0.0.0/24")
-	assert.Contains(t, approved, "192.168.0.0/24")
-
-	// A single exit prefix expands to both families on the server.
-	require.NoError(t, dr.SetSubnetRoutes(ctx, deviceID, []string{"0.0.0.0/0"}))
-	approved = approvedRoutesOf(srvNodeView(t, srv, id))
-	assert.Contains(t, approved, "0.0.0.0/0")
-	assert.Contains(t, approved, "::/0")
-
-	// SetKey — seed a real expiry first so disabling it is a state transition.
-	future := time.Now().Add(24 * time.Hour)
-	_, _, err = srv.State().SetNodeExpiry(id, &future)
-	require.NoError(t, err)
-	require.True(t, srvNodeView(t, srv, id).Expiry().Valid())
-
-	require.NoError(t, dr.SetKey(ctx, deviceID, tsclient.DeviceKey{KeyExpiryDisabled: true}))
-	dev, err = dr.Get(ctx, deviceID)
-	require.NoError(t, err)
-	assert.True(t, dev.KeyExpiryDisabled)
-	assert.False(t, srvNodeView(t, srv, id).Expiry().Valid())
-
-	// Re-enable is a no-op; expiry stays cleared.
-	require.NoError(t, dr.SetKey(ctx, deviceID, tsclient.DeviceKey{KeyExpiryDisabled: false}))
-	assert.False(t, srvNodeView(t, srv, id).Expiry().Valid())
-
-	// SetTags — flips ownership to the tags; the user is dropped.
-	require.NoError(t, dr.SetTags(ctx, deviceID, []string{"tag:ci"}))
-	dev, err = dr.Get(ctx, deviceID)
-	require.NoError(t, err)
-	assert.Equal(t, []string{"tag:ci"}, dev.Tags)
-	assert.Equal(t, types.TaggedDevices.Username(), dev.User)
-	n := srvNodeView(t, srv, id)
-	assert.True(t, n.IsTagged())
-	assert.Equal(t, []string{"tag:ci"}, n.Tags().AsSlice())
-	assert.False(t, n.User().Valid())
-
-	// Re-tagging with the same tag is idempotent.
-	require.NoError(t, dr.SetTags(ctx, deviceID, []string{"tag:ci"}))
-	assert.Equal(t, []string{"tag:ci"}, srvNodeView(t, srv, id).Tags().AsSlice())
-
-	// SetAuthorized(true) is a no-op success; de-auth is rejected and inert.
-	require.NoError(t, dr.SetAuthorized(ctx, deviceID, true))
-	dev, err = dr.Get(ctx, deviceID)
-	require.NoError(t, err)
-	assert.True(t, dev.Authorized)
-
-	require.Error(t, dr.SetAuthorized(ctx, deviceID, false), "de-authorization is unsupported")
-	assert.True(t, srvNodeView(t, srv, id).Valid(), "rejected de-auth left the node present")
-
-	// Delete — gone from the tool and the server.
-	require.NoError(t, dr.Delete(ctx, deviceID))
-	_, err = dr.Get(ctx, deviceID)
-	assert.Truef(t, tsclient.IsNotFound(err), "get after delete should be 404, got %v", err)
-
-	_, ok := srv.State().GetNodeByID(id)
-	assert.False(t, ok, "deleted node is gone server-side")
-}
-
-func containsDevice(devs []tsclient.Device, id string) bool {
-	for _, d := range devs {
-		if d.NodeID == id || d.ID == id {
-			return true
-		}
-	}
-
-	return false
-}
-
-// apiv2ACLGoClient round-trips the policy file: read, raw-read, conditional set.
-func apiv2ACLGoClient(t *testing.T, baseURL, apiKey string) {
-	t.Helper()
-
-	ctx := t.Context()
-	pf := goClient(t, baseURL, apiKey).PolicyFile()
-
-	acl, err := pf.Get(ctx)
-	require.NoError(t, err)
-	assert.NotEmpty(t, acl.ETag, "GET /acl carries an ETag")
-
-	raw, err := pf.Raw(ctx)
-	require.NoError(t, err)
-	assert.NotEmpty(t, raw.HuJSON)
-
-	// Set with the current etag as If-Match; keep tag:ci.
-	require.NoError(t, pf.Set(ctx, baselinePolicy, raw.ETag))
-
-	updated, err := pf.Raw(ctx)
-	require.NoError(t, err)
-	assert.Contains(t, updated.HuJSON, "tag:ci")
-}
-
-// apiv2SettingsGoClient reads the tailnet settings (write is unsupported).
-func apiv2SettingsGoClient(t *testing.T, baseURL, apiKey string) {
-	t.Helper()
-
-	settings, err := goClient(t, baseURL, apiKey).TailnetSettings().Get(t.Context())
-	require.NoError(t, err)
-	assert.Equal(t, "none", string(settings.UsersRoleAllowedToJoinExternalTailnets))
-}
-
-// tscliRun runs tscli and fails the test on a non-zero exit.
-type tscliRun func(args ...string) string
-
-// tscliRunner returns runners for tscli against the local server: one that
-// requires success, and one that tolerates a non-zero exit (for the expected
-// 404 after a delete).
-func tscliRunner(t *testing.T, baseURL, apiKey string) (tscliRun, func(args ...string) error) {
-	t.Helper()
-
-	bin, err := exec.LookPath("tscli")
-	require.NoErrorf(t, err, "tscli is required for TestAPIv2 (provided by the nix dev shell)")
-
-	env := append(
-		os.Environ(),
-		"TSCLI_BASE_URL="+baseURL,
-		"TAILSCALE_API_KEY="+apiKey,
-		"TAILSCALE_TAILNET=-",
-	)
-
-	cmd := func(args ...string) *exec.Cmd {
-		c := exec.CommandContext(t.Context(), bin, args...)
-		c.Env = env
-
-		return c
-	}
-
-	run := func(args ...string) string {
-		t.Helper()
-
-		out, err := cmd(args...).CombinedOutput()
-		require.NoErrorf(t, err, "tscli %s\n%s", strings.Join(args, " "), out)
-
-		return string(out)
-	}
-
-	runAllowErr := func(args ...string) error {
-		t.Helper()
-
-		return cmd(args...).Run()
-	}
-
-	return run, runAllowErr
-}
-
-// apiv2DevicesTSCLI drives the device verbs through tscli, asserting each
-// mutation via get-after-set (tscli's own json output) and the server NodeStore.
-func apiv2DevicesTSCLI(t *testing.T, srv *servertest.TestServer, baseURL, apiKey string, id types.NodeID) {
-	t.Helper()
-
-	run, runAllowErr := tscliRunner(t, baseURL, apiKey)
-	deviceID := strconv.FormatUint(uint64(id), 10)
-
-	assert.Contains(t, run("get", "device", "--device", deviceID, "-o", "json"), deviceID)
-	assert.True(t, nodeListed(srv, id))
-
-	// Name.
-	run("set", "device", "name", "--device", deviceID, "--name", "renamed-tscli")
-	assert.Contains(t, run("get", "device", "--device", deviceID, "-o", "json"), "renamed-tscli")
-	assert.Equal(t, "renamed-tscli", srvNodeView(t, srv, id).GivenName())
-
-	// Routes — one, two, then exit (both families).
-	run("set", "device", "routes", "--device", deviceID, "--route", "10.0.0.0/24")
-	assert.Contains(t, run("list", "routes", "--device", deviceID, "-o", "json"), "10.0.0.0/24")
-	assert.Contains(t, approvedRoutesOf(srvNodeView(t, srv, id)), "10.0.0.0/24")
-
-	run("set", "device", "routes", "--device", deviceID, "--route", "10.0.0.0/24", "--route", "192.168.0.0/24")
-
-	approved := approvedRoutesOf(srvNodeView(t, srv, id))
-	assert.Contains(t, approved, "10.0.0.0/24")
-	assert.Contains(t, approved, "192.168.0.0/24")
-
-	run("set", "device", "routes", "--device", deviceID, "--route", "0.0.0.0/0")
-
-	exitApproved := approvedRoutesOf(srvNodeView(t, srv, id))
-	assert.Contains(t, exitApproved, "0.0.0.0/0")
-	assert.Contains(t, exitApproved, "::/0")
-
-	// Key — seed a real expiry first so disabling it is a transition.
-	future := time.Now().Add(24 * time.Hour)
-	_, _, err := srv.State().SetNodeExpiry(id, &future)
-	require.NoError(t, err)
-
-	run("set", "device", "key", "--device", deviceID, "--disable-expiry")
-	assert.Contains(t, run("get", "device", "--device", deviceID, "-o", "json"), `"keyExpiryDisabled": true`)
-	assert.False(t, srvNodeView(t, srv, id).Expiry().Valid())
-
-	// Tags — flips to tag ownership.
-	run("set", "device", "tags", "--device", deviceID, "--tag", "tag:ci")
-	assert.Contains(t, run("get", "device", "--device", deviceID, "-o", "json"), "tag:ci")
-	n := srvNodeView(t, srv, id)
-	assert.True(t, n.IsTagged())
-	assert.Equal(t, []string{"tag:ci"}, n.Tags().AsSlice())
-	assert.False(t, n.User().Valid())
-
-	// Authorization — approve is a no-op success.
-	run("set", "device", "authorization", "--device", deviceID, "--approve")
-	assert.Contains(t, run("get", "device", "--device", deviceID, "-o", "json"), `"authorized": true`)
-
-	// Delete — gone from tscli and the server.
-	run("delete", "device", "--device", deviceID)
-	require.Error(t, runAllowErr("get", "device", "--device", deviceID, "-o", "json"), "get after delete should fail")
-
-	_, ok := srv.State().GetNodeByID(id)
-	assert.False(t, ok)
-}
-
-// apiv2ACLTSCLI reads and writes the policy file through tscli.
-func apiv2ACLTSCLI(t *testing.T, baseURL, apiKey string) {
-	t.Helper()
-
-	run, _ := tscliRunner(t, baseURL, apiKey)
-
-	assert.Contains(t, run("get", "policy", "--json"), "acls")
-
-	dir := t.TempDir()
-	polFile := filepath.Join(dir, "policy.hujson")
-	require.NoError(t, os.WriteFile(polFile, []byte(baselinePolicy), 0o600))
-	run("set", "policy", "--file", polFile)
-}
-
-// apiv2SettingsTSCLI reads the tailnet settings through tscli.
-func apiv2SettingsTSCLI(t *testing.T, baseURL, apiKey string) {
-	t.Helper()
-
-	run, _ := tscliRunner(t, baseURL, apiKey)
-	assert.Contains(t, run("get", "settings", "-o", "json"), "devicesKeyDurationDays")
-}
-
-// devicesACLTFConfig exercises Terraform device + ACL data sources AND resources.
-// %s is the test node's hostname (the tailscale_device data source key).
-const devicesACLTFConfig = `
-terraform {
-  required_providers {
-    tailscale = {
-      source  = "tailscale/tailscale"
-      version = "~> 0.21"
-    }
-  }
-}
-
-provider "tailscale" {}
-
-resource "tailscale_acl" "policy" {
-  acl = jsonencode({
-    tagOwners = { "tag:ci" = ["apiv2@"] }
-    acls      = [{ action = "accept", src = ["*"], dst = ["*:*"] }]
-  })
-  overwrite_existing_content = true
-}
-
-data "tailscale_device" "dut" {
-  hostname = "%s"
-  wait_for = "30s"
-}
-
-data "tailscale_devices" "all" {}
-
-data "tailscale_acl" "current" {
-  depends_on = [tailscale_acl.policy]
-}
-
-resource "tailscale_device_authorization" "dut" {
-  device_id  = data.tailscale_device.dut.node_id
-  authorized = true
-}
-
-resource "tailscale_device_tags" "dut" {
-  device_id  = data.tailscale_device.dut.node_id
-  tags       = ["tag:ci"]
-  depends_on = [tailscale_acl.policy]
-}
-
-resource "tailscale_device_key" "dut" {
-  device_id           = data.tailscale_device.dut.node_id
-  key_expiry_disabled = true
-}
-
-resource "tailscale_device_subnet_routes" "dut" {
-  device_id = data.tailscale_device.dut.node_id
-  routes    = ["10.0.0.0/24"]
-}
-
-output "dut_node_id"    { value = data.tailscale_device.dut.node_id }
-output "dut_addresses"  { value = data.tailscale_device.dut.addresses }
-output "dut_authorized" { value = data.tailscale_device.dut.authorized }
-output "device_count"   { value = length(data.tailscale_devices.all.devices) }
-output "acl_hujson"     { value = data.tailscale_acl.current.hujson }
-output "enabled_routes" { value = tailscale_device_subnet_routes.dut.routes }
-`
-
-// apiv2DevicesACLTerraform runs a tofu init/apply/destroy over the device and
-// ACL data sources and resources, asserting no post-apply drift, the data-source
-// outputs (read path) against the server truth, and the resulting server state
-// (write path). parallelism=1 avoids racing concurrent mutations on the one
-// shared node.
-func apiv2DevicesACLTerraform(t *testing.T, srv *servertest.TestServer, baseURL, apiKey, hostname string, id types.NodeID) {
-	t.Helper()
-
-	tf := newTofu(t, baseURL, apiKey, fmt.Sprintf(devicesACLTFConfig, hostname))
-
-	tf.run("init", "-no-color", "-input=false")
-	tf.run("apply", "-auto-approve", "-no-color", "-input=false", "-parallelism=1")
-
-	// Data sources resolved to real values that match the server.
-	outputs := tf.outputs()
-	assert.Equal(t, strconv.FormatUint(uint64(id), 10), outputs.str(t, "dut_node_id"))
-	assert.ElementsMatch(t, srvNodeView(t, srv, id).IPsAsString(), outputs.strSlice(t, "dut_addresses"))
-	outputs.jsonEq(t, "dut_authorized", true)
-	assert.Equal(t, srv.State().ListNodes().Len(), int(outputs.num(t, "device_count")))
-	assert.Contains(t, outputs.str(t, "acl_hujson"), "tag:ci")
-	assert.Contains(t, outputs.strSlice(t, "enabled_routes"), "10.0.0.0/24")
-
-	// Server-side: the resources actually applied (write path).
-	n := srvNodeView(t, srv, id)
-	assert.True(t, n.IsTagged())
-	assert.Equal(t, []string{"tag:ci"}, n.Tags().AsSlice())
-	assert.Contains(t, approvedRoutesOf(n), "10.0.0.0/24")
-	assert.False(t, n.Expiry().Valid())
-
-	pol, err := srv.State().GetPolicy()
-	require.NoError(t, err)
-	assert.Contains(t, pol.Data, "tag:ci", "tailscale_acl wrote the policy")
-
-	// A converged config must produce an empty plan — drift is a read/write bug.
-	tf.assertNoDrift()
-
-	// destroy resets the policy; the node is a data source, so it persists.
-	// Tags/expiry teardown are no-ops on Headscale, so they are not reverted.
-	tf.run("destroy", "-auto-approve", "-no-color", "-input=false", "-parallelism=1")
-
-	_, ok := srv.State().GetNodeByID(id)
-	assert.True(t, ok, "data-source node persists across destroy")
-}
diff --git a/hscontrol/servertest/apiv2_oauth_scopes_test.go b/hscontrol/servertest/apiv2_oauth_scopes_test.go
deleted file mode 100644
index 5d3cff67c..000000000
--- a/hscontrol/servertest/apiv2_oauth_scopes_test.go
+++ /dev/null
@@ -1,391 +0,0 @@
-package servertest_test
-
-import (
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strings"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/servertest"
-	"github.com/stretchr/testify/require"
-)
-
-// TestAPIv2OAuthScopes proves the v2 OAuth scope and tag enforcement through the
-// REAL Tailscale Terraform provider's client-credentials flow: the provider mints
-// a scoped access token at /api/v2/oauth/token, then runs one operation whose
-// allow/deny outcome must match the token's scope and tag grant.
-//
-// Each client is created with exactly the scopes/tags under test, and the
-// provider requests no scope narrowing, so the minted token carries the client's
-// full grant. The matrix covers right-scope-allowed, wrong-scope-denied, read vs
-// write, the "all" super-scope, and policy tag ownership (owned-by delegation).
-//
-// The oauth_keys rows drive the real provider's tailscale_oauth_client resource,
-// which omits the "capabilities" body field, so the request schema must make it
-// optional (it is). Drift is not asserted on the auth-key rows: the provider
-// defaults preauthorized=true on create but the server reads tagged keys back as
-// false, so a converged plan is never empty. That is orthogonal to scope
-// enforcement, so a clean apply is the allow proof.
-//
-// tofu is required, not optional: it ships in the nix dev shell, so a missing
-// binary means a broken environment and the test fails rather than skipping.
-func TestAPIv2OAuthScopes(t *testing.T) {
-	srv := servertest.NewServer(t, servertest.WithRealListener())
-	owner := srv.CreateUser(t, "apiv2-oauth")
-	creator := owner.ID
-
-	// scopeMatrixPolicy declares every tag the matrix touches: tag:ci for the
-	// auth-key rows, and the tag:k8s/tag:k8s-operator delegation for the
-	// owned-by rows.
-	setScopeMatrixPolicy(t, srv)
-
-	// A registered node is the target for the device-scope rows. Its decimal id
-	// is the device id the v2 API and the provider's device resources address.
-	// A devices:core write token also grants devices:core:read, so whatever
-	// get/post sequence the provider runs within the core family is satisfied;
-	// the read-scope row then fails on the write, proving read vs write end to
-	// end. devices:routes and feature_settings are proven exhaustively by the Go
-	// matrix (apiv2_oauth_matrix_test.go), not here: the provider's routes
-	// resource issues a cross-family device read a routes-only token would lack,
-	// and the server's settings endpoint is read-only.
-	deviceID := srv.CreateRegisteredNode(t, owner).StringID()
-	deviceAuthorizeConfig := `
-resource "tailscale_device_authorization" "d" {
-  device_id  = "` + deviceID + `"
-  authorized = true
-}
-`
-
-	// The configs each exercise exactly one operation so a row's allow/deny
-	// outcome is unambiguous.
-	const (
-		authKeyConfig = `
-resource "tailscale_tailnet_key" "k" {
-  reusable    = true
-  ephemeral   = false
-  expiry      = 3600
-  description = "oauth-scope-matrix"
-  tags        = ["tag:ci"]
-}
-`
-		aclConfig = `
-resource "tailscale_acl" "policy" {
-  acl = jsonencode({
-    tagOwners = {
-      "tag:ci"           = ["apiv2-oauth@"]
-      "tag:k8s-operator" = []
-      "tag:k8s"          = ["tag:k8s-operator"]
-      "tag:other"        = []
-    }
-    acls = [{ action = "accept", src = ["*"], dst = ["*:*"] }]
-  })
-  overwrite_existing_content = true
-}
-`
-		devicesReadConfig = `
-data "tailscale_devices" "all" {}
-output "device_count" { value = length(data.tailscale_devices.all.devices) }
-`
-		// oauthClientConfig creates an OAuth client whose scope (oauth_keys:read)
-		// is within an oauth_keys grant, so the only variable under test is whether
-		// the caller may manage clients at all.
-		oauthClientConfig = `
-resource "tailscale_oauth_client" "c" {
-  description = "oauth-scope-matrix-client"
-  scopes      = ["oauth_keys:read"]
-}
-`
-		// oauthClientEscalateConfig requests a scope (devices:core:read) that an
-		// oauth_keys-only caller does not itself hold, so the escalation guard must
-		// reject minting a broader client.
-		oauthClientEscalateConfig = `
-resource "tailscale_oauth_client" "c" {
-  description = "oauth-scope-matrix-escalate"
-  scopes      = ["devices:core:read"]
-}
-`
-	)
-
-	// k8sAuthKeyConfig templates the auth-key tag for the owned-by rows.
-	k8sAuthKeyConfig := func(tag string) string {
-		return `
-resource "tailscale_tailnet_key" "k" {
-  reusable    = true
-  ephemeral   = false
-  expiry      = 3600
-  description = "oauth-scope-matrix"
-  tags        = ["` + tag + `"]
-}
-`
-	}
-
-	tests := []struct {
-		name string
-		// scopes/tags the OAuth client (and thus its minted token) holds.
-		scopes []string
-		tags   []string
-		// config is the single-operation HCL applied through the OAuth provider.
-		config string
-		// deny asserts apply fails; denyContains lists substrings, any of which
-		// the failure output must contain. allow asserts a clean apply.
-		deny         bool
-		denyContains []string
-	}{
-		// auth_keys: write scope mints an auth key; read/wrong/all-read do not.
-		{
-			name:   "auth_keys allows tailnet_key",
-			scopes: []string{"auth_keys"},
-			tags:   []string{"tag:ci"},
-			config: authKeyConfig,
-		},
-		{
-			name:         "auth_keys:read denies tailnet_key",
-			scopes:       []string{"auth_keys:read"},
-			tags:         []string{"tag:ci"},
-			config:       authKeyConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-		{
-			name:         "devices:core denies tailnet_key",
-			scopes:       []string{"devices:core"},
-			tags:         []string{"tag:ci"},
-			config:       authKeyConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-		{
-			name:   "all allows tailnet_key",
-			scopes: []string{"all"},
-			tags:   []string{"tag:ci"},
-			config: authKeyConfig,
-		},
-		{
-			name:         "all:read denies tailnet_key",
-			scopes:       []string{"all:read"},
-			tags:         []string{"tag:ci"},
-			config:       authKeyConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-
-		// oauth_keys: managing OAuth clients. Read and wrong scopes are denied, and
-		// a caller cannot mint a client carrying authority it lacks (escalation).
-		{
-			name:   "oauth_keys allows oauth_client",
-			scopes: []string{"oauth_keys"},
-			config: oauthClientConfig,
-		},
-		{
-			name:         "oauth_keys:read denies oauth_client",
-			scopes:       []string{"oauth_keys:read"},
-			config:       oauthClientConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-		{
-			name:         "auth_keys denies oauth_client",
-			scopes:       []string{"auth_keys"},
-			tags:         []string{"tag:ci"},
-			config:       oauthClientConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-		{
-			name:         "oauth_keys cannot escalate client scope",
-			scopes:       []string{"oauth_keys"},
-			config:       oauthClientEscalateConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "beyond the creating token"},
-		},
-
-		// policy_file: write scope sets the ACL; read does not.
-		{
-			name:   "policy_file allows acl",
-			scopes: []string{"policy_file"},
-			config: aclConfig,
-		},
-		{
-			name:         "policy_file:read denies acl",
-			scopes:       []string{"policy_file:read"},
-			config:       aclConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-
-		// devices:core:read reads the devices data source.
-		{
-			name:   "devices:core:read allows devices read",
-			scopes: []string{"devices:core:read"},
-			config: devicesReadConfig,
-		},
-		{
-			name:         "policy_file:read denies devices read",
-			scopes:       []string{"policy_file:read"},
-			config:       devicesReadConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-
-		// devices:core: a write-scoped token authorizes a device; the read scope
-		// and a wrong-family scope are denied (read vs write through the real
-		// provider's tailscale_device_authorization resource).
-		{
-			name:   "devices:core allows device authorize",
-			scopes: []string{"devices:core"},
-			tags:   []string{"tag:ci"},
-			config: deviceAuthorizeConfig,
-		},
-		{
-			name:         "devices:core:read denies device authorize",
-			scopes:       []string{"devices:core:read"},
-			config:       deviceAuthorizeConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-		{
-			name:         "policy_file denies device authorize",
-			scopes:       []string{"policy_file"},
-			config:       deviceAuthorizeConfig,
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "missing the required scope"},
-		},
-
-		// Tag owned-by: a tag:k8s-operator client may use its own tag and the
-		// tag:k8s it owns, but not an unowned tag.
-		{
-			name:   "owned-by exact tag allowed",
-			scopes: []string{"auth_keys"},
-			tags:   []string{"tag:k8s-operator"},
-			config: k8sAuthKeyConfig("tag:k8s-operator"),
-		},
-		{
-			name:   "owned-by delegated tag allowed",
-			scopes: []string{"auth_keys"},
-			tags:   []string{"tag:k8s-operator"},
-			config: k8sAuthKeyConfig("tag:k8s"),
-		},
-		{
-			name:         "owned-by unowned tag denied",
-			scopes:       []string{"auth_keys"},
-			tags:         []string{"tag:k8s-operator"},
-			config:       k8sAuthKeyConfig("tag:other"),
-			deny:         true,
-			denyContains: []string{"403", "Forbidden", "is not owned"},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			secret, client, err := srv.State().CreateOAuthClient(tt.scopes, tt.tags, "scope-matrix", &creator)
-			require.NoError(t, err)
-
-			tf := newTofuOAuth(t, srv.URL, client.ClientID, secret, oauthHCL(tt.config))
-			tf.run("init", "-no-color", "-input=false")
-
-			if tt.deny {
-				tf.runExpectError(t, tt.denyContains...)
-				return
-			}
-
-			tf.run("apply", "-auto-approve", "-no-color", "-input=false", "-parallelism=1")
-		})
-	}
-}
-
-// setScopeMatrixPolicy installs the policy the scope matrix relies on: tag:ci for
-// the auth-key rows, and the tag:k8s-operator → tag:k8s delegation for the
-// owned-by rows.
-func setScopeMatrixPolicy(t *testing.T, srv *servertest.TestServer) {
-	t.Helper()
-
-	// tag:other exists but is owned by no one, so the owned-by denial row tests a
-	// grant denial (403) rather than a tag-not-in-policy rejection (400).
-	const policy = `{"tagOwners":{"tag:ci":["apiv2-oauth@"],"tag:k8s-operator":[],"tag:k8s":["tag:k8s-operator"],"tag:other":[]},"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`
-
-	st := srv.State()
-
-	_, err := st.SetPolicy([]byte(policy))
-	require.NoError(t, err)
-
-	_, err = st.SetPolicyInDB(policy)
-	require.NoError(t, err)
-
-	_, err = st.ReloadPolicy()
-	require.NoError(t, err)
-}
-
-// oauthHCL wraps a single-operation body with the provider block. The provider
-// authenticates via the OAuth env vars newTofuOAuth sets, so the block is empty.
-func oauthHCL(body string) string {
-	return `
-terraform {
-  required_providers {
-    tailscale = {
-      source  = "tailscale/tailscale"
-      version = "~> 0.21"
-    }
-  }
-}
-
-provider "tailscale" {}
-` + body
-}
-
-// newTofuOAuth is a newTofu variant whose provider authenticates with OAuth
-// client credentials instead of an API key: it sets TAILSCALE_OAUTH_CLIENT_ID /
-// TAILSCALE_OAUTH_CLIENT_SECRET (the env vars the tailscale/tailscale provider
-// honors), so the real provider runs the client-credentials grant against
-// baseURL/api/v2/oauth/token. The client id is embedded in the secret, so the
-// secret embeds the client id (the provider sends both; the server derives the
-// client from the secret alone).
-func newTofuOAuth(t *testing.T, baseURL, clientID, clientSecret, config string) *tofu {
-	t.Helper()
-
-	bin, err := exec.LookPath("tofu")
-	require.NoErrorf(t, err, "tofu is required for TestAPIv2OAuthScopes (provided by the nix dev shell)")
-
-	dir := t.TempDir()
-	require.NoError(t, os.WriteFile(filepath.Join(dir, "main.tf"), []byte(config), 0o600))
-	require.NoError(t, os.MkdirAll(filepath.Join(dir, "plugin-cache"), 0o755))
-
-	env := append(
-		os.Environ(),
-		"TAILSCALE_BASE_URL="+baseURL,
-		"TAILSCALE_OAUTH_CLIENT_ID="+clientID,
-		"TAILSCALE_OAUTH_CLIENT_SECRET="+clientSecret,
-		"TAILSCALE_TAILNET=-",
-		// Keep provider plugins inside the temp dir so the run is self-contained.
-		"TF_PLUGIN_CACHE_DIR="+filepath.Join(dir, "plugin-cache"),
-	)
-
-	cmd := func(args ...string) *exec.Cmd {
-		c := exec.CommandContext(t.Context(), bin, args...)
-		c.Dir = dir
-		c.Env = env
-
-		return c
-	}
-
-	return &tofu{t: t, cmd: cmd}
-}
-
-// runExpectError runs apply expecting FAILURE, asserting the combined output
-// contains at least one of mustContain. This is the deny half of every matrix
-// row: a scoped token attempting an operation it lacks the scope (or tag) for.
-func (tf *tofu) runExpectError(t *testing.T, mustContain ...string) {
-	t.Helper()
-
-	out, err := tf.cmd("apply", "-auto-approve", "-no-color", "-input=false", "-parallelism=1").CombinedOutput()
-	require.Errorf(t, err, "expected apply to fail, but it succeeded:\n%s", out)
-
-	combined := string(out)
-	for _, want := range mustContain {
-		if strings.Contains(combined, want) {
-			return
-		}
-	}
-
-	t.Fatalf("apply failed but output contained none of %v:\n%s", mustContain, combined)
-}
diff --git a/hscontrol/servertest/apiv2_test.go b/hscontrol/servertest/apiv2_test.go
deleted file mode 100644
index 4fb98d10c..000000000
--- a/hscontrol/servertest/apiv2_test.go
+++ /dev/null
@@ -1,578 +0,0 @@
-package servertest_test
-
-import (
-	"encoding/json"
-	"fmt"
-	"os"
-	"os/exec"
-	"path/filepath"
-	"strconv"
-	"strings"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/servertest"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	tsclient "tailscale.com/client/tailscale/v2"
-)
-
-// TestAPIv2 proves the v2 API's Tailscale-compatible (ported) endpoints against the three real
-// clients it exists to support: the official Go SDK, tscli, and the Tailscale
-// Terraform provider (via OpenTofu). All three run against one Headscale bound
-// to a real loopback port, authenticating with a user-owned API key.
-//
-// Every mutation is validated three ways — the tool's own get-after-set, the
-// server-side NodeStore/state, and (for Terraform) a no-change plan proving no
-// drift — so a server/provider read-write mismatch fails loudly.
-//
-// tscli and tofu are required, not optional: they ship in the nix dev shell, so
-// a missing binary means a broken environment and the test fails rather than
-// silently skipping.
-func TestAPIv2(t *testing.T) {
-	srv := servertest.NewServer(t, servertest.WithRealListener())
-	owner := srv.CreateUser(t, "apiv2")
-	apiKey := srv.CreateAPIKey(t, owner)
-
-	// tag:ci must exist in policy for device SetTags; every policy the tests
-	// write keeps it, so subtest order is irrelevant. Terraform runs last so its
-	// ACL teardown does not strand the others.
-	setBaselinePolicy(t, srv)
-
-	t.Run("GoClient", func(t *testing.T) {
-		apiv2GoClient(t, srv, srv.URL, apiKey, owner)
-		apiv2UsersGoClient(t, srv, srv.URL, apiKey, owner)
-
-		node := srv.CreateRegisteredNode(t, owner, "dut-go")
-		apiv2DevicesGoClient(t, srv, srv.URL, apiKey, node.ID())
-		apiv2ACLGoClient(t, srv.URL, apiKey)
-		apiv2SettingsGoClient(t, srv.URL, apiKey)
-	})
-
-	t.Run("TSCLI", func(t *testing.T) {
-		apiv2TSCLI(t, srv, srv.URL, apiKey)
-		apiv2UsersTSCLI(t, srv.URL, apiKey, owner)
-
-		node := srv.CreateRegisteredNode(t, owner, "dut-tscli")
-		apiv2DevicesTSCLI(t, srv, srv.URL, apiKey, node.ID())
-		apiv2ACLTSCLI(t, srv.URL, apiKey)
-		apiv2SettingsTSCLI(t, srv.URL, apiKey)
-	})
-
-	t.Run("Terraform", func(t *testing.T) {
-		apiv2Terraform(t, srv, srv.URL, apiKey, owner)
-		apiv2UsersTerraform(t, srv, srv.URL, apiKey, owner)
-
-		node := srv.CreateRegisteredNode(t, owner, "dut-tf")
-		apiv2DevicesACLTerraform(t, srv, srv.URL, apiKey, node.Hostname(), node.ID())
-	})
-}
-
-// apiv2GoClient exercises the official SDK with untagged (user-owned) keys — the
-// default Terraform/tscli path — validating each operation against the server's
-// stored PreAuthKey, plus ephemeral and default-expiry permutations.
-func apiv2GoClient(t *testing.T, srv *servertest.TestServer, baseURL, apiKey string, owner *types.User) {
-	t.Helper()
-
-	ctx := t.Context()
-	keys := goClient(t, baseURL, apiKey).Keys()
-	wantOwner := strconv.FormatUint(uint64(owner.ID), 10)
-
-	var req tsclient.CreateKeyRequest
-
-	req.Description = "go-client"
-	req.ExpirySeconds = 3600
-	req.Capabilities.Devices.Create.Reusable = true
-
-	created, err := keys.CreateAuthKey(ctx, req)
-	require.NoError(t, err)
-	assert.NotEmpty(t, created.ID)
-	assert.NotEmpty(t, created.Key, "secret returned on create")
-	assert.Equal(t, "go-client", created.Description)
-	assert.Equal(t, wantOwner, created.UserID, "user-owned key reports its owner")
-
-	// Server-side: the stored key matches the request and is owned by the user.
-	pak := srvPreAuthKey(t, srv, created.ID)
-	assert.True(t, pak.Reusable)
-	assert.False(t, pak.Ephemeral)
-	assert.Empty(t, pak.Tags, "no tags -> user-owned")
-	require.NotNil(t, pak.User)
-	assert.Equal(t, owner.ID, pak.User.ID)
-	assert.Equal(t, "go-client", pak.Description)
-	require.NotNil(t, pak.CreatedAt)
-	require.NotNil(t, pak.Expiration)
-	assert.InDelta(t, 3600, pak.Expiration.Sub(*pak.CreatedAt).Seconds(), 5)
-
-	got, err := keys.Get(ctx, created.ID)
-	require.NoError(t, err)
-	assert.Equal(t, created.ID, got.ID)
-	assert.Empty(t, got.Key, "secret omitted on get")
-	assert.Equal(t, "go-client", got.Description)
-	assert.False(t, got.Invalid)
-	// The SDK decodes our integer expirySeconds into a Duration of nanoseconds,
-	// so never assert it numerically; the lifetime rides on Expires-Created.
-	assert.InDelta(t, 3600, got.Expires.Sub(got.Created).Seconds(), 5)
-
-	list, err := keys.List(ctx, true)
-	require.NoError(t, err)
-	assert.True(t, containsKeyID(list, created.ID), "created key present in list")
-
-	// DELETE soft-revokes (Tailscale-faithful): the key stays retrievable, now
-	// invalid, until the collector reaps it.
-	require.NoError(t, keys.Delete(ctx, created.ID))
-	revoked, err := keys.Get(ctx, created.ID)
-	require.NoError(t, err, "revoked key stays retrievable")
-	assert.True(t, revoked.Invalid, "revoked key reports invalid")
-	require.NotNil(t, srvPreAuthKey(t, srv, created.ID).Revoked, "key soft-revoked server-side")
-
-	// Permutation — ephemeral key.
-	var ephReq tsclient.CreateKeyRequest
-
-	ephReq.Capabilities.Devices.Create.Ephemeral = true
-	eph, err := keys.CreateAuthKey(ctx, ephReq)
-	require.NoError(t, err)
-	assert.True(t, srvPreAuthKey(t, srv, eph.ID).Ephemeral)
-	require.NoError(t, keys.Delete(ctx, eph.ID))
-
-	// Permutation — default expiry (omit ExpirySeconds -> 90 days).
-	def, err := keys.CreateAuthKey(ctx, tsclient.CreateKeyRequest{})
-	require.NoError(t, err)
-	defKey := srvPreAuthKey(t, srv, def.ID)
-	require.NotNil(t, defKey.CreatedAt)
-	require.NotNil(t, defKey.Expiration)
-	assert.InDelta(t, 7776000, defKey.Expiration.Sub(*defKey.CreatedAt).Seconds(), 5)
-	require.NoError(t, keys.Delete(ctx, def.ID))
-}
-
-func containsKeyID(keys []tsclient.Key, id string) bool {
-	for _, k := range keys {
-		if k.ID == id {
-			return true
-		}
-	}
-
-	return false
-}
-
-func containsUserID(users []tsclient.User, id string) bool {
-	for _, u := range users {
-		if u.ID == id {
-			return true
-		}
-	}
-
-	return false
-}
-
-// srvUserCount is the server-side ground truth for the number of users.
-func srvUserCount(t *testing.T, srv *servertest.TestServer) int {
-	t.Helper()
-
-	users, err := srv.State().ListAllUsers()
-	require.NoError(t, err)
-
-	return len(users)
-}
-
-// apiv2UsersGoClient exercises the Users data sources through the official SDK:
-// get-by-id, list, the type/role filters (member matches all, anything else
-// matches nothing), and a typed 404 — each cross-checked against server truth.
-func apiv2UsersGoClient(t *testing.T, srv *servertest.TestServer, baseURL, apiKey string, owner *types.User) {
-	t.Helper()
-
-	ctx := t.Context()
-	ur := goClient(t, baseURL, apiKey).Users()
-	ownerID := strconv.FormatUint(uint64(owner.ID), 10)
-
-	got, err := ur.Get(ctx, ownerID)
-	require.NoError(t, err)
-	assert.Equal(t, ownerID, got.ID)
-	assert.Equal(t, owner.Username(), got.LoginName)
-	assert.Equal(t, tsclient.UserTypeMember, got.Type)
-	assert.Equal(t, tsclient.UserStatusActive, got.Status)
-	assert.Equal(t, srv.State().ListNodesByUser(types.UserID(owner.ID)).Len(), got.DeviceCount,
-		"deviceCount matches the server's node count for the user")
-
-	all, err := ur.List(ctx, nil, nil)
-	require.NoError(t, err)
-	assert.True(t, containsUserID(all, ownerID), "owner present in user list")
-	assert.Len(t, all, srvUserCount(t, srv))
-
-	// member matches every Headscale user; shared/admin match nothing.
-	members, err := ur.List(ctx, new(tsclient.UserTypeMember), nil)
-	require.NoError(t, err)
-	assert.Len(t, members, len(all))
-
-	shared, err := ur.List(ctx, new(tsclient.UserTypeShared), nil)
-	require.NoError(t, err)
-	assert.Empty(t, shared, "Headscale has no shared users")
-
-	admins, err := ur.List(ctx, nil, new(tsclient.UserRoleAdmin))
-	require.NoError(t, err)
-	assert.Empty(t, admins, "Headscale has no admin-role users")
-
-	_, err = ur.Get(ctx, "999999")
-	require.Error(t, err)
-	assert.True(t, tsclient.IsNotFound(err), "unknown user id is a typed 404")
-}
-
-// apiv2UsersTSCLI exercises the user verbs through tscli, asserting the owner is
-// present in the list and retrievable by id.
-func apiv2UsersTSCLI(t *testing.T, baseURL, apiKey string, owner *types.User) {
-	t.Helper()
-
-	run, _ := tscliRunner(t, baseURL, apiKey)
-	ownerID := strconv.FormatUint(uint64(owner.ID), 10)
-
-	listOut := run("list", "users", "-o", "json")
-	assert.Contains(t, listOut, ownerID)
-	assert.Contains(t, listOut, `"member"`)
-
-	getOut := run("get", "user", "--user", ownerID, "-o", "json")
-	assert.Contains(t, getOut, ownerID)
-	assert.Contains(t, getOut, owner.Username())
-}
-
-// srvPreAuthKey is the server-side ground truth for a key id; it fails the test
-// if the key is absent.
-func srvPreAuthKey(t *testing.T, srv *servertest.TestServer, id string) types.PreAuthKey {
-	t.Helper()
-
-	pak := findPAKByID(t, srv, id)
-	require.NotNilf(t, pak, "pre-auth key %s not found server-side", id)
-
-	return *pak
-}
-
-// findPAKByID returns the stored key with the given stringified id, or nil.
-func findPAKByID(t *testing.T, srv *servertest.TestServer, id string) *types.PreAuthKey {
-	t.Helper()
-
-	want, err := strconv.ParseUint(id, 10, 64)
-	require.NoError(t, err)
-
-	keys, err := srv.State().ListPreAuthKeys()
-	require.NoError(t, err)
-
-	for i := range keys {
-		if keys[i].ID == want {
-			return &keys[i]
-		}
-	}
-
-	return nil
-}
-
-// apiv2TSCLI exercises tscli with a tagged key, validating server-side that the
-// stored key carries the requested tags and metadata.
-func apiv2TSCLI(t *testing.T, srv *servertest.TestServer, baseURL, apiKey string) {
-	t.Helper()
-
-	run, _ := tscliRunner(t, baseURL, apiKey)
-
-	out := run(
-		"create", "key",
-		"--type", "authkey",
-		"--description", "tscli",
-		"--expiry", "1h",
-		"--reusable",
-		"--tags", "tag:ci",
-		"-o", "json",
-	)
-
-	var created struct {
-		ID  string `json:"id"`
-		Key string `json:"key"`
-	}
-	require.NoErrorf(t, json.Unmarshal([]byte(out), &created), "tscli create output: %s", out)
-	assert.NotEmpty(t, created.ID)
-	assert.NotEmpty(t, created.Key, "secret returned on create")
-
-	// Server-side: tagged, reusable, described, no owner.
-	pak := srvPreAuthKey(t, srv, created.ID)
-	assert.Equal(t, []string{"tag:ci"}, pak.Tags)
-	assert.True(t, pak.Reusable)
-	assert.Equal(t, "tscli", pak.Description)
-	assert.Nil(t, pak.User, "tagged key has no owning user")
-
-	getOut := run("get", "key", "--key", created.ID, "-o", "json")
-
-	var got struct {
-		Key string `json:"key"`
-	}
-	require.NoError(t, json.Unmarshal([]byte(getOut), &got))
-	assert.Empty(t, got.Key, "secret omitted on get")
-
-	assert.Contains(t, run("list", "keys", "--all", "-o", "json"), created.ID)
-
-	// DELETE soft-revokes: the key stays retrievable (invalid) server-side until
-	// the collector reaps it.
-	run("delete", "key", "--key", created.ID)
-	assert.Contains(t, run("get", "key", "--key", created.ID, "-o", "json"), `"invalid": true`)
-	require.NotNil(t, srvPreAuthKey(t, srv, created.ID).Revoked, "key soft-revoked server-side")
-}
-
-// terraformConfig drives the tailscale_tailnet_key resource against the local
-// server. No tags, so the key is owned by the API key's user — the default
-// Terraform path. Outputs expose the provider's read-back for value + drift
-// checks.
-const terraformConfig = `
-terraform {
-  required_providers {
-    tailscale = {
-      source  = "tailscale/tailscale"
-      version = "~> 0.21"
-    }
-  }
-}
-
-provider "tailscale" {}
-
-resource "tailscale_tailnet_key" "test" {
-  reusable      = true
-  ephemeral     = false
-  preauthorized = true
-  expiry        = 3600
-  description   = "tofu-roundtrip"
-}
-
-output "key_id"          { value = tailscale_tailnet_key.test.id }
-output "key_reusable"    { value = tailscale_tailnet_key.test.reusable }
-output "key_ephemeral"   { value = tailscale_tailnet_key.test.ephemeral }
-output "key_description" { value = tailscale_tailnet_key.test.description }
-`
-
-// apiv2Terraform runs a tofu init→apply→(no-drift)→destroy roundtrip on a
-// tailnet key, cross-checking the provider outputs and the server's stored key.
-func apiv2Terraform(t *testing.T, srv *servertest.TestServer, baseURL, apiKey string, owner *types.User) {
-	t.Helper()
-
-	tf := newTofu(t, baseURL, apiKey, terraformConfig)
-
-	tf.run("init", "-no-color", "-input=false")
-	tf.run("apply", "-auto-approve", "-no-color", "-input=false", "-parallelism=1")
-
-	outputs := tf.outputs()
-	keyID := outputs.str(t, "key_id")
-	require.NotEmpty(t, keyID)
-	outputs.jsonEq(t, "key_reusable", true)
-	outputs.jsonEq(t, "key_ephemeral", false)
-	outputs.jsonEq(t, "key_description", "tofu-roundtrip")
-
-	// Server-side: the key exists, user-owned, with the requested attributes.
-	pak := srvPreAuthKey(t, srv, keyID)
-	assert.Equal(t, "tofu-roundtrip", pak.Description)
-	assert.True(t, pak.Reusable)
-	assert.False(t, pak.Ephemeral)
-	assert.Empty(t, pak.Tags, "no tags -> user-owned key")
-	require.NotNil(t, pak.User)
-	assert.Equal(t, owner.ID, pak.User.ID)
-	require.NotNil(t, pak.CreatedAt)
-	require.NotNil(t, pak.Expiration)
-	assert.InDelta(t, 3600, pak.Expiration.Sub(*pak.CreatedAt).Seconds(), 5)
-
-	// A converged config must produce an empty plan — drift is a read/write bug.
-	tf.assertNoDrift()
-
-	// destroy DELETEs the key, which soft-revokes it: the row is kept (revoked)
-	// until the collector reaps it.
-	tf.run("destroy", "-auto-approve", "-no-color", "-input=false", "-parallelism=1")
-	require.NotNil(t, srvPreAuthKey(t, srv, keyID).Revoked, "key revoked after destroy")
-}
-
-// usersTFConfig drives the tailscale_user (by login name) and tailscale_users
-// data sources, plus tailscale_4via6 (provider-local compute, no server call) to
-// prove that data source resolves against Headscale unchanged. %s is the owner's
-// login name. Data sources create nothing, so the assertions are value
-// correctness plus no drift on re-read.
-const usersTFConfig = `
-terraform {
-  required_providers {
-    tailscale = {
-      source  = "tailscale/tailscale"
-      version = "~> 0.21"
-    }
-  }
-}
-
-provider "tailscale" {}
-
-data "tailscale_user" "owner" {
-  login_name = "%s"
-}
-
-data "tailscale_users" "all" {}
-
-data "tailscale_4via6" "site" {
-  site = 7
-  cidr = "10.1.1.0/24"
-}
-
-output "user_id"           { value = data.tailscale_user.owner.id }
-output "user_login_name"   { value = data.tailscale_user.owner.login_name }
-output "user_type"         { value = data.tailscale_user.owner.type }
-output "user_device_count" { value = data.tailscale_user.owner.device_count }
-output "users_count"       { value = length(data.tailscale_users.all.users) }
-output "via6"              { value = data.tailscale_4via6.site.ipv6 }
-`
-
-// apiv2UsersTerraform runs a tofu init/apply/(no-drift)/destroy over the
-// tailscale_user + tailscale_users data sources (and the provider-local
-// tailscale_4via6), cross-checking the data-source outputs against the server's
-// stored users.
-func apiv2UsersTerraform(t *testing.T, srv *servertest.TestServer, baseURL, apiKey string, owner *types.User) {
-	t.Helper()
-
-	tf := newTofu(t, baseURL, apiKey, fmt.Sprintf(usersTFConfig, owner.Username()))
-
-	tf.run("init", "-no-color", "-input=false")
-	tf.run("apply", "-auto-approve", "-no-color", "-input=false", "-parallelism=1")
-
-	outputs := tf.outputs()
-	assert.Equal(t, strconv.FormatUint(uint64(owner.ID), 10), outputs.str(t, "user_id"))
-	assert.Equal(t, owner.Username(), outputs.str(t, "user_login_name"))
-	assert.Equal(t, "member", outputs.str(t, "user_type"))
-	assert.Equal(t, srv.State().ListNodesByUser(types.UserID(owner.ID)).Len(),
-		int(outputs.num(t, "user_device_count")))
-	assert.Equal(t, srvUserCount(t, srv), int(outputs.num(t, "users_count")))
-
-	// tailscale_4via6 is computed by the provider with no server call; assert it
-	// resolved to a Tailscale 4via6 address.
-	assert.Contains(t, outputs.str(t, "via6"), "fd7a:115c:a1e0", "4via6 mapped address")
-
-	// A converged data-source read must produce an empty plan — drift is a read bug.
-	tf.assertNoDrift()
-
-	// destroy removes only TF state; the users persist (they are data sources).
-	tf.run("destroy", "-auto-approve", "-no-color", "-input=false", "-parallelism=1")
-	assert.GreaterOrEqual(t, srvUserCount(t, srv), 1, "users persist across data-source destroy")
-}
-
-// tofu binds a tofu binary, working dir, and env for a single workspace. cmd is
-// a closure capturing the looked-up binary so subprocess construction stays in
-// one place.
-type tofu struct {
-	t   *testing.T
-	cmd func(args ...string) *exec.Cmd
-}
-
-func newTofu(t *testing.T, baseURL, apiKey, config string) *tofu {
-	t.Helper()
-
-	bin, err := exec.LookPath("tofu")
-	require.NoErrorf(t, err, "tofu is required for TestAPIv2 (provided by the nix dev shell)")
-
-	dir := t.TempDir()
-	require.NoError(t, os.WriteFile(filepath.Join(dir, "main.tf"), []byte(config), 0o600))
-	require.NoError(t, os.MkdirAll(filepath.Join(dir, "plugin-cache"), 0o755))
-
-	env := append(
-		os.Environ(),
-		"TAILSCALE_BASE_URL="+baseURL,
-		"TAILSCALE_API_KEY="+apiKey,
-		"TAILSCALE_TAILNET=-",
-		// Keep provider plugins inside the temp dir so the run is self-contained.
-		"TF_PLUGIN_CACHE_DIR="+filepath.Join(dir, "plugin-cache"),
-	)
-
-	cmd := func(args ...string) *exec.Cmd {
-		c := exec.CommandContext(t.Context(), bin, args...)
-		c.Dir = dir
-		c.Env = env
-
-		return c
-	}
-
-	return &tofu{t: t, cmd: cmd}
-}
-
-func (tf *tofu) run(args ...string) string {
-	tf.t.Helper()
-
-	out, err := tf.cmd(args...).CombinedOutput()
-	require.NoErrorf(tf.t, err, "tofu %s\n%s", strings.Join(args, " "), out)
-
-	return string(out)
-}
-
-// assertNoDrift fails if a no-change plan reports changes. plan
-// -detailed-exitcode returns 0 = no changes, 1 = error, 2 = drift.
-func (tf *tofu) assertNoDrift() {
-	tf.t.Helper()
-
-	out, err := tf.cmd("plan", "-detailed-exitcode", "-no-color", "-input=false", "-parallelism=1").CombinedOutput()
-	if err == nil {
-		return
-	}
-
-	var exit *exec.ExitError
-	require.ErrorAsf(tf.t, err, &exit, "tofu plan\n%s", out)
-	require.Equalf(tf.t, 0, exit.ExitCode(),
-		"no-change plan after apply must be empty; drift means a provider read disagrees with desired state:\n%s", out)
-}
-
-func (tf *tofu) outputs() tofuOutputs {
-	tf.t.Helper()
-
-	out := tf.run("output", "-json", "-no-color")
-
-	var raw map[string]struct {
-		Value json.RawMessage `json:"value"`
-	}
-	require.NoError(tf.t, json.Unmarshal([]byte(out), &raw))
-
-	o := make(tofuOutputs, len(raw))
-	for k, v := range raw {
-		o[k] = v.Value
-	}
-
-	return o
-}
-
-// tofuOutputs is the decoded `tofu output -json`, keyed by output name.
-type tofuOutputs map[string]json.RawMessage
-
-func (o tofuOutputs) raw(t *testing.T, key string) json.RawMessage {
-	t.Helper()
-
-	v, ok := o[key]
-	require.Truef(t, ok, "output %q missing", key)
-
-	return v
-}
-
-func (o tofuOutputs) str(t *testing.T, key string) string {
-	t.Helper()
-
-	var s string
-	require.NoError(t, json.Unmarshal(o.raw(t, key), &s))
-
-	return s
-}
-
-func (o tofuOutputs) num(t *testing.T, key string) float64 {
-	t.Helper()
-
-	var n float64
-	require.NoError(t, json.Unmarshal(o.raw(t, key), &n))
-
-	return n
-}
-
-func (o tofuOutputs) strSlice(t *testing.T, key string) []string {
-	t.Helper()
-
-	var s []string
-	require.NoError(t, json.Unmarshal(o.raw(t, key), &s))
-
-	return s
-}
-
-// jsonEq asserts the output decodes equal to want (handles bools/strings/numbers).
-func (o tofuOutputs) jsonEq(t *testing.T, key string, want any) {
-	t.Helper()
-
-	wantJSON, err := json.Marshal(want)
-	require.NoError(t, err)
-	require.JSONEq(t, string(wantJSON), string(o.raw(t, key)))
-}
diff --git a/hscontrol/servertest/assertions.go b/hscontrol/servertest/assertions.go
index 54da6473d..2dcfab3d9 100644
--- a/hscontrol/servertest/assertions.go
+++ b/hscontrol/servertest/assertions.go
@@ -1,7 +1,9 @@
 package servertest
 
 import (
+	"net/netip"
 	"testing"
+	"time"
 )
 
 // AssertMeshComplete verifies that every client in the slice sees
@@ -65,6 +67,72 @@ func AssertPeerOnline(tb testing.TB, observer *TestClient, peerName string) {
 	}
 }
 
+// AssertPeerOffline checks that the observer sees peerName as offline.
+func AssertPeerOffline(tb testing.TB, observer *TestClient, peerName string) {
+	tb.Helper()
+
+	peer, ok := observer.PeerByName(peerName)
+	if !ok {
+		// Peer gone entirely counts as "offline" for this assertion.
+		return
+	}
+
+	isOnline, known := peer.Online().GetOk()
+	if known && isOnline {
+		tb.Errorf("AssertPeerOffline: %s sees peer %s as online, want offline",
+			observer.Name, peerName)
+	}
+}
+
+// AssertPeerGone checks that the observer does NOT have peerName in
+// its peer list at all.
+func AssertPeerGone(tb testing.TB, observer *TestClient, peerName string) {
+	tb.Helper()
+
+	_, ok := observer.PeerByName(peerName)
+	if ok {
+		tb.Errorf("AssertPeerGone: %s still sees peer %s", observer.Name, peerName)
+	}
+}
+
+// AssertPeerHasAllowedIPs checks that a peer has the expected
+// AllowedIPs prefixes.
+func AssertPeerHasAllowedIPs(tb testing.TB, observer *TestClient, peerName string, want []netip.Prefix) {
+	tb.Helper()
+
+	peer, ok := observer.PeerByName(peerName)
+	if !ok {
+		tb.Errorf("AssertPeerHasAllowedIPs: %s does not see peer %s", observer.Name, peerName)
+
+		return
+	}
+
+	got := make([]netip.Prefix, 0, peer.AllowedIPs().Len())
+	for i := range peer.AllowedIPs().Len() {
+		got = append(got, peer.AllowedIPs().At(i))
+	}
+
+	if len(got) != len(want) {
+		tb.Errorf("AssertPeerHasAllowedIPs: %s sees %s with AllowedIPs %v, want %v",
+			observer.Name, peerName, got, want)
+
+		return
+	}
+
+	// Build a set for comparison.
+	wantSet := make(map[netip.Prefix]bool, len(want))
+	for _, p := range want {
+		wantSet[p] = true
+	}
+
+	for _, p := range got {
+		if !wantSet[p] {
+			tb.Errorf("AssertPeerHasAllowedIPs: %s sees %s with unexpected AllowedIP %v (want %v)",
+				observer.Name, peerName, p, want)
+		}
+	}
+}
+
 // AssertConsistentState checks that all clients agree on peer
 // properties: every connected client should see the same set of
 // peer hostnames.
@@ -142,3 +210,54 @@ func AssertSelfHasAddresses(tb testing.TB, client *TestClient) {
 		tb.Errorf("AssertSelfHasAddresses: %s self node has no addresses", client.Name)
 	}
 }
+
+// EventuallyAssertMeshComplete retries AssertMeshComplete up to
+// timeout, useful when waiting for state to propagate.
+func EventuallyAssertMeshComplete(tb testing.TB, clients []*TestClient, timeout time.Duration) {
+	tb.Helper()
+
+	expected := len(clients) - 1
+	deadline := time.After(timeout)
+
+	for {
+		allGood := true
+
+		for _, c := range clients {
+			nm := c.Netmap()
+			if nm == nil || len(nm.Peers) < expected {
+				allGood = false
+
+				break
+			}
+		}
+
+		if allGood {
+			// Final strict check.
+			AssertMeshComplete(tb, clients)
+
+			return
+		}
+
+		select {
+		case <-deadline:
+			// Report the failure with details.
+			for _, c := range clients {
+				nm := c.Netmap()
+
+				got := 0
+				if nm != nil {
+					got = len(nm.Peers)
+				}
+
+				if got != expected {
+					tb.Errorf("EventuallyAssertMeshComplete: %s has %d peers, want %d (timeout %v)",
+						c.Name, got, expected, timeout)
+				}
+			}
+
+			return
+		case <-time.After(100 * time.Millisecond):
+			// Poll again.
+		}
+	}
+}
diff --git a/hscontrol/servertest/client.go b/hscontrol/servertest/client.go
index 67232dd33..3ff73cf3e 100644
--- a/hscontrol/servertest/client.go
+++ b/hscontrol/servertest/client.go
@@ -19,8 +19,8 @@ import (
 	"tailscale.com/util/eventbus"
 )
 
-// TestClient wraps a Tailscale [controlclient.Direct] connected to a
-// [TestServer]. It tracks all received [netmap.NetworkMap] updates, providing
+// TestClient wraps a Tailscale controlclient.Direct connected to a
+// TestServer. It tracks all received NetworkMap updates, providing
 // helpers to wait for convergence and inspect the client's view of
 // the network.
 type TestClient struct {
@@ -37,13 +37,13 @@ type TestClient struct {
 	pollCancel context.CancelFunc
 	pollDone   chan struct{}
 
-	// Accumulated state from [tailcfg.MapResponse] callbacks.
+	// Accumulated state from MapResponse callbacks.
 	mu      sync.RWMutex
 	netmap  *netmap.NetworkMap
 	history []*netmap.NetworkMap
 
 	// updates is a buffered channel that receives a signal
-	// each time a new [netmap.NetworkMap] arrives.
+	// each time a new NetworkMap arrives.
 	updates chan *netmap.NetworkMap
 
 	bus     *eventbus.Bus
@@ -51,7 +51,7 @@ type TestClient struct {
 	tracker *health.Tracker
 }
 
-// ClientOption configures a [TestClient].
+// ClientOption configures a TestClient.
 type ClientOption func(*clientConfig)
 
 type clientConfig struct {
@@ -66,7 +66,7 @@ func WithEphemeral() ClientOption {
 	return func(c *clientConfig) { c.ephemeral = true }
 }
 
-// WithHostname sets the client's hostname in [tailcfg.Hostinfo].
+// WithHostname sets the client's hostname in Hostinfo.
 func WithHostname(name string) ClientOption {
 	return func(c *clientConfig) { c.hostname = name }
 }
@@ -82,7 +82,7 @@ func WithUser(user *types.User) ClientOption {
 	return func(c *clientConfig) { c.user = user }
 }
 
-// NewClient creates a [TestClient], registers it with the [TestServer]
+// NewClient creates a TestClient, registers it with the TestServer
 // using a pre-auth key, and starts long-polling for map updates.
 func NewClient(tb testing.TB, server *TestServer, name string, opts ...ClientOption) *TestClient {
 	tb.Helper()
@@ -171,7 +171,7 @@ func NewClient(tb testing.TB, server *TestServer, name string, opts ...ClientOpt
 	return tc
 }
 
-// register performs the initial [controlclient.Direct.TryLogin] to register the client.
+// register performs the initial TryLogin to register the client.
 func (c *TestClient) register(tb testing.TB) {
 	tb.Helper()
 
@@ -188,46 +188,23 @@ func (c *TestClient) register(tb testing.TB) {
 	}
 }
 
-// startPoll begins the long-poll [tailcfg.MapRequest] loop.
+// startPoll begins the long-poll MapRequest loop.
 func (c *TestClient) startPoll(tb testing.TB) {
 	tb.Helper()
 
-	c.startPollLoop()
-}
-
-// startPollLoop creates a fresh poll context and launches the background
-// [controlclient.Direct.PollNetMap] goroutine, which blocks until the
-// context is cancelled or the server closes the connection.
-func (c *TestClient) startPollLoop() {
 	c.pollCtx, c.pollCancel = context.WithCancel(context.Background())
 	c.pollDone = make(chan struct{})
 
 	go func() {
 		defer close(c.pollDone)
-
+		// PollNetMap blocks until ctx is cancelled or the server closes
+		// the connection.
 		_ = c.direct.PollNetMap(c.pollCtx, c)
 	}()
 }
 
-// resetNetmapState clears the cached netmap and drains any pending
-// updates from a previous session so that convergence waits observe
-// only the new session's maps.
-func (c *TestClient) resetNetmapState() {
-	c.mu.Lock()
-	c.netmap = nil
-	c.mu.Unlock()
-
-	for {
-		select {
-		case <-c.updates:
-		default:
-			return
-		}
-	}
-}
-
-// UpdateFullNetmap implements [controlclient.NetmapUpdater].
-// Called by [controlclient.Direct] when a new [netmap.NetworkMap] is received.
+// UpdateFullNetmap implements controlclient.NetmapUpdater.
+// Called by controlclient.Direct when a new NetworkMap is received.
 func (c *TestClient) UpdateFullNetmap(nm *netmap.NetworkMap) {
 	c.mu.Lock()
 	c.netmap = nm
@@ -282,7 +259,7 @@ func (c *TestClient) Disconnect(tb testing.TB) {
 }
 
 // Reconnect registers and starts a new long-poll session.
-// Call [TestClient.Disconnect] first, or this will disconnect automatically.
+// Call Disconnect first, or this will disconnect automatically.
 func (c *TestClient) Reconnect(tb testing.TB) {
 	tb.Helper()
 
@@ -297,11 +274,24 @@ func (c *TestClient) Reconnect(tb testing.TB) {
 		}
 	}
 
-	// Clear stale netmap data and drain pending updates so that callers
-	// like [TestClient.WaitForPeers] actually wait for the new session's
-	// map instead of returning immediately based on the old session's
-	// cached state.
-	c.resetNetmapState()
+	// Clear stale netmap data so that callers like WaitForPeers
+	// actually wait for the new session's map instead of returning
+	// immediately based on the old session's cached state.
+	c.mu.Lock()
+	c.netmap = nil
+	c.mu.Unlock()
+
+	// Drain any pending updates from the old session so they
+	// don't satisfy a subsequent WaitForPeers/WaitForUpdate.
+	for {
+		select {
+		case <-c.updates:
+		default:
+			goto drained
+		}
+	}
+
+drained:
 
 	// Re-register and start polling again.
 	c.register(tb)
@@ -309,79 +299,6 @@ func (c *TestClient) Reconnect(tb testing.TB) {
 	c.startPoll(tb)
 }
 
-// LogoutAndDisconnect sends a logout [tailcfg.RegisterRequest] (expiry in
-// the past) and tears down the long-poll session, mirroring what
-// tailscaled does on `tailscale logout`. The server marks the node
-// expired; the poll teardown then triggers the server's disconnect
-// grace period, after which the node goes offline.
-//
-// Safe to call from non-test goroutines: errors are returned, not
-// fataled, so many clients can log out concurrently.
-func (c *TestClient) LogoutAndDisconnect(ctx context.Context) error {
-	err := c.direct.TryLogout(ctx)
-	if err != nil {
-		return fmt.Errorf("servertest: TryLogout(%s): %w", c.Name, err)
-	}
-
-	if c.pollCancel != nil {
-		c.pollCancel()
-
-		select {
-		case <-c.pollDone:
-		case <-ctx.Done():
-			return fmt.Errorf("servertest: LogoutAndDisconnect(%s): poll did not exit: %w", c.Name, ctx.Err())
-		}
-	}
-
-	return nil
-}
-
-// ReloginAndPoll logs the client back in after [TestClient.LogoutAndDisconnect]
-// and starts a fresh long-poll session. [controlclient.Direct.TryLogout] cleared
-// the persisted node key, so this generates a new NodeKey and re-registers with
-// the same pre-auth key and machine key — the same shape as a real client
-// running `tailscale up --authkey=...` after a logout.
-//
-// Safe to call from non-test goroutines.
-func (c *TestClient) ReloginAndPoll(ctx context.Context) error {
-	url, err := c.direct.TryLogin(ctx, controlclient.LoginDefault)
-	if err != nil {
-		return fmt.Errorf("servertest: TryLogin(%s): %w", c.Name, err)
-	}
-
-	if url != "" {
-		return fmt.Errorf("servertest: TryLogin(%s): unexpected auth URL %q (expected auto-auth with preauth key)", c.Name, url) //nolint:err113
-	}
-
-	c.resetNetmapState()
-	c.startPollLoop()
-
-	return nil
-}
-
-// RestartPoll tears down the current long-poll session and immediately
-// starts a new one without re-registering, the way tailscaled restarts
-// its map poll on state-machine transitions (pause/unpause around
-// login). The node key is unchanged; the server sees a rapid
-// disconnect/reconnect.
-//
-// Safe to call from non-test goroutines.
-func (c *TestClient) RestartPoll(ctx context.Context) error {
-	if c.pollCancel != nil {
-		c.pollCancel()
-
-		select {
-		case <-c.pollDone:
-		case <-ctx.Done():
-			return fmt.Errorf("servertest: RestartPoll(%s): old poll did not exit: %w", c.Name, ctx.Err())
-		}
-	}
-
-	c.startPollLoop()
-
-	return nil
-}
-
 // ReconnectAfter disconnects, waits for d, then reconnects.
 // The timer works correctly with testing/synctest for
 // time-controlled tests.
@@ -398,7 +315,7 @@ func (c *TestClient) ReconnectAfter(tb testing.TB, d time.Duration) {
 
 // --- State accessors ---
 
-// Netmap returns the latest [netmap.NetworkMap], or nil if none received yet.
+// Netmap returns the latest NetworkMap, or nil if none received yet.
 func (c *TestClient) Netmap() *netmap.NetworkMap {
 	c.mu.RLock()
 	defer c.mu.RUnlock()
@@ -411,25 +328,10 @@ func (c *TestClient) Netmap() *netmap.NetworkMap {
 func (c *TestClient) WaitForPeers(tb testing.TB, n int, timeout time.Duration) {
 	tb.Helper()
 
-	c.waitForPeers(tb, n, timeout, "WaitForPeers", func(got int) bool { return got >= n })
-}
-
-// waitForPeers blocks until match reports the current peer count
-// satisfies the caller's predicate, or until timeout expires. op
-// names the caller for the timeout failure message.
-func (c *TestClient) waitForPeers(
-	tb testing.TB,
-	n int,
-	timeout time.Duration,
-	op string,
-	match func(got int) bool,
-) {
-	tb.Helper()
-
 	deadline := time.After(timeout)
 
 	for {
-		if nm := c.Netmap(); nm != nil && match(len(nm.Peers)) {
+		if nm := c.Netmap(); nm != nil && len(nm.Peers) >= n {
 			return
 		}
 
@@ -444,7 +346,7 @@ func (c *TestClient) waitForPeers(
 				got = len(nm.Peers)
 			}
 
-			tb.Fatalf("servertest: %s(%s, %d): timeout after %v (got %d peers)", op, c.Name, n, timeout, got)
+			tb.Fatalf("servertest: WaitForPeers(%s, %d): timeout after %v (got %d peers)", c.Name, n, timeout, got)
 		}
 	}
 }
@@ -523,7 +425,7 @@ func (c *TestClient) UpdateCount() int {
 	return len(c.history)
 }
 
-// History returns a copy of all [netmap.NetworkMap] snapshots in order.
+// History returns a copy of all NetworkMap snapshots in order.
 func (c *TestClient) History() []*netmap.NetworkMap {
 	c.mu.RLock()
 	defer c.mu.RUnlock()
@@ -548,7 +450,27 @@ func (c *TestClient) SelfName() string {
 func (c *TestClient) WaitForPeerCount(tb testing.TB, n int, timeout time.Duration) {
 	tb.Helper()
 
-	c.waitForPeers(tb, n, timeout, "WaitForPeerCount", func(got int) bool { return got == n })
+	deadline := time.After(timeout)
+
+	for {
+		if nm := c.Netmap(); nm != nil && len(nm.Peers) == n {
+			return
+		}
+
+		select {
+		case <-c.updates:
+			// Check again.
+		case <-deadline:
+			nm := c.Netmap()
+
+			got := 0
+			if nm != nil {
+				got = len(nm.Peers)
+			}
+
+			tb.Fatalf("servertest: WaitForPeerCount(%s, %d): timeout after %v (got %d peers)", c.Name, n, timeout, got)
+		}
+	}
 }
 
 // WaitForCondition blocks until condFn returns true on the latest
@@ -573,13 +495,13 @@ func (c *TestClient) WaitForCondition(tb testing.TB, desc string, timeout time.D
 	}
 }
 
-// Direct returns the underlying [controlclient.Direct] for
-// advanced operations like [controlclient.Direct.SetHostinfo] or SendUpdate.
+// Direct returns the underlying controlclient.Direct for
+// advanced operations like SetHostinfo or SendUpdate.
 func (c *TestClient) Direct() *controlclient.Direct {
 	return c.direct
 }
 
-// String implements [fmt.Stringer] for debug output.
+// String implements fmt.Stringer for debug output.
 func (c *TestClient) String() string {
 	nm := c.Netmap()
 	if nm == nil {
diff --git a/hscontrol/servertest/connect_race_test.go b/hscontrol/servertest/connect_race_test.go
index b9110ad92..eebf8aa59 100644
--- a/hscontrol/servertest/connect_race_test.go
+++ b/hscontrol/servertest/connect_race_test.go
@@ -15,16 +15,16 @@ import (
 )
 
 // TestConnectDisconnectRace targets the residual TOCTOU window in
-// [state.State.Disconnect]: the connectGeneration check at state.go:644 is not
-// atomic with the subsequent [state.NodeStore.UpdateNode] and
-// primaryRoutes.SetRoutes calls. A new [state.State.Connect] that runs between the
+// state.Disconnect: the connectGeneration check at state.go:644 is not
+// atomic with the subsequent NodeStore.UpdateNode and
+// primaryRoutes.SetRoutes calls. A new Connect that runs between the
 // gen check and the mutations can have its effects overwritten by the
-// stale [state.State.Disconnect]'s SetRoutes(empty).
+// stale Disconnect's SetRoutes(empty).
 //
 // The poll.go grace-period flow protects against the most common case
-// ([state.State.RemoveNode] + stillConnected). Connect/Disconnect on [state.State] directly
+// (RemoveNode + stillConnected). Connect/Disconnect on State directly
 // bypasses that protection and should still leave the state consistent
-// — if it doesn't, that is the bug behind the original race issue.
+// — if it doesn't, that is the bug behind issue #3203.
 //
 // Run with -race to also catch any data race exposed.
 func TestConnectDisconnectRace(t *testing.T) {
@@ -33,15 +33,15 @@ func TestConnectDisconnectRace(t *testing.T) {
 
 	route := netip.MustParsePrefix("10.0.0.0/24")
 
-	// Use [servertest.NewClient] to get a node fully registered + Connected via the
-	// real noise/poll path. After this, [state.NodeStore] + primaryRoutes already
-	// have the node, and [state.State.Connect] has been called once.
+	// Use NewClient to get a node fully registered + Connected via the
+	// real noise/poll path. After this, NodeStore + primaryRoutes already
+	// have the node, and Connect has been called once.
 	//
-	// Only c2 advertises the route. [tailcfg.NodeView.PrimaryRoutes] preserves a current
+	// Only c2 advertises the route. PrimaryRoutes preserves a current
 	// primary across changes (anti-flap, see primary.go), so if both
 	// nodes were advertising, c1 (lower NodeID) would stay primary and
 	// the test could never observe the route slipping out of c2's
-	// [tailcfg.NodeView.PrimaryRoutes] — it would never have been there in the first place.
+	// PrimaryRoutes — it would never have been there in the first place.
 	c1 := servertest.NewClient(t, srv, "race-r1", servertest.WithUser(user))
 	c2 := servertest.NewClient(t, srv, "race-r2", servertest.WithUser(user))
 
@@ -65,19 +65,19 @@ func TestConnectDisconnectRace(t *testing.T) {
 	srv.App.Change(ch)
 
 	// Wait for advertisement + approval to be reflected as a primary
-	// route assignment in [tailcfg.NodeView.PrimaryRoutes]; otherwise we'd be racing the
-	// initial steady-state setup, not the [state.State.Connect]/[state.State.Disconnect] window.
+	// route assignment in PrimaryRoutes; otherwise we'd be racing the
+	// initial steady-state setup, not the Connect/Disconnect window.
 	require.Eventually(t, func() bool {
 		return slices.Contains(srv.State().GetNodePrimaryRoutes(r2ID), route)
 	}, 10*time.Second, 50*time.Millisecond,
 		"primary route should be assigned to r2 before driving the race")
 
 	// Drive the race repeatedly. Each iteration:
-	//   1. Call [state.State.Connect](id) to obtain a fresh gen — this stands in for
+	//   1. Call Connect(id) to obtain a fresh gen — this stands in for
 	//      a session that "owns" the node.
-	//   2. Spawn a goroutine that issues [state.State.Disconnect](id, gen) — the
+	//   2. Spawn a goroutine that issues Disconnect(id, gen) — the
 	//      stale deferred disconnect.
-	//   3. Concurrently spawn a goroutine that issues [state.State.Connect](id) —
+	//   3. Concurrently spawn a goroutine that issues Connect(id) —
 	//      the new session arriving.
 	//   4. After both finish, check the state is consistent: the node
 	//      should be online and primaryRoutes should hold the approved
diff --git a/hscontrol/servertest/content_test.go b/hscontrol/servertest/content_test.go
index 9faeb8e25..144db00ec 100644
--- a/hscontrol/servertest/content_test.go
+++ b/hscontrol/servertest/content_test.go
@@ -10,7 +10,7 @@ import (
 	"tailscale.com/types/netmap"
 )
 
-// TestContentVerification exercises the correctness of [tailcfg.MapResponse]
+// TestContentVerification exercises the correctness of MapResponse
 // content: that the self node, peers, DERP map, and other fields
 // are populated correctly.
 func TestContentVerification(t *testing.T) {
diff --git a/hscontrol/servertest/ephemeral_test.go b/hscontrol/servertest/ephemeral_test.go
index bccb3f34f..e65cd1d0e 100644
--- a/hscontrol/servertest/ephemeral_test.go
+++ b/hscontrol/servertest/ephemeral_test.go
@@ -23,7 +23,7 @@ import (
 //     channel is never closed (documented as a v3 TODO upstream).
 //     - https://github.com/hashicorp/golang-lru/blob/v2.0.7/expirable/expirable_lru.go#L78-L81
 //
-//  2. database/sql internal goroutines: Uses [sync.RWMutex] which is not
+//  2. database/sql internal goroutines: Uses sync.RWMutex which is not
 //     durably blocking in synctest, causing hangs.
 //     - https://github.com/golang/go/issues/77687 (mutex as durably blocking)
 //
@@ -77,7 +77,7 @@ func TestEphemeralNodes(t *testing.T) {
 
 		// Ensure the ephemeral node's long-poll session is fully
 		// established on the server before disconnecting. Without
-		// this, the [TestClient.Disconnect] may cancel a [controlclient.Direct.PollNetMap] that hasn't
+		// this, the Disconnect may cancel a PollNetMap that hasn't
 		// yet reached serveLongPoll, so no grace period or ephemeral
 		// GC would ever be scheduled.
 		ephemeral.WaitForPeers(t, 1, 10*time.Second)
diff --git a/hscontrol/servertest/grants_test.go b/hscontrol/servertest/grants_test.go
index 63820bce3..d6ac7df4d 100644
--- a/hscontrol/servertest/grants_test.go
+++ b/hscontrol/servertest/grants_test.go
@@ -16,7 +16,7 @@ import (
 
 // TestGrantPolicies verifies that grant-based policies propagate
 // correctly through the full control plane (policy -> state -> mapper)
-// and produce the expected packet filter rules in client [netmap.NetworkMap]s.
+// and produce the expected packet filter rules in client netmaps.
 func TestGrantPolicies(t *testing.T) { //nolint:gocyclo
 	t.Parallel()
 
@@ -66,7 +66,7 @@ func TestGrantPolicies(t *testing.T) { //nolint:gocyclo
 				return c2.UpdateCount() > countC2
 			})
 
-		// Verify [netmap.NetworkMap.PacketFilter] is populated with real rules from the grant.
+		// Verify PacketFilter is populated with real rules from the grant.
 		nm1 := c1.Netmap()
 		require.NotNil(t, nm1)
 		assert.NotNil(t, nm1.PacketFilter,
@@ -132,7 +132,7 @@ func TestGrantPolicies(t *testing.T) { //nolint:gocyclo
 			srv.App.Change(changes...)
 		}
 
-		// Wait for [netmap.NetworkMap.PacketFilter] with cap match rules to arrive.
+		// Wait for PacketFilter with cap match rules to arrive.
 		c1.WaitForCondition(t, "packet filter with cap grants",
 			10*time.Second,
 			func(nm *netmap.NetworkMap) bool {
@@ -143,7 +143,7 @@ func TestGrantPolicies(t *testing.T) { //nolint:gocyclo
 		nm1 := c1.Netmap()
 		require.NotNil(t, nm1)
 
-		// Check that the packet filter has [filtertype.CapMatch] entries.
+		// Check that the packet filter has CapMatch entries.
 		// The main grant produces cap/drive and cap/relay.
 		// Companion caps (drive-sharer and relay-target) are
 		// generated with reversed direction.
@@ -657,9 +657,9 @@ func TestGrantPolicies(t *testing.T) { //nolint:gocyclo
 }
 
 // TestGrantViaSubnetFilterRules verifies that routers with via grants
-// receive [netmap.NetworkMap.PacketFilter] rules that allow the steered subnet traffic.
+// receive PacketFilter rules that allow the steered subnet traffic.
 // This is a regression test: without per-node filter compilation for
-// via grants, the router's [netmap.NetworkMap.PacketFilter] would lack rules for the
+// via grants, the router's PacketFilter would lack rules for the
 // via-steered subnet destinations, causing traffic to be dropped.
 func TestGrantViaSubnetFilterRules(t *testing.T) {
 	t.Parallel()
@@ -748,7 +748,7 @@ func TestGrantViaSubnetFilterRules(t *testing.T) {
 			return false
 		})
 
-	// Critical: the router's [netmap.NetworkMap.PacketFilter] MUST contain rules with
+	// Critical: the router's PacketFilter MUST contain rules with
 	// the via-steered subnet (10.0.0.0/24) as a destination.
 	// Without this, the router drops traffic forwarded through it.
 	routerNM := routerA.Netmap()
@@ -772,123 +772,6 @@ func TestGrantViaSubnetFilterRules(t *testing.T) {
 			"without per-node filter compilation for via grants, these rules are missing")
 }
 
-// TestGrantViaSubnetBroaderDstFilterRules verifies that a via grant
-// whose destination is broader than the router's advertised subnet
-// still produces a filter rule on the router and surfaces the route in
-// the client's AllowedIPs. Reproduces juanfont/headscale#3267 at the
-// server level. Pre-fix the policy compiler required exact prefix
-// equality, so the router's PacketFilter had no rule for the steered
-// destination and traffic was silently dropped.
-func TestGrantViaSubnetBroaderDstFilterRules(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	routerUser := srv.CreateUser(t, "rt-user")
-	clientUser := srv.CreateUser(t, "cl-user")
-
-	advertised := netip.MustParsePrefix("10.33.0.0/16")
-	broaderDst := netip.MustParsePrefix("10.0.0.0/8")
-
-	changed, err := srv.State().SetPolicy([]byte(`{
-		"tagOwners": {
-			"tag:router-a": ["rt-user@"],
-			"tag:group-a":  ["cl-user@"]
-		},
-		"grants": [
-			{
-				"src": ["tag:router-a", "tag:group-a"],
-				"dst": ["tag:router-a", "tag:group-a"],
-				"ip": ["*"]
-			},
-			{
-				"src": ["tag:group-a"],
-				"dst": ["10.0.0.0/8"],
-				"ip": ["*"],
-				"via": ["tag:router-a"]
-			}
-		],
-		"autoApprovers": {
-			"routes": {
-				"10.33.0.0/16": ["tag:router-a"]
-			}
-		}
-	}`))
-	require.NoError(t, err)
-
-	if changed {
-		changes, err := srv.State().ReloadPolicy()
-		require.NoError(t, err)
-		srv.App.Change(changes...)
-	}
-
-	routerA := servertest.NewClient(t, srv, "router-a",
-		servertest.WithUser(routerUser),
-		servertest.WithTags("tag:router-a"))
-	clientA := servertest.NewClient(t, srv, "client-a",
-		servertest.WithUser(clientUser),
-		servertest.WithTags("tag:group-a"))
-
-	routerA.WaitForPeers(t, 1, 15*time.Second)
-	clientA.WaitForPeers(t, 1, 15*time.Second)
-
-	routerA.Direct().SetHostinfo(&tailcfg.Hostinfo{
-		BackendLogID: "servertest-router-a",
-		Hostname:     "router-a",
-		RoutableIPs:  []netip.Prefix{advertised},
-	})
-
-	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
-	defer cancel()
-
-	_ = routerA.Direct().SendUpdate(ctx)
-
-	routerAID := findNodeID(t, srv, "router-a")
-	_, routeChange, err := srv.State().SetApprovedRoutes(
-		routerAID, []netip.Prefix{advertised})
-	require.NoError(t, err)
-	srv.App.Change(routeChange)
-
-	// Client should see the advertised route in router's AllowedIPs.
-	clientA.WaitForCondition(t, "clientA sees advertised route via router-a",
-		15*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			for _, p := range nm.Peers {
-				hi := p.Hostinfo()
-				if hi.Valid() && hi.Hostname() == "router-a" {
-					for i := range p.AllowedIPs().Len() {
-						if p.AllowedIPs().At(i) == advertised {
-							return true
-						}
-					}
-				}
-			}
-
-			return false
-		})
-
-	// Router's PacketFilter must contain the broader grant dst as a
-	// destination — that is what Tailscale SaaS emits for via grants.
-	routerNM := routerA.Netmap()
-	require.NotNil(t, routerNM)
-	require.NotNil(t, routerNM.PacketFilter,
-		"router PacketFilter should not be nil")
-
-	var foundBroaderDst bool
-
-	for _, m := range routerNM.PacketFilter {
-		for _, dst := range m.Dsts {
-			dstPrefix := netip.PrefixFrom(dst.Net.Addr(), dst.Net.Bits())
-			if dstPrefix == broaderDst {
-				foundBroaderDst = true
-			}
-		}
-	}
-
-	assert.True(t, foundBroaderDst,
-		"router PacketFilter should contain destination rules for the broader grant dst 10.0.0.0/8; "+
-			"the via gate requires advertised-route overlap, and the emitted prefix is the dst")
-}
-
 // TestGrantViaExitNodeNoFilterRules verifies wire-format SaaS compat:
 // the exit node's PacketFilter must not contain literal 0.0.0.0/0 or
 // ::/0 destinations. Internally, autogroup:internet via grants emit a
@@ -1101,7 +984,7 @@ func hasCapMatches(matches []filtertype.Match) bool {
 	return false
 }
 
-// hasDstRules returns true if any [filtertype.Match] in the slice contains a
+// hasDstRules returns true if any Match in the slice contains a
 // non-empty Dsts list.
 func hasDstRules(matches []filtertype.Match) bool {
 	for _, m := range matches {
diff --git a/hscontrol/servertest/ha_dynamic_test.go b/hscontrol/servertest/ha_dynamic_test.go
index 475b34dca..86a223a6b 100644
--- a/hscontrol/servertest/ha_dynamic_test.go
+++ b/hscontrol/servertest/ha_dynamic_test.go
@@ -13,13 +13,13 @@ import (
 )
 
 // Dynamic HA failover scenarios, observed from a viewer client's
-// perspective. Unlike the static [TestViaGrantHACompat] golden tests,
+// perspective. Unlike the static TestViaGrantHACompat golden tests,
 // these exercise runtime transitions: a primary going unhealthy,
 // revoking its approved route, or losing its tag, and verify that
-// the viewer's [netmap.NetworkMap] converges to the new primary. These are the
+// the viewer's netmap converges to the new primary. These are the
 // end-to-end signals that static captures cannot cover.
 
-// hasPeerPrimaryRoute reports whether the viewer's current [netmap.NetworkMap]
+// hasPeerPrimaryRoute reports whether the viewer's current netmap
 // lists route as a PrimaryRoute on the peer with the given hostname.
 func hasPeerPrimaryRoute(nm *netmap.NetworkMap, peerHost string, route netip.Prefix) bool {
 	if nm == nil {
@@ -43,7 +43,7 @@ func hasPeerPrimaryRoute(nm *netmap.NetworkMap, peerHost string, route netip.Pre
 }
 
 // TestHAFailover_ViewerSeesPrimaryFlip verifies that when an HA
-// primary is marked unhealthy, the viewer's [netmap.NetworkMap] flips the route's
+// primary is marked unhealthy, the viewer's netmap flips the route's
 // primary assignment from the old primary to the standby.
 func TestHAFailover_ViewerSeesPrimaryFlip(t *testing.T) {
 	t.Parallel()
@@ -72,7 +72,7 @@ func TestHAFailover_ViewerSeesPrimaryFlip(t *testing.T) {
 			return hasPeerPrimaryRoute(nm, "dyn-flip-r1", route)
 		})
 
-	changed := srv.State().SetNodeHealth(id1, false)
+	changed := srv.State().SetNodeUnhealthy(id1, true)
 	require.True(t, changed, "marking primary unhealthy should change primaries")
 
 	srv.App.Change(change.PolicyChange())
@@ -90,7 +90,7 @@ func TestHAFailover_ViewerSeesPrimaryFlip(t *testing.T) {
 }
 
 // TestHAFailover_ViewerSeesRouteRevoke verifies that when the primary
-// revokes its approved route, the viewer's [netmap.NetworkMap] re-elects the
+// revokes its approved route, the viewer's netmap re-elects the
 // standby and the old primary no longer advertises the route.
 func TestHAFailover_ViewerSeesRouteRevoke(t *testing.T) {
 	t.Parallel()
diff --git a/hscontrol/servertest/ha_health_test.go b/hscontrol/servertest/ha_health_test.go
index c1904724b..b09ed7d38 100644
--- a/hscontrol/servertest/ha_health_test.go
+++ b/hscontrol/servertest/ha_health_test.go
@@ -15,7 +15,7 @@ import (
 	"tailscale.com/tailcfg"
 )
 
-// advertiseAndApproveRoute sets [tailcfg.Hostinfo.RoutableIPs] on a client and approves
+// advertiseAndApproveRoute sets RoutableIPs on a client and approves
 // the route on the server. Returns the node ID.
 func advertiseAndApproveRoute(
 	t *testing.T,
@@ -87,7 +87,7 @@ func TestHAHealthProbe_HealthyNodes(t *testing.T) {
 }
 
 // TestHAHealthProbe_UnhealthyFailover verifies that marking a primary
-// node unhealthy via the [state.State.SetNodeUnhealthy] API triggers failover to the
+// node unhealthy via the PrimaryRoutes API triggers failover to the
 // standby.
 func TestHAHealthProbe_UnhealthyFailover(t *testing.T) {
 	t.Parallel()
@@ -111,7 +111,7 @@ func TestHAHealthProbe_UnhealthyFailover(t *testing.T) {
 	require.Contains(t, primaries, route, "node 1 should be primary initially")
 
 	// Mark node 1 unhealthy — should failover to node 2.
-	changed := srv.State().SetNodeHealth(nodeID1, false)
+	changed := srv.State().SetNodeUnhealthy(nodeID1, true)
 	assert.True(t, changed, "marking primary unhealthy should change primaries")
 
 	primaries2 := srv.State().GetNodePrimaryRoutes(nodeID2)
@@ -141,12 +141,12 @@ func TestHAHealthProbe_RecoveryNoFlap(t *testing.T) {
 	nodeID2 := advertiseAndApproveRoute(t, srv, c2, route)
 
 	// Failover: node 1 → node 2.
-	srv.State().SetNodeHealth(nodeID1, false)
+	srv.State().SetNodeUnhealthy(nodeID1, true)
 	primaries := srv.State().GetNodePrimaryRoutes(nodeID2)
 	require.Contains(t, primaries, route, "node 2 should be primary")
 
 	// Recovery: node 1 healthy again. Node 2 should STAY primary.
-	changed := srv.State().SetNodeHealth(nodeID1, true)
+	changed := srv.State().SetNodeUnhealthy(nodeID1, false)
 	assert.False(t, changed, "recovery should not change primaries (no flap)")
 
 	primaries = srv.State().GetNodePrimaryRoutes(nodeID2)
@@ -173,10 +173,10 @@ func TestHAHealthProbe_ConnectClearsUnhealthy(t *testing.T) {
 	advertiseAndApproveRoute(t, srv, c2, route)
 
 	// Mark unhealthy.
-	srv.State().SetNodeHealth(nodeID1, false)
+	srv.State().SetNodeUnhealthy(nodeID1, true)
 	assert.False(t, srv.State().IsNodeHealthy(nodeID1))
 
-	// Reconnect clears unhealthy via [state.State.Connect] → [state.State.ClearUnhealthy].
+	// Reconnect clears unhealthy via State.Connect → ClearUnhealthy.
 	c1.Disconnect(t)
 	c1.Reconnect(t)
 
@@ -190,7 +190,7 @@ func TestHAHealthProbe_ConnectClearsUnhealthy(t *testing.T) {
 // that clearing a node's approved routes also clears any stale
 // Unhealthy bit, mirroring the legacy routes.SetRoutes(empty)
 // auto-clear. Without this, a probe timeout that lands just before
-// [state.State.SetApprovedRoutes] would surface as a stale unhealthy node forever.
+// SetApprovedRoutes would surface as a stale unhealthy node forever.
 func TestHAHealthProbe_SetApprovedRoutesEmptyClearsUnhealthy(t *testing.T) {
 	t.Parallel()
 
@@ -208,7 +208,7 @@ func TestHAHealthProbe_SetApprovedRoutesEmptyClearsUnhealthy(t *testing.T) {
 	nodeID1 := advertiseAndApproveRoute(t, srv, c1, route)
 	advertiseAndApproveRoute(t, srv, c2, route)
 
-	srv.State().SetNodeHealth(nodeID1, false)
+	srv.State().SetNodeUnhealthy(nodeID1, true)
 	require.False(t, srv.State().IsNodeHealthy(nodeID1))
 
 	_, _, err := srv.State().SetApprovedRoutes(nodeID1, nil)
@@ -223,7 +223,7 @@ func TestHAHealthProbe_SetApprovedRoutesEmptyClearsUnhealthy(t *testing.T) {
 // HA candidate; carrying the bit forward leaks into DebugRoutes.
 //
 // The poll handler waits a 10s grace period before calling
-// [state.State.Disconnect], so the assertion is wrapped in Eventually with a
+// state.Disconnect, so the assertion is wrapped in Eventually with a
 // generous timeout.
 func TestHAHealthProbe_DisconnectClearsUnhealthy(t *testing.T) {
 	t.Parallel()
@@ -242,7 +242,7 @@ func TestHAHealthProbe_DisconnectClearsUnhealthy(t *testing.T) {
 	nodeID1 := advertiseAndApproveRoute(t, srv, c1, route)
 	advertiseAndApproveRoute(t, srv, c2, route)
 
-	srv.State().SetNodeHealth(nodeID1, false)
+	srv.State().SetNodeUnhealthy(nodeID1, true)
 	require.False(t, srv.State().IsNodeHealthy(nodeID1))
 
 	c1.Disconnect(t)
@@ -255,7 +255,7 @@ func TestHAHealthProbe_DisconnectClearsUnhealthy(t *testing.T) {
 
 // TestHAHealthProbe_SetUnhealthyNoRoutesIsNoOp verifies the
 // defensive guard for the still-online-but-no-routes case: a probe
-// that fires after [state.State.SetApprovedRoutes](empty) should not be allowed
+// that fires after SetApprovedRoutes(empty) should not be allowed
 // to install a stale Unhealthy bit either.
 func TestHAHealthProbe_SetUnhealthyNoRoutesIsNoOp(t *testing.T) {
 	t.Parallel()
@@ -277,81 +277,10 @@ func TestHAHealthProbe_SetUnhealthyNoRoutesIsNoOp(t *testing.T) {
 	_, _, err := srv.State().SetApprovedRoutes(nodeID1, nil)
 	require.NoError(t, err)
 
-	srv.State().SetNodeHealth(nodeID1, false)
+	srv.State().SetNodeUnhealthy(nodeID1, true)
 
 	assert.True(t, srv.State().IsNodeHealthy(nodeID1),
-		"SetNodeHealth(false) on node with no approved routes should be a no-op")
-}
-
-// TestHAHealthProbe_ReconnectDuringProbeKeepsHealthy reproduces the
-// race that surfaced as a TestHASubnetRouterFailover flake: a probe
-// dispatched against the previous poll session sees the timeout fire
-// while the client is briefly disconnected. With the session guard in
-// [HAHealthProber.ProbeOnce], the timeout path observes the reconnect
-// and bails out instead of installing a spurious Unhealthy bit.
-//
-// Without the guard, the primary fails over to the standby and the
-// anti-flap election preserves that choice even after the original
-// primary is fully back online.
-func TestHAHealthProbe_ReconnectDuringProbeKeepsHealthy(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	user := srv.CreateUser(t, "ha-probe-reconnect")
-
-	route := netip.MustParsePrefix("10.102.0.0/24")
-
-	c1 := servertest.NewClient(t, srv, "ha-pr-r1", servertest.WithUser(user))
-	c2 := servertest.NewClient(t, srv, "ha-pr-r2", servertest.WithUser(user))
-
-	c1.WaitForPeers(t, 1, 10*time.Second)
-	c2.WaitForPeers(t, 1, 10*time.Second)
-
-	nodeID1 := advertiseAndApproveRoute(t, srv, c1, route)
-	advertiseAndApproveRoute(t, srv, c2, route)
-
-	// Node 1 is primary (lowest ID, healthy).
-	require.Contains(t,
-		srv.State().GetNodePrimaryRoutes(nodeID1), route,
-		"node 1 should be primary initially")
-
-	prober := state.NewHAHealthProber(
-		srv.State(),
-		types.HARouteConfig{
-			ProbeInterval: 30 * time.Second,
-			ProbeTimeout:  2 * time.Second,
-		},
-		srv.URL,
-		srv.App.MapBatcher().IsConnected,
-	)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 15*time.Second)
-	defer cancel()
-
-	// TestClient does not implement ping responses, so every probe
-	// times out. We exploit that to observe the timeout path under a
-	// reconnect race: kick a probe in a goroutine, bounce the
-	// primary's poll session, and confirm the prober drops the stale
-	// timeout instead of marking the node unhealthy.
-	done := make(chan struct{})
-
-	go func() {
-		defer close(done)
-
-		prober.ProbeOnce(ctx, srv.App.Change)
-	}()
-
-	c1.Disconnect(t)
-	c1.Reconnect(t)
-	c1.WaitForPeers(t, 1, 10*time.Second)
-
-	<-done
-
-	assert.True(t, srv.State().IsNodeHealthy(nodeID1),
-		"reconnect during probe must not flip node unhealthy")
-	assert.Contains(t,
-		srv.State().GetNodePrimaryRoutes(nodeID1), route,
-		"node 1 should remain primary after stale-probe timeout")
+		"SetNodeUnhealthy on node with no approved routes should be a no-op")
 }
 
 // TestHAHealthProbe_NoHARoutes verifies that the prober is a no-op
diff --git a/hscontrol/servertest/ha_property_test.go b/hscontrol/servertest/ha_property_test.go
deleted file mode 100644
index 565e36af2..000000000
--- a/hscontrol/servertest/ha_property_test.go
+++ /dev/null
@@ -1,642 +0,0 @@
-package servertest_test
-
-import (
-	"context"
-	"fmt"
-	"net/netip"
-	"slices"
-	"sync"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/servertest"
-	"github.com/juanfont/headscale/hscontrol/state"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-	"github.com/stretchr/testify/require"
-	"pgregory.net/rapid"
-	"tailscale.com/tailcfg"
-)
-
-// haPropClient bundles a TestClient with the node ID and route it
-// advertises. The property test mutates connection state through
-// these handles and inspects the resulting NodeStore snapshot.
-type haPropClient struct {
-	tc    *servertest.TestClient
-	id    types.NodeID
-	name  string
-	route netip.Prefix
-	// connected mirrors the prober's view (mapBatcher.IsConnected).
-	// Tracked alongside the runtime read so anti-flap invariants can
-	// reason about the candidate set the prober actually evaluates.
-	connected bool
-	// freshSinceReconnect is true between a successful Reconnect and
-	// the prober's second observation of the new SessionEpoch — the
-	// window in which the session-stability guard must defer instead
-	// of installing an Unhealthy bit. Reset by the first ProberTick
-	// that runs against the new session; cleared on Disconnect.
-	freshSinceReconnect bool
-}
-
-// checkTB embeds *testing.T to satisfy testing.TB (which requires an
-// unexported method only the testing package can provide) while
-// collecting Cleanup functions in a local LIFO stack. runCleanups()
-// runs them when the rapid check body exits so each check's resources
-// are released immediately, not at the outer test's teardown — which
-// would otherwise accumulate hundreds of servers and tens of thousands
-// of goroutines across a 300-check run.
-//
-// Fatal/Fatalf still call through to *testing.T and fail the outer
-// test. Inside a rapid check use rt.Fatalf instead so rapid can shrink
-// the failing op sequence.
-type checkTB struct {
-	*testing.T
-
-	mu       sync.Mutex
-	cleanups []func()
-}
-
-func (c *checkTB) Cleanup(fn func()) {
-	c.mu.Lock()
-	defer c.mu.Unlock()
-
-	c.cleanups = append(c.cleanups, fn)
-}
-
-func (c *checkTB) runCleanups() {
-	c.mu.Lock()
-	cs := c.cleanups
-	c.cleanups = nil
-	c.mu.Unlock()
-
-	for _, v := range slices.Backward(cs) {
-		v()
-	}
-}
-
-// haReadvertise pushes hostinfo + approved routes again. Called after
-// every Reconnect so the new poll session re-publishes the prefix. The
-// controlclient.Direct carries the SetHostinfo state across
-// re-registration, but pushing again removes a race where the test
-// inspects PrimaryRoutes before the initial map of the new session
-// landed.
-func haReadvertise(
-	tb testing.TB,
-	srv *servertest.TestServer,
-	c *haPropClient,
-) {
-	tb.Helper()
-
-	c.tc.Direct().SetHostinfo(&tailcfg.Hostinfo{
-		BackendLogID: "servertest-" + c.name,
-		Hostname:     c.name,
-		RoutableIPs:  []netip.Prefix{c.route},
-	})
-
-	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
-	defer cancel()
-
-	_ = c.tc.Direct().SendUpdate(ctx)
-
-	_, ch, err := srv.State().SetApprovedRoutes(c.id, []netip.Prefix{c.route})
-	require.NoError(tb, err)
-	srv.App.Change(ch)
-}
-
-// readPrimaries builds the prefix→owner map by inverting
-// State.GetNodePrimaryRoutes for every client in the fleet. The State
-// API does not expose the raw snapshot map directly; iterating the
-// known clients reconstructs it without poking at NodeStore internals.
-// Any inconsistency between routes and isPrimaryRoute surfaces as a
-// duplicate ownership claim and trips invariant 4.
-func readPrimaries(
-	rt *rapid.T,
-	srv *servertest.TestServer,
-	clients []*haPropClient,
-) map[netip.Prefix]types.NodeID {
-	rt.Helper()
-
-	out := make(map[netip.Prefix]types.NodeID)
-
-	for _, c := range clients {
-		for _, p := range srv.State().GetNodePrimaryRoutes(c.id) {
-			if prev, ok := out[p]; ok {
-				rt.Fatalf(
-					"prefix %s has two owners: %d and %d "+
-						"(GetNodePrimaryRoutes claimed both)",
-					p, prev, c.id,
-				)
-			}
-
-			out[p] = c.id
-		}
-	}
-
-	return out
-}
-
-// checkHAInvariants walks every prefix → primary mapping in the live
-// snapshot and asserts the six properties documented in the test
-// header. prevPrimaries is the snapshot taken before the just-applied
-// op so anti-flap can compare moves.
-//
-//nolint:gocyclo // invariant checker over several independent properties
-func checkHAInvariants(
-	rt *rapid.T,
-	srv *servertest.TestServer,
-	clients []*haPropClient,
-	prevPrimaries map[netip.Prefix]types.NodeID,
-	skipAntiFlap bool,
-) {
-	rt.Helper()
-
-	st := srv.State()
-	primaries := readPrimaries(rt, srv, clients)
-
-	// Collect every prefix advertised by the fleet so the all-down
-	// honesty check can iterate them, even prefixes with zero current
-	// advertisers.
-	prefixSet := make(map[netip.Prefix]struct{})
-	for _, c := range clients {
-		prefixSet[c.route] = struct{}{}
-	}
-
-	// Build the candidate set per prefix from the NodeStore: a node is a
-	// candidate when it is IsOnline=true and AllApprovedRoutes contains
-	// the prefix. This is exactly the input to electPrimaryRoutes; the
-	// prober's mapBatcher.IsConnected view is a separate gate the
-	// prober consults before dispatching a probe, not part of the
-	// election input.
-	advertisersByPrefix := make(map[netip.Prefix][]types.NodeID)
-
-	for _, c := range clients {
-		nv, ok := st.GetNodeByID(c.id)
-		if !ok || !nv.Valid() {
-			continue
-		}
-
-		online, known := nv.IsOnline().GetOk()
-		if !known || !online {
-			continue
-		}
-
-		for _, p := range nv.AllApprovedRoutes() {
-			if p == c.route {
-				advertisersByPrefix[p] = append(advertisersByPrefix[p], c.id)
-			}
-		}
-	}
-
-	// Invariant 4: isPrimaryRoute must be consistent with routes.
-	for prefix, owner := range primaries {
-		got := srv.State().GetNodePrimaryRoutes(owner)
-		if !slices.Contains(got, prefix) {
-			rt.Fatalf(
-				"prefix %s primary=%d but GetNodePrimaryRoutes(%d)=%v missing it",
-				prefix, owner, owner, got,
-			)
-		}
-	}
-
-	for prefix, owner := range primaries {
-		nv, ok := st.GetNodeByID(owner)
-		if !ok || !nv.Valid() {
-			rt.Fatalf(
-				"prefix %s primary %d missing from NodeStore",
-				prefix, owner,
-			)
-		}
-
-		// Invariant 1: primary IsOnline in the NodeStore view.
-		// state.Disconnect's 10s grace can leave a recently-disconnected
-		// node with IsOnline=true; the structural rule still requires
-		// the bit before the snapshot may keep it as primary.
-		online, known := nv.IsOnline().GetOk()
-		if !known || !online {
-			rt.Fatalf(
-				"prefix %s primary %d is not online (IsOnline=%v known=%v)",
-				prefix, owner, online, known,
-			)
-		}
-
-		// Invariant 2: primary advertises the prefix and is among the
-		// snapshot's candidate set.
-		approved := nv.AllApprovedRoutes()
-		if !slices.Contains(approved, prefix) {
-			rt.Fatalf(
-				"prefix %s primary %d does not advertise it (approved=%v)",
-				prefix, owner, approved,
-			)
-		}
-
-		if !slices.Contains(advertisersByPrefix[prefix], owner) {
-			rt.Fatalf(
-				"prefix %s primary %d not in advertiser set %v",
-				prefix, owner, advertisersByPrefix[prefix],
-			)
-		}
-
-		// Invariant 5 (anti-flap): if the previous snapshot already had
-		// a primary for this prefix AND that primary is still a healthy,
-		// online, advertising candidate, the new snapshot must keep it.
-		// Skipped on settle reads where we re-check without an op in
-		// between — the prober may run in a deferred batch and the
-		// election may legitimately move once on its own timeline.
-		if !skipAntiFlap {
-			if prev, hadPrev := prevPrimaries[prefix]; hadPrev && prev != owner {
-				prevNV, exists := st.GetNodeByID(prev)
-				if exists && prevNV.Valid() {
-					prevOnline, prevKnown := prevNV.IsOnline().GetOk()
-					prevApproved := prevNV.AllApprovedRoutes()
-
-					stillCandidate := prevKnown && prevOnline &&
-						slices.Contains(prevApproved, prefix)
-					stillHealthy := st.IsNodeHealthy(prev)
-
-					if stillCandidate && stillHealthy {
-						rt.Fatalf(
-							"prefix %s flapped primary %d -> %d "+
-								"while previous primary was still a healthy candidate",
-							prefix, prev, owner,
-						)
-					}
-				}
-			}
-		}
-	}
-
-	// Invariant 6 (all-down honesty): if every candidate of a prefix is
-	// either offline OR unhealthy, the snapshot must either drop the
-	// primary OR keep one that is still a candidate from the same set
-	// (the all-unhealthy preserve-prev rule). A primary pointed at a
-	// non-candidate after every candidate has gone dark would point
-	// peers at a node the prober has already declared unreachable.
-	for prefix := range prefixSet {
-		owner, hasPrimary := primaries[prefix]
-		if !hasPrimary {
-			continue
-		}
-
-		candidates := advertisersByPrefix[prefix]
-
-		// Empty candidates with a primary present trips invariant 2
-		// above; reaching this branch with len(candidates) == 0 means
-		// the snapshot is internally inconsistent.
-		if len(candidates) == 0 {
-			rt.Fatalf(
-				"prefix %s has primary %d but no advertiser in the snapshot",
-				prefix, owner,
-			)
-		}
-
-		anyHealthy := slices.ContainsFunc(candidates, st.IsNodeHealthy)
-
-		// Healthy preference: a primary should not be unhealthy when a
-		// healthy candidate exists. Asserting this through the real
-		// prober → State → NodeStore seam catches any divergence the
-		// unit-level model would miss.
-		if anyHealthy && !st.IsNodeHealthy(owner) {
-			rt.Fatalf(
-				"prefix %s primary %d unhealthy but %v has a healthy candidate",
-				prefix, owner, candidates,
-			)
-		}
-
-		// All-unhealthy guards: with every candidate unhealthy, the
-		// election has exactly two correct choices:
-		//   - preserve prev primary when it is still a candidate
-		//   - leave the prefix unmapped (no candidate fallback)
-		//
-		// Any other outcome points peers at a node already declared
-		// unreachable.
-		if !anyHealthy {
-			prevOwner, hadPrev := prevPrimaries[prefix]
-			prevStillCandidate := hadPrev &&
-				slices.Contains(candidates, prevOwner)
-
-			if prevStillCandidate && owner != prevOwner {
-				rt.Fatalf(
-					"prefix %s all-unhealthy election picked %d, "+
-						"but prev primary %d is still a candidate — "+
-						"preserve-prev rule violated",
-					prefix, owner, prevOwner,
-				)
-			}
-
-			if !prevStillCandidate && (!hadPrev || owner != prevOwner) {
-				rt.Fatalf(
-					"prefix %s all-unhealthy fallback elected %d "+
-						"but prev primary %v is gone; election "+
-						"must leave the prefix unmapped",
-					prefix, owner, prevOwner,
-				)
-			}
-		}
-	}
-}
-
-// snapshotPrimaries returns a defensive copy of the live primary
-// route map so the caller can compare to a later snapshot without
-// aliasing. Inverts GetNodePrimaryRoutes since State does not expose
-// the raw snapshot map.
-func snapshotPrimaries(
-	rt *rapid.T,
-	srv *servertest.TestServer,
-	clients []*haPropClient,
-) map[netip.Prefix]types.NodeID {
-	return readPrimaries(rt, srv, clients)
-}
-
-// TestHAProberProperty drives a real Headscale TestServer with a small
-// fleet of HA-route-advertising clients through a randomised sequence
-// of connect / disconnect / reconnect / prober-tick operations and
-// asserts that the live PrimaryRoutes() snapshot honours every HA
-// invariant after each step.
-//
-// Coverage versus the unit-level NodeStore property test:
-//
-//   - This test exercises the FULL seam: real prober → real PingNode
-//     dispatch → real responseCh handling → State.BatchSetNodeHealth
-//     → NodeStore election → mapper batcher updates. The unit test
-//     bypasses the prober entirely.
-//
-//   - Disconnect/Reconnect goes through the real poll-session
-//     lifecycle: mapBatcher.RemoveNode flips IsConnected, the 10s
-//     grace period defers state.Disconnect, and state.Connect bumps
-//     SessionEpoch on rejoin. The prober defers fresh-session probes
-//     so a reconnect mid-cycle does not install a stale Unhealthy.
-//
-//   - The batched BatchSetNodeHealth is observable through the
-//     all-unhealthy preserve-prev invariant: per-call writes would
-//     publish an intermediate "one unhealthy, one healthy" snapshot,
-//     leaving primary on a non-prev node after both flips land.
-//
-//   - The all-unhealthy fallback that leaves prefixes unmapped is
-//     covered by the honesty invariant: with every candidate
-//     unhealthy AND prev gone from the candidate set, the prefix
-//     must stay unmapped instead of pinned to any candidate.
-//
-// Caveat: TestClient is a real controlclient.Direct that responds to
-// PingRequest over Noise, so the timeout path of the prober rarely
-// fires. The session-stability guard is asserted
-// (freshSinceReconnect tracking + healthy assertion after the first
-// probe of a new session) but the tight race —
-// probe-against-old-session-while-reconnecting — needs a dedicated
-// reconnect test to trigger deterministically.
-//
-// Ops drawn by rapid:
-//
-//   - ClientDisconnect(i)     — cancel poll session, flips IsConnected
-//   - ClientReconnect(i)      — re-register and start new poll session
-//   - ProberTick()            — invoke prober.ProbeOnce synchronously
-//   - WaitForSnapshot()       — re-check invariants without a new op
-//
-// Initial connect happens once during setup so the fleet always has
-// the same baseline. Drawing ClientConnect in the op loop would
-// require setting up auth keys and waiting for peer convergence
-// inside the rapid body, which would dominate the per-check budget
-// for little extra coverage.
-func TestHAProberProperty(t *testing.T) {
-	// Per-check wall-cost is ~15-25s (real Noise handshake on each
-	// reconnect), so the default 100-check rapid budget blows past
-	// the 10-minute go test timeout used by the Tests workflow.
-	// Skip on CI by default so the everyday sweep stays fast; runs
-	// locally so seed shrinking works without an opt-in flag.
-	if util.IsCI() {
-		t.Skip("skipping HA prober property test in CI; runs locally")
-	}
-
-	if testing.Short() {
-		t.Skip("skipping property test in short mode")
-	}
-
-	rapid.Check(t, func(rt *rapid.T) {
-		// Fresh server per rapid check: rapid shrinks by replaying ops
-		// from a clean state, so we cannot reuse a server across runs.
-		// Cleanups registered against checkTB run at the end of THIS
-		// check so server resources are released before the next one
-		// starts.
-		tb := &checkTB{T: t}
-		defer tb.runCleanups()
-
-		srv := servertest.NewServer(tb)
-		user := srv.CreateUser(tb, "ha-prop")
-
-		// Three HA candidates is the smallest set that exercises every
-		// election shape (primary, secondary, tertiary) while keeping
-		// per-check setup under ~10 seconds. Higher numbers blow out
-		// the wall-clock budget without adding new failure modes — the
-		// dual-disconnect and reconnect-during-probe regressions all
-		// reproduce at N=3.
-		const numClients = 3
-
-		route := netip.MustParsePrefix("10.200.0.0/24")
-
-		clients := make([]*haPropClient, 0, numClients)
-
-		for i := range numClients {
-			name := fmt.Sprintf("ha-prop-r%d", i+1)
-			tc := servertest.NewClient(tb, srv, name, servertest.WithUser(user))
-
-			// Wait for at least the initial netmap so the registration
-			// committed and findNodeID is guaranteed to see the node.
-			tc.WaitForUpdate(tb, 10*time.Second)
-
-			id := findNodeID(tb, srv, name)
-
-			c := &haPropClient{
-				tc:        tc,
-				id:        id,
-				name:      name,
-				route:     route,
-				connected: true,
-			}
-			clients = append(clients, c)
-
-			haReadvertise(tb, srv, c)
-		}
-
-		// Prober uses a short timeout so each ProberTick op drains
-		// the cycle in well under a second. TestClient is backed by a
-		// real controlclient.Direct that DOES respond to PingRequest
-		// over Noise (see TestPingNode), so most probes record a
-		// successful response. The probe-timeout path still fires for
-		// nodes whose poll session is mid-bounce — exactly the seam
-		// the session-stability guard was built for — but timing it
-		// reliably from outside the prober is hard; the property test
-		// focuses on the steady-state election invariants instead.
-		prober := state.NewHAHealthProber(
-			srv.State(),
-			types.HARouteConfig{
-				ProbeInterval: 30 * time.Second,
-				ProbeTimeout:  50 * time.Millisecond,
-			},
-			srv.URL,
-			srv.App.MapBatcher().IsConnected,
-		)
-
-		// Sanity: every client should now be an advertiser of route,
-		// and the snapshot must have an HA primary already.
-		require.Eventually(tb, func() bool {
-			for _, c := range clients {
-				if slices.Contains(
-					srv.State().GetNodePrimaryRoutes(c.id),
-					route,
-				) {
-					return true
-				}
-			}
-
-			return false
-		}, 10*time.Second, 50*time.Millisecond,
-			"setup: route should have a primary before drawing ops")
-
-		idxGen := rapid.IntRange(0, numClients-1)
-		opGen := rapid.IntRange(0, 3)
-		opCount := rapid.IntRange(15, 35).Draw(rt, "opCount")
-
-		for step := range opCount {
-			op := opGen.Draw(rt, fmt.Sprintf("op_%d", step))
-
-			prev := snapshotPrimaries(rt, srv, clients)
-
-			// Anti-flap is meaningful only across operations that do
-			// not themselves mutate the candidate set or per-node
-			// health. Connect/Disconnect both mutate IsOnline (via
-			// state.Connect, or via the asynchronous grace-period
-			// state.Disconnect), and the resulting election move is
-			// expected, not a flap. ProbeOnce, by contrast, must keep
-			// the primary on the previous owner whenever that owner
-			// is still a candidate — this is what the reconnect-
-			// during-probe and dual-disconnect guards preserve.
-			isProberOp := op == 2
-
-			switch op {
-			case 0: // ClientDisconnect
-				idx := idxGen.Draw(rt, fmt.Sprintf("disc_idx_%d", step))
-				c := clients[idx]
-
-				// Refuse to disconnect the last connected node. The
-				// prober's HANodes gate requires ≥2 online candidates
-				// per prefix; with only one node left, no probe runs
-				// and the prober-driven invariants (anti-flap,
-				// reconnect-defer) become unfalsifiable. Keeping at
-				// least two candidates is enough to exercise every
-				// failure shape we care about.
-				connectedCount := 0
-
-				for _, cc := range clients {
-					if cc.connected {
-						connectedCount++
-					}
-				}
-
-				if c.connected && connectedCount > 2 {
-					c.tc.Disconnect(tb)
-					c.connected = false
-					c.freshSinceReconnect = false
-				}
-
-			case 1: // ClientReconnect
-				idx := idxGen.Draw(rt, fmt.Sprintf("rec_idx_%d", step))
-				c := clients[idx]
-
-				if !c.connected {
-					c.tc.Reconnect(tb)
-
-					// Wait for the new poll session to register with
-					// the batcher so the prober's IsConnected gate
-					// reflects the reconnect on the next ProberTick.
-					// WaitForUpdate adds ~1s per call; polling
-					// IsConnected directly converges in <100ms.
-					require.Eventually(
-						tb,
-						func() bool {
-							return srv.App.MapBatcher().
-								IsConnected(c.id)
-						},
-						10*time.Second,
-						5*time.Millisecond,
-						"reconnect: batcher should see %s online",
-						c.name,
-					)
-
-					c.connected = true
-					c.freshSinceReconnect = true
-
-					// Re-push hostinfo so the new session's initial
-					// map sets RoutableIPs as expected. SetApprovedRoutes
-					// is idempotent on the same set.
-					haReadvertise(tb, srv, c)
-				}
-
-			case 2: // ProberTick — drive one synchronous probe cycle.
-				// Capture freshness BEFORE running the probe; the
-				// prober itself flips a node from "fresh" to "stable"
-				// when it sees the same SessionEpoch twice, and the
-				// "fresh sessions must defer" rule is expressed
-				// against the pre-probe state.
-				freshThisCycle := make(map[types.NodeID]bool, len(clients))
-				for _, c := range clients {
-					freshThisCycle[c.id] = c.freshSinceReconnect
-				}
-
-				ctx, cancel := context.WithTimeout(
-					context.Background(),
-					5*time.Second,
-				)
-
-				// Use App.Change as the dispatcher — the prober batches
-				// its results through BatchSetNodeHealth and emits a
-				// single PolicyChange. The real wiring is what we want
-				// to test.
-				prober.ProbeOnce(ctx, srv.App.Change)
-				cancel()
-
-				// Session-stability rule: the first probe against a
-				// freshly-reconnected node must defer instead of
-				// installing an Unhealthy bit. In this servertest the
-				// TestClient is backed by a real controlclient.Direct
-				// that DOES respond to PingRequests over Noise, so
-				// the tight timing window — probe dispatched against
-				// an old session whose ping never returns — rarely
-				// opens. The rule still runs as a sanity gate: if it
-				// ever does fire, the freshly-reconnected node will
-				// surface as unhealthy after a single probe, and the
-				// test catches it.
-				for _, c := range clients {
-					if !freshThisCycle[c.id] || !c.connected {
-						continue
-					}
-
-					if !srv.State().IsNodeHealthy(c.id) {
-						rt.Fatalf(
-							"node %d (%s) was marked unhealthy by "+
-								"the first probe after reconnect; "+
-								"session-stability guard should have "+
-								"deferred",
-							c.id, c.name,
-						)
-					}
-
-					c.freshSinceReconnect = false
-				}
-
-			case 3: // WaitForSnapshot — re-check invariants without
-				// applying a new op. NodeStore writes are synchronous
-				// inside UpdateNode/UpdateNodes, so there is nothing
-				// to wait on; the no-op step still verifies that two
-				// consecutive reads (one snapshot, the same snapshot)
-				// stay consistent. This is invariant 3: stable
-				// conditions = stable primary. We skip the anti-flap
-				// comparison so a primary that legitimately changed
-				// in the prior op is not re-flagged here.
-				checkHAInvariants(rt, srv, clients, prev, true)
-
-				continue
-			}
-
-			checkHAInvariants(rt, srv, clients, prev, !isProberOp)
-		}
-	})
-}
diff --git a/hscontrol/servertest/harness.go b/hscontrol/servertest/harness.go
index 7461b1cb7..17706cbb5 100644
--- a/hscontrol/servertest/harness.go
+++ b/hscontrol/servertest/harness.go
@@ -8,7 +8,7 @@ import (
 	"github.com/juanfont/headscale/hscontrol/types"
 )
 
-// TestHarness orchestrates a [TestServer] with multiple [TestClient] instances,
+// TestHarness orchestrates a TestServer with multiple TestClients,
 // providing a convenient setup for multi-node control plane tests.
 type TestHarness struct {
 	Server  *TestServer
@@ -18,7 +18,7 @@ type TestHarness struct {
 	defaultUser *types.User
 }
 
-// HarnessOption configures a [TestHarness].
+// HarnessOption configures a TestHarness.
 type HarnessOption func(*harnessConfig)
 
 type harnessConfig struct {
@@ -33,24 +33,24 @@ func defaultHarnessConfig() *harnessConfig {
 	}
 }
 
-// WithServerOptions passes [ServerOption] values through to the underlying
-// [TestServer].
+// WithServerOptions passes ServerOptions through to the underlying
+// TestServer.
 func WithServerOptions(opts ...ServerOption) HarnessOption {
 	return func(c *harnessConfig) { c.serverOpts = append(c.serverOpts, opts...) }
 }
 
-// WithDefaultClientOptions applies [ClientOption] values to every client
-// created by [NewHarness].
+// WithDefaultClientOptions applies ClientOptions to every client
+// created by NewHarness.
 func WithDefaultClientOptions(opts ...ClientOption) HarnessOption {
 	return func(c *harnessConfig) { c.clientOpts = append(c.clientOpts, opts...) }
 }
 
-// WithConvergenceTimeout sets how long [TestHarness.WaitForMeshComplete] waits.
+// WithConvergenceTimeout sets how long WaitForMeshComplete waits.
 func WithConvergenceTimeout(d time.Duration) HarnessOption {
 	return func(c *harnessConfig) { c.convergenceMax = d }
 }
 
-// NewHarness creates a [TestServer] and numClients connected clients.
+// NewHarness creates a TestServer and numClients connected clients.
 // All clients share a default user and are registered with reusable
 // pre-auth keys. The harness waits for all clients to form a
 // complete mesh before returning.
@@ -76,7 +76,8 @@ func NewHarness(tb testing.TB, numClients int, opts ...HarnessOption) *TestHarne
 	for i := range numClients {
 		name := clientName(i)
 
-		c := h.newClient(tb, name, hc.clientOpts...)
+		copts := append([]ClientOption{WithUser(user)}, hc.clientOpts...)
+		c := NewClient(tb, server, name, copts...)
 		h.clients = append(h.clients, c)
 	}
 
@@ -123,22 +124,13 @@ func (h *TestHarness) AddClient(tb testing.TB, opts ...ClientOption) *TestClient
 	tb.Helper()
 
 	name := clientName(len(h.clients))
-	c := h.newClient(tb, name, opts...)
+	copts := append([]ClientOption{WithUser(h.defaultUser)}, opts...)
+	c := NewClient(tb, h.Server, name, copts...)
 	h.clients = append(h.clients, c)
 
 	return c
 }
 
-// newClient creates a [TestClient] on the harness server, prepending the
-// shared default user so caller options can override it.
-func (h *TestHarness) newClient(tb testing.TB, name string, opts ...ClientOption) *TestClient {
-	tb.Helper()
-
-	copts := append([]ClientOption{WithUser(h.defaultUser)}, opts...)
-
-	return NewClient(tb, h.Server, name, copts...)
-}
-
 // WaitForMeshComplete blocks until every connected client sees
 // (connectedCount - 1) peers.
 func (h *TestHarness) WaitForMeshComplete(tb testing.TB, timeout time.Duration) {
@@ -153,6 +145,13 @@ func (h *TestHarness) WaitForMeshComplete(tb testing.TB, timeout time.Duration)
 	}
 }
 
+// WaitForConvergence waits until all connected clients have a
+// non-nil NetworkMap and their peer counts have stabilised.
+func (h *TestHarness) WaitForConvergence(tb testing.TB, timeout time.Duration) {
+	tb.Helper()
+	h.WaitForMeshComplete(tb, timeout)
+}
+
 // ChangePolicy sets an ACL policy on the server and propagates changes
 // to all connected nodes. The policy should be a valid HuJSON policy document.
 func (h *TestHarness) ChangePolicy(tb testing.TB, policy []byte) {
diff --git a/hscontrol/servertest/issues_test.go b/hscontrol/servertest/issues_test.go
index 4b06f080f..4859f7947 100644
--- a/hscontrol/servertest/issues_test.go
+++ b/hscontrol/servertest/issues_test.go
@@ -19,14 +19,14 @@ import (
 // These tests are intentionally strict about expected behavior.
 // Failures surface real issues in the control plane.
 
-// TestIssuesMapContent tests issues with [tailcfg.MapResponse] content correctness.
+// TestIssuesMapContent tests issues with MapResponse content correctness.
 func TestIssuesMapContent(t *testing.T) {
 	t.Parallel()
 
 	// After mesh formation, all peers should have a known Online status.
-	// The Online field is set when [state.State.Connect] sends a NodeOnline [tailcfg.PeerChange]
-	// patch. The initial [tailcfg.MapResponse] (from auth handler) may have Online=nil
-	// because [state.State.Connect] hasn't run yet, so we wait for the status to propagate.
+	// The Online field is set when Connect() sends a NodeOnline PeerChange
+	// patch. The initial MapResponse (from auth handler) may have Online=nil
+	// because Connect() hasn't run yet, so we wait for the status to propagate.
 	t.Run("initial_map_should_include_peer_online_status", func(t *testing.T) {
 		t.Parallel()
 		h := servertest.NewHarness(t, 3)
@@ -55,7 +55,7 @@ func TestIssuesMapContent(t *testing.T) {
 		t.Parallel()
 		h := servertest.NewHarness(t, 2)
 
-		// The DiscoKey is sent in the first [tailcfg.MapRequest] (not the [tailcfg.RegisterRequest]),
+		// The DiscoKey is sent in the first MapRequest (not the RegisterRequest),
 		// so it may take an extra map update to propagate to peers. Wait for
 		// the condition rather than checking the initial netmap.
 		h.Client(0).WaitForCondition(t, "peer has non-zero DiscoKey",
@@ -92,7 +92,7 @@ func TestIssuesMapContent(t *testing.T) {
 		}
 	})
 
-	// Each peer should have a valid user profile in the [netmap.NetworkMap].
+	// Each peer should have a valid user profile in the netmap.
 	t.Run("all_peers_have_user_profiles", func(t *testing.T) {
 		t.Parallel()
 
@@ -174,7 +174,7 @@ func TestIssuesRoutes(t *testing.T) {
 	// Approving a route via API without the node announcing it must NOT
 	// make the route visible in AllowedIPs. Tailscale uses a strict
 	// advertise-then-approve model: routes are only distributed when the
-	// node advertises them ([tailcfg.Hostinfo.RoutableIPs]) AND they are approved.
+	// node advertises them (Hostinfo.RoutableIPs) AND they are approved.
 	// An approval without advertisement is a dormant pre-approval that
 	// activates once the node starts advertising.
 	t.Run("approved_route_without_announcement_not_distributed", func(t *testing.T) {
@@ -253,7 +253,7 @@ func TestIssuesRoutes(t *testing.T) {
 			})
 	})
 
-	// [tailcfg.Hostinfo] route advertisement should be stored on server.
+	// Hostinfo route advertisement should be stored on server.
 	t.Run("hostinfo_route_advertisement_stored_on_server", func(t *testing.T) {
 		t.Parallel()
 
@@ -491,7 +491,7 @@ func TestIssuesServerMutations(t *testing.T) {
 		assert.Len(t, c3.Peers(), 1)
 	})
 
-	// [tailcfg.Hostinfo] changes should propagate to peers.
+	// Hostinfo changes should propagate to peers.
 	t.Run("hostinfo_changes_propagate_to_peers", func(t *testing.T) {
 		t.Parallel()
 
@@ -530,11 +530,11 @@ func TestIssuesServerMutations(t *testing.T) {
 	})
 }
 
-// TestIssuesNodeStoreConsistency tests [state.NodeStore] + DB consistency.
+// TestIssuesNodeStoreConsistency tests NodeStore + DB consistency.
 func TestIssuesNodeStoreConsistency(t *testing.T) {
 	t.Parallel()
 
-	// [state.NodeStore] and DB should agree after mutations.
+	// NodeStore and DB should agree after mutations.
 	t.Run("nodestore_db_consistency_after_operations", func(t *testing.T) {
 		t.Parallel()
 
@@ -563,13 +563,13 @@ func TestIssuesNodeStoreConsistency(t *testing.T) {
 		require.NoError(t, err, "node should be in database")
 
 		nsRoutes := nsView.ApprovedRoutes().AsSlice()
-		dbRoutes := dbNode.ApprovedRoutes.List()
+		dbRoutes := dbNode.ApprovedRoutes
 
 		assert.Equal(t, nsRoutes, dbRoutes,
 			"NodeStore and DB should agree on approved routes")
 	})
 
-	// After rapid reconnect, [state.NodeStore] should reflect correct state.
+	// After rapid reconnect, NodeStore should reflect correct state.
 	t.Run("nodestore_correct_after_rapid_reconnect", func(t *testing.T) {
 		t.Parallel()
 
@@ -673,7 +673,7 @@ func TestIssuesGracePeriod(t *testing.T) {
 
 		// Ensure the ephemeral node's long-poll session is fully
 		// established on the server before disconnecting. Without
-		// this, the [TestClient.Disconnect] may cancel a [controlclient.Direct.PollNetMap] that hasn't
+		// this, the Disconnect may cancel a PollNetMap that hasn't
 		// yet reached serveLongPoll, so no grace period or ephemeral
 		// GC would ever be scheduled.
 		ephemeral.WaitForPeers(t, 1, 10*time.Second)
diff --git a/hscontrol/servertest/lifecycle_test.go b/hscontrol/servertest/lifecycle_test.go
index c1531550c..c7565f398 100644
--- a/hscontrol/servertest/lifecycle_test.go
+++ b/hscontrol/servertest/lifecycle_test.go
@@ -1,17 +1,12 @@
 package servertest_test
 
 import (
-	"context"
 	"fmt"
-	"math/rand/v2"
-	"strings"
 	"testing"
 	"time"
 
 	"github.com/juanfont/headscale/hscontrol/servertest"
-	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
 	"tailscale.com/types/netmap"
 )
 
@@ -121,241 +116,3 @@ func TestConnectionLifecycle(t *testing.T) {
 		}
 	})
 }
-
-// TestLogoutReloginAllClientsConverge is an in-process reproduction of the
-// flaky integration tests TestAuthKeyLogoutAndReloginSameUser,
-// TestAuthWebFlowLogoutAndReloginSameUser and
-// TestAuthWebFlowLogoutAndReloginNewUser: a full mesh of clients logs out,
-// the server marks every node expired and offline, then all clients log
-// back in near-simultaneously with fresh NodeKeys. In the flake, a subset
-// of clients never converges — their netmaps stay empty through the whole
-// retry window even though the server believes everything is connected.
-//
-// Each client here is a real [controlclient.Direct], so the client-side
-// netmap assembly semantics (full peer list vs. delta, patch handling for
-// unknown peers) match the real Tailscale client.
-func TestLogoutReloginAllClientsConverge(t *testing.T) {
-	if testing.Short() {
-		t.Skip("relogin convergence test includes 10s+ disconnect grace per iteration")
-	}
-
-	const (
-		numClients = 12
-		iterations = 4
-		// Maximum random delay between the relogins of different
-		// clients, so registrations and fresh map streams interleave
-		// the way concurrent `tailscale up` invocations do.
-		reloginStagger = 500 * time.Millisecond
-	)
-
-	// Production tuning: the integration flake happens with the default
-	// 800ms batch delay (large coalescing windows) and a multi-worker
-	// batcher, so reproduce with the same knobs.
-	h := servertest.NewHarness(t, numClients,
-		servertest.WithServerOptions(
-			servertest.WithBatchDelay(800*time.Millisecond),
-			servertest.WithBatcherWorkers(types.DefaultBatcherWorkers()),
-		),
-		servertest.WithConvergenceTimeout(60*time.Second),
-	)
-
-	for iteration := range iterations {
-		t.Logf("iteration %d: logging out all clients", iteration)
-		logoutAllAndWaitOffline(t, h)
-
-		t.Logf("iteration %d: relogging in all clients", iteration)
-
-		clients := h.Clients()
-		errs := make(chan error, len(clients))
-
-		for _, c := range clients {
-			go func() {
-				time.Sleep(rand.N(reloginStagger)) //nolint:forbidigo,gosec // intentional jitter so relogins interleave; weak random is fine
-
-				ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-				defer cancel()
-
-				errs <- c.ReloginAndPoll(ctx)
-			}()
-		}
-
-		for range clients {
-			require.NoError(t, <-errs)
-		}
-
-		// Every client must converge to the full mesh. A stuck client —
-		// the flake — sits at zero peers and fails here.
-		deadline := time.Now().Add(30 * time.Second)
-		for _, c := range clients {
-			waitForMeshOrDump(t, clients, c, numClients-1, time.Until(deadline))
-		}
-	}
-}
-
-// TestLogoutReloginWithPollChurn is the same logout/relogin storm as
-// [TestLogoutReloginAllClientsConverge], but each client also restarts its
-// map poll once or twice shortly after logging back in — without
-// re-registering — the way newer tailscaled versions cycle their map
-// session around login state transitions. The integration flake hits the
-// head and unstable clients, which churn their sessions far more than
-// older releases, so the rapid session replacement is the prime suspect.
-func TestLogoutReloginWithPollChurn(t *testing.T) {
-	if testing.Short() {
-		t.Skip("relogin convergence test includes 10s+ disconnect grace per iteration")
-	}
-
-	const (
-		numClients     = 12
-		iterations     = 4
-		reloginStagger = 500 * time.Millisecond
-	)
-
-	h := servertest.NewHarness(t, numClients,
-		servertest.WithServerOptions(
-			servertest.WithBatchDelay(800*time.Millisecond),
-			servertest.WithBatcherWorkers(types.DefaultBatcherWorkers()),
-		),
-		servertest.WithConvergenceTimeout(60*time.Second),
-	)
-
-	for iteration := range iterations {
-		t.Logf("iteration %d: logging out all clients", iteration)
-		logoutAllAndWaitOffline(t, h)
-
-		t.Logf("iteration %d: relogging in all clients with poll churn", iteration)
-
-		clients := h.Clients()
-		errs := make(chan error, len(clients))
-
-		for _, c := range clients {
-			go func() {
-				time.Sleep(rand.N(reloginStagger)) //nolint:forbidigo,gosec // intentional jitter so relogins interleave; weak random is fine
-
-				ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-				defer cancel()
-
-				err := c.ReloginAndPoll(ctx)
-				if err != nil {
-					errs <- err
-					return
-				}
-
-				// Churn the map session like a freshly logged-in
-				// tailscaled: restart the poll once or twice with
-				// small random gaps.
-				for range 1 + rand.IntN(2) { //nolint:gosec // weak random is fine for test jitter
-					time.Sleep(rand.N(400 * time.Millisecond)) //nolint:forbidigo,gosec // intentional jitter between poll restarts; weak random is fine
-
-					err = c.RestartPoll(ctx)
-					if err != nil {
-						errs <- err
-						return
-					}
-				}
-
-				errs <- nil
-			}()
-		}
-
-		for range clients {
-			require.NoError(t, <-errs)
-		}
-
-		deadline := time.Now().Add(30 * time.Second)
-		for _, c := range clients {
-			waitForMeshOrDump(t, clients, c, numClients-1, time.Until(deadline))
-		}
-	}
-}
-
-// logoutAllAndWaitOffline logs every client out concurrently, then blocks
-// until the server reports each node expired and offline — the integration
-// tests' logout barrier, including the ~10s disconnect grace period.
-func logoutAllAndWaitOffline(t *testing.T, h *servertest.TestHarness) {
-	t.Helper()
-
-	clients := h.Clients()
-	errs := make(chan error, len(clients))
-
-	for _, c := range clients {
-		go func() {
-			ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-			defer cancel()
-
-			errs <- c.LogoutAndDisconnect(ctx)
-		}()
-	}
-
-	for range clients {
-		require.NoError(t, <-errs)
-	}
-
-	st := h.Server.State()
-
-	require.EventuallyWithT(t, func(c *assert.CollectT) {
-		for _, node := range st.ListNodes().All() {
-			assert.True(c, node.IsExpired(), "node %d should be expired after logout", node.ID())
-			online := node.IsOnline()
-			assert.True(c, online.Valid() && !online.Get(), "node %d should be offline after logout", node.ID())
-		}
-	}, 30*time.Second, 100*time.Millisecond, "all nodes expired and offline after logout")
-}
-
-// waitForMeshOrDump waits until client c reports at least wantPeers peers.
-// On timeout it dumps every client's view of the mesh before failing, so a
-// reproduced flake shows exactly which clients are stuck and what they see.
-func waitForMeshOrDump(t *testing.T, all []*servertest.TestClient, c *servertest.TestClient, wantPeers int, timeout time.Duration) {
-	t.Helper()
-
-	deadline := time.After(timeout)
-	ticker := time.NewTicker(100 * time.Millisecond)
-
-	defer ticker.Stop()
-
-	for {
-		if nm := c.Netmap(); nm != nil && len(nm.Peers) >= wantPeers {
-			return
-		}
-
-		select {
-		case <-ticker.C:
-		case <-deadline:
-			for _, other := range all {
-				t.Logf("client %s netmap: %s", other.Name, describeNetmap(other))
-			}
-
-			nm := c.Netmap()
-
-			got := 0
-			if nm != nil {
-				got = len(nm.Peers)
-			}
-
-			t.Fatalf("client %s did not converge: want %d peers, got %d", c.Name, wantPeers, got)
-		}
-	}
-}
-
-// describeNetmap renders a client's current netmap as a compact string for
-// failure dumps: peer names with their expiry/online flags.
-func describeNetmap(c *servertest.TestClient) string {
-	nm := c.Netmap()
-	if nm == nil {
-		return "<nil>"
-	}
-
-	var out strings.Builder
-
-	fmt.Fprintf(&out, "%d peers:", len(nm.Peers))
-
-	for _, p := range nm.Peers {
-		hostname := "<no hostinfo>"
-		if hi := p.Hostinfo(); hi.Valid() {
-			hostname = hi.Hostname()
-		}
-
-		fmt.Fprintf(&out, " %s(id=%d expired=%t online=%v)", hostname, p.ID(), p.KeyExpiry().Before(time.Now()), p.Online())
-	}
-
-	return out.String()
-}
diff --git a/hscontrol/servertest/nodeattrs_test.go b/hscontrol/servertest/nodeattrs_test.go
deleted file mode 100644
index 26179bf69..000000000
--- a/hscontrol/servertest/nodeattrs_test.go
+++ /dev/null
@@ -1,397 +0,0 @@
-package servertest_test
-
-import (
-	"context"
-	"net/netip"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/servertest"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/netmap"
-)
-
-// reloadPolicy applies pol via SetPolicy and runs ReloadPolicy so that the
-// state machine emits the changes the mapper consumes — same shape as every
-// other servertest that exercises a policy edit.
-func reloadPolicy(t *testing.T, srv *servertest.TestServer, pol string) {
-	t.Helper()
-
-	changed, err := srv.State().SetPolicy([]byte(pol))
-	require.NoError(t, err)
-
-	if !changed {
-		return
-	}
-
-	changes, err := srv.State().ReloadPolicy()
-	require.NoError(t, err)
-	srv.App.Change(changes...)
-}
-
-// hasCap reports whether the given netmap's self CapMap contains want.
-func hasCap(nm *netmap.NetworkMap, want tailcfg.NodeCapability) bool {
-	if nm == nil || !nm.SelfNode.Valid() {
-		return false
-	}
-
-	return nm.SelfNode.CapMap().Contains(want)
-}
-
-// peerCapMapsAllEmpty reports whether every peer in nm has an empty
-// [tailcfg.Node.CapMap]. The Tailscale-hosted control plane omits the
-// peer-side CapMap unless the peer satisfies a peer-cap emission
-// condition (e.g. suggest-exit-node on a peer with approved exit
-// routes — see [policyv2.PeerCapMap]). The scenarios that call this
-// helper do not advertise exit routes, so peer CapMaps stay empty;
-// the test asserts that property to lock in the wire shape.
-func peerCapMapsAllEmpty(nm *netmap.NetworkMap) bool {
-	if nm == nil {
-		return false
-	}
-
-	for _, peer := range nm.Peers {
-		if peer.CapMap().Len() > 0 {
-			return false
-		}
-	}
-
-	return true
-}
-
-func TestNodeAttrsDeliverToSelfAndPeer(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	user := srv.CreateUser(t, "na-user")
-
-	c1 := servertest.NewClient(t, srv, "na-node1", servertest.WithUser(user))
-	c2 := servertest.NewClient(t, srv, "na-node2", servertest.WithUser(user))
-
-	c1.WaitForPeers(t, 1, 10*time.Second)
-	c2.WaitForPeers(t, 1, 10*time.Second)
-
-	reloadPolicy(t, srv, `{
-		"nodeAttrs": [{
-			"target": ["*"],
-			"attr":   ["randomize-client-port"]
-		}]
-	}`)
-
-	c1.WaitForCondition(t, "self randomize-client-port cap on c1", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return hasCap(nm, tailcfg.NodeAttrRandomizeClientPort)
-		})
-	c2.WaitForCondition(t, "self randomize-client-port cap on c2", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return hasCap(nm, tailcfg.NodeAttrRandomizeClientPort)
-		})
-
-	// randomize-client-port is not in the peer-consumed allowlist and
-	// these nodes don't advertise exit routes, so peer CapMaps stay
-	// empty. Each client reads its own caps from SelfNode.
-	assert.True(t, peerCapMapsAllEmpty(c1.Netmap()),
-		"c1 peer CapMaps must be empty after policy edit")
-	assert.True(t, peerCapMapsAllEmpty(c2.Netmap()),
-		"c2 peer CapMaps must be empty after policy edit")
-}
-
-func TestNodeAttrsUserTargetIsolated(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	alice := srv.CreateUser(t, "alice")
-	bob := srv.CreateUser(t, "bob")
-
-	a := servertest.NewClient(t, srv, "alice-laptop", servertest.WithUser(alice))
-	b := servertest.NewClient(t, srv, "bob-laptop", servertest.WithUser(bob))
-
-	a.WaitForPeers(t, 0, 5*time.Second)
-	b.WaitForPeers(t, 0, 5*time.Second)
-
-	reloadPolicy(t, srv, `{
-		"acls":      [{"action": "accept", "src": ["*"], "dst": ["*:*"]}],
-		"nodeAttrs": [{
-			"target": ["alice@"],
-			"attr":   ["randomize-client-port"]
-		}]
-	}`)
-
-	a.WaitForCondition(t, "alice gains randomize-client-port", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return hasCap(nm, tailcfg.NodeAttrRandomizeClientPort)
-		})
-
-	// bob must remain free of the cap; check after alice has converged so we
-	// know the policy is propagated.
-	b.WaitForPeers(t, 1, 10*time.Second)
-	nmB := b.Netmap()
-	require.NotNil(t, nmB)
-	assert.False(t, hasCap(nmB, tailcfg.NodeAttrRandomizeClientPort),
-		"bob is not in the target set; must not receive the cap")
-}
-
-func TestNodeAttrsRevokesWhenRemoved(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	user := srv.CreateUser(t, "revoke-user")
-
-	c := servertest.NewClient(t, srv, "revoke-node", servertest.WithUser(user))
-	c.WaitForCondition(t, "node connected", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return nm != nil && nm.SelfNode.Valid()
-		})
-
-	reloadPolicy(t, srv, `{
-		"nodeAttrs": [{
-			"target": ["*"],
-			"attr":   ["disable-captive-portal-detection"]
-		}]
-	}`)
-
-	c.WaitForCondition(t, "captive cap appears", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return hasCap(nm, tailcfg.NodeAttrDisableCaptivePortalDetection)
-		})
-
-	reloadPolicy(t, srv, `{}`)
-
-	c.WaitForCondition(t, "captive cap disappears", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return !hasCap(nm, tailcfg.NodeAttrDisableCaptivePortalDetection)
-		})
-}
-
-// TestNodeAttrsBaselineCapsAlwaysOn verifies that the baseline caps
-// (Admin, SSH, FileSharing, DefaultAutoUpdate) are emitted on every
-// node regardless of whether the policy mentions them. Taildrive
-// (drive:share / drive:access) is policy-driven and is verified
-// through TestNodeAttrsAddsToBaseline and the integration
-// TestGrantCapDrive flow.
-func TestNodeAttrsBaselineCapsAlwaysOn(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	user := srv.CreateUser(t, "baseline-user")
-
-	c := servertest.NewClient(t, srv, "baseline-node", servertest.WithUser(user))
-	c.WaitForCondition(t, "baseline caps present without policy", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			if nm == nil || !nm.SelfNode.Valid() {
-				return false
-			}
-
-			for _, w := range []tailcfg.NodeCapability{
-				tailcfg.CapabilityAdmin,
-				tailcfg.CapabilitySSH,
-				tailcfg.CapabilityFileSharing,
-				tailcfg.NodeAttrDefaultAutoUpdate,
-			} {
-				if !hasCap(nm, w) {
-					return false
-				}
-			}
-
-			return true
-		})
-}
-
-// TestTaildropDisabledWithholdsFileSharingCap asserts the off path of
-// the Taildrop config gate. The Tailscale v2 API does not expose the
-// equivalent tailnet setting, so the nodeAttrs compat suite cannot
-// vary it; this test covers the headscale side directly.
-func TestTaildropDisabledWithholdsFileSharingCap(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t, servertest.WithTaildropEnabled(false))
-	user := srv.CreateUser(t, "taildrop-off-user")
-
-	c := servertest.NewClient(t, srv, "taildrop-off-node", servertest.WithUser(user))
-	c.WaitForCondition(t, "file-sharing absent when taildrop disabled",
-		10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			if nm == nil || !nm.SelfNode.Valid() {
-				return false
-			}
-
-			return !hasCap(nm, tailcfg.CapabilityFileSharing) &&
-				hasCap(nm, tailcfg.CapabilityAdmin) &&
-				hasCap(nm, tailcfg.CapabilitySSH)
-		})
-}
-
-// TestNodeAttrsAddsToBaseline verifies that policy nodeAttrs caps land on
-// nodes alongside the always-on baseline. The baseline caps remain
-// regardless of policy contents.
-func TestNodeAttrsAddsToBaseline(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	user := srv.CreateUser(t, "addon-user")
-
-	c := servertest.NewClient(t, srv, "addon-node", servertest.WithUser(user))
-	c.WaitForCondition(t, "node connected", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return nm != nil && nm.SelfNode.Valid()
-		})
-
-	reloadPolicy(t, srv, `{
-		"nodeAttrs": [{
-			"target": ["*"],
-			"attr":   ["randomize-client-port", "disable-captive-portal-detection"]
-		}]
-	}`)
-
-	c.WaitForCondition(t, "policy adds caps on top of baseline", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return hasCap(nm, tailcfg.NodeAttrRandomizeClientPort) &&
-				hasCap(nm, tailcfg.NodeAttrDisableCaptivePortalDetection) &&
-				hasCap(nm, tailcfg.CapabilitySSH)
-		})
-}
-
-func TestNodeAttrsReloadingSamePolicyDoesNotChurnSelf(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	user := srv.CreateUser(t, "churn-user")
-
-	c := servertest.NewClient(t, srv, "churn-node", servertest.WithUser(user))
-	c.WaitForCondition(t, "node connected", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return nm != nil && nm.SelfNode.Valid()
-		})
-
-	const pol = `{
-		"nodeAttrs": [{
-			"target": ["*"],
-			"attr":   ["randomize-client-port"]
-		}]
-	}`
-
-	reloadPolicy(t, srv, pol)
-
-	c.WaitForCondition(t, "policy cap arrives", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return hasCap(nm, tailcfg.NodeAttrRandomizeClientPort)
-		})
-
-	// Reload identical bytes. Per-node CapMap diff produces an empty
-	// changed set, so SetPolicy returns no SelfUpdate IDs. The
-	// broadcast PolicyChange still fires because filter rules are
-	// recomputed on every reload — that's expected. The check below
-	// is on the wire shape: cap must still be present.
-	reloadPolicy(t, srv, pol)
-
-	c.WaitForCondition(t, "cap persists after no-op reload", 5*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return hasCap(nm, tailcfg.NodeAttrRandomizeClientPort)
-		})
-}
-
-// TestNodeAttrsSuggestExitNodeOnPeerCapMap covers the runtime peer-cap
-// path: when a peer advertises exit routes, has them approved, and
-// the policy targets it with `suggest-exit-node`, the cap lands on
-// [tailcfg.Node.CapMap] of the *peer view* — not just on the exit
-// node's own SelfNode.CapMap.
-//
-// The compat test in policy/v2 covers the wire shape; this test
-// proves the runtime delivery path through the live mapper.
-func TestNodeAttrsSuggestExitNodeOnPeerCapMap(t *testing.T) {
-	t.Parallel()
-
-	srv := servertest.NewServer(t)
-	user := srv.CreateUser(t, "see-user")
-
-	exit := servertest.NewClient(t, srv, "see-exit", servertest.WithUser(user))
-	viewer := servertest.NewClient(t, srv, "see-viewer", servertest.WithUser(user))
-
-	// Wait for peer visibility before advertising routes; otherwise the
-	// hostinfo update can race with initial registration and the
-	// approval below sees no advertised route to approve.
-	exit.WaitForPeers(t, 1, 10*time.Second)
-	viewer.WaitForPeers(t, 1, 10*time.Second)
-
-	exitRoutes := []netip.Prefix{
-		netip.MustParsePrefix("0.0.0.0/0"),
-		netip.MustParsePrefix("::/0"),
-	}
-
-	// Advertise the exit routes via the live noise channel.
-	exit.Direct().SetHostinfo(&tailcfg.Hostinfo{
-		BackendLogID: "servertest-see-exit",
-		Hostname:     "see-exit",
-		RoutableIPs:  exitRoutes,
-	})
-
-	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
-	require.NoError(t, exit.Direct().SendUpdate(ctx))
-	cancel()
-
-	// Approve the routes on the control plane and fan the resulting
-	// change out so peers re-render.
-	exitID := findNodeID(t, srv, "see-exit")
-	_, ch, err := srv.State().SetApprovedRoutes(exitID, exitRoutes)
-	require.NoError(t, err)
-	srv.App.Change(ch)
-
-	// Stamp suggest-exit-node on every node — the peer-cap rule then
-	// gates the actual peer-view emission on whether the peer is an
-	// exit node (advertised + approved).
-	reloadPolicy(t, srv, `{
-		"nodeAttrs": [{
-			"target": ["*"],
-			"attr":   ["suggest-exit-node"]
-		}]
-	}`)
-
-	// Self-side: the exit node sees the cap on its own SelfNode (the
-	// usual stamp; nothing special about exit nodes here).
-	exit.WaitForCondition(t, "self suggest-exit-node on exit", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			return hasCap(nm, tailcfg.NodeAttrSuggestExitNode)
-		})
-
-	// Peer-side: the viewer sees the exit node in its Peers list with
-	// the cap on the peer entry. This is the property the new
-	// PeerCapMap rule guards.
-	viewer.WaitForCondition(t, "peer suggest-exit-node on exit's peer entry", 10*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			if nm == nil {
-				return false
-			}
-
-			for _, peer := range nm.Peers {
-				if peer.ComputedName() != "see-exit" {
-					continue
-				}
-
-				return peer.CapMap().Contains(tailcfg.NodeAttrSuggestExitNode)
-			}
-
-			return false
-		})
-
-	// Negative side: the viewer's peer view of itself (i.e. the exit's
-	// peer view of the viewer) must NOT carry suggest-exit-node — only
-	// the actual exit-node peer view does.
-	exit.WaitForCondition(t, "viewer's peer entry does not carry suggest-exit-node", 5*time.Second,
-		func(nm *netmap.NetworkMap) bool {
-			if nm == nil {
-				return false
-			}
-
-			for _, peer := range nm.Peers {
-				if peer.ComputedName() != "see-viewer" {
-					continue
-				}
-
-				return !peer.CapMap().Contains(tailcfg.NodeAttrSuggestExitNode)
-			}
-
-			return false
-		})
-}
diff --git a/hscontrol/servertest/ping_test.go b/hscontrol/servertest/ping_test.go
index eba4add67..3ab5dc041 100644
--- a/hscontrol/servertest/ping_test.go
+++ b/hscontrol/servertest/ping_test.go
@@ -15,7 +15,7 @@ import (
 )
 
 // TestPingNode verifies the full ping round-trip: the server sends a
-// [tailcfg.PingRequest] via [tailcfg.MapResponse], the real [controlclient.Direct] handles it
+// PingRequest via MapResponse, the real controlclient.Direct handles it
 // by making a HEAD request back over Noise, and the ping tracker records
 // the latency.
 func TestPingNode(t *testing.T) {
@@ -105,7 +105,7 @@ func TestPingTwoSameNode(t *testing.T) {
 
 	require.NotEqual(t, pingID1, pingID2)
 
-	// Send both [tailcfg.PingRequest]s.
+	// Send both PingRequests.
 	url1 := h.Server.URL + "/machine/ping-response?id=" + pingID1
 	url2 := h.Server.URL + "/machine/ping-response?id=" + pingID2
 
@@ -136,7 +136,7 @@ func TestPingTwoSameNode(t *testing.T) {
 	}
 }
 
-// TestPingResolveByHostname verifies that [state.State.ResolveNode] can find a node
+// TestPingResolveByHostname verifies that ResolveNode can find a node
 // by hostname and that the resolved node can be pinged.
 func TestPingResolveByHostname(t *testing.T) {
 	t.Parallel()
diff --git a/hscontrol/servertest/policy_test.go b/hscontrol/servertest/policy_test.go
index 5bc6bc4a3..a6952bc76 100644
--- a/hscontrol/servertest/policy_test.go
+++ b/hscontrol/servertest/policy_test.go
@@ -156,9 +156,9 @@ func TestPolicyChanges(t *testing.T) {
 // (Prefix, Host) resolve to exactly the literal prefix and do NOT expand
 // to include the matching node's other IP addresses.
 //
-// [netmap.NetworkMap.PacketFilter] rules are INBOUND: they tell the destination node what
+// PacketFilter rules are INBOUND: they tell the destination node what
 // traffic to accept. So the IPv6 destination rule appears in test2's
-// [netmap.NetworkMap.PacketFilter] (the destination), not test1's (the source).
+// PacketFilter (the destination), not test1's (the source).
 func TestIPv6OnlyPrefixACL(t *testing.T) {
 	t.Parallel()
 
@@ -193,7 +193,7 @@ func TestIPv6OnlyPrefixACL(t *testing.T) {
 	c1.WaitForPeers(t, 1, 10*time.Second)
 	c2.WaitForPeers(t, 1, 10*time.Second)
 
-	// [netmap.NetworkMap.PacketFilter] is an INBOUND filter: test2 (the destination) should
+	// PacketFilter is an INBOUND filter: test2 (the destination) should
 	// have the rule allowing traffic FROM test1's IPv6.
 	nm2 := c2.Netmap()
 	require.NotNil(t, nm2)
diff --git a/hscontrol/servertest/poll_race_test.go b/hscontrol/servertest/poll_race_test.go
index aea59e5ce..500bf3fbe 100644
--- a/hscontrol/servertest/poll_race_test.go
+++ b/hscontrol/servertest/poll_race_test.go
@@ -13,7 +13,7 @@ import (
 )
 
 // TestPollRace targets logical race conditions specifically in the
-// poll.go session lifecycle and the [mapper.Batcher]'s handling of concurrent
+// poll.go session lifecycle and the batcher's handling of concurrent
 // sessions for the same node.
 
 func TestPollRace(t *testing.T) {
@@ -22,9 +22,9 @@ func TestPollRace(t *testing.T) {
 	// The core race: when a node disconnects, poll.go starts a
 	// grace period goroutine (10s ticker loop). If the node
 	// reconnects during this period, the new session calls
-	// [state.State.Connect] to mark the node online. But the old grace period
-	// goroutine is still running and may call [state.State.Disconnect] AFTER
-	// the new [state.State.Connect], setting IsOnline=false incorrectly.
+	// Connect() to mark the node online. But the old grace period
+	// goroutine is still running and may call Disconnect() AFTER
+	// the new Connect(), setting IsOnline=false incorrectly.
 	//
 	// This test verifies the exact symptom: after reconnect within
 	// the grace period, the server-side node state should be online.
@@ -99,7 +99,7 @@ func TestPollRace(t *testing.T) {
 	// Wait the full grace period (10s) after reconnect. The old
 	// grace period goroutine should have checked IsConnected
 	// and found the node connected, so should NOT have called
-	// [state.State.Disconnect].
+	// Disconnect().
 	t.Run("server_state_online_12s_after_reconnect", func(t *testing.T) {
 		t.Parallel()
 
@@ -195,8 +195,8 @@ func TestPollRace(t *testing.T) {
 		}
 	})
 
-	// The [mapper.Batcher]'s IsConnected check: when the grace period
-	// goroutine calls IsConnected, it should return true if
+	// The batcher's IsConnected check: when the grace period
+	// goroutine calls IsConnected(), it should return true if
 	// a new session has been added for the same node.
 	t.Run("batcher_knows_reconnected_during_grace", func(t *testing.T) {
 		t.Parallel()
diff --git a/hscontrol/servertest/race_test.go b/hscontrol/servertest/race_test.go
index bf6e6f0e9..81f30f230 100644
--- a/hscontrol/servertest/race_test.go
+++ b/hscontrol/servertest/race_test.go
@@ -19,7 +19,7 @@ import (
 // TestRace contains tests designed to trigger race conditions in
 // the control plane. Run with -race to detect data races.
 // These tests stress concurrent access patterns in poll.go,
-// the [mapper.Batcher], the [state.NodeStore], and the [mapper] subsystem.
+// the batcher, the NodeStore, and the mapper.
 
 // TestRacePollSessionReplacement tests the race between an old
 // poll session's deferred cleanup and a new session starting.
@@ -28,8 +28,8 @@ func TestRacePollSessionReplacement(t *testing.T) {
 
 	// Rapidly replace the poll session by doing immediate
 	// disconnect+reconnect. This races the old session's
-	// deferred cleanup ([state.NodeStore.RemoveNode], [state.State.Disconnect], grace period
-	// goroutine) with the new session's setup ([state.NodeStore.AddNode], [state.State.Connect],
+	// deferred cleanup (RemoveNode, Disconnect, grace period
+	// goroutine) with the new session's setup (AddNode, Connect,
 	// initial map send).
 	t.Run("immediate_session_replace_10x", func(t *testing.T) {
 		t.Parallel()
@@ -393,13 +393,13 @@ func TestRaceConnectDuringGracePeriod(t *testing.T) {
 	})
 }
 
-// TestRaceBatcherContention tests race conditions in the [mapper.Batcher]
+// TestRaceBatcherContention tests race conditions in the batcher
 // when many changes arrive simultaneously.
 func TestRaceBatcherContention(t *testing.T) {
 	t.Parallel()
 
 	// Many nodes connecting at the same time generates many
-	// concurrent [hscontrol.Headscale.Change] calls. The [mapper.Batcher] must handle this
+	// concurrent Change() calls. The batcher must handle this
 	// without dropping updates or panicking.
 	t.Run("many_simultaneous_connects", func(t *testing.T) {
 		t.Parallel()
@@ -427,8 +427,8 @@ func TestRaceBatcherContention(t *testing.T) {
 	})
 
 	// Rapid connect + disconnect + connect of different nodes
-	// generates interleaved [state.NodeStore.AddNode]/[state.NodeStore.RemoveNode]/[state.NodeStore.AddNode] in the
-	// [mapper.Batcher].
+	// generates interleaved AddNode/RemoveNode/AddNode in the
+	// batcher.
 	t.Run("interleaved_add_remove_add", func(t *testing.T) {
 		t.Parallel()
 
@@ -514,7 +514,7 @@ func TestRaceBatcherContention(t *testing.T) {
 }
 
 // TestRaceMapResponseDuringDisconnect tests what happens when a
-// [tailcfg.MapResponse] is being written while the session is being torn down.
+// map response is being written while the session is being torn down.
 func TestRaceMapResponseDuringDisconnect(t *testing.T) {
 	t.Parallel()
 
@@ -587,12 +587,12 @@ func TestRaceMapResponseDuringDisconnect(t *testing.T) {
 	})
 }
 
-// TestRaceNodeStoreContention tests concurrent access to the [state.NodeStore].
+// TestRaceNodeStoreContention tests concurrent access to the NodeStore.
 func TestRaceNodeStoreContention(t *testing.T) {
 	t.Parallel()
 
-	// Many [state.State.GetNodeByID] calls while nodes are connecting and
-	// disconnecting. This tests the [state.NodeStore]'s read/write locking.
+	// Many GetNodeByID calls while nodes are connecting and
+	// disconnecting. This tests the NodeStore's read/write locking.
 	t.Run("concurrent_reads_during_mutations", func(t *testing.T) {
 		t.Parallel()
 
@@ -655,7 +655,7 @@ func TestRaceNodeStoreContention(t *testing.T) {
 		}
 	})
 
-	// [state.State.ListNodes] while nodes are being added and removed.
+	// ListNodes while nodes are being added and removed.
 	t.Run("list_nodes_during_churn", func(t *testing.T) {
 		t.Parallel()
 
diff --git a/hscontrol/servertest/routes_test.go b/hscontrol/servertest/routes_test.go
index 4f224192e..85f818206 100644
--- a/hscontrol/servertest/routes_test.go
+++ b/hscontrol/servertest/routes_test.go
@@ -17,8 +17,6 @@ import (
 
 // TestRoutes verifies that route advertisements and approvals
 // propagate correctly through the control plane to all peers.
-//
-//nolint:gocyclo // table-driven test driver with many independent subtests
 func TestRoutes(t *testing.T) {
 	t.Parallel()
 
@@ -73,14 +71,14 @@ func TestRoutes(t *testing.T) {
 			RoutableIPs:  []netip.Prefix{routePrefix},
 		})
 
-		// Send a non-streaming update to push the new [tailcfg.Hostinfo].
+		// Send a non-streaming update to push the new hostinfo.
 		ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
 		defer cancel()
 
 		_ = c1.Direct().SendUpdate(ctx)
 
 		// The observer should eventually see the advertised routes
-		// in the peer's [tailcfg.Hostinfo].
+		// in the peer's hostinfo.
 		c2.WaitForCondition(t, "advertised route in hostinfo",
 			15*time.Second,
 			func(nm *netmap.NetworkMap) bool {
@@ -115,7 +113,7 @@ func TestRoutes(t *testing.T) {
 		c1.WaitForPeers(t, 1, 10*time.Second)
 		c2.WaitForPeers(t, 1, 10*time.Second)
 
-		// Step 1: Advertise the route by updating [tailcfg.Hostinfo].
+		// Step 1: Advertise the route by updating hostinfo.
 		c1.Direct().SetHostinfo(&tailcfg.Hostinfo{
 			BackendLogID: "servertest-fullrt-advertiser",
 			Hostname:     "fullrt-advertiser",
@@ -127,7 +125,7 @@ func TestRoutes(t *testing.T) {
 
 		_ = c1.Direct().SendUpdate(ctx)
 
-		// Wait for the server to process the [tailcfg.Hostinfo] update
+		// Wait for the server to process the hostinfo update
 		// by waiting for observer to see the advertised route.
 		c2.WaitForCondition(t, "hostinfo update propagated",
 			10*time.Second,
@@ -216,18 +214,18 @@ func TestRoutes(t *testing.T) {
 		}
 	})
 
-	// Reproduces the HA secondary recovery race:
+	// Reproduces https://github.com/juanfont/headscale/issues/3203:
 	// HA tracking loses the secondary subnet router after all routers serving
 	// the route have been offline simultaneously and one of them returns.
 	//
 	// Two assertions split the failure surface:
 	//   R1 — server-side primary route state restores after reconnect.
-	//   R2 — observer's [netmap.NetworkMap] shows the reconnected router online with
+	//   R2 — observer's netmap shows the reconnected router online with
 	//        the route in its primary set.
-	// If R1 fails the bug is in [state.State.Connect] / primaryRoutes; if R1 passes
-	// and R2 fails the bug is in change broadcast / [mapper.Batcher].
+	// If R1 fails the bug is in state.Connect / primaryRoutes; if R1 passes
+	// and R2 fails the bug is in change broadcast / mapBatcher.
 	//
-	// Caveat: [TestClient.Reconnect] re-registers via [controlclient.Direct.TryLogin] in addition
+	// Caveat: servertest's Reconnect re-registers via TryLogin in addition
 	// to starting a new poll session. Production reconnects after a brief
 	// network outage may bypass re-registration. If this test passes on
 	// main, fall back to the integration variant noted in the plan
@@ -249,7 +247,7 @@ func TestRoutes(t *testing.T) {
 
 		obs.WaitForPeers(t, 2, 10*time.Second)
 
-		// Both routers advertise the same route via their [tailcfg.Hostinfo].
+		// Both routers advertise the same route via their hostinfo.
 		advertise := func(c *servertest.TestClient, name string) {
 			t.Helper()
 			c.Direct().SetHostinfo(&tailcfg.Hostinfo{
@@ -307,8 +305,8 @@ func TestRoutes(t *testing.T) {
 		// 3. Reconnect r2 (cable plugged back in).
 		r2.Reconnect(t)
 
-		// [tailcfg.Hostinfo] is part of the [controlclient.Direct] state; the [TestClient.Reconnect]
-		// helper re-registers via [controlclient.Direct.TryLogin] which carries the same [tailcfg.Hostinfo]
+		// Hostinfo is part of the controlclient.Direct state; the Reconnect
+		// helper re-registers via TryLogin which carries the same Hostinfo
 		// that was set above. Push it again to be sure the announced route
 		// is registered in the new session.
 		advertise(r2, "ha3203-router2")
@@ -345,4 +343,4 @@ func TestRoutes(t *testing.T) {
 	})
 }
 
-// [findNodeID] is defined in issues_test.go.
+// findNodeID is defined in issues_test.go.
diff --git a/hscontrol/servertest/server.go b/hscontrol/servertest/server.go
index 9601694cc..69a7ec5cb 100644
--- a/hscontrol/servertest/server.go
+++ b/hscontrol/servertest/server.go
@@ -1,11 +1,10 @@
 // Package servertest provides an in-process test harness for Headscale's
 // control plane. It wires a real Headscale server to real Tailscale
-// [controlclient.Direct] instances, enabling fast, deterministic tests
+// controlclient.Direct instances, enabling fast, deterministic tests
 // of the full control protocol without Docker or separate processes.
 package servertest
 
 import (
-	"context"
 	"net"
 	"net/http"
 	"net/netip"
@@ -20,7 +19,7 @@ import (
 )
 
 // TestServer is an in-process Headscale control server suitable for
-// use with Tailscale's [controlclient.Direct].
+// use with Tailscale's controlclient.Direct.
 //
 // Networking uses tailscale.com/net/memnet so that all TCP
 // connections stay in-process — no real sockets are opened.
@@ -34,7 +33,7 @@ type TestServer struct {
 	st         *state.State
 }
 
-// ServerOption configures a [TestServer].
+// ServerOption configures a TestServer.
 type ServerOption func(*serverConfig)
 
 type serverConfig struct {
@@ -43,8 +42,6 @@ type serverConfig struct {
 	ephemeralTimeout time.Duration
 	nodeExpiry       time.Duration
 	batcherWorkers   int
-	taildropEnabled  bool
-	realListener     bool
 }
 
 func defaultServerConfig() *serverConfig {
@@ -53,7 +50,6 @@ func defaultServerConfig() *serverConfig {
 		bufferedChanSize: 30,
 		batcherWorkers:   1,
 		ephemeralTimeout: 30 * time.Second,
-		taildropEnabled:  true,
 	}
 }
 
@@ -67,13 +63,6 @@ func WithBufferedChanSize(n int) ServerOption {
 	return func(c *serverConfig) { c.bufferedChanSize = n }
 }
 
-// WithBatcherWorkers sets the number of batcher worker goroutines.
-// Defaults to 1 for deterministic tests; pass
-// [types.DefaultBatcherWorkers] to match production concurrency.
-func WithBatcherWorkers(n int) ServerOption {
-	return func(c *serverConfig) { c.batcherWorkers = n }
-}
-
 // WithEphemeralTimeout sets the ephemeral node inactivity timeout.
 func WithEphemeralTimeout(d time.Duration) ServerOption {
 	return func(c *serverConfig) { c.ephemeralTimeout = d }
@@ -84,23 +73,6 @@ func WithNodeExpiry(d time.Duration) ServerOption {
 	return func(c *serverConfig) { c.nodeExpiry = d }
 }
 
-// WithRealListener binds the HTTP API to a real loopback TCP port instead of
-// the in-process memnet, so external processes — the Tailscale SDK over a real
-// socket, tscli, OpenTofu — can reach the API. The Noise/[TestClient] control
-// path still uses memnet, so this is for REST/API tests only.
-func WithRealListener() ServerOption {
-	return func(c *serverConfig) { c.realListener = true }
-}
-
-// WithTaildropEnabled toggles the Taildrop file-sharing feature.
-// Defaults to true to match production. Pass false to verify
-// behaviour when an operator has switched the toggle off — e.g.
-// that [tailcfg.CapabilityFileSharing] is withheld from the
-// always-on baseline.
-func WithTaildropEnabled(enabled bool) ServerOption {
-	return func(c *serverConfig) { c.taildropEnabled = enabled }
-}
-
 // NewServer creates and starts a Headscale test server.
 // The server is fully functional and accepts real Tailscale control
 // protocol connections over Noise.
@@ -139,7 +111,6 @@ func NewServer(tb testing.TB, opts ...ServerOption) *TestServer {
 		Policy: types.PolicyConfig{
 			Mode: types.PolicyModeDB,
 		},
-		Taildrop: types.TaildropConfig{Enabled: sc.taildropEnabled},
 		Tuning: types.Tuning{
 			BatchChangeDelay:               sc.batchDelay,
 			BatcherWorkers:                 sc.batcherWorkers,
@@ -174,24 +145,13 @@ func NewServer(tb testing.TB, opts ...ServerOption) *TestServer {
 	app.StartBatcherForTest(tb)
 	app.StartEphemeralGCForTest(tb)
 
-	// Start the HTTP server. By default it binds an in-memory network so all
-	// TCP connections stay in-process; WithRealListener swaps in a real loopback
-	// port so external binaries can connect.
-	var (
-		memNetwork memnet.Network
-		ln         net.Listener
-	)
-
-	if sc.realListener {
-		var lc net.ListenConfig
-
-		ln, err = lc.Listen(context.Background(), "tcp", "127.0.0.1:0")
-	} else {
-		ln, err = memNetwork.Listen("tcp", "127.0.0.1:443")
-	}
+	// Start the HTTP server over an in-memory network so that all
+	// TCP connections stay in-process.
+	var memNetwork memnet.Network
 
+	ln, err := memNetwork.Listen("tcp", "127.0.0.1:443")
 	if err != nil {
-		tb.Fatalf("servertest: Listen: %v", err)
+		tb.Fatalf("servertest: memnet Listen: %v", err)
 	}
 
 	httpServer := &http.Server{
@@ -229,15 +189,15 @@ func (s *TestServer) State() *state.State {
 
 // Close shuts down the in-memory HTTP server and listener.
 // Subsystem cleanup (batcher, ephemeral GC) is handled by
-// [testing.TB.Cleanup] callbacks registered in [hscontrol.Headscale.StartBatcherForTest] and
-// [hscontrol.Headscale.StartEphemeralGCForTest].
+// tb.Cleanup callbacks registered in StartBatcherForTest and
+// StartEphemeralGCForTest.
 func (s *TestServer) Close() {
 	s.httpServer.Close()
 	s.ln.Close()
 }
 
 // MemNet returns the in-memory network used by this server,
-// so that [TestClient] dialers can be wired to it.
+// so that TestClient dialers can be wired to it.
 func (s *TestServer) MemNet() *memnet.Network {
 	return s.memNet
 }
@@ -254,71 +214,43 @@ func (s *TestServer) CreateUser(tb testing.TB, name string) *types.User {
 	return u
 }
 
-// CreateAPIKey mints an API key string (the Bearer/Basic credential). When
-// owner is non-nil the key is owned by that user, so the v2 API mints
-// user-owned (untagged) auth keys on its behalf.
-func (s *TestServer) CreateAPIKey(tb testing.TB, owner *types.User) string {
-	tb.Helper()
-
-	keyStr, key, err := s.st.CreateAPIKey(nil)
-	if err != nil {
-		tb.Fatalf("servertest: CreateAPIKey: %v", err)
-	}
-
-	if owner != nil {
-		err := s.st.SetAPIKeyUser(key.ID, types.UserID(owner.ID))
-		if err != nil {
-			tb.Fatalf("servertest: SetAPIKeyUser: %v", err)
-		}
-	}
-
-	return keyStr
-}
-
-// CreateRegisteredNode mints a registered node (allocated IPs, registered
-// method) in BOTH the database and the in-memory NodeStore, then returns its
-// view. The v2 device endpoints resolve nodes via State.GetNodeByID, which reads
-// the NodeStore, so a DB-only node would be invisible to them.
-func (s *TestServer) CreateRegisteredNode(tb testing.TB, owner *types.User, hostname ...string) types.NodeView {
-	tb.Helper()
-
-	node := s.st.CreateRegisteredNodeForTest(owner, hostname...)
-	// CreateRegisteredNodeForTest sets UserID but leaves the User association
-	// unloaded; the device response renders the owner login, so attach it.
-	node.User = owner
-
-	return s.st.PutNodeInStoreForTest(*node)
-}
-
 // CreatePreAuthKey creates a reusable pre-auth key for the given user.
 func (s *TestServer) CreatePreAuthKey(tb testing.TB, userID types.UserID) string {
 	tb.Helper()
-	return s.createPreAuthKey(tb, userID, true, false, nil)
+
+	uid := userID
+
+	pak, err := s.st.CreatePreAuthKey(&uid, true, false, nil, nil)
+	if err != nil {
+		tb.Fatalf("servertest: CreatePreAuthKey: %v", err)
+	}
+
+	return pak.Key
 }
 
 // CreateTaggedPreAuthKey creates a reusable pre-auth key with ACL tags.
 func (s *TestServer) CreateTaggedPreAuthKey(tb testing.TB, userID types.UserID, tags []string) string {
 	tb.Helper()
-	return s.createPreAuthKey(tb, userID, true, false, tags)
+
+	uid := userID
+
+	pak, err := s.st.CreatePreAuthKey(&uid, true, false, nil, tags)
+	if err != nil {
+		tb.Fatalf("servertest: CreateTaggedPreAuthKey: %v", err)
+	}
+
+	return pak.Key
 }
 
 // CreateEphemeralPreAuthKey creates an ephemeral pre-auth key.
 func (s *TestServer) CreateEphemeralPreAuthKey(tb testing.TB, userID types.UserID) string {
 	tb.Helper()
-	return s.createPreAuthKey(tb, userID, false, true, nil)
-}
 
-func (s *TestServer) createPreAuthKey(
-	tb testing.TB,
-	userID types.UserID,
-	reusable, ephemeral bool,
-	tags []string,
-) string {
-	tb.Helper()
+	uid := userID
 
-	pak, err := s.st.CreatePreAuthKey(&userID, reusable, ephemeral, nil, tags)
+	pak, err := s.st.CreatePreAuthKey(&uid, false, true, nil, nil)
 	if err != nil {
-		tb.Fatalf("servertest: createPreAuthKey: %v", err)
+		tb.Fatalf("servertest: CreateEphemeralPreAuthKey: %v", err)
 	}
 
 	return pak.Key
diff --git a/hscontrol/servertest/sshcheck_test.go b/hscontrol/servertest/sshcheck_test.go
deleted file mode 100644
index 4ff1ed317..000000000
--- a/hscontrol/servertest/sshcheck_test.go
+++ /dev/null
@@ -1,127 +0,0 @@
-package servertest_test
-
-import (
-	"context"
-	"encoding/json"
-	"fmt"
-	"net/http"
-	"net/url"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/servertest"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-// TestSSHCheckReDelegatesWhenSessionMissing exercises the fix for
-// https://github.com/juanfont/headscale/issues/3305 with a real control
-// client. The dst node runs the SSH-check poll over its actual Noise
-// connection: it first obtains a genuine HoldAndDelegate auth_id, that auth
-// session is then dropped from the cache (as it would be on expiry, eviction,
-// or a control-plane restart), and the follow-up poll for the now-missing
-// session must re-delegate a fresh HoldAndDelegate rather than dead-ending the
-// client with an error it keeps retrying until the SSH connection times out.
-func TestSSHCheckReDelegatesWhenSessionMissing(t *testing.T) {
-	t.Parallel()
-
-	h := servertest.NewHarness(t, 2)
-
-	srcID := types.NodeID(h.Client(0).Netmap().SelfNode.ID()) //nolint:gosec
-	dstID := types.NodeID(h.Client(1).Netmap().SelfNode.ID()) //nolint:gosec
-
-	// Subject the same-user (src, dst) pair to an SSH check.
-	h.ChangePolicy(t, []byte(`{
-		"ssh": [{
-			"action": "check",
-			"src": ["harness-default@"],
-			"dst": ["autogroup:self"],
-			"users": ["autogroup:nonroot"]
-		}]
-	}`))
-
-	// Sanity: the policy must actually subject this pair to a check, otherwise
-	// the test would pass for the wrong reason.
-	_, checkFound := h.Server.State().SSHCheckParams(srcID, dstID)
-	require.True(t, checkFound, "test setup: (src, dst) must be subject to an SSH check")
-
-	// The dst node's first poll yields a real HoldAndDelegate carrying a real,
-	// cached auth_id — nothing is fabricated.
-	initial := pollSSHAction(t, h.Server.URL, h.Client(1), srcID, dstID, "")
-	require.NotEmpty(t, initial.HoldAndDelegate, "initial poll must hold and delegate, got %+v", initial)
-
-	authID := authIDFromHoldURL(t, initial.HoldAndDelegate)
-	_, ok := h.Server.State().GetAuthCacheEntry(authID)
-	require.True(t, ok, "the auth session must be cached after the initial poll")
-
-	// Drop the session, reproducing a natural loss (expiry/eviction/restart).
-	h.Server.State().DeleteAuthCacheEntryForTest(authID)
-	_, ok = h.Server.State().GetAuthCacheEntry(authID)
-	require.False(t, ok, "the auth session must be gone before the follow-up poll")
-
-	// The follow-up poll carries the real auth_id whose session is now missing.
-	// With an active check the server must re-delegate a fresh session.
-	followUp := pollSSHAction(t, h.Server.URL, h.Client(1), srcID, dstID, authID.String())
-	require.NotEmpty(t, followUp.HoldAndDelegate,
-		"a missing session under an active check must re-delegate, got %+v", followUp)
-
-	require.NotEqual(t, authID, authIDFromHoldURL(t, followUp.HoldAndDelegate),
-		"re-delegation must mint a fresh auth_id")
-}
-
-// pollSSHAction issues an /machine/ssh/action poll from the given node over its
-// real Noise connection, as tailscaled does. An empty authID is the initial
-// poll; a non-empty one is a follow-up.
-func pollSSHAction(
-	t *testing.T,
-	serverURL string,
-	node *servertest.TestClient,
-	srcID, dstID types.NodeID,
-	authID string,
-) tailcfg.SSHAction {
-	t.Helper()
-
-	actionURL := fmt.Sprintf("%s/machine/ssh/action/%d/to/%d", serverURL, srcID, dstID)
-	if authID != "" {
-		actionURL += "?auth_id=" + authID
-	}
-
-	// Noise requests are addressed with the https scheme; the control client
-	// routes them over the established Noise connection (mirroring how
-	// controlclient issues its own register/map calls).
-	actionURL = strings.Replace(actionURL, "http://", "https://", 1)
-
-	ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
-	defer cancel()
-
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, actionURL, nil)
-	require.NoError(t, err)
-
-	resp, err := node.Direct().DoNoiseRequest(req)
-	require.NoError(t, err)
-
-	defer resp.Body.Close()
-
-	require.Equal(t, http.StatusOK, resp.StatusCode, "ssh action poll must return 200")
-
-	var action tailcfg.SSHAction
-	require.NoError(t, json.NewDecoder(resp.Body).Decode(&action))
-
-	return action
-}
-
-// authIDFromHoldURL extracts the auth_id query parameter from a HoldAndDelegate
-// URL.
-func authIDFromHoldURL(t *testing.T, holdURL string) types.AuthID {
-	t.Helper()
-
-	u, err := url.Parse(holdURL)
-	require.NoError(t, err)
-
-	authID, err := types.AuthIDFromString(u.Query().Get("auth_id"))
-	require.NoError(t, err, "HoldAndDelegate URL missing a valid auth_id: %s", holdURL)
-
-	return authID
-}
diff --git a/hscontrol/servertest/stress_test.go b/hscontrol/servertest/stress_test.go
index e330aa3d8..ad22a3ac2 100644
--- a/hscontrol/servertest/stress_test.go
+++ b/hscontrol/servertest/stress_test.go
@@ -20,7 +20,7 @@ import (
 // consistency bugs.
 
 // TestStressConnectDisconnect exercises rapid connect/disconnect
-// patterns that stress the grace period, batcher, and [state.NodeStore].
+// patterns that stress the grace period, batcher, and NodeStore.
 func TestStressConnectDisconnect(t *testing.T) {
 	t.Parallel()
 
@@ -536,7 +536,7 @@ func TestStressDataIntegrity(t *testing.T) {
 		}
 	})
 
-	// [netmap.NetworkMap.MachineKey] should be consistent: the server should track
+	// MachineKey should be consistent: the server should track
 	// the same machine key the client registered with.
 	t.Run("machine_key_consistent", func(t *testing.T) {
 		t.Parallel()
@@ -551,7 +551,7 @@ func TestStressDataIntegrity(t *testing.T) {
 		nm := c1.Netmap()
 		require.NotNil(t, nm)
 
-		// The client's [netmap.NetworkMap.MachineKey] should be non-zero.
+		// The client's MachineKey in the netmap should be non-zero.
 		assert.False(t, nm.MachineKey.IsZero(),
 			"client's MachineKey should be non-zero")
 
@@ -564,7 +564,7 @@ func TestStressDataIntegrity(t *testing.T) {
 			"client and server should agree on MachineKey")
 	})
 
-	// [netmap.NetworkMap.NodeKey] should be consistent between client and server.
+	// NodeKey should be consistent between client and server.
 	t.Run("node_key_consistent", func(t *testing.T) {
 		t.Parallel()
 
diff --git a/hscontrol/servertest/via_compat_test.go b/hscontrol/servertest/via_compat_test.go
index 859e5fd4d..b87f520fa 100644
--- a/hscontrol/servertest/via_compat_test.go
+++ b/hscontrol/servertest/via_compat_test.go
@@ -38,7 +38,7 @@ var viaCompatTests = []struct {
 }
 
 // TestViaGrantMapCompat loads golden captures from Tailscale SaaS and
-// compares headscale's [tailcfg.MapResponse] structure against the captured [netmap.NetworkMap].
+// compares headscale's MapResponse structure against the captured netmap.
 //
 // The comparison is IP-independent: it validates peer visibility, route
 // prefixes in AllowedIPs, and PrimaryRoutes — not literal Tailscale IP
@@ -128,7 +128,7 @@ func runViaMapCompat(t *testing.T, c *testcapture.Capture) {
 
 	// Determine which routes each node should advertise. If the golden
 	// topology has explicit routable_ips, use those. Otherwise infer
-	// from the [netmap.NetworkMap] peer AllowedIPs and packet filter dst prefixes.
+	// from the netmap peer AllowedIPs and packet filter dst prefixes.
 	nodeRoutes := inferNodeRoutes(t, c)
 
 	// Build approved routes from topology. The topology's approved_routes
@@ -181,7 +181,7 @@ func runViaMapCompat(t *testing.T, c *testcapture.Capture) {
 		srv.App.Change(routeChange)
 	}
 
-	// Wait for peers based on golden [netmap.NetworkMap] expected counts.
+	// Wait for peers based on golden netmap expected counts.
 	for viewerName, cl := range clients {
 		capture := c.Captures[viewerName]
 		if capture.Netmap == nil {
@@ -202,8 +202,8 @@ func runViaMapCompat(t *testing.T, c *testcapture.Capture) {
 		}
 	}
 
-	// Ensure all nodes have received at least one [tailcfg.MapResponse],
-	// including nodes with 0 expected peers that skipped [TestClient.WaitForPeers].
+	// Ensure all nodes have received at least one MapResponse,
+	// including nodes with 0 expected peers that skipped WaitForPeers.
 	for name, cl := range clients {
 		cl.WaitForCondition(t, name+" initial netmap", 15*time.Second,
 			func(nm *netmap.NetworkMap) bool {
@@ -211,7 +211,7 @@ func runViaMapCompat(t *testing.T, c *testcapture.Capture) {
 			})
 	}
 
-	// Compare each viewer's [tailcfg.MapResponse] against the golden [netmap.NetworkMap].
+	// Compare each viewer's MapResponse against the golden netmap.
 	for viewerName, cl := range clients {
 		capture := c.Captures[viewerName]
 		if capture.Netmap == nil {
@@ -227,8 +227,8 @@ func runViaMapCompat(t *testing.T, c *testcapture.Capture) {
 	}
 }
 
-// compareNetmap compares the headscale [tailcfg.MapResponse] against the
-// captured [netmap.NetworkMap] data in an IP-independent way. It validates:
+// compareNetmap compares the headscale MapResponse against the
+// captured netmap data in an IP-independent way. It validates:
 //   - Peer visibility (which peers are present, by hostname)
 //   - Route prefixes in AllowedIPs (non-Tailscale-IP entries like 10.44.0.0/16)
 //   - Number of Tailscale IPs per peer (should be 2: one v4 + one v6)
@@ -430,7 +430,7 @@ func compareNetmap(
 }
 
 // saasAddrsByPeer builds a map from SaaS Tailscale address to peer
-// hostname using each capture's [tailcfg.NodeView.Addresses]. Peers not in
+// hostname using each capture's SelfNode.Addresses. Peers not in
 // clients are skipped.
 func saasAddrsByPeer(
 	want testcapture.Node,
@@ -442,7 +442,7 @@ func saasAddrsByPeer(
 		return out
 	}
 
-	// Walk peers listed in this [netmap.NetworkMap].
+	// Walk peers listed in this netmap.
 	for _, peer := range want.Netmap.Peers {
 		name := extractHostname(peer.Name())
 		if _, isOurs := clients[name]; !isOurs {
@@ -457,7 +457,7 @@ func saasAddrsByPeer(
 		}
 	}
 
-	// The viewer's own [tailcfg.NodeView] addresses also appear as possible src.
+	// The viewer's own SelfNode addresses also appear as possible src.
 	if want.Netmap.SelfNode.Valid() {
 		name := extractHostname(want.Netmap.SelfNode.Name())
 
@@ -533,8 +533,8 @@ func canonicaliseSrcStrings(
 }
 
 // canonicaliseSrcPrefixes is the headscale-side counterpart of
-// [canonicaliseSrcStrings], reading already-parsed [netip.Prefix] values
-// from [tailcfg.Match.Srcs].
+// canonicaliseSrcStrings, reading already-parsed netip.Prefix values
+// from tailcfg.Match.Srcs.
 func canonicaliseSrcPrefixes(
 	t *testing.T,
 	srcs []netip.Prefix,
@@ -627,7 +627,7 @@ type peerSummary struct {
 	PrimaryRoutes []string       // sorted
 }
 
-// parsePrefixOrAddr parses a string as a [netip.Prefix]. If the string
+// parsePrefixOrAddr parses a string as a netip.Prefix. If the string
 // is a bare IP address (no slash), it is converted to a single-host
 // prefix (/32 for IPv4, /128 for IPv6). Golden data DstPorts.IP can
 // contain either form.
@@ -704,7 +704,7 @@ func countTailscaleIPsView(allowedIPs interface {
 
 // inferNodeRoutes determines which routes each node should advertise.
 // If the topology has explicit routable_ips, those are used. Otherwise
-// routes are inferred from the [netmap.NetworkMap] peer AllowedIPs and packet
+// routes are inferred from the netmap peer AllowedIPs and packet
 // filter destination prefixes.
 func inferNodeRoutes(t *testing.T, c *testcapture.Capture) map[string][]netip.Prefix {
 	t.Helper()
@@ -725,7 +725,7 @@ func inferNodeRoutes(t *testing.T, c *testcapture.Capture) map[string][]netip.Pr
 		}
 	}
 
-	// Tier 2: infer from each capture's [netmap.NetworkMap] — scan peers with
+	// Tier 2: infer from each capture's netmap — scan peers with
 	// route prefixes in AllowedIPs. If node X appears as a peer with
 	// route prefix 10.44.0.0/16, then X should advertise that route.
 	for _, node := range c.Captures {
diff --git a/hscontrol/servertest/via_ha_compat_test.go b/hscontrol/servertest/via_ha_compat_test.go
index 0d166500b..9c652a1af 100644
--- a/hscontrol/servertest/via_ha_compat_test.go
+++ b/hscontrol/servertest/via_ha_compat_test.go
@@ -46,7 +46,7 @@ var viaHACompatTests = []struct {
 // TestViaGrantHACompat loads golden captures from Tailscale SaaS that
 // test via grant steering combined with HA primary route election.
 // Each capture uses an inline topology with 4-6 nodes (instead of the
-// shared 15-node grant topology used by [TestViaGrantMapCompat]).
+// shared 15-node grant topology used by TestViaGrantMapCompat).
 func TestViaGrantHACompat(t *testing.T) {
 	t.Parallel()
 
@@ -175,7 +175,7 @@ func runViaHACompat(t *testing.T, c *testcapture.Capture) {
 		}
 	}
 
-	// Ensure all nodes have an initial [netmap.NetworkMap].
+	// Ensure all nodes have an initial netmap.
 	for name, cl := range clients {
 		cl.WaitForCondition(t, name+" initial netmap", 15*time.Second,
 			func(nm *netmap.NetworkMap) bool {
@@ -183,7 +183,7 @@ func runViaHACompat(t *testing.T, c *testcapture.Capture) {
 			})
 	}
 
-	// Compare each viewer's [tailcfg.MapResponse] against golden [netmap.NetworkMap].
+	// Compare each viewer's MapResponse against golden netmap.
 	for viewerName, cl := range clients {
 		capture := c.Captures[viewerName]
 		if capture.Netmap == nil {
@@ -196,9 +196,9 @@ func runViaHACompat(t *testing.T, c *testcapture.Capture) {
 	}
 }
 
-// compareCaptureNetmap compares headscale's [tailcfg.MapResponse] against a
-// [testcapture.Node]'s [netmap.NetworkMap] data. Same logic as [compareNetmap] but
-// reads from typed [testcapture] fields instead of goldenFile strings.
+// compareCaptureNetmap compares headscale's MapResponse against a
+// testcapture.Node's netmap data. Same logic as compareNetmap but
+// reads from typed testcapture fields instead of goldenFile strings.
 func compareCaptureNetmap(
 	t *testing.T,
 	viewer *servertest.TestClient,
@@ -250,7 +250,7 @@ func compareCaptureNetmap(
 		}
 	}
 
-	// Build peer summaries from headscale [tailcfg.MapResponse].
+	// Build peer summaries from headscale MapResponse.
 	gotPeers := map[string]capturePeerSummary{}
 
 	for _, peer := range nm.Peers {
@@ -335,7 +335,7 @@ type capturePeerSummary struct {
 	PrimaryRoutes []string
 }
 
-// captureNodeOrder returns node names from a [testcapture.Capture]
+// captureNodeOrder returns node names from a testcapture.Capture
 // sorted by SaaS node creation time, for deterministic DB ID assignment.
 // SaaS elects HA primaries by registration order (first registered wins),
 // which correlates with Created timestamp, not with the random snowflake
@@ -377,7 +377,7 @@ func captureNodeOrder(t *testing.T, c *testcapture.Capture) []string {
 	return names
 }
 
-// convertCapturePolicy converts a [testcapture.Capture]'s policy for headscale,
+// convertCapturePolicy converts a testcapture's policy for headscale,
 // replacing SaaS emails with headscale user format. Fails the test if
 // none of the known SaaS emails are present: that would mean the
 // capture was regenerated with a new tag-owner identity and this
diff --git a/hscontrol/state/auth_nodekey_binding_test.go b/hscontrol/state/auth_nodekey_binding_test.go
deleted file mode 100644
index 8f826df7c..000000000
--- a/hscontrol/state/auth_nodekey_binding_test.go
+++ /dev/null
@@ -1,74 +0,0 @@
-package state
-
-import (
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-// TestPreAuthKeyReauthRejectsVictimNodeKey ensures the PAK re-registration
-// rotation path enforces the same 1:1 NodeKey<->MachineKey binding the other
-// registration paths do. NodeKeys are public (peers learn them from the
-// netmap), so an authenticated attacker must not be able to rotate their own
-// node's NodeKey onto a victim's NodeKey: doing so poisons the NodeStore
-// NodeKey index and denies the victim service.
-func TestPreAuthKeyReauthRejectsVictimNodeKey(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	// Attacker owns N_a under U_a with machine key M_a.
-	attacker := database.CreateUserForTest("attacker")
-	attackerNode := database.CreateRegisteredNodeForTest(attacker, "attacker-node")
-	attackerMachineKey := attackerNode.MachineKey
-
-	// Victim owns N_v under U_v with a distinct, public NodeKey K_v.
-	victim := database.CreateUserForTest("victim")
-	victimNode := database.CreateRegisteredNodeForTest(victim, "victim-node")
-	victimNodeKey := victimNode.NodeKey
-
-	require.NotEqual(t, attackerNode.NodeKey, victimNodeKey,
-		"precondition: attacker and victim must have distinct NodeKeys")
-	require.NotEqual(t, attackerNode.MachineKey, victimNode.MachineKey,
-		"precondition: attacker and victim must have distinct MachineKeys")
-
-	require.NoError(t, database.Close())
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	// Attacker mints their own valid pre-auth key for their own user.
-	attackerUserID := types.UserID(attacker.ID)
-	pak, err := s.CreatePreAuthKey(&attackerUserID, true, false, nil, nil)
-	require.NoError(t, err)
-
-	// Attacker re-registers over their own noise session (machine key M_a)
-	// with a valid PAK but carries the victim's NodeKey K_v and a non-past
-	// expiry (skipping the logout-first branch).
-	clientExpiry := time.Now().Add(180 * 24 * time.Hour)
-	regReq := tailcfg.RegisterRequest{
-		Auth:    &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey: victimNodeKey,
-		Expiry:  clientExpiry,
-		Hostinfo: &tailcfg.Hostinfo{
-			Hostname: "attacker-node",
-		},
-	}
-
-	_, _, err = s.HandleNodeFromPreAuthKey(regReq, attackerMachineKey)
-	require.ErrorIs(t, err, ErrNodeKeyInUse,
-		"attacker must not be able to claim the victim's NodeKey via PAK re-registration")
-
-	// The victim's NodeKey index must still resolve to the victim's node.
-	resolved, ok := s.nodeStore.GetNodeByNodeKey(victimNodeKey)
-	require.True(t, ok, "victim NodeKey must still be present in the index")
-	require.Equal(t, victimNode.MachineKey, resolved.MachineKey(),
-		"victim NodeKey must remain bound to the victim's MachineKey")
-}
diff --git a/hscontrol/state/auth_tagged_expiry_test.go b/hscontrol/state/auth_tagged_expiry_test.go
deleted file mode 100644
index 4eef8fee7..000000000
--- a/hscontrol/state/auth_tagged_expiry_test.go
+++ /dev/null
@@ -1,480 +0,0 @@
-package state
-
-import (
-	"fmt"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
-)
-
-// TestTaggedReauthKeepsNilExpiry ensures that when an existing tagged node
-// re-authenticates through the auth path and re-advertises a tag it is still
-// permitted to hold, it stays tagged AND keeps key-expiry disabled (nil).
-// Tagged nodes never expire, so applyAuthNodeUpdate must not assign an expiry
-// to a node that remains tagged just because the auth used the
-// convert-from-tag lookup path.
-func TestTaggedReauthKeepsNilExpiry(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user := database.CreateUserForTest("reauth-user")
-	node := database.CreateRegisteredNodeForTest(user, "reauth-node")
-	machineKey := node.MachineKey
-	nodeID := node.ID
-	nodeKey := node.NodeKey
-	discoKey := node.DiscoKey
-
-	require.NoError(t, database.Close())
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	// Make the node tagged with tag:foo and Expiry=nil. Leaving UserID nil
-	// indexes it under userID 0 so the same-user machine-key lookup misses and
-	// HandleNodeFromAuthPath takes the convert-from-tag branch. The User field
-	// is retained for created-by tracking, which lets the tag re-advertisement
-	// be permitted.
-	seeded, ok := s.nodeStore.UpdateNode(nodeID, func(n *types.Node) {
-		n.Tags = []string{"tag:foo"}
-		n.UserID = nil
-		n.User = user
-		n.Expiry = nil
-	})
-	require.True(t, ok)
-	require.True(t, seeded.IsTagged(), "precondition: node must be tagged")
-	require.True(t, seeded.Valid())
-
-	policy := fmt.Sprintf(`{"tagOwners":{"tag:foo":["%s@"]}}`, user.Name)
-	_, err = s.SetPolicy([]byte(policy))
-	require.NoError(t, err)
-	require.True(t, s.NodeCanHaveTag(seeded, "tag:foo"),
-		"precondition: tagged node must be permitted to re-advertise tag:foo")
-
-	// Registration that re-advertises tag:foo and carries a non-nil client
-	// expiry (the normal tailscale client case).
-	clientExpiry := time.Now().Add(180 * 24 * time.Hour)
-	regData := &types.RegistrationData{
-		MachineKey: machineKey,
-		NodeKey:    nodeKey,
-		DiscoKey:   discoKey,
-		Hostname:   "reauth-node",
-		Hostinfo: &tailcfg.Hostinfo{
-			Hostname:    "reauth-node",
-			RequestTags: []string{"tag:foo"},
-		},
-		Expiry: &clientExpiry,
-	}
-
-	authID := types.MustAuthID()
-	s.SetAuthCacheEntry(authID, types.NewRegisterAuthRequest(regData))
-
-	finalNode, _, err := s.HandleNodeFromAuthPath(
-		authID,
-		types.UserID(user.ID),
-		nil,
-		util.RegisterMethodOIDC,
-	)
-	require.NoError(t, err)
-	require.True(t, finalNode.Valid())
-
-	require.True(t, finalNode.IsTagged(),
-		"node should remain tagged after re-advertising a permitted tag")
-
-	require.Nil(t, finalNode.AsStruct().Expiry,
-		"tagged node must keep nil key expiry (tagged nodes never expire)")
-}
-
-// TestTaggedReauthWithReusedUserPAK reproduces issue #3312: a containerized
-// node registered with a user-owned one-shot pre-auth key, then converted to a
-// tagged node (UserID cleared to NULL), is logged out when the container
-// restarts and re-registers with the SAME, now-used TS_AUTHKEY.
-//
-// Root cause: findExistingNodeForPAK (state.go) looks the node up by the PAK's
-// owning user (alice). After tagging, the node is indexed under UserID(0), so
-// the same-user machine-key lookup misses, the re-registration fast-path is
-// skipped, and the already-used one-shot PAK is re-validated and rejected with
-// "authkey already used" — logging the node out.
-//
-// https://github.com/juanfont/headscale/issues/3312
-func TestTaggedReauthWithReusedUserPAK(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	user := s.CreateUserForTest("authkey-user")
-
-	policy := fmt.Sprintf(`{"tagOwners":{"tag:foo":["%s@"]}}`, user.Name)
-	_, err = s.SetPolicy([]byte(policy))
-	require.NoError(t, err)
-
-	// One-shot, user-owned PAK: `headscale preauthkeys create -u 1`.
-	pak, err := s.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
-	require.NoError(t, err)
-
-	machineKey := key.NewMachine()
-	nodeKey := key.NewNode()
-
-	regReq := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey:  nodeKey.Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "authkey-node"},
-		Expiry:   time.Now().Add(24 * time.Hour),
-	}
-
-	// First registration: node joins as alice, the one-shot PAK is consumed.
-	first, _, err := s.HandleNodeFromPreAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err)
-	require.True(t, first.Valid())
-	nodeID := first.ID()
-
-	// `headscale nodes tag -t tag:foo`: convert to a tagged node. This clears
-	// both UserID and User (state.SetNodeTags), diverging the node's ownership
-	// from the still-user-owned PAK.
-	tagged, _, err := s.SetNodeTags(nodeID, []string{"tag:foo"})
-	require.NoError(t, err)
-	require.True(t, tagged.IsTagged(), "precondition: node must be tagged")
-
-	// Container restart: the same node re-registers with the SAME, now-used
-	// one-shot TS_AUTHKEY. The machine key proves identity, so this must
-	// succeed. It currently fails with "authkey already used".
-	second, _, err := s.HandleNodeFromPreAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err,
-		"re-registration with a reused user PAK on a tagged node must not be rejected")
-	require.True(t, second.Valid())
-	require.True(t, second.IsTagged(), "node must remain tagged after re-registration")
-	require.Equal(t, nodeID, second.ID(),
-		"must update the existing node, not create a new one")
-}
-
-// reregisterExpiredUserNodeWithSpentKey registers a user-owned node with a
-// one-shot key, forces it into the expired state, and re-registers with the
-// same spent key. sameNodeKey distinguishes the two re-auth shapes:
-//   - false: the node rotates its node key (normal tailscale client on re-auth)
-//   - true:  the node reuses its node key
-//
-// In both cases an expired node is genuinely re-authenticating and must present
-// a valid key; a spent one-shot key must be rejected.
-func reregisterExpiredUserNodeWithSpentKey(t *testing.T, sameNodeKey bool) (types.NodeView, error) {
-	t.Helper()
-
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	user := s.CreateUserForTest("expired-user")
-
-	pak, err := s.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
-	require.NoError(t, err)
-
-	machineKey := key.NewMachine()
-	nodeKey := key.NewNode()
-
-	regReq := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey:  nodeKey.Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "expired-node"},
-		Expiry:   time.Now().Add(24 * time.Hour),
-	}
-
-	first, _, err := s.HandleNodeFromPreAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err)
-	require.True(t, first.Valid())
-	require.False(t, first.IsTagged(), "precondition: node must be user-owned")
-
-	// Force the node into the expired state.
-	past := time.Now().Add(-1 * time.Hour)
-	_, ok := s.nodeStore.UpdateNode(first.ID(), func(n *types.Node) {
-		n.Expiry = &past
-	})
-	require.True(t, ok)
-
-	reReg := regReq
-	if !sameNodeKey {
-		reReg.NodeKey = key.NewNode().Public()
-	}
-
-	node, _, err := s.HandleNodeFromPreAuthKey(reReg, machineKey.Public())
-
-	return node, err
-}
-
-// TestExpiredUserNodeReusedOneShotKey_RotatedNodeKey: a node rotating its node
-// key on re-auth is already a key rotation, so the key is re-validated.
-func TestExpiredUserNodeReusedOneShotKey_RotatedNodeKey(t *testing.T) {
-	_, err := reregisterExpiredUserNodeWithSpentKey(t, false)
-	require.Error(t, err,
-		"expired node re-authenticating with a rotated node key must present a valid key")
-	require.Contains(t, err.Error(), "authkey already used")
-}
-
-// TestExpiredUserNodeReusedOneShotKey_SameNodeKey: the security boundary must
-// not depend on the client rotating its node key. An expired node re-using its
-// node key must still re-validate the key, otherwise a spent one-shot key
-// silently re-authorises it.
-func TestExpiredUserNodeReusedOneShotKey_SameNodeKey(t *testing.T) {
-	_, err := reregisterExpiredUserNodeWithSpentKey(t, true)
-	require.Error(t, err,
-		"expired node re-registering with the same node key must re-validate its key")
-	require.Contains(t, err.Error(), "authkey already used")
-}
-
-// TestReusableUserPAKReauthOnTaggedNodeNoDuplicate guards against a reusable
-// user pre-auth key creating a second node when it is re-presented for a node
-// that has since been converted to tagged. The node must be updated in place.
-func TestReusableUserPAKReauthOnTaggedNodeNoDuplicate(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	user := s.CreateUserForTest("reusable-user")
-
-	policy := fmt.Sprintf(`{"tagOwners":{"tag:foo":["%s@"]}}`, user.Name)
-	_, err = s.SetPolicy([]byte(policy))
-	require.NoError(t, err)
-
-	pak, err := s.CreatePreAuthKey(user.TypedID(), true, false, nil, nil)
-	require.NoError(t, err)
-
-	machineKey := key.NewMachine()
-	regReq := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey:  key.NewNode().Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "reusable-node"},
-		Expiry:   time.Now().Add(24 * time.Hour),
-	}
-
-	first, _, err := s.HandleNodeFromPreAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err)
-
-	_, _, err = s.SetNodeTags(first.ID(), []string{"tag:foo"})
-	require.NoError(t, err)
-
-	second, _, err := s.HandleNodeFromPreAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err)
-	require.True(t, second.IsTagged())
-	require.Equal(t, first.ID(), second.ID(), "must update in place, not duplicate")
-	require.Equal(t, 1, s.ListNodes().Len(), "machine must map to exactly one node")
-}
-
-// TestTaggedPAKReauthConvertsUserOwnedNode ensures presenting a tagged pre-auth
-// key for a machine that already has a user-owned node converts that node in
-// place (same machine, new ownership) rather than creating a duplicate.
-func TestTaggedPAKReauthConvertsUserOwnedNode(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	user := s.CreateUserForTest("owner")
-
-	userPak, err := s.CreatePreAuthKey(user.TypedID(), true, false, nil, nil)
-	require.NoError(t, err)
-
-	machineKey := key.NewMachine()
-	nodeKey := key.NewNode()
-	regReq := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: userPak.Key},
-		NodeKey:  nodeKey.Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "owned-node"},
-		Expiry:   time.Now().Add(24 * time.Hour),
-	}
-
-	owned, _, err := s.HandleNodeFromPreAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err)
-	require.False(t, owned.IsTagged(), "precondition: node is user-owned")
-
-	// A tags-only key re-registers the same machine (same node key).
-	taggedPak, err := s.CreatePreAuthKey(nil, true, false, nil, []string{"tag:foo"})
-	require.NoError(t, err)
-
-	convReq := regReq
-	convReq.Auth = &tailcfg.RegisterResponseAuth{AuthKey: taggedPak.Key}
-
-	converted, _, err := s.HandleNodeFromPreAuthKey(convReq, machineKey.Public())
-	require.NoError(t, err)
-	require.Equal(t, owned.ID(), converted.ID(), "must convert in place, not duplicate")
-	require.True(t, converted.IsTagged(), "node must become tagged")
-	require.Equal(t, []string{"tag:foo"}, converted.Tags().AsSlice())
-	require.Equal(t, 1, s.ListNodes().Len(), "machine must map to exactly one node")
-}
-
-// registerTwoUsersOnOneMachine registers two user-owned nodes that share a
-// machine key (the "create new, do not transfer" multi-user device state) and
-// returns the State and the shared machine key.
-func registerTwoUsersOnOneMachine(t *testing.T) (*State, key.MachinePublic, types.NodeID) {
-	t.Helper()
-
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	u1 := s.CreateUserForTest("u1")
-	u2 := s.CreateUserForTest("u2")
-	mk := key.NewMachine()
-
-	reg := func(pakUser *types.User) types.NodeView {
-		pak, err := s.CreatePreAuthKey(pakUser.TypedID(), true, false, nil, nil)
-		require.NoError(t, err)
-		n, _, err := s.HandleNodeFromPreAuthKey(tailcfg.RegisterRequest{
-			Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-			NodeKey:  key.NewNode().Public(),
-			Hostinfo: &tailcfg.Hostinfo{Hostname: "multi"},
-			Expiry:   time.Now().Add(24 * time.Hour),
-		}, mk.Public())
-		require.NoError(t, err)
-
-		return n
-	}
-
-	n1 := reg(u1)
-	n2 := reg(u2)
-	require.NotEqual(t, n1.ID(), n2.ID(), "precondition: two distinct nodes share the machine key")
-	require.Equal(t, 2, s.ListNodes().Len())
-
-	return s, mk.Public(), n1.ID()
-}
-
-// TestTaggedPAKReauthRejectsAmbiguousMultiUserNode: a tagged pre-auth key on a
-// machine that has more than one user-owned node cannot know which to convert,
-// so the registration is rejected rather than converting an arbitrary one and
-// orphaning the rest.
-func TestTaggedPAKReauthRejectsAmbiguousMultiUserNode(t *testing.T) {
-	s, mk, _ := registerTwoUsersOnOneMachine(t)
-
-	taggedPak, err := s.CreatePreAuthKey(nil, true, false, nil, []string{"tag:foo"})
-	require.NoError(t, err)
-
-	_, _, err = s.HandleNodeFromPreAuthKey(tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: taggedPak.Key},
-		NodeKey:  key.NewNode().Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "multi"},
-		Expiry:   time.Now().Add(24 * time.Hour),
-	}, mk)
-	require.ErrorIs(t, err, ErrAmbiguousNodeOwnership)
-	require.Equal(t, 2, s.ListNodes().Len(), "no node created or converted on rejection")
-}
-
-// TestAuthPathRejectsTaggedAndUserCoexistence: if a machine key ends up with
-// both a tagged node and a user-owned node (impossible per validateNodeOwnership,
-// but reachable by tagging one node of a multi-user device via the admin path),
-// an OIDC re-auth must reject rather than silently converting the tagged node
-// and orphaning the user-owned one.
-func TestAuthPathRejectsTaggedAndUserCoexistence(t *testing.T) {
-	s, mk, n1 := registerTwoUsersOnOneMachine(t)
-
-	// Tag one of the two user-owned nodes -> {0: tagged, u2: user-owned} coexist.
-	_, err := s.SetPolicy([]byte(`{"tagOwners":{"tag:foo":["u1@"]}}`))
-	require.NoError(t, err)
-	tagged, _, err := s.SetNodeTags(n1, []string{"tag:foo"})
-	require.NoError(t, err)
-	require.True(t, tagged.IsTagged())
-
-	// A third user authenticates the same machine via OIDC.
-	u3 := s.CreateUserForTest("u3")
-	regData := &types.RegistrationData{
-		MachineKey: mk,
-		NodeKey:    key.NewNode().Public(),
-		Hostname:   "multi",
-		Hostinfo:   &tailcfg.Hostinfo{Hostname: "multi"},
-	}
-	authID := types.MustAuthID()
-	s.SetAuthCacheEntry(authID, types.NewRegisterAuthRequest(regData))
-
-	_, _, err = s.HandleNodeFromAuthPath(authID, types.UserID(u3.ID), nil, util.RegisterMethodOIDC)
-	require.ErrorIs(t, err, ErrAmbiguousNodeOwnership)
-}
-
-// TestTaggedNodeCanHaveKeyExpiry matches Tailscale: a tagged node has key
-// expiry disabled by default, but it can still be set explicitly (e.g. via
-// `headscale nodes expire`).
-func TestTaggedNodeCanHaveKeyExpiry(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	_, err = s.SetPolicy([]byte(`{"tagOwners":{"tag:foo":["tagger@"]}}`))
-	require.NoError(t, err)
-
-	pak, err := s.CreatePreAuthKey(nil, true, false, nil, []string{"tag:foo"})
-	require.NoError(t, err)
-
-	regReq := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey:  key.NewNode().Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "tagged-node"},
-	}
-	node, _, err := s.HandleNodeFromPreAuthKey(regReq, key.NewMachine().Public())
-	require.NoError(t, err)
-	require.True(t, node.IsTagged())
-	require.Nil(t, node.AsStruct().Expiry, "key expiry is disabled by default for tagged nodes")
-
-	expiry := time.Now().Add(24 * time.Hour)
-	after, _, err := s.SetNodeExpiry(node.ID(), &expiry)
-	require.NoError(t, err)
-	require.True(t, after.IsTagged(), "node stays tagged")
-	require.NotNil(t, after.AsStruct().Expiry, "expiry can be set on a tagged node")
-	require.Equal(t, expiry.Unix(), after.AsStruct().Expiry.Unix())
-}
-
-// TestTaggingPreservesNodeExpiry matches Tailscale: changing a node's tags does
-// not alter its key expiry (expiry only changes on re-authentication).
-func TestTaggingPreservesNodeExpiry(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	user := s.CreateUserForTest("owner")
-
-	_, err = s.SetPolicy(fmt.Appendf(nil, `{"tagOwners":{"tag:foo":["%s@"]}}`, user.Name))
-	require.NoError(t, err)
-
-	pak, err := s.CreatePreAuthKey(user.TypedID(), false, false, nil, nil)
-	require.NoError(t, err)
-
-	expiry := time.Now().Add(24 * time.Hour)
-	regReq := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey:  key.NewNode().Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "owned-node"},
-		Expiry:   expiry,
-	}
-	node, _, err := s.HandleNodeFromPreAuthKey(regReq, key.NewMachine().Public())
-	require.NoError(t, err)
-	require.NotNil(t, node.AsStruct().Expiry, "precondition: user node has an expiry")
-
-	tagged, _, err := s.SetNodeTags(node.ID(), []string{"tag:foo"})
-	require.NoError(t, err)
-	require.True(t, tagged.IsTagged())
-	require.NotNil(t, tagged.AsStruct().Expiry, "tag change must not clear expiry")
-	require.Equal(t, expiry.Unix(), tagged.AsStruct().Expiry.Unix())
-}
diff --git a/hscontrol/state/autoapprove_test.go b/hscontrol/state/autoapprove_test.go
deleted file mode 100644
index 444a04764..000000000
--- a/hscontrol/state/autoapprove_test.go
+++ /dev/null
@@ -1,42 +0,0 @@
-package state
-
-import (
-	"net/netip"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-// TestAutoApproveBatchApprovesRoutes verifies the batched autoApproveNodes still
-// approves a node's advertised route when policy auto-approvers permit it. The
-// batching collapses the per-node SetApprovedRoutes calls into one NodeStore
-// update and one policy rebuild; this guards that correctness is preserved.
-func TestAutoApproveBatchApprovesRoutes(t *testing.T) {
-	_, s, nodeID := persistTestSetup(t)
-	t.Cleanup(func() { _ = s.Close() })
-
-	route := netip.MustParsePrefix("10.0.0.0/24")
-
-	_, ok := s.nodeStore.UpdateNode(nodeID, func(n *types.Node) {
-		n.Hostinfo = &tailcfg.Hostinfo{RoutableIPs: []netip.Prefix{route}}
-	})
-	require.True(t, ok)
-
-	pol := `{
-		"autoApprovers": {"routes": {"10.0.0.0/24": ["persist-user@"]}},
-		"acls": [{"action": "accept", "src": ["*"], "dst": ["*:*"]}]
-	}`
-	_, err := s.SetPolicy([]byte(pol))
-	require.NoError(t, err)
-
-	_, err = s.ReloadPolicy()
-	require.NoError(t, err)
-
-	nv, ok := s.GetNodeByID(nodeID)
-	require.True(t, ok)
-	assert.Contains(t, nv.ApprovedRoutes().AsSlice(), route,
-		"auto-approver should have approved the advertised route")
-}
diff --git a/hscontrol/state/connect_test.go b/hscontrol/state/connect_test.go
deleted file mode 100644
index be73b5f26..000000000
--- a/hscontrol/state/connect_test.go
+++ /dev/null
@@ -1,279 +0,0 @@
-package state
-
-import (
-	"net/netip"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/types/change"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-// runtimePeerComputationReasons returns the Reason of every change in cs that
-// carries RequiresRuntimePeerComputation. Each such change makes the batcher
-// rebuild a full netmap (packet filters, SSH policy, peer serialization) for
-// every connected node, so it is the expensive fan-out the issue is about.
-func runtimePeerComputationReasons(cs []change.Change) []string {
-	var reasons []string
-
-	for _, c := range cs {
-		if c.RequiresRuntimePeerComputation {
-			reasons = append(reasons, c.Reason)
-		}
-	}
-
-	return reasons
-}
-
-// hasPeerPatch reports whether any change carries a lightweight PeerChange
-// patch (e.g. the online/offline indicator). This is the cheap notification a
-// reconnect should produce instead of a full runtime recompute.
-func hasPeerPatch(cs []change.Change) bool {
-	for _, c := range cs {
-		if len(c.PeerPatches) > 0 {
-			return true
-		}
-	}
-
-	return false
-}
-
-// forcesPeerRecompute reports whether any change makes peers rebuild a full
-// netmap, whether via a full update (subnet-router path) or a runtime peer
-// computation (relay/via path).
-func forcesPeerRecompute(cs []change.Change) bool {
-	for _, c := range cs {
-		if c.IsFull() || c.RequiresRuntimePeerComputation {
-			return true
-		}
-	}
-
-	return false
-}
-
-// TestConnectDisconnectOrdinaryNodeNoRuntimeRecompute asserts that an ordinary
-// node coming online or going offline only sends the lightweight online/offline
-// peer patch and does not trigger a runtime peer recompute.
-//
-// State.Connect and State.Disconnect gate change.PolicyChange() (which sets
-// RequiresRuntimePeerComputation, forcing the batcher to rebuild a full netmap
-// for every connected node) on NodeNeedsPeerRecompute. An ordinary node is
-// neither a subnet router, a relay target, nor a via target, so the gate is
-// false and no recompute is emitted.
-//
-// Emitting that recompute unconditionally turned each reconnect into O(N) full
-// netmap rebuilds (and a reconnect storm into O(N^2)), which saturated CPU
-// after the v0.28 -> v0.29 upgrade.
-func TestConnectDisconnectOrdinaryNodeNoRuntimeRecompute(t *testing.T) {
-	_, s, nodeID := persistTestSetup(t)
-	t.Cleanup(func() { _ = s.Close() })
-
-	t.Run("connect", func(t *testing.T) {
-		cs, epoch := s.Connect(nodeID)
-		require.NotZero(t, epoch, "Connect should return a session epoch")
-
-		assert.True(t, hasPeerPatch(cs),
-			"Connect should still emit a lightweight online peer patch")
-
-		reasons := runtimePeerComputationReasons(cs)
-		assert.Empty(t, reasons,
-			"ordinary node connect must not trigger a runtime peer recompute; "+
-				"got RequiresRuntimePeerComputation changes: %v", reasons)
-	})
-
-	t.Run("disconnect", func(t *testing.T) {
-		// Connect acquired a session in the connect subtest too; drain to the
-		// last release, which is the one that marks the node offline.
-		_, epoch := s.Connect(nodeID)
-		cs := drainSessions(t, s, nodeID, epoch)
-
-		assert.True(t, hasPeerPatch(cs),
-			"Disconnect should still emit a lightweight offline peer patch")
-
-		reasons := runtimePeerComputationReasons(cs)
-		assert.Empty(t, reasons,
-			"ordinary node disconnect must not trigger a runtime peer recompute; "+
-				"got RequiresRuntimePeerComputation changes: %v", reasons)
-	})
-}
-
-// TestConnectDisconnectRelayTargetTriggersRecompute locks the cap/relay case:
-// a relay target is not a subnet router, so the only thing that makes its
-// connect/disconnect emit a runtime peer recompute is the
-// NodeNeedsPeerRecompute gate. Peers must still receive that recompute so they
-// drop a stale PeerRelay allocation when the relay goes offline.
-func TestConnectDisconnectRelayTargetTriggersRecompute(t *testing.T) {
-	_, s, nodeID := persistTestSetup(t)
-	t.Cleanup(func() { _ = s.Close() })
-
-	// A cap/relay grant whose destination resolves to the node's owning
-	// user makes the node a relay target without making it a subnet router.
-	relayPolicy := `{"grants":[{"src":["*"],"dst":["persist-user@"],"app":{"tailscale.com/cap/relay":[{}]}}]}`
-	_, err := s.SetPolicy([]byte(relayPolicy))
-	require.NoError(t, err)
-
-	t.Run("connect", func(t *testing.T) {
-		cs, epoch := s.Connect(nodeID)
-		require.NotZero(t, epoch)
-
-		assert.NotEmpty(t, runtimePeerComputationReasons(cs),
-			"relay-target node connect must trigger a runtime peer recompute")
-	})
-
-	t.Run("disconnect", func(t *testing.T) {
-		_, epoch := s.Connect(nodeID)
-		cs := drainSessions(t, s, nodeID, epoch)
-
-		assert.NotEmpty(t, runtimePeerComputationReasons(cs),
-			"relay-target node disconnect must trigger a runtime peer recompute")
-	})
-}
-
-// TestConnectDisconnectSubnetRouterForcesRecompute guards that a subnet router
-// still forces peers to recompute on connect/disconnect (primary-route
-// failover changes their AllowedIPs), so the gate does not over-suppress.
-func TestConnectDisconnectSubnetRouterForcesRecompute(t *testing.T) {
-	_, s, nodeID := persistTestSetup(t)
-	t.Cleanup(func() { _ = s.Close() })
-
-	route := netip.MustParsePrefix("10.0.0.0/24")
-	_, ok := s.nodeStore.UpdateNode(nodeID, func(n *types.Node) {
-		n.Hostinfo = &tailcfg.Hostinfo{RoutableIPs: []netip.Prefix{route}}
-		n.ApprovedRoutes = []netip.Prefix{route}
-	})
-	require.True(t, ok)
-
-	t.Run("connect", func(t *testing.T) {
-		cs, epoch := s.Connect(nodeID)
-		require.NotZero(t, epoch)
-
-		assert.True(t, forcesPeerRecompute(cs),
-			"subnet router connect must force a peer recompute")
-	})
-
-	t.Run("disconnect", func(t *testing.T) {
-		_, epoch := s.Connect(nodeID)
-		cs := drainSessions(t, s, nodeID, epoch)
-
-		assert.True(t, forcesPeerRecompute(cs),
-			"subnet router disconnect must force a peer recompute")
-	})
-}
-
-// TestConnectDisconnectSubnetRouterEmitsPolicyChangeNotFull pins how a subnet
-// router forces that recompute: through the gated change.PolicyChange() (a
-// runtime peer recompute) and the lightweight online/offline peer patch, not a
-// full update. policyChangeResponse is a strict subset of a full update yet
-// still carries primary-route failover, so the heavier FullUpdate that the
-// online/offline change once emitted for subnet routers is unnecessary.
-func TestConnectDisconnectSubnetRouterEmitsPolicyChangeNotFull(t *testing.T) {
-	_, s, nodeID := persistTestSetup(t)
-	t.Cleanup(func() { _ = s.Close() })
-
-	route := netip.MustParsePrefix("10.0.0.0/24")
-	_, ok := s.nodeStore.UpdateNode(nodeID, func(n *types.Node) {
-		n.Hostinfo = &tailcfg.Hostinfo{RoutableIPs: []netip.Prefix{route}}
-		n.ApprovedRoutes = []netip.Prefix{route}
-	})
-	require.True(t, ok)
-
-	assertRecomputeNotFull := func(t *testing.T, cs []change.Change) {
-		t.Helper()
-
-		assert.NotEmpty(t, runtimePeerComputationReasons(cs),
-			"subnet router must still drive a runtime peer recompute")
-		assert.True(t, hasPeerPatch(cs),
-			"subnet router should still emit the lightweight online/offline patch")
-
-		for _, c := range cs {
-			assert.Falsef(t, c.IsFull(),
-				"subnet router recompute must be a PolicyChange, not a full update: %q", c.Reason)
-		}
-	}
-
-	t.Run("connect", func(t *testing.T) {
-		cs, epoch := s.Connect(nodeID)
-		require.NotZero(t, epoch)
-
-		assertRecomputeNotFull(t, cs)
-	})
-
-	t.Run("disconnect", func(t *testing.T) {
-		_, epoch := s.Connect(nodeID)
-		cs := drainSessions(t, s, nodeID, epoch)
-
-		assertRecomputeNotFull(t, cs)
-	})
-}
-
-// drainSessions releases poll sessions on nodeID until the node goes
-// offline, returning the changes from the final release (the one that
-// emits the offline notifications). Fails the test if the node is
-// still online after releasing as many sessions as Connect calls could
-// plausibly have acquired.
-func drainSessions(t *testing.T, s *State, nodeID types.NodeID, epoch uint64) []change.Change {
-	t.Helper()
-
-	// Arbitrary upper bound: comfortably above the number of Connect
-	// calls any test here makes. It only guards against looping
-	// forever when the node never goes offline.
-	const maxSessions = 16
-
-	for range maxSessions {
-		cs, err := s.Disconnect(nodeID, epoch)
-		require.NoError(t, err)
-
-		if len(cs) > 0 {
-			return cs
-		}
-	}
-
-	t.Fatalf("node %d still online after releasing %d sessions", nodeID, maxSessions)
-
-	return nil
-}
-
-// TestDisconnectOutOfOrderSessionsCannotStrandNodeOnline reproduces the
-// server side of the relogin flake at the state level: a cancelled map
-// request whose handler runs late acquires a session (and the newest
-// epoch) after the real session's Connect, then releases without taking
-// the node offline because the real session is still live. The real
-// session's release — carrying the older epoch — must still take the
-// node offline. Under the old epoch-equality gate it was rejected as
-// stale and the node stayed online forever.
-func TestDisconnectOutOfOrderSessionsCannotStrandNodeOnline(t *testing.T) {
-	_, s, nodeID := persistTestSetup(t)
-	t.Cleanup(func() { _ = s.Close() })
-
-	_, liveGen := s.Connect(nodeID)
-	_, zombieGen := s.Connect(nodeID)
-	require.Greater(t, zombieGen, liveGen, "late session must hold the newer epoch")
-
-	// The zombie session dies first; another session is live, so the node
-	// must stay online and no offline changes may be emitted.
-	cs, err := s.Disconnect(nodeID, zombieGen)
-	require.NoError(t, err)
-	assert.Empty(t, cs, "release with another live session must not emit changes")
-
-	nv, ok := s.GetNodeByID(nodeID)
-	require.True(t, ok)
-
-	online, known := nv.IsOnline().GetOk()
-	require.True(t, known)
-	assert.True(t, online, "node must stay online while the real session lives")
-
-	// The real session releases last, with the older epoch. This must take
-	// the node offline.
-	cs, err = s.Disconnect(nodeID, liveGen)
-	require.NoError(t, err)
-	assert.True(t, hasPeerPatch(cs), "final release must emit the offline peer patch")
-
-	nv, ok = s.GetNodeByID(nodeID)
-	require.True(t, ok)
-
-	online, known = nv.IsOnline().GetOk()
-	require.True(t, known)
-	assert.False(t, online, "node must be offline after its last session is released")
-}
diff --git a/hscontrol/state/debug.go b/hscontrol/state/debug.go
index 91a9c4493..623bb8606 100644
--- a/hscontrol/state/debug.go
+++ b/hscontrol/state/debug.go
@@ -62,23 +62,51 @@ type DebugStringInfo struct {
 
 // DebugOverview returns a comprehensive overview of the current state for debugging.
 func (s *State) DebugOverview() string {
-	info := s.DebugOverviewJSON()
+	allNodes := s.nodeStore.ListNodes()
+	users, _ := s.ListAllUsers()
 
 	var sb strings.Builder
 
 	sb.WriteString("=== Headscale State Overview ===\n\n")
 
 	// Node statistics
-	fmt.Fprintf(&sb, "Nodes: %d total\n", info.Nodes.Total)
-	fmt.Fprintf(&sb, "  - Online: %d\n", info.Nodes.Online)
-	fmt.Fprintf(&sb, "  - Expired: %d\n", info.Nodes.Expired)
-	fmt.Fprintf(&sb, "  - Ephemeral: %d\n", info.Nodes.Ephemeral)
+	fmt.Fprintf(&sb, "Nodes: %d total\n", allNodes.Len())
+
+	userNodeCounts := make(map[string]int)
+	onlineCount := 0
+	expiredCount := 0
+	ephemeralCount := 0
+
+	now := time.Now()
+
+	for _, node := range allNodes.All() {
+		if node.Valid() {
+			userName := node.Owner().Name()
+			userNodeCounts[userName]++
+
+			if node.IsOnline().Valid() && node.IsOnline().Get() {
+				onlineCount++
+			}
+
+			if node.Expiry().Valid() && node.Expiry().Get().Before(now) {
+				expiredCount++
+			}
+
+			if node.AuthKey().Valid() && node.AuthKey().Ephemeral() {
+				ephemeralCount++
+			}
+		}
+	}
+
+	fmt.Fprintf(&sb, "  - Online: %d\n", onlineCount)
+	fmt.Fprintf(&sb, "  - Expired: %d\n", expiredCount)
+	fmt.Fprintf(&sb, "  - Ephemeral: %d\n", ephemeralCount)
 	sb.WriteString("\n")
 
 	// User statistics
-	fmt.Fprintf(&sb, "Users: %d total\n", info.TotalUsers)
+	fmt.Fprintf(&sb, "Users: %d total\n", len(users))
 
-	for userName, nodeCount := range info.Users {
+	for userName, nodeCount := range userNodeCounts {
 		fmt.Fprintf(&sb, "  - %s: %d nodes\n", userName, nodeCount)
 	}
 
@@ -86,17 +114,18 @@ func (s *State) DebugOverview() string {
 
 	// Policy information
 	sb.WriteString("Policy:\n")
-	fmt.Fprintf(&sb, "  - Mode: %s\n", info.Policy.Mode)
+	fmt.Fprintf(&sb, "  - Mode: %s\n", s.cfg.Policy.Mode)
 
-	if info.Policy.Mode == string(types.PolicyModeFile) {
-		fmt.Fprintf(&sb, "  - Path: %s\n", info.Policy.Path)
+	if s.cfg.Policy.Mode == types.PolicyModeFile {
+		fmt.Fprintf(&sb, "  - Path: %s\n", s.cfg.Policy.Path)
 	}
 
 	sb.WriteString("\n")
 
 	// DERP information
-	if info.DERP.Configured {
-		fmt.Fprintf(&sb, "DERP: %d regions configured\n", info.DERP.Regions)
+	derpMap := s.derpMap.Load()
+	if derpMap != nil {
+		fmt.Fprintf(&sb, "DERP: %d regions configured\n", len(derpMap.Regions))
 	} else {
 		sb.WriteString("DERP: not configured\n")
 	}
@@ -104,7 +133,14 @@ func (s *State) DebugOverview() string {
 	sb.WriteString("\n")
 
 	// Route information
-	fmt.Fprintf(&sb, "Primary Routes: %d active\n", info.PrimaryRoutes)
+	primaryStr := s.PrimaryRoutesString()
+
+	routeCount := len(strings.Split(strings.TrimSpace(primaryStr), "\n"))
+	if primaryStr == "" {
+		routeCount = 0
+	}
+
+	fmt.Fprintf(&sb, "Primary Routes: %d active\n", routeCount)
 	sb.WriteString("\n")
 
 	// Registration cache
@@ -114,7 +150,7 @@ func (s *State) DebugOverview() string {
 	return sb.String()
 }
 
-// DebugNodeStore returns debug information about the [NodeStore].
+// DebugNodeStore returns debug information about the NodeStore.
 func (s *State) DebugNodeStore() string {
 	return s.nodeStore.DebugString()
 }
@@ -221,7 +257,7 @@ func (s *State) DebugFilter() ([]tailcfg.FilterRule, error) {
 }
 
 // DebugRoutes returns the current primary routes information as a
-// structured object built from the [NodeStore] snapshot.
+// structured object built from the NodeStore snapshot.
 func (s *State) DebugRoutes() types.DebugRoutes {
 	debug := types.DebugRoutes{
 		AvailableRoutes: make(map[types.NodeID][]netip.Prefix),
@@ -335,7 +371,14 @@ func (s *State) DebugOverviewJSON() DebugOverviewInfo {
 	}
 
 	// Route information
-	info.PrimaryRoutes = len(s.nodeStore.PrimaryRoutes())
+	primaryStr := s.PrimaryRoutesString()
+
+	routeCount := len(strings.Split(strings.TrimSpace(primaryStr), "\n"))
+	if primaryStr == "" {
+		routeCount = 0
+	}
+
+	info.PrimaryRoutes = routeCount
 
 	return info
 }
@@ -378,7 +421,7 @@ func (s *State) DebugDERPJSON() DebugDERPInfo {
 	return info
 }
 
-// DebugNodeStoreJSON returns the actual nodes map from the current [NodeStore] snapshot.
+// DebugNodeStoreJSON returns the actual nodes map from the current NodeStore snapshot.
 func (s *State) DebugNodeStoreJSON() map[types.NodeID]types.Node {
 	snapshot := s.nodeStore.data.Load()
 	return snapshot.nodesByID
diff --git a/hscontrol/state/endpoint_test.go b/hscontrol/state/endpoint_test.go
index 21b83e5b6..b8905ab7b 100644
--- a/hscontrol/state/endpoint_test.go
+++ b/hscontrol/state/endpoint_test.go
@@ -111,88 +111,3 @@ func TestEndpointStorageInNodeStore(t *testing.T) {
 		}
 	}
 }
-
-// TestEndpointBroadcastWorthy verifies the gate that decides whether an
-// endpoint-only delta is worth fanning out to peers as an incremental
-// PeersChangedPatch. A delta that only adds STUN-derived endpoints (or only
-// removes endpoints) is suppressed: it is churny and unlikely to be useful,
-// and disco's callMeMaybe re-derives STUN paths anyway. Only deltas that
-// introduce a genuinely useful (non-STUN) endpoint are broadcast-worthy.
-func TestEndpointBroadcastWorthy(t *testing.T) {
-	local := netip.MustParseAddrPort("192.168.1.5:41641")
-	local2 := netip.MustParseAddrPort("192.168.1.6:41641")
-	stun := netip.MustParseAddrPort("203.0.113.7:41641")
-	stun2 := netip.MustParseAddrPort("203.0.113.8:41641")
-	portmap := netip.MustParseAddrPort("198.51.100.9:41641")
-
-	tests := []struct {
-		name    string
-		stored  []netip.AddrPort
-		newEPs  []netip.AddrPort
-		newType []tailcfg.EndpointType
-		want    bool
-	}{
-		{
-			name:    "adds only a STUN endpoint - suppress",
-			stored:  []netip.AddrPort{local},
-			newEPs:  []netip.AddrPort{local, stun},
-			newType: []tailcfg.EndpointType{tailcfg.EndpointLocal, tailcfg.EndpointSTUN},
-			want:    false,
-		},
-		{
-			name:    "adds only STUN4LocalPort - suppress",
-			stored:  []netip.AddrPort{local},
-			newEPs:  []netip.AddrPort{local, stun},
-			newType: []tailcfg.EndpointType{tailcfg.EndpointLocal, tailcfg.EndpointSTUN4LocalPort},
-			want:    false,
-		},
-		{
-			name:    "adds a useful local endpoint - broadcast",
-			stored:  []netip.AddrPort{stun},
-			newEPs:  []netip.AddrPort{stun, local},
-			newType: []tailcfg.EndpointType{tailcfg.EndpointSTUN, tailcfg.EndpointLocal},
-			want:    true,
-		},
-		{
-			name:    "adds a useful portmapped endpoint - broadcast",
-			stored:  []netip.AddrPort{local},
-			newEPs:  []netip.AddrPort{local, portmap},
-			newType: []tailcfg.EndpointType{tailcfg.EndpointLocal, tailcfg.EndpointPortmapped},
-			want:    true,
-		},
-		{
-			name:    "pure shrink, no additions - suppress",
-			stored:  []netip.AddrPort{local, local2},
-			newEPs:  []netip.AddrPort{local},
-			newType: []tailcfg.EndpointType{tailcfg.EndpointLocal},
-			want:    false,
-		},
-		{
-			name:   "nil types (older client) adding endpoint - broadcast",
-			stored: []netip.AddrPort{local},
-			newEPs: []netip.AddrPort{local, local2},
-			want:   true,
-		},
-		{
-			name:    "only STUN endpoints churn (replace one STUN with another) - suppress",
-			stored:  []netip.AddrPort{local, stun},
-			newEPs:  []netip.AddrPort{local, stun2},
-			newType: []tailcfg.EndpointType{tailcfg.EndpointLocal, tailcfg.EndpointSTUN},
-			want:    false,
-		},
-		{
-			name:    "mixed add: one STUN and one useful - broadcast",
-			stored:  []netip.AddrPort{local},
-			newEPs:  []netip.AddrPort{local, stun, local2},
-			newType: []tailcfg.EndpointType{tailcfg.EndpointLocal, tailcfg.EndpointSTUN, tailcfg.EndpointLocal},
-			want:    true,
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			got := endpointBroadcastWorthy(tt.stored, tt.newEPs, tt.newType)
-			assert.Equal(t, tt.want, got)
-		})
-	}
-}
diff --git a/hscontrol/state/ha_health.go b/hscontrol/state/ha_health.go
index 4e76e9a35..2b3e247fe 100644
--- a/hscontrol/state/ha_health.go
+++ b/hscontrol/state/ha_health.go
@@ -3,13 +3,11 @@ package state
 import (
 	"context"
 	"sync"
-	"sync/atomic"
 	"time"
 
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/types/change"
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
-	"github.com/puzpuzpuz/xsync/v4"
 	"github.com/rs/zerolog/log"
 	"tailscale.com/tailcfg"
 	"tailscale.com/util/set"
@@ -22,14 +20,9 @@ type HAHealthProber struct {
 	cfg         types.HARouteConfig
 	serverURL   string
 	isConnected func(types.NodeID) bool
-
-	// lastStableSession defers a timeout-driven unhealthy decision
-	// for sessions younger than one probe cycle, giving wgengine
-	// time to apply the new netmap on a freshly reconnected node.
-	lastStableSession *xsync.Map[types.NodeID, uint64]
 }
 
-// NewHAHealthProber creates a prober that uses the given [State] for
+// NewHAHealthProber creates a prober that uses the given State for
 // ping tracking and primary route management.
 // isConnected should return true if a node has an active map session.
 func NewHAHealthProber(
@@ -39,80 +32,44 @@ func NewHAHealthProber(
 	isConnected func(types.NodeID) bool,
 ) *HAHealthProber {
 	return &HAHealthProber{
-		state:             s,
-		cfg:               cfg,
-		serverURL:         serverURL,
-		isConnected:       isConnected,
-		lastStableSession: xsync.NewMap[types.NodeID, uint64](),
+		state:       s,
+		cfg:         cfg,
+		serverURL:   serverURL,
+		isConnected: isConnected,
 	}
 }
 
-// markSessionStable records session and returns true iff the same
-// value was already present from a prior cycle.
-func (p *HAHealthProber) markSessionStable(id types.NodeID, session uint64) bool {
-	prev, loaded := p.lastStableSession.LoadAndStore(id, session)
-	return loaded && prev == session
-}
-
-// forgetSession drops the recorded session so a node returning to
-// HA candidacy starts fresh.
-func (p *HAHealthProber) forgetSession(id types.NodeID) {
-	p.lastStableSession.Delete(id)
-}
-
-// ProbeOnce pings every HA subnet router and applies the cycle's
-// results in one batch so the election sees a single transition.
-// Per-result snapshots could otherwise elect a node that the next
-// snapshot demotes again, flipping primary onto an unreachable peer.
-// A timeout that fires after the node reconnected, or against a
-// session younger than one probe cycle, is dropped so wgengine has
-// time to apply the new netmap before silence is read as
-// unreachability.
+// ProbeOnce pings all HA subnet router nodes. PingNode changes are
+// dispatched immediately via dispatch so nodes can respond before the
+// timeout. Health-related policy changes are also dispatched inline.
 func (p *HAHealthProber) ProbeOnce(
 	ctx context.Context,
 	dispatch func(...change.Change),
 ) {
 	haNodes := p.state.nodeStore.HANodes()
+	if len(haNodes) == 0 {
+		return
+	}
 
-	// Build the deduplicated node-ID set and slice in one pass.
-	var nodeIDs []types.NodeID
-
+	// Deduplicate node IDs across prefixes.
 	seen := make(set.Set[types.NodeID])
 
+	var nodeIDs []types.NodeID
+
 	for _, nodes := range haNodes {
 		for _, id := range nodes {
-			if seen.Contains(id) {
-				continue
+			if !seen.Contains(id) {
+				seen.Add(id)
+				nodeIDs = append(nodeIDs, id)
 			}
-
-			seen.Add(id)
-			nodeIDs = append(nodeIDs, id)
 		}
 	}
 
-	// Drop stable-session entries for nodes that are no longer HA
-	// candidates so a future reappearance starts fresh.
-	p.lastStableSession.Range(func(id types.NodeID, _ uint64) bool {
-		if !seen.Contains(id) {
-			p.lastStableSession.Delete(id)
-		}
-
-		return true
-	})
-
-	if len(haNodes) == 0 {
-		return
-	}
-
 	log.Debug().
 		Int("haNodes", len(nodeIDs)).
 		Msg("HA health prober starting probe cycle")
 
-	var (
-		wg       sync.WaitGroup
-		results  = xsync.NewMap[types.NodeID, bool]()
-		deferred atomic.Bool
-	)
+	var wg sync.WaitGroup
 
 	for _, id := range nodeIDs {
 		if !p.isConnected(id) {
@@ -120,19 +77,9 @@ func (p *HAHealthProber) ProbeOnce(
 				Uint64(zf.NodeID, id.Uint64()).
 				Msg("HA probe: skipping offline node")
 
-			p.forgetSession(id)
-
 			continue
 		}
 
-		nv, ok := p.state.GetNodeByID(id)
-		if !ok {
-			continue
-		}
-
-		probeSession := nv.SessionEpoch()
-		stable := p.markSessionStable(id, probeSession)
-
 		pingID, responseCh := p.state.RegisterPing(id)
 		callbackURL := p.serverURL + "/machine/ping-response?id=" + pingID
 
@@ -151,7 +98,13 @@ func (p *HAHealthProber) ProbeOnce(
 					Dur("latency", latency).
 					Msg("HA probe: node responded")
 
-				results.Store(id, true)
+				if p.state.SetNodeUnhealthy(id, false) {
+					dispatch(change.PolicyChange())
+
+					log.Info().
+						Uint64(zf.NodeID, id.Uint64()).
+						Msg("HA probe: node recovered, recalculating primaries")
+				}
 
 			case <-timer.C:
 				p.state.CancelPing(pingID)
@@ -164,40 +117,18 @@ func (p *HAHealthProber) ProbeOnce(
 					return
 				}
 
-				curr, ok := p.state.GetNodeByID(id)
-				if !ok {
-					return
-				}
-
-				if curr.SessionEpoch() != probeSession {
-					log.Debug().
-						Uint64(zf.NodeID, id.Uint64()).
-						Uint64("probe_session", probeSession).
-						Uint64("current_session", curr.SessionEpoch()).
-						Msg("HA probe: node reconnected during probe, skipping")
-
-					deferred.Store(true)
-
-					return
-				}
-
-				if !stable {
-					log.Debug().
-						Uint64(zf.NodeID, id.Uint64()).
-						Uint64("probe_session", probeSession).
-						Msg("HA probe: probe of fresh session timed out, deferring to next cycle")
-
-					deferred.Store(true)
-
-					return
-				}
-
 				log.Warn().
 					Uint64(zf.NodeID, id.Uint64()).
 					Dur("timeout", p.cfg.ProbeTimeout).
 					Msg("HA probe: node did not respond")
 
-				results.Store(id, false)
+				if p.state.SetNodeUnhealthy(id, true) {
+					dispatch(change.PolicyChange())
+
+					log.Info().
+						Uint64(zf.NodeID, id.Uint64()).
+						Msg("HA probe: node unhealthy, triggering failover")
+				}
 
 			case <-ctx.Done():
 				p.state.CancelPing(pingID)
@@ -206,28 +137,4 @@ func (p *HAHealthProber) ProbeOnce(
 	}
 
 	wg.Wait()
-
-	// When any probe in the cycle was deferred (fresh session or
-	// reconnected mid-probe), drop the whole cycle's results: a partial
-	// batch lets the election pick a node whose connectivity is still
-	// unknown. The next cycle will run with stable sessions for every
-	// candidate and can decide on a complete picture.
-	if deferred.Load() {
-		return
-	}
-
-	healthByNode := make(map[types.NodeID]bool, results.Size())
-	results.Range(func(id types.NodeID, healthy bool) bool {
-		healthByNode[id] = healthy
-
-		return true
-	})
-
-	if p.state.BatchSetNodeHealth(healthByNode) {
-		dispatch(change.PolicyChange())
-
-		log.Info().
-			Int("haNodes", len(healthByNode)).
-			Msg("HA probe: health changed, triggering failover/recovery")
-	}
 }
diff --git a/hscontrol/state/maprequest.go b/hscontrol/state/maprequest.go
index e8571e0ac..d8cddaa14 100644
--- a/hscontrol/state/maprequest.go
+++ b/hscontrol/state/maprequest.go
@@ -1,5 +1,5 @@
-// Package state provides pure functions for processing [tailcfg.MapRequest] data.
-// These functions are extracted from [State.UpdateNodeFromMapRequest] to improve
+// Package state provides pure functions for processing MapRequest data.
+// These functions are extracted from UpdateNodeFromMapRequest to improve
 // testability and maintainability.
 
 package state
@@ -10,19 +10,19 @@ import (
 	"tailscale.com/tailcfg"
 )
 
-// netInfoFromMapRequest determines the correct [tailcfg.NetInfo] to use.
-// Returns the [tailcfg.NetInfo] that should be used for this request.
+// netInfoFromMapRequest determines the correct NetInfo to use.
+// Returns the NetInfo that should be used for this request.
 func netInfoFromMapRequest(
 	nodeID types.NodeID,
 	currentHostinfo *tailcfg.Hostinfo,
 	reqHostinfo *tailcfg.Hostinfo,
 ) *tailcfg.NetInfo {
-	// If request has [tailcfg.NetInfo], use it
+	// If request has NetInfo, use it
 	if reqHostinfo != nil && reqHostinfo.NetInfo != nil {
 		return reqHostinfo.NetInfo
 	}
 
-	// Otherwise, use current [tailcfg.NetInfo] if available
+	// Otherwise, use current NetInfo if available
 	if currentHostinfo != nil && currentHostinfo.NetInfo != nil {
 		log.Debug().
 			Caller().
@@ -33,7 +33,7 @@ func netInfoFromMapRequest(
 		return currentHostinfo.NetInfo
 	}
 
-	// No [tailcfg.NetInfo] available anywhere - log for debugging
+	// No NetInfo available anywhere - log for debugging
 	var hostname string
 	if reqHostinfo != nil {
 		hostname = reqHostinfo.Hostname
diff --git a/hscontrol/state/maprequest_noop_test.go b/hscontrol/state/maprequest_noop_test.go
deleted file mode 100644
index 6783e540f..000000000
--- a/hscontrol/state/maprequest_noop_test.go
+++ /dev/null
@@ -1,74 +0,0 @@
-package state
-
-import (
-	"strings"
-	"sync/atomic"
-	"testing"
-
-	"github.com/stretchr/testify/require"
-	"gorm.io/gorm"
-	"tailscale.com/tailcfg"
-)
-
-// TestNoOpMapRequestSkipsPersist ensures an identical, no-op MapRequest does
-// not issue a database UPDATE (nor the O(n) policy SetNodes scan that follows
-// persistNodeToDB). The node state is unchanged, so persisting is pure waste on
-// the hot map-request path.
-func TestNoOpMapRequestSkipsPersist(t *testing.T) {
-	_, s, nodeID := persistTestSetup(t)
-	t.Cleanup(func() { _ = s.Close() })
-
-	var nodeUpdateCount atomic.Int64
-
-	gdb := s.DB().DB
-	cbName := "noop_count_node_updates"
-	err := gdb.Callback().Update().After("gorm:update").Register(cbName, func(tx *gorm.DB) {
-		if tx.Statement == nil {
-			return
-		}
-
-		if tx.Statement.Table == "nodes" ||
-			strings.Contains(strings.ToLower(tx.Statement.SQL.String()), "update \"nodes\"") {
-			nodeUpdateCount.Add(1)
-		}
-	})
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = gdb.Callback().Update().Remove(cbName) })
-
-	nv, ok := s.GetNodeByID(nodeID)
-	require.True(t, ok, "node should exist in NodeStore")
-
-	stored := nv.AsStruct()
-
-	req := tailcfg.MapRequest{
-		NodeKey:  stored.NodeKey,
-		DiscoKey: stored.DiscoKey,
-		Hostinfo: &tailcfg.Hostinfo{
-			Hostname: stored.Hostname,
-			NetInfo:  &tailcfg.NetInfo{PreferredDERP: 1},
-		},
-	}
-
-	// First request establishes the Hostinfo/DERP state (expected to persist).
-	_, err = s.UpdateNodeFromMapRequest(nodeID, req)
-	require.NoError(t, err)
-
-	nodeUpdateCount.Store(0)
-
-	// Second request is value-identical: a no-op.
-	req2 := tailcfg.MapRequest{
-		NodeKey:  stored.NodeKey,
-		DiscoKey: stored.DiscoKey,
-		Hostinfo: &tailcfg.Hostinfo{
-			Hostname: stored.Hostname,
-			NetInfo:  &tailcfg.NetInfo{PreferredDERP: 1},
-		},
-	}
-
-	_, err = s.UpdateNodeFromMapRequest(nodeID, req2)
-	require.NoError(t, err)
-
-	require.Equalf(t, int64(0), nodeUpdateCount.Load(),
-		"no-op MapRequest should not issue any nodes-table UPDATE, got %d",
-		nodeUpdateCount.Load())
-}
diff --git a/hscontrol/state/maprequest_test.go b/hscontrol/state/maprequest_test.go
index ef3217016..8a842e494 100644
--- a/hscontrol/state/maprequest_test.go
+++ b/hscontrol/state/maprequest_test.go
@@ -75,7 +75,7 @@ func TestNetInfoPreservationInRegistrationFlow(t *testing.T) {
 	nodeID := types.NodeID(1)
 
 	// This test reproduces the bug in registration flows where NetInfo was lost
-	// because we used the wrong hostinfo reference when calling [netInfoFromMapRequest]
+	// because we used the wrong hostinfo reference when calling NetInfoFromMapRequest
 	t.Run("registration_flow_bug_reproduction", func(t *testing.T) {
 		// Simulate existing node with NetInfo (before re-registration)
 		existingNodeHostinfo := &tailcfg.Hostinfo{
diff --git a/hscontrol/state/node_health.go b/hscontrol/state/node_health.go
deleted file mode 100644
index 4edaf3986..000000000
--- a/hscontrol/state/node_health.go
+++ /dev/null
@@ -1,92 +0,0 @@
-package state
-
-import (
-	"fmt"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
-	"github.com/rs/zerolog/log"
-)
-
-// nodeHealthCheck names a class of stored-node-data defect that breaks normal
-// operation and explains how to fix it. ok == true means the node passes the
-// check. This is the extension point for node-data validation: add a check
-// here as new corrupt-data classes surface (nil hostinfo, invalid IPs,
-// tags-XOR-user violations, ...) and both the boot scan and any future caller
-// run the whole set.
-type nodeHealthCheck struct {
-	name  string
-	check func(nv types.NodeView, cfg *types.Config) (problem, fixHint string, ok bool)
-}
-
-// nodeHealthChecks is the registry of node-data health checks. Today it carries
-// the one issue #3346 needs; append to it rather than reshaping callers.
-var nodeHealthChecks = []nodeHealthCheck{givenNameMapsToValidFQDN}
-
-// givenNameMapsToValidFQDN flags a node whose stored GivenName cannot produce a
-// valid FQDN (empty, or longer than MaxHostnameLength once base_domain is
-// applied). Such a node cannot be rendered into a netmap — neither its own nor
-// any peer's — so it must be renamed to recover.
-var givenNameMapsToValidFQDN = nodeHealthCheck{
-	name: "given-name-maps-to-valid-fqdn",
-	check: func(nv types.NodeView, cfg *types.Config) (string, string, bool) {
-		err := types.ValidateGivenName(nv.GivenName(), cfg.BaseDomain)
-		if err != nil {
-			return err.Error(), fmt.Sprintf("headscale nodes rename %d <name>", nv.ID()), false
-		}
-
-		return "", "", true
-	},
-}
-
-// nodeHealthFinding is a single failed check for a single node.
-type nodeHealthFinding struct {
-	nodeID   types.NodeID
-	hostname string
-	check    string
-	problem  string
-	fixHint  string
-}
-
-// scanNodeHealth runs every registered check against every node in the store
-// and returns one finding per failure. It only reports — it never mutates a
-// node — so an operator can repair the underlying data without the server
-// silently rewriting a user-visible name.
-func (s *State) scanNodeHealth() []nodeHealthFinding {
-	var findings []nodeHealthFinding
-
-	for _, nv := range s.nodeStore.ListNodes().All() {
-		for _, c := range nodeHealthChecks {
-			problem, fixHint, ok := c.check(nv, s.cfg)
-			if ok {
-				continue
-			}
-
-			findings = append(findings, nodeHealthFinding{
-				nodeID:   nv.ID(),
-				hostname: nv.Hostname(),
-				check:    c.name,
-				problem:  problem,
-				fixHint:  fixHint,
-			})
-		}
-	}
-
-	return findings
-}
-
-// logNodeHealth scans the store once and logs an actionable warning per
-// finding. Called at startup so an operator learns — by node id and fix
-// command — about stored data that will break map generation, without the
-// server changing anything itself.
-func (s *State) logNodeHealth() {
-	for _, f := range s.scanNodeHealth() {
-		log.Warn().
-			Uint64(zf.NodeID, f.nodeID.Uint64()).
-			Str(zf.NodeHostname, f.hostname).
-			Str("check", f.check).
-			Str("problem", f.problem).
-			Str("fix", f.fixHint).
-			Msg("node has invalid data that breaks map generation; rename it to restore connectivity")
-	}
-}
diff --git a/hscontrol/state/node_health_test.go b/hscontrol/state/node_health_test.go
deleted file mode 100644
index cd61a25b8..000000000
--- a/hscontrol/state/node_health_test.go
+++ /dev/null
@@ -1,67 +0,0 @@
-package state
-
-import (
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/require"
-)
-
-func TestGivenNameMapsToValidFQDNCheck(t *testing.T) {
-	cfg := &types.Config{BaseDomain: "example.com"}
-
-	_, _, ok := givenNameMapsToValidFQDN.check((&types.Node{ID: 1, GivenName: "valid"}).View(), cfg)
-	require.True(t, ok, "a valid given name must pass the check")
-
-	problem, fixHint, ok := givenNameMapsToValidFQDN.check((&types.Node{ID: 7, GivenName: ""}).View(), cfg)
-	require.False(t, ok, "an empty given name must fail the check")
-	require.NotEmpty(t, problem)
-	require.Contains(t, fixHint, "rename 7", "fix hint must name the offending node")
-}
-
-// TestScanNodeHealthReportsInvalidNameWithoutMutating proves the boot scan
-// reports a node whose stored name would break map generation (issue #3346)
-// with an actionable fix, and that it never rewrites the stored name — the
-// maintainer's decision is log-only, no silent mutation.
-func TestScanNodeHealthReportsInvalidNameWithoutMutating(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user := database.CreateUserForTest("scan-user")
-	bad := database.CreateRegisteredNodeForTest(user, "scan-bad")
-	good := database.CreateRegisteredNodeForTest(user, "scan-good")
-
-	require.NoError(t, database.DB.
-		Model(&types.Node{}).
-		Where("id = ?", bad.ID).
-		Update("given_name", "").Error)
-	require.NoError(t, database.Close())
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	findings := s.scanNodeHealth()
-
-	var badFinding *nodeHealthFinding
-
-	for i := range findings {
-		require.NotEqual(t, good.ID, findings[i].nodeID, "a valid node must not be reported")
-
-		if findings[i].nodeID == bad.ID {
-			badFinding = &findings[i]
-		}
-	}
-
-	require.NotNil(t, badFinding, "a node with an invalid name must be reported")
-	require.Contains(t, badFinding.fixHint, "rename", "finding must carry an actionable fix")
-
-	// Log-only: neither the scan nor boot may rewrite the stored name.
-	nv, ok := s.GetNodeByID(bad.ID)
-	require.True(t, ok)
-	require.Empty(t, nv.GivenName(), "boot scan must not mutate the stored name")
-}
diff --git a/hscontrol/state/node_store.go b/hscontrol/state/node_store.go
index cece54edd..a2066f15a 100644
--- a/hscontrol/state/node_store.go
+++ b/hscontrol/state/node_store.go
@@ -8,7 +8,6 @@ import (
 	"slices"
 	"strconv"
 	"strings"
-	"sync"
 	"sync/atomic"
 	"time"
 
@@ -22,12 +21,12 @@ import (
 )
 
 // fallbackGivenName is the DNS label used when a node is written with
-// an empty [types.Node.GivenName]. Matches Tailscale SaaS behaviour
-// for empty sanitised labels.
+// an empty GivenName. Matches Tailscale SaaS behaviour for empty
+// sanitised labels.
 const fallbackGivenName = "node"
 
-// Errors returned by [NodeStore.SetGivenName]. [ErrNodeNotFound] is defined
-// in state.go and reused here.
+// Errors returned by SetGivenName. ErrNodeNotFound is defined in
+// state.go and reused here.
 var (
 	ErrGivenNameTaken   = errors.New("given name already in use by another node")
 	ErrGivenNameInvalid = errors.New("given name is not a valid DNS label")
@@ -36,9 +35,9 @@ var (
 const (
 	put             = 1
 	del             = 2
+	update          = 3
 	rebuildPeerMaps = 4
 	setName         = 5
-	updateMulti     = 6
 )
 
 const prometheusNamespace = "headscale"
@@ -108,12 +107,6 @@ type NodeStore struct {
 	peersFunc  PeersFunc
 	writeQueue chan work
 
-	// stopped is closed once by Stop to signal the writer goroutine to exit
-	// and to let in-flight writes return cleanly instead of panicking with
-	// "send on closed channel" during shutdown.
-	stopped  chan struct{}
-	stopOnce sync.Once
-
 	batchSize    int
 	batchTimeout time.Duration
 }
@@ -130,7 +123,6 @@ func NewNodeStore(allNodes types.Nodes, peersFunc PeersFunc, batchSize int, batc
 		peersFunc:    peersFunc,
 		batchSize:    batchSize,
 		batchTimeout: batchTimeout,
-		stopped:      make(chan struct{}),
 	}
 	store.data.Store(&snap)
 
@@ -140,10 +132,10 @@ func NewNodeStore(allNodes types.Nodes, peersFunc PeersFunc, batchSize int, batc
 	return store
 }
 
-// Snapshot is the representation of the current state of the [NodeStore].
+// Snapshot is the representation of the current state of the NodeStore.
 // It contains all nodes and their relationships.
 // It is a copy-on-write structure, meaning that when a write occurs,
-// a new [Snapshot] is created with the updated state,
+// a new Snapshot is created with the updated state,
 // and replaces the old one atomically.
 type Snapshot struct {
 	// nodesByID is the main source of truth for nodes.
@@ -169,23 +161,19 @@ type Snapshot struct {
 // based on the current policy.
 type PeersFunc func(nodes []types.NodeView) map[types.NodeID][]types.NodeView
 
-// work represents a single operation to be performed on the [NodeStore].
+// work represents a single operation to be performed on the NodeStore.
 type work struct {
 	op         int
 	nodeID     types.NodeID
 	node       types.Node
+	updateFn   UpdateNodeFunc
 	result     chan struct{}
-	nodeResult chan types.NodeView
+	nodeResult chan types.NodeView // Channel to return the resulting node after batch application
 	// For rebuildPeerMaps operation
 	rebuildResult chan struct{}
 	// For setName operation (admin rename, reject-on-collision path).
 	name      string
 	errResult chan error
-	// For updateMulti: per-node update functions applied as a single
-	// batch entry so callers that need an atomic election (e.g. the HA
-	// prober applying multiple probe results at once) cannot have a
-	// partial snapshot published between the updates.
-	multiUpdates map[types.NodeID]UpdateNodeFunc
 }
 
 // PutNode adds or updates a node in the store.
@@ -207,13 +195,7 @@ func (s *NodeStore) PutNode(n types.Node) types.NodeView {
 
 	nodeStoreQueueDepth.Inc()
 
-	select {
-	case s.writeQueue <- work:
-	case <-s.stopped:
-		nodeStoreQueueDepth.Dec()
-
-		return types.NodeView{}
-	}
+	s.writeQueue <- work
 
 	<-work.result
 	nodeStoreQueueDepth.Dec()
@@ -225,65 +207,48 @@ func (s *NodeStore) PutNode(n types.Node) types.NodeView {
 	return resultNode
 }
 
-// UpdateNodeFunc is a function type that takes a pointer to a [types.Node] and modifies it.
+// UpdateNodeFunc is a function type that takes a pointer to a Node and modifies it.
 type UpdateNodeFunc func(n *types.Node)
 
-// UpdateNode applies a function to modify a specific node in the
-// store. Single-node convenience wrapper around [NodeStore.UpdateNodes]
-// — the writer goroutine signals completion only after the post-batch
-// snapshot has been stored, so the follow-up [NodeStore.GetNode] read
-// sees the applied update. Returns the resulting node and whether it
-// exists.
+// UpdateNode applies a function to modify a specific node in the store.
+// This is a blocking operation that waits for the write to complete.
+// This is analogous to a database "transaction", or, the caller should
+// rather collect all data they want to change, and then call this function.
+// Fewer calls are better.
+// Returns the resulting node after all modifications in the batch have been applied.
 //
-// Callers that need to change several nodes atomically should call
-// [NodeStore.UpdateNodes] directly; collecting changes into one batch
-// keeps the election from running on a half-applied snapshot.
-func (s *NodeStore) UpdateNode(nodeID types.NodeID, updateFn UpdateNodeFunc) (types.NodeView, bool) {
+// TODO(kradalby): Technically we could have a version of this that modifies the node
+// in the current snapshot if _we know_ that the change will not affect the peer relationships.
+// This is because the main nodesByID map contains the struct, and every other map is using a
+// pointer to the underlying struct. The gotcha with this is that we will need to introduce
+// a lock around the nodesByID map to ensure that no other writes are happening
+// while we are modifying the node. Which mean we would need to implement read-write locks
+// on all read operations.
+func (s *NodeStore) UpdateNode(nodeID types.NodeID, updateFn func(n *types.Node)) (types.NodeView, bool) {
 	timer := prometheus.NewTimer(nodeStoreOperationDuration.WithLabelValues("update"))
 	defer timer.ObserveDuration()
 
-	s.UpdateNodes(map[types.NodeID]UpdateNodeFunc{nodeID: updateFn})
-
-	nodeStoreOperations.WithLabelValues("update").Inc()
-
-	return s.GetNode(nodeID)
-}
-
-// UpdateNodes applies per-node update functions in a single atomic
-// batch. The election that recomputes primary routes runs once, after
-// every update has landed, so callers cannot observe an intermediate
-// snapshot where only some of the updates are visible. Use this when
-// the order in which two writers' updates are individually published
-// would change the election outcome — e.g. the HA prober applying
-// concurrent probe-timeout results.
-func (s *NodeStore) UpdateNodes(updates map[types.NodeID]UpdateNodeFunc) {
-	timer := prometheus.NewTimer(nodeStoreOperationDuration.WithLabelValues("update_multi"))
-	defer timer.ObserveDuration()
-
-	if len(updates) == 0 {
-		return
-	}
-
-	w := work{
-		op:           updateMulti,
-		multiUpdates: updates,
-		result:       make(chan struct{}),
+	work := work{
+		op:         update,
+		nodeID:     nodeID,
+		updateFn:   updateFn,
+		result:     make(chan struct{}),
+		nodeResult: make(chan types.NodeView, 1),
 	}
 
 	nodeStoreQueueDepth.Inc()
 
-	select {
-	case s.writeQueue <- w:
-	case <-s.stopped:
-		nodeStoreQueueDepth.Dec()
+	s.writeQueue <- work
 
-		return
-	}
-
-	<-w.result
+	<-work.result
 	nodeStoreQueueDepth.Dec()
 
-	nodeStoreOperations.WithLabelValues("update_multi").Inc()
+	resultNode := <-work.nodeResult
+
+	nodeStoreOperations.WithLabelValues("update").Inc()
+
+	// Return the node and whether it exists (is valid)
+	return resultNode, resultNode.Valid()
 }
 
 // DeleteNode removes a node from the store by its ID.
@@ -300,13 +265,7 @@ func (s *NodeStore) DeleteNode(id types.NodeID) {
 
 	nodeStoreQueueDepth.Inc()
 
-	select {
-	case s.writeQueue <- work:
-	case <-s.stopped:
-		nodeStoreQueueDepth.Dec()
-
-		return
-	}
+	s.writeQueue <- work
 
 	<-work.result
 	nodeStoreQueueDepth.Dec()
@@ -314,20 +273,19 @@ func (s *NodeStore) DeleteNode(id types.NodeID) {
 	nodeStoreOperations.WithLabelValues("delete").Inc()
 }
 
-// SetGivenName sets [types.Node.GivenName] on the node identified by id,
+// SetGivenName sets node.GivenName on the node identified by id,
 // rejecting the write if the name is already held by another node.
 // Intended for the admin rename path, where auto-bumping a
 // user-supplied name would be surprising.
 //
 // Returns:
-//   - the stored [types.NodeView] and nil on success
-//   - [ErrGivenNameInvalid]   if name is not a valid DNS label
-//   - [ErrGivenNameTaken]     if another node already holds name
-//   - [ErrNodeNotFound]       if no node with id exists
+//   - the stored NodeView and nil on success
+//   - ErrGivenNameInvalid   if name is not a valid DNS label
+//   - ErrGivenNameTaken     if another node already holds name
+//   - ErrNodeNotFound       if no node with id exists
 //
-// Runs as a single writer-goroutine op, so the uniqueness check and the
-// write are atomic with respect to concurrent
-// [NodeStore.PutNode]/[NodeStore.UpdateNode].
+// Runs as a single writer-goroutine op, so the uniqueness check and
+// the write are atomic with respect to concurrent PutNode/UpdateNode.
 func (s *NodeStore) SetGivenName(id types.NodeID, name string) (types.NodeView, error) {
 	timer := prometheus.NewTimer(nodeStoreOperationDuration.WithLabelValues("set_name"))
 	defer timer.ObserveDuration()
@@ -343,13 +301,7 @@ func (s *NodeStore) SetGivenName(id types.NodeID, name string) (types.NodeView,
 
 	nodeStoreQueueDepth.Inc()
 
-	select {
-	case s.writeQueue <- w:
-	case <-s.stopped:
-		nodeStoreQueueDepth.Dec()
-
-		return types.NodeView{}, nil
-	}
+	s.writeQueue <- w
 
 	<-w.result
 	nodeStoreQueueDepth.Dec()
@@ -364,19 +316,15 @@ func (s *NodeStore) SetGivenName(id types.NodeID, name string) (types.NodeView,
 	return <-w.nodeResult, nil
 }
 
-// Start initializes the [NodeStore] and starts processing the write queue.
+// Start initializes the NodeStore and starts processing the write queue.
 func (s *NodeStore) Start() {
 	s.writeQueue = make(chan work)
 	go s.processWrite()
 }
 
-// Stop stops the [NodeStore]. It signals the writer goroutine via stopped
-// rather than closing writeQueue, so writes racing shutdown drop cleanly
-// instead of panicking on a closed channel.
+// Stop stops the NodeStore.
 func (s *NodeStore) Stop() {
-	s.stopOnce.Do(func() {
-		close(s.stopped)
-	})
+	close(s.writeQueue)
 }
 
 // processWrite processes the write queue in batches.
@@ -388,7 +336,16 @@ func (s *NodeStore) processWrite() {
 
 	for {
 		select {
-		case w := <-s.writeQueue:
+		case w, ok := <-s.writeQueue:
+			if !ok {
+				// Channel closed, apply any remaining batch and exit
+				if len(batch) != 0 {
+					s.applyBatch(batch)
+				}
+
+				return
+			}
+
 			batch = append(batch, w)
 			if len(batch) >= s.batchSize {
 				s.applyBatch(batch)
@@ -403,14 +360,6 @@ func (s *NodeStore) processWrite() {
 			}
 
 			c.Reset(s.batchTimeout)
-		case <-s.stopped:
-			// Apply any remaining batch so in-flight writers receive their
-			// results, then exit.
-			if len(batch) != 0 {
-				s.applyBatch(batch)
-			}
-
-			return
 		}
 	}
 }
@@ -456,21 +405,20 @@ func (s *NodeStore) applyBatch(batch []work) {
 			if w.nodeResult != nil {
 				nodeResultRequests[w.nodeID] = append(nodeResultRequests[w.nodeID], w)
 			}
-		case updateMulti:
-			for id, fn := range w.multiUpdates {
-				n, exists := nodes[id]
-				if !exists {
-					continue
-				}
-
+		case update:
+			// Update the specific node identified by nodeID
+			if n, exists := nodes[w.nodeID]; exists {
 				oldGivenName := n.GivenName
-				fn(&n)
+				w.updateFn(&n)
 
 				if n.GivenName != oldGivenName {
 					n.GivenName = resolveGivenName(nodes, n.ID, n.GivenName)
 				}
+				nodes[w.nodeID] = n
+			}
 
-				nodes[id] = n
+			if w.nodeResult != nil {
+				nodeResultRequests[w.nodeID] = append(nodeResultRequests[w.nodeID], w)
 			}
 		case del:
 			delete(nodes, w.nodeID)
@@ -527,24 +475,33 @@ func (s *NodeStore) applyBatch(batch []work) {
 	// Update node count gauge
 	nodeStoreNodesCount.Set(float64(len(nodes)))
 
-	// Send the resulting nodes to all work items that requested them.
-	// A zero-value NodeView{} reports Valid()==false, matching node.View()
-	// for a node that was deleted or never existed.
+	// Send the resulting nodes to all work items that requested them
 	for nodeID, workItems := range nodeResultRequests {
-		var nodeView types.NodeView
 		if node, exists := nodes[nodeID]; exists {
-			nodeView = node.View()
-		}
+			nodeView := node.View()
+			for _, w := range workItems {
+				w.nodeResult <- nodeView
 
-		for _, w := range workItems {
-			w.nodeResult <- nodeView
+				close(w.nodeResult)
 
-			close(w.nodeResult)
+				if w.errResult != nil {
+					w.errResult <- setErrResults[w]
 
-			if w.errResult != nil {
-				w.errResult <- setErrResults[w]
+					close(w.errResult)
+				}
+			}
+		} else {
+			// Node was deleted or doesn't exist
+			for _, w := range workItems {
+				w.nodeResult <- types.NodeView{} // Send invalid view
 
-				close(w.errResult)
+				close(w.nodeResult)
+
+				if w.errResult != nil {
+					w.errResult <- setErrResults[w]
+
+					close(w.errResult)
+				}
 			}
 		}
 	}
@@ -564,14 +521,14 @@ func (s *NodeStore) applyBatch(batch []work) {
 
 // resolveGivenName returns a unique DNS label for the node identified
 // by self, based on the caller-supplied base label. If base is empty
-// it falls back to [fallbackGivenName] ("node"). The label's own holder
+// it falls back to fallbackGivenName ("node"). The label's own holder
 // (self) is excluded from the collision scan so an idempotent write
 // keeps the current label.
 //
 // On collision the label is bumped as base, base-1, base-2, …, first
-// unused wins. Must be called from the [NodeStore] writer goroutine
-// (inside [NodeStore.applyBatch]) so the nodes map reflects all earlier
-// ops in the batch and no other writer can interleave.
+// unused wins. Must be called from the NodeStore writer goroutine
+// (inside applyBatch) so the nodes map reflects all earlier ops in
+// the batch and no other writer can interleave.
 func resolveGivenName(nodes map[types.NodeID]types.Node, self types.NodeID, base string) string {
 	if base == "" {
 		base = fallbackGivenName
@@ -597,7 +554,7 @@ func resolveGivenName(nodes map[types.NodeID]types.Node, self types.NodeID, base
 }
 
 // snapshotFromNodes builds the index maps and primary-route table for
-// a new [Snapshot]. prevRoutes carries forward the previous primary
+// a new Snapshot. prevRoutes carries forward the previous primary
 // assignment so a still-valid choice survives unrelated batches.
 func snapshotFromNodes(
 	nodes map[types.NodeID]types.Node,
@@ -660,13 +617,26 @@ func snapshotFromNodes(
 	return newSnap
 }
 
-// onlineAdvertisers maps each non-exit prefix to the IDs of online nodes
-// that approve it. Nodes are visited in the order of ids, so the per-prefix
-// slices preserve that order.
-func onlineAdvertisers(
+// electPrimaryRoutes picks the primary advertiser for each non-exit
+// prefix. The previous primary is preserved when it is still online
+// and healthy (anti-flap); otherwise the lowest-NodeID healthy
+// advertiser wins. When every advertiser is unhealthy the previous
+// primary is preserved if still a candidate, falling back to the
+// lowest-NodeID candidate so peers see *some* primary instead of
+// none. Anti-flap in the all-unhealthy case matters under cable-pull
+// where IsOnline lags reality and a naive lowest-ID fallback churns
+// primaries to a node that is itself unreachable (issue #3203).
+func electPrimaryRoutes(
 	nodes map[types.NodeID]types.Node,
-	ids []types.NodeID,
-) map[netip.Prefix][]types.NodeID {
+	prev map[netip.Prefix]types.NodeID,
+) (map[netip.Prefix]types.NodeID, map[types.NodeID]bool) {
+	ids := make([]types.NodeID, 0, len(nodes))
+	for id := range nodes {
+		ids = append(ids, id)
+	}
+
+	slices.Sort(ids)
+
 	advertisers := make(map[netip.Prefix][]types.NodeID)
 
 	for _, id := range ids {
@@ -684,24 +654,6 @@ func onlineAdvertisers(
 		}
 	}
 
-	return advertisers
-}
-
-// electPrimaryRoutes picks the primary advertiser for each non-exit
-// prefix. Inputs are restricted to online nodes that advertise the
-// prefix. The previous primary is preserved when it is still online
-// and healthy (anti-flap); otherwise the lowest-NodeID healthy
-// advertiser wins. When every advertiser is unhealthy the previous
-// primary is preserved only if still a candidate — falling back to
-// any other candidate would point peers at a node the prober has
-// already declared unreachable, so leaving the prefix unmapped is
-// preferred until a probe cycle finds one that responds.
-func electPrimaryRoutes(
-	nodes map[types.NodeID]types.Node,
-	prev map[netip.Prefix]types.NodeID,
-) (map[netip.Prefix]types.NodeID, map[types.NodeID]bool) {
-	advertisers := onlineAdvertisers(nodes, slices.Sorted(maps.Keys(nodes)))
-
 	routes := make(map[netip.Prefix]types.NodeID, len(advertisers))
 	for prefix, candidates := range advertisers {
 		if cur, ok := prev[prefix]; ok &&
@@ -725,16 +677,14 @@ func electPrimaryRoutes(
 			}
 		}
 
-		// All-unhealthy fallback: preserve the previous primary only
-		// when it is still a candidate. Falling back to any candidate
-		// would point peers at a node the prober has already declared
-		// unreachable; leaving the prefix unmapped is honest until a
-		// probe cycle picks one that responds.
-		if !found {
+		if !found && len(candidates) >= 1 {
 			if cur, ok := prev[prefix]; ok && slices.Contains(candidates, cur) {
 				selected = cur
-				found = true
+			} else {
+				selected = candidates[0]
 			}
+
+			found = true
 		}
 
 		if found {
@@ -752,8 +702,8 @@ func electPrimaryRoutes(
 
 // GetNode retrieves a node by its ID.
 // The bool indicates if the node exists or is available (like "err not found").
-// The [types.NodeView] might be invalid, so it must be checked with .Valid(), which must
-// be used to ensure it isn't an invalid node (this is more of a node error or node is broken).
+// The NodeView might be invalid, so it must be checked with .Valid(), which must be used to ensure
+// it isn't an invalid node (this is more of a node error or node is broken).
 func (s *NodeStore) GetNode(id types.NodeID) (types.NodeView, bool) {
 	timer := prometheus.NewTimer(nodeStoreOperationDuration.WithLabelValues("get"))
 	defer timer.ObserveDuration()
@@ -768,10 +718,10 @@ func (s *NodeStore) GetNode(id types.NodeID) (types.NodeView, bool) {
 	return n.View(), true
 }
 
-// GetNodeByNodeKey retrieves a node by its [key.NodePublic].
+// GetNodeByNodeKey retrieves a node by its NodeKey.
 // The bool indicates if the node exists or is available (like "err not found").
-// The [types.NodeView] might be invalid, so it must be checked with .Valid(), which must
-// be used to ensure it isn't an invalid node (this is more of a node error or node is broken).
+// The NodeView might be invalid, so it must be checked with .Valid(), which must be used to ensure
+// it isn't an invalid node (this is more of a node error or node is broken).
 func (s *NodeStore) GetNodeByNodeKey(nodeKey key.NodePublic) (types.NodeView, bool) {
 	timer := prometheus.NewTimer(nodeStoreOperationDuration.WithLabelValues("get_by_key"))
 	defer timer.ObserveDuration()
@@ -783,30 +733,47 @@ func (s *NodeStore) GetNodeByNodeKey(nodeKey key.NodePublic) (types.NodeView, bo
 	return nodeView, exists
 }
 
-// GetNodesByMachineKeyAllUsers returns every node sharing machineKey, keyed by
-// owning UserID. Tagged nodes are indexed under UserID(0) (the tagged sentinel);
-// user-owned nodes under their owning UserID. Returns an empty map if none.
-//
-// One machine key can map to several nodes (the same device registered by
-// different users via the "create new, do not transfer" path). Exposing the
-// whole set lets callers decide with full context — index [userID] for an exact
-// match, [0] for a tagged node, or reject when the set is ambiguous — rather
-// than guessing from a single arbitrary pick.
-func (s *NodeStore) GetNodesByMachineKeyAllUsers(machineKey key.MachinePublic) map[types.UserID]types.NodeView {
-	timer := prometheus.NewTimer(nodeStoreOperationDuration.WithLabelValues("get_nodes_by_machine_key_all_users"))
+// GetNodeByMachineKey returns a node by its machine key and user ID. The bool indicates if the node exists.
+func (s *NodeStore) GetNodeByMachineKey(machineKey key.MachinePublic, userID types.UserID) (types.NodeView, bool) {
+	timer := prometheus.NewTimer(nodeStoreOperationDuration.WithLabelValues("get_by_machine_key"))
 	defer timer.ObserveDuration()
 
-	nodeStoreOperations.WithLabelValues("get_nodes_by_machine_key_all_users").Inc()
+	nodeStoreOperations.WithLabelValues("get_by_machine_key").Inc()
 
-	userMap := s.data.Load().nodesByMachineKey[machineKey]
+	snapshot := s.data.Load()
+	if userMap, exists := snapshot.nodesByMachineKey[machineKey]; exists {
+		if node, exists := userMap[userID]; exists {
+			return node, true
+		}
+	}
 
-	out := make(map[types.UserID]types.NodeView, len(userMap))
-	maps.Copy(out, userMap)
-
-	return out
+	return types.NodeView{}, false
 }
 
-// DebugString returns debug information about the [NodeStore].
+// GetNodeByMachineKeyAnyUser returns the first node with the given machine key,
+// regardless of which user it belongs to. This is useful for scenarios like
+// transferring a node to a different user when re-authenticating with a
+// different user's auth key.
+// If multiple nodes exist with the same machine key (different users), the
+// first one found is returned (order is not guaranteed).
+func (s *NodeStore) GetNodeByMachineKeyAnyUser(machineKey key.MachinePublic) (types.NodeView, bool) {
+	timer := prometheus.NewTimer(nodeStoreOperationDuration.WithLabelValues("get_by_machine_key_any_user"))
+	defer timer.ObserveDuration()
+
+	nodeStoreOperations.WithLabelValues("get_by_machine_key_any_user").Inc()
+
+	snapshot := s.data.Load()
+	if userMap, exists := snapshot.nodesByMachineKey[machineKey]; exists {
+		// Return the first node found (order not guaranteed due to map iteration)
+		for _, node := range userMap {
+			return node, true
+		}
+	}
+
+	return types.NodeView{}, false
+}
+
+// DebugString returns debug information about the NodeStore.
 func (s *NodeStore) DebugString() string {
 	snapshot := s.data.Load()
 
@@ -915,10 +882,21 @@ func (s *NodeStore) PrimaryRoutesForNode(id types.NodeID) []netip.Prefix {
 func (s *NodeStore) HANodes() map[netip.Prefix][]types.NodeID {
 	snap := s.data.Load()
 
-	advertisers := onlineAdvertisers(
-		snap.nodesByID,
-		slices.Sorted(maps.Keys(snap.nodesByID)),
-	)
+	advertisers := make(map[netip.Prefix][]types.NodeID)
+
+	for id, n := range snap.nodesByID {
+		if n.IsOnline == nil || !*n.IsOnline {
+			continue
+		}
+
+		for _, p := range n.AllApprovedRoutes() {
+			if tsaddr.IsExitRoute(p) {
+				continue
+			}
+
+			advertisers[p] = append(advertisers[p], id)
+		}
+	}
 
 	out := make(map[netip.Prefix][]types.NodeID)
 
@@ -927,6 +905,7 @@ func (s *NodeStore) HANodes() map[netip.Prefix][]types.NodeID {
 			continue
 		}
 
+		slices.Sort(ids)
 		out[p] = ids
 	}
 
@@ -975,8 +954,8 @@ func (s *NodeStore) PrimaryRoutesString() string {
 	return b.String()
 }
 
-// RebuildPeerMaps rebuilds the peer relationship map using the current [PeersFunc].
-// This must be called after policy changes because [PeersFunc] uses [policy.PolicyManager]'s
+// RebuildPeerMaps rebuilds the peer relationship map using the current peersFunc.
+// This must be called after policy changes because peersFunc uses PolicyManager's
 // filters to determine which nodes can see each other. Without rebuilding, the
 // peer map would use stale filter data until the next node add/delete.
 func (s *NodeStore) RebuildPeerMaps() {
diff --git a/hscontrol/state/node_store_stop_test.go b/hscontrol/state/node_store_stop_test.go
deleted file mode 100644
index 219d14e70..000000000
--- a/hscontrol/state/node_store_stop_test.go
+++ /dev/null
@@ -1,35 +0,0 @@
-package state
-
-import (
-	"sync"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-)
-
-// TestNodeStoreWriteDuringStopNoPanic ensures a write racing with Stop does not
-// panic with "send on closed channel". During graceful shutdown a grace-period
-// Disconnect (or a scheduled HA probe result) can still issue a NodeStore write
-// after Stop has run; that write must be either applied or cleanly dropped,
-// never crash the process.
-func TestNodeStoreWriteDuringStopNoPanic(t *testing.T) {
-	const iterations = 200
-
-	for range iterations {
-		store := NewNodeStore(nil, allowAllPeersFunc, TestBatchSize, TestBatchTimeout)
-		store.Start()
-
-		var wg sync.WaitGroup
-
-		wg.Go(func() {
-			node := createConcurrentTestNode(types.NodeID(1), "grace-period-node")
-			store.PutNode(node)
-		})
-
-		wg.Go(func() {
-			store.Stop()
-		})
-
-		wg.Wait()
-	}
-}
diff --git a/hscontrol/state/node_store_test.go b/hscontrol/state/node_store_test.go
index 04d4290bb..6b4217540 100644
--- a/hscontrol/state/node_store_test.go
+++ b/hscontrol/state/node_store_test.go
@@ -684,7 +684,7 @@ func TestNodeStoreOperations(t *testing.T) {
 						finalNode := snapshot.nodesByID[1]
 						assert.Equal(t, "multi-update-hostname", finalNode.Hostname)
 						assert.Equal(t, "multi-update-givenname", finalNode.GivenName)
-						assert.Equal(t, []string{"tag1", "tag2"}, finalNode.Tags.List())
+						assert.Equal(t, []string{"tag1", "tag2"}, finalNode.Tags)
 					},
 				},
 			},
@@ -722,14 +722,14 @@ func TestNodeStoreOperations(t *testing.T) {
 						assert.NotNil(t, nodePtr)
 						assert.Equal(t, "db-save-hostname", nodePtr.Hostname)
 						assert.Equal(t, "db-save-given", nodePtr.GivenName)
-						assert.Equal(t, []string{"db-tag1", "db-tag2"}, nodePtr.Tags.List())
+						assert.Equal(t, []string{"db-tag1", "db-tag2"}, nodePtr.Tags)
 
 						// Verify the snapshot also reflects the same state
 						snapshot := store.data.Load()
 						storedNode := snapshot.nodesByID[1]
 						assert.Equal(t, "db-save-hostname", storedNode.Hostname)
 						assert.Equal(t, "db-save-given", storedNode.GivenName)
-						assert.Equal(t, []string{"db-tag1", "db-tag2"}, storedNode.Tags.List())
+						assert.Equal(t, []string{"db-tag1", "db-tag2"}, storedNode.Tags)
 					},
 				},
 				{
@@ -792,15 +792,15 @@ func TestNodeStoreOperations(t *testing.T) {
 						// All should have the complete final state
 						assert.Equal(t, "concurrent-db-hostname", nodePtr1.Hostname)
 						assert.Equal(t, "concurrent-db-given", nodePtr1.GivenName)
-						assert.Equal(t, []string{"concurrent-tag"}, nodePtr1.Tags.List())
+						assert.Equal(t, []string{"concurrent-tag"}, nodePtr1.Tags)
 
 						assert.Equal(t, "concurrent-db-hostname", nodePtr2.Hostname)
 						assert.Equal(t, "concurrent-db-given", nodePtr2.GivenName)
-						assert.Equal(t, []string{"concurrent-tag"}, nodePtr2.Tags.List())
+						assert.Equal(t, []string{"concurrent-tag"}, nodePtr2.Tags)
 
 						assert.Equal(t, "concurrent-db-hostname", nodePtr3.Hostname)
 						assert.Equal(t, "concurrent-db-given", nodePtr3.GivenName)
-						assert.Equal(t, []string{"concurrent-tag"}, nodePtr3.Tags.List())
+						assert.Equal(t, []string{"concurrent-tag"}, nodePtr3.Tags)
 
 						// Verify consistency with stored state
 						snapshot := store.data.Load()
@@ -1321,63 +1321,3 @@ func TestRebuildPeerMapsWithChangedPeersFunc(t *testing.T) {
 	assert.Equal(t, 1, peers1.Len(), "ListPeers for node1 should return 1")
 	assert.Equal(t, 1, peers2.Len(), "ListPeers for node2 should return 1")
 }
-
-// TestGetNodesByMachineKeyAllUsers ensures the lookup returns every node sharing
-// a machine key keyed by owning UserID (tagged nodes under UserID(0)), so callers
-// see the full set instead of a single arbitrary pick.
-func TestGetNodesByMachineKeyAllUsers(t *testing.T) {
-	mk := key.NewMachine().Public()
-
-	t.Run("empty when absent", func(t *testing.T) {
-		store := NewNodeStore(nil, allowAllPeersFunc, TestBatchSize, TestBatchTimeout)
-
-		store.Start()
-		defer store.Stop()
-
-		require.Empty(t, store.GetNodesByMachineKeyAllUsers(mk))
-	})
-
-	t.Run("returns all user-owned nodes keyed by user", func(t *testing.T) {
-		store := NewNodeStore(nil, allowAllPeersFunc, TestBatchSize, TestBatchTimeout)
-
-		store.Start()
-		defer store.Stop()
-
-		n1 := createTestNode(1, 1, "user1", "node1")
-		n1.MachineKey = mk
-		n2 := createTestNode(2, 2, "user2", "node2")
-		n2.MachineKey = mk
-
-		store.PutNode(n1)
-		store.PutNode(n2)
-
-		all := store.GetNodesByMachineKeyAllUsers(mk)
-		require.Len(t, all, 2)
-		require.Equal(t, types.NodeID(1), all[types.UserID(1)].ID())
-		require.Equal(t, types.NodeID(2), all[types.UserID(2)].ID())
-	})
-
-	t.Run("tagged node indexed under UserID(0)", func(t *testing.T) {
-		store := NewNodeStore(nil, allowAllPeersFunc, TestBatchSize, TestBatchTimeout)
-
-		store.Start()
-		defer store.Stop()
-
-		owned := createTestNode(1, 1, "user1", "node1")
-		owned.MachineKey = mk
-		tagged := createTestNode(3, 3, "user3", "node3")
-		tagged.MachineKey = mk
-		tagged.UserID = nil
-		tagged.User = nil
-		tagged.Tags = []string{"tag:foo"}
-
-		store.PutNode(owned)
-		store.PutNode(tagged)
-
-		all := store.GetNodesByMachineKeyAllUsers(mk)
-		require.Len(t, all, 2)
-		require.Equal(t, types.NodeID(1), all[types.UserID(1)].ID())
-		require.True(t, all[types.UserID(0)].IsTagged())
-		require.Equal(t, types.NodeID(3), all[types.UserID(0)].ID())
-	})
-}
diff --git a/hscontrol/state/persist_clobber_test.go b/hscontrol/state/persist_clobber_test.go
deleted file mode 100644
index b2ec961dd..000000000
--- a/hscontrol/state/persist_clobber_test.go
+++ /dev/null
@@ -1,71 +0,0 @@
-package state
-
-import (
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-// TestPersistNodeDoesNotClobberConcurrentAdminWrite ensures that persisting a
-// node snapshot captured earlier (as UpdateNodeFromMapRequest does at the top
-// of its body) cannot overwrite a concurrent admin write (SetNodeTags) that
-// landed in between. NodeStore is the source of truth; the database row must
-// converge on it rather than reverting to the stale snapshot.
-func TestPersistNodeDoesNotClobberConcurrentAdminWrite(t *testing.T) {
-	dbPath, s, nodeID := persistTestSetup(t)
-
-	pol := `{
-		"tagOwners": {"tag:foo": ["persist-user@"]},
-		"acls": [{"action": "accept", "src": ["*"], "dst": ["*:*"]}]
-	}`
-	_, err := s.SetPolicy([]byte(pol))
-	require.NoError(t, err)
-
-	before, ok := s.GetNodeByID(nodeID)
-	require.True(t, ok)
-	require.False(t, before.IsTagged(), "node should start user-owned")
-	require.True(t, before.UserID().Valid(), "node should start with a UserID")
-
-	// (1) Map-request captures the node snapshot (the stale view).
-	staleView, ok := s.nodeStore.GetNode(nodeID)
-	require.True(t, ok)
-
-	staleNode := staleView.AsStruct()
-	staleNode.Hostinfo = &tailcfg.Hostinfo{Hostname: "persist-node"}
-	staleView = staleNode.View()
-
-	// (2) Concurrent admin SetNodeTags lands in the window: NodeStore + DB
-	// become tagged and user ownership is cleared.
-	_, _, err = s.SetNodeTags(nodeID, []string{"tag:foo"})
-	require.NoError(t, err)
-
-	dbAfterAdmin, err := s.DB().GetNodeByID(nodeID)
-	require.NoError(t, err)
-	require.Equal(t, []string{"tag:foo"}, dbAfterAdmin.Tags.List(),
-		"precondition: admin SetNodeTags must have written the tag to the DB")
-
-	// (3) Map-request persists its stale snapshot.
-	_, _, err = s.persistNodeToDB(staleView)
-	require.NoError(t, err)
-
-	// The admin write must survive.
-	dbFinal, err := s.DB().GetNodeByID(nodeID)
-	require.NoError(t, err)
-	assert.Equal(t, []string{"tag:foo"}, dbFinal.Tags.List(),
-		"DB tags must reflect the admin SetNodeTags, not the stale persist")
-	assert.Nil(t, dbFinal.UserID,
-		"DB UserID must stay nil after tagging (tags XOR user ownership)")
-
-	// Restart: the divergence would surface here in production.
-	require.NoError(t, s.Close())
-	s2 := persistTestReopen(t, dbPath)
-
-	reloaded, ok := s2.GetNodeByID(nodeID)
-	require.True(t, ok, "node should reload from DB after restart")
-	assert.True(t, reloaded.IsTagged(),
-		"after restart the node must still be tagged")
-	assert.Equal(t, []string{"tag:foo"}, reloaded.AsStruct().Tags.List(),
-		"after restart the node must still carry tag:foo")
-}
diff --git a/hscontrol/state/persist_test.go b/hscontrol/state/persist_test.go
deleted file mode 100644
index 0be0b4115..000000000
--- a/hscontrol/state/persist_test.go
+++ /dev/null
@@ -1,584 +0,0 @@
-package state
-
-import (
-	"errors"
-	"net/netip"
-	"sync"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/hscontrol/util"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"gorm.io/gorm"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
-)
-
-// persistTestSetup pre-creates a sqlite database on disk with a single
-// registered node, then constructs a State that loads it. The on-disk
-// path is returned so the test can close the State and re-open one
-// against the same file to simulate a server restart. The caller owns
-// the returned State and must Close it; persistTestReopen handles the
-// second State's lifecycle for the restart simulation.
-func persistTestSetup(t *testing.T) (string, *State, types.NodeID) {
-	t.Helper()
-
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user := database.CreateUserForTest("persist-user")
-	node := database.CreateRegisteredNodeForTest(user, "persist-node")
-
-	require.NoError(t, database.Close())
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-
-	return dbPath, s, node.ID
-}
-
-// persistTestReopen constructs a fresh State pointed at the same
-// sqlite file and registers a cleanup to close it at the end of the
-// test. Use it to simulate a server restart after the first State has
-// been explicitly closed by the caller.
-func persistTestReopen(t *testing.T, dbPath string) *State {
-	t.Helper()
-
-	s, err := NewState(persistTestConfig(dbPath))
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	return s
-}
-
-func persistTestConfig(dbPath string) *types.Config {
-	prefixV4 := netip.MustParsePrefix("100.64.0.0/10")
-	prefixV6 := netip.MustParsePrefix("fd7a:115c:a1e0::/48")
-
-	return &types.Config{
-		Database: types.DatabaseConfig{
-			Type: types.DatabaseSqlite,
-			Sqlite: types.SqliteConfig{
-				Path: dbPath,
-			},
-		},
-		PrefixV4:     &prefixV4,
-		PrefixV6:     &prefixV6,
-		IPAllocation: types.IPAllocationStrategySequential,
-		BaseDomain:   "headscale.test",
-		Policy: types.PolicyConfig{
-			Mode: types.PolicyModeDB,
-		},
-		Tuning: types.Tuning{
-			NodeStoreBatchSize:    TestBatchSize,
-			NodeStoreBatchTimeout: TestBatchTimeout,
-		},
-	}
-}
-
-// TestPersistEmptyApprovedRoutes covers the State.SetApprovedRoutes
-// path. The gRPC handler builds the slice via append from a nil
-// declaration, so when the operator passes `-r ""` the persist layer
-// receives a nil []netip.Prefix. GORM's struct Updates skips nil
-// slices, so the column would stay populated with the previously
-// approved routes and a restart would re-apply them.
-func TestPersistEmptyApprovedRoutes(t *testing.T) {
-	dbPath, s, nodeID := persistTestSetup(t)
-
-	route := netip.MustParsePrefix("10.0.0.0/8")
-
-	_, _, err := s.SetApprovedRoutes(nodeID, []netip.Prefix{route})
-	require.NoError(t, err)
-
-	gotAfterApprove, err := s.DB().GetNodeByID(nodeID)
-	require.NoError(t, err)
-	require.Equal(t, []netip.Prefix{route}, gotAfterApprove.ApprovedRoutes.List(),
-		"approved_routes should hold the seeded route")
-
-	var noRoutes []netip.Prefix
-
-	_, _, err = s.SetApprovedRoutes(nodeID, noRoutes)
-	require.NoError(t, err)
-
-	gotAfterClear, err := s.DB().GetNodeByID(nodeID)
-	require.NoError(t, err)
-	assert.Empty(t, gotAfterClear.ApprovedRoutes,
-		"approved_routes should be empty after rejecting all routes, got %v",
-		gotAfterClear.ApprovedRoutes)
-
-	require.NoError(t, s.Close())
-
-	s2 := persistTestReopen(t, dbPath)
-
-	nv, ok := s2.GetNodeByID(nodeID)
-	require.True(t, ok, "node should be loaded from DB after restart")
-	assert.Empty(t, nv.AsStruct().ApprovedRoutes,
-		"after restart, NodeStore should reflect the cleared routes")
-}
-
-// TestPersistEmptyTags exercises the same persist path for the tags
-// column. State.SetNodeTags rejects an empty slice at the API level
-// (tags are one-way), so the test drives the bug surface directly via
-// NodeStore + persistNodeToDB, which is the same code path the public
-// SetApprovedRoutes call exercises.
-func TestPersistEmptyTags(t *testing.T) {
-	dbPath, s, nodeID := persistTestSetup(t)
-
-	_, ok := s.nodeStore.UpdateNode(nodeID, func(n *types.Node) {
-		n.Tags = []string{"tag:test"}
-	})
-	require.True(t, ok)
-
-	seeded, ok := s.nodeStore.GetNode(nodeID)
-	require.True(t, ok)
-
-	_, _, err := s.persistNodeToDB(seeded)
-	require.NoError(t, err)
-
-	gotAfterSeed, err := s.DB().GetNodeByID(nodeID)
-	require.NoError(t, err)
-	require.Equal(t, []string{"tag:test"}, gotAfterSeed.Tags.List(),
-		"tags should hold the seeded value")
-
-	cleared, ok := s.nodeStore.UpdateNode(nodeID, func(n *types.Node) {
-		n.Tags = nil
-	})
-	require.True(t, ok)
-
-	_, _, err = s.persistNodeToDB(cleared)
-	require.NoError(t, err)
-
-	gotAfterClear, err := s.DB().GetNodeByID(nodeID)
-	require.NoError(t, err)
-	assert.Empty(t, gotAfterClear.Tags,
-		"tags should be empty after clear, got %v", gotAfterClear.Tags)
-
-	require.NoError(t, s.Close())
-
-	s2 := persistTestReopen(t, dbPath)
-
-	nv, ok := s2.GetNodeByID(nodeID)
-	require.True(t, ok)
-	assert.Empty(t, nv.AsStruct().Tags,
-		"after restart, NodeStore should reflect the cleared tags")
-}
-
-// TestPersistEmptyEndpoints covers the endpoints column. Endpoints
-// arrive via MapRequest in production; the test reaches the persist
-// layer directly because the bug is in serialization, not in
-// upstream parsing.
-func TestPersistEmptyEndpoints(t *testing.T) {
-	dbPath, s, nodeID := persistTestSetup(t)
-
-	endpoint := netip.MustParseAddrPort("198.51.100.1:41641")
-
-	_, ok := s.nodeStore.UpdateNode(nodeID, func(n *types.Node) {
-		n.Endpoints = []netip.AddrPort{endpoint}
-	})
-	require.True(t, ok)
-
-	seeded, ok := s.nodeStore.GetNode(nodeID)
-	require.True(t, ok)
-
-	_, _, err := s.persistNodeToDB(seeded)
-	require.NoError(t, err)
-
-	gotAfterSeed, err := s.DB().GetNodeByID(nodeID)
-	require.NoError(t, err)
-	require.Equal(t, []netip.AddrPort{endpoint}, gotAfterSeed.Endpoints.List(),
-		"endpoints should hold the seeded value")
-
-	cleared, ok := s.nodeStore.UpdateNode(nodeID, func(n *types.Node) {
-		n.Endpoints = nil
-	})
-	require.True(t, ok)
-
-	_, _, err = s.persistNodeToDB(cleared)
-	require.NoError(t, err)
-
-	gotAfterClear, err := s.DB().GetNodeByID(nodeID)
-	require.NoError(t, err)
-	assert.Empty(t, gotAfterClear.Endpoints,
-		"endpoints should be empty after clear, got %v", gotAfterClear.Endpoints)
-
-	require.NoError(t, s.Close())
-
-	s2 := persistTestReopen(t, dbPath)
-
-	nv, ok := s2.GetNodeByID(nodeID)
-	require.True(t, ok)
-	assert.Empty(t, nv.AsStruct().Endpoints,
-		"after restart, NodeStore should reflect the cleared endpoints")
-}
-
-// TestRegistrationRejectsNodeKeyClaimedByAnotherMachine proves a new
-// registration cannot claim a NodeKey already bound to a different machine.
-// NodeKeys are public (peers learn them from the netmap), so without this
-// check an authenticated party can register a node carrying a victim's
-// NodeKey. That poisons the NodeStore NodeKey index (a map keyed on NodeKey,
-// last writer wins), so the victim's MapRequest resolves to the attacker's
-// node and is rejected by getAndValidateNode's MachineKey check (noise.go) —
-// a denial of service against the victim. getAndValidateNode already enforces
-// a 1:1 NodeKey<->MachineKey binding at poll time; this enforces the same
-// invariant at registration time.
-func TestRegistrationRejectsNodeKeyClaimedByAnotherMachine(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user := database.CreateUserForTest("nk-user")
-	require.NoError(t, database.Close())
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	sharedNodeKey := key.NewNode()
-
-	_, err = s.createAndSaveNewNode(newNodeParams{
-		User:           *user,
-		MachineKey:     key.NewMachine().Public(),
-		NodeKey:        sharedNodeKey.Public(),
-		DiscoKey:       key.NewDisco().Public(),
-		Hostname:       "victim",
-		RegisterMethod: util.RegisterMethodCLI,
-	})
-	require.NoError(t, err)
-
-	// A different machine tries to register carrying the victim's NodeKey.
-	_, err = s.createAndSaveNewNode(newNodeParams{
-		User:           *user,
-		MachineKey:     key.NewMachine().Public(),
-		NodeKey:        sharedNodeKey.Public(),
-		DiscoKey:       key.NewDisco().Public(),
-		Hostname:       "attacker",
-		RegisterMethod: util.RegisterMethodCLI,
-	})
-	require.Error(t, err,
-		"registering a NodeKey already bound to another machine must be rejected")
-}
-
-// TestReauthRejectsNodeKeyClaimedByAnotherMachine proves the re-auth/update
-// path enforces the same 1:1 NodeKey<->MachineKey binding as the create path
-// (TestRegistrationRejectsNodeKeyClaimedByAnotherMachine) and the poll path
-// (getAndValidateNode). Without it, a node re-authenticating could rotate its
-// NodeKey to a victim's, poisoning the NodeStore NodeKey index so the victim's
-// MapRequest resolves to the attacker's node and is rejected — a DoS.
-func TestReauthRejectsNodeKeyClaimedByAnotherMachine(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	attacker := database.CreateUserForTest("attacker")
-	victim := database.CreateUserForTest("victim")
-	require.NoError(t, database.Close())
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	victimNodeKey := key.NewNode()
-	attackerMachine := key.NewMachine()
-
-	// Victim's node holds victimNodeKey.
-	_, err = s.createAndSaveNewNode(newNodeParams{
-		User:           *victim,
-		MachineKey:     key.NewMachine().Public(),
-		NodeKey:        victimNodeKey.Public(),
-		DiscoKey:       key.NewDisco().Public(),
-		Hostname:       "victim",
-		RegisterMethod: util.RegisterMethodCLI,
-	})
-	require.NoError(t, err)
-
-	// Attacker registers its own node.
-	attackerNode, err := s.createAndSaveNewNode(newNodeParams{
-		User:           *attacker,
-		MachineKey:     attackerMachine.Public(),
-		NodeKey:        key.NewNode().Public(),
-		DiscoKey:       key.NewDisco().Public(),
-		Hostname:       "attacker",
-		RegisterMethod: util.RegisterMethodCLI,
-	})
-	require.NoError(t, err)
-
-	// Attacker re-authenticates its own node but supplies the victim's NodeKey.
-	_, err = s.applyAuthNodeUpdate(authNodeUpdateParams{
-		ExistingNode: attackerNode,
-		RegData: &types.RegistrationData{
-			MachineKey: attackerMachine.Public(),
-			NodeKey:    victimNodeKey.Public(),
-			Hostname:   "attacker",
-			Hostinfo:   &tailcfg.Hostinfo{},
-		},
-		ValidHostinfo:  &tailcfg.Hostinfo{},
-		Hostname:       "attacker",
-		User:           attacker,
-		RegisterMethod: util.RegisterMethodCLI,
-	})
-	require.Error(t, err,
-		"re-auth claiming a NodeKey bound to another machine must be rejected")
-}
-
-// TestReauthPreservesEndpointsWhenClientOmitsThem proves the re-auth/update
-// path keeps a node's live WireGuard endpoints when the originating
-// RegisterRequest carried none. Web/OIDC relogins report endpoints via
-// MapRequest, not register, so RegData.Endpoints is empty; wiping the stored
-// endpoints would advertise the re-keyed node to peers endpoint-less, which
-// drives head/unstable tailscale clients into one-way disco-deafness.
-func TestReauthPreservesEndpointsWhenClientOmitsThem(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user := database.CreateUserForTest("user")
-	require.NoError(t, database.Close())
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	machine := key.NewMachine()
-	endpoints := []netip.AddrPort{
-		netip.MustParseAddrPort("192.168.1.5:41641"),
-		netip.MustParseAddrPort("10.0.0.5:41641"),
-	}
-
-	// Node is registered and has reported live endpoints (as after its first
-	// MapRequest).
-	node, err := s.createAndSaveNewNode(newNodeParams{
-		User:           *user,
-		MachineKey:     machine.Public(),
-		NodeKey:        key.NewNode().Public(),
-		DiscoKey:       key.NewDisco().Public(),
-		Hostname:       "node",
-		Endpoints:      endpoints,
-		RegisterMethod: util.RegisterMethodCLI,
-	})
-	require.NoError(t, err)
-	require.Equal(t, endpoints, node.Endpoints().AsSlice(),
-		"precondition: node has live endpoints")
-
-	// Node re-authenticates, rotating its NodeKey. The RegisterRequest carries
-	// no endpoints.
-	updated, err := s.applyAuthNodeUpdate(authNodeUpdateParams{
-		ExistingNode: node,
-		RegData: &types.RegistrationData{
-			MachineKey: machine.Public(),
-			NodeKey:    key.NewNode().Public(),
-			Hostname:   "node",
-			Hostinfo:   &tailcfg.Hostinfo{},
-			Endpoints:  nil,
-		},
-		ValidHostinfo:  &tailcfg.Hostinfo{},
-		Hostname:       "node",
-		User:           user,
-		RegisterMethod: util.RegisterMethodCLI,
-	})
-	require.NoError(t, err)
-
-	assert.Equal(t, endpoints, updated.Endpoints().AsSlice(),
-		"re-auth without reported endpoints must preserve the node's live endpoints")
-}
-
-// TestReauthChange covers the decision both re-auth paths share: a same-user
-// relogin must be an incremental peer patch (so the tailscale client takes its
-// fast patch path), never a whole-node add (which strands a re-keyed,
-// momentarily-endpoint-less peer disco-deaf); a policy change forces a full
-// recompute; a new node is a whole-node add.
-func TestReauthChange(t *testing.T) {
-	n := types.Node{
-		ID:       7,
-		NodeKey:  key.NewNode().Public(),
-		DiscoKey: key.NewDisco().Public(),
-	}
-	node := n.View()
-
-	relogin := reauthChange(node, true, false)
-	assert.Len(t, relogin.PeerPatches, 1, "relogin must be a peer patch")
-	assert.Empty(t, relogin.PeersChanged, "relogin must not be a whole-node add")
-
-	added := reauthChange(node, false, false)
-	assert.Empty(t, added.PeerPatches)
-	assert.Len(t, added.PeersChanged, 1, "a new node must be a whole-node add")
-
-	pol := reauthChange(node, true, true)
-	assert.Empty(t, pol.PeerPatches, "a policy change must not be a peer patch")
-	assert.Empty(t, pol.PeersChanged)
-	assert.False(t, pol.IsEmpty(), "a policy change must be non-empty")
-}
-
-// TestPreAuthKeyReauthRejectsNodeKeyClaimedByAnotherMachine is the pre-auth-key
-// analogue of TestReauthRejectsNodeKeyClaimedByAnotherMachine: re-registering
-// via a pre-auth key must enforce the same 1:1 NodeKey<->MachineKey binding the
-// auth path and poll-time validation enforce, so a node cannot rotate its key
-// to a victim's and poison the NodeStore NodeKey index.
-func TestPreAuthKeyReauthRejectsNodeKeyClaimedByAnotherMachine(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	attacker := s.CreateUserForTest("attacker")
-	victim := s.CreateUserForTest("victim")
-
-	victimMachine := key.NewMachine()
-	victimNodeKey := key.NewNode()
-	_, err = s.createAndSaveNewNode(newNodeParams{
-		User:           *victim,
-		MachineKey:     victimMachine.Public(),
-		NodeKey:        victimNodeKey.Public(),
-		DiscoKey:       key.NewDisco().Public(),
-		Hostname:       "victim",
-		RegisterMethod: util.RegisterMethodCLI,
-	})
-	require.NoError(t, err)
-
-	// Attacker registers its own node with a reusable pre-auth key.
-	pak, err := s.CreatePreAuthKey(attacker.TypedID(), true, false, nil, nil)
-	require.NoError(t, err)
-
-	attackerMachine := key.NewMachine()
-	regReq := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey:  key.NewNode().Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "attacker"},
-		Expiry:   time.Now().Add(24 * time.Hour),
-	}
-	_, _, err = s.HandleNodeFromPreAuthKey(regReq, attackerMachine.Public())
-	require.NoError(t, err)
-
-	// Attacker re-registers its own node but supplies the victim's NodeKey.
-	attack := regReq
-	attack.NodeKey = victimNodeKey.Public()
-	_, _, err = s.HandleNodeFromPreAuthKey(attack, attackerMachine.Public())
-	require.ErrorIs(t, err, ErrNodeKeyInUse,
-		"pre-auth-key re-registration claiming another machine's NodeKey must be rejected")
-
-	// The victim still owns its NodeKey.
-	owner, ok := s.GetNodeByNodeKey(victimNodeKey.Public())
-	require.True(t, ok)
-	require.Equal(t, victimMachine.Public(), owner.MachineKey(),
-		"victim's NodeKey index entry must be untouched")
-}
-
-var errInjectedNodeUpdate = errors.New("injected node update failure")
-
-// TestPreAuthKeyReauthRevertsNodeStoreOnDBFailure ensures a failed database
-// write during pre-auth-key re-registration does not leave the NodeStore
-// holding a node key that was never persisted: a restart would reload the old
-// row and the client's current key would no longer resolve, locking it out.
-func TestPreAuthKeyReauthRevertsNodeStoreOnDBFailure(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	user := s.CreateUserForTest("reauth-user")
-
-	pak, err := s.CreatePreAuthKey(user.TypedID(), true, false, nil, nil)
-	require.NoError(t, err)
-
-	machineKey := key.NewMachine()
-	regReq := tailcfg.RegisterRequest{
-		Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-		NodeKey:  key.NewNode().Public(),
-		Hostinfo: &tailcfg.Hostinfo{Hostname: "reauth-node"},
-		Expiry:   time.Now().Add(24 * time.Hour),
-	}
-	node, _, err := s.HandleNodeFromPreAuthKey(regReq, machineKey.Public())
-	require.NoError(t, err)
-
-	origNodeKey := node.NodeKey()
-
-	// Fail the node row update so the re-registration's database write errors
-	// after the NodeStore has already been mutated.
-	require.NoError(t, s.db.DB.Callback().Update().Before("gorm:update").
-		Register("fail_node_update", func(tx *gorm.DB) {
-			if tx.Statement.Table == "nodes" {
-				_ = tx.AddError(errInjectedNodeUpdate)
-			}
-		}))
-
-	reReg := regReq
-	reReg.NodeKey = key.NewNode().Public() // rotate -> NodeStore mutation, then DB write fails
-	_, _, err = s.HandleNodeFromPreAuthKey(reReg, machineKey.Public())
-	require.NoError(t, s.db.DB.Callback().Update().Remove("fail_node_update"))
-	require.Error(t, err, "re-registration must fail when the database write fails")
-
-	got, ok := s.nodeStore.GetNode(node.ID())
-	require.True(t, ok)
-	require.Equal(t, origNodeKey, got.NodeKey(),
-		"NodeStore must revert to the persisted node key when the write fails")
-}
-
-// TestConcurrentPreAuthKeyRegistrationSameMachineKey ensures concurrent
-// registrations of the same machine key resolve to a single node. Without
-// serialising the find-then-create section, each request sees "no existing
-// node" and creates its own, leaving duplicate nodes and IP allocations for
-// one machine.
-func TestConcurrentPreAuthKeyRegistrationSameMachineKey(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	user := s.CreateUserForTest("concurrent-user")
-
-	pak, err := s.CreatePreAuthKey(user.TypedID(), true, false, nil, nil)
-	require.NoError(t, err)
-
-	machineKey := key.NewMachine()
-
-	const n = 12
-
-	var wg sync.WaitGroup
-
-	start := make(chan struct{})
-	errs := make(chan error, n)
-
-	for range n {
-		wg.Go(func() {
-			regReq := tailcfg.RegisterRequest{
-				Auth:     &tailcfg.RegisterResponseAuth{AuthKey: pak.Key},
-				NodeKey:  key.NewNode().Public(),
-				Hostinfo: &tailcfg.Hostinfo{Hostname: "concurrent-node"},
-				Expiry:   time.Now().Add(24 * time.Hour),
-			}
-
-			<-start
-
-			_, _, err := s.HandleNodeFromPreAuthKey(regReq, machineKey.Public())
-			errs <- err
-		})
-	}
-
-	close(start)
-	wg.Wait()
-	close(errs)
-
-	for err := range errs {
-		require.NoError(t, err)
-	}
-
-	require.Equal(t, 1, s.ListNodes().Len(),
-		"concurrent registrations of one machine key must yield a single node")
-}
diff --git a/hscontrol/state/ping.go b/hscontrol/state/ping.go
index 2f688b946..43cf6914b 100644
--- a/hscontrol/state/ping.go
+++ b/hscontrol/state/ping.go
@@ -5,15 +5,15 @@ import (
 	"time"
 
 	"github.com/juanfont/headscale/hscontrol/types"
-	"tailscale.com/util/rands"
+	"github.com/juanfont/headscale/hscontrol/util"
 )
 
 const pingIDLength = 16
 
-// pingTracker correlates outgoing [tailcfg.PingRequest]s with incoming HEAD
+// pingTracker correlates outgoing PingRequests with incoming HEAD
 // callbacks. Entries have no server-side TTL: callers are responsible
-// for cleaning up via [pingTracker.cancel] or by reading from the response
-// channel within their own timeout.
+// for cleaning up via CancelPing or by reading from the response channel
+// within their own timeout.
 type pingTracker struct {
 	mu      sync.Mutex
 	pending map[string]*pendingPing
@@ -35,7 +35,7 @@ func newPingTracker() *pingTracker {
 // channel that receives the round-trip latency once the response
 // arrives.
 func (pt *pingTracker) register(nodeID types.NodeID) (string, <-chan time.Duration) {
-	pingID := rands.HexString(pingIDLength)
+	pingID, _ := util.GenerateRandomStringDNSSafe(pingIDLength)
 	ch := make(chan time.Duration, 1)
 
 	pt.mu.Lock()
@@ -80,7 +80,7 @@ func (pt *pingTracker) cancel(pingID string) {
 }
 
 // drain closes every outstanding response channel and clears the map.
-// Called from [State.Close] to unblock any caller still waiting on a
+// Called from State.Close to unblock any caller still waiting on a
 // channel that will never receive.
 func (pt *pingTracker) drain() {
 	pt.mu.Lock()
@@ -93,7 +93,7 @@ func (pt *pingTracker) drain() {
 }
 
 // RegisterPing tracks a pending ping and returns its ID and a channel
-// for the latency. Callers must defer [State.CancelPing] or read the channel
+// for the latency. Callers must defer CancelPing or read the channel
 // within their own timeout; there is no server-side TTL.
 func (s *State) RegisterPing(nodeID types.NodeID) (string, <-chan time.Duration) {
 	return s.pings.register(nodeID)
diff --git a/hscontrol/state/primaries_property_test.go b/hscontrol/state/primaries_property_test.go
index 6507e2350..2c583f768 100644
--- a/hscontrol/state/primaries_property_test.go
+++ b/hscontrol/state/primaries_property_test.go
@@ -2,7 +2,6 @@ package state
 
 import (
 	"fmt"
-	"maps"
 	"net/netip"
 	"slices"
 	"testing"
@@ -24,19 +23,6 @@ import (
 // the same answer from a separate, deliberately direct implementation.
 type primariesModel struct {
 	connected map[types.NodeID]bool
-	// announced mirrors Hostinfo.RoutableIPs — what the client says
-	// it can route. The election does not look at this directly; it
-	// is used to recompute the effective set whenever ApprovedRoutes
-	// changes without a Hostinfo update.
-	announced map[types.NodeID][]netip.Prefix
-	// approved mirrors node.ApprovedRoutes — what the admin policy
-	// allows. SetApprovedRoutes touches this without touching
-	// announced; ConnectAdvertise / ApprovedRoutesChange touch both.
-	approved map[types.NodeID][]netip.Prefix
-	// prefixes is the effective per-node route set —
-	// AllApprovedRoutes in the implementation, i.e. (announced ∩
-	// approved) excluding exit routes. This is what the election
-	// sees, and what the model uses in advertisersByPrefix.
 	prefixes  map[types.NodeID][]netip.Prefix
 	unhealthy map[types.NodeID]bool
 
@@ -50,42 +36,12 @@ type primariesModel struct {
 func newPrimariesModel() *primariesModel {
 	return &primariesModel{
 		connected: map[types.NodeID]bool{},
-		announced: map[types.NodeID][]netip.Prefix{},
-		approved:  map[types.NodeID][]netip.Prefix{},
 		prefixes:  map[types.NodeID][]netip.Prefix{},
 		unhealthy: map[types.NodeID]bool{},
 		primary:   map[netip.Prefix]types.NodeID{},
 	}
 }
 
-// recomputeEffective sets m.prefixes[id] to the intersection of
-// m.announced[id] and m.approved[id]. Empty intersections clear the
-// node from m.prefixes entirely. Matches Node.AllApprovedRoutes /
-// SubnetRoutes semantics (exit routes excluded — none of the test
-// prefixes hit that branch).
-func (m *primariesModel) recomputeEffective(id types.NodeID) {
-	ann := m.announced[id]
-	app := m.approved[id]
-
-	if len(ann) == 0 || len(app) == 0 {
-		delete(m.prefixes, id)
-		return
-	}
-
-	eff := make([]netip.Prefix, 0, len(ann))
-	for _, p := range ann {
-		if slices.Contains(app, p) {
-			eff = append(eff, p)
-		}
-	}
-
-	if len(eff) == 0 {
-		delete(m.prefixes, id)
-	} else {
-		m.prefixes[id] = eff
-	}
-}
-
 // advertisersByPrefix returns the connected nodes that announce each
 // prefix, sorted by NodeID (matches computePrimaries' iteration).
 func (m *primariesModel) advertisersByPrefix() map[netip.Prefix][]types.NodeID {
@@ -141,21 +97,18 @@ func (m *primariesModel) updatePrimaries() {
 			}
 		}
 
-		// All-unhealthy fallback: preserve the previous primary if it
-		// is still a candidate, otherwise leave the prefix unmapped.
-		// Choosing any candidate would point peers at a node already
-		// declared unreachable; the model mirrors that policy.
 		if !found && len(nodes) >= 1 {
 			if cur, ok := m.primary[p]; ok && slices.Contains(nodes, cur) {
 				selected = cur
-				found = true
+			} else {
+				selected = nodes[0]
 			}
+
+			found = true
 		}
 
 		if found {
 			m.primary[p] = selected
-		} else {
-			delete(m.primary, p)
 		}
 	}
 }
@@ -197,16 +150,8 @@ func samePrefixSet(a, b []netip.Prefix) bool {
 }
 
 // checkPrimariesProperties asserts every rule we expect of the snapshot's
-// primaries map given the model. prevSnapshotPrimaries is the snapshot's
-// PrimaryRoutes() reading taken before the just-applied op, used to
-// catch flap regressions that move primary off a still-eligible owner.
-func checkPrimariesProperties(
-	rt *rapid.T,
-	ns *NodeStore,
-	m *primariesModel,
-	nodeIDs []types.NodeID,
-	prevSnapshotPrimaries map[netip.Prefix]types.NodeID,
-) {
+// primaries map given the model.
+func checkPrimariesProperties(rt *rapid.T, ns *NodeStore, m *primariesModel, nodeIDs []types.NodeID) {
 	rt.Helper()
 
 	expectedByNode := map[types.NodeID][]netip.Prefix{}
@@ -234,9 +179,9 @@ func checkPrimariesProperties(
 	}
 
 	// Every prefix that has at least one connected advertiser must
-	// have a primary in the snapshot: a prefix silently losing its
-	// primary after a disconnect/reconnect cycle would leave peers
-	// without a route.
+	// have a primary in the snapshot. Issue #3203 manifests as a
+	// prefix silently losing its primary after a disconnect/reconnect
+	// cycle.
 	for _, p := range m.allPrefixes() {
 		want, expectExists := m.primary[p]
 		if !expectExists {
@@ -258,105 +203,6 @@ func checkPrimariesProperties(
 			)
 		}
 	}
-
-	// Structural invariants on the live snapshot, independent of the
-	// model. These catch shapes the model alone cannot — e.g. an owner
-	// that is offline but still has the prefix attributed to it.
-	snapshotPrimaries := ns.PrimaryRoutes()
-
-	// A primary that owns ≥1 prefix in `routes` must also light up
-	// `isPrimaryRoute` (PrimaryRoutesForNode returns nil unless the
-	// id is in that map). The inverse check — PrimaryRoutesForNode
-	// returning the right prefixes — is already covered above; this
-	// catches the reverse direction.
-	ownersInRoutes := map[types.NodeID]bool{}
-	for _, owner := range snapshotPrimaries {
-		ownersInRoutes[owner] = true
-	}
-
-	for owner := range ownersInRoutes {
-		if got := ns.PrimaryRoutesForNode(owner); len(got) == 0 {
-			rt.Fatalf(
-				"node %d owns a prefix in routes but PrimaryRoutesForNode is empty",
-				owner,
-			)
-		}
-	}
-
-	// Per-owner structural checks: every primary must currently be
-	// online and must currently advertise the prefix it owns.
-	advertisersByPrefix := m.advertisersByPrefix()
-
-	for prefix, owner := range snapshotPrimaries {
-		nv, ok := ns.GetNode(owner)
-		if !ok || !nv.Valid() {
-			rt.Fatalf(
-				"prefix %s primary %d not present in NodeStore",
-				prefix, owner,
-			)
-		}
-
-		// Primary is online: an offline node cannot move packets, so
-		// election must never leave one as the snapshot's primary.
-		online, known := nv.IsOnline().GetOk()
-		if !known || !online {
-			rt.Fatalf(
-				"prefix %s primary %d is not online",
-				prefix, owner,
-			)
-		}
-
-		// Primary advertises the prefix: AllApprovedRoutes (subnet ∪
-		// exit) must contain it. A primary that no longer advertises
-		// is a stale assignment the snapshot rebuild failed to clear.
-		approved := nv.AllApprovedRoutes()
-		if !slices.Contains(approved, prefix) {
-			rt.Fatalf(
-				"prefix %s primary %d does not advertise it (approved=%v)",
-				prefix, owner, approved,
-			)
-		}
-
-		// Healthy preference: if any candidate for this prefix is
-		// healthy, the elected primary must also be healthy. Leaving
-		// the prefix unmapped is fine; pointing at an unhealthy
-		// candidate while a healthy one was available is not.
-		candidates := advertisersByPrefix[prefix]
-		anyHealthy := false
-
-		for _, c := range candidates {
-			if !m.unhealthy[c] {
-				anyHealthy = true
-				break
-			}
-		}
-
-		if anyHealthy && m.unhealthy[owner] {
-			rt.Fatalf(
-				"prefix %s primary %d is unhealthy but %v had a healthy candidate",
-				prefix, owner, candidates,
-			)
-		}
-
-		// Anti-flap: if the previous snapshot already had a primary
-		// for this prefix AND that primary is still a healthy
-		// candidate after the op, the election must keep it. Flapping
-		// the primary for an unrelated reason violates the contract
-		// the integration tests rely on (HA failover only moves on
-		// loss of candidacy or health).
-		if prev, hadPrev := prevSnapshotPrimaries[prefix]; hadPrev {
-			stillCandidate := slices.Contains(candidates, prev)
-			stillHealthy := !m.unhealthy[prev]
-
-			if stillCandidate && stillHealthy && owner != prev {
-				rt.Fatalf(
-					"prefix %s flapped primary %d -> %d "+
-						"while previous primary was still a healthy candidate",
-					prefix, prev, owner,
-				)
-			}
-		}
-	}
 }
 
 // nodeForRapid builds a minimal types.Node for use in property
@@ -378,41 +224,16 @@ func nodeForRapid(id types.NodeID) types.Node {
 	}
 }
 
-// snapshotPrimariesCopy returns a defensive copy of the snapshot's
-// prefix→primary map so the caller can compare against a later
-// snapshot without aliasing the live map.
-func snapshotPrimariesCopy(ns *NodeStore) map[netip.Prefix]types.NodeID {
-	live := ns.PrimaryRoutes()
-
-	out := make(map[netip.Prefix]types.NodeID, len(live))
-	maps.Copy(out, live)
-
-	return out
-}
-
 // TestPrimaryRoutesProperty drives NodeStore with a randomised
 // sequence of high-level operations and checks that the snapshot's
 // primaries map matches a reference model after every step.
 //
-// Op set (covers the dual-disconnect, batched-probe, and
-// all-unhealthy-fallback shapes that election has to handle):
-//
-//   - ConnectAdvertise: online + advertise prefs, clear Unhealthy
-//   - Disconnect: offline; ApprovedRoutes persists
-//   - ProbeUnhealthy: set Unhealthy
-//   - ProbeHealthy: clear Unhealthy
-//   - ApprovedRoutesChange: change advertised prefs without touching health
-//   - BatchProbeResults: apply a batch of health flips through
-//     UpdateNodes so the election runs once for the cycle, matching
-//     State.BatchSetNodeHealth
-//   - SimultaneousDisconnect: mark multiple nodes offline atomically
-//     via UpdateNodes (the dual-cable-pull shape)
-//   - SetApprovedRoutes: change ApprovedRoutes while leaving
-//     Hostinfo.RoutableIPs alone — exercises the asymmetry between
-//     announced and approved
-//   - OfflineExpiry: IsOnline=false WITHOUT clearing Unhealthy
-//     (matches the Disconnect path's actual semantics versus
-//     ConnectAdvertise's full reset)
+// Background: issue #3203 reports that HA tracking enters a stuck
+// state after a sequence of disconnect/reconnect events. The narrow
+// integration and servertest reproductions written for the bug do
+// not fail on upstream/main, so this property test broadens the
+// search by letting rapid generate sequences we have not enumerated
+// by hand.
 func TestPrimaryRoutesProperty(t *testing.T) {
 	rapid.Check(t, func(rt *rapid.T) {
 		const numNodes = 4
@@ -444,29 +265,14 @@ func TestPrimaryRoutesProperty(t *testing.T) {
 			0, len(prefixes),
 			func(p netip.Prefix) string { return p.String() },
 		)
-		// nodeSubsetGen draws 1..N distinct node IDs for the batched
-		// ops. SliceOfNDistinct's lower bound is inclusive, so 1 is
-		// the smallest sensible batch — a zero-size batch is a no-op
-		// the rapid harness should not waste shrinking cycles on.
-		nodeSubsetGen := rapid.SliceOfNDistinct(
-			nodeGen,
-			1, numNodes,
-			func(id types.NodeID) types.NodeID { return id },
-		)
 
-		opCount := rapid.IntRange(5, 200).Draw(rt, "opCount")
+		opCount := rapid.IntRange(5, 60).Draw(rt, "opCount")
 		for step := range opCount {
-			op := rapid.IntRange(0, 8).Draw(rt, fmt.Sprintf("op_%d", step))
-
-			// Snapshot primaries before applying the op so the
-			// anti-flap invariant has a stable reference. Reading
-			// after the model has already changed would compare a
-			// stale snapshot to a moved model.
-			prevPrimaries := snapshotPrimariesCopy(ns)
+			op := rapid.IntRange(0, 4).Draw(rt, fmt.Sprintf("op_%d", step))
+			id := nodeGen.Draw(rt, fmt.Sprintf("id_%d", step))
 
 			switch op {
 			case 0: // ConnectAdvertise — Connect path clears Unhealthy.
-				id := nodeGen.Draw(rt, fmt.Sprintf("id_%d", step))
 				prefs := prefixSubsetGen.Draw(rt, fmt.Sprintf("prefs_%d", step))
 
 				ns.UpdateNode(id, func(n *types.Node) {
@@ -476,41 +282,35 @@ func TestPrimaryRoutesProperty(t *testing.T) {
 					n.ApprovedRoutes = prefs
 				})
 
-				m.announced[id] = prefs
-				m.approved[id] = prefs
-				m.recomputeEffective(id)
-
 				if len(prefs) == 0 {
 					delete(m.connected, id)
+					delete(m.prefixes, id)
 				} else {
 					m.connected[id] = true
+					m.prefixes[id] = prefs
 				}
 
 				delete(m.unhealthy, id)
 
 			case 1: // Disconnect — IsOnline=false; ApprovedRoutes persists.
-				id := nodeGen.Draw(rt, fmt.Sprintf("id_%d", step))
 				ns.UpdateNode(id, func(n *types.Node) {
 					n.IsOnline = new(false)
 				})
 				delete(m.connected, id)
 
 			case 2: // ProbeUnhealthy — HA prober marks node bad.
-				id := nodeGen.Draw(rt, fmt.Sprintf("id_%d", step))
 				ns.UpdateNode(id, func(n *types.Node) {
 					n.Unhealthy = true
 				})
 				m.unhealthy[id] = true
 
 			case 3: // ProbeHealthy — HA prober marks node good.
-				id := nodeGen.Draw(rt, fmt.Sprintf("id_%d", step))
 				ns.UpdateNode(id, func(n *types.Node) {
 					n.Unhealthy = false
 				})
 				delete(m.unhealthy, id)
 
 			case 4: // ApprovedRoutesChange — change advertised prefs without touching health.
-				id := nodeGen.Draw(rt, fmt.Sprintf("id_%d", step))
 				prefs := prefixSubsetGen.Draw(rt, fmt.Sprintf("prefs_%d", step))
 
 				ns.UpdateNode(id, func(n *types.Node) {
@@ -519,107 +319,18 @@ func TestPrimaryRoutesProperty(t *testing.T) {
 					n.ApprovedRoutes = prefs
 				})
 
-				m.announced[id] = prefs
-				m.approved[id] = prefs
-				m.recomputeEffective(id)
-
 				if len(prefs) == 0 {
 					delete(m.connected, id)
+					delete(m.prefixes, id)
 				} else {
 					m.connected[id] = true
+					m.prefixes[id] = prefs
 				}
-
-			case 5: // BatchProbeResults — atomic health flips per cycle.
-				// Mirrors State.BatchSetNodeHealth: per-node
-				// (id, unhealthy) pairs applied through UpdateNodes
-				// so the election runs once on the post-batch state.
-				// Per-call publication would let an intermediate
-				// "one unhealthy, one healthy" snapshot re-elect off
-				// the still-healthy node before the second flip
-				// landed.
-				ids := nodeSubsetGen.Draw(rt, fmt.Sprintf("batch_ids_%d", step))
-
-				results := make(map[types.NodeID]bool, len(ids))
-				for i, id := range ids {
-					unhealthy := rapid.Bool().Draw(rt, fmt.Sprintf("batch_h_%d_%d", step, i))
-					results[id] = unhealthy
-				}
-
-				fns := make(map[types.NodeID]UpdateNodeFunc, len(results))
-				for id, unhealthy := range results {
-					fns[id] = func(n *types.Node) {
-						n.Unhealthy = unhealthy
-					}
-				}
-
-				ns.UpdateNodes(fns)
-
-				for id, unhealthy := range results {
-					if unhealthy {
-						m.unhealthy[id] = true
-					} else {
-						delete(m.unhealthy, id)
-					}
-				}
-
-			case 6: // SimultaneousDisconnect — multiple offline in one batch.
-				// Dual-cable-pull shape: two HA routers' poll
-				// sessions both close in the same NodeStore tick.
-				// Per-call Disconnect could leave the snapshot
-				// momentarily pointing at an offline owner; the
-				// batched form forces a single rebuild.
-				ids := nodeSubsetGen.Draw(rt, fmt.Sprintf("disc_ids_%d", step))
-
-				fns := make(map[types.NodeID]UpdateNodeFunc, len(ids))
-				for _, id := range ids {
-					fns[id] = func(n *types.Node) {
-						n.IsOnline = new(false)
-					}
-				}
-
-				ns.UpdateNodes(fns)
-
-				for _, id := range ids {
-					delete(m.connected, id)
-				}
-
-			case 7: // SetApprovedRoutes — change ApprovedRoutes only.
-				// SetApprovedRoutes in production updates only
-				// node.ApprovedRoutes; Hostinfo.RoutableIPs (what
-				// the client announced) is set by the next
-				// MapRequest. SubnetRoutes intersects the two, so
-				// dropping ApprovedRoutes mid-flight shrinks the
-				// advertised set immediately while announcement
-				// alone never extends it.
-				id := nodeGen.Draw(rt, fmt.Sprintf("setapp_id_%d", step))
-				prefs := prefixSubsetGen.Draw(rt, fmt.Sprintf("setapp_prefs_%d", step))
-
-				ns.UpdateNode(id, func(n *types.Node) {
-					n.ApprovedRoutes = prefs
-				})
-
-				m.approved[id] = prefs
-				m.recomputeEffective(id)
-
-			case 8: // OfflineExpiry — IsOnline=false, KEEP Unhealthy.
-				// The Disconnect path does not clear Unhealthy
-				// (only ConnectAdvertise does on the way back
-				// up). A probe that marks unhealthy and a grace-
-				// period disconnect that lands later leaves the
-				// node with a stale Unhealthy bit; the test
-				// exercises that shape.
-				id := nodeGen.Draw(rt, fmt.Sprintf("expire_id_%d", step))
-				ns.UpdateNode(id, func(n *types.Node) {
-					n.IsOnline = new(false)
-				})
-
-				delete(m.connected, id)
-				// m.unhealthy[id] is intentionally NOT cleared.
 			}
 
 			m.updatePrimaries()
 
-			checkPrimariesProperties(rt, ns, m, nodeIDs, prevPrimaries)
+			checkPrimariesProperties(rt, ns, m, nodeIDs)
 		}
 	})
 }
diff --git a/hscontrol/state/primaries_test.go b/hscontrol/state/primaries_test.go
index 1ad13d156..ab6116a3e 100644
--- a/hscontrol/state/primaries_test.go
+++ b/hscontrol/state/primaries_test.go
@@ -72,7 +72,7 @@ func (f *primariesFixture) disconnect(id types.NodeID) {
 	})
 }
 
-// unhealthy mirrors State.SetNodeHealth(id, false).
+// unhealthy mirrors State.SetNodeUnhealthy(id, true).
 func (f *primariesFixture) unhealthy(id types.NodeID) {
 	f.t.Helper()
 	f.ns.UpdateNode(id, func(n *types.Node) {
@@ -80,7 +80,7 @@ func (f *primariesFixture) unhealthy(id types.NodeID) {
 	})
 }
 
-// healthy mirrors State.SetNodeHealth(id, true).
+// healthy mirrors State.SetNodeUnhealthy(id, false).
 func (f *primariesFixture) healthy(id types.NodeID) {
 	f.t.Helper()
 	f.ns.UpdateNode(id, func(n *types.Node) {
@@ -218,12 +218,12 @@ func TestPrimaries_AllUnhealthyKeepsAPrimary(t *testing.T) {
 }
 
 func TestPrimaries_AllUnhealthyPreservesPrevious(t *testing.T) {
-	// Once a failover has moved primary to a higher-ID node, a
-	// subsequent all-unhealthy state must NOT churn primary back to
-	// the lowest-ID candidate. Under cable-pull semantics both nodes
-	// can linger as IsOnline=true (half-open TCP) and both go
-	// Unhealthy — naive `candidates[0]` would flap the primary to a
-	// node that is itself unreachable.
+	// Issue #3203: once a failover has moved primary to a higher-ID
+	// node, a subsequent all-unhealthy state must NOT churn primary
+	// back to the lowest-ID candidate. Under cable-pull semantics
+	// both nodes can linger as IsOnline=true (half-open TCP) and
+	// both go Unhealthy — naive `candidates[0]` would flap the
+	// primary to a node that is itself unreachable.
 	prefix := mp("10.0.0.0/24")
 	f := newPrimariesFixture(t, 1, 2)
 	f.advertise(1, prefix)
@@ -247,11 +247,12 @@ func TestPrimaries_ExitRouteNotElected(t *testing.T) {
 	f.requireNoPrimary(exitV4)
 }
 
-func TestPrimaries_BothOfflineThenOneReturns(t *testing.T) {
-	// With two HA advertisers, dropping both then bringing one back
-	// used to leave the prefix without any primary. The snapshot
-	// recomputes primaries on every NodeStore write, so the
-	// returning advertiser must be elected.
+func TestPrimaries_RegressionIssue3203_BothOfflineThenOneReturns(t *testing.T) {
+	// Issue #3203: with two HA advertisers, dropping both then
+	// bringing one back used to leave the prefix without any
+	// primary. After the refactor the snapshot recomputes primaries
+	// on every NodeStore write, so the returning advertiser must
+	// be elected.
 	prefix := mp("10.0.0.0/24")
 	f := newPrimariesFixture(t, 1, 2)
 	f.advertise(1, prefix)
diff --git a/hscontrol/state/rename_test.go b/hscontrol/state/rename_test.go
deleted file mode 100644
index b141147be..000000000
--- a/hscontrol/state/rename_test.go
+++ /dev/null
@@ -1,40 +0,0 @@
-package state
-
-import (
-	"strings"
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/db"
-	"github.com/stretchr/testify/require"
-)
-
-// TestRenameNodeRejectsNameExceedingFQDNLimit proves RenameNode rejects a name
-// that is a valid DNS label but whose FQDN, under the configured base_domain,
-// exceeds MaxHostnameLength. Without the FQDN-length gate such a name persists
-// and then breaks map generation for the node and its peers (issue #3346):
-// admin-facing writes must not be able to introduce an unmappable name.
-func TestRenameNodeRejectsNameExceedingFQDNLimit(t *testing.T) {
-	dbPath := t.TempDir() + "/headscale.db"
-	cfg := persistTestConfig(dbPath)
-	// A long base domain so a 63-char label overflows the 255-char FQDN bound.
-	cfg.BaseDomain = strings.Repeat("b", 200) + ".example.com"
-
-	database, err := db.NewHeadscaleDatabase(cfg)
-	require.NoError(t, err)
-
-	user := database.CreateUserForTest("rename-user")
-	node := database.CreateRegisteredNodeForTest(user, "rename-node")
-	require.NoError(t, database.Close())
-
-	s, err := NewState(cfg)
-	require.NoError(t, err)
-	t.Cleanup(func() { _ = s.Close() })
-
-	// Valid 63-char DNS label, but the resulting FQDN exceeds 255 chars.
-	_, _, err = s.RenameNode(node.ID, strings.Repeat("a", 63))
-	require.Error(t, err, "rename to a name whose FQDN exceeds the limit must be rejected")
-
-	// A short, valid name is still accepted.
-	_, _, err = s.RenameNode(node.ID, "short")
-	require.NoError(t, err)
-}
diff --git a/hscontrol/state/state.go b/hscontrol/state/state.go
index ddb410eb7..08357391a 100644
--- a/hscontrol/state/state.go
+++ b/hscontrol/state/state.go
@@ -2,11 +2,11 @@
 // coordinating between subsystems like database, IP allocation,
 // policy management, and DERP routing.
 //
-// The central type [State] owns a copy-on-write [NodeStore]
-// (node_store.go), a PrimaryRoutes HA ledger, the [policy.PolicyManager],
-// and a [pingTracker] for [tailcfg.PingRequest] correlation.
-// Cross-subsystem operations (node updates, policy evaluation, IP
-// allocation) go through [State] rather than directly to the database.
+// The central type State owns a copy-on-write NodeStore
+// (node_store.go), a PrimaryRoutes HA ledger, the PolicyManager, and a
+// pingTracker for PingRequest correlation. Cross-subsystem operations
+// (node updates, policy evaluation, IP allocation) go through State
+// rather than directly to the database.
 
 package state
 
@@ -32,9 +32,9 @@ import (
 	"github.com/juanfont/headscale/hscontrol/types/change"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
-	"github.com/puzpuzpuz/xsync/v4"
 	"github.com/rs/zerolog"
 	"github.com/rs/zerolog/log"
+	"golang.org/x/sync/errgroup"
 	"gorm.io/gorm"
 	"tailscale.com/tailcfg"
 	"tailscale.com/types/key"
@@ -71,7 +71,7 @@ var ErrNodeNotFound = errors.New("node not found")
 // ErrInvalidNodeView is returned when an invalid node view is provided.
 var ErrInvalidNodeView = errors.New("invalid node view provided")
 
-// ErrNodeNotInNodeStore is returned when a node no longer exists in the [NodeStore].
+// ErrNodeNotInNodeStore is returned when a node no longer exists in the NodeStore.
 var ErrNodeNotInNodeStore = errors.New("node no longer exists in NodeStore")
 
 // ErrNodeNameNotUnique is returned when a node name is not unique.
@@ -113,18 +113,6 @@ var nodeUpdateColumns = []string{
 // ErrRegistrationExpired is returned when a registration has expired.
 var ErrRegistrationExpired = errors.New("registration expired")
 
-// ErrNodeKeyInUse is returned when a registration or re-auth claims a NodeKey
-// already bound to a different machine, enforcing the 1:1 NodeKey<->MachineKey
-// binding.
-var ErrNodeKeyInUse = errors.New("node key already in use by another machine")
-
-// ErrAmbiguousNodeOwnership is returned when a machine key maps to a set of
-// nodes from which the correct one to update or convert cannot be determined:
-// multiple user-owned candidates for a tagged conversion, or a tagged node and
-// a user-owned node coexisting (impossible per validateNodeOwnership). The
-// registration is rejected rather than mutating an arbitrarily-picked node.
-var ErrAmbiguousNodeOwnership = errors.New("machine key maps to ambiguous node ownership")
-
 // sshCheckPair identifies a (source, destination) node pair for
 // SSH check auth tracking.
 type sshCheckPair struct {
@@ -134,9 +122,6 @@ type sshCheckPair struct {
 
 // State manages Headscale's core state, coordinating between database, policy management,
 // IP allocation, and DERP routing. All methods are thread-safe.
-//
-// See [policy.PolicyManager] for policy evaluation and [NodeStore] for the
-// in-memory node cache.
 type State struct {
 	// cfg holds the current Headscale configuration
 	cfg *types.Config
@@ -182,33 +167,15 @@ type State struct {
 	// Ref: https://github.com/tailscale/tailscale/issues/7125
 	sshCheckAuth map[sshCheckPair]time.Time
 	sshCheckMu   sync.RWMutex
-
-	// persistMu serialises the re-read-and-write critical section in
-	// persistNodeToDB so the database row always converges on [NodeStore]
-	// rather than being clobbered by a stale caller snapshot.
-	persistMu sync.Mutex
-
-	// registerLocks serialises registration per machine key so concurrent
-	// registrations of the same machine resolve to a single node instead of
-	// racing the find-then-create section and each creating their own.
-	// ponytail: entries are never pruned; bounded by distinct machine keys
-	// seen, add cleanup on node delete only if it ever matters.
-	registerLocks *xsync.Map[key.MachinePublic, *sync.Mutex]
 }
 
-// lockRegistration serialises registration for a single machine key and
-// returns the unlock function.
-func (s *State) lockRegistration(machineKey key.MachinePublic) func() {
-	mu, _ := s.registerLocks.LoadOrStore(machineKey, &sync.Mutex{})
-	mu.Lock()
-
-	return mu.Unlock
-}
-
-// NewState creates and initializes a new [State] instance, setting up the database,
+// NewState creates and initializes a new State instance, setting up the database,
 // IP allocator, DERP map, policy manager, and loading existing users and nodes.
 func NewState(cfg *types.Config) (*State, error) {
-	cacheExpiration := cmp.Or(cfg.Tuning.RegisterCacheExpiration, registerCacheExpiration)
+	cacheExpiration := registerCacheExpiration
+	if cfg.Tuning.RegisterCacheExpiration != 0 {
+		cacheExpiration = cfg.Tuning.RegisterCacheExpiration
+	}
 
 	cacheMaxEntries := defaultRegisterCacheMaxEntries
 	if cfg.Tuning.RegisterCacheMaxEntries > 0 {
@@ -244,7 +211,7 @@ func NewState(cfg *types.Config) (*State, error) {
 		node.IsOnline = new(false)
 	}
 
-	users, err := db.ListUsers(nil)
+	users, err := db.ListUsers()
 	if err != nil {
 		return nil, fmt.Errorf("loading users: %w", err)
 	}
@@ -259,13 +226,19 @@ func NewState(cfg *types.Config) (*State, error) {
 		return nil, fmt.Errorf("initializing policy manager: %w", err)
 	}
 
-	// Apply defaults for [NodeStore] batch configuration if not set.
+	// Apply defaults for NodeStore batch configuration if not set.
 	// This ensures tests that create Config directly (without viper) still work.
-	batchSize := cmp.Or(cfg.Tuning.NodeStoreBatchSize, defaultNodeStoreBatchSize)
+	batchSize := cfg.Tuning.NodeStoreBatchSize
+	if batchSize == 0 {
+		batchSize = defaultNodeStoreBatchSize
+	}
 
-	batchTimeout := cmp.Or(cfg.Tuning.NodeStoreBatchTimeout, defaultNodeStoreBatchTimeout)
+	batchTimeout := cfg.Tuning.NodeStoreBatchTimeout
+	if batchTimeout == 0 {
+		batchTimeout = defaultNodeStoreBatchTimeout
+	}
 
-	// [policy.PolicyManager.BuildPeerMap] handles both global and per-node filter complexity.
+	// PolicyManager.BuildPeerMap handles both global and per-node filter complexity.
 	// This moves the complex peer relationship logic into the policy package where it belongs.
 	nodeStore := NewNodeStore(
 		nodes,
@@ -277,7 +250,7 @@ func NewState(cfg *types.Config) (*State, error) {
 	)
 	nodeStore.Start()
 
-	s := &State{
+	return &State{
 		cfg: cfg,
 
 		db:        db,
@@ -287,19 +260,11 @@ func NewState(cfg *types.Config) (*State, error) {
 		nodeStore: nodeStore,
 		pings:     newPingTracker(),
 
-		sshCheckAuth:  make(map[sshCheckPair]time.Time),
-		registerLocks: xsync.NewMap[key.MachinePublic, *sync.Mutex](),
-	}
-
-	// Surface nodes whose stored data would break map generation (e.g. an
-	// invalid given name from a legacy row) so an operator can fix them. This
-	// only logs; it never mutates a node's stored name at boot.
-	s.logNodeHealth()
-
-	return s, nil
+		sshCheckAuth: make(map[sshCheckPair]time.Time),
+	}, nil
 }
 
-// Close gracefully shuts down the [State] instance and releases all resources.
+// Close gracefully shuts down the State instance and releases all resources.
 func (s *State) Close() error {
 	s.pings.drain()
 	s.nodeStore.Stop()
@@ -323,7 +288,7 @@ func (s *State) DERPMap() tailcfg.DERPMapView {
 }
 
 // ReloadPolicy reloads the access control policy and triggers auto-approval if changed.
-// Returns the resulting [change.Change] slice when the policy or routes changed.
+// Returns true if the policy changed.
 func (s *State) ReloadPolicy() ([]change.Change, error) {
 	pol, err := hsdb.PolicyBytes(s.db.DB, s.cfg)
 	if err != nil {
@@ -339,27 +304,15 @@ func (s *State) ReloadPolicy() ([]change.Change, error) {
 	// approvals don't persist if checkPeriod rules are modified or removed.
 	s.ClearSSHCheckAuth()
 
-	// Rebuild peer maps after policy changes because the peersFunc in [NodeStore]
-	// uses the [policy.PolicyManager]'s filters. Without this, nodes won't see
-	// newly allowed peers until a node is added/removed, causing autogroup:self
-	// policies to not propagate correctly when switching between policy types.
+	// Rebuild peer maps after policy changes because the peersFunc in NodeStore
+	// uses the PolicyManager's filters. Without this, nodes won't see newly allowed
+	// peers until a node is added/removed, causing autogroup:self policies to not
+	// propagate correctly when switching between policy types.
 	s.nodeStore.RebuildPeerMaps()
 
 	//nolint:prealloc // cs starts with one element and may grow
 	cs := []change.Change{change.PolicyChange()}
 
-	// Per-node selective self refresh for nodeAttrs. A broadcast
-	// [change.PolicyChange] re-renders peer lists and packet filters
-	// but never repopulates a node's own [tailcfg.Node.CapMap]; that
-	// lives on the self entry only. The drain returns every node ID
-	// whose cap output shifted across recent updateLocked calls —
-	// refreshNodeAttrsLocked appends rather than overwrites so a
-	// concurrent SetUsers/SetNodes between SetPolicy and the drain
-	// cannot silently lose the policy-reload diff.
-	for _, id := range s.polMan.NodesWithChangedCapMap() {
-		cs = append(cs, change.SelfUpdate(id))
-	}
-
 	// Always call autoApproveNodes during policy reload, regardless of whether
 	// the policy content has changed. This ensures that routes are re-evaluated
 	// when they might have been manually disabled but could now be auto-approved
@@ -506,88 +459,64 @@ func (s *State) ListUsersWithFilter(filter *types.User) ([]types.User, error) {
 
 // ListAllUsers retrieves all users in the system.
 func (s *State) ListAllUsers() ([]types.User, error) {
-	return s.db.ListUsers(nil)
+	return s.db.ListUsers()
 }
 
-// persistNodeRowToDB writes the node's database row, re-reading the
-// authoritative copy from [NodeStore], without touching the policy manager.
-// Batch callers (e.g. autoApproveNodes) use it to write many rows and then
-// trigger a single policy rebuild instead of one per node.
-func (s *State) persistNodeRowToDB(node types.NodeView) (types.NodeView, error) {
+// persistNodeToDB saves the given node state to the database.
+// This function must receive the exact node state to save to ensure consistency between
+// NodeStore and the database. It verifies the node still exists in NodeStore to prevent
+// race conditions where a node might be deleted between UpdateNode returning and
+// persistNodeToDB being called.
+func (s *State) persistNodeToDB(node types.NodeView) (types.NodeView, change.Change, error) {
 	if !node.Valid() {
-		return types.NodeView{}, ErrInvalidNodeView
+		return types.NodeView{}, change.Change{}, ErrInvalidNodeView
 	}
 
-	// [NodeStore] is the source of truth and every caller updates it before
-	// persisting. Re-read the authoritative node under persistMu and write
-	// that, rather than the caller's `node` view which may have been captured
-	// earlier (e.g. at the top of UpdateNodeFromMapRequest) and gone stale
-	// behind a concurrent admin write such as SetNodeTags. Serialising the
-	// read+write keeps the database row converging on [NodeStore] instead of
-	// reverting it to an out-of-date column set.
-	//
-	// The same re-read also guards against the node having been deleted (e.g.
-	// ephemeral logout) between the caller's update and this persist: a missing
-	// node means we must not re-insert it.
-	s.persistMu.Lock()
-
-	fresh, exists := s.nodeStore.GetNode(node.ID())
+	// Verify the node still exists in NodeStore before persisting to database.
+	// Without this check, we could hit a race condition where UpdateNode returns a valid
+	// node from a batch update, then the node gets deleted (e.g., ephemeral node logout),
+	// and persistNodeToDB would incorrectly re-insert the deleted node into the database.
+	_, exists := s.nodeStore.GetNode(node.ID())
 	if !exists {
-		s.persistMu.Unlock()
-
 		log.Warn().
 			EmbedObject(node).
 			Bool("is_ephemeral", node.IsEphemeral()).
 			Msg("Node no longer exists in NodeStore, skipping database persist to prevent race condition")
 
-		return types.NodeView{}, fmt.Errorf("%w: %d", ErrNodeNotInNodeStore, node.ID())
+		return types.NodeView{}, change.Change{}, fmt.Errorf("%w: %d", ErrNodeNotInNodeStore, node.ID())
 	}
 
-	nodePtr := fresh.AsStruct()
+	nodePtr := node.AsStruct()
 
 	// Explicitly select all node columns so GORM includes nil/zero-value
 	// fields (e.g. UserID=nil when converting a user-owned node to tagged).
 	// Omit "Expiry" here: expiry is only updated through explicit
 	// SetNodeExpiry calls or re-registration, not during MapRequest updates.
 	err := s.db.DB.Select(nodeUpdateColumns).Omit("Expiry").Updates(nodePtr).Error
-	s.persistMu.Unlock()
-
 	if err != nil {
-		return types.NodeView{}, fmt.Errorf("saving node: %w", err)
-	}
-
-	return fresh, nil
-}
-
-// persistNodeToDB saves the given node state to the database and refreshes the
-// policy manager. The exact row written comes from [NodeStore]; see
-// [State.persistNodeRowToDB].
-func (s *State) persistNodeToDB(node types.NodeView) (types.NodeView, change.Change, error) {
-	fresh, err := s.persistNodeRowToDB(node)
-	if err != nil {
-		return types.NodeView{}, change.Change{}, err
+		return types.NodeView{}, change.Change{}, fmt.Errorf("saving node: %w", err)
 	}
 
 	// Check if policy manager needs updating
 	c, err := s.updatePolicyManagerNodes()
 	if err != nil {
-		return fresh, change.Change{}, fmt.Errorf("updating policy manager after node save: %w", err)
+		return nodePtr.View(), change.Change{}, fmt.Errorf("updating policy manager after node save: %w", err)
 	}
 
 	if c.IsEmpty() {
 		c = change.NodeAdded(node.ID())
 	}
 
-	return fresh, c, nil
+	return node, c, nil
 }
 
 func (s *State) SaveNode(node types.NodeView) (types.NodeView, change.Change, error) {
-	// Update [NodeStore] first
+	// Update NodeStore first
 	nodePtr := node.AsStruct()
 
 	resultNode := s.nodeStore.PutNode(*nodePtr)
 
-	// Then save to database using the result from [NodeStore.PutNode]
+	// Then save to database using the result from PutNode
 	return s.persistNodeToDB(resultNode)
 }
 
@@ -621,20 +550,18 @@ func (s *State) DeleteNode(node types.NodeView) (change.Change, error) {
 }
 
 // Connect marks a node connected and returns the resulting changes
-// plus a session epoch identifying this poll session. Every Connect
-// acquires one live session; the caller must release it with exactly
-// one [State.Disconnect] call once the session ends (see poll.go).
+// plus a session epoch. The caller must pass the epoch back to
+// Disconnect so deferred grace-period disconnects from a previous
+// poll session are dropped (see poll.go).
 func (s *State) Connect(id types.NodeID) ([]change.Change, uint64) {
 	prevRoutes := s.nodeStore.PrimaryRoutes()
 
 	// Reconnecting clears Unhealthy: the node just proved basic
 	// connectivity by completing the Noise handshake.
 	var epoch uint64
-
 	node, ok := s.nodeStore.UpdateNode(id, func(n *types.Node) {
 		n.SessionEpoch++
 		epoch = n.SessionEpoch
-		n.ActiveSessions++
 		n.IsOnline = new(true)
 		n.Unhealthy = false
 	})
@@ -642,10 +569,7 @@ func (s *State) Connect(id types.NodeID) ([]change.Change, uint64) {
 		return nil, 0
 	}
 
-	// A node coming online sends a lightweight online peer patch. Subnet
-	// routers, relay targets, and via targets get their full peer recompute
-	// from the gated PolicyChange below, so no full update is needed here.
-	c := []change.Change{change.NodeOnline(node.ID())}
+	c := []change.Change{change.NodeOnlineFor(node)}
 
 	log.Info().EmbedObject(node).Msg("node connected")
 
@@ -653,44 +577,25 @@ func (s *State) Connect(id types.NodeID) ([]change.Change, uint64) {
 		c = append(c, change.NodeAdded(id))
 	}
 
-	// Only a node whose online state changes what peers compute (a subnet
-	// router, relay target, or via target) needs a full peer recompute.
-	// An ordinary node coming online just sends the lightweight online
-	// patch above; emitting a PolicyChange for it would force every peer
-	// to rebuild its netmap on every reconnect.
-	if s.polMan.NodeNeedsPeerRecompute(node) {
-		c = append(c, change.PolicyChange())
-	}
+	// Coming online may re-enable cap/relay grants and identity-based
+	// aliases targeting this node, so peers need a fresh netmap.
+	c = append(c, change.PolicyChange())
 
 	return c, epoch
 }
 
-// Disconnect releases one poll session previously acquired by
-// [State.Connect] and marks the node offline only when that was its
-// last live session. Sessions are counted rather than compared by
-// epoch: overlapping sessions for one node — a rapid reconnect, or a
-// cancelled map request whose handler ran late — release in any order
-// without stranding the node. An epoch-equality gate here loses when a
-// dead-on-arrival session's Connect steals the latest epoch and its
-// cleanup skips the release: the surviving session's Disconnect was
-// then rejected as stale and the node stayed online forever.
-// The count check and the IsOnline write share a
-// [NodeStore.UpdateNode] closure, making them atomic against
-// concurrent connects. epoch identifies the session for logging only.
+// Disconnect marks the node offline. epoch must match the value
+// Connect returned for this session; otherwise the call no-ops so a
+// deferred disconnect from an older session cannot overwrite state set
+// by a newer Connect. The check and the IsOnline write share an
+// UpdateNode closure, making them atomic against concurrent Connects.
 func (s *State) Disconnect(id types.NodeID, epoch uint64) ([]change.Change, error) {
-	var wentOffline bool
-
+	var stale bool
 	node, ok := s.nodeStore.UpdateNode(id, func(n *types.Node) {
-		if n.ActiveSessions > 0 {
-			n.ActiveSessions--
-		}
-
-		if n.ActiveSessions > 0 {
+		if n.SessionEpoch != epoch {
+			stale = true
 			return
 		}
-
-		wentOffline = true
-
 		now := time.Now()
 		n.LastSeen = &now
 		n.IsOnline = new(false)
@@ -703,18 +608,18 @@ func (s *State) Disconnect(id types.NodeID, epoch uint64) ([]change.Change, erro
 		return nil, fmt.Errorf("%w: %d", ErrNodeNotFound, id)
 	}
 
-	if !wentOffline {
+	if stale {
 		log.Debug().
 			Uint64("disconnect_epoch", epoch).
-			Int("active_sessions", node.ActiveSessions()).
-			Msg("session released, other sessions keep node online")
+			Uint64("current_epoch", node.SessionEpoch()).
+			Msg("stale disconnect rejected, newer session active")
 
 		return nil, nil
 	}
 
 	log.Info().EmbedObject(node).Msg("node disconnected")
 
-	// Persist LastSeen best-effort: [NodeStore] already reflects offline
+	// Persist LastSeen best-effort: NodeStore already reflects offline
 	// and peers still need the change notifications below.
 	_, c, err := s.persistNodeToDB(node)
 	if err != nil {
@@ -723,18 +628,13 @@ func (s *State) Disconnect(id types.NodeID, epoch uint64) ([]change.Change, erro
 		c = change.Change{}
 	}
 
-	// Only a node whose online state changes what peers compute (a subnet
-	// router, relay target, or via target) needs a full peer recompute.
-	// An ordinary node going offline just sends the lightweight offline
-	// patch; emitting a PolicyChange for it would force every peer to
-	// rebuild its netmap on every disconnect.
-	// A node going offline sends a lightweight offline peer patch. Subnet
-	// routers and other recompute-forcing nodes rely on the gated
-	// PolicyChange below for the peer recompute, so no full update here.
-	cs := []change.Change{change.NodeOffline(node.ID()), c}
-	if s.polMan.NodeNeedsPeerRecompute(node) {
-		cs = append(cs, change.PolicyChange())
-	}
+	// Going offline can affect policy compilation beyond subnet routes
+	// (cap/relay grants, tag/group aliases, via routes), so peers need
+	// a fresh netmap regardless of whether the primary moved.
+	//
+	// TODO(kradalby): fires one full netmap recompute per peer on
+	// every connect/disconnect. Coalesce in mapper/batcher.go:addToBatch.
+	cs := []change.Change{change.NodeOfflineFor(node), c, change.PolicyChange()}
 
 	return cs, nil
 }
@@ -756,11 +656,12 @@ func (s *State) GetNodeByNodeKey(nodeKey key.NodePublic) (types.NodeView, bool)
 	return s.nodeStore.GetNodeByNodeKey(nodeKey)
 }
 
-// GetNodesByMachineKeyAllUsers returns every node sharing the machine key,
-// keyed by owning UserID (tagged nodes under UserID(0)). See
-// [NodeStore.GetNodesByMachineKeyAllUsers].
-func (s *State) GetNodesByMachineKeyAllUsers(machineKey key.MachinePublic) map[types.UserID]types.NodeView {
-	return s.nodeStore.GetNodesByMachineKeyAllUsers(machineKey)
+// GetNodeByMachineKey retrieves a node by its machine key and user ID.
+// The bool indicates if the node exists or is available (like "err not found").
+// The NodeView might be invalid, so it must be checked with .Valid(), which must be used to ensure
+// it isn't an invalid node (this is more of a node error or node is broken).
+func (s *State) GetNodeByMachineKey(machineKey key.MachinePublic, userID types.UserID) (types.NodeView, bool) {
+	return s.nodeStore.GetNodeByMachineKey(machineKey, userID)
 }
 
 // ResolveNode looks up a node by numeric ID, IPv4/IPv6 address, given
@@ -775,16 +676,6 @@ func (s *State) ResolveNode(query string) (types.NodeView, bool) {
 		return s.GetNodeByID(id)
 	}
 
-	// keepLowest returns whichever node has the lower ID, so repeated
-	// calls resolve deterministically across snapshot iterations.
-	keepLowest := func(cur, cand types.NodeView) types.NodeView {
-		if !cur.Valid() || cand.ID() < cur.ID() {
-			return cand
-		}
-
-		return cur
-	}
-
 	// Try IP address.
 	addr, addrErr := netip.ParseAddr(query)
 	if addrErr == nil {
@@ -795,7 +686,9 @@ func (s *State) ResolveNode(query string) (types.NodeView, bool) {
 				continue
 			}
 
-			match = keepLowest(match, n)
+			if !match.Valid() || n.ID() < match.ID() {
+				match = n
+			}
 		}
 
 		return match, match.Valid()
@@ -807,9 +700,13 @@ func (s *State) ResolveNode(query string) (types.NodeView, bool) {
 
 	for _, n := range s.ListNodes().All() {
 		if n.GivenName() == query {
-			givenMatch = keepLowest(givenMatch, n)
+			if !givenMatch.Valid() || n.ID() < givenMatch.ID() {
+				givenMatch = n
+			}
 		} else if n.Hostname() == query {
-			hostMatch = keepLowest(hostMatch, n)
+			if !hostMatch.Valid() || n.ID() < hostMatch.ID() {
+				hostMatch = n
+			}
 		}
 	}
 
@@ -859,9 +756,8 @@ func (s *State) ListPeers(nodeID types.NodeID, peerIDs ...types.NodeID) views.Sl
 	// For specific peerIDs, filter from all nodes.
 	// This path is used for incremental updates (NodeAdded, NodeChanged)
 	// where the caller already knows which peer IDs are involved.
-	// Peer visibility filtering happens in the mapper against the live
-	// policy (buildTailPeers and the shared visiblePeerIDs filter), because
-	// the snapshot peer map is not rebuilt on policy changes.
+	// The peer visibility filtering happens in the mapper's buildTailPeers
+	// via MatchersForNode/ReduceNodes.
 	allNodes := s.nodeStore.ListNodes()
 
 	nodeIDSet := make(map[types.NodeID]struct{}, len(peerIDs))
@@ -899,11 +795,11 @@ func (s *State) ListEphemeralNodes() views.Slice[types.NodeView] {
 // SetNodeExpiry updates the expiration time for a node.
 // If expiry is nil, the node's expiry is disabled (node will never expire).
 func (s *State) SetNodeExpiry(nodeID types.NodeID, expiry *time.Time) (types.NodeView, change.Change, error) {
-	// Update [NodeStore] before database to ensure consistency. The [NodeStore] update
-	// is blocking and will be the source of truth for the batcher. The database update
-	// must make the exact same change. If the database update fails, the [NodeStore]
-	// change will remain, but since we return an error, no change notification will be
-	// sent to the batcher, preventing inconsistent state propagation.
+	// Update NodeStore before database to ensure consistency. The NodeStore update is
+	// blocking and will be the source of truth for the batcher. The database update must
+	// make the exact same change. If the database update fails, the NodeStore change will
+	// remain, but since we return an error, no change notification will be sent to the
+	// batcher, preventing inconsistent state propagation.
 	n, ok := s.nodeStore.UpdateNode(nodeID, func(node *types.Node) {
 		node.Expiry = expiry
 	})
@@ -969,9 +865,9 @@ func (s *State) SetNodeTags(nodeID types.NodeID, tags []string) (types.NodeView,
 	// Log the operation
 	logTagOperation(existingNode, validatedTags)
 
-	// Update [NodeStore] before database to ensure consistency. The [NodeStore] update
-	// is blocking and will be the source of truth for the batcher. The database update
-	// must make the exact same change.
+	// Update NodeStore before database to ensure consistency. The NodeStore update is
+	// blocking and will be the source of truth for the batcher. The database update must
+	// make the exact same change.
 	n, ok := s.nodeStore.UpdateNode(nodeID, func(node *types.Node) {
 		node.Tags = validatedTags
 		// Tagged nodes are owned by their tags, not a user.
@@ -1039,12 +935,9 @@ func (s *State) SetApprovedRoutes(nodeID types.NodeID, routes []netip.Prefix) (t
 // auto-sanitisation) and collisions error out rather than silently
 // bumping a user-facing label. See HOSTNAME.md for the CLI contract.
 func (s *State) RenameNode(nodeID types.NodeID, newName string) (types.NodeView, change.Change, error) {
-	// Validate the label AND that the resulting FQDN fits MaxHostnameLength:
-	// a valid 63-char label can still overflow under a long base_domain, and
-	// an unmappable name would break this node and its peers (issue #3346).
-	err := types.ValidateGivenName(newName, s.cfg.BaseDomain)
+	err := dnsname.ValidLabel(newName)
 	if err != nil {
-		return types.NodeView{}, change.Change{}, fmt.Errorf("%w: %w", ErrGivenNameInvalid, err)
+		return types.NodeView{}, change.Change{}, fmt.Errorf("renaming node: %w", err)
 	}
 
 	view, err := s.nodeStore.SetGivenName(nodeID, newName)
@@ -1069,7 +962,7 @@ func (s *State) BackfillNodeIPs() ([]string, error) {
 		return nil, err
 	}
 
-	// Refresh [NodeStore] after IP changes to ensure consistency
+	// Refresh NodeStore after IP changes to ensure consistency
 	if len(changes) > 0 {
 		nodes, err := s.db.ListNodes()
 		if err != nil {
@@ -1091,7 +984,7 @@ func (s *State) BackfillNodeIPs() ([]string, error) {
 				node.Hostinfo.NetInfo = netInfo
 			}
 			// TODO(kradalby): This should just update the IP addresses, nothing else in the node store.
-			// We should avoid [NodeStore.PutNode] here.
+			// We should avoid PutNode here.
 			_ = s.nodeStore.PutNode(*node)
 		}
 	}
@@ -1155,19 +1048,6 @@ func (s *State) MatchersForNode(node types.NodeView) ([]matcher.Match, error) {
 	return s.polMan.MatchersForNode(node)
 }
 
-// NodeCapMap returns the policy-derived CapMap for the given node, suitable
-// for merging into [tailcfg.Node.CapMap] when the node is rendered as self or
-// as someone else's peer.
-func (s *State) NodeCapMap(id types.NodeID) tailcfg.NodeCapMap {
-	return s.polMan.NodeCapMap(id)
-}
-
-// NodeCapMaps returns a snapshot of every node's policy CapMap so
-// callers can amortise lock acquisition over a peer loop.
-func (s *State) NodeCapMaps() map[types.NodeID]tailcfg.NodeCapMap {
-	return s.polMan.NodeCapMaps()
-}
-
 // NodeCanHaveTag checks if a node is allowed to have a specific tag.
 func (s *State) NodeCanHaveTag(node types.NodeView, tag string) bool {
 	return s.polMan.NodeCanHaveTag(node, tag)
@@ -1198,9 +1078,8 @@ func (s *State) AutoApproveRoutes(nv types.NodeView) (change.Change, error) {
 			Strs("routes.approved.new", util.PrefixesToString(approved)).
 			Msg("Single node auto-approval detected route changes")
 
-		// Persist the auto-approved routes to database and [NodeStore] via
-		// [State.SetApprovedRoutes]. This ensures consistency between database
-		// and [NodeStore].
+		// Persist the auto-approved routes to database and NodeStore via SetApprovedRoutes
+		// This ensures consistency between database and NodeStore
 		_, c, err := s.SetApprovedRoutes(nv.ID(), approved)
 		if err != nil {
 			log.Error().
@@ -1318,64 +1197,35 @@ func (s *State) IsNodeHealthy(id types.NodeID) bool {
 	return s.nodeStore.IsNodeHealthy(id)
 }
 
-// SetNodeHealth flips the runtime health bit for one node and reports
-// whether the resulting primary-route assignment changed, so the HA
-// prober can decide whether to fan out a PolicyChange. true means
-// healthy; false means unhealthy. An unhealthy mark is dropped when
-// the node is no longer an HA candidate (offline or no approved
-// routes) — between probe dispatch and result the node may have left
-// candidacy, and the bit would just be stale. The check happens
-// inside the writer goroutine so it serialises against the
-// SetApprovedRoutes / Disconnect that removed candidacy. Single-node
-// convenience wrapper around [State.BatchSetNodeHealth].
-func (s *State) SetNodeHealth(id types.NodeID, healthy bool) bool {
-	return s.BatchSetNodeHealth(map[types.NodeID]bool{id: healthy})
-}
-
-// BatchSetNodeHealth applies a set of health updates atomically: the
-// election runs once after every flag has been flipped, so observers
-// never see an intermediate snapshot. Returns true when the
-// primary-route assignment differs from before the batch so callers
-// can gate a single PolicyChange dispatch. Map value true = healthy;
-// false = unhealthy (gated as in [State.SetNodeHealth]).
+// SetNodeUnhealthy flips the runtime Unhealthy bit and reports whether
+// the resulting primary route assignment changed, so the HA prober can
+// decide whether to fan out a PolicyChange.
 //
-// Per-call publication would let a writer applying two flips
-// back-to-back elect a node that the next snapshot demotes,
-// momentarily pointing peers at the wrong primary; the batched form
-// closes that window.
-func (s *State) BatchSetNodeHealth(updates map[types.NodeID]bool) bool {
-	if len(updates) == 0 {
-		return false
-	}
-
+// A request to mark a node Unhealthy is dropped if the node is no
+// longer an HA candidate (offline or no approved routes). The prober
+// reads HANodes() at the start of a probe cycle and writes back after
+// the timeout fires; in that window the node may have left the
+// candidate set, and the bit would just be stale. The check happens
+// inside the writer goroutine so it serialises against the
+// SetApprovedRoutes / Disconnect that removed candidacy.
+func (s *State) SetNodeUnhealthy(id types.NodeID, unhealthy bool) bool {
 	prevRoutes := s.nodeStore.PrimaryRoutes()
 
-	fns := make(map[types.NodeID]UpdateNodeFunc, len(updates))
-	for id, healthy := range updates {
-		fns[id] = healthSetter(healthy)
-	}
-
-	s.nodeStore.UpdateNodes(fns)
-
-	return !maps.Equal(prevRoutes, s.nodeStore.PrimaryRoutes())
-}
-
-// healthSetter returns an UpdateNodeFunc that flips n.Unhealthy to
-// the inverse of healthy, with the same gate as [State.SetNodeHealth]:
-// an unhealthy mark only sticks when the node is still online and
-// still advertises approved routes, so a node that left HA candidacy
-// between probe dispatch and result does not carry a stale bit.
-func healthSetter(healthy bool) UpdateNodeFunc {
-	return func(n *types.Node) {
-		if !healthy {
+	_, ok := s.nodeStore.UpdateNode(id, func(n *types.Node) {
+		if unhealthy {
 			online := n.IsOnline != nil && *n.IsOnline
 			if !online || len(n.AllApprovedRoutes()) == 0 {
 				return
 			}
 		}
 
-		n.Unhealthy = !healthy
+		n.Unhealthy = unhealthy
+	})
+	if !ok {
+		return false
 	}
+
+	return !maps.Equal(prevRoutes, s.nodeStore.PrimaryRoutes())
 }
 
 // ValidateAPIKey checks if an API key is valid and active.
@@ -1383,17 +1233,6 @@ func (s *State) ValidateAPIKey(keyStr string) (bool, error) {
 	return s.db.ValidateAPIKey(keyStr)
 }
 
-// AuthenticateAPIKey validates an API key and returns it (with its owning
-// user), so callers like the v2 API can act as the key's owner.
-func (s *State) AuthenticateAPIKey(keyStr string) (*types.APIKey, error) {
-	return s.db.AuthenticateAPIKey(keyStr)
-}
-
-// SetAPIKeyUser sets the owning user of an API key by its database ID.
-func (s *State) SetAPIKeyUser(keyID uint64, userID types.UserID) error {
-	return s.db.SetAPIKeyUser(keyID, userID)
-}
-
 // CreateAPIKey generates a new API key with optional expiration.
 func (s *State) CreateAPIKey(expiration *time.Time) (string, *types.APIKey, error) {
 	return s.db.CreateAPIKey(expiration)
@@ -1449,11 +1288,11 @@ func (s *State) CreateNodeForTest(user *types.User, hostname ...string) *types.N
 	return s.db.CreateNodeForTest(user, hostname...)
 }
 
-// PutNodeInStoreForTest writes a test node into the in-memory [NodeStore]
-// so handlers backed by [NodeStore] lookups (e.g. [State.GetNodeByID]) can
-// see it. [State.CreateNodeForTest] only saves to the database, which is
-// fine for tests that exercise the DB layer directly but insufficient for
-// handler tests that go through [State].
+// PutNodeInStoreForTest writes a test node into the in-memory NodeStore
+// so handlers backed by NodeStore lookups (e.g. GetNodeByID) can see it.
+// CreateNodeForTest only saves to the database, which is fine for tests
+// that exercise the DB layer directly but insufficient for handler tests
+// that go through State.
 func (s *State) PutNodeInStoreForTest(node types.Node) types.NodeView {
 	return s.nodeStore.PutNode(node)
 }
@@ -1478,27 +1317,9 @@ func (s *State) DB() *hsdb.HSDatabase {
 	return s.db
 }
 
-// GetPreAuthKey retrieves a pre-authentication key by its secret. The caller is
-// responsible for checking whether the key is usable (expired or used).
-func (s *State) GetPreAuthKey(keyStr string) (*types.PreAuthKey, error) {
-	return s.db.GetPreAuthKey(keyStr)
-}
-
-// GetPreAuthKeyByID retrieves a pre-authentication key by its database id.
-func (s *State) GetPreAuthKeyByID(id uint64) (*types.PreAuthKey, error) {
-	return s.db.GetPreAuthKeyByID(id)
-}
-
-// RevokePreAuthKey soft-revokes a pre-authentication key: it is kept and stays
-// retrievable (invalid) until the collector reaps it after the retention window.
-func (s *State) RevokePreAuthKey(id uint64) error {
-	return s.db.RevokePreAuthKey(id)
-}
-
-// DestroyRevokedPreAuthKeysBefore hard-deletes pre-auth keys revoked before
-// cutoff, returning how many were removed.
-func (s *State) DestroyRevokedPreAuthKeysBefore(cutoff time.Time) (int, error) {
-	return s.db.DestroyRevokedPreAuthKeysBefore(cutoff)
+// GetPreAuthKey retrieves a pre-authentication key by ID.
+func (s *State) GetPreAuthKey(id string) (*types.PreAuthKey, error) {
+	return s.db.GetPreAuthKey(id)
 }
 
 // ListPreAuthKeys returns all pre-authentication keys for a user.
@@ -1506,11 +1327,6 @@ func (s *State) ListPreAuthKeys() ([]types.PreAuthKey, error) {
 	return s.db.ListPreAuthKeys()
 }
 
-// SetPreAuthKeyDescription sets the free-text description on a pre-auth key.
-func (s *State) SetPreAuthKeyDescription(id uint64, description string) error {
-	return s.db.SetPreAuthKeyDescription(id, description)
-}
-
 // ExpirePreAuthKey marks a pre-authentication key as expired.
 func (s *State) ExpirePreAuthKey(id uint64) error {
 	return s.db.ExpirePreAuthKey(id)
@@ -1521,63 +1337,6 @@ func (s *State) DeletePreAuthKey(id uint64) error {
 	return s.db.DeletePreAuthKey(id)
 }
 
-// CreateOAuthClient creates a new OAuth client-credentials client, returning the
-// plaintext secret (shown once) and the stored client.
-func (s *State) CreateOAuthClient(scopes, tags []string, description string, creatorUserID *uint) (string, *types.OAuthClient, error) {
-	return s.db.CreateOAuthClient(scopes, tags, description, creatorUserID)
-}
-
-// AuthenticateOAuthClient validates a client secret and returns the client.
-func (s *State) AuthenticateOAuthClient(secret string) (*types.OAuthClient, error) {
-	return s.db.AuthenticateOAuthClient(secret)
-}
-
-// GetOAuthClientByClientID returns an OAuth client by its public client id.
-func (s *State) GetOAuthClientByClientID(clientID string) (*types.OAuthClient, error) {
-	return s.db.GetOAuthClientByClientID(clientID)
-}
-
-// ListOAuthClients returns every OAuth client.
-func (s *State) ListOAuthClients() ([]types.OAuthClient, error) {
-	return s.db.ListOAuthClients()
-}
-
-// RevokeOAuthClient deletes a client and the access tokens it issued.
-func (s *State) RevokeOAuthClient(clientID string) error {
-	return s.db.RevokeOAuthClient(clientID)
-}
-
-// MintAccessToken stores a new scoped access token for an OAuth client.
-func (s *State) MintAccessToken(clientID string, scopes, tags []string, expiration *time.Time) (string, *types.OAuthAccessToken, error) {
-	return s.db.MintAccessToken(clientID, scopes, tags, expiration)
-}
-
-// AuthenticateAccessToken validates a bearer access token and returns it with
-// its granted scopes and tags.
-func (s *State) AuthenticateAccessToken(token string) (*types.OAuthAccessToken, error) {
-	return s.db.AuthenticateAccessToken(token)
-}
-
-// TagOwnedByTags reports whether a credential holding ownerTags may apply tag,
-// per the policy's tag-to-tag ownership. Used to authorise the tags an OAuth
-// access token sets on the auth keys it mints.
-func (s *State) TagOwnedByTags(tag string, ownerTags []string) bool {
-	return s.polMan.TagOwnedByTags(tag, ownerTags)
-}
-
-// TagExists reports whether tag is defined in the policy's tagOwners. Used to
-// reject OAuth clients and auth keys carrying tags that no policy authorises,
-// matching SetNodeTags.
-func (s *State) TagExists(tag string) bool {
-	return s.polMan.TagExists(tag)
-}
-
-// DeleteExpiredAccessTokens hard-deletes OAuth access tokens that expired before
-// cutoff, returning how many were removed.
-func (s *State) DeleteExpiredAccessTokens(cutoff time.Time) (int64, error) {
-	return s.db.DeleteExpiredAccessTokens(cutoff)
-}
-
 // GetAuthCacheEntry retrieves a pending auth request from the cache.
 func (s *State) GetAuthCacheEntry(id types.AuthID) (*types.AuthRequest, bool) {
 	return s.authCache.Get(id)
@@ -1588,14 +1347,6 @@ func (s *State) SetAuthCacheEntry(id types.AuthID, entry *types.AuthRequest) {
 	s.authCache.Add(id, entry)
 }
 
-// DeleteAuthCacheEntryForTest drops a pending auth request from the cache,
-// exposed for testing so a test can reproduce a session that was lost
-// (expired, evicted, or dropped on a control-plane restart) without faking an
-// auth_id.
-func (s *State) DeleteAuthCacheEntryForTest(id types.AuthID) {
-	s.authCache.Remove(id)
-}
-
 // SetLastSSHAuth records a successful SSH check authentication
 // for the given (src, dst) node pair.
 func (s *State) SetLastSSHAuth(src, dst types.NodeID) {
@@ -1657,7 +1408,7 @@ type newNodeParams struct {
 
 // authNodeUpdateParams contains parameters for updating an existing node during auth.
 type authNodeUpdateParams struct {
-	// Node to update; must be valid and in [NodeStore].
+	// Node to update; must be valid and in NodeStore.
 	ExistingNode types.NodeView
 	// Cached registration payload from the originating client request.
 	RegData *types.RegistrationData
@@ -1676,7 +1427,7 @@ type authNodeUpdateParams struct {
 }
 
 // applyAuthNodeUpdate applies common update logic for re-authenticating or converting
-// an existing node. It updates the node in [NodeStore], processes RequestTags, and
+// an existing node. It updates the node in NodeStore, processes RequestTags, and
 // persists changes to the database.
 func (s *State) applyAuthNodeUpdate(params authNodeUpdateParams) (types.NodeView, error) {
 	regData := params.RegData
@@ -1704,9 +1455,8 @@ func (s *State) applyAuthNodeUpdate(params authNodeUpdateParams) (types.NodeView
 
 	oldTags := params.ExistingNode.Tags().AsSlice()
 
-	// Validate tags BEFORE calling [NodeStore.UpdateNode] to ensure we don't modify
-	// [NodeStore] if validation fails. This maintains consistency between [NodeStore]
-	// and database.
+	// Validate tags BEFORE calling UpdateNode to ensure we don't modify NodeStore
+	// if validation fails. This maintains consistency between NodeStore and database.
 	rejectedTags := s.validateRequestTags(params.ExistingNode, requestTags)
 	if len(rejectedTags) > 0 {
 		return types.NodeView{}, fmt.Errorf(
@@ -1716,18 +1466,7 @@ func (s *State) applyAuthNodeUpdate(params authNodeUpdateParams) (types.NodeView
 		)
 	}
 
-	// Re-auth rotates the NodeKey to the client-supplied value. Enforce the
-	// same 1:1 NodeKey<->MachineKey binding createAndSaveNewNode applies at
-	// registration and getAndValidateNode enforces at poll time: a NodeKey
-	// already bound to a different machine must not be claimed here, or a
-	// re-authenticating node could rotate its key to a victim's and poison
-	// the NodeStore NodeKey index (denying the victim service).
-	if existing, ok := s.nodeStore.GetNodeByNodeKey(regData.NodeKey); ok &&
-		existing.MachineKey() != regData.MachineKey {
-		return types.NodeView{}, ErrNodeKeyInUse
-	}
-
-	// Update existing node in [NodeStore] - validation passed, safe to mutate
+	// Update existing node in NodeStore - validation passed, safe to mutate
 	updatedNodeView, ok := s.nodeStore.UpdateNode(params.ExistingNode.ID(), func(node *types.Node) {
 		node.NodeKey = regData.NodeKey
 		node.DiscoKey = regData.DiscoKey
@@ -1741,20 +1480,12 @@ func (s *State) applyAuthNodeUpdate(params authNodeUpdateParams) (types.NodeView
 			params.ValidHostinfo,
 		)
 
-		// Preserve the node's live endpoints when the register request carried
-		// none. Web/OIDC relogins report endpoints via MapRequest, not register,
-		// so RegData.Endpoints is empty; clearing the stored set would advertise
-		// the re-keyed node with no way for peers to reach it. The first
-		// MapRequest restores the live set.
-		if len(regData.Endpoints) > 0 {
-			node.Endpoints = regData.Endpoints
-		}
+		node.Endpoints = regData.Endpoints
 		// Do NOT reset IsOnline here. Online status is managed exclusively by
-		// [State.Connect]/[State.Disconnect] in the poll session lifecycle.
-		// Resetting it during re-registration causes a false offline blip: the
-		// change notification triggers a map regeneration showing the node as
-		// offline to peers, even though [State.Connect] will immediately set it
-		// back to true.
+		// Connect()/Disconnect() in the poll session lifecycle. Resetting it
+		// during re-registration causes a false offline blip: the change
+		// notification triggers a map regeneration showing the node as offline
+		// to peers, even though Connect() will immediately set it back to true.
 		node.LastSeen = new(time.Now())
 
 		// On conversion (tagged → user) we set the new register method.
@@ -1787,7 +1518,7 @@ func (s *State) applyAuthNodeUpdate(params authNodeUpdateParams) (types.NodeView
 		case !wasTagged && isTagged:
 			// Personal → Tagged: clear expiry (tagged nodes don't expire)
 			node.Expiry = nil
-		case params.IsConvertFromTag && !isTagged:
+		case params.IsConvertFromTag:
 			// Explicit conversion from tagged to user-owned: set expiry from client request
 			if params.Expiry != nil {
 				node.Expiry = params.Expiry
@@ -1849,7 +1580,7 @@ func (s *State) applyAuthNodeUpdate(params authNodeUpdateParams) (types.NodeView
 	return updatedNodeView, nil
 }
 
-// createAndSaveNewNode creates a new node, allocates IPs, saves to DB, and adds to [NodeStore].
+// createAndSaveNewNode creates a new node, allocates IPs, saves to DB, and adds to NodeStore.
 // It preserves netinfo from an existing node if one is provided (for faster DERP connectivity).
 func (s *State) createAndSaveNewNode(params newNodeParams) (types.NodeView, error) {
 	// Preserve NetInfo from existing node if available
@@ -1861,20 +1592,6 @@ func (s *State) createAndSaveNewNode(params newNodeParams) (types.NodeView, erro
 		)
 	}
 
-	// Enforce NodeKey uniqueness across machines. NodeKeys are public
-	// (peers learn them from the netmap), so an authenticated party could
-	// otherwise register a node carrying a victim's NodeKey, poisoning the
-	// NodeStore NodeKey index so the victim's MapRequest resolves to the
-	// wrong node and is rejected by getAndValidateNode's MachineKey check
-	// (a DoS). createAndSaveNewNode only runs for a machine that has no
-	// existing node, so any current holder of this NodeKey is a different
-	// machine; mirror the 1:1 binding getAndValidateNode enforces at poll
-	// time and reject before allocating any resources.
-	if existing, ok := s.nodeStore.GetNodeByNodeKey(params.NodeKey); ok &&
-		existing.MachineKey() != params.MachineKey {
-		return types.NodeView{}, ErrNodeKeyInUse
-	}
-
 	// Prepare the node for registration
 	nodeToRegister := types.Node{
 		Hostname:       params.Hostname,
@@ -1884,7 +1601,7 @@ func (s *State) createAndSaveNewNode(params newNodeParams) (types.NodeView, erro
 		Hostinfo:       params.Hostinfo,
 		Endpoints:      params.Endpoints,
 		LastSeen:       new(time.Now()),
-		IsOnline:       new(false), // Explicitly offline until [State.Connect] is called
+		IsOnline:       new(false), // Explicitly offline until Connect() is called
 		RegisterMethod: params.RegisterMethod,
 		Expiry:         params.Expiry,
 	}
@@ -1894,7 +1611,7 @@ func (s *State) createAndSaveNewNode(params newNodeParams) (types.NodeView, erro
 		if params.PreAuthKey.IsTagged() {
 			// Tagged nodes are owned by their tags, not a user.
 			// UserID is intentionally left nil.
-			nodeToRegister.Tags = params.PreAuthKey.Tags
+			nodeToRegister.Tags = params.PreAuthKey.Proto().GetAclTags()
 
 			// Tagged nodes have key expiry disabled.
 			nodeToRegister.Expiry = nil
@@ -1977,14 +1694,14 @@ func (s *State) createAndSaveNewNode(params newNodeParams) (types.NodeView, erro
 	nodeToRegister.IPv4 = ipv4
 	nodeToRegister.IPv6 = ipv6
 
-	// Seed GivenName from the sanitised raw hostname. [NodeStore.PutNode]
+	// Seed GivenName from the sanitised raw hostname. NodeStore.PutNode
 	// bumps on collision and falls back to "node" if the sanitised
 	// result is empty (pure non-ASCII / punctuation input).
 	if nodeToRegister.GivenName == "" {
 		nodeToRegister.GivenName = dnsname.SanitizeHostname(nodeToRegister.Hostname)
 	}
 
-	// New node - database first to get ID, then [NodeStore]
+	// New node - database first to get ID, then NodeStore
 	savedNode, err := hsdb.Write(s.db.DB, func(tx *gorm.DB) (*types.Node, error) {
 		err := tx.Save(&nodeToRegister).Error
 		if err != nil {
@@ -2004,12 +1721,12 @@ func (s *State) createAndSaveNewNode(params newNodeParams) (types.NodeView, erro
 		return types.NodeView{}, err
 	}
 
-	// Add to [NodeStore] after database creates the ID
+	// Add to NodeStore after database creates the ID
 	return s.nodeStore.PutNode(*savedNode), nil
 }
 
 // validateRequestTags validates that the requested tags are permitted for the node.
-// This should be called BEFORE [NodeStore.UpdateNode] to ensure we don't modify [NodeStore]
+// This should be called BEFORE UpdateNode to ensure we don't modify NodeStore
 // if validation fails. Returns the list of rejected tags (empty if all valid).
 func (s *State) validateRequestTags(node types.NodeView, requestTags []string) []string {
 	// Empty tags = clear tags, always permitted
@@ -2154,37 +1871,16 @@ func (s *State) HandleNodeFromAuthPath(
 
 	// Lookup existing nodes
 	machineKey := regData.MachineKey
+	existingNodeSameUser, _ := s.nodeStore.GetNodeByMachineKey(machineKey, types.UserID(user.ID))
+	existingNodeAnyUser, _ := s.nodeStore.GetNodeByMachineKeyAnyUser(machineKey)
 
-	// Serialise registration for this machine so concurrent auth callbacks
-	// resolve to a single node rather than racing the find-then-create section.
-	defer s.lockRegistration(machineKey)()
-
-	all := s.nodeStore.GetNodesByMachineKeyAllUsers(machineKey)
-
-	// Named conditions - describe WHAT we found, not HOW we check it.
-	existingNodeSameUser, nodeExistsForSameUser := all[types.UserID(user.ID)]
-
-	taggedNode, hasTagged := all[0]
-	existingNodeIsTagged := hasTagged && taggedNode.IsTagged()
-
-	var existingNodeOtherUser types.NodeView
-
-	existingNodeOwnedByOtherUser := false
-
-	for uid, n := range all {
-		if uid != 0 && uid != types.UserID(user.ID) && !n.IsTagged() {
-			existingNodeOtherUser = n
-			existingNodeOwnedByOtherUser = true
-		}
-	}
-
-	// A tagged node and a user-owned node cannot legitimately share a machine
-	// key (validateNodeOwnership enforces tags XOR user ownership). If both are
-	// present the machine key is in a corrupt/ambiguous state; reject rather
-	// than converting an arbitrary node and orphaning the other.
-	if existingNodeIsTagged && (nodeExistsForSameUser || existingNodeOwnedByOtherUser) {
-		return types.NodeView{}, change.Change{}, ErrAmbiguousNodeOwnership
-	}
+	// Named conditions - describe WHAT we found, not HOW we check it
+	nodeExistsForSameUser := existingNodeSameUser.Valid()
+	nodeExistsForAnyUser := existingNodeAnyUser.Valid()
+	existingNodeIsTagged := nodeExistsForAnyUser && existingNodeAnyUser.IsTagged()
+	existingNodeOwnedByOtherUser := nodeExistsForAnyUser &&
+		!existingNodeIsTagged &&
+		existingNodeAnyUser.UserID().Get() != user.ID
 
 	// Create logger with common fields for all auth operations
 	logger := log.With().
@@ -2214,7 +1910,7 @@ func (s *State) HandleNodeFromAuthPath(
 			return types.NodeView{}, change.Change{}, err
 		}
 	} else if existingNodeIsTagged {
-		updateParams.ExistingNode = taggedNode
+		updateParams.ExistingNode = existingNodeAnyUser
 		updateParams.IsConvertFromTag = true
 
 		finalNode, err = s.applyAuthNodeUpdate(updateParams)
@@ -2222,7 +1918,7 @@ func (s *State) HandleNodeFromAuthPath(
 			return types.NodeView{}, change.Change{}, err
 		}
 	} else if existingNodeOwnedByOtherUser {
-		oldUser := existingNodeOtherUser.User()
+		oldUser := existingNodeAnyUser.User()
 
 		oldUserName := ""
 		if oldUser.Valid() {
@@ -2230,14 +1926,14 @@ func (s *State) HandleNodeFromAuthPath(
 		}
 
 		logger.Info().
-			Str(zf.ExistingNodeName, existingNodeOtherUser.Hostname()).
-			Uint64(zf.ExistingNodeID, existingNodeOtherUser.ID().Uint64()).
+			Str(zf.ExistingNodeName, existingNodeAnyUser.Hostname()).
+			Uint64(zf.ExistingNodeID, existingNodeAnyUser.ID().Uint64()).
 			Str(zf.OldUser, oldUserName).
 			Msg("Creating new node for different user (same machine key exists for another user)")
 
 		finalNode, err = s.createNewNodeFromAuth(
 			logger, user, regData, hostname, hostinfo,
-			expiry, registrationMethod, existingNodeOtherUser,
+			expiry, registrationMethod, existingNodeAnyUser,
 		)
 		if err != nil {
 			return types.NodeView{}, change.Change{}, err
@@ -2269,12 +1965,14 @@ func (s *State) HandleNodeFromAuthPath(
 		return finalNode, change.NodeAdded(finalNode.ID()), fmt.Errorf("updating policy manager nodes: %w", err)
 	}
 
-	policyChanged := !usersChange.IsEmpty() || !nodesChange.IsEmpty()
+	var c change.Change
+	if !usersChange.IsEmpty() || !nodesChange.IsEmpty() {
+		c = change.PolicyChange()
+	} else {
+		c = change.NodeAdded(finalNode.ID())
+	}
 
-	// nodeExistsForSameUser is true only for a same-user relogin; a tag->user
-	// conversion is excluded, as it changes the peer's User — a structural
-	// change peers must see in full, not a key-rotation patch.
-	return finalNode, reauthChange(finalNode, nodeExistsForSameUser, policyChanged), nil
+	return finalNode, c, nil
 }
 
 // createNewNodeFromAuth creates a new node during auth callback.
@@ -2316,71 +2014,27 @@ func (s *State) createNewNodeFromAuth(
 func (s *State) findExistingNodeForPAK(
 	machineKey key.MachinePublic,
 	pak *types.PreAuthKey,
-) (types.NodeView, bool, error) {
-	all := s.nodeStore.GetNodesByMachineKeyAllUsers(machineKey)
-
+) (types.NodeView, bool) {
 	if pak.User != nil {
-		if node, ok := all[types.UserID(pak.User.ID)]; ok {
-			return node, true, nil
+		node, exists := s.nodeStore.GetNodeByMachineKey(machineKey, types.UserID(pak.User.ID))
+		if exists {
+			return node, true
 		}
-
-		// The node may have been converted to a tagged node since it first
-		// registered (SetNodeTags clears UserID, re-indexing it under UserID(0)).
-		// It is still the same machine, proven by the machine key, so recognise
-		// it for re-registration instead of re-validating the spent key or
-		// creating a duplicate node. Re-registration preserves the node's tagged
-		// ownership. See https://github.com/juanfont/headscale/issues/3312.
-		if node, ok := all[0]; ok && node.IsTagged() {
-			return node, true, nil
-		}
-
-		return types.NodeView{}, false, nil
 	}
 
-	// A tagged key re-registers the same machine regardless of how it is
-	// currently owned. An existing tagged node is a plain re-registration. A
-	// single user-owned node is converted to tagged in place (handled by the
-	// caller). More than one user-owned node is ambiguous - we cannot know
-	// which to convert - so reject rather than convert an arbitrary one and
-	// orphan the rest.
+	// Tagged nodes have nil UserID, so they are indexed under UserID(0)
+	// in nodesByMachineKey. Check there for tagged PAK re-registration.
 	if pak.IsTagged() {
-		if node, ok := all[0]; ok && node.IsTagged() {
-			return node, true, nil
-		}
-
-		var userOwned types.NodeView
-
-		count := 0
-
-		for uid, node := range all {
-			if uid != 0 && !node.IsTagged() {
-				userOwned = node
-				count++
-			}
-		}
-
-		switch count {
-		case 0:
-			return types.NodeView{}, false, nil
-		case 1:
-			return userOwned, true, nil
-		default:
-			return types.NodeView{}, false, ErrAmbiguousNodeOwnership
-		}
+		return s.nodeStore.GetNodeByMachineKey(machineKey, 0)
 	}
 
-	return types.NodeView{}, false, nil
+	return types.NodeView{}, false
 }
 
-//nolint:gocyclo // sequential validation/update/create paths with security-sensitive ordering
 func (s *State) HandleNodeFromPreAuthKey(
 	regReq tailcfg.RegisterRequest,
 	machineKey key.MachinePublic,
 ) (types.NodeView, change.Change, error) {
-	// Serialise registration for this machine so concurrent restarts resolve
-	// to a single node rather than racing the find-then-create section.
-	defer s.lockRegistration(machineKey)()
-
 	pak, err := s.GetPreAuthKey(regReq.Auth.AuthKey)
 	if err != nil {
 		return types.NodeView{}, change.Change{}, err
@@ -2395,10 +2049,7 @@ func (s *State) HandleNodeFromPreAuthKey(
 		return types.TaggedDevices.Name
 	}
 
-	existingNodeSameUser, existsSameUser, err := s.findExistingNodeForPAK(machineKey, pak)
-	if err != nil {
-		return types.NodeView{}, change.Change{}, err
-	}
+	existingNodeSameUser, existsSameUser := s.findExistingNodeForPAK(machineKey, pak)
 
 	// For existing nodes, skip validation if:
 	// 1. MachineKey matches (cryptographic proof of machine identity)
@@ -2417,24 +2068,10 @@ func (s *State) HandleNodeFromPreAuthKey(
 	isNodeKeyRotation := existsSameUser && existingNodeSameUser.Valid() &&
 		existingNodeSameUser.NodeKey() != regReq.NodeKey
 
-	// An expired node is genuinely re-authenticating, not just waking up, so it
-	// must present a valid key. Without this a node that re-uses its NodeKey
-	// after expiry would skip validation and be re-authorised with a spent or
-	// expired key; the boundary must not depend on the client rotating its key.
-	isExpired := existsSameUser && existingNodeSameUser.Valid() &&
-		existingNodeSameUser.IsExpired()
-
-	// A tagged key presented for a currently user-owned node converts that node
-	// to tagged. That is an ownership change, not a plain refresh, so it must
-	// present a valid key rather than ride the skip-validation fast-path.
-	isOwnershipConversion := existsSameUser && existingNodeSameUser.Valid() &&
-		pak.IsTagged() && !existingNodeSameUser.IsTagged()
-
-	if isExistingNodeReregistering && !isNodeKeyRotation && !isExpired && !isOwnershipConversion {
-		// Existing, still-valid node re-registering with same NodeKey: skip
-		// validation. Pre-auth keys are only needed for initial authentication.
-		// Critical for containers that run "tailscale up --authkey=KEY" on every
-		// restart.
+	if isExistingNodeReregistering && !isNodeKeyRotation {
+		// Existing node re-registering with same NodeKey: skip validation.
+		// Pre-auth keys are only needed for initial authentication. Critical for
+		// containers that run "tailscale up --authkey=KEY" on every restart.
 		log.Debug().
 			Caller().
 			Uint64(zf.NodeID, existingNodeSameUser.ID().Uint64()).
@@ -2490,23 +2127,6 @@ func (s *State) HandleNodeFromPreAuthKey(
 			Str(zf.UserName, pakUsername()).
 			Msg("Node re-registering with existing machine key and user, updating in place")
 
-		// Re-registration rotates the NodeKey to the client-supplied value.
-		// Enforce the same 1:1 NodeKey<->MachineKey binding the auth path
-		// (applyAuthNodeUpdate) and poll-time validation enforce: a NodeKey
-		// already bound to a different machine must not be claimed here, or a
-		// re-registering node could rotate its key to a victim's and poison the
-		// NodeStore NodeKey index, denying the victim service.
-		if existing, ok := s.nodeStore.GetNodeByNodeKey(regReq.NodeKey); ok &&
-			existing.MachineKey() != machineKey {
-			return types.NodeView{}, change.Change{}, ErrNodeKeyInUse
-		}
-
-		// Snapshot the pre-update node so the NodeStore can be rolled back if
-		// the database write below fails. The view points at the immutable
-		// pre-update snapshot (UpdateNode swaps in a new one), so this stays
-		// valid after the mutation.
-		priorNode := existingNodeSameUser.AsStruct()
-
 		// Update existing node - NodeStore first, then database
 		updatedNodeView, ok := s.nodeStore.UpdateNode(existingNodeSameUser.ID(), func(node *types.Node) {
 			node.NodeKey = regReq.NodeKey
@@ -2522,24 +2142,13 @@ func (s *State) HandleNodeFromPreAuthKey(
 			node.RegisterMethod = util.RegisterMethodAuthKey
 
 			// Tags from PreAuthKey are only applied during initial registration.
-			// On re-registration the node keeps its existing tags and ownership,
-			// except when a tagged key converts a user-owned node: that adopts
-			// the key's tags and drops user ownership (tagged nodes are
-			// user-less and never expire). Only update AuthKey reference
-			// otherwise.
-			if pak.IsTagged() && !node.IsTagged() {
-				node.Tags = pak.Tags
-				node.UserID = nil
-				node.User = nil
-				node.Expiry = nil
-			}
-
+			// On re-registration the node keeps its existing tags and ownership.
+			// Only update AuthKey reference.
 			node.AuthKey = pak
 			node.AuthKeyID = &pak.ID
 			// Do NOT reset IsOnline here. Online status is managed exclusively by
-			// [State.Connect]/[State.Disconnect] in the poll session lifecycle.
-			// Resetting it during re-registration causes a false offline blip
-			// to peers.
+			// Connect()/Disconnect() in the poll session lifecycle. Resetting it
+			// during re-registration causes a false offline blip to peers.
 			node.LastSeen = new(time.Now())
 
 			// Tagged nodes keep their existing expiry (disabled).
@@ -2574,7 +2183,7 @@ func (s *State) HandleNodeFromPreAuthKey(
 
 			// Only mark the key used on the *first* registration. On
 			// re-registration the same key is already used and the
-			// atomic compare-and-set in [hsdb.UsePreAuthKey] would otherwise
+			// atomic compare-and-set in UsePreAuthKey would otherwise
 			// reject it as "authkey already used". This is the path
 			// behind issue #2830 where containers restart with the
 			// same one-shot key.
@@ -2588,13 +2197,6 @@ func (s *State) HandleNodeFromPreAuthKey(
 			return nil, nil //nolint:nilnil // intentional: transaction success
 		})
 		if err != nil {
-			// The NodeStore was updated before the database write. Roll it back
-			// so it does not advertise a registration the database rejected
-			// (e.g. a node key that a restart would not reload).
-			if priorNode != nil {
-				s.nodeStore.PutNode(*priorNode)
-			}
-
 			return types.NodeView{}, change.Change{}, fmt.Errorf("writing node to database: %w", err)
 		}
 
@@ -2609,29 +2211,24 @@ func (s *State) HandleNodeFromPreAuthKey(
 
 		finalNode = updatedNodeView
 	} else {
-		// Node does not exist for this user with this machine key.
-		// For a user-owned key, check whether the machine key is already held
-		// by a node belonging to a different user (tags-only keys skip this;
-		// tagged nodes have no owning user). Any such node yields the same
-		// outcome - create a new node for the new user, do not transfer - so a
-		// single representative is enough.
-		var differentUserNode types.NodeView
+		// Node does not exist for this user with this machine key
+		// Check if node exists with this machine key for a different user
+		existingNodeAnyUser, existsAnyUser := s.nodeStore.GetNodeByMachineKeyAnyUser(machineKey)
 
-		belongsToDifferentUser := false
-
-		if pak.User != nil {
-			for uid, node := range s.nodeStore.GetNodesByMachineKeyAllUsers(machineKey) {
-				if uid != 0 && !node.IsTagged() && uid != types.UserID(pak.User.ID) {
-					differentUserNode = node
-					belongsToDifferentUser = true
-				}
-			}
-		}
+		// For user-owned keys, check if node exists for a different user.
+		// Tags-only keys (pak.User == nil) skip this check.
+		// Tagged nodes are also skipped since they have no owning user.
+		existingIsUserOwned := existsAnyUser &&
+			existingNodeAnyUser.Valid() &&
+			!existingNodeAnyUser.IsTagged()
+		belongsToDifferentUser := pak.User != nil &&
+			existingIsUserOwned &&
+			existingNodeAnyUser.UserID().Get() != pak.User.ID
 
 		if belongsToDifferentUser {
 			// Node exists but belongs to a different user.
 			// Create a new node for the new user (do not transfer).
-			oldUser := differentUserNode.User()
+			oldUser := existingNodeAnyUser.User()
 
 			oldUserName := ""
 			if oldUser.Valid() {
@@ -2640,8 +2237,8 @@ func (s *State) HandleNodeFromPreAuthKey(
 
 			log.Info().
 				Caller().
-				Str(zf.ExistingNodeName, differentUserNode.Hostname()).
-				Uint64(zf.ExistingNodeID, differentUserNode.ID().Uint64()).
+				Str(zf.ExistingNodeName, existingNodeAnyUser.Hostname()).
+				Uint64(zf.ExistingNodeID, existingNodeAnyUser.ID().Uint64()).
 				Str(zf.MachineKey, machineKey.ShortString()).
 				Str(zf.OldUser, oldUserName).
 				Str(zf.NewUser, pakUsername()).
@@ -2681,7 +2278,7 @@ func (s *State) HandleNodeFromPreAuthKey(
 			Expiry:                 reqExpiry,
 			RegisterMethod:         util.RegisterMethodAuthKey,
 			PreAuthKey:             pak,
-			ExistingNodeForNetinfo: differentUserNode,
+			ExistingNodeForNetinfo: cmp.Or(existingNodeAnyUser, types.NodeView{}),
 		})
 		if err != nil {
 			return types.NodeView{}, change.Change{}, fmt.Errorf("creating new node: %w", err)
@@ -2699,27 +2296,14 @@ func (s *State) HandleNodeFromPreAuthKey(
 		return finalNode, change.NodeAdded(finalNode.ID()), fmt.Errorf("updating policy manager nodes: %w", err)
 	}
 
-	policyChanged := !usersChange.IsEmpty() || !nodesChange.IsEmpty()
-
-	return finalNode, reauthChange(finalNode, existsSameUser, policyChanged), nil
-}
-
-// reauthChange returns the [change.Change] to broadcast after an authentication
-// that updated or created a node.
-//
-// A pure relogin (isRelogin: an existing node, same user, with only its NodeKey
-// rotated) is sent as a minimal incremental peer patch via [change.NodeKeyRotated]
-// rather than re-advertising the whole node. A policy change forces a full
-// recompute; any other (new) node is a whole-node add.
-func reauthChange(node types.NodeView, isRelogin, policyChanged bool) change.Change {
-	switch {
-	case policyChanged:
-		return change.PolicyChange()
-	case isRelogin:
-		return change.NodeKeyRotated(node)
-	default:
-		return change.NodeAdded(node.ID())
+	var c change.Change
+	if !usersChange.IsEmpty() || !nodesChange.IsEmpty() {
+		c = change.PolicyChange()
+	} else {
+		c = change.NodeAdded(finalNode.ID())
 	}
+
+	return finalNode, c, nil
 }
 
 // updatePolicyManagerUsers updates the policy manager with current users.
@@ -2796,75 +2380,51 @@ func (s *State) PingDB(ctx context.Context) error {
 func (s *State) autoApproveNodes() ([]change.Change, error) {
 	nodes := s.ListNodes()
 
-	// Compute every node's approval first, then apply them all in a single
-	// NodeStore batch and a single policy/peer-map rebuild. One
-	// SetApprovedRoutes per node would otherwise drive an O(n) policy SetNodes
-	// and O(n^2) peer-map rebuild for each changed node, i.e. O(m*n^2) per
-	// policy reload.
-	approvedByID := make(map[types.NodeID][]netip.Prefix)
-
+	// Approve routes concurrently, this should make it likely
+	// that the writes end in the same batch in the nodestore write.
+	var (
+		errg errgroup.Group
+		cs   []change.Change
+		mu   sync.Mutex
+	)
 	for _, nv := range nodes.All() {
-		approved, changed := policy.ApproveRoutesWithPolicy(s.polMan, nv, nv.ApprovedRoutes().AsSlice(), nv.AnnouncedRoutes())
-		if !changed {
-			continue
-		}
+		errg.Go(func() error {
+			approved, changed := policy.ApproveRoutesWithPolicy(s.polMan, nv, nv.ApprovedRoutes().AsSlice(), nv.AnnouncedRoutes())
+			if changed {
+				log.Debug().
+					Uint64(zf.NodeID, nv.ID().Uint64()).
+					Str(zf.NodeName, nv.Hostname()).
+					Strs(zf.RoutesApprovedOld, util.PrefixesToString(nv.ApprovedRoutes().AsSlice())).
+					Strs(zf.RoutesApprovedNew, util.PrefixesToString(approved)).
+					Msg("Routes auto-approved by policy")
 
-		log.Debug().
-			Uint64(zf.NodeID, nv.ID().Uint64()).
-			Str(zf.NodeName, nv.Hostname()).
-			Strs(zf.RoutesApprovedOld, util.PrefixesToString(nv.ApprovedRoutes().AsSlice())).
-			Strs(zf.RoutesApprovedNew, util.PrefixesToString(approved)).
-			Msg("Routes auto-approved by policy")
+				_, c, err := s.SetApprovedRoutes(nv.ID(), approved)
+				if err != nil {
+					return err
+				}
 
-		approvedByID[nv.ID()] = approved
-	}
+				mu.Lock()
 
-	if len(approvedByID) == 0 {
-		return nil, nil
-	}
+				cs = append(cs, c)
 
-	updates := make(map[types.NodeID]UpdateNodeFunc, len(approvedByID))
-	for id, approved := range approvedByID {
-		updates[id] = func(n *types.Node) {
-			n.ApprovedRoutes = approved
-
-			// A node with no approved routes is no longer an HA candidate;
-			// drop any stale Unhealthy bit (mirrors SetApprovedRoutes).
-			if len(n.AllApprovedRoutes()) == 0 {
-				n.Unhealthy = false
+				mu.Unlock()
 			}
-		}
+
+			return nil
+		})
 	}
 
-	s.nodeStore.UpdateNodes(updates)
-
-	for id := range approvedByID {
-		fresh, ok := s.nodeStore.GetNode(id)
-		if !ok {
-			continue
-		}
-
-		_, err := s.persistNodeRowToDB(fresh)
-		if err != nil {
-			return nil, err
-		}
-	}
-
-	c, err := s.updatePolicyManagerNodes()
+	err := errg.Wait()
 	if err != nil {
 		return nil, err
 	}
 
-	if c.IsEmpty() {
-		c = change.PolicyChange()
-	}
-
-	return []change.Change{c}, nil
+	return cs, nil
 }
 
 // isAutoDerivedGivenName reports whether given matches what
 // dnsname.SanitizeHostname(hostname) would produce, optionally with a
-// [NodeStore] collision-bump "-N" suffix. It is used to detect whether a
+// NodeStore collision-bump "-N" suffix. It is used to detect whether a
 // GivenName has been admin-renamed (in which case it must not be
 // overwritten by client-side hostname changes).
 func isAutoDerivedGivenName(given, hostname string) bool {
@@ -2884,10 +2444,10 @@ func isAutoDerivedGivenName(given, hostname string) bool {
 }
 
 // UpdateNodeFromMapRequest is the sync point where Hostinfo changes,
-// endpoint updates, and route advertisements from a [tailcfg.MapRequest]
-// land in the [NodeStore]. It produces a [change.Change] summarising
-// what actually moved so downstream subsystems (mapper, policy, primary
-// routes) can react accordingly.
+// endpoint updates, and route advertisements from a MapRequest land in
+// the NodeStore. It produces a change.Change summarising what actually
+// moved so downstream subsystems (mapper, policy, primary routes) can
+// react accordingly.
 //
 // TODO(kradalby): This is essentially a patch update that could be sent directly to nodes,
 // which means we could shortcut the whole change thing if there are no other important updates.
@@ -2895,7 +2455,7 @@ func isAutoDerivedGivenName(given, hostname string) bool {
 // - node.PeerChangeFromMapRequest
 // - node.ApplyPeerChange
 // - logTracePeerChange in poll.go.
-func (s *State) UpdateNodeFromMapRequest(id types.NodeID, req tailcfg.MapRequest) (change.Change, error) { //nolint:gocyclo // central map-request reconciliation; the sequential branch flow reads clearer as one function than split across helpers
+func (s *State) UpdateNodeFromMapRequest(id types.NodeID, req tailcfg.MapRequest) (change.Change, error) {
 	log.Trace().
 		Caller().
 		Uint64(zf.NodeID, id.Uint64()).
@@ -2909,24 +2469,18 @@ func (s *State) UpdateNodeFromMapRequest(id types.NodeID, req tailcfg.MapRequest
 		autoApprovedRoutes []netip.Prefix
 		endpointChanged    bool
 		derpChanged        bool
-		persistWorthy      bool
 	)
 	// Snapshot the primary assignment so we can tell whether the
 	// Hostinfo + auto-approval that follows shifted any prefix.
 	prevRoutes := s.nodeStore.PrimaryRoutes()
 
-	// We need to ensure we update the node as it is in the [NodeStore] at
+	// We need to ensure we update the node as it is in the NodeStore at
 	// the time of the request.
 	updatedNode, ok := s.nodeStore.UpdateNode(id, func(currentNode *types.Node) {
 		peerChange := currentNode.PeerChangeFromMapRequest(req)
 
-		// Track what specifically changed. An endpoint delta is only
-		// broadcast-worthy when it adds a useful (non-STUN) endpoint;
-		// STUN-only churn and pure shrinks are suppressed to reduce peer
-		// churn (see endpointBroadcastWorthy). The new set is still stored
-		// via ApplyPeerChange below regardless of this decision.
-		endpointChanged = peerChange.Endpoints != nil &&
-			endpointBroadcastWorthy(currentNode.Endpoints, req.Endpoints, req.EndpointTypes)
+		// Track what specifically changed
+		endpointChanged = peerChange.Endpoints != nil
 		derpChanged = peerChange.DERPRegion != 0
 		hostinfoChanged = !hostinfoEqual(currentNode.View(), req.Hostinfo)
 
@@ -2941,20 +2495,13 @@ func (s *State) UpdateNodeFromMapRequest(id types.NodeID, req tailcfg.MapRequest
 		// Re-check hostinfoChanged after potential NetInfo preservation
 		hostinfoChanged = !hostinfoEqual(currentNode.View(), req.Hostinfo)
 
-		// A change carrying only an updated LastSeen is not worth a full-row
-		// database UPDATE plus the O(n) policy rescan persistNodeToDB triggers:
-		// LastSeen is best-effort and rides along the next substantive write.
-		// PeerChangeFromMapRequest always stamps LastSeen, so test the other
-		// fields explicitly.
-		persistWorthy = peerChangePersistWorthy(peerChange) || hostinfoChanged
-
 		// If there is no changes and nothing to save,
 		// return early.
 		if peerChangeEmpty(peerChange) && !hostinfoChanged {
 			return
 		}
 
-		// Calculate route approval before [NodeStore] update to avoid calling View() inside callback
+		// Calculate route approval before NodeStore update to avoid calling View() inside callback
 		var hasNewRoutes bool
 		if hi := req.Hostinfo; hi != nil {
 			hasNewRoutes = len(hi.RoutableIPs) > 0
@@ -3016,7 +2563,7 @@ func (s *State) UpdateNodeFromMapRequest(id types.NodeID, req tailcfg.MapRequest
 				currentNode.Hostname = req.Hostinfo.Hostname
 				if autoDerived {
 					currentNode.GivenName = dnsname.SanitizeHostname(req.Hostinfo.Hostname)
-					// [NodeStore.UpdateNode] auto-bumps GivenName on collision.
+					// NodeStore.UpdateNode auto-bumps GivenName on collision.
 				}
 			}
 
@@ -3054,13 +2601,13 @@ func (s *State) UpdateNodeFromMapRequest(id types.NodeID, req tailcfg.MapRequest
 			Strs(zf.AutoApprovedRoutes, util.PrefixesToString(autoApprovedRoutes)).
 			Msg("Persisting auto-approved routes from MapRequest")
 
-		// [State.SetApprovedRoutes] will update both database and PrimaryRoutes table
+		// SetApprovedRoutes will update both database and PrimaryRoutes table
 		_, c, err := s.SetApprovedRoutes(id, autoApprovedRoutes)
 		if err != nil {
 			return change.Change{}, fmt.Errorf("persisting auto-approved routes: %w", err)
 		}
 
-		// If [State.SetApprovedRoutes] resulted in a policy change, return it
+		// If SetApprovedRoutes resulted in a policy change, return it
 		if !c.IsEmpty() {
 			return c, nil
 		}
@@ -3083,18 +2630,9 @@ func (s *State) UpdateNodeFromMapRequest(id types.NodeID, req tailcfg.MapRequest
 		nodeRouteChange = change.PolicyChange()
 	}
 
-	// A no-op MapRequest (identical re-send / reconnect with matching state)
-	// leaves the node untouched, so skip the full-row UPDATE and the O(n)
-	// policy SetNodes scan that persistNodeToDB performs.
-	policyChange := change.Change{}
-
-	if persistWorthy {
-		var err error
-
-		_, policyChange, err = s.persistNodeToDB(updatedNode)
-		if err != nil {
-			return change.Change{}, fmt.Errorf("saving to database: %w", err)
-		}
+	_, policyChange, err := s.persistNodeToDB(updatedNode)
+	if err != nil {
+		return change.Change{}, fmt.Errorf("saving to database: %w", err)
 	}
 
 	if !policyChange.IsEmpty() {
@@ -3110,64 +2648,7 @@ func (s *State) UpdateNodeFromMapRequest(id types.NodeID, req tailcfg.MapRequest
 	return buildMapRequestChangeResponse(id, updatedNode, hostinfoChanged, endpointChanged, derpChanged)
 }
 
-// endpointBroadcastWorthy reports whether an endpoint-only delta is worth
-// fanning out to peers as an incremental PeersChangedPatch. A delta that only
-// adds STUN-derived endpoints — or only removes endpoints — is suppressed:
-// bare STUN endpoints are unlikely to be open and churn a lot (the client
-// re-derives those paths over disco anyway), and a pure shrink is not worth
-// telling peers about. Suppressing this churn keeps peers' views stable.
-//
-// The decision is intentionally conservative: it gates the broadcast only,
-// not storage. The node's full endpoint set (STUN included) is still stored
-// and rides along the next substantive change or full MapResponse, so no
-// reachable path is permanently hidden from peers.
-//
-// Limitation: headscale stores bare []netip.AddrPort with no per-endpoint
-// type, so we can only classify the *new* request's endpoints (via the
-// parallel newTypes slice). We therefore gate on whether any newly-added
-// endpoint (present in new, absent from stored) is useful (non-STUN). When
-// newTypes is absent or shorter than newEPs (older clients), the unknown
-// endpoints are treated as useful, preserving the pre-existing always-broadcast
-// behaviour and never hiding a genuinely new endpoint.
-func endpointBroadcastWorthy(
-	stored, newEPs []netip.AddrPort,
-	newTypes []tailcfg.EndpointType,
-) bool {
-	storedSet := make(map[netip.AddrPort]struct{}, len(stored))
-	for _, ep := range stored {
-		storedSet[ep] = struct{}{}
-	}
-
-	for i, ep := range newEPs {
-		if _, ok := storedSet[ep]; ok {
-			// Already known to peers; not a newly-added endpoint.
-			continue
-		}
-
-		// A newly-added endpoint with no type information (older client)
-		// is treated as useful so we never hide a genuinely new endpoint.
-		t := tailcfg.EndpointUnknownType
-		if i < len(newTypes) {
-			t = newTypes[i]
-		}
-
-		if isUsefulEndpointType(t) {
-			return true
-		}
-	}
-
-	return false
-}
-
-// isUsefulEndpointType reports whether an endpoint type is worth eagerly
-// broadcasting to peers. STUN-derived endpoints are excluded because they are
-// churny and unlikely to be directly reachable; magicsock's disco handles
-// establishing those paths.
-func isUsefulEndpointType(t tailcfg.EndpointType) bool {
-	return t != tailcfg.EndpointSTUN && t != tailcfg.EndpointSTUN4LocalPort
-}
-
-// buildMapRequestChangeResponse determines the appropriate response type for a [tailcfg.MapRequest] update.
+// buildMapRequestChangeResponse determines the appropriate response type for a MapRequest update.
 // Hostinfo changes require a full update, while endpoint/DERP changes can use lightweight patches.
 func buildMapRequestChangeResponse(
 	id types.NodeID,
@@ -3241,16 +2722,3 @@ func peerChangeEmpty(peerChange tailcfg.PeerChange) bool {
 		peerChange.LastSeen == nil &&
 		peerChange.KeyExpiry == nil
 }
-
-// peerChangePersistWorthy reports whether a peer change carries anything that
-// warrants a database write. It deliberately ignores LastSeen, which
-// [Node.PeerChangeFromMapRequest] always stamps: a keepalive that only bumps
-// LastSeen should not trigger a full-row UPDATE and policy rescan.
-func peerChangePersistWorthy(peerChange tailcfg.PeerChange) bool {
-	return peerChange.Key != nil ||
-		peerChange.DiscoKey != nil ||
-		peerChange.Online != nil ||
-		peerChange.Endpoints != nil ||
-		peerChange.DERPRegion != 0 ||
-		peerChange.KeyExpiry != nil
-}
diff --git a/hscontrol/state/tags.go b/hscontrol/state/tags.go
index 9a7b25178..fbc05d9b2 100644
--- a/hscontrol/state/tags.go
+++ b/hscontrol/state/tags.go
@@ -20,13 +20,12 @@ var (
 	ErrRequestedTagsInvalidOrNotPermitted = errors.New("requested tags")
 )
 
-// ErrTaggedNodeHasUser is returned when a tagged node has a [types.Node.UserID] set.
+// ErrTaggedNodeHasUser is returned when a tagged node has a UserID set.
 var ErrTaggedNodeHasUser = errors.New("tagged node must not have user_id set")
 
 // validateNodeOwnership ensures proper node ownership model.
 // A node must be either user-owned or tagged, and these are mutually exclusive:
-// tagged nodes must not have a [types.Node.UserID], and user-owned nodes must
-// not have tags.
+// tagged nodes must not have a UserID, and user-owned nodes must not have tags.
 func validateNodeOwnership(node *types.Node) error {
 	if node.IsTagged() {
 		if len(node.Tags) == 0 {
diff --git a/hscontrol/state/test_helpers.go b/hscontrol/state/test_helpers.go
index c582b4db9..952031060 100644
--- a/hscontrol/state/test_helpers.go
+++ b/hscontrol/state/test_helpers.go
@@ -4,7 +4,7 @@ import (
 	"time"
 )
 
-// Test configuration for [NodeStore] batching.
+// Test configuration for NodeStore batching.
 // These values are optimized for test speed rather than production use.
 const (
 	TestBatchSize    = 5
diff --git a/hscontrol/tailsql.go b/hscontrol/tailsql.go
index 25c6869a8..d6ef380ec 100644
--- a/hscontrol/tailsql.go
+++ b/hscontrol/tailsql.go
@@ -38,6 +38,9 @@ func runTailSQLService(ctx context.Context, logf logger.Logf, stateDir, dbPath s
 		Hostname: opts.Hostname,
 		Logf:     logger.Discard,
 	}
+	// if *doDebugLog {
+	// 	tsNode.Logf = logf
+	// }
 	defer tsNode.Close()
 
 	logf("Starting tailscale (hostname=%q)", opts.Hostname)
@@ -81,9 +84,10 @@ func runTailSQLService(ctx context.Context, logf logger.Logf, stateDir, dbPath s
 		go func() {
 			_ = http.Serve(lst, http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { //nolint:gosec
 				target := base + r.RequestURI
-				http.Redirect(w, r, target, http.StatusPermanentRedirect) //nolint:gosec // G710: target prefixed by trusted base URL
+				http.Redirect(w, r, target, http.StatusPermanentRedirect)
 			}))
 		}()
+		// log.Printf("Redirecting HTTP to HTTPS at %q", base)
 
 		// For the real service, start a separate listener.
 		// Note: Replaces the port 80 listener.
diff --git a/hscontrol/templates/apple.go b/hscontrol/templates/apple.go
index 8376b19a5..3b1200696 100644
--- a/hscontrol/templates/apple.go
+++ b/hscontrol/templates/apple.go
@@ -1,196 +1,191 @@
 package templates
 
 import (
+	"fmt"
+
 	"github.com/chasefleming/elem-go"
 	"github.com/chasefleming/elem-go/attrs"
 	"github.com/chasefleming/elem-go/styles"
 )
 
 func Apple(url string) *elem.Element {
-	return page(
-		"headscale - Apple",
-		H1(elem.Text("iOS configuration")),
-		H2(elem.Text("GUI")),
-		Ol(
-			elem.Li(
-				nil,
-				elem.Text("Install the official Tailscale iOS client from the "),
-				externalLink("https://apps.apple.com/app/tailscale/id1470499037", "App Store"),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Open the "),
-				elem.Strong(nil, elem.Text("Tailscale")),
-				elem.Text(" app"),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Click the account icon in the top-right corner and select "),
-				elem.Strong(nil, elem.Text("Log in…")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Tap the top-right options menu button and select "),
-				elem.Strong(nil, elem.Text("Use custom coordination server")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Enter your instance URL: "),
-				Code(elem.Text(url)),
-			),
-			elem.Li(
-				nil,
-				elem.Text(
-					"Enter your credentials and log in. Headscale should now be working on your iOS device",
+	return HtmlStructure(
+		elem.Title(nil,
+			elem.Text("headscale - Apple")),
+		mdTypesetBody(
+			headscaleLogo(),
+			H1(elem.Text("iOS configuration")),
+			H2(elem.Text("GUI")),
+			Ol(
+				elem.Li(
+					nil,
+					elem.Text("Install the official Tailscale iOS client from the "),
+					externalLink("https://apps.apple.com/app/tailscale/id1470499037", "App Store"),
+				),
+				elem.Li(
+					nil,
+					elem.Text("Open the "),
+					elem.Strong(nil, elem.Text("Tailscale")),
+					elem.Text(" app"),
+				),
+				elem.Li(
+					nil,
+					elem.Text("Click the account icon in the top-right corner and select "),
+					elem.Strong(nil, elem.Text("Log in…")),
+				),
+				elem.Li(
+					nil,
+					elem.Text("Tap the top-right options menu button and select "),
+					elem.Strong(nil, elem.Text("Use custom coordination server")),
+				),
+				elem.Li(
+					nil,
+					elem.Text("Enter your instance URL: "),
+					Code(elem.Text(url)),
+				),
+				elem.Li(
+					nil,
+					elem.Text(
+						"Enter your credentials and log in. Headscale should now be working on your iOS device",
+					),
 				),
 			),
-		),
-		H1(elem.Text("macOS configuration")),
-		H2(elem.Text("Command line")),
-		P(
-			elem.Text("Use Tailscale's login command to add your profile:"),
-		),
-		codeBlockText("tailscale login --login-server "+url),
-		H2(elem.Text("GUI")),
-		Ol(
-			elem.Li(
-				nil,
-				elem.Text("Option + Click the "),
-				elem.Strong(nil, elem.Text("Tailscale")),
-				elem.Text(" icon in the menu and hover over the "),
-				elem.Strong(nil, elem.Text("Debug")),
-				elem.Text(" menu"),
+			H1(elem.Text("macOS configuration")),
+			H2(elem.Text("Command line")),
+			P(
+				elem.Text("Use Tailscale's login command to add your profile:"),
 			),
-			elem.Li(
-				nil,
-				elem.Text("Under "),
-				elem.Strong(nil, elem.Text("Custom Login Server")),
-				elem.Text(", select "),
-				elem.Strong(nil, elem.Text("Add Account...")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Enter "),
-				Code(elem.Text(url)),
-				elem.Text(" of the headscale instance and press "),
-				elem.Strong(nil, elem.Text("Add Account")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Follow the login procedure in the browser"),
-			),
-		),
-		H2(elem.Text("Profiles")),
-		P(
-			elem.Text(
-				"Headscale can be set to the default server by installing a Headscale configuration profile:",
-			),
-		),
-		elem.Div(
-			attrs.Props{attrs.Style: styles.Props{styles.MarginTop: spaceL, styles.MarginBottom: spaceL}.ToInline()},
-			downloadButton("/apple/macos-app-store", "macOS AppStore profile"),
-			downloadButton("/apple/macos-standalone", "macOS Standalone profile"),
-		),
-		Ol(
-			elem.Li(
-				nil,
-				elem.Text(
-					"Download the profile, then open it. When it has been opened, there should be a notification that a profile can be installed",
+			Pre(PreCode("tailscale login --login-server "+url)),
+			H2(elem.Text("GUI")),
+			Ol(
+				elem.Li(
+					nil,
+					elem.Text("Option + Click the "),
+					elem.Strong(nil, elem.Text("Tailscale")),
+					elem.Text(" icon in the menu and hover over the "),
+					elem.Strong(nil, elem.Text("Debug")),
+					elem.Text(" menu"),
+				),
+				elem.Li(nil,
+					elem.Text("Under "),
+					elem.Strong(nil, elem.Text("Custom Login Server")),
+					elem.Text(", select "),
+					elem.Strong(nil, elem.Text("Add Account...")),
+				),
+				elem.Li(
+					nil,
+					elem.Text("Enter "),
+					Code(elem.Text(url)),
+					elem.Text(" of the headscale instance and press "),
+					elem.Strong(nil, elem.Text("Add Account")),
+				),
+				elem.Li(nil,
+					elem.Text("Follow the login procedure in the browser"),
 				),
 			),
-			elem.Li(
-				nil,
-				elem.Text("Open "),
-				elem.Strong(nil, elem.Text("System Preferences")),
-				elem.Text(" and go to "),
-				elem.Strong(nil, elem.Text("Profiles")),
+			H2(elem.Text("Profiles")),
+			P(
+				elem.Text(
+					"Headscale can be set to the default server by installing a Headscale configuration profile:",
+				),
 			),
-			elem.Li(
-				nil,
-				elem.Text("Find and install the "),
-				elem.Strong(nil, elem.Text("Headscale")),
-				elem.Text(" profile"),
+			elem.Div(attrs.Props{attrs.Style: styles.Props{styles.MarginTop: spaceL, styles.MarginBottom: spaceL}.ToInline()},
+				downloadButton("/apple/macos-app-store", "macOS AppStore profile"),
+				downloadButton("/apple/macos-standalone", "macOS Standalone profile"),
 			),
-			elem.Li(
-				nil,
+			Ol(
+				elem.Li(
+					nil,
+					elem.Text(
+						"Download the profile, then open it. When it has been opened, there should be a notification that a profile can be installed",
+					),
+				),
+				elem.Li(nil,
+					elem.Text("Open "),
+					elem.Strong(nil, elem.Text("System Preferences")),
+					elem.Text(" and go to "),
+					elem.Strong(nil, elem.Text("Profiles")),
+				),
+				elem.Li(nil,
+					elem.Text("Find and install the "),
+					elem.Strong(nil, elem.Text("Headscale")),
+					elem.Text(" profile"),
+				),
+				elem.Li(nil,
+					elem.Text("Restart "),
+					elem.Strong(nil, elem.Text("Tailscale.app")),
+					elem.Text(" and log in"),
+				),
+			),
+			orDivider(),
+			P(
+				elem.Text(
+					"Use your terminal to configure the default setting for Tailscale by issuing one of the following commands:",
+				),
+			),
+			P(elem.Text("For app store client:")),
+			Pre(PreCode("defaults write io.tailscale.ipn.macos ControlURL "+url)),
+			P(elem.Text("For standalone client:")),
+			Pre(PreCode("defaults write io.tailscale.ipn.macsys ControlURL "+url)),
+			P(
 				elem.Text("Restart "),
 				elem.Strong(nil, elem.Text("Tailscale.app")),
-				elem.Text(" and log in"),
+				elem.Text(" and log in."),
 			),
-		),
-		orDivider(),
-		P(
-			elem.Text(
-				"Use your terminal to configure the default setting for Tailscale by issuing one of the following commands:",
-			),
-		),
-		P(elem.Text("For app store client:")),
-		codeBlockText("defaults write io.tailscale.ipn.macos ControlURL "+url),
-		P(elem.Text("For standalone client:")),
-		codeBlockText("defaults write io.tailscale.ipn.macsys ControlURL "+url),
-		P(
-			elem.Text("Restart "),
-			elem.Strong(nil, elem.Text("Tailscale.app")),
-			elem.Text(" and log in."),
-		),
-		warningBox("Caution", "You should always download and inspect the profile before installing it."),
-		P(elem.Text("For app store client:")),
-		codeBlockText("curl "+url+"/apple/macos-app-store"),
-		P(elem.Text("For standalone client:")),
-		codeBlockText("curl "+url+"/apple/macos-standalone"),
-		H1(elem.Text("tvOS configuration")),
-		H2(elem.Text("GUI")),
-		Ol(
-			elem.Li(
-				nil,
-				elem.Text("Install the official Tailscale tvOS client from the "),
-				externalLink("https://apps.apple.com/app/tailscale/id1470499037", "App Store"),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Open "),
-				elem.Strong(nil, elem.Text("Settings")),
-				elem.Text(" (the Apple tvOS settings) > "),
-				elem.Strong(nil, elem.Text("Apps")),
-				elem.Text(" > "),
-				elem.Strong(nil, elem.Text("Tailscale")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Enter "),
-				Code(elem.Text(url)),
-				elem.Text(" under "),
-				elem.Strong(nil, elem.Text("ALTERNATE COORDINATION SERVER URL")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Return to the tvOS "),
-				elem.Strong(nil, elem.Text("Home")),
-				elem.Text(" screen"),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Open "),
-				elem.Strong(nil, elem.Text("Tailscale")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Select "),
-				elem.Strong(nil, elem.Text("Install VPN configuration")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Select "),
-				elem.Strong(nil, elem.Text("Allow")),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Scan the QR code and follow the login procedure"),
-			),
-			elem.Li(
-				nil,
-				elem.Text("Headscale should now be working on your tvOS device"),
+			warningBox("Caution", "You should always download and inspect the profile before installing it."),
+			P(elem.Text("For app store client:")),
+			Pre(PreCode(fmt.Sprintf(`curl %s/apple/macos-app-store`, url))),
+			P(elem.Text("For standalone client:")),
+			Pre(PreCode(fmt.Sprintf(`curl %s/apple/macos-standalone`, url))),
+			H1(elem.Text("tvOS configuration")),
+			H2(elem.Text("GUI")),
+			Ol(
+				elem.Li(
+					nil,
+					elem.Text("Install the official Tailscale tvOS client from the "),
+					externalLink("https://apps.apple.com/app/tailscale/id1470499037", "App Store"),
+				),
+				elem.Li(
+					nil,
+					elem.Text("Open "),
+					elem.Strong(nil, elem.Text("Settings")),
+					elem.Text(" (the Apple tvOS settings) > "),
+					elem.Strong(nil, elem.Text("Apps")),
+					elem.Text(" > "),
+					elem.Strong(nil, elem.Text("Tailscale")),
+				),
+				elem.Li(
+					nil,
+					elem.Text("Enter "),
+					Code(elem.Text(url)),
+					elem.Text(" under "),
+					elem.Strong(nil, elem.Text("ALTERNATE COORDINATION SERVER URL")),
+				),
+				elem.Li(nil,
+					elem.Text("Return to the tvOS "),
+					elem.Strong(nil, elem.Text("Home")),
+					elem.Text(" screen"),
+				),
+				elem.Li(nil,
+					elem.Text("Open "),
+					elem.Strong(nil, elem.Text("Tailscale")),
+				),
+				elem.Li(nil,
+					elem.Text("Select "),
+					elem.Strong(nil, elem.Text("Install VPN configuration")),
+				),
+				elem.Li(nil,
+					elem.Text("Select "),
+					elem.Strong(nil, elem.Text("Allow")),
+				),
+				elem.Li(nil,
+					elem.Text("Scan the QR code and follow the login procedure"),
+				),
+				elem.Li(nil,
+					elem.Text("Headscale should now be working on your tvOS device"),
+				),
 			),
+			pageFooter(),
 		),
 	)
 }
diff --git a/hscontrol/templates/auth_error.go b/hscontrol/templates/auth_error.go
index 8bcaa8063..7b48974c1 100644
--- a/hscontrol/templates/auth_error.go
+++ b/hscontrol/templates/auth_error.go
@@ -30,8 +30,12 @@ func AuthError(result AuthErrorResult) *elem.Element {
 		elem.Text(result.Message),
 	)
 
-	return page(
-		result.Title,
-		box,
+	return HtmlStructure(
+		elem.Title(nil, elem.Text(result.Title)),
+		mdTypesetBody(
+			headscaleLogo(),
+			box,
+			pageFooter(),
+		),
 	)
 }
diff --git a/hscontrol/templates/auth_success.go b/hscontrol/templates/auth_success.go
index 631de3b14..c0f275e54 100644
--- a/hscontrol/templates/auth_success.go
+++ b/hscontrol/templates/auth_success.go
@@ -41,20 +41,22 @@ func AuthSuccess(result AuthSuccessResult) *elem.Element {
 		elem.Text(". "+result.Message),
 	)
 
-	return page(
-		result.Title,
-		box,
-		H2(elem.Text("Getting started")),
-		P(elem.Text("Check out the documentation to learn more about headscale and Tailscale:")),
-		Ul(
-			elem.Li(
-				nil,
-				externalLink("https://headscale.net/stable/", "Headscale documentation"),
-			),
-			elem.Li(
-				nil,
-				externalLink("https://tailscale.com/docs", "Tailscale docs"),
+	return HtmlStructure(
+		elem.Title(nil, elem.Text(result.Title)),
+		mdTypesetBody(
+			headscaleLogo(),
+			box,
+			H2(elem.Text("Getting started")),
+			P(elem.Text("Check out the documentation to learn more about headscale and Tailscale:")),
+			Ul(
+				elem.Li(nil,
+					externalLink("https://headscale.net/stable/", "Headscale documentation"),
+				),
+				elem.Li(nil,
+					externalLink("https://tailscale.com/docs", "Tailscale docs"),
+				),
 			),
+			pageFooter(),
 		),
 	)
 }
diff --git a/hscontrol/templates/auth_web.go b/hscontrol/templates/auth_web.go
index ff97250da..8b6d6f971 100644
--- a/hscontrol/templates/auth_web.go
+++ b/hscontrol/templates/auth_web.go
@@ -8,10 +8,14 @@ import (
 // to complete an authentication or registration flow.
 // It is used by both the registration and auth-approve web handlers.
 func AuthWeb(title, description, command string) *elem.Element {
-	return page(
-		title+" - Headscale",
-		H1(elem.Text(title)),
-		P(elem.Text(description)),
-		codeBlockText(command),
+	return HtmlStructure(
+		elem.Title(nil, elem.Text(title+" - Headscale")),
+		mdTypesetBody(
+			headscaleLogo(),
+			H1(elem.Text(title)),
+			P(elem.Text(description)),
+			Pre(PreCode(command)),
+			pageFooter(),
+		),
 	)
 }
diff --git a/hscontrol/templates/design.go b/hscontrol/templates/design.go
index 422d85db7..55b965081 100644
--- a/hscontrol/templates/design.go
+++ b/hscontrol/templates/design.go
@@ -10,6 +10,41 @@ import (
 // These constants define the visual language for all Headscale HTML templates.
 // They ensure consistency across all pages and make it easy to maintain and update the design.
 
+// Color System
+// EXTRACTED FROM: https://headscale.net/stable/assets/stylesheets/main.342714a4.min.css
+// Material for MkDocs design system - exact values from official docs.
+const (
+	// Text colors - from --md-default-fg-color CSS variables.
+	colorTextPrimary   = "#000000de" //nolint:unused // rgba(0,0,0,0.87) - Body text
+	colorTextSecondary = "#0000008a" //nolint:unused // rgba(0,0,0,0.54) - Headings (--md-default-fg-color--light)
+	colorTextTertiary  = "#00000052" //nolint:unused // rgba(0,0,0,0.32) - Lighter text
+	colorTextLightest  = "#00000012" //nolint:unused // rgba(0,0,0,0.07) - Lightest text
+
+	// Code colors - from --md-code-* CSS variables.
+	colorCodeFg = "#36464e" //nolint:unused // Code text color (--md-code-fg-color)
+	colorCodeBg = "#f5f5f5" //nolint:unused // Code background (--md-code-bg-color)
+
+	// Border colors.
+	colorBorderLight  = "#e5e7eb" //nolint:unused // Light borders
+	colorBorderMedium = "#d1d5db" //nolint:unused // Medium borders
+
+	// Background colors.
+	colorBackgroundPage = "#ffffff" //nolint:unused // Page background
+	colorBackgroundCard = "#ffffff" //nolint:unused // Card/content background
+
+	// Accent colors - from --md-primary/accent-fg-color.
+	colorPrimaryAccent = "#4051b5" //nolint:unused // Primary accent (links)
+	colorAccent        = "#526cfe" //nolint:unused // Secondary accent
+
+	// Success colors.
+	colorSuccess      = "#059669" //nolint:unused // Success states
+	colorSuccessLight = "#d1fae5" //nolint:unused // Success backgrounds
+
+	// Error colors.
+	colorError      = "#dc2626" //nolint:unused // Error states (red-600)
+	colorErrorLight = "#fee2e2" //nolint:unused // Error backgrounds (red-100)
+)
+
 // Spacing System
 // Based on 4px/8px base unit for consistent rhythm.
 // Uses rem units for scalability with user font size preferences.
@@ -23,25 +58,272 @@ const (
 	space3XL = "4rem"    //nolint:unused // 64px - 3x extra large spacing
 )
 
-// Shared CSS value constants used across templates.
-const (
-	cssBorderHS = "1px solid var(--hs-border)" //nolint:unused // Shared HS border
-	cssCenter   = "center"                     //nolint:unused // Center alignment
-)
-
 // Typography System
 // EXTRACTED FROM: https://headscale.net/stable/assets/stylesheets/main.342714a4.min.css
 // Material for MkDocs typography - exact values from .md-typeset CSS.
 const (
+	// Font families - from CSS custom properties.
+	fontFamilySystem = `"Roboto", -apple-system, BlinkMacSystemFont, "Segoe UI", "Helvetica Neue", Arial, sans-serif` //nolint:unused
+	fontFamilyCode   = `"Roboto Mono", "SF Mono", Monaco, "Cascadia Code", Consolas, "Courier New", monospace`        //nolint:unused
+
 	// Font sizes - from .md-typeset CSS rules.
-	fontSizeBase  = "0.8rem" //nolint:unused // 12.8px - Base text (.md-typeset)
-	fontSizeH3    = "1.25em" //nolint:unused // 1.25x base - Subsection headings
-	fontSizeSmall = "0.8em"  //nolint:unused // 0.8x base - Small text
+	fontSizeBase  = "0.8rem"   //nolint:unused // 12.8px - Base text (.md-typeset)
+	fontSizeH1    = "2em"      //nolint:unused // 2x base - Main headings
+	fontSizeH2    = "1.5625em" //nolint:unused // 1.5625x base - Section headings
+	fontSizeH3    = "1.25em"   //nolint:unused // 1.25x base - Subsection headings
+	fontSizeSmall = "0.8em"    //nolint:unused // 0.8x base - Small text
+	fontSizeCode  = "0.85em"   //nolint:unused // 0.85x base - Inline code
 
 	// Line heights - from .md-typeset CSS rules.
 	lineHeightBase = "1.6" //nolint:unused // Body text (.md-typeset)
+	lineHeightH1   = "1.3" //nolint:unused // H1 headings
+	lineHeightH2   = "1.4" //nolint:unused // H2 headings
+	lineHeightH3   = "1.5" //nolint:unused // H3 headings
+	lineHeightCode = "1.4" //nolint:unused // Code blocks (pre)
 )
 
+// Responsive Container Component
+// Creates a centered container with responsive padding and max-width.
+// Mobile-first approach: starts at 100% width with padding, constrains on larger screens.
+//
+//nolint:unused // Reserved for future use in Phase 4.
+func responsiveContainer(children ...elem.Node) *elem.Element {
+	return elem.Div(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.Width:    "100%",
+			styles.MaxWidth: "min(800px, 90vw)",         // Responsive: 90% of viewport or 800px max
+			styles.Margin:   "0 auto",                   // Center horizontally
+			styles.Padding:  "clamp(1rem, 5vw, 2.5rem)", // Fluid padding: 16px to 40px
+		}.ToInline(),
+	}, children...)
+}
+
+// Card Component
+// Reusable card for grouping related content with visual separation.
+// Parameters:
+//   - title: Optional title for the card (empty string for no title)
+//   - children: Content elements to display in the card
+//
+//nolint:unused // Reserved for future use in Phase 4.
+func card(title string, children ...elem.Node) *elem.Element {
+	cardContent := children
+	if title != "" {
+		cardContent = append([]elem.Node{
+			elem.H3(attrs.Props{
+				attrs.Style: styles.Props{
+					styles.MarginTop:    "0",
+					styles.MarginBottom: spaceM,
+				}.ToInline(),
+			}, elem.Text(title)),
+		}, children...)
+	}
+
+	return elem.Div(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.Background:   "var(--hs-bg)",
+			styles.Border:       "1px solid var(--hs-border)",
+			styles.BorderRadius: "0.5rem",
+			styles.Padding:      "clamp(1rem, 3vw, 1.5rem)",
+			styles.MarginBottom: spaceL,
+			styles.BoxShadow:    "0 1px 3px rgba(0,0,0,0.1)",
+		}.ToInline(),
+	}, cardContent...)
+}
+
+// Code Block Component
+// EXTRACTED FROM: .md-typeset pre CSS rules
+// Exact styling from Material for MkDocs documentation.
+//
+//nolint:unused // Used across apple.go, windows.go, register_web.go templates.
+func codeBlock(code string) *elem.Element {
+	return elem.Pre(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.Display:         "block",
+			styles.Padding:         "0.77em 1.18em", // From .md-typeset pre
+			styles.Border:          "none",          // No border in original
+			styles.BorderRadius:    "0.1rem",        // From .md-typeset code
+			styles.BackgroundColor: colorCodeBg,     // #f5f5f5
+			styles.FontFamily:      fontFamilyCode,  // Roboto Mono
+			styles.FontSize:        fontSizeCode,    // 0.85em
+			styles.LineHeight:      lineHeightCode,  // 1.4
+			styles.OverflowX:       "auto",          // Horizontal scroll
+			"overflow-wrap":        "break-word",    // Word wrapping
+			"word-wrap":            "break-word",    // Legacy support
+			styles.WhiteSpace:      "pre-wrap",      // Preserve whitespace
+			styles.MarginTop:       spaceM,          // 1em
+			styles.MarginBottom:    spaceM,          // 1em
+			styles.Color:           colorCodeFg,     // #36464e
+			styles.BoxShadow:       "none",          // No shadow in original
+		}.ToInline(),
+	},
+		elem.Code(nil, elem.Text(code)),
+	)
+}
+
+// Base Typeset Styles
+// Returns inline styles for the main content container that matches .md-typeset.
+// EXTRACTED FROM: .md-typeset CSS rule from Material for MkDocs.
+//
+//nolint:unused // Used in general.go for mdTypesetBody.
+func baseTypesetStyles() styles.Props {
+	return styles.Props{
+		styles.FontSize:   fontSizeBase,   // 0.8rem
+		styles.LineHeight: lineHeightBase, // 1.6
+		styles.Color:      colorTextPrimary,
+		styles.FontFamily: fontFamilySystem,
+		"overflow-wrap":   "break-word",
+		styles.TextAlign:  "left",
+	}
+}
+
+// H1 Styles
+// Returns inline styles for H1 headings that match .md-typeset h1.
+// EXTRACTED FROM: .md-typeset h1 CSS rule from Material for MkDocs.
+//
+//nolint:unused // Used across templates for main headings.
+func h1Styles() styles.Props {
+	return styles.Props{
+		styles.Color:      colorTextSecondary, // rgba(0, 0, 0, 0.54)
+		styles.FontSize:   fontSizeH1,         // 2em
+		styles.LineHeight: lineHeightH1,       // 1.3
+		styles.Margin:     "0 0 1.25em",
+		styles.FontWeight: "300",
+		"letter-spacing":  "-0.01em",
+		styles.FontFamily: fontFamilySystem, // Roboto
+		"overflow-wrap":   "break-word",
+	}
+}
+
+// H2 Styles
+// Returns inline styles for H2 headings that match .md-typeset h2.
+// EXTRACTED FROM: .md-typeset h2 CSS rule from Material for MkDocs.
+//
+//nolint:unused // Used across templates for section headings.
+func h2Styles() styles.Props {
+	return styles.Props{
+		styles.FontSize:   fontSizeH2,   // 1.5625em
+		styles.LineHeight: lineHeightH2, // 1.4
+		styles.Margin:     "1.6em 0 0.64em",
+		styles.FontWeight: "300",
+		"letter-spacing":  "-0.01em",
+		styles.Color:      colorTextSecondary, // rgba(0, 0, 0, 0.54)
+		styles.FontFamily: fontFamilySystem,   // Roboto
+		"overflow-wrap":   "break-word",
+	}
+}
+
+// H3 Styles
+// Returns inline styles for H3 headings that match .md-typeset h3.
+// EXTRACTED FROM: .md-typeset h3 CSS rule from Material for MkDocs.
+//
+//nolint:unused // Used across templates for subsection headings.
+func h3Styles() styles.Props {
+	return styles.Props{
+		styles.FontSize:   fontSizeH3,   // 1.25em
+		styles.LineHeight: lineHeightH3, // 1.5
+		styles.Margin:     "1.6em 0 0.8em",
+		styles.FontWeight: "400",
+		"letter-spacing":  "-0.01em",
+		styles.Color:      colorTextSecondary, // rgba(0, 0, 0, 0.54)
+		styles.FontFamily: fontFamilySystem,   // Roboto
+		"overflow-wrap":   "break-word",
+	}
+}
+
+// Paragraph Styles
+// Returns inline styles for paragraphs that match .md-typeset p.
+// EXTRACTED FROM: .md-typeset p CSS rule from Material for MkDocs.
+//
+//nolint:unused // Used for consistent paragraph spacing.
+func paragraphStyles() styles.Props {
+	return styles.Props{
+		styles.Margin:     "1em 0",
+		styles.FontFamily: fontFamilySystem, // Roboto
+		styles.FontSize:   fontSizeBase,     // 0.8rem - inherited from .md-typeset
+		styles.LineHeight: lineHeightBase,   // 1.6 - inherited from .md-typeset
+		styles.Color:      colorTextPrimary, // rgba(0, 0, 0, 0.87)
+		"overflow-wrap":   "break-word",
+	}
+}
+
+// Ordered List Styles
+// Returns inline styles for ordered lists that match .md-typeset ol.
+// EXTRACTED FROM: .md-typeset ol CSS rule from Material for MkDocs.
+//
+//nolint:unused // Used for numbered instruction lists.
+func orderedListStyles() styles.Props {
+	return styles.Props{
+		styles.MarginBottom: "1em",
+		styles.MarginTop:    "1em",
+		styles.PaddingLeft:  "2em",
+		styles.FontFamily:   fontFamilySystem, // Roboto - inherited from .md-typeset
+		styles.FontSize:     fontSizeBase,     // 0.8rem - inherited from .md-typeset
+		styles.LineHeight:   lineHeightBase,   // 1.6 - inherited from .md-typeset
+		styles.Color:        colorTextPrimary, // rgba(0, 0, 0, 0.87) - inherited from .md-typeset
+		"overflow-wrap":     "break-word",
+	}
+}
+
+// Unordered List Styles
+// Returns inline styles for unordered lists that match .md-typeset ul.
+// EXTRACTED FROM: .md-typeset ul CSS rule from Material for MkDocs.
+//
+//nolint:unused // Used for bullet point lists.
+func unorderedListStyles() styles.Props {
+	return styles.Props{
+		styles.MarginBottom: "1em",
+		styles.MarginTop:    "1em",
+		styles.PaddingLeft:  "2em",
+		styles.FontFamily:   fontFamilySystem, // Roboto - inherited from .md-typeset
+		styles.FontSize:     fontSizeBase,     // 0.8rem - inherited from .md-typeset
+		styles.LineHeight:   lineHeightBase,   // 1.6 - inherited from .md-typeset
+		styles.Color:        colorTextPrimary, // rgba(0, 0, 0, 0.87) - inherited from .md-typeset
+		"overflow-wrap":     "break-word",
+	}
+}
+
+// Link Styles
+// Returns inline styles for links that match .md-typeset a.
+// EXTRACTED FROM: .md-typeset a CSS rule from Material for MkDocs.
+// Note: Hover states cannot be implemented with inline styles.
+//
+//nolint:unused // Used for text links.
+func linkStyles() styles.Props {
+	return styles.Props{
+		styles.Color:          colorPrimaryAccent, // #4051b5 - var(--md-primary-fg-color)
+		styles.TextDecoration: "none",
+		"word-break":          "break-word",
+		styles.FontFamily:     fontFamilySystem, // Roboto - inherited from .md-typeset
+	}
+}
+
+// Inline Code Styles (updated)
+// Returns inline styles for inline code that matches .md-typeset code.
+// EXTRACTED FROM: .md-typeset code CSS rule from Material for MkDocs.
+//
+//nolint:unused // Used for inline code snippets.
+func inlineCodeStyles() styles.Props {
+	return styles.Props{
+		styles.BackgroundColor: colorCodeBg, // #f5f5f5
+		styles.Color:           colorCodeFg, // #36464e
+		styles.BorderRadius:    "0.1rem",
+		styles.FontSize:        fontSizeCode,   // 0.85em
+		styles.FontFamily:      fontFamilyCode, // Roboto Mono
+		styles.Padding:         "0 0.2941176471em",
+		"word-break":           "break-word",
+	}
+}
+
+// Inline Code Component
+// For inline code snippets within text.
+//
+//nolint:unused // Reserved for future inline code usage.
+func inlineCode(code string) *elem.Element {
+	return elem.Code(attrs.Props{
+		attrs.Style: inlineCodeStyles().ToInline(),
+	}, elem.Text(code))
+}
+
 // orDivider creates a visual "or" divider between sections.
 // Styled with lines on either side for better visual separation.
 //
@@ -53,17 +335,16 @@ func orDivider() *elem.Element {
 		styles.BackgroundColor: "var(--hs-border)",
 	}.ToInline()
 
-	return elem.Div(
-		attrs.Props{
-			attrs.Style: styles.Props{
-				styles.Display:      "flex",
-				styles.AlignItems:   cssCenter,
-				styles.Gap:          spaceM,
-				styles.MarginTop:    space2XL,
-				styles.MarginBottom: space2XL,
-				styles.Width:        "100%",
-			}.ToInline(),
-		},
+	return elem.Div(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.Display:      "flex",
+			styles.AlignItems:   "center",
+			styles.Gap:          spaceM,
+			styles.MarginTop:    space2XL,
+			styles.MarginBottom: space2XL,
+			styles.Width:        "100%",
+		}.ToInline(),
+	},
 		elem.Div(attrs.Props{attrs.Style: lineStyle}),
 		elem.Strong(attrs.Props{
 			attrs.Style: styles.Props{
@@ -78,40 +359,34 @@ func orDivider() *elem.Element {
 	)
 }
 
-// feedbackBox creates a coloured feedback box with an icon and a bold heading.
-// colorVar provides both the border and heading colour, bgVar the background;
-// role and ariaLive set the accessibility attributes. Children render below the
-// heading.
+// successBox creates a green success feedback box with a checkmark icon.
+// The heading is displayed as bold green text, and children are rendered below it.
+// Pairs with warningBox for consistent feedback styling.
 //
-//nolint:unused // Wrapped by successBox and errorBox.
-func feedbackBox(
-	icon elem.Node,
-	colorVar, bgVar, role, ariaLive, heading string,
-	children ...elem.Node,
-) *elem.Element {
+//nolint:unused // Used in auth_success.go template.
+func successBox(heading string, children ...elem.Node) *elem.Element {
 	return elem.Div(
 		attrs.Props{
 			attrs.Style: styles.Props{
 				styles.Display:         "flex",
-				styles.AlignItems:      cssCenter,
+				styles.AlignItems:      "center",
 				styles.Gap:             spaceM,
 				styles.Padding:         spaceL,
-				styles.BackgroundColor: bgVar,
-				styles.Border:          "1px solid " + colorVar,
-				styles.BorderRadius:    spaceS,
+				styles.BackgroundColor: "var(--hs-success-bg)",
+				styles.Border:          "1px solid var(--hs-success)",
+				styles.BorderRadius:    "0.5rem",
 				styles.MarginBottom:    spaceXL,
 			}.ToInline(),
-			attrs.Role:  role,
-			"aria-live": ariaLive,
+			attrs.Role:  "status",
+			"aria-live": "polite",
 		},
-		icon,
-		elem.Div(
-			nil,
+		checkboxIcon(),
+		elem.Div(nil,
 			append([]elem.Node{
 				elem.Strong(attrs.Props{
 					attrs.Style: styles.Props{
 						styles.Display:      "block",
-						styles.Color:        colorVar,
+						styles.Color:        "var(--hs-success)",
 						styles.FontSize:     fontSizeH3,
 						styles.FontWeight:   "700",
 						styles.MarginBottom: spaceXS,
@@ -122,19 +397,6 @@ func feedbackBox(
 	)
 }
 
-// successBox creates a green success feedback box with a checkmark icon.
-// The heading is displayed as bold green text, and children are rendered below it.
-// Pairs with warningBox for consistent feedback styling.
-//
-//nolint:unused // Used in auth_success.go template.
-func successBox(heading string, children ...elem.Node) *elem.Element {
-	return feedbackBox(
-		checkboxIcon(),
-		"var(--hs-success)", "var(--hs-success-bg)", "status", "polite",
-		heading, children...,
-	)
-}
-
 // checkboxIcon returns the success checkbox SVG icon as raw HTML.
 func checkboxIcon() elem.Node {
 	return elem.Raw(`<svg id="checkbox" aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 512 512" style="flex-shrink:0">
@@ -148,10 +410,35 @@ func checkboxIcon() elem.Node {
 //
 //nolint:unused // Used in auth_error.go template.
 func errorBox(heading string, children ...elem.Node) *elem.Element {
-	return feedbackBox(
+	return elem.Div(
+		attrs.Props{
+			attrs.Style: styles.Props{
+				styles.Display:         "flex",
+				styles.AlignItems:      "center",
+				styles.Gap:             spaceM,
+				styles.Padding:         spaceL,
+				styles.BackgroundColor: "var(--hs-error-bg)",
+				styles.Border:          "1px solid var(--hs-error)",
+				styles.BorderRadius:    "0.5rem",
+				styles.MarginBottom:    spaceXL,
+			}.ToInline(),
+			attrs.Role:  "alert",
+			"aria-live": "assertive",
+		},
 		errorIcon(),
-		"var(--hs-error)", "var(--hs-error-bg)", "alert", "assertive",
-		heading, children...,
+		elem.Div(nil,
+			append([]elem.Node{
+				elem.Strong(attrs.Props{
+					attrs.Style: styles.Props{
+						styles.Display:      "block",
+						styles.Color:        "var(--hs-error)",
+						styles.FontSize:     fontSizeH3,
+						styles.FontWeight:   "700",
+						styles.MarginBottom: spaceXS,
+					}.ToInline(),
+				}, elem.Text(heading)),
+			}, children...)...,
+		),
 	)
 }
 
@@ -167,24 +454,22 @@ func errorIcon() elem.Node {
 //
 //nolint:unused // Used in apple.go template.
 func warningBox(title, message string) *elem.Element {
-	return elem.Div(
-		attrs.Props{
-			attrs.Style: styles.Props{
-				styles.Display:         "flex",
-				styles.AlignItems:      "flex-start",
-				styles.Gap:             spaceM,
-				styles.Padding:         spaceL,
-				styles.BackgroundColor: "var(--hs-warning-bg)",
-				styles.Border:          "1px solid var(--hs-warning-border)",
-				styles.BorderRadius:    spaceS,
-				styles.MarginTop:       spaceL,
-				styles.MarginBottom:    spaceL,
-			}.ToInline(),
-			attrs.Role: "note",
-		},
+	return elem.Div(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.Display:         "flex",
+			styles.AlignItems:      "flex-start",
+			styles.Gap:             spaceM,
+			styles.Padding:         spaceL,
+			styles.BackgroundColor: "var(--hs-warning-bg)",
+			styles.Border:          "1px solid var(--hs-warning-border)",
+			styles.BorderRadius:    "0.5rem",
+			styles.MarginTop:       spaceL,
+			styles.MarginBottom:    spaceL,
+		}.ToInline(),
+		attrs.Role: "note",
+	},
 		elem.Raw(`<svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="var(--hs-warning-border)" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="flex-shrink: 0; margin-top: 2px;"><path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"></path><line x1="12" y1="9" x2="12" y2="13"></line><line x1="12" y1="17" x2="12.01" y2="17"></line></svg>`),
-		elem.Div(
-			nil,
+		elem.Div(nil,
 			elem.Strong(attrs.Props{
 				attrs.Style: styles.Props{
 					styles.Display:      "block",
@@ -207,7 +492,7 @@ func downloadButton(href, text string) *elem.Element {
 		attrs.Download: "headscale_macos.mobileconfig",
 		attrs.Style: styles.Props{
 			styles.Display:         "inline-flex",
-			styles.AlignItems:      cssCenter,
+			styles.AlignItems:      "center",
 			styles.Padding:         "0.75rem 1.5rem",
 			styles.BackgroundColor: "var(--md-primary-fg-color)",
 			styles.Color:           "#ffffff",
@@ -235,23 +520,35 @@ func externalLink(href, text string) *elem.Element {
 	}, elem.Text(text))
 }
 
+// Instruction Step Component
+// For numbered instruction lists with consistent formatting.
+//
+//nolint:unused // Reserved for future use in Phase 4.
+func instructionStep(_ int, text string) *elem.Element {
+	return elem.Li(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.MarginBottom: spaceS,
+			styles.LineHeight:   lineHeightBase,
+		}.ToInline(),
+	}, elem.Text(text))
+}
+
 // detailsBox creates a collapsible <details>/<summary> section.
 // Styled to match the card/box component family (border, radius, CSS variables).
 // Collapsed by default; the user clicks the summary to expand.
 //
 //nolint:unused // Used in ping.go template.
 func detailsBox(summary string, children ...elem.Node) *elem.Element {
-	return elem.Details(
-		attrs.Props{
-			attrs.Style: styles.Props{
-				styles.Background:   "var(--hs-bg)",
-				styles.Border:       cssBorderHS,
-				styles.BorderRadius: spaceS,
-				styles.Padding:      spaceS + " " + spaceM,
-				styles.MarginTop:    spaceL,
-				styles.MarginBottom: spaceL,
-			}.ToInline(),
-		},
+	return elem.Details(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.Background:   "var(--hs-bg)",
+			styles.Border:       "1px solid var(--hs-border)",
+			styles.BorderRadius: "0.5rem",
+			styles.Padding:      spaceS + " " + spaceM,
+			styles.MarginTop:    spaceL,
+			styles.MarginBottom: spaceL,
+		}.ToInline(),
+	},
 		elem.Summary(attrs.Props{
 			attrs.Style: styles.Props{
 				"cursor":          "pointer",
@@ -268,3 +565,30 @@ func detailsBox(summary string, children ...elem.Node) *elem.Element {
 		}, children...),
 	)
 }
+
+// Status Message Component
+// For displaying success/error/info messages with appropriate styling.
+//
+//nolint:unused // Reserved for future use in Phase 4.
+func statusMessage(message string, isSuccess bool) *elem.Element {
+	bgColor := colorSuccessLight
+	textColor := colorSuccess
+
+	if !isSuccess {
+		bgColor = colorErrorLight
+		textColor = colorError
+	}
+
+	return elem.Div(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.Padding:         spaceM,
+			styles.BackgroundColor: bgColor,
+			styles.Color:           textColor,
+			styles.BorderRadius:    "0.5rem",
+			styles.Border:          "1px solid " + textColor,
+			styles.MarginBottom:    spaceL,
+			styles.FontSize:        fontSizeBase,
+			styles.LineHeight:      lineHeightBase,
+		}.ToInline(),
+	}, elem.Text(message))
+}
diff --git a/hscontrol/templates/general.go b/hscontrol/templates/general.go
index a98bf4153..392f974df 100644
--- a/hscontrol/templates/general.go
+++ b/hscontrol/templates/general.go
@@ -9,20 +9,19 @@ import (
 
 // mdTypesetBody creates a body element with md-typeset styling
 // that matches the official Headscale documentation design.
-// Uses CSS classes with styles defined in [assets.CSS].
+// Uses CSS classes with styles defined in assets.CSS.
 func mdTypesetBody(children ...elem.Node) *elem.Element {
-	return elem.Body(
-		attrs.Props{
-			attrs.Style: styles.Props{
-				styles.MinHeight:       "100vh",
-				styles.Display:         "flex",
-				styles.FlexDirection:   "column",
-				styles.AlignItems:      "center",
-				styles.BackgroundColor: "var(--hs-bg)",
-				styles.Padding:         "3rem 1.5rem",
-			}.ToInline(),
-			"translate": "no",
-		},
+	return elem.Body(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.MinHeight:       "100vh",
+			styles.Display:         "flex",
+			styles.FlexDirection:   "column",
+			styles.AlignItems:      "center",
+			styles.BackgroundColor: "var(--hs-bg)",
+			styles.Padding:         "3rem 1.5rem",
+		}.ToInline(),
+		"translate": "no",
+	},
 		elem.Main(attrs.Props{
 			attrs.Class: "md-typeset",
 			attrs.Style: styles.Props{
@@ -35,7 +34,7 @@ func mdTypesetBody(children ...elem.Node) *elem.Element {
 
 // Styled Element Wrappers
 // These functions wrap elem-go elements using CSS classes.
-// Styling is handled by the CSS in [assets.CSS].
+// Styling is handled by the CSS in assets.CSS.
 
 // H1 creates a H1 element styled by .md-typeset h1
 func H1(children ...elem.Node) *elem.Element {
@@ -77,10 +76,43 @@ func Code(children ...elem.Node) *elem.Element {
 	return elem.Code(nil, children...)
 }
 
-// codeBlockText creates a preformatted code block styled by
-// .md-typeset pre > code.
-func codeBlockText(code string) *elem.Element {
-	return elem.Pre(nil, elem.Code(nil, elem.Text(code)))
+// Pre creates a preformatted text block styled by .md-typeset pre
+func Pre(children ...elem.Node) *elem.Element {
+	return elem.Pre(nil, children...)
+}
+
+// PreCode creates a code block inside Pre styled by .md-typeset pre > code
+func PreCode(code string) *elem.Element {
+	return elem.Code(nil, elem.Text(code))
+}
+
+// Deprecated: use H1, H2, H3 instead
+func headerOne(text string) *elem.Element {
+	return H1(elem.Text(text))
+}
+
+// Deprecated: use H1, H2, H3 instead
+func headerTwo(text string) *elem.Element {
+	return H2(elem.Text(text))
+}
+
+// Deprecated: use H1, H2, H3 instead
+func headerThree(text string) *elem.Element {
+	return H3(elem.Text(text))
+}
+
+// contentContainer wraps page content with proper width.
+// Content inside is left-aligned by default.
+func contentContainer(children ...elem.Node) *elem.Element {
+	containerStyle := styles.Props{
+		styles.MaxWidth:      "720px",
+		styles.Width:         "100%",
+		styles.Display:       "flex",
+		styles.FlexDirection: "column",
+		styles.AlignItems:    "flex-start", // Left-align all children
+	}
+
+	return elem.Div(attrs.Props{attrs.Style: containerStyle.ToInline()}, children...)
 }
 
 // headscaleLogo returns the Headscale SVG logo for consistent branding across all pages.
@@ -92,16 +124,15 @@ func headscaleLogo() elem.Node {
 
 // pageFooter creates a consistent footer for all pages.
 func pageFooter() *elem.Element {
-	return elem.Footer(
-		attrs.Props{
-			attrs.Style: styles.Props{
-				styles.MarginTop:  space3XL,
-				styles.TextAlign:  "center",
-				styles.FontSize:   fontSizeSmall,
-				styles.Color:      "var(--md-default-fg-color--light)",
-				styles.LineHeight: lineHeightBase,
-			}.ToInline(),
-		},
+	return elem.Footer(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.MarginTop:  space3XL,
+			styles.TextAlign:  "center",
+			styles.FontSize:   fontSizeSmall,
+			styles.Color:      "var(--md-default-fg-color--light)",
+			styles.LineHeight: lineHeightBase,
+		}.ToInline(),
+	},
 		elem.Text("Powered by "),
 		elem.A(attrs.Props{
 			attrs.Href:   "https://github.com/juanfont/headscale",
@@ -111,19 +142,13 @@ func pageFooter() *elem.Element {
 	)
 }
 
-// page renders a standard Headscale page: the given title in the document
-// head, and a body that begins with the Headscale logo, contains the supplied
-// content nodes in order, and ends with the shared footer.
-func page(title string, content ...elem.Node) *elem.Element {
-	body := make([]elem.Node, 0, len(content)+2)
-	body = append(body, headscaleLogo())
-	body = append(body, content...)
-	body = append(body, pageFooter())
-
-	return HtmlStructure(
-		elem.Title(nil, elem.Text(title)),
-		mdTypesetBody(body...),
-	)
+// listStyle provides consistent styling for ordered and unordered lists
+// EXTRACTED FROM: .md-typeset ol, .md-typeset ul CSS rules
+var listStyle = styles.Props{
+	styles.LineHeight:   lineHeightBase,               // 1.6 - From .md-typeset
+	styles.MarginTop:    "1em",                        // From CSS: margin-top: 1em
+	styles.MarginBottom: "1em",                        // From CSS: margin-bottom: 1em
+	styles.PaddingLeft:  "clamp(1.5rem, 5vw, 2.5rem)", // Responsive indentation
 }
 
 // HtmlStructure creates a complete HTML document structure with proper meta tags
@@ -132,10 +157,8 @@ func page(title string, content ...elem.Node) *elem.Element {
 // Styling is provided via a CSS stylesheet (Material for MkDocs design system) with
 // minimal inline styles for layout and positioning.
 func HtmlStructure(head, body *elem.Element) *elem.Element {
-	return elem.Html(
-		attrs.Props{attrs.Lang: "en"},
-		elem.Head(
-			nil,
+	return elem.Html(attrs.Props{attrs.Lang: "en"},
+		elem.Head(nil,
 			elem.Meta(attrs.Props{
 				attrs.Charset: "UTF-8",
 			}),
@@ -172,10 +195,8 @@ func HtmlStructure(head, body *elem.Element) *elem.Element {
 // BlankPage creates a minimal blank HTML page with favicon.
 // Used for endpoints that need to return a valid HTML page with no content.
 func BlankPage() *elem.Element {
-	return elem.Html(
-		attrs.Props{attrs.Lang: "en"},
-		elem.Head(
-			nil,
+	return elem.Html(attrs.Props{attrs.Lang: "en"},
+		elem.Head(nil,
 			elem.Meta(attrs.Props{
 				attrs.Charset: "UTF-8",
 			}),
diff --git a/hscontrol/templates/ping.go b/hscontrol/templates/ping.go
index 1fc2f6088..f4d2fb3ce 100644
--- a/hscontrol/templates/ping.go
+++ b/hscontrol/templates/ping.go
@@ -17,7 +17,7 @@ type PingResult struct {
 	// Status is "ok", "timeout", or "error".
 	Status string
 
-	// Latency is the round-trip time (only meaningful when [PingResult.Status] is "ok").
+	// Latency is the round-trip time (only meaningful when Status is "ok").
 	Latency time.Duration
 
 	// NodeID is the ID of the pinged node.
@@ -27,7 +27,7 @@ type PingResult struct {
 	Message string
 }
 
-// ConnectedNode is a node currently connected to the [mapper.Batcher],
+// ConnectedNode is a node currently connected to the batcher,
 // displayed as a quick-ping link on the debug ping page.
 type ConnectedNode struct {
 	ID       types.NodeID
@@ -36,9 +36,10 @@ type ConnectedNode struct {
 }
 
 // PingPage renders the /debug/ping page with a form, optional result,
-// and a list of connected nodes ([ConnectedNode]) as quick-ping links.
+// and a list of connected nodes as quick-ping links.
 func PingPage(query string, result *PingResult, nodes []ConnectedNode) *elem.Element {
 	children := []elem.Node{
+		headscaleLogo(),
 		H1(elem.Text("Ping Node")),
 		P(elem.Text("Check if a connected node responds to a PingRequest.")),
 		pingExplanation(),
@@ -53,12 +54,16 @@ func PingPage(query string, result *PingResult, nodes []ConnectedNode) *elem.Ele
 		children = append(children, connectedNodeList(nodes))
 	}
 
-	return page("Ping Node - Headscale", children...)
+	children = append(children, pageFooter())
+
+	return HtmlStructure(
+		elem.Title(nil, elem.Text("Ping Node - Headscale")),
+		mdTypesetBody(children...),
+	)
 }
 
 func pingExplanation() *elem.Element {
-	return detailsBox(
-		"How does this work?",
+	return detailsBox("How does this work?",
 		Ol(
 			elem.Li(nil, elem.Text(
 				"The server sends a PingRequest to the target node via its MapResponse stream.",
@@ -83,18 +88,17 @@ func pingExplanation() *elem.Element {
 }
 
 func pingForm(query string) *elem.Element {
-	return elem.Form(
-		attrs.Props{
-			attrs.Method: "POST",
-			attrs.Action: "/debug/ping",
-			attrs.Style: styles.Props{
-				styles.Display:    "flex",
-				styles.Gap:        spaceS,
-				styles.AlignItems: cssCenter,
-				styles.FlexWrap:   "wrap",
-				styles.MarginTop:  spaceM,
-			}.ToInline(),
-		},
+	return elem.Form(attrs.Props{
+		attrs.Method: "POST",
+		attrs.Action: "/debug/ping",
+		attrs.Style: styles.Props{
+			styles.Display:    "flex",
+			styles.Gap:        spaceS,
+			styles.AlignItems: "center",
+			styles.FlexWrap:   "wrap",
+			styles.MarginTop:  spaceM,
+		}.ToInline(),
+	},
 		elem.Input(attrs.Props{
 			attrs.Type:        "text",
 			attrs.Name:        "node",
@@ -103,7 +107,7 @@ func pingForm(query string) *elem.Element {
 			attrs.Autofocus:   "true",
 			attrs.Style: styles.Props{
 				styles.Padding:      "0.75rem " + spaceM,
-				styles.Border:       cssBorderHS,
+				styles.Border:       "1px solid var(--hs-border)",
 				styles.BorderRadius: "0.375rem",
 				styles.Width:        "280px",
 				styles.MaxWidth:     "100%",
@@ -127,12 +131,11 @@ func connectedNodeList(nodes []ConnectedNode) *elem.Element {
 		items = append(items, elem.Li(nil, A(href, elem.Text(label))))
 	}
 
-	return elem.Div(
-		attrs.Props{
-			attrs.Style: styles.Props{
-				styles.MarginTop: space2XL,
-			}.ToInline(),
-		},
+	return elem.Div(attrs.Props{
+		attrs.Style: styles.Props{
+			styles.MarginTop: space2XL,
+		}.ToInline(),
+	},
 		H2(elem.Text("Connected Nodes")),
 		Ul(items...),
 	)
diff --git a/hscontrol/templates/register_confirm.go b/hscontrol/templates/register_confirm.go
index a7297017c..7f1d970b9 100644
--- a/hscontrol/templates/register_confirm.go
+++ b/hscontrol/templates/register_confirm.go
@@ -1,8 +1,6 @@
 package templates
 
 import (
-	"cmp"
-
 	"github.com/chasefleming/elem-go"
 	"github.com/chasefleming/elem-go/attrs"
 	"github.com/chasefleming/elem-go/styles"
@@ -33,11 +31,11 @@ type RegisterConfirmInfo struct {
 	User string
 
 	// Hostname is the hostname the registering tailscaled instance
-	// reported in its [tailcfg.RegisterRequest].
+	// reported in its RegisterRequest.
 	Hostname string
 
 	// OS is the operating system the registering tailscaled reported.
-	// May be the empty string when the client did not send [tailcfg.Hostinfo].
+	// May be the empty string when the client did not send Hostinfo.
 	OS string
 
 	// MachineKey is the short fingerprint of the registering machine
@@ -53,11 +51,11 @@ type RegisterConfirmInfo struct {
 // IdP allows silent SSO.
 func RegisterConfirm(info RegisterConfirmInfo) *elem.Element {
 	deviceList := deviceTable(
-		[]deviceRow{
-			{"Hostname", elem.Text(info.Hostname)},
-			{"OS", elem.Text(cmp.Or(info.OS, "(unknown)"))},
-			{"Machine key", Code(elem.Text(info.MachineKey))},
-			{"Registered to", elem.Text(info.User)},
+		[4][2]string{
+			{"Hostname", info.Hostname},
+			{"OS", displayOrUnknown(info.OS)},
+			{"Machine key", info.MachineKey},
+			{"Registered to", info.User},
 		},
 	)
 
@@ -77,47 +75,50 @@ func RegisterConfirm(info RegisterConfirmInfo) *elem.Element {
 		),
 	)
 
-	return page(
-		"Headscale - Confirm node registration",
-		H2(elem.Text("Confirm node registration")),
-		P(elem.Text(
-			"A device is asking to be added to your tailnet. "+
-				"Please review the details below and confirm that this device is yours.",
-		)),
-		deviceList,
-		form,
-		P(elem.Text(
-			"If you do not recognise this device, close this window. "+
-				"The registration request will expire automatically.",
-		)),
+	return HtmlStructure(
+		elem.Title(nil, elem.Text("Headscale - Confirm node registration")),
+		mdTypesetBody(
+			headscaleLogo(),
+			H2(elem.Text("Confirm node registration")),
+			P(elem.Text(
+				"A device is asking to be added to your tailnet. "+
+					"Please review the details below and confirm that this device is yours.",
+			)),
+			deviceList,
+			form,
+			P(elem.Text(
+				"If you do not recognise this device, close this window. "+
+					"The registration request will expire automatically.",
+			)),
+			pageFooter(),
+		),
 	)
 }
 
-type deviceRow struct {
-	label string
-	value elem.Node
-}
-
-func deviceTable(rows []deviceRow) *elem.Element {
+func deviceTable(rows [4][2]string) *elem.Element {
 	tableRows := make([]elem.Node, 0, len(rows))
 	for _, row := range rows {
-		tableRows = append(tableRows, elem.Tr(
-			nil,
+		val := elem.Node(elem.Text(row[1]))
+		if row[0] == "Machine key" {
+			val = Code(elem.Text(row[1]))
+		}
+
+		tableRows = append(tableRows, elem.Tr(nil,
 			elem.Td(attrs.Props{
 				attrs.Style: styles.Props{
 					styles.Padding:      "0.5rem 1rem 0.5rem 0",
 					styles.FontWeight:   "600",
 					styles.WhiteSpace:   "nowrap",
 					styles.Color:        "var(--md-default-fg-color--light)",
-					styles.BorderBottom: cssBorderHS,
+					styles.BorderBottom: "1px solid var(--hs-border)",
 				}.ToInline(),
-			}, elem.Text(row.label)),
+			}, elem.Text(row[0])),
 			elem.Td(attrs.Props{
 				attrs.Style: styles.Props{
 					styles.Padding:      "0.5rem 0",
-					styles.BorderBottom: cssBorderHS,
+					styles.BorderBottom: "1px solid var(--hs-border)",
 				}.ToInline(),
-			}, row.value),
+			}, val),
 		))
 	}
 
@@ -130,3 +131,11 @@ func deviceTable(rows []deviceRow) *elem.Element {
 		}.ToInline(),
 	}, tableRows...)
 }
+
+func displayOrUnknown(s string) string {
+	if s == "" {
+		return "(unknown)"
+	}
+
+	return s
+}
diff --git a/hscontrol/templates/windows.go b/hscontrol/templates/windows.go
index b89c1a1bc..f649509a7 100644
--- a/hscontrol/templates/windows.go
+++ b/hscontrol/templates/windows.go
@@ -5,17 +5,23 @@ import (
 )
 
 func Windows(url string) *elem.Element {
-	return page(
-		"headscale - Windows",
-		H1(elem.Text("Windows configuration")),
-		P(
-			elem.Text("Download "),
-			externalLink("https://tailscale.com/download/windows", "Tailscale for Windows"),
-			elem.Text(" and install it."),
+	return HtmlStructure(
+		elem.Title(nil,
+			elem.Text("headscale - Windows"),
 		),
-		P(
-			elem.Text("Open a Command Prompt or PowerShell and use Tailscale's login command to connect with headscale:"),
+		mdTypesetBody(
+			headscaleLogo(),
+			H1(elem.Text("Windows configuration")),
+			P(
+				elem.Text("Download "),
+				externalLink("https://tailscale.com/download/windows", "Tailscale for Windows"),
+				elem.Text(" and install it."),
+			),
+			P(
+				elem.Text("Open a Command Prompt or PowerShell and use Tailscale's login command to connect with headscale:"),
+			),
+			Pre(PreCode("tailscale login --login-server "+url)),
+			pageFooter(),
 		),
-		codeBlockText("tailscale login --login-server "+url),
 	)
 }
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_both_id_and_prefix_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_both_id_and_prefix_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_both_id_and_prefix_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_not_found_by_prefix_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_not_found_by_prefix_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_not_found_by_prefix_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_path_prefix_with_id_query_is_both_->_400_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_path_prefix_with_id_query_is_both_->_400_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyDelete_path_prefix_with_id_query_is_both_->_400_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_both_id_and_prefix_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_both_id_and_prefix_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_both_id_and_prefix_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_by_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_by_id_parity.json
deleted file mode 100644
index 01e7b2dec..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_by_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 200,
-  "body": {}
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_by_prefix_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_by_prefix_parity.json
deleted file mode 100644
index 01e7b2dec..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_by_prefix_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 200,
-  "body": {}
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_neither_id_nor_prefix_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_neither_id_nor_prefix_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_neither_id_nor_prefix_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_not_found_by_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_not_found_by_id_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyExpire_not_found_by_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_empty_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_empty_parity.json
deleted file mode 100644
index 8a881a463..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_empty_parity.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "apiKeys": []
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_nil_timestamps_emitted_as_null_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_nil_timestamps_emitted_as_null_parity.json
deleted file mode 100644
index e96d01116..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_nil_timestamps_emitted_as_null_parity.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "apiKeys": [
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "expiration": null,
-        "id": "1",
-        "lastSeen": null,
-        "prefix": "\u003csecret\u003e"
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_populated_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_populated_parity.json
deleted file mode 100644
index 1a838cf4b..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_populated_parity.json
+++ /dev/null
@@ -1,21 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "apiKeys": [
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "expiration": null,
-        "id": "1",
-        "lastSeen": null,
-        "prefix": "\u003csecret\u003e"
-      },
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "expiration": null,
-        "id": "2",
-        "lastSeen": null,
-        "prefix": "\u003csecret\u003e"
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_zero_expiration_emitted_as_zero_instant_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_zero_expiration_emitted_as_zero_instant_parity.json
deleted file mode 100644
index e5fd9e019..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ApiKeyList_zero_expiration_emitted_as_zero_instant_parity.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "apiKeys": [
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "expiration": "\u003ctimestamp\u003e",
-        "id": "1",
-        "lastSeen": null,
-        "prefix": "\u003csecret\u003e"
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthApprove_invalid_auth_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1AuthApprove_invalid_auth_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthApprove_invalid_auth_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthApprove_no_pending_session_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1AuthApprove_no_pending_session_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthApprove_no_pending_session_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_happy_path_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_happy_path_parity.json
deleted file mode 100644
index 628457d4d..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_happy_path_parity.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "node": {
-      "approvedRoutes": [],
-      "availableRoutes": [],
-      "createdAt": "\u003ctimestamp\u003e",
-      "discoKey": "\u003csecret\u003e",
-      "expiry": null,
-      "givenName": "regnode",
-      "id": "1",
-      "ipAddresses": [],
-      "lastSeen": "\u003ctimestamp\u003e",
-      "machineKey": "\u003csecret\u003e",
-      "name": "regnode",
-      "nodeKey": "\u003csecret\u003e",
-      "online": false,
-      "preAuthKey": null,
-      "registerMethod": "REGISTER_METHOD_CLI",
-      "subnetRoutes": [],
-      "tags": [],
-      "user": {
-        "createdAt": "\u003ctimestamp\u003e",
-        "displayName": "",
-        "email": "",
-        "id": "1",
-        "name": "alice",
-        "profilePicUrl": "",
-        "provider": "",
-        "providerId": ""
-      }
-    }
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_invalid_auth_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_invalid_auth_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_invalid_auth_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_no_pending_session_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_no_pending_session_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_no_pending_session_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_unknown_user_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_unknown_user_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthRegister_unknown_user_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthReject_invalid_auth_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1AuthReject_invalid_auth_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthReject_invalid_auth_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthReject_no_pending_session_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1AuthReject_no_pending_session_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1AuthReject_no_pending_session_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_invalid_tag_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_invalid_tag_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_invalid_tag_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_invalid_user_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_invalid_user_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_invalid_user_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_neither_tagged_nor_owned_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_neither_tagged_nor_owned_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_neither_tagged_nor_owned_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_nonexistent_user_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_nonexistent_user_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1CreatePreAuthKey_nonexistent_user_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1CreateUser_duplicate_name_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1CreateUser_duplicate_name_parity.json
deleted file mode 100644
index 0704ac4ce..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1CreateUser_duplicate_name_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 409,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1CreateUser_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1CreateUser_parity.json
deleted file mode 100644
index 4349ea0ef..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1CreateUser_parity.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "user": {
-      "createdAt": "\u003ctimestamp\u003e",
-      "displayName": "Test",
-      "email": "t@example.com",
-      "id": "1",
-      "name": "test",
-      "profilePicUrl": "",
-      "provider": "",
-      "providerId": ""
-    }
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_nonexistent_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_nonexistent_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_nonexistent_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_parity.json
deleted file mode 100644
index 01e7b2dec..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1DeletePreAuthKey_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 200,
-  "body": {}
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1DeleteUser_nonexistent_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1DeleteUser_nonexistent_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1DeleteUser_nonexistent_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1DeleteUser_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1DeleteUser_parity.json
deleted file mode 100644
index 01e7b2dec..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1DeleteUser_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 200,
-  "body": {}
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_nonexistent_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_nonexistent_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_nonexistent_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_parity.json
deleted file mode 100644
index 01e7b2dec..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ExpirePreAuthKey_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 200,
-  "body": {}
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1Health_parity_with_gateway.json b/hscontrol/testdata/apiv1_golden/TestAPIV1Health_parity_with_gateway.json
deleted file mode 100644
index 668b62ef7..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1Health_parity_with_gateway.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "databaseConnectivity": true
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ListPreAuthKeys_all_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ListPreAuthKeys_all_parity.json
deleted file mode 100644
index cd8a9305b..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ListPreAuthKeys_all_parity.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "preAuthKeys": [
-      {
-        "aclTags": [],
-        "createdAt": "\u003ctimestamp\u003e",
-        "ephemeral": false,
-        "expiration": "\u003ctimestamp\u003e",
-        "id": "1",
-        "key": "\u003csecret\u003e",
-        "reusable": true,
-        "used": false,
-        "user": {
-          "createdAt": "\u003ctimestamp\u003e",
-          "displayName": "",
-          "email": "",
-          "id": "1",
-          "name": "alice",
-          "profilePicUrl": "",
-          "provider": "",
-          "providerId": ""
-        }
-      },
-      {
-        "aclTags": [
-          "tag:test"
-        ],
-        "createdAt": "\u003ctimestamp\u003e",
-        "ephemeral": true,
-        "expiration": "\u003ctimestamp\u003e",
-        "id": "2",
-        "key": "\u003csecret\u003e",
-        "reusable": false,
-        "used": false,
-        "user": null
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ListPreAuthKeys_empty_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ListPreAuthKeys_empty_parity.json
deleted file mode 100644
index 1a1dafbd4..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ListPreAuthKeys_empty_parity.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "preAuthKeys": []
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_all_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_all_parity.json
deleted file mode 100644
index 6d789758d..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_all_parity.json
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "users": [
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "displayName": "",
-        "email": "",
-        "id": "1",
-        "name": "alice",
-        "profilePicUrl": "",
-        "provider": "",
-        "providerId": ""
-      },
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "displayName": "",
-        "email": "",
-        "id": "2",
-        "name": "bob",
-        "profilePicUrl": "",
-        "provider": "",
-        "providerId": ""
-      },
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "displayName": "",
-        "email": "",
-        "id": "3",
-        "name": "carol",
-        "profilePicUrl": "",
-        "provider": "",
-        "providerId": ""
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_empty_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_empty_parity.json
deleted file mode 100644
index 5fdc5311f..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_empty_parity.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "users": []
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_filter_by_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_filter_by_id_parity.json
deleted file mode 100644
index b3d1bf4ad..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_filter_by_id_parity.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "users": [
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "displayName": "",
-        "email": "",
-        "id": "2",
-        "name": "bob",
-        "profilePicUrl": "",
-        "provider": "",
-        "providerId": ""
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_filter_by_name_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_filter_by_name_parity.json
deleted file mode 100644
index 48b345b05..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_filter_by_name_parity.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "users": [
-      {
-        "createdAt": "\u003ctimestamp\u003e",
-        "displayName": "",
-        "email": "",
-        "id": "1",
-        "name": "alice",
-        "profilePicUrl": "",
-        "provider": "",
-        "providerId": ""
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1ListUsers_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeBackfillIPs_confirmed_empty_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeBackfillIPs_confirmed_empty_parity.json
deleted file mode 100644
index 3b98955bc..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeBackfillIPs_confirmed_empty_parity.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "changes": []
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeBackfillIPs_unconfirmed_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeBackfillIPs_unconfirmed_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeBackfillIPs_unconfirmed_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDebugCreate_invalid_key_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDebugCreate_invalid_key_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDebugCreate_invalid_key_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDebugCreate_unknown_user_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDebugCreate_unknown_user_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDebugCreate_unknown_user_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_happy_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_happy_parity.json
deleted file mode 100644
index 01e7b2dec..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_happy_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 200,
-  "body": {}
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_not_found_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_not_found_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeDelete_not_found_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeExpire_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeExpire_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeExpire_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeExpire_not_found_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeExpire_not_found_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeExpire_not_found_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_happy_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_happy_parity.json
deleted file mode 100644
index 82318d034..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_happy_parity.json
+++ /dev/null
@@ -1,53 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "node": {
-      "approvedRoutes": [],
-      "availableRoutes": [],
-      "createdAt": "\u003ctimestamp\u003e",
-      "discoKey": "\u003csecret\u003e",
-      "expiry": null,
-      "givenName": "node-a",
-      "id": "1",
-      "ipAddresses": [],
-      "lastSeen": "\u003ctimestamp\u003e",
-      "machineKey": "\u003csecret\u003e",
-      "name": "node-a",
-      "nodeKey": "\u003csecret\u003e",
-      "online": false,
-      "preAuthKey": {
-        "aclTags": [],
-        "createdAt": "\u003ctimestamp\u003e",
-        "ephemeral": false,
-        "expiration": null,
-        "id": "1",
-        "key": "\u003csecret\u003e",
-        "reusable": false,
-        "used": true,
-        "user": {
-          "createdAt": "\u003ctimestamp\u003e",
-          "displayName": "",
-          "email": "",
-          "id": "1",
-          "name": "alice",
-          "profilePicUrl": "",
-          "provider": "",
-          "providerId": ""
-        }
-      },
-      "registerMethod": "REGISTER_METHOD_AUTH_KEY",
-      "subnetRoutes": [],
-      "tags": [],
-      "user": {
-        "createdAt": "\u003ctimestamp\u003e",
-        "displayName": "",
-        "email": "",
-        "id": "1",
-        "name": "alice",
-        "profilePicUrl": "",
-        "provider": "",
-        "providerId": ""
-      }
-    }
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_not_found_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_not_found_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_not_found_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_tagged_node_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_tagged_node_parity.json
deleted file mode 100644
index a55a4e79a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeGet_tagged_node_parity.json
+++ /dev/null
@@ -1,48 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "node": {
-      "approvedRoutes": [],
-      "availableRoutes": [],
-      "createdAt": "\u003ctimestamp\u003e",
-      "discoKey": "\u003csecret\u003e",
-      "expiry": null,
-      "givenName": "node-b",
-      "id": "1",
-      "ipAddresses": [],
-      "lastSeen": "\u003ctimestamp\u003e",
-      "machineKey": "\u003csecret\u003e",
-      "name": "node-b",
-      "nodeKey": "\u003csecret\u003e",
-      "online": false,
-      "preAuthKey": {
-        "aclTags": [
-          "tag:initial"
-        ],
-        "createdAt": "\u003ctimestamp\u003e",
-        "ephemeral": false,
-        "expiration": null,
-        "id": "1",
-        "key": "\u003csecret\u003e",
-        "reusable": false,
-        "used": true,
-        "user": {
-          "createdAt": "\u003ctimestamp\u003e",
-          "displayName": "",
-          "email": "",
-          "id": "1",
-          "name": "bob",
-          "profilePicUrl": "",
-          "provider": "",
-          "providerId": ""
-        }
-      },
-      "registerMethod": "REGISTER_METHOD_AUTH_KEY",
-      "subnetRoutes": [],
-      "tags": [
-        "tag:initial"
-      ],
-      "user": null
-    }
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_all_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_all_parity.json
deleted file mode 100644
index 2dae3fb75..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_all_parity.json
+++ /dev/null
@@ -1,103 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "nodes": [
-      {
-        "approvedRoutes": [],
-        "availableRoutes": [],
-        "createdAt": "\u003ctimestamp\u003e",
-        "discoKey": "\u003csecret\u003e",
-        "expiry": null,
-        "givenName": "node-a",
-        "id": "1",
-        "ipAddresses": [],
-        "lastSeen": "\u003ctimestamp\u003e",
-        "machineKey": "\u003csecret\u003e",
-        "name": "node-a",
-        "nodeKey": "\u003csecret\u003e",
-        "online": false,
-        "preAuthKey": {
-          "aclTags": [],
-          "createdAt": "\u003ctimestamp\u003e",
-          "ephemeral": false,
-          "expiration": null,
-          "id": "1",
-          "key": "\u003csecret\u003e",
-          "reusable": false,
-          "used": true,
-          "user": {
-            "createdAt": "\u003ctimestamp\u003e",
-            "displayName": "",
-            "email": "",
-            "id": "1",
-            "name": "alice",
-            "profilePicUrl": "",
-            "provider": "",
-            "providerId": ""
-          }
-        },
-        "registerMethod": "REGISTER_METHOD_AUTH_KEY",
-        "subnetRoutes": [],
-        "tags": [],
-        "user": {
-          "createdAt": "\u003ctimestamp\u003e",
-          "displayName": "",
-          "email": "",
-          "id": "1",
-          "name": "alice",
-          "profilePicUrl": "",
-          "provider": "",
-          "providerId": ""
-        }
-      },
-      {
-        "approvedRoutes": [],
-        "availableRoutes": [],
-        "createdAt": "\u003ctimestamp\u003e",
-        "discoKey": "\u003csecret\u003e",
-        "expiry": null,
-        "givenName": "node-b",
-        "id": "2",
-        "ipAddresses": [],
-        "lastSeen": "\u003ctimestamp\u003e",
-        "machineKey": "\u003csecret\u003e",
-        "name": "node-b",
-        "nodeKey": "\u003csecret\u003e",
-        "online": false,
-        "preAuthKey": {
-          "aclTags": [],
-          "createdAt": "\u003ctimestamp\u003e",
-          "ephemeral": false,
-          "expiration": null,
-          "id": "2",
-          "key": "\u003csecret\u003e",
-          "reusable": false,
-          "used": true,
-          "user": {
-            "createdAt": "\u003ctimestamp\u003e",
-            "displayName": "",
-            "email": "",
-            "id": "2",
-            "name": "bob",
-            "profilePicUrl": "",
-            "provider": "",
-            "providerId": ""
-          }
-        },
-        "registerMethod": "REGISTER_METHOD_AUTH_KEY",
-        "subnetRoutes": [],
-        "tags": [],
-        "user": {
-          "createdAt": "\u003ctimestamp\u003e",
-          "displayName": "",
-          "email": "",
-          "id": "2",
-          "name": "bob",
-          "profilePicUrl": "",
-          "provider": "",
-          "providerId": ""
-        }
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_empty_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_empty_parity.json
deleted file mode 100644
index 1e2f04d2a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_empty_parity.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "nodes": []
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_filter_by_user_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_filter_by_user_parity.json
deleted file mode 100644
index 867d783c8..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_filter_by_user_parity.json
+++ /dev/null
@@ -1,55 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "nodes": [
-      {
-        "approvedRoutes": [],
-        "availableRoutes": [],
-        "createdAt": "\u003ctimestamp\u003e",
-        "discoKey": "\u003csecret\u003e",
-        "expiry": null,
-        "givenName": "node-a",
-        "id": "1",
-        "ipAddresses": [],
-        "lastSeen": "\u003ctimestamp\u003e",
-        "machineKey": "\u003csecret\u003e",
-        "name": "node-a",
-        "nodeKey": "\u003csecret\u003e",
-        "online": false,
-        "preAuthKey": {
-          "aclTags": [],
-          "createdAt": "\u003ctimestamp\u003e",
-          "ephemeral": false,
-          "expiration": null,
-          "id": "1",
-          "key": "\u003csecret\u003e",
-          "reusable": false,
-          "used": true,
-          "user": {
-            "createdAt": "\u003ctimestamp\u003e",
-            "displayName": "",
-            "email": "",
-            "id": "1",
-            "name": "alice",
-            "profilePicUrl": "",
-            "provider": "",
-            "providerId": ""
-          }
-        },
-        "registerMethod": "REGISTER_METHOD_AUTH_KEY",
-        "subnetRoutes": [],
-        "tags": [],
-        "user": {
-          "createdAt": "\u003ctimestamp\u003e",
-          "displayName": "",
-          "email": "",
-          "id": "1",
-          "name": "alice",
-          "profilePicUrl": "",
-          "provider": "",
-          "providerId": ""
-        }
-      }
-    ]
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_unknown_user_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_unknown_user_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeList_unknown_user_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_happy_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_happy_parity.json
deleted file mode 100644
index 647d42c11..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_happy_parity.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "node": {
-      "approvedRoutes": [],
-      "availableRoutes": [],
-      "createdAt": "\u003ctimestamp\u003e",
-      "discoKey": "\u003csecret\u003e",
-      "expiry": null,
-      "givenName": "registered-node",
-      "id": "1",
-      "ipAddresses": [],
-      "lastSeen": "\u003ctimestamp\u003e",
-      "machineKey": "\u003csecret\u003e",
-      "name": "registered-node",
-      "nodeKey": "\u003csecret\u003e",
-      "online": false,
-      "preAuthKey": null,
-      "registerMethod": "REGISTER_METHOD_CLI",
-      "subnetRoutes": [],
-      "tags": [],
-      "user": {
-        "createdAt": "\u003ctimestamp\u003e",
-        "displayName": "",
-        "email": "",
-        "id": "1",
-        "name": "alice",
-        "profilePicUrl": "",
-        "provider": "",
-        "providerId": ""
-      }
-    }
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_invalid_key_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_invalid_key_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_invalid_key_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_unknown_user_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_unknown_user_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRegister_unknown_user_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRename_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRename_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRename_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRename_not_found_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRename_not_found_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeRename_not_found_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetApprovedRoutes_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetApprovedRoutes_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetApprovedRoutes_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetApprovedRoutes_not_found_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetApprovedRoutes_not_found_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetApprovedRoutes_not_found_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_empty_tags_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_empty_tags_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_empty_tags_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_not_found_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_not_found_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_not_found_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_unauthorized_tag_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_unauthorized_tag_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1NodeSetTags_unauthorized_tag_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyCheck_invalid_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyCheck_invalid_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyCheck_invalid_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyCheck_valid_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyCheck_valid_parity.json
deleted file mode 100644
index 01e7b2dec..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyCheck_valid_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 200,
-  "body": {}
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyGet_empty_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyGet_empty_parity.json
deleted file mode 100644
index 2e20a6ad8..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyGet_empty_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 500,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyGet_set_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyGet_set_parity.json
deleted file mode 100644
index dc080d6a8..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicyGet_set_parity.json
+++ /dev/null
@@ -1,7 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "policy": "{\"acls\":[{\"action\":\"accept\",\"src\":[\"*\"],\"dst\":[\"*:*\"]}]}",
-    "updatedAt": "\u003ctimestamp\u003e"
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicySet_invalid_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1PolicySet_invalid_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicySet_invalid_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicySet_valid_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1PolicySet_valid_parity.json
deleted file mode 100644
index dc080d6a8..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1PolicySet_valid_parity.json
+++ /dev/null
@@ -1,7 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "policy": "{\"acls\":[{\"action\":\"accept\",\"src\":[\"*\"],\"dst\":[\"*:*\"]}]}",
-    "updatedAt": "\u003ctimestamp\u003e"
-  }
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_invalid_id_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_invalid_id_parity.json
deleted file mode 100644
index 876045e37..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_invalid_id_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 400,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_nonexistent_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_nonexistent_parity.json
deleted file mode 100644
index ee9c4b88a..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_nonexistent_parity.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "status": 404,
-  "body": null
-}
diff --git a/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_parity.json b/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_parity.json
deleted file mode 100644
index 386034b30..000000000
--- a/hscontrol/testdata/apiv1_golden/TestAPIV1RenameUser_parity.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "status": 200,
-  "body": {
-    "user": {
-      "createdAt": "\u003ctimestamp\u003e",
-      "displayName": "",
-      "email": "",
-      "id": "1",
-      "name": "bob",
-      "profilePicUrl": "",
-      "provider": "",
-      "providerId": ""
-    }
-  }
-}
diff --git a/hscontrol/types/api_key.go b/hscontrol/types/api_key.go
index 845f88caf..2dac537d6 100644
--- a/hscontrol/types/api_key.go
+++ b/hscontrol/types/api_key.go
@@ -3,12 +3,18 @@ package types
 import (
 	"time"
 
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
 	"github.com/rs/zerolog"
+	"google.golang.org/protobuf/types/known/timestamppb"
 )
 
-// NewAPIKeyPrefixLength is the length of the prefix for new API keys.
-const NewAPIKeyPrefixLength = 12
+const (
+	// NewAPIKeyPrefixLength is the length of the prefix for new API keys.
+	NewAPIKeyPrefixLength = 12
+	// LegacyAPIKeyPrefixLength is the length of the prefix for legacy API keys.
+	LegacyAPIKeyPrefixLength = 7
+)
 
 // APIKey describes the datamodel for API keys used to remotely authenticate with
 // headscale.
@@ -17,18 +23,40 @@ type APIKey struct {
 	Prefix string `gorm:"uniqueIndex"`
 	Hash   []byte
 
-	// Optional owning user id. When set, an auth key created through the v2 API
-	// with no tags is owned by this user — mirroring Tailscale, where a key is
-	// owned by the identity that created it. Nil for legacy/admin keys, which
-	// can only create tagged keys. Kept as a plain column (no foreign key) so an
-	// upgraded database matches a freshly-migrated one.
-	UserID *uint
-
 	CreatedAt  *time.Time
 	Expiration *time.Time
 	LastSeen   *time.Time
 }
 
+func (key *APIKey) Proto() *v1.ApiKey {
+	protoKey := v1.ApiKey{
+		Id: key.ID,
+	}
+
+	// Show prefix format: distinguish between new (12-char) and legacy (7-char) keys
+	if len(key.Prefix) == NewAPIKeyPrefixLength {
+		// New format key (12-char prefix)
+		protoKey.Prefix = "hskey-api-" + key.Prefix + "-***"
+	} else {
+		// Legacy format key (7-char prefix) or fallback
+		protoKey.Prefix = key.Prefix + "***"
+	}
+
+	if key.Expiration != nil {
+		protoKey.Expiration = timestamppb.New(*key.Expiration)
+	}
+
+	if key.CreatedAt != nil {
+		protoKey.CreatedAt = timestamppb.New(*key.CreatedAt)
+	}
+
+	if key.LastSeen != nil {
+		protoKey.LastSeen = timestamppb.New(*key.LastSeen)
+	}
+
+	return &protoKey
+}
+
 // maskedPrefix returns the API key prefix in masked format for safe logging.
 // SECURITY: Never log the full key or hash, only the masked prefix.
 func (k *APIKey) maskedPrefix() string {
@@ -39,7 +67,7 @@ func (k *APIKey) maskedPrefix() string {
 	return k.Prefix + "***"
 }
 
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler] for safe logging.
+// MarshalZerologObject implements zerolog.LogObjectMarshaler for safe logging.
 // SECURITY: This method intentionally does NOT log the full key or hash.
 // Only the masked prefix is logged for identification purposes.
 func (k *APIKey) MarshalZerologObject(e *zerolog.Event) {
diff --git a/hscontrol/types/change/change.go b/hscontrol/types/change/change.go
index 58d494da8..0e38e498d 100644
--- a/hscontrol/types/change/change.go
+++ b/hscontrol/types/change/change.go
@@ -1,6 +1,6 @@
-// Package change declares the [Change] type: a compact description of
-// what must land in a [tailcfg.MapResponse]. The mapper reads [Change] values to
-// build responses without inspecting state, and [Change.Merge] combines
+// Package change declares the Change type: a compact description of
+// what must land in a MapResponse. The mapper reads Change values to
+// build responses without inspecting state, and Merge combines
 // multiple pending changes for a single tick.
 package change
 
@@ -13,7 +13,7 @@ import (
 	"tailscale.com/tailcfg"
 )
 
-// Change declares what should be included in a [tailcfg.MapResponse].
+// Change declares what should be included in a MapResponse.
 // The mapper uses this to build the response without guessing.
 type Change struct {
 	// Reason is a human-readable description for logging/debugging.
@@ -26,12 +26,12 @@ type Change struct {
 	// Used for self-update detection and filtering.
 	OriginNode types.NodeID
 
-	// Content flags - what to include in the [tailcfg.MapResponse].
+	// Content flags - what to include in the MapResponse.
 	IncludeSelf    bool
 	IncludeDERPMap bool
 	IncludeDNS     bool
 	IncludeDomain  bool
-	IncludePolicy  bool // [tailcfg.MapResponse.PacketFilters] and [tailcfg.MapResponse.SSHPolicy] - always sent together
+	IncludePolicy  bool // PacketFilters and SSHPolicy - always sent together
 
 	// Peer changes.
 	PeersChanged []types.NodeID
@@ -46,12 +46,12 @@ type Change struct {
 
 	// PingRequest, if non-nil, is a ping request to send to the node.
 	// Used by the debug ping endpoint to verify node connectivity.
-	// [Change.PingRequest] is always targeted to a specific node via [Change.TargetNode].
+	// PingRequest is always targeted to a specific node via TargetNode.
 	PingRequest *tailcfg.PingRequest
 }
 
 // boolFieldNames returns all boolean field names for exhaustive testing.
-// When adding a new boolean field to [Change], add it here.
+// When adding a new boolean field to Change, add it here.
 // Tests use reflection to verify this matches the struct.
 func (r Change) boolFieldNames() []string {
 	return []string{
@@ -80,16 +80,16 @@ func (r Change) Merge(other Change) Change {
 	merged.PeersRemoved = uniqueNodeIDs(slices.Concat(r.PeersRemoved, other.PeersRemoved))
 	merged.PeerPatches = slices.Concat(r.PeerPatches, other.PeerPatches)
 
-	// Preserve [Change.OriginNode] for self-update detection.
-	// If either change has [Change.OriginNode] set, keep it so the mapper
+	// Preserve OriginNode for self-update detection.
+	// If either change has OriginNode set, keep it so the mapper
 	// can detect self-updates and send the node its own changes.
 	if merged.OriginNode == 0 {
 		merged.OriginNode = other.OriginNode
 	}
 
-	// Preserve [Change.TargetNode] for targeted responses.
+	// Preserve TargetNode for targeted responses.
 	// Merging two changes targeted at different nodes is not supported
-	// because the merged result can only have one [Change.TargetNode], which
+	// because the merged result can only have one TargetNode, which
 	// would cause the other target's content to be misrouted.
 	if merged.TargetNode != 0 && other.TargetNode != 0 && merged.TargetNode != other.TargetNode {
 		panic(fmt.Sprintf(
@@ -102,9 +102,9 @@ func (r Change) Merge(other Change) Change {
 		merged.TargetNode = other.TargetNode
 	}
 
-	// Preserve [Change.PingRequest] (first wins).
+	// Preserve PingRequest (first wins).
 	//
-	// Foot-gun: if two [tailcfg.PingRequest] values to the same target merge in the
+	// Foot-gun: if two PingRequests to the same target merge in the
 	// same tick, only the first is emitted. The client-side
 	// isUniquePingRequest check then suppresses the second when it
 	// eventually arrives, and the caller waits out the full
@@ -154,7 +154,7 @@ func (r Change) IsSelfOnly() bool {
 	return true
 }
 
-// IsTargetedToNode returns true if this response should only be sent to [Change.TargetNode].
+// IsTargetedToNode returns true if this response should only be sent to TargetNode.
 func (r Change) IsTargetedToNode() bool {
 	return r.TargetNode != 0
 }
@@ -167,7 +167,7 @@ func (r Change) IsFull() bool {
 
 // Type returns a categorized type string for metrics.
 // This provides a bounded set of values suitable for Prometheus labels,
-// unlike [Change.Reason] which is free-form text for logging.
+// unlike Reason which is free-form text for logging.
 func (r Change) Type() string {
 	if r.IsFull() {
 		return "full"
@@ -211,9 +211,15 @@ func (r Change) ShouldSendToNode(nodeID types.NodeID) bool {
 	return true
 }
 
-// HasFull returns true if any response in the slice is a full update ([Change.IsFull]).
+// HasFull returns true if any response in the slice is a full update.
 func HasFull(rs []Change) bool {
-	return slices.ContainsFunc(rs, Change.IsFull)
+	for _, r := range rs {
+		if r.IsFull() {
+			return true
+		}
+	}
+
+	return false
 }
 
 // SplitTargetedAndBroadcast separates responses into targeted (to specific node) and broadcast.
@@ -244,41 +250,6 @@ func FilterForNode(nodeID types.NodeID, rs []Change) []Change {
 	return result
 }
 
-// IsBroadcastPolicyChange reports whether r is a tailnet-wide policy recompute
-// with no per-node payload. A recompute reads the current snapshot, so every
-// such change is interchangeable and same-tick duplicates are redundant. A
-// targeted or self-update ([Change.OriginNode]) recompute is per-node, so it is
-// not one of these.
-func (r Change) IsBroadcastPolicyChange() bool {
-	return r.RequiresRuntimePeerComputation && !r.IsTargetedToNode() && r.OriginNode == 0
-}
-
-// DedupePolicyChanges keeps the first broadcast policy change in a tick and
-// drops the rest: each rebuilds a node's whole netmap from the same snapshot, so
-// the repeats are wasted work. Order and all other changes are preserved.
-func DedupePolicyChanges(changes []Change) []Change {
-	if len(changes) < 2 {
-		return changes
-	}
-
-	out := make([]Change, 0, len(changes))
-	seen := false
-
-	for _, r := range changes {
-		if r.IsBroadcastPolicyChange() {
-			if seen {
-				continue
-			}
-
-			seen = true
-		}
-
-		out = append(out, r)
-	}
-
-	return out
-}
-
 func uniqueNodeIDs(ids []types.NodeID) []types.NodeID {
 	if len(ids) == 0 {
 		return nil
@@ -378,7 +349,7 @@ func DERPMap() Change {
 }
 
 // PolicyChange creates a response for policy changes.
-// Policy changes require runtime peer visibility computation ([Change.RequiresRuntimePeerComputation]).
+// Policy changes require runtime peer visibility computation.
 func PolicyChange() Change {
 	return Change{
 		Reason:                         "policy change",
@@ -436,8 +407,8 @@ func KeyExpiry(nodeID types.NodeID, expiry *time.Time) Change {
 
 // High-level change constructors
 
-// NodeAdded returns a [Change] for when a node is added or updated.
-// The [Change.OriginNode] field enables self-update detection by the mapper.
+// NodeAdded returns a Change for when a node is added or updated.
+// The OriginNode field enables self-update detection by the mapper.
 func NodeAdded(id types.NodeID) Change {
 	c := PeersChanged("node added", id)
 	c.OriginNode = id
@@ -445,13 +416,39 @@ func NodeAdded(id types.NodeID) Change {
 	return c
 }
 
-// NodeRemoved returns a [Change] for when a node is removed.
+// NodeRemoved returns a Change for when a node is removed.
 func NodeRemoved(id types.NodeID) Change {
 	return PeersRemoved(id)
 }
 
-// KeyExpiryFor returns a [Change] for when a node's key expiry changes.
-// The [Change.OriginNode] field enables self-update detection by the mapper.
+// NodeOnlineFor returns a Change for when a node comes online.
+// If the node is a subnet router, a full update is sent instead of a patch.
+func NodeOnlineFor(node types.NodeView) Change {
+	if node.IsSubnetRouter() {
+		c := FullUpdate()
+		c.Reason = "subnet router online"
+
+		return c
+	}
+
+	return NodeOnline(node.ID())
+}
+
+// NodeOfflineFor returns a Change for when a node goes offline.
+// If the node is a subnet router, a full update is sent instead of a patch.
+func NodeOfflineFor(node types.NodeView) Change {
+	if node.IsSubnetRouter() {
+		c := FullUpdate()
+		c.Reason = "subnet router offline"
+
+		return c
+	}
+
+	return NodeOffline(node.ID())
+}
+
+// KeyExpiryFor returns a Change for when a node's key expiry changes.
+// The OriginNode field enables self-update detection by the mapper.
 func KeyExpiryFor(id types.NodeID, expiry time.Time) Change {
 	c := KeyExpiry(id, &expiry)
 	c.OriginNode = id
@@ -459,8 +456,8 @@ func KeyExpiryFor(id types.NodeID, expiry time.Time) Change {
 	return c
 }
 
-// EndpointOrDERPUpdate returns a [Change] for when a node's endpoints or DERP region changes.
-// The [Change.OriginNode] field enables self-update detection by the mapper.
+// EndpointOrDERPUpdate returns a Change for when a node's endpoints or DERP region changes.
+// The OriginNode field enables self-update detection by the mapper.
 func EndpointOrDERPUpdate(id types.NodeID, patch *tailcfg.PeerChange) Change {
 	c := PeerPatched("endpoint/DERP update", patch)
 	c.OriginNode = id
@@ -468,36 +465,7 @@ func EndpointOrDERPUpdate(id types.NodeID, patch *tailcfg.PeerChange) Change {
 	return c
 }
 
-// NodeKeyRotated returns a [Change] for a node re-logging in: its NodeKey (and
-// possibly DiscoKey, key expiry, or endpoints) changed, but nothing structural
-// did. Peers only need those changed fields, so it is sent as the minimal
-// incremental [tailcfg.PeerChange] patch rather than re-advertising the whole
-// node — the smallest update that conveys the rotation, and the least
-// disruptive for peers reconciling it.
-func NodeKeyRotated(node types.NodeView) Change {
-	nk := node.NodeKey()
-	dk := node.DiscoKey()
-
-	// KeyExpiry is always set: the zero value clears any prior expiry on the
-	// peer (un-expire), and a non-zero value carries the new expiry.
-	var expiry time.Time
-	if e, ok := node.Expiry().GetOk(); ok {
-		expiry = e
-	}
-
-	c := PeerPatched("node key rotated (relogin)", &tailcfg.PeerChange{
-		NodeID:    tailcfg.NodeID(node.ID()), //nolint:gosec // NodeID is bounded
-		Key:       &nk,
-		DiscoKey:  &dk,
-		KeyExpiry: &expiry,
-		Endpoints: node.Endpoints().AsSlice(),
-	})
-	c.OriginNode = node.ID()
-
-	return c
-}
-
-// UserAdded returns a [Change] for when a user is added or updated.
+// UserAdded returns a Change for when a user is added or updated.
 // A full update is sent to refresh user profiles on all nodes.
 func UserAdded() Change {
 	c := FullUpdate()
@@ -506,7 +474,7 @@ func UserAdded() Change {
 	return c
 }
 
-// UserRemoved returns a [Change] for when a user is removed.
+// UserRemoved returns a Change for when a user is removed.
 // A full update is sent to refresh user profiles on all nodes.
 func UserRemoved() Change {
 	c := FullUpdate()
@@ -515,9 +483,9 @@ func UserRemoved() Change {
 	return c
 }
 
-// PingNode creates a [Change] that sends a [tailcfg.PingRequest] to a specific
+// PingNode creates a Change that sends a PingRequest to a specific
 // node. pr must be non-nil and nodeID must be non-zero; the node
-// responds to the [tailcfg.PingRequest] URL to prove connectivity.
+// responds to the PingRequest URL to prove connectivity.
 func PingNode(nodeID types.NodeID, pr *tailcfg.PingRequest) Change {
 	return Change{
 		Reason:      "ping node",
@@ -526,7 +494,7 @@ func PingNode(nodeID types.NodeID, pr *tailcfg.PingRequest) Change {
 	}
 }
 
-// ExtraRecords returns a [Change] for when DNS extra records change.
+// ExtraRecords returns a Change for when DNS extra records change.
 func ExtraRecords() Change {
 	c := DNSConfig()
 	c.Reason = "extra records update"
diff --git a/hscontrol/types/change/change_test.go b/hscontrol/types/change/change_test.go
index e8523e171..729dc4684 100644
--- a/hscontrol/types/change/change_test.go
+++ b/hscontrol/types/change/change_test.go
@@ -1,16 +1,12 @@
 package change
 
 import (
-	"net/netip"
 	"reflect"
 	"testing"
-	"time"
 
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
 	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
 )
 
 func TestChange_FieldSync(t *testing.T) {
@@ -300,99 +296,6 @@ func TestChange_Merge(t *testing.T) {
 	}
 }
 
-func TestChange_IsBroadcastPolicyChange(t *testing.T) {
-	originUpdate := PolicyChange()
-	originUpdate.OriginNode = 7
-
-	targeted := PolicyChange()
-	targeted.TargetNode = 7
-
-	tests := []struct {
-		name string
-		c    Change
-		want bool
-	}{
-		{name: "policy change", c: PolicyChange(), want: true},
-		{name: "self-update recompute", c: originUpdate, want: false},
-		{name: "targeted recompute", c: targeted, want: false},
-		{name: "online patch", c: NodeOnline(1), want: false},
-		{name: "full update", c: FullUpdate(), want: false},
-		{name: "derp map", c: DERPMap(), want: false},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			assert.Equal(t, tt.want, tt.c.IsBroadcastPolicyChange())
-		})
-	}
-}
-
-func TestDedupePolicyChanges(t *testing.T) {
-	// originRecompute is a runtime recompute carrying node-specific payload
-	// (OriginNode), so it is not the canonical broadcast PolicyChange and must
-	// never be coalesced away.
-	originRecompute := PolicyChange()
-	originRecompute.OriginNode = 7
-
-	tests := []struct {
-		name    string
-		changes []Change
-		want    []Change
-	}{
-		{
-			name:    "nil is a no-op",
-			changes: nil,
-			want:    nil,
-		},
-		{
-			name:    "single policy change is unchanged",
-			changes: []Change{PolicyChange()},
-			want:    []Change{PolicyChange()},
-		},
-		{
-			name:    "identical policy changes collapse to one",
-			changes: []Change{PolicyChange(), PolicyChange(), PolicyChange()},
-			want:    []Change{PolicyChange()},
-		},
-		{
-			name: "peer patches survive between collapsed policy changes",
-			changes: []Change{
-				NodeOnline(1), PolicyChange(), NodeOnline(2), PolicyChange(), NodeOffline(3),
-			},
-			want: []Change{
-				NodeOnline(1), PolicyChange(), NodeOnline(2), NodeOffline(3),
-			},
-		},
-		{
-			name:    "NodeAdded is preserved, not treated as a recompute",
-			changes: []Change{PolicyChange(), NodeAdded(5), PolicyChange()},
-			want:    []Change{PolicyChange(), NodeAdded(5)},
-		},
-		{
-			name:    "recompute carrying OriginNode is kept alongside the canonical one",
-			changes: []Change{PolicyChange(), originRecompute, PolicyChange()},
-			want:    []Change{PolicyChange(), originRecompute},
-		},
-		{
-			name:    "non-canonical recomputes are not collapsed",
-			changes: []Change{originRecompute, originRecompute},
-			want:    []Change{originRecompute, originRecompute},
-		},
-		{
-			name:    "changes without any recompute are unchanged",
-			changes: []Change{NodeOnline(1), DERPMap()},
-			want:    []Change{NodeOnline(1), DERPMap()},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			got := DedupePolicyChanges(tt.changes)
-			assert.Equal(t, tt.want, got)
-		})
-	}
-}
-
 func TestChange_Constructors(t *testing.T) {
 	tests := []struct {
 		name        string
@@ -616,73 +519,3 @@ func TestUniqueNodeIDs(t *testing.T) {
 		})
 	}
 }
-
-func TestNodeOnlineOfflineForSubnetRouter(t *testing.T) {
-	route := netip.MustParsePrefix("10.0.0.0/24")
-	router := types.Node{
-		ID:             1,
-		Hostinfo:       &tailcfg.Hostinfo{RoutableIPs: []netip.Prefix{route}},
-		ApprovedRoutes: []netip.Prefix{route},
-	}
-	view := router.View()
-	require.True(t, view.IsSubnetRouter(), "test node must be a subnet router")
-
-	tests := []struct {
-		name       string
-		got        Change
-		wantOnline bool
-	}{
-		{name: "online", got: NodeOnline(view.ID()), wantOnline: true},
-		{name: "offline", got: NodeOffline(view.ID()), wantOnline: false},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			// A subnet router's online/offline transition rides the lightweight
-			// peer patch, not a full update: the gated PolicyChange that
-			// State.Connect/Disconnect emit owns the netmap recompute.
-			assert.False(t, tt.got.IsFull(),
-				"subnet router online/offline must be a peer patch, not a full update")
-
-			require.NotEmpty(t, tt.got.PeerPatches,
-				"expected an online/offline peer patch")
-
-			patch := tt.got.PeerPatches[0]
-			assert.Equal(t, view.ID().NodeID(), patch.NodeID)
-
-			require.NotNil(t, patch.Online)
-			assert.Equal(t, tt.wantOnline, *patch.Online)
-		})
-	}
-}
-
-// TestNodeKeyRotatedEmitsPatchNotWholeNode proves a relogin is delivered to
-// peers as an incremental peer patch, not a whole-node add. A whole-node add is
-// non-patchifiable on the tailscale client whenever Hostinfo changed (which it
-// does on relogin), forcing the broken NodeMutationAdd path that strands a
-// re-keyed, momentarily-endpoint-less peer.
-func TestNodeKeyRotatedEmitsPatchNotWholeNode(t *testing.T) {
-	expiry := time.Now().Add(24 * time.Hour).UTC()
-	node := types.Node{
-		ID:        7,
-		NodeKey:   key.NewNode().Public(),
-		DiscoKey:  key.NewDisco().Public(),
-		Endpoints: []netip.AddrPort{netip.MustParseAddrPort("192.168.1.9:41641")},
-		Expiry:    &expiry,
-	}
-	view := node.View()
-
-	c := NodeKeyRotated(view)
-
-	assert.False(t, c.IsFull(), "relogin must be a peer patch, not a full update")
-	assert.Empty(t, c.PeersChanged, "relogin must not emit a whole-node PeersChanged")
-	require.Len(t, c.PeerPatches, 1, "relogin must emit exactly one peer patch")
-
-	patch := c.PeerPatches[0]
-	assert.Equal(t, view.ID().NodeID(), patch.NodeID)
-	require.NotNil(t, patch.Key, "patch must carry the rotated NodeKey")
-	assert.Equal(t, node.NodeKey, *patch.Key)
-	require.NotNil(t, patch.KeyExpiry, "patch must carry KeyExpiry to (un)expire the peer")
-	assert.Equal(t, expiry, *patch.KeyExpiry)
-	assert.Equal(t, []netip.AddrPort(node.Endpoints), patch.Endpoints, "patch must carry endpoints")
-}
diff --git a/hscontrol/types/common.go b/hscontrol/types/common.go
index e96aef9be..b0558d07a 100644
--- a/hscontrol/types/common.go
+++ b/hscontrol/types/common.go
@@ -11,7 +11,8 @@ import (
 	"sync/atomic"
 	"time"
 
-	"tailscale.com/util/rands"
+	"github.com/juanfont/headscale/hscontrol/util"
+	"tailscale.com/tailcfg"
 )
 
 const (
@@ -27,6 +28,139 @@ var (
 	ErrInvalidAuthIDPrefix = errors.New("auth ID has invalid prefix")
 )
 
+type StateUpdateType int
+
+func (su StateUpdateType) String() string {
+	switch su {
+	case StateFullUpdate:
+		return "StateFullUpdate"
+	case StatePeerChanged:
+		return "StatePeerChanged"
+	case StatePeerChangedPatch:
+		return "StatePeerChangedPatch"
+	case StatePeerRemoved:
+		return "StatePeerRemoved"
+	case StateSelfUpdate:
+		return "StateSelfUpdate"
+	case StateDERPUpdated:
+		return "StateDERPUpdated"
+	}
+
+	return "unknown state update type"
+}
+
+const (
+	StateFullUpdate StateUpdateType = iota
+	// StatePeerChanged is used for updates that needs
+	// to be calculated with all peers and all policy rules.
+	// This would typically be things that include tags, routes
+	// and similar.
+	StatePeerChanged
+	StatePeerChangedPatch
+	StatePeerRemoved
+	// StateSelfUpdate is used to indicate that the node
+	// has changed in control, and the client needs to be
+	// informed.
+	// The updated node is inside the ChangeNodes field
+	// which should have a length of one.
+	StateSelfUpdate
+	StateDERPUpdated
+)
+
+// StateUpdate is an internal message containing information about
+// a state change that has happened to the network.
+// If type is StateFullUpdate, all fields are ignored.
+type StateUpdate struct {
+	// The type of update
+	Type StateUpdateType
+
+	// ChangeNodes must be set when Type is StatePeerAdded
+	// and StatePeerChanged and contains the full node
+	// object for added nodes.
+	ChangeNodes []NodeID
+
+	// ChangePatches must be set when Type is StatePeerChangedPatch
+	// and contains a populated PeerChange object.
+	ChangePatches []*tailcfg.PeerChange
+
+	// Removed must be set when Type is StatePeerRemoved and
+	// contain a list of the nodes that has been removed from
+	// the network.
+	Removed []NodeID
+
+	// DERPMap must be set when Type is StateDERPUpdated and
+	// contain the new DERP Map.
+	DERPMap *tailcfg.DERPMap
+
+	// Additional message for tracking origin or what being
+	// updated, useful for ambiguous updates like StatePeerChanged.
+	Message string
+}
+
+// Empty reports if there are any updates in the StateUpdate.
+func (su *StateUpdate) Empty() bool {
+	switch su.Type {
+	case StatePeerChanged:
+		return len(su.ChangeNodes) == 0
+	case StatePeerChangedPatch:
+		return len(su.ChangePatches) == 0
+	case StatePeerRemoved:
+		return len(su.Removed) == 0
+	case StateFullUpdate, StateSelfUpdate, StateDERPUpdated:
+		// These update types don't have associated data to check,
+		// so they are never considered empty.
+		return false
+	}
+
+	return false
+}
+
+func UpdateFull() StateUpdate {
+	return StateUpdate{
+		Type: StateFullUpdate,
+	}
+}
+
+func UpdateSelf(nodeID NodeID) StateUpdate {
+	return StateUpdate{
+		Type:        StateSelfUpdate,
+		ChangeNodes: []NodeID{nodeID},
+	}
+}
+
+func UpdatePeerChanged(nodeIDs ...NodeID) StateUpdate {
+	return StateUpdate{
+		Type:        StatePeerChanged,
+		ChangeNodes: nodeIDs,
+	}
+}
+
+func UpdatePeerPatch(changes ...*tailcfg.PeerChange) StateUpdate {
+	return StateUpdate{
+		Type:          StatePeerChangedPatch,
+		ChangePatches: changes,
+	}
+}
+
+func UpdatePeerRemoved(nodeIDs ...NodeID) StateUpdate {
+	return StateUpdate{
+		Type:    StatePeerRemoved,
+		Removed: nodeIDs,
+	}
+}
+
+func UpdateExpire(nodeID NodeID, expiry time.Time) StateUpdate {
+	return StateUpdate{
+		Type: StatePeerChangedPatch,
+		ChangePatches: []*tailcfg.PeerChange{
+			{
+				NodeID:    nodeID.NodeID(),
+				KeyExpiry: &expiry,
+			},
+		},
+	}
+}
+
 const (
 	authIDPrefix       = "hskey-authreq-"
 	authIDRandomLength = 24
@@ -37,7 +171,12 @@ const (
 type AuthID string
 
 func NewAuthID() (AuthID, error) {
-	return AuthID(authIDPrefix + rands.HexString(authIDRandomLength)), nil
+	rid, err := util.GenerateRandomStringURLSafe(authIDRandomLength)
+	if err != nil {
+		return "", err
+	}
+
+	return AuthID(authIDPrefix + rid), nil
 }
 
 func MustAuthID() AuthID {
@@ -94,7 +233,7 @@ type SSHCheckBinding struct {
 // PendingRegistrationConfirmation captures the server-side state needed
 // to finalise a node registration after the user has confirmed it on
 // the OIDC interstitial. The OIDC callback resolves the user identity
-// and node expiry, stores them on the cached [AuthRequest], and renders
+// and node expiry, stores them on the cached AuthRequest, and renders
 // a confirmation page; only when the user POSTs the confirmation form
 // does the actual node registration run.
 //
@@ -111,9 +250,9 @@ type PendingRegistrationConfirmation struct {
 // node. It carries the minimum data needed to either complete a node
 // registration (regData populated) or an SSH check-mode auth (sshBinding
 // populated), and signals the verdict via the finished channel. The closed
-// flag guards [AuthRequest.FinishAuth] against double-close.
+// flag guards FinishAuth against double-close.
 //
-// [AuthRequest] is always handled by pointer so the channel and atomic flag
+// AuthRequest is always handled by pointer so the channel and atomic flag
 // have a single canonical instance even when stored in caches that
 // internally copy values.
 type AuthRequest struct {
@@ -121,7 +260,7 @@ type AuthRequest struct {
 	// or OIDC). It carries the cached registration payload that the
 	// auth callback uses to promote this request into a real node.
 	//
-	// nil for non-registration flows. Use [AuthRequest.RegistrationData] to read it
+	// nil for non-registration flows. Use RegistrationData() to read it
 	// safely.
 	regData *RegistrationData
 
@@ -130,7 +269,7 @@ type AuthRequest struct {
 	// and OIDC callback can refuse to record a verdict for any other
 	// pair.
 	//
-	// nil for non-SSH-check flows. Use [AuthRequest.SSHCheckBinding] to read it
+	// nil for non-SSH-check flows. Use SSHCheckBinding() to read it
 	// safely.
 	sshBinding *SSHCheckBinding
 
@@ -155,7 +294,7 @@ func NewAuthRequest() *AuthRequest {
 }
 
 // NewRegisterAuthRequest creates a pending auth request carrying the
-// minimal [RegistrationData] for a node-registration flow. The data is
+// minimal RegistrationData for a node-registration flow. The data is
 // stored by pointer; callers must not mutate it after handing it off.
 func NewRegisterAuthRequest(data *RegistrationData) *AuthRequest {
 	return &AuthRequest{
@@ -181,8 +320,8 @@ func NewSSHCheckAuthRequest(src, dst NodeID) *AuthRequest {
 }
 
 // RegistrationData returns the cached registration payload. It panics if
-// called on an [AuthRequest] that was not created via
-// [NewRegisterAuthRequest].
+// called on an AuthRequest that was not created via
+// NewRegisterAuthRequest.
 func (rn *AuthRequest) RegistrationData() *RegistrationData {
 	if rn.regData == nil {
 		panic("RegistrationData can only be used in registration requests")
@@ -192,8 +331,8 @@ func (rn *AuthRequest) RegistrationData() *RegistrationData {
 }
 
 // SSHCheckBinding returns the (src, dst) node pair an SSH check-mode
-// auth request is bound to. It panics if called on an [AuthRequest] that
-// was not created via [NewSSHCheckAuthRequest].
+// auth request is bound to. It panics if called on an AuthRequest that
+// was not created via NewSSHCheckAuthRequest.
 func (rn *AuthRequest) SSHCheckBinding() *SSHCheckBinding {
 	if rn.sshBinding == nil {
 		panic("SSHCheckBinding can only be used in SSH check-mode requests")
@@ -203,19 +342,19 @@ func (rn *AuthRequest) SSHCheckBinding() *SSHCheckBinding {
 }
 
 // IsRegistration reports whether this auth request carries registration
-// data (i.e. it was created via [NewRegisterAuthRequest]).
+// data (i.e. it was created via NewRegisterAuthRequest).
 func (rn *AuthRequest) IsRegistration() bool {
 	return rn.regData != nil
 }
 
 // IsSSHCheck reports whether this auth request is bound to an SSH
 // check-mode (src, dst) pair (i.e. it was created via
-// [NewSSHCheckAuthRequest]).
+// NewSSHCheckAuthRequest).
 func (rn *AuthRequest) IsSSHCheck() bool {
 	return rn.sshBinding != nil
 }
 
-// SetPendingConfirmation marks this [AuthRequest] as having an
+// SetPendingConfirmation marks this AuthRequest as having an
 // OIDC-resolved user that is waiting to confirm the registration on
 // the interstitial. The OIDC callback should call this and then render
 // the confirmation page; the /register/confirm POST handler reads the
@@ -225,8 +364,8 @@ func (rn *AuthRequest) SetPendingConfirmation(p *PendingRegistrationConfirmation
 }
 
 // PendingConfirmation returns the pending OIDC-resolved registration
-// state captured by [AuthRequest.SetPendingConfirmation], or nil if no OIDC callback
-// has yet resolved an identity for this [AuthRequest].
+// state captured by SetPendingConfirmation, or nil if no OIDC callback
+// has yet resolved an identity for this AuthRequest.
 func (rn *AuthRequest) PendingConfirmation() *PendingRegistrationConfirmation {
 	return rn.pendingConfirmation
 }
@@ -236,7 +375,10 @@ func (rn *AuthRequest) FinishAuth(verdict AuthVerdict) {
 		return
 	}
 
-	rn.finished <- verdict
+	select {
+	case rn.finished <- verdict:
+	default:
+	}
 
 	close(rn.finished)
 }
diff --git a/hscontrol/types/common_test.go b/hscontrol/types/common_test.go
index d381d8723..540284934 100644
--- a/hscontrol/types/common_test.go
+++ b/hscontrol/types/common_test.go
@@ -7,9 +7,9 @@ import (
 	"github.com/stretchr/testify/require"
 )
 
-// TestNewSSHCheckAuthRequestBinding verifies that an SSH-check [AuthRequest]
+// TestNewSSHCheckAuthRequestBinding verifies that an SSH-check AuthRequest
 // captures the (src, dst) node pair at construction time and rejects
-// callers that try to read [AuthRequest.RegistrationData] from it.
+// callers that try to read RegistrationData from it.
 func TestNewSSHCheckAuthRequestBinding(t *testing.T) {
 	const src, dst NodeID = 7, 11
 
@@ -28,7 +28,7 @@ func TestNewSSHCheckAuthRequestBinding(t *testing.T) {
 }
 
 // TestNewRegisterAuthRequestPayload verifies that a registration
-// [AuthRequest] carries the supplied [RegistrationData] and rejects callers
+// AuthRequest carries the supplied RegistrationData and rejects callers
 // that try to read SSH-check binding from it.
 func TestNewRegisterAuthRequestPayload(t *testing.T) {
 	data := &RegistrationData{Hostname: "node-a"}
@@ -45,7 +45,7 @@ func TestNewRegisterAuthRequestPayload(t *testing.T) {
 }
 
 // TestNewAuthRequestEmptyPayload verifies that a payload-less
-// [AuthRequest] reports both Is* helpers as false and panics on either
+// AuthRequest reports both Is* helpers as false and panics on either
 // payload accessor.
 func TestNewAuthRequestEmptyPayload(t *testing.T) {
 	req := NewAuthRequest()
@@ -58,7 +58,7 @@ func TestNewAuthRequestEmptyPayload(t *testing.T) {
 }
 
 // TestPendingRegistrationConfirmation verifies that the OIDC callback
-// can stash a pending confirmation onto an [AuthRequest] and that the
+// can stash a pending confirmation onto an AuthRequest and that the
 // /register/confirm POST handler can read it back unchanged.
 func TestPendingRegistrationConfirmation(t *testing.T) {
 	req := NewRegisterAuthRequest(&RegistrationData{Hostname: "phish-test"})
diff --git a/hscontrol/types/config.go b/hscontrol/types/config.go
index 4f0b4ecfa..779380fcc 100644
--- a/hscontrol/types/config.go
+++ b/hscontrol/types/config.go
@@ -8,7 +8,6 @@ import (
 	"net/url"
 	"os"
 	"strings"
-	"sync"
 	"time"
 
 	"github.com/coreos/go-oidc/v3/oidc"
@@ -33,13 +32,9 @@ const (
 
 var (
 	errOidcMutuallyExclusive     = errors.New("oidc_client_secret and oidc_client_secret_path are mutually exclusive")
-	errOIDCIssuerInvalid         = errors.New("oidc.issuer must be a valid http(s) URL")
-	errOIDCClientIDRequired      = errors.New("oidc.client_id is required when oidc.issuer is set")
-	errOIDCClientSecretRequired  = errors.New("oidc.client_secret or oidc.client_secret_path is required when oidc.issuer is set")
 	errServerURLSuffix           = errors.New("server_url cannot be part of base_domain in a way that could make the DERP and headscale server unreachable")
 	errServerURLSame             = errors.New("server_url cannot use the same domain as base_domain in a way that could make the DERP and headscale server unreachable")
 	errInvalidPKCEMethod         = errors.New("pkce.method must be either 'plain' or 'S256'")
-	errTrustedProxyZeroRange     = errors.New("0.0.0.0/0 and ::/0 are not allowed")
 	ErrNoPrefixConfigured        = errors.New("no IPv4 or IPv6 prefix configured, minimum one prefix is required")
 	ErrInvalidAllocationStrategy = errors.New("invalid prefix allocation strategy")
 )
@@ -72,7 +67,7 @@ type HARouteConfig struct {
 	ProbeInterval time.Duration
 
 	// ProbeTimeout is the maximum time to wait for a probe response
-	// before declaring a node unhealthy. Must be less than [HARouteConfig.ProbeInterval].
+	// before declaring a node unhealthy. Must be less than ProbeInterval.
 	ProbeTimeout time.Duration
 }
 
@@ -81,14 +76,6 @@ type RouteConfig struct {
 	HA HARouteConfig
 }
 
-// PreAuthKeysConfig contains configuration for pre-auth key lifecycle.
-type PreAuthKeysConfig struct {
-	// RevokedRetention is how long a soft-revoked pre-auth key (revoked via the
-	// v2 API's DELETE) is kept retrievable before the background collector
-	// hard-deletes it. A zero or negative duration disables the collector.
-	RevokedRetention time.Duration
-}
-
 // NodeConfig contains configuration for node lifecycle and expiry.
 type NodeConfig struct {
 	// Expiry is the default key expiry duration for non-tagged nodes.
@@ -109,9 +96,9 @@ type Config struct {
 	ServerURL           string
 	Addr                string
 	MetricsAddr         string
-	TrustedProxies      []netip.Prefix
+	GRPCAddr            string
+	GRPCAllowInsecure   bool
 	Node                NodeConfig
-	PreAuthKeys         PreAuthKeysConfig
 	PrefixV4            *netip.Prefix
 	PrefixV6            *netip.Prefix
 	IPAllocation        IPAllocationStrategy
@@ -131,7 +118,7 @@ type Config struct {
 
 	// DNSConfig is the headscale representation of the DNS configuration.
 	// It is kept in the config update for some settings that are
-	// not directly converted into a [tailcfg.DNSConfig].
+	// not directly converted into a tailcfg.DNSConfig.
 	DNSConfig DNSConfig
 
 	// TailcfgDNSConfig is the tailcfg representation of the DNS configuration,
@@ -143,9 +130,9 @@ type Config struct {
 
 	OIDC OIDCConfig
 
-	LogTail    LogTailConfig
-	Taildrop   TaildropConfig
-	AutoUpdate AutoUpdateConfig
+	LogTail             LogTailConfig
+	RandomizeClientPort bool
+	Taildrop            TaildropConfig
 
 	CLI CLIConfig
 
@@ -267,15 +254,6 @@ type TaildropConfig struct {
 	Enabled bool
 }
 
-// AutoUpdateConfig controls the tailnet-wide default for client
-// auto-update. When Enabled is true, headscale emits the
-// [tailcfg.NodeAttrDefaultAutoUpdate] cap with value [true] on every
-// node's CapMap; clients fall back to that default unless they have
-// opted in or out locally.
-type AutoUpdateConfig struct {
-	Enabled bool
-}
-
 type CLIConfig struct {
 	Address  string
 	APIKey   string `json:"-"` // never serialise the headscale admin API key
@@ -348,7 +326,7 @@ type Tuning struct {
 	// NodeStoreBatchTimeout is the maximum time to wait before processing a
 	// partial batch of node operations.
 	//
-	// When [Tuning.NodeStoreBatchSize] operations haven't accumulated, this timeout ensures
+	// When NodeStoreBatchSize operations haven't accumulated, this timeout ensures
 	// writes don't wait indefinitely. The batch processes when either the size
 	// threshold is reached OR this timeout expires, whichever comes first.
 	//
@@ -366,37 +344,8 @@ func validatePKCEMethod(method string) error {
 	return nil
 }
 
-// validateOIDCConfig validates the OIDC settings, called when oidc.issuer is
-// set. It fails fast on a setup that cannot work: an invalid PKCE method, a
-// malformed issuer URL (which would otherwise surface as an opaque discovery
-// error or, worse, resolve to an unintended provider), or a missing client
-// id/secret.
-func validateOIDCConfig() error {
-	err := validatePKCEMethod(viper.GetString("oidc.pkce.method"))
-	if err != nil {
-		return err
-	}
-
-	issuer := viper.GetString("oidc.issuer")
-
-	u, err := url.Parse(issuer)
-	if err != nil || (u.Scheme != "https" && u.Scheme != "http") || u.Host == "" {
-		return fmt.Errorf("%w: got %q", errOIDCIssuerInvalid, issuer)
-	}
-
-	if viper.GetString("oidc.client_id") == "" {
-		return errOIDCClientIDRequired
-	}
-
-	if viper.GetString("oidc.client_secret") == "" && viper.GetString("oidc.client_secret_path") == "" {
-		return errOIDCClientSecretRequired
-	}
-
-	return nil
-}
-
-// Domain returns the hostname/domain part of the [Config.ServerURL].
-// If the [Config.ServerURL] is not a valid URL, it returns the [Config.BaseDomain].
+// Domain returns the hostname/domain part of the ServerURL.
+// If the ServerURL is not a valid URL, it returns the BaseDomain.
 func (c *Config) Domain() string {
 	u, err := url.Parse(c.ServerURL)
 	if err != nil {
@@ -409,7 +358,7 @@ func (c *Config) Domain() string {
 // LoadConfig prepares and loads the Headscale configuration into Viper.
 // This means it sets the default values, reads the configuration file and
 // environment variables, and handles deprecated configuration options.
-// It has to be called before [LoadServerConfig] and [LoadCLIConfig].
+// It has to be called before LoadServerConfig and LoadCLIConfig.
 // The configuration is not validated and the caller should check for errors
 // using a validation function.
 func LoadConfig(path string, isFile bool) error {
@@ -457,6 +406,9 @@ func LoadConfig(path string, isFile bool) error {
 	viper.SetDefault("unix_socket", "/var/run/headscale/headscale.sock")
 	viper.SetDefault("unix_socket_permission", "0o770")
 
+	viper.SetDefault("grpc_listen_addr", ":50443")
+	viper.SetDefault("grpc_allow_insecure", false)
+
 	viper.SetDefault("cli.timeout", "5s")
 	viper.SetDefault("cli.insecure", false)
 
@@ -476,12 +428,11 @@ func LoadConfig(path string, isFile bool) error {
 	viper.SetDefault("oidc.email_verified_required", true)
 
 	viper.SetDefault("logtail.enabled", false)
+	viper.SetDefault("randomize_client_port", false)
 	viper.SetDefault("taildrop.enabled", true)
-	viper.SetDefault("auto_update.enabled", false)
 
 	viper.SetDefault("node.expiry", "0")
 	viper.SetDefault("node.ephemeral.inactivity_timeout", "120s")
-	viper.SetDefault("preauth_keys.revoked_retention", "168h")
 	viper.SetDefault("node.routes.ha.probe_interval", "10s")
 	viper.SetDefault("node.routes.ha.probe_timeout", "5s")
 
@@ -579,27 +530,14 @@ func validateServerConfig() error {
 	depr.fatal("oidc.strip_email_domain")
 	depr.fatal("oidc.map_legacy_users")
 
-	// Removed since v0.29.0: `randomize_client_port` moved to the ACL
-	// policy as a top-level `randomizeClientPort` field, matching the
-	// Tailscale-hosted control plane schema. Per-node `nodeAttrs`
-	// entries granting `https://tailscale.com/cap/randomize-client-port`
-	// also work.
-	depr.fatalWithHint("randomize_client_port",
-		`Set "randomizeClientPort": true at the top level of your policy file `+
-			`(see policy.path / policy.mode), or grant the cap per-node via a `+
-			`"nodeAttrs" entry. See CHANGELOG.md (BREAKING / Configuration).`)
-
 	// Deprecated: ephemeral_node_inactivity_timeout -> node.ephemeral.inactivity_timeout
 	depr.warnNoAlias("node.ephemeral.inactivity_timeout", "ephemeral_node_inactivity_timeout")
 
 	// Removed: oidc.expiry -> node.expiry
 	depr.fatalIfSet("oidc.expiry", "node.expiry")
 
-	// OIDC is activated by setting oidc.issuer (see app.go), not by a
-	// dedicated oidc.enabled key. Gate validation on the real activation
-	// condition so a misconfiguration fails at startup.
-	if viper.GetString("oidc.issuer") != "" {
-		err := validateOIDCConfig()
+	if viper.GetBool("oidc.enabled") {
+		err := validatePKCEMethod(viper.GetString("oidc.pkce.method"))
 		if err != nil {
 			return err
 		}
@@ -642,7 +580,7 @@ func validateServerConfig() error {
 
 	// Minimum inactivity time out is keepalive timeout (60s) plus a few seconds
 	// to avoid races
-	minInactivityTimeout := 65 * time.Second
+	minInactivityTimeout, _ := time.ParseDuration("65s")
 
 	ephemeralTimeout := resolveEphemeralInactivityTimeout()
 	if ephemeralTimeout <= minInactivityTimeout {
@@ -752,8 +690,8 @@ func derpConfig() DERPConfig {
 
 	urlStrs := viper.GetStringSlice("derp.urls")
 
-	urls := make([]url.URL, 0, len(urlStrs))
-	for _, urlStr := range urlStrs {
+	urls := make([]url.URL, len(urlStrs))
+	for index, urlStr := range urlStrs {
 		urlAddr, err := url.Parse(urlStr)
 		if err != nil {
 			log.Error().
@@ -761,11 +699,9 @@ func derpConfig() DERPConfig {
 				Str("url", urlStr).
 				Err(err).
 				Msg("Failed to parse url, ignoring...")
-
-			continue
 		}
 
-		urls = append(urls, *urlAddr)
+		urls[index] = *urlAddr
 	}
 
 	paths := viper.GetStringSlice("derp.paths")
@@ -931,15 +867,15 @@ func dns() (DNSConfig, error) {
 	return dns, nil
 }
 
-// parseResolvers converts nameserver strings into DNS resolvers.
+// globalResolvers returns the global DNS resolvers
+// defined in the config file.
 // If a nameserver is a valid IP, it will be used as a regular resolver.
 // If a nameserver is a valid URL, it will be used as a DoH resolver.
 // If a nameserver is neither a valid URL nor a valid IP, it will be ignored.
-// When domain is non-empty, it is included in the warning for invalid entries.
-func parseResolvers(nameservers []string, domain string) []*dnstype.Resolver {
+func (d *DNSConfig) globalResolvers() []*dnstype.Resolver {
 	var resolvers []*dnstype.Resolver
 
-	for _, nsStr := range nameservers {
+	for _, nsStr := range d.Nameservers.Global {
 		if _, err := netip.ParseAddr(nsStr); err == nil { //nolint:noinlineerr
 			resolvers = append(resolvers, &dnstype.Resolver{
 				Addr: nsStr,
@@ -956,29 +892,43 @@ func parseResolvers(nameservers []string, domain string) []*dnstype.Resolver {
 			continue
 		}
 
-		e := log.Warn().Str("nameserver", nsStr)
-		if domain != "" {
-			e = e.Str("domain", domain)
-		}
-
-		e.Msg("invalid nameserver, ignoring")
+		log.Warn().Str("nameserver", nsStr).Msg("invalid global nameserver, ignoring")
 	}
 
 	return resolvers
 }
 
-// globalResolvers returns the global DNS resolvers
-// defined in the config file.
-func (d *DNSConfig) globalResolvers() []*dnstype.Resolver {
-	return parseResolvers(d.Nameservers.Global, "")
-}
-
 // splitResolvers returns a map of domain to DNS resolvers.
+// If a nameserver is a valid IP, it will be used as a regular resolver.
+// If a nameserver is a valid URL, it will be used as a DoH resolver.
+// If a nameserver is neither a valid URL nor a valid IP, it will be ignored.
 func (d *DNSConfig) splitResolvers() map[string][]*dnstype.Resolver {
 	routes := make(map[string][]*dnstype.Resolver)
 
 	for domain, nameservers := range d.Nameservers.Split {
-		routes[domain] = parseResolvers(nameservers, domain)
+		var resolvers []*dnstype.Resolver
+
+		for _, nsStr := range nameservers {
+			if _, err := netip.ParseAddr(nsStr); err == nil { //nolint:noinlineerr
+				resolvers = append(resolvers, &dnstype.Resolver{
+					Addr: nsStr,
+				})
+
+				continue
+			}
+
+			if _, err := url.Parse(nsStr); err == nil { //nolint:noinlineerr
+				resolvers = append(resolvers, &dnstype.Resolver{
+					Addr: nsStr,
+				})
+
+				continue
+			}
+
+			log.Warn().Str("nameserver", nsStr).Str("domain", domain).Msg("invalid split dns nameserver, ignoring")
+		}
+
+		routes[domain] = resolvers
 	}
 
 	return routes
@@ -1041,49 +991,43 @@ func warnBanner(lines []string) {
 	log.Warn().Msg(b.String())
 }
 
-func parsePrefixConfig(key string, standardRange netip.Prefix, family string) (*netip.Prefix, bool, error) {
-	s := viper.GetString(key)
+func prefixV4() (*netip.Prefix, bool, error) {
+	prefixV4Str := viper.GetString("prefixes.v4")
 
-	if s == "" {
+	if prefixV4Str == "" {
 		return nil, false, nil
 	}
 
-	prefix, err := netip.ParsePrefix(s)
+	prefixV4, err := netip.ParsePrefix(prefixV4Str)
 	if err != nil {
-		return nil, false, fmt.Errorf("parsing %s prefix from config: %w", family, err)
+		return nil, false, fmt.Errorf("parsing IPv4 prefix from config: %w", err)
 	}
 
 	builder := netipx.IPSetBuilder{}
-	builder.AddPrefix(standardRange)
+	builder.AddPrefix(tsaddr.CGNATRange())
 
 	ipSet, _ := builder.IPSet()
 
-	return &prefix, !ipSet.ContainsPrefix(prefix), nil
+	return &prefixV4, !ipSet.ContainsPrefix(prefixV4), nil
 }
 
-// trustedProxies rejects 0.0.0.0/0 and ::/0 because they defeat the
-// peer-trust gate and almost always indicate misconfiguration.
-func trustedProxies() ([]netip.Prefix, error) {
-	raw := viper.GetStringSlice("trusted_proxies")
-	if len(raw) == 0 {
-		return nil, nil
+func prefixV6() (*netip.Prefix, bool, error) {
+	prefixV6Str := viper.GetString("prefixes.v6")
+
+	if prefixV6Str == "" {
+		return nil, false, nil
 	}
 
-	out := make([]netip.Prefix, 0, len(raw))
-	for i, s := range raw {
-		p, err := netip.ParsePrefix(s)
-		if err != nil {
-			return nil, fmt.Errorf("trusted_proxies[%d] %q: %w", i, s, err)
-		}
-
-		if p.Bits() == 0 {
-			return nil, fmt.Errorf("trusted_proxies[%d] %q: %w", i, s, errTrustedProxyZeroRange)
-		}
-
-		out = append(out, p.Masked())
+	prefixV6, err := netip.ParsePrefix(prefixV6Str)
+	if err != nil {
+		return nil, false, fmt.Errorf("parsing IPv6 prefix from config: %w", err)
 	}
 
-	return out, nil
+	builder := netipx.IPSetBuilder{}
+	builder.AddPrefix(tsaddr.TailscaleULARange())
+	ipSet, _ := builder.IPSet()
+
+	return &prefixV6, !ipSet.ContainsPrefix(prefixV6), nil
 }
 
 // LoadCLIConfig returns the needed configuration for the CLI client
@@ -1115,17 +1059,12 @@ func LoadServerConfig() (*Config, error) {
 	logConfig := logConfig()
 	zerolog.SetGlobalLevel(logConfig.Level)
 
-	prefix4, v4NonStandard, err := parsePrefixConfig("prefixes.v4", tsaddr.CGNATRange(), "IPv4")
+	prefix4, v4NonStandard, err := prefixV4()
 	if err != nil {
 		return nil, err
 	}
 
-	prefix6, v6NonStandard, err := parsePrefixConfig("prefixes.v6", tsaddr.TailscaleULARange(), "IPv6")
-	if err != nil {
-		return nil, err
-	}
-
-	trusted, err := trustedProxies()
+	prefix6, v6NonStandard, err := prefixV6()
 	if err != nil {
 		return nil, err
 	}
@@ -1181,6 +1120,7 @@ func LoadServerConfig() (*Config, error) {
 
 	derpConfig := derpConfig()
 	logTailConfig := logtailConfig()
+	randomizeClientPort := viper.GetBool("randomize_client_port")
 
 	oidcClientSecret := viper.GetString("oidc.client_secret")
 
@@ -1218,7 +1158,8 @@ func LoadServerConfig() (*Config, error) {
 		ServerURL:          serverURL,
 		Addr:               viper.GetString("listen_addr"),
 		MetricsAddr:        viper.GetString("metrics_listen_addr"),
-		TrustedProxies:     trusted,
+		GRPCAddr:           viper.GetString("grpc_listen_addr"),
+		GRPCAllowInsecure:  viper.GetBool("grpc_allow_insecure"),
 		DisableUpdateCheck: false,
 
 		PrefixV4:     prefix4,
@@ -1245,10 +1186,6 @@ func LoadServerConfig() (*Config, error) {
 			},
 		},
 
-		PreAuthKeys: PreAuthKeysConfig{
-			RevokedRetention: viper.GetDuration("preauth_keys.revoked_retention"),
-		},
-
 		Database: databaseConfig(),
 
 		TLS: tlsConfig(),
@@ -1282,13 +1219,11 @@ func LoadServerConfig() (*Config, error) {
 			},
 		},
 
-		LogTail: logTailConfig,
+		LogTail:             logTailConfig,
+		RandomizeClientPort: randomizeClientPort,
 		Taildrop: TaildropConfig{
 			Enabled: viper.GetBool("taildrop.enabled"),
 		},
-		AutoUpdate: AutoUpdateConfig{
-			Enabled: viper.GetBool("auto_update.enabled"),
-		},
 
 		Policy: policyConfig(),
 
@@ -1339,11 +1274,23 @@ func isSafeServerURL(serverURL, baseDomain string) error {
 		return errServerURLSame
 	}
 
-	if strings.HasSuffix(server.Hostname(), "."+baseDomain) {
-		return errServerURLSuffix
+	serverDomainParts := strings.Split(server.Host, ".")
+	baseDomainParts := strings.Split(baseDomain, ".")
+
+	if len(serverDomainParts) <= len(baseDomainParts) {
+		return nil
 	}
 
-	return nil
+	s := len(serverDomainParts)
+
+	b := len(baseDomainParts)
+	for i := range baseDomainParts {
+		if serverDomainParts[s-i-1] != baseDomainParts[b-i-1] {
+			return nil
+		}
+	}
+
+	return errServerURLSuffix
 }
 
 type deprecator struct {
@@ -1351,6 +1298,26 @@ type deprecator struct {
 	fatals set.Set[string]
 }
 
+// warnWithAlias will register an alias between the newKey and the oldKey,
+// and log a deprecation warning if the oldKey is set.
+//
+//nolint:unused
+func (d *deprecator) warnWithAlias(newKey, oldKey string) {
+	// NOTE: RegisterAlias is called with NEW KEY -> OLD KEY
+	viper.RegisterAlias(newKey, oldKey)
+
+	if viper.IsSet(oldKey) {
+		d.warns.Add(
+			fmt.Sprintf(
+				"The %q configuration key is deprecated. Please use %q instead. %q will be removed in the future.",
+				oldKey,
+				newKey,
+				oldKey,
+			),
+		)
+	}
+}
+
 // fatal deprecates and adds an entry to the fatal list of options if the oldKey is set.
 func (d *deprecator) fatal(oldKey string) {
 	if viper.IsSet(oldKey) {
@@ -1363,22 +1330,6 @@ func (d *deprecator) fatal(oldKey string) {
 	}
 }
 
-// fatalWithHint behaves like fatal but appends a remediation pointer to
-// the message so operators see exactly what to do without leaving the
-// terminal. Use it when the removed key has a clean replacement on the
-// policy side.
-func (d *deprecator) fatalWithHint(oldKey, hint string) {
-	if viper.IsSet(oldKey) {
-		d.fatals.Add(
-			fmt.Sprintf(
-				"The %q configuration key has been removed. %s",
-				oldKey,
-				hint,
-			),
-		)
-	}
-}
-
 // fatalIfNewKeyIsNotUsed deprecates and adds an entry to the fatal list of options if the oldKey is set and the new key is _not_ set.
 // If the new key is set, a warning is emitted instead.
 func (d *deprecator) fatalIfNewKeyIsNotUsed(newKey, oldKey string) {
@@ -1427,6 +1378,20 @@ func (d *deprecator) warnNoAlias(newKey, oldKey string) {
 	}
 }
 
+// warn deprecates and adds an entry to the warn list of options if the oldKey is set.
+//
+//nolint:unused
+func (d *deprecator) warn(oldKey string) {
+	if viper.IsSet(oldKey) {
+		d.warns.Add(
+			fmt.Sprintf(
+				"The %q configuration key is deprecated and has been removed. Please see the changelog for more details.",
+				oldKey,
+			),
+		)
+	}
+}
+
 func (d *deprecator) String() string {
 	var b strings.Builder
 
@@ -1448,33 +1413,3 @@ func (d *deprecator) Log() {
 		log.Warn().Msg("\n" + d.String())
 	}
 }
-
-// tailcfgDNSMu guards concurrent access to the mutable ExtraRecords of
-// [Config.TailcfgDNSConfig] between the extra-records file watcher (writer)
-// and the per-client map builds that clone it (readers). It is a package-level
-// lock so [Config] stays freely copyable during construction.
-var tailcfgDNSMu sync.RWMutex
-
-// CloneTailcfgDNSConfig returns a deep copy of [Config.TailcfgDNSConfig], or
-// nil if none is set. Safe for concurrent use with [Config.SetExtraRecords].
-func (c *Config) CloneTailcfgDNSConfig() *tailcfg.DNSConfig {
-	tailcfgDNSMu.RLock()
-	defer tailcfgDNSMu.RUnlock()
-
-	if c.TailcfgDNSConfig == nil {
-		return nil
-	}
-
-	return c.TailcfgDNSConfig.Clone()
-}
-
-// SetExtraRecords replaces the ExtraRecords of [Config.TailcfgDNSConfig]. Safe
-// for concurrent use with [Config.CloneTailcfgDNSConfig].
-func (c *Config) SetExtraRecords(records []tailcfg.DNSRecord) {
-	tailcfgDNSMu.Lock()
-	defer tailcfgDNSMu.Unlock()
-
-	if c.TailcfgDNSConfig != nil {
-		c.TailcfgDNSConfig.ExtraRecords = records
-	}
-}
diff --git a/hscontrol/types/config_test.go b/hscontrol/types/config_test.go
index d0859758c..d3b23a2db 100644
--- a/hscontrol/types/config_test.go
+++ b/hscontrol/types/config_test.go
@@ -3,7 +3,6 @@ package types
 import (
 	"encoding/json"
 	"fmt"
-	"net/netip"
 	"os"
 	"path/filepath"
 	"testing"
@@ -412,105 +411,6 @@ tls_letsencrypt_challenge_type: TLS-ALPN-01
 	require.NoError(t, err)
 }
 
-func TestPKCEMethodValidation(t *testing.T) {
-	tmpDir := t.TempDir()
-
-	// OIDC is active (issuer set) with PKCE enabled and an invalid method.
-	// There is no oidc.enabled key. validateServerConfig must reject the
-	// invalid method rather than silently skipping the check.
-	configYaml := []byte(`---
-noise:
-  private_key_path: noise_private.key
-server_url: http://127.0.0.1:8080
-dns:
-  override_local_dns: false
-oidc:
-  issuer: https://idp.example.com
-  client_id: headscale
-  pkce:
-    enabled: true
-    method: S256-typo
-`)
-
-	configFilePath := filepath.Join(tmpDir, "config.yaml")
-	err := os.WriteFile(configFilePath, configYaml, 0o600)
-	require.NoError(t, err)
-
-	err = LoadConfig(tmpDir, false)
-	require.NoError(t, err)
-
-	err = validateServerConfig()
-	require.Error(t, err)
-	assert.Contains(t, err.Error(), errInvalidPKCEMethod.Error())
-}
-
-// TestOIDCConfigValidation covers the issuer-URL and required-field checks that
-// fail an unworkable OIDC setup fast at config load.
-func TestOIDCConfigValidation(t *testing.T) {
-	tests := []struct {
-		name      string
-		oidcBlock string
-		wantErr   string
-	}{
-		{
-			name: "non-http issuer",
-			oidcBlock: `
-  issuer: ftp://idp.example.com
-  client_id: headscale
-  client_secret: sekret`,
-			wantErr: "valid http(s) URL",
-		},
-		{
-			name: "missing client_id",
-			oidcBlock: `
-  issuer: https://idp.example.com
-  client_secret: sekret`,
-			wantErr: "client_id is required",
-		},
-		{
-			name: "missing client_secret",
-			oidcBlock: `
-  issuer: https://idp.example.com
-  client_id: headscale`,
-			wantErr: "client_secret",
-		},
-		{
-			name: "valid",
-			oidcBlock: `
-  issuer: https://idp.example.com
-  client_id: headscale
-  client_secret: sekret`,
-			wantErr: "",
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			tmpDir := t.TempDir()
-			configYaml := []byte(`---
-noise:
-  private_key_path: noise_private.key
-server_url: http://127.0.0.1:8080
-dns:
-  override_local_dns: false
-oidc:` + tt.oidcBlock + "\n")
-
-			require.NoError(t, os.WriteFile(filepath.Join(tmpDir, "config.yaml"), configYaml, 0o600))
-			require.NoError(t, LoadConfig(tmpDir, false))
-
-			err := validateServerConfig()
-			if tt.wantErr == "" {
-				require.NoError(t, err)
-
-				return
-			}
-
-			require.Error(t, err)
-			assert.Contains(t, err.Error(), tt.wantErr)
-		})
-	}
-}
-
 // OK
 // server_url: headscale.com, base: clients.headscale.com
 // server_url: headscale.com, base: headscale.net
@@ -574,49 +474,8 @@ func TestSafeServerURL(t *testing.T) {
 	}
 }
 
-func TestSafeServerURLWithPort(t *testing.T) {
-	tests := []struct {
-		serverURL, baseDomain,
-		wantErr string
-	}{
-		{
-			serverURL:  "https://server.headscale.com:443",
-			baseDomain: "headscale.com",
-			wantErr:    errServerURLSuffix.Error(),
-		},
-		{
-			serverURL:  "https://server.subdomain.headscale.com:8080",
-			baseDomain: "headscale.com",
-			wantErr:    errServerURLSuffix.Error(),
-		},
-		{
-			serverURL:  "https://headscale.com:443",
-			baseDomain: "headscale.com",
-			wantErr:    errServerURLSame.Error(),
-		},
-		{
-			serverURL:  "https://example.com:8080",
-			baseDomain: "example.org",
-		},
-	}
-
-	for _, tt := range tests {
-		testName := fmt.Sprintf("server=%s domain=%s", tt.serverURL, tt.baseDomain)
-		t.Run(testName, func(t *testing.T) {
-			err := isSafeServerURL(tt.serverURL, tt.baseDomain)
-			if tt.wantErr != "" {
-				assert.EqualError(t, err, tt.wantErr)
-
-				return
-			}
-
-			assert.NoError(t, err)
-		})
-	}
-}
-
-// TestConfigJSONOmitsSecrets verifies that marshalling a [Config] to JSON
-// (as /debug/config does via [state.State.DebugConfig]) does not leak the
+// TestConfigJSONOmitsSecrets verifies that marshalling a Config to JSON
+// (as /debug/config does via state.DebugConfig) does not leak the
 // Postgres password, the OIDC client secret, or the headscale admin
 // API key. Operators who widen metrics_listen_addr to 0.0.0.0 should
 // not be able to read these back via debug endpoints reachable over
@@ -651,93 +510,3 @@ func TestConfigJSONOmitsSecrets(t *testing.T) {
 			"marshalled Config must not contain secret %q", secret)
 	}
 }
-
-//nolint:goconst // repeated CIDR strings are test fixtures, not refactor candidates
-func TestTrustedProxies(t *testing.T) {
-	tests := []struct {
-		name    string
-		input   any
-		want    []netip.Prefix
-		wantErr string
-	}{
-		{
-			name:  "unset",
-			input: nil,
-			want:  nil,
-		},
-		{
-			name:  "empty",
-			input: []string{},
-			want:  nil,
-		},
-		{
-			name:  "single-v4",
-			input: []string{"10.0.0.0/16"},
-			want:  []netip.Prefix{netip.MustParsePrefix("10.0.0.0/16")},
-		},
-		{
-			name:  "single-v6",
-			input: []string{"fd00::/8"},
-			want:  []netip.Prefix{netip.MustParsePrefix("fd00::/8")},
-		},
-		{
-			name:  "mixed-v4-v6",
-			input: []string{"127.0.0.1/32", "::1/128", "10.0.0.0/16"},
-			want: []netip.Prefix{
-				netip.MustParsePrefix("127.0.0.1/32"),
-				netip.MustParsePrefix("::1/128"),
-				netip.MustParsePrefix("10.0.0.0/16"),
-			},
-		},
-		{
-			name:  "non-canonical-masked",
-			input: []string{"10.0.0.5/16"},
-			want:  []netip.Prefix{netip.MustParsePrefix("10.0.0.0/16")},
-		},
-		{
-			name:    "bare-ip-rejected",
-			input:   []string{"10.0.0.1"},
-			wantErr: `trusted_proxies[0] "10.0.0.1"`,
-		},
-		{
-			name:    "garbage-reports-index",
-			input:   []string{"10.0.0.0/16", "not-an-ip"},
-			wantErr: `trusted_proxies[1] "not-an-ip"`,
-		},
-		{
-			name:    "ipv4-zero-rejected",
-			input:   []string{"0.0.0.0/0"},
-			wantErr: "0.0.0.0/0 and ::/0 are not allowed",
-		},
-		{
-			name:    "ipv6-zero-rejected",
-			input:   []string{"::/0"},
-			wantErr: "0.0.0.0/0 and ::/0 are not allowed",
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			viper.Reset()
-
-			if tt.input != nil {
-				viper.Set("trusted_proxies", tt.input)
-			}
-
-			got, err := trustedProxies()
-
-			if tt.wantErr != "" {
-				require.Error(t, err)
-				assert.Contains(t, err.Error(), tt.wantErr)
-
-				return
-			}
-
-			require.NoError(t, err)
-
-			if diff := cmp.Diff(tt.want, got, cmpopts.EquateComparable(netip.Prefix{})); diff != "" {
-				t.Errorf("trustedProxies() mismatch (-want +got):\n%s", diff)
-			}
-		})
-	}
-}
diff --git a/hscontrol/types/const.go b/hscontrol/types/const.go
index ba15df528..019c14b62 100644
--- a/hscontrol/types/const.go
+++ b/hscontrol/types/const.go
@@ -11,5 +11,6 @@ const (
 	JSONLogFormat = "json"
 	TextLogFormat = "text"
 
+	KeepAliveInterval = 60 * time.Second
 	MaxHostnameLength = 255
 )
diff --git a/hscontrol/types/derp_config_test.go b/hscontrol/types/derp_config_test.go
deleted file mode 100644
index ffff3ed27..000000000
--- a/hscontrol/types/derp_config_test.go
+++ /dev/null
@@ -1,28 +0,0 @@
-package types
-
-import (
-	"testing"
-
-	"github.com/spf13/viper"
-)
-
-// TestDerpConfigSkipsMalformedURL ensures a malformed derp.urls entry is
-// skipped (as the "ignoring..." log promises) rather than dereferencing the
-// nil *url.URL that url.Parse returns on error, which crashed the server at
-// startup.
-func TestDerpConfigSkipsMalformedURL(t *testing.T) {
-	viper.Reset()
-	defer viper.Reset()
-
-	viper.Set("derp.urls", []string{
-		"https://controlplane.tailscale.com/derpmap/default",
-		"://bad",
-	})
-
-	cfg := derpConfig()
-
-	if len(cfg.URLs) != 1 {
-		t.Fatalf("expected the malformed derp.urls entry to be skipped, got %d urls: %v",
-			len(cfg.URLs), cfg.URLs)
-	}
-}
diff --git a/hscontrol/types/node.go b/hscontrol/types/node.go
index ef9467373..2a4e0e7d0 100644
--- a/hscontrol/types/node.go
+++ b/hscontrol/types/node.go
@@ -3,23 +3,23 @@ package types
 import (
 	"errors"
 	"fmt"
-	"maps"
 	"net/netip"
 	"slices"
 	"strconv"
 	"strings"
 	"time"
 
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/policy/matcher"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
 	"github.com/rs/zerolog"
 	"go4.org/netipx"
+	"google.golang.org/protobuf/types/known/timestamppb"
 	"tailscale.com/net/tsaddr"
 	"tailscale.com/tailcfg"
 	"tailscale.com/types/key"
 	"tailscale.com/types/views"
-	"tailscale.com/util/dnsname"
 )
 
 var (
@@ -32,42 +32,21 @@ var (
 )
 
 // RouteFunc is a function that takes a node ID and returns a list of
-// [netip.Prefix] values representing the routes for that node.
+// netip.Prefixes representing the routes for that node.
 type RouteFunc func(id NodeID) []netip.Prefix
 
-// nodeAttrDisableIPv4 is the policy nodeAttr key that suppresses the
-// node's own IPv4 CGNAT prefix in [tailcfg.Node.Addresses] and
-// [tailcfg.Node.AllowedIPs]. Subnet routes the node advertises remain.
-// See https://tailscale.com/docs/reference/troubleshooting/network-configuration/cgnat-conflicts.
-const nodeAttrDisableIPv4 tailcfg.NodeCapability = "disable-ipv4"
-
-// filterIPv4 returns ps with every IPv4 prefix dropped. Used by
-// [NodeView.TailNode] when the node carries the disable-ipv4 nodeAttr.
-func filterIPv4(ps []netip.Prefix) []netip.Prefix {
-	out := ps[:0:0]
-	for _, p := range ps {
-		if p.Addr().Is4() {
-			continue
-		}
-
-		out = append(out, p)
-	}
-
-	return out
-}
-
 // ViaRouteResult describes via grant effects for a viewer-peer pair.
-// [ViaRouteResult.UsePrimary] is always a subset of [ViaRouteResult.Include]: it marks which included
+// UsePrimary is always a subset of Include: it marks which included
 // prefixes must additionally defer to HA primary election.
 type ViaRouteResult struct {
 	// Include contains prefixes this peer should serve to this viewer (via-designated).
 	Include []netip.Prefix
 	// Exclude contains prefixes steered to OTHER peers (suppress from global primary).
 	Exclude []netip.Prefix
-	// UsePrimary contains prefixes from [ViaRouteResult.Include] where a regular
+	// UsePrimary contains prefixes from Include where a regular
 	// (non-via) grant also covers the prefix. In these cases HA
 	// primary election wins — only the primary router should get
-	// the route in [tailcfg.Node.AllowedIPs]. When a prefix is NOT in [ViaRouteResult.UsePrimary],
+	// the route in AllowedIPs. When a prefix is NOT in UsePrimary,
 	// per-viewer via steering applies.
 	UsePrimary []netip.Prefix
 }
@@ -77,6 +56,10 @@ type (
 	NodeIDs []NodeID
 )
 
+func (n NodeIDs) Len() int           { return len(n) }
+func (n NodeIDs) Less(i, j int) bool { return n[i] < n[j] }
+func (n NodeIDs) Swap(i, j int)      { n[i], n[j] = n[j], n[i] }
+
 func (id NodeID) StableID() tailcfg.StableNodeID {
 	return tailcfg.StableNodeID(strconv.FormatUint(uint64(id), util.Base10))
 }
@@ -93,16 +76,6 @@ func (id NodeID) String() string {
 	return strconv.FormatUint(id.Uint64(), util.Base10)
 }
 
-// StringID returns the node's id as a decimal string, the form the HTTP APIs
-// render it as.
-func (node *Node) StringID() string {
-	if node == nil {
-		return ""
-	}
-
-	return node.ID.String()
-}
-
 func ParseNodeID(s string) (NodeID, error) {
 	id, err := strconv.ParseUint(s, util.Base10, 64)
 	return NodeID(id), err
@@ -125,7 +98,7 @@ type Node struct {
 	NodeKey    key.NodePublic    `gorm:"serializer:text"`
 	DiscoKey   key.DiscoPublic   `gorm:"serializer:text"`
 
-	Endpoints AddrPorts `gorm:"serializer:json"`
+	Endpoints []netip.AddrPort `gorm:"serializer:json"`
 
 	Hostinfo *tailcfg.Hostinfo `gorm:"column:host_info;serializer:json"`
 
@@ -137,8 +110,8 @@ type Node struct {
 	Hostname string
 
 	// Givenname represents either:
-	// a DNS normalized version of [Node.Hostname]
-	// a valid name set by the [User]
+	// a DNS normalized version of Hostname
+	// a valid name set by the User
 	//
 	// GivenName is the name used in all DNS related
 	// parts of headscale.
@@ -155,9 +128,9 @@ type Node struct {
 	// When non-empty, the node is "tagged" and tags define its identity.
 	// Empty for user-owned nodes.
 	// Tags cannot be removed once set (one-way transition).
-	Tags Strings `gorm:"column:tags;serializer:json"`
+	Tags []string `gorm:"column:tags;serializer:json"`
 
-	// When a node has been created with a [PreAuthKey], we need to
+	// When a node has been created with a PreAuthKey, we need to
 	// prevent the preauthkey from being deleted before the node.
 	// The preauthkey can define "tags" of the node so we need it
 	// around.
@@ -174,7 +147,7 @@ type Node struct {
 	// as a subnet router. They are not necessarily the routes that the node
 	// announces at the moment.
 	// See [Node.Hostinfo]
-	ApprovedRoutes Prefixes `gorm:"column:approved_routes;serializer:json"`
+	ApprovedRoutes []netip.Prefix `gorm:"column:approved_routes;serializer:json"`
 
 	CreatedAt time.Time
 	UpdatedAt time.Time
@@ -186,21 +159,10 @@ type Node struct {
 	// online. Written by the HA prober. Runtime-only.
 	Unhealthy bool `gorm:"-"`
 
-	// ActiveSessions counts live poll sessions for this node.
-	// [State.Connect] increments it and every session release
-	// ([State.Disconnect]) decrements it, so the node goes offline
-	// exactly when its last session ends — regardless of the order in
-	// which overlapping sessions' cleanups run. Never persisted, like
-	// SessionEpoch.
-	ActiveSessions int `gorm:"-"`
-
-	// SessionEpoch identifies a poll session generation; Connect bumps
-	// it. It complements ActiveSessions rather than duplicating it:
-	// the epoch is monotonic, which the HA prober needs to detect that
-	// a probe target reconnected mid-cycle — a refcount can return to
-	// its old value, a generation cannot. poll.go also uses the epoch
-	// returned by Connect as a "Connect ran" sentinel for its cleanup,
-	// and Disconnect logs it. Runtime-only.
+	// SessionEpoch identifies a poll session. Connect bumps it; a
+	// Disconnect carrying a stale value is dropped, so a deferred
+	// disconnect from a previous session cannot overwrite a newer
+	// Connect. Runtime-only.
 	SessionEpoch uint64 `gorm:"-"`
 }
 
@@ -252,7 +214,13 @@ func (node *Node) IPs() []netip.Addr {
 
 // HasIP reports if a node has a given IP address.
 func (node *Node) HasIP(i netip.Addr) bool {
-	return slices.Contains(node.IPs(), i)
+	for _, ip := range node.IPs() {
+		if ip.Compare(i) == 0 {
+			return true
+		}
+	}
+
+	return false
 }
 
 // IsTagged reports if a device is tagged and therefore should not be treated
@@ -273,8 +241,8 @@ func (node *Node) HasTag(tag string) bool {
 	return slices.Contains(node.Tags, tag)
 }
 
-// TypedUserID returns the [Node.UserID] as a typed [UserID] type.
-// Returns 0 if [Node.UserID] is nil.
+// TypedUserID returns the UserID as a typed UserID type.
+// Returns 0 if UserID is nil.
 func (node *Node) TypedUserID() UserID {
 	if node.UserID == nil {
 		return 0
@@ -309,7 +277,7 @@ func (node *Node) Prefixes() []netip.Prefix {
 
 // ExitRoutes returns the node's approved exit routes (0.0.0.0/0
 // and/or ::/0). Consumed unconditionally by RoutesForPeer when the
-// viewer uses an exit node; excluded from [Node.CanAccessRoute] which only
+// viewer uses an exit node; excluded from CanAccessRoute which only
 // handles non-exit routing.
 func (node *Node) ExitRoutes() []netip.Prefix {
 	var routes []netip.Prefix
@@ -325,7 +293,7 @@ func (node *Node) ExitRoutes() []netip.Prefix {
 
 // IsExitNode reports whether the node has any approved exit routes.
 // Approval is required: an advertised-but-unapproved exit route does
-// not make the node an exit node.
+// not make the node an exit node (fix for #3169).
 func (node *Node) IsExitNode() bool {
 	return len(node.ExitRoutes()) > 0
 }
@@ -350,9 +318,9 @@ func (node *Node) InIPSet(set *netipx.IPSet) bool {
 }
 
 // AppendToIPSet adds all IP addresses of the node to the given
-// [netipx.IPSetBuilder]. For identity-based aliases (tags, users,
+// netipx.IPSetBuilder. For identity-based aliases (tags, users,
 // groups, autogroups), both IPv4 and IPv6 must be included to
-// match Tailscale's behavior in the [tailcfg.FilterRule] wire format.
+// match Tailscale's behavior in the FilterRule wire format.
 func (node *Node) AppendToIPSet(build *netipx.IPSetBuilder) {
 	if node.IPv4 != nil {
 		build.Add(*node.IPv4)
@@ -367,27 +335,17 @@ func (node *Node) AppendToIPSet(build *netipx.IPSetBuilder) {
 // matchers. A node owns two source identities for ACL purposes:
 //   - its own IPs (regular peer membership)
 //   - any approved subnet routes it advertises (subnet-router-as-src,
-//     used for subnet-to-subnet ACLs)
+//     used for subnet-to-subnet ACLs — issue #3157)
 //
 // Either identity matching a rule's src — combined with the dst
 // matching node2's IPs, node2's approved subnet routes, or "the
 // internet" when node2 is an exit node — grants access.
 func (node *Node) CanAccess(matchers []matcher.Match, node2 *Node) bool {
-	return node.canAccess(matchers, node2, node.SubnetRoutes(), node2.SubnetRoutes(), node2.IsExitNode())
-}
-
-// canAccess is [Node.CanAccess] with the snapshot-stable route data supplied by
-// the caller. The peer-map build precomputes each node's SubnetRoutes and
-// exit-node status once and passes them here, so the O(n^2) pair scan does not
-// recompute them for every pair.
-func (node *Node) canAccess(
-	matchers []matcher.Match,
-	node2 *Node,
-	srcRoutes, dstRoutes []netip.Prefix,
-	dstIsExit bool,
-) bool {
 	src := node.IPs()
 	allowedIPs := node2.IPs()
+	srcRoutes := node.SubnetRoutes()
+	dstRoutes := node2.SubnetRoutes()
+	dstIsExit := node2.IsExitNode()
 
 	for _, m := range matchers {
 		srcMatchesIP := m.SrcsContainsIPs(src...)
@@ -416,18 +374,18 @@ func (node *Node) canAccess(
 // CanAccessRoute determines whether a specific route prefix should be
 // visible to this node based on the given matchers.
 //
-// Unlike [Node.CanAccess], this function intentionally does NOT check
-// [matcher.Match.DestsIsTheInternet]. Exit routes (0.0.0.0/0, ::/0) are handled by
+// Unlike CanAccess, this function intentionally does NOT check
+// DestsIsTheInternet(). Exit routes (0.0.0.0/0, ::/0) are handled by
 // RoutesForPeer (state.go) which adds them unconditionally from
-// [Node.ExitRoutes], not through ACL-based route filtering. The
-// [matcher.Match.DestsIsTheInternet] check in [Node.CanAccess] exists solely for peer
+// ExitRoutes(), not through ACL-based route filtering. The
+// DestsIsTheInternet check in CanAccess exists solely for peer
 // visibility determination (should two nodes see each other), which
 // is a separate concern from route prefix authorization.
 //
 // Additionally, autogroup:internet is explicitly skipped during filter
 // rule compilation (filter.go), so no matchers ever contain "the
 // internet" from internet-targeted ACLs. Wildcard "*" dests produce
-// matchers where [matcher.Match.DestsOverlapsPrefixes](0.0.0.0/0) already returns
+// matchers where DestsOverlapsPrefixes(0.0.0.0/0) already returns
 // true, so the check would be redundant for that case.
 func (node *Node) CanAccessRoute(matchers []matcher.Match, route netip.Prefix) bool {
 	src := node.IPs()
@@ -492,6 +450,55 @@ func (nodes Nodes) ContainsNodeKey(nodeKey key.NodePublic) bool {
 	return false
 }
 
+func (node *Node) Proto() *v1.Node {
+	nodeProto := &v1.Node{
+		Id:         uint64(node.ID),
+		MachineKey: node.MachineKey.String(),
+
+		NodeKey:  node.NodeKey.String(),
+		DiscoKey: node.DiscoKey.String(),
+
+		// TODO(kradalby): replace list with v4, v6 field?
+		IpAddresses: node.IPsAsString(),
+		Name:        node.Hostname,
+		GivenName:   node.GivenName,
+		User:        nil, // Will be set below based on node type
+		Tags:        node.Tags,
+		Online:      node.IsOnline != nil && *node.IsOnline,
+
+		// Only ApprovedRoutes and AvailableRoutes is set here. SubnetRoutes has
+		// to be populated manually with PrimaryRoute, to ensure it includes the
+		// routes that are actively served from the node.
+		ApprovedRoutes:  util.PrefixesToString(node.ApprovedRoutes),
+		AvailableRoutes: util.PrefixesToString(node.AnnouncedRoutes()),
+
+		RegisterMethod: node.RegisterMethodToV1Enum(),
+
+		CreatedAt: timestamppb.New(node.CreatedAt),
+	}
+
+	// Set User field based on node ownership
+	// Note: User will be set to TaggedDevices in the gRPC layer (grpcv1.go)
+	// for proper MapResponse formatting
+	if node.User != nil {
+		nodeProto.User = node.User.Proto()
+	}
+
+	if node.AuthKey != nil {
+		nodeProto.PreAuthKey = node.AuthKey.Proto()
+	}
+
+	if node.LastSeen != nil {
+		nodeProto.LastSeen = timestamppb.New(*node.LastSeen)
+	}
+
+	if node.Expiry != nil {
+		nodeProto.Expiry = timestamppb.New(*node.Expiry)
+	}
+
+	return nodeProto
+}
+
 func (node *Node) GetFQDN(baseDomain string) (string, error) {
 	if node.GivenName == "" {
 		return "", fmt.Errorf("creating valid FQDN: %w", ErrNodeHasNoGivenName)
@@ -518,31 +525,9 @@ func (node *Node) GetFQDN(baseDomain string) (string, error) {
 	return hostname, nil
 }
 
-// ValidateGivenName reports whether givenName is usable as a node's DNS label:
-// a valid DNS label that, combined with baseDomain, yields an FQDN within
-// MaxHostnameLength. Admin-facing write paths (e.g. node rename) reject names
-// that fail this, since the mapper cannot build a map for a node — or any of
-// its peers — whose GetFQDN fails. Derived paths sanitise/coerce instead.
-func ValidateGivenName(givenName, baseDomain string) error {
-	err := dnsname.ValidLabel(givenName)
-	if err != nil {
-		return fmt.Errorf("%q is not a valid DNS label: %w", givenName, err)
-	}
-
-	// Reuse GetFQDN so the length bound stays identical to what the mapper
-	// enforces; a valid 63-char label can still overflow under a long
-	// base_domain.
-	_, err = (&Node{GivenName: givenName}).GetFQDN(baseDomain)
-	if err != nil {
-		return err
-	}
-
-	return nil
-}
-
 // AnnouncedRoutes returns the list of routes the node announces, as
-// reported by the client in [tailcfg.Hostinfo.RoutableIPs]. Announcement alone
-// does not grant visibility — see [Node.SubnetRoutes] for approval-gated
+// reported by the client in Hostinfo.RoutableIPs. Announcement alone
+// does not grant visibility — see SubnetRoutes for approval-gated
 // access.
 func (node *Node) AnnouncedRoutes() []netip.Prefix {
 	if node.Hostinfo == nil {
@@ -553,12 +538,14 @@ func (node *Node) AnnouncedRoutes() []netip.Prefix {
 }
 
 // SubnetRoutes returns the list of routes (excluding exit routes) that the node
-// announces and are approved. Also used by [Node.CanAccess] and [Node.CanAccessRoute] as part
-// of the subnet-router-as-source identity.
+// announces and are approved. Also used by CanAccess and CanAccessRoute as part
+// of the subnet-router-as-source identity (issue #3157).
 //
-// IMPORTANT: This method reflects announced-and-approved routes. API
-// responses that need the routes actively served by the node must
-// populate SubnetRoutes from the primary-route election instead.
+// IMPORTANT: This method is used for internal data structures and should NOT be
+// used for the gRPC Proto conversion. For Proto, SubnetRoutes must be populated
+// manually with PrimaryRoutes to ensure it includes only routes actively served
+// by the node. See the comment in Proto() method and the implementation in
+// grpcv1.go/nodesToProto.
 func (node *Node) SubnetRoutes() []netip.Prefix {
 	var routes []netip.Prefix
 
@@ -580,7 +567,7 @@ func (node *Node) IsSubnetRouter() bool {
 	return len(node.SubnetRoutes()) > 0
 }
 
-// AllApprovedRoutes returns the combination of [Node.SubnetRoutes] and [Node.ExitRoutes].
+// AllApprovedRoutes returns the combination of SubnetRoutes and ExitRoutes.
 func (node *Node) AllApprovedRoutes() []netip.Prefix {
 	return append(node.SubnetRoutes(), node.ExitRoutes()...)
 }
@@ -589,9 +576,9 @@ func (node *Node) String() string {
 	return node.Hostname
 }
 
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler] for safe logging.
-// This method is used with [zerolog.Event.EmbedObject] for flat field embedding
-// or [zerolog.Event.Object] for nested logging when multiple nodes are logged.
+// MarshalZerologObject implements zerolog.LogObjectMarshaler for safe logging.
+// This method is used with zerolog's EmbedObject() for flat field embedding
+// or Object() for nested logging when multiple nodes are logged.
 func (node *Node) MarshalZerologObject(e *zerolog.Event) {
 	if node == nil {
 		return
@@ -619,11 +606,11 @@ func (node *Node) MarshalZerologObject(e *zerolog.Event) {
 	}
 }
 
-// PeerChangeFromMapRequest takes a [tailcfg.MapRequest] and compares it to the node
-// to produce a [tailcfg.PeerChange] struct that can be used to updated the node and
+// PeerChangeFromMapRequest takes a MapRequest and compares it to the node
+// to produce a PeerChange struct that can be used to updated the node and
 // inform peers about smaller changes to the node.
 // When a field is added to this function, remember to also add it to:
-// - [Node.ApplyPeerChange]
+// - node.ApplyPeerChange
 // - logTracePeerChange in poll.go.
 func (node *Node) PeerChangeFromMapRequest(req tailcfg.MapRequest) tailcfg.PeerChange {
 	ret := tailcfg.PeerChange{
@@ -638,11 +625,23 @@ func (node *Node) PeerChangeFromMapRequest(req tailcfg.MapRequest) tailcfg.PeerC
 		ret.DiscoKey = &req.DiscoKey
 	}
 
+	if node.Hostinfo != nil &&
+		node.Hostinfo.NetInfo != nil &&
+		req.Hostinfo != nil &&
+		req.Hostinfo.NetInfo != nil &&
+		node.Hostinfo.NetInfo.PreferredDERP != req.Hostinfo.NetInfo.PreferredDERP {
+		ret.DERPRegion = req.Hostinfo.NetInfo.PreferredDERP
+	}
+
 	if req.Hostinfo != nil && req.Hostinfo.NetInfo != nil {
-		// Use the new PreferredDERP when there is no stored Hostinfo or
-		// NetInfo, or when the stored PreferredDERP has changed.
-		if node.Hostinfo == nil || node.Hostinfo.NetInfo == nil ||
-			node.Hostinfo.NetInfo.PreferredDERP != req.Hostinfo.NetInfo.PreferredDERP {
+		// If there is no stored Hostinfo or NetInfo, use
+		// the new PreferredDERP.
+		if node.Hostinfo == nil {
+			ret.DERPRegion = req.Hostinfo.NetInfo.PreferredDERP
+		} else if node.Hostinfo.NetInfo == nil {
+			ret.DERPRegion = req.Hostinfo.NetInfo.PreferredDERP
+		} else if node.Hostinfo.NetInfo.PreferredDERP != req.Hostinfo.NetInfo.PreferredDERP {
+			// If there is a PreferredDERP check if it has changed.
 			ret.DERPRegion = req.Hostinfo.NetInfo.PreferredDERP
 		}
 	}
@@ -661,10 +660,39 @@ func (node *Node) PeerChangeFromMapRequest(req tailcfg.MapRequest) tailcfg.PeerC
 // EndpointsChanged compares two endpoint slices and returns true if they differ.
 // The comparison is order-independent - endpoints are sorted before comparison.
 func EndpointsChanged(oldEndpoints, newEndpoints []netip.AddrPort) bool {
-	return !equalUnordered(oldEndpoints, newEndpoints, netip.AddrPort.Compare)
+	if len(oldEndpoints) != len(newEndpoints) {
+		return true
+	}
+
+	if len(oldEndpoints) == 0 {
+		return false
+	}
+
+	// Make copies to avoid modifying the original slices
+	oldCopy := slices.Clone(oldEndpoints)
+	newCopy := slices.Clone(newEndpoints)
+
+	// Sort both slices to enable order-independent comparison
+	slices.SortFunc(oldCopy, netip.AddrPort.Compare)
+	slices.SortFunc(newCopy, netip.AddrPort.Compare)
+
+	return !slices.Equal(oldCopy, newCopy)
 }
 
-// ApplyPeerChange takes a [tailcfg.PeerChange] struct and updates the node.
+func (node *Node) RegisterMethodToV1Enum() v1.RegisterMethod {
+	switch node.RegisterMethod {
+	case "authkey":
+		return v1.RegisterMethod_REGISTER_METHOD_AUTH_KEY
+	case "oidc":
+		return v1.RegisterMethod_REGISTER_METHOD_OIDC
+	case "cli":
+		return v1.RegisterMethod_REGISTER_METHOD_CLI
+	default:
+		return v1.RegisterMethod_REGISTER_METHOD_UNSPECIFIED
+	}
+}
+
+// ApplyPeerChange takes a PeerChange struct and updates the node.
 func (node *Node) ApplyPeerChange(change *tailcfg.PeerChange) {
 	if change.Key != nil {
 		node.NodeKey = *change.Key
@@ -685,21 +713,19 @@ func (node *Node) ApplyPeerChange(change *tailcfg.PeerChange) {
 	// This might technically not be useful as we replace
 	// the whole hostinfo blob when it has changed.
 	if change.DERPRegion != 0 {
-		// [NodeStore] publishes snapshots that share the *Hostinfo /
-		// *NetInfo pointers, so writing PreferredDERP in place would race
-		// readers of an already-published snapshot. Clone to fresh pointers
-		// and assign, leaving the previous snapshot untouched.
-		hi := node.Hostinfo.Clone()
-		if hi == nil {
-			hi = &tailcfg.Hostinfo{}
+		if node.Hostinfo == nil {
+			node.Hostinfo = &tailcfg.Hostinfo{
+				NetInfo: &tailcfg.NetInfo{
+					PreferredDERP: change.DERPRegion,
+				},
+			}
+		} else if node.Hostinfo.NetInfo == nil {
+			node.Hostinfo.NetInfo = &tailcfg.NetInfo{
+				PreferredDERP: change.DERPRegion,
+			}
+		} else {
+			node.Hostinfo.NetInfo.PreferredDERP = change.DERPRegion
 		}
-
-		if hi.NetInfo == nil {
-			hi.NetInfo = &tailcfg.NetInfo{}
-		}
-
-		hi.NetInfo.PreferredDERP = change.DERPRegion
-		node.Hostinfo = hi
 	}
 
 	node.LastSeen = change.LastSeen
@@ -764,8 +790,8 @@ func (node *Node) DebugString() string {
 	return sb.String()
 }
 
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler] for [NodeView].
-// This delegates to the underlying [Node]'s implementation.
+// MarshalZerologObject implements zerolog.LogObjectMarshaler for NodeView.
+// This delegates to the underlying Node's implementation.
 func (nv NodeView) MarshalZerologObject(e *zerolog.Event) {
 	if !nv.Valid() {
 		return
@@ -775,8 +801,8 @@ func (nv NodeView) MarshalZerologObject(e *zerolog.Event) {
 }
 
 // Owner returns the owner for display purposes.
-// For tagged nodes, returns [TaggedDevices]. For user-owned nodes, returns the user.
-// Returns an invalid [UserView] if the node is in an orphaned state (no tags, no user).
+// For tagged nodes, returns TaggedDevices. For user-owned nodes, returns the user.
+// Returns an invalid UserView if the node is in an orphaned state (no tags, no user).
 // Callers should check .Valid() on the result before accessing fields.
 func (nv NodeView) Owner() UserView {
 	if nv.IsTagged() {
@@ -814,21 +840,6 @@ func (nv NodeView) CanAccess(matchers []matcher.Match, node2 NodeView) bool {
 	return nv.ж.CanAccess(matchers, node2.ж)
 }
 
-// CanAccessWithRoutes is [NodeView.CanAccess] with precomputed route data, used
-// by the peer-map build to avoid recomputing each node's routes per pair.
-func (nv NodeView) CanAccessWithRoutes(
-	matchers []matcher.Match,
-	node2 NodeView,
-	srcRoutes, dstRoutes []netip.Prefix,
-	dstIsExit bool,
-) bool {
-	if !nv.Valid() || !node2.Valid() {
-		return false
-	}
-
-	return nv.ж.canAccess(matchers, node2.ж, srcRoutes, dstRoutes, dstIsExit)
-}
-
 func (nv NodeView) CanAccessRoute(matchers []matcher.Match, route netip.Prefix) bool {
 	if !nv.Valid() {
 		return false
@@ -885,16 +896,6 @@ func (nv NodeView) RequestTagsSlice() views.Slice[string] {
 	return nv.Hostinfo().RequestTags()
 }
 
-// StringID returns the node's id as a decimal string, the form the HTTP APIs
-// render it as.
-func (nv NodeView) StringID() string {
-	if !nv.Valid() {
-		return ""
-	}
-
-	return nv.ID().String()
-}
-
 // IsTagged reports if a device is tagged
 // and therefore should not be treated as a
 // user owned device.
@@ -927,8 +928,8 @@ func (nv NodeView) IsEphemeral() bool {
 	return nv.ж.IsEphemeral()
 }
 
-// PeerChangeFromMapRequest takes a [tailcfg.MapRequest] and compares it to the node
-// to produce a [tailcfg.PeerChange] struct that can be used to updated the node and
+// PeerChangeFromMapRequest takes a MapRequest and compares it to the node
+// to produce a PeerChange struct that can be used to updated the node and
 // inform peers about smaller changes to the node.
 func (nv NodeView) PeerChangeFromMapRequest(req tailcfg.MapRequest) tailcfg.PeerChange {
 	if !nv.Valid() {
@@ -975,6 +976,15 @@ func (nv NodeView) RequestTags() []string {
 	return nv.Hostinfo().RequestTags().AsSlice()
 }
 
+// Proto converts the NodeView to a protobuf representation.
+func (nv NodeView) Proto() *v1.Node {
+	if !nv.Valid() {
+		return nil
+	}
+
+	return nv.ж.Proto()
+}
+
 // HasIP reports if a node has a given IP address.
 func (nv NodeView) HasIP(i netip.Addr) bool {
 	if !nv.Valid() {
@@ -993,8 +1003,8 @@ func (nv NodeView) HasTag(tag string) bool {
 	return nv.ж.HasTag(tag)
 }
 
-// TypedUserID returns the [Node.UserID] as a typed [UserID] type.
-// Returns 0 if [Node.UserID] is nil or node is invalid.
+// TypedUserID returns the UserID as a typed UserID type.
+// Returns 0 if UserID is nil or node is invalid.
 func (nv NodeView) TypedUserID() UserID {
 	if !nv.Valid() {
 		return 0
@@ -1004,8 +1014,8 @@ func (nv NodeView) TypedUserID() UserID {
 }
 
 // TailscaleUserID returns the user ID to use in Tailscale protocol.
-// Tagged nodes always return [TaggedDevices].ID, user-owned nodes return their actual [Node.UserID].
-// Returns 0 for nodes in an orphaned state (no tags, no [Node.UserID]).
+// Tagged nodes always return TaggedDevices.ID, user-owned nodes return their actual UserID.
+// Returns 0 for nodes in an orphaned state (no tags, no UserID).
 func (nv NodeView) TailscaleUserID() tailcfg.UserID {
 	if !nv.Valid() {
 		return 0
@@ -1024,7 +1034,7 @@ func (nv NodeView) TailscaleUserID() tailcfg.UserID {
 	return tailcfg.UserID(int64(nv.UserID().Get()))
 }
 
-// Prefixes returns the node IPs as [netip.Prefix].
+// Prefixes returns the node IPs as netip.Prefix.
 func (nv NodeView) Prefixes() []netip.Prefix {
 	if !nv.Valid() {
 		return nil
@@ -1071,13 +1081,6 @@ func (nv NodeView) HasNetworkChanges(other NodeView) bool {
 // prefixes, order-independent. Inputs are cloned before sorting so
 // callers' slices are not mutated.
 func equalPrefixesUnordered(a, b []netip.Prefix) bool {
-	return equalUnordered(a, b, netip.Prefix.Compare)
-}
-
-// equalUnordered reports whether a and b contain the same elements,
-// order-independent. Inputs are cloned before sorting so callers'
-// slices are not mutated.
-func equalUnordered[E comparable](a, b []E, cmp func(E, E) int) bool {
 	if len(a) != len(b) {
 		return false
 	}
@@ -1085,15 +1088,15 @@ func equalUnordered[E comparable](a, b []E, cmp func(E, E) int) bool {
 	ac := slices.Clone(a)
 	bc := slices.Clone(b)
 
-	slices.SortFunc(ac, cmp)
-	slices.SortFunc(bc, cmp)
+	slices.SortFunc(ac, netip.Prefix.Compare)
+	slices.SortFunc(bc, netip.Prefix.Compare)
 
 	return slices.Equal(ac, bc)
 }
 
 // HasPolicyChange reports whether the node has changes that affect
 // policy evaluation. Includes approved subnet routes because they act
-// as source identity in [Node.CanAccess] for subnet-to-subnet ACLs.
+// as source identity in CanAccess for subnet-to-subnet ACLs (#3157).
 func (nv NodeView) HasPolicyChange(other NodeView) bool {
 	if nv.UserID() != other.UserID() {
 		return true
@@ -1114,7 +1117,7 @@ func (nv NodeView) HasPolicyChange(other NodeView) bool {
 	return false
 }
 
-// TailNodes converts a slice of [NodeView] values into Tailscale [tailcfg.Node] values.
+// TailNodes converts a slice of NodeViews into Tailscale tailcfg.Nodes.
 func TailNodes(
 	nodes views.Slice[NodeView],
 	capVer tailcfg.CapabilityVersion,
@@ -1124,9 +1127,7 @@ func TailNodes(
 	tNodes := make([]*tailcfg.Node, 0, nodes.Len())
 
 	for _, node := range nodes.All() {
-		// nil selfPolicyCaps: this batch builds peer views; the caller
-		// sets each peer's CapMap from [policyv2.PeerCapMap].
-		tNode, err := node.TailNode(capVer, primaryRouteFunc, cfg, nil)
+		tNode, err := node.TailNode(capVer, primaryRouteFunc, cfg)
 		if err != nil {
 			return nil, err
 		}
@@ -1137,18 +1138,11 @@ func TailNodes(
 	return tNodes, nil
 }
 
-// TailNode converts a [NodeView] into a Tailscale [tailcfg.Node].
-//
-// selfPolicyCaps is the per-node CapMap from [policy.PolicyManager.NodeCapMap]
-// and is merged into the baseline. Pass it when building the self view of the
-// requesting node; pass nil when building peer views (peer-side
-// [tailcfg.Node.CapMap] is set by the caller from
-// [policyv2.PeerCapMap]).
+// TailNode converts a NodeView into a Tailscale tailcfg.Node.
 func (nv NodeView) TailNode(
 	capVer tailcfg.CapabilityVersion,
 	primaryRouteFunc RouteFunc,
 	cfg *Config,
-	selfPolicyCaps tailcfg.NodeCapMap,
 ) (*tailcfg.Node, error) {
 	if !nv.Valid() {
 		return nil, ErrInvalidNodeView
@@ -1160,7 +1154,11 @@ func (nv NodeView) TailNode(
 	}
 
 	var derp int
+	// TODO(kradalby): legacyDERP was removed in tailscale/tailscale@2fc4455e6dd9ab7f879d4e2f7cffc2be81f14077
+	// and should be removed after 111 is the minimum capver.
+	legacyDERP := "127.3.3.40:0" // Zero means disconnected or unknown.
 	if nv.Hostinfo().Valid() && nv.Hostinfo().NetInfo().Valid() {
+		legacyDERP = fmt.Sprintf("127.3.3.40:%d", nv.Hostinfo().NetInfo().PreferredDERP())
 		derp = nv.Hostinfo().NetInfo().PreferredDERP()
 	}
 
@@ -1169,22 +1167,9 @@ func (nv NodeView) TailNode(
 		keyExpiry = nv.Expiry().Get()
 	}
 
-	// disable-ipv4 (https://tailscale.com/docs/reference/troubleshooting/network-configuration/cgnat-conflicts)
-	// drops the node's own IPv4 CGNAT prefix from Addresses and from
-	// the AllowedIPs slot the node's own /32 occupies. Advertised
-	// subnet routes -- even IPv4 ones -- survive: routes belong to
-	// the routing layer, not the node's identity. Mirrors the SaaS
-	// captures in testdata/nodeattrs_results/nodeattrs-attr-c1{5,6}-disable-ipv4*.
-	_, ipv4Disabled := selfPolicyCaps[nodeAttrDisableIPv4]
-
-	addresses := nv.Prefixes()
-	if ipv4Disabled {
-		addresses = filterIPv4(addresses)
-	}
-
 	// routeFunc returns ALL routes (subnet + exit) for this node.
 	allRoutes := primaryRouteFunc(nv.ID())
-	allowedIPs := slices.Concat(addresses, allRoutes)
+	allowedIPs := slices.Concat(nv.Prefixes(), allRoutes)
 	slices.SortFunc(allowedIPs, netip.Prefix.Compare)
 
 	// PrimaryRoutes only includes non-exit subnet routes for HA tracking.
@@ -1196,33 +1181,23 @@ func (nv NodeView) TailNode(
 		}
 	}
 
-	// Baseline caps every node receives, regardless of policy. Mirrors
-	// what Tailscale SaaS emits for a default tailnet.
-	// cfg.Taildrop.Enabled gates CapabilityFileSharing.
 	capMap := tailcfg.NodeCapMap{
 		tailcfg.CapabilityAdmin: []tailcfg.RawMessage{},
 		tailcfg.CapabilitySSH:   []tailcfg.RawMessage{},
 	}
+	if cfg.RandomizeClientPort {
+		capMap[tailcfg.NodeAttrRandomizeClientPort] = []tailcfg.RawMessage{}
+	}
 
 	if cfg.Taildrop.Enabled {
 		capMap[tailcfg.CapabilityFileSharing] = []tailcfg.RawMessage{}
 	}
 
-	// default-auto-update is always emitted; the value is a JSON bool
-	// reflecting cfg.AutoUpdate.Enabled. Clients read this on first
-	// netmap and store the default locally; subsequent control-plane
-	// changes are ignored unless the client has not yet opted in or
-	// out.
-	autoUpdateVal := tailcfg.RawMessage("false")
-	if cfg.AutoUpdate.Enabled {
-		autoUpdateVal = tailcfg.RawMessage("true")
-	}
-
-	capMap[tailcfg.NodeAttrDefaultAutoUpdate] = []tailcfg.RawMessage{autoUpdateVal}
-
-	// Policy nodeAttrs overlay the baseline on the self view. Peers
-	// pass nil; their CapMap is replaced downstream by [policyv2.PeerCapMap].
-	maps.Copy(capMap, selfPolicyCaps)
+	// Enable Taildrive sharing and access on all nodes. The actual
+	// access control is enforced by cap/drive grants in FilterRules;
+	// without a matching grant these attributes alone do nothing.
+	capMap[tailcfg.NodeAttrsTaildriveShare] = []tailcfg.RawMessage{}
+	capMap[tailcfg.NodeAttrsTaildriveAccess] = []tailcfg.RawMessage{}
 
 	tNode := tailcfg.Node{
 		//nolint:gosec // G115: NodeID values are within int64 range
@@ -1237,15 +1212,16 @@ func (nv NodeView) TailNode(
 		Key:       nv.NodeKey(),
 		KeyExpiry: keyExpiry.UTC(),
 
-		Machine:       nv.MachineKey(),
-		DiscoKey:      nv.DiscoKey(),
-		Addresses:     addresses,
-		PrimaryRoutes: primaryRoutes,
-		AllowedIPs:    allowedIPs,
-		Endpoints:     nv.Endpoints().AsSlice(),
-		HomeDERP:      derp,
-		Hostinfo:      nv.Hostinfo(),
-		Created:       nv.CreatedAt().UTC(),
+		Machine:          nv.MachineKey(),
+		DiscoKey:         nv.DiscoKey(),
+		Addresses:        nv.Prefixes(),
+		PrimaryRoutes:    primaryRoutes,
+		AllowedIPs:       allowedIPs,
+		Endpoints:        nv.Endpoints().AsSlice(),
+		HomeDERP:         derp,
+		LegacyDERPString: legacyDERP,
+		Hostinfo:         nv.Hostinfo(),
+		Created:          nv.CreatedAt().UTC(),
 
 		Online: nv.IsOnline().Clone(),
 
diff --git a/hscontrol/types/node_peerchange_test.go b/hscontrol/types/node_peerchange_test.go
deleted file mode 100644
index d344d8880..000000000
--- a/hscontrol/types/node_peerchange_test.go
+++ /dev/null
@@ -1,61 +0,0 @@
-package types
-
-import (
-	"testing"
-
-	"tailscale.com/tailcfg"
-)
-
-// TestApplyPeerChangeDERPDoesNotMutateSharedHostinfo guards the NodeStore
-// copy-on-write invariant: published snapshots share the *tailcfg.Hostinfo /
-// *tailcfg.NetInfo pointers, so ApplyPeerChange must never write a DERP region
-// through them in place. It must produce fresh pointers, leaving any
-// previously-shared Hostinfo untouched.
-func TestApplyPeerChangeDERPDoesNotMutateSharedHostinfo(t *testing.T) {
-	const newRegion = 2
-
-	t.Run("existing NetInfo", func(t *testing.T) {
-		shared := &tailcfg.Hostinfo{
-			Hostname: "n",
-			NetInfo:  &tailcfg.NetInfo{PreferredDERP: 1},
-		}
-		node := &Node{Hostinfo: shared}
-
-		node.ApplyPeerChange(&tailcfg.PeerChange{DERPRegion: newRegion})
-
-		if got := node.Hostinfo.NetInfo.PreferredDERP; got != newRegion {
-			t.Fatalf("node PreferredDERP = %d, want %d", got, newRegion)
-		}
-
-		if got := shared.NetInfo.PreferredDERP; got != 1 {
-			t.Errorf("shared NetInfo mutated in place: PreferredDERP = %d, want 1", got)
-		}
-
-		if node.Hostinfo == shared {
-			t.Error("node.Hostinfo still aliases the shared Hostinfo pointer")
-		}
-
-		if node.Hostinfo.NetInfo == shared.NetInfo {
-			t.Error("node.Hostinfo.NetInfo still aliases the shared NetInfo pointer")
-		}
-	})
-
-	t.Run("nil NetInfo", func(t *testing.T) {
-		shared := &tailcfg.Hostinfo{Hostname: "n"}
-		node := &Node{Hostinfo: shared}
-
-		node.ApplyPeerChange(&tailcfg.PeerChange{DERPRegion: newRegion})
-
-		if got := node.Hostinfo.NetInfo.PreferredDERP; got != newRegion {
-			t.Fatalf("node PreferredDERP = %d, want %d", got, newRegion)
-		}
-
-		if shared.NetInfo != nil {
-			t.Errorf("shared Hostinfo gained a NetInfo in place: %+v", shared.NetInfo)
-		}
-
-		if node.Hostinfo == shared {
-			t.Error("node.Hostinfo still aliases the shared Hostinfo pointer")
-		}
-	})
-}
diff --git a/hscontrol/types/node_tags_test.go b/hscontrol/types/node_tags_test.go
index a401d71d8..97e01b2ac 100644
--- a/hscontrol/types/node_tags_test.go
+++ b/hscontrol/types/node_tags_test.go
@@ -8,7 +8,7 @@ import (
 	"gorm.io/gorm"
 )
 
-// TestNodeIsTagged tests the [Node.IsTagged] method for determining if a node is tagged.
+// TestNodeIsTagged tests the IsTagged() method for determining if a node is tagged.
 func TestNodeIsTagged(t *testing.T) {
 	tests := []struct {
 		name string
@@ -44,9 +44,9 @@ func TestNodeIsTagged(t *testing.T) {
 			want: false,
 		},
 		{
-			// Tags should be copied from [Node.AuthKey] during registration, so a node
-			// with only [PreAuthKey.Tags] and no [Node.Tags] would be invalid in practice.
-			// [Node.IsTagged] only checks [Node.Tags], not [PreAuthKey.Tags].
+			// Tags should be copied from AuthKey during registration, so a node
+			// with only AuthKey.Tags and no Tags would be invalid in practice.
+			// IsTagged() only checks node.Tags, not AuthKey.Tags.
 			name: "node registered with tagged authkey only - not tagged (tags should be copied)",
 			node: Node{
 				AuthKey: &PreAuthKey{
@@ -83,7 +83,7 @@ func TestNodeIsTagged(t *testing.T) {
 	}
 }
 
-// TestNodeViewIsTagged tests the [NodeView.IsTagged] method on [NodeView].
+// TestNodeViewIsTagged tests the IsTagged() method on NodeView.
 func TestNodeViewIsTagged(t *testing.T) {
 	tests := []struct {
 		name string
@@ -98,15 +98,15 @@ func TestNodeViewIsTagged(t *testing.T) {
 			want: true,
 		},
 		{
-			// Tags should be copied from [Node.AuthKey] during registration, so a node
-			// with only [PreAuthKey.Tags] and no [Node.Tags] would be invalid in practice.
+			// Tags should be copied from AuthKey during registration, so a node
+			// with only AuthKey.Tags and no Tags would be invalid in practice.
 			name: "node with only AuthKey tags - not tagged (tags should be copied)",
 			node: Node{
 				AuthKey: &PreAuthKey{
 					Tags: []string{"tag:web"},
 				},
 			},
-			want: false, // [Node.IsTagged] only checks [Node.Tags]
+			want: false, // IsTagged() only checks node.Tags
 		},
 		{
 			name: "user-owned node",
@@ -126,7 +126,7 @@ func TestNodeViewIsTagged(t *testing.T) {
 	}
 }
 
-// TestNodeHasTag tests the [Node.HasTag] method for checking specific tag membership.
+// TestNodeHasTag tests the HasTag() method for checking specific tag membership.
 func TestNodeHasTag(t *testing.T) {
 	tests := []struct {
 		name string
@@ -151,8 +151,8 @@ func TestNodeHasTag(t *testing.T) {
 			want: false,
 		},
 		{
-			// Tags should be copied from [Node.AuthKey] during registration
-			// [Node.HasTag] only checks [Node.Tags], not [PreAuthKey.Tags]
+			// Tags should be copied from AuthKey during registration
+			// HasTag() only checks node.Tags, not AuthKey.Tags
 			name: "node has tag only in authkey - returns false",
 			node: Node{
 				AuthKey: &PreAuthKey{
@@ -163,7 +163,7 @@ func TestNodeHasTag(t *testing.T) {
 			want: false,
 		},
 		{
-			// [Node.Tags] is what matters, not [PreAuthKey.Tags]
+			// node.Tags is what matters, not AuthKey.Tags
 			name: "node has tag in Tags but not in AuthKey",
 			node: Node{
 				Tags: []string{"tag:server"},
@@ -259,8 +259,8 @@ func TestNodeOwnershipModel(t *testing.T) {
 			description:  "User-owned nodes are owned by the user, not by tags",
 		},
 		{
-			// Tags should be copied from [Node.AuthKey] to [Node] during registration
-			// [Node.IsTagged] only checks [Node.Tags], not [PreAuthKey.Tags]
+			// Tags should be copied from AuthKey to Node during registration
+			// IsTagged() only checks node.Tags, not AuthKey.Tags
 			name: "node with only authkey tags - not tagged (tags should be copied)",
 			node: Node{
 				ID:     3,
diff --git a/hscontrol/types/node_test.go b/hscontrol/types/node_test.go
index 6a23fc9fb..89bd25ba5 100644
--- a/hscontrol/types/node_test.go
+++ b/hscontrol/types/node_test.go
@@ -8,6 +8,7 @@ import (
 
 	"github.com/google/go-cmp/cmp"
 	"github.com/google/go-cmp/cmp/cmpopts"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/policy/matcher"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"tailscale.com/tailcfg"
@@ -112,7 +113,7 @@ func Test_NodeCanAccess(t *testing.T) {
 			},
 			want: true,
 		},
-		// Subnet-to-subnet tests.
+		// Subnet-to-subnet tests for issue #3157.
 		// When ACL src and dst are both subnet CIDRs, subnet
 		// routers advertising those subnets must see each other.
 		{
@@ -152,7 +153,7 @@ func Test_NodeCanAccess(t *testing.T) {
 		{
 			// With a unidirectional ACL (src=A→dst=B), the dst
 			// router cannot access the src router. Bidirectional
-			// peer visibility comes from [policy.ReduceNodes] checking
+			// peer visibility comes from ReduceNodes checking
 			// both A.CanAccess(B) || B.CanAccess(A).
 			name: "subnet-to-subnet-unidirectional-dst-cannot-access-src-3157",
 			node1: Node{
@@ -417,33 +418,6 @@ func TestNodeFQDN(t *testing.T) {
 	}
 }
 
-func TestValidateGivenName(t *testing.T) {
-	tests := []struct {
-		name       string
-		givenName  string
-		baseDomain string
-		wantErr    bool
-	}{
-		{"valid", "test", "example.com", false},
-		{"empty", "", "example.com", true},
-		{"invalid label chars", "not valid", "example.com", true},
-		{"label too long", strings.Repeat("a", 64), "example.com", true},
-		// A valid 63-char label whose FQDN overflows only because the base
-		// domain is long: ValidLabel passes, the FQDN-length bound rejects it.
-		{"fqdn too long under long base domain", strings.Repeat("a", 63), strings.Repeat("b", 200) + ".example.com", true},
-	}
-
-	for _, tc := range tests {
-		t.Run(tc.name, func(t *testing.T) {
-			err := ValidateGivenName(tc.givenName, tc.baseDomain)
-			if (err != nil) != tc.wantErr {
-				t.Errorf("ValidateGivenName(%q, %q) error = %v, wantErr %v",
-					tc.givenName, tc.baseDomain, err, tc.wantErr)
-			}
-		})
-	}
-}
-
 func TestPeerChangeFromMapRequest(t *testing.T) {
 	nKeys := []key.NodePublic{
 		key.NewNode().Public(),
@@ -576,6 +550,7 @@ func TestPeerChangeFromMapRequest(t *testing.T) {
 	}
 }
 
+
 func TestApplyPeerChange(t *testing.T) {
 	tests := []struct {
 		name       string
@@ -683,7 +658,57 @@ func TestApplyPeerChange(t *testing.T) {
 	}
 }
 
-// TestHasNetworkChanges tests the [NodeView] method for detecting
+func TestNodeRegisterMethodToV1Enum(t *testing.T) {
+	tests := []struct {
+		name string
+		node Node
+		want v1.RegisterMethod
+	}{
+		{
+			name: "authkey",
+			node: Node{
+				ID:             1,
+				RegisterMethod: util.RegisterMethodAuthKey,
+			},
+			want: v1.RegisterMethod_REGISTER_METHOD_AUTH_KEY,
+		},
+		{
+			name: "oidc",
+			node: Node{
+				ID:             1,
+				RegisterMethod: util.RegisterMethodOIDC,
+			},
+			want: v1.RegisterMethod_REGISTER_METHOD_OIDC,
+		},
+		{
+			name: "cli",
+			node: Node{
+				ID:             1,
+				RegisterMethod: util.RegisterMethodCLI,
+			},
+			want: v1.RegisterMethod_REGISTER_METHOD_CLI,
+		},
+		{
+			name: "unknown",
+			node: Node{
+				ID: 0,
+			},
+			want: v1.RegisterMethod_REGISTER_METHOD_UNSPECIFIED,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			got := tt.node.RegisterMethodToV1Enum()
+
+			if diff := cmp.Diff(tt.want, got); diff != "" {
+				t.Errorf("RegisterMethodToV1Enum() unexpected result (-want +got):\n%s", diff)
+			}
+		})
+	}
+}
+
+// TestHasNetworkChanges tests the NodeView method for detecting
 // when a node's network properties have changed.
 func TestHasNetworkChanges(t *testing.T) {
 	mustIPPtr := func(s string) *netip.Addr {
diff --git a/hscontrol/types/oauth.go b/hscontrol/types/oauth.go
deleted file mode 100644
index 66c87e83b..000000000
--- a/hscontrol/types/oauth.go
+++ /dev/null
@@ -1,153 +0,0 @@
-package types
-
-import (
-	"time"
-
-	"github.com/rs/zerolog"
-)
-
-const (
-	// OAuthClientPrefix prefixes an OAuth client secret:
-	// hskey-client-<clientID>-<secret>.
-	OAuthClientPrefix = "hskey-client-" //nolint:gosec // prefix, not a credential
-
-	// AccessTokenPrefix prefixes an OAuth access token:
-	// hskey-oauthtok-<prefix>-<secret>. The v2 auth middleware dispatches a
-	// scope-limited token from an all-access admin key on this prefix alone, so
-	// it is one canonical constant shared by the db and api layers.
-	AccessTokenPrefix = "hskey-oauthtok-" //nolint:gosec // prefix, not a credential
-)
-
-// OAuthClient is a long-lived OAuth 2.0 client-credentials principal. It mints
-// short-lived [OAuthAccessToken]s limited to its Scopes and Tags. The secret is
-// stored only as an Argon2id hash. ClientID is public and embedded in the secret
-// string (hskey-client-<ClientID>-<secret>) so the token endpoint can derive it
-// from the secret alone, matching Tailscale, where the client id is a substring
-// of the client secret.
-//
-// An OAuth client is always tag/tailnet-scoped, never user-owned: the access
-// tokens it mints, and the auth keys those tokens create, produce tagged nodes.
-// UserID only records who created the client (informational), mirroring
-// [APIKey].
-type OAuthClient struct {
-	ID         uint64 `gorm:"primary_key"`
-	ClientID   string `gorm:"uniqueIndex"`
-	SecretHash []byte
-
-	// Scopes the client may grant. Tags the client may assign to access tokens
-	// (and, transitively, to the auth keys and nodes those tokens create).
-	Scopes []string `gorm:"serializer:json"`
-	Tags   []string `gorm:"serializer:json"`
-
-	Description string
-
-	// UserID records who created the client. Kept as a plain column with no
-	// foreign key so an upgraded database matches a freshly-migrated one.
-	UserID *uint
-
-	CreatedAt *time.Time
-	Revoked   *time.Time
-}
-
-// TableName pins the table name. GORM's naming strategy would otherwise render
-// OAuthClient as "o_auth_clients" (it breaks the OAuth initialism), diverging
-// from the hand-written migration DDL and schema.sql.
-func (*OAuthClient) TableName() string { return "oauth_clients" }
-
-// OAuthAccessToken is a short-lived bearer token minted by an [OAuthClient] via
-// the client-credentials grant. It carries the scope/tag set granted at mint
-// time (a subset of the issuing client's), is stored as an Argon2id hash of its
-// secret, and authenticates v2 API requests as Authorization: Bearer.
-type OAuthAccessToken struct {
-	ID     uint64 `gorm:"primary_key"`
-	Prefix string `gorm:"uniqueIndex"`
-	Hash   []byte
-
-	// ClientID links back to the issuing [OAuthClient].
-	ClientID string
-
-	Scopes []string `gorm:"serializer:json"`
-	Tags   []string `gorm:"serializer:json"`
-
-	Expiration *time.Time
-	CreatedAt  *time.Time
-}
-
-// TableName pins the table name (see [OAuthClient.TableName]).
-func (*OAuthAccessToken) TableName() string { return "oauth_access_tokens" }
-
-// maskedClientID returns the client id in masked form for safe logging.
-// SECURITY: never log the secret or its hash.
-func (c *OAuthClient) maskedClientID() string {
-	if c.ClientID != "" {
-		return OAuthClientPrefix + c.ClientID + "-***"
-	}
-
-	return ""
-}
-
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler] for safe logging.
-// SECURITY: intentionally does NOT log the secret or hash.
-func (c *OAuthClient) MarshalZerologObject(e *zerolog.Event) {
-	if c == nil {
-		return
-	}
-
-	e.Uint64("oauth_client_id", c.ID)
-
-	if masked := c.maskedClientID(); masked != "" {
-		e.Str("oauth_client", masked)
-	}
-
-	if len(c.Scopes) > 0 {
-		e.Strs("oauth_client_scopes", c.Scopes)
-	}
-
-	if len(c.Tags) > 0 {
-		e.Strs("oauth_client_tags", c.Tags)
-	}
-
-	if c.Revoked != nil {
-		e.Time("oauth_client_revoked", *c.Revoked)
-	}
-}
-
-// maskedPrefix returns the token prefix in masked form for safe logging.
-// SECURITY: never log the secret or its hash.
-func (t *OAuthAccessToken) maskedPrefix() string {
-	if t.Prefix != "" {
-		return AccessTokenPrefix + t.Prefix + "-***"
-	}
-
-	return ""
-}
-
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler] for safe logging.
-// SECURITY: intentionally does NOT log the secret or hash.
-func (t *OAuthAccessToken) MarshalZerologObject(e *zerolog.Event) {
-	if t == nil {
-		return
-	}
-
-	e.Uint64("oauth_token_id", t.ID)
-
-	if masked := t.maskedPrefix(); masked != "" {
-		e.Str("oauth_token", masked)
-	}
-
-	if t.ClientID != "" {
-		e.Str("oauth_token_client", t.ClientID)
-	}
-
-	if len(t.Scopes) > 0 {
-		e.Strs("oauth_token_scopes", t.Scopes)
-	}
-
-	if len(t.Tags) > 0 {
-		e.Strs("oauth_token_tags", t.Tags)
-	}
-
-	if t.Expiration != nil {
-		e.Time("oauth_token_expiration", *t.Expiration)
-	}
-}
diff --git a/hscontrol/types/preauth_key.go b/hscontrol/types/preauth_key.go
index 27502f3d4..d7d8d7417 100644
--- a/hscontrol/types/preauth_key.go
+++ b/hscontrol/types/preauth_key.go
@@ -1,39 +1,19 @@
 package types
 
 import (
-	"strconv"
 	"time"
 
-	"github.com/juanfont/headscale/hscontrol/util"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
 	"github.com/rs/zerolog"
 	"github.com/rs/zerolog/log"
+	"google.golang.org/protobuf/types/known/timestamppb"
 )
 
 type PAKError string
 
 func (e PAKError) Error() string { return string(e) }
 
-// StringID returns the key's id as a decimal string, the form the HTTP APIs
-// render it as.
-func (pak *PreAuthKey) StringID() string {
-	if pak == nil {
-		return ""
-	}
-
-	return strconv.FormatUint(pak.ID, util.Base10)
-}
-
-// StringID returns the key's id as a decimal string, the form the HTTP APIs
-// render it as.
-func (pak *PreAuthKeyNew) StringID() string {
-	if pak == nil {
-		return ""
-	}
-
-	return strconv.FormatUint(pak.ID, util.Base10)
-}
-
 // PreAuthKey describes a pre-authorization key usable in a particular user.
 type PreAuthKey struct {
 	ID uint64 `gorm:"primary_key"`
@@ -45,16 +25,12 @@ type PreAuthKey struct {
 	Prefix string
 	Hash   []byte // bcrypt
 
-	// For tagged keys: [PreAuthKey.UserID] tracks who created the key (informational)
-	// For user-owned keys: [PreAuthKey.UserID] tracks the node owner
+	// For tagged keys: UserID tracks who created the key (informational)
+	// For user-owned keys: UserID tracks the node owner
 	// Can be nil for system-created tagged keys
 	UserID *uint
 	User   *User `gorm:"constraint:OnDelete:SET NULL;"`
 
-	// Free-text description, set via the v2 API. Empty for keys created through
-	// the v1 API or CLI.
-	Description string
-
 	Reusable  bool
 	Ephemeral bool `gorm:"default:false"`
 	Used      bool `gorm:"default:false"`
@@ -66,11 +42,6 @@ type PreAuthKey struct {
 
 	CreatedAt  *time.Time
 	Expiration *time.Time
-
-	// Revoked is set when the key is revoked through the v2 API (Tailscale's
-	// DELETE). A revoked key is invalid but kept retrievable until the
-	// background collector reaps it after the configured retention window.
-	Revoked *time.Time
 }
 
 // PreAuthKeyNew is returned once when the key is created.
@@ -85,22 +56,78 @@ type PreAuthKeyNew struct {
 	User       *User // Can be nil for system-created tagged keys
 }
 
+func (key *PreAuthKeyNew) Proto() *v1.PreAuthKey {
+	protoKey := v1.PreAuthKey{
+		Id:        key.ID,
+		Key:       key.Key,
+		User:      nil, // Will be set below if not nil
+		Reusable:  key.Reusable,
+		Ephemeral: key.Ephemeral,
+		AclTags:   key.Tags,
+	}
+
+	if key.User != nil {
+		protoKey.User = key.User.Proto()
+	}
+
+	if key.Expiration != nil {
+		protoKey.Expiration = timestamppb.New(*key.Expiration)
+	}
+
+	if key.CreatedAt != nil {
+		protoKey.CreatedAt = timestamppb.New(*key.CreatedAt)
+	}
+
+	return &protoKey
+}
+
+func (key *PreAuthKey) Proto() *v1.PreAuthKey {
+	protoKey := v1.PreAuthKey{
+		User:      nil, // Will be set below if not nil
+		Id:        key.ID,
+		Ephemeral: key.Ephemeral,
+		Reusable:  key.Reusable,
+		Used:      key.Used,
+		AclTags:   key.Tags,
+	}
+
+	if key.User != nil {
+		protoKey.User = key.User.Proto()
+	}
+
+	// For new keys (with prefix/hash), show the prefix so users can identify the key
+	// For legacy keys (with plaintext key), show the full key for backwards compatibility
+	if key.Prefix != "" {
+		protoKey.Key = "hskey-auth-" + key.Prefix + "-***"
+	} else if key.Key != "" {
+		// Legacy key - show full key for backwards compatibility
+		// TODO: Consider hiding this in a future major version
+		protoKey.Key = key.Key
+	}
+
+	if key.Expiration != nil {
+		protoKey.Expiration = timestamppb.New(*key.Expiration)
+	}
+
+	if key.CreatedAt != nil {
+		protoKey.CreatedAt = timestamppb.New(*key.CreatedAt)
+	}
+
+	return &protoKey
+}
+
 // Validate checks if a pre auth key can be used.
 func (pak *PreAuthKey) Validate() error {
 	if pak == nil {
 		return PAKError("invalid authkey")
 	}
 
-	// Use [zerolog.Event.EmbedObject] for safe logging - never log full key
+	// Use EmbedObject for safe logging - never log full key
 	log.Debug().
 		Caller().
 		EmbedObject(pak).
 		Msg("PreAuthKey.Validate: checking key")
 
-	if pak.Revoked != nil {
-		return PAKError("authkey revoked")
-	}
-
 	if pak.Expiration != nil && pak.Expiration.Before(time.Now()) {
 		return PAKError("authkey expired")
 	}
@@ -117,8 +144,8 @@ func (pak *PreAuthKey) Validate() error {
 	return nil
 }
 
-// IsTagged returns true if this [PreAuthKey] creates tagged nodes.
-// When a [PreAuthKey] has tags, nodes registered with it will be tagged nodes.
+// IsTagged returns true if this PreAuthKey creates tagged nodes.
+// When a PreAuthKey has tags, nodes registered with it will be tagged nodes.
 func (pak *PreAuthKey) IsTagged() bool {
 	return len(pak.Tags) > 0
 }
@@ -133,7 +160,7 @@ func (pak *PreAuthKey) maskedPrefix() string {
 	return ""
 }
 
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler] for safe logging.
+// MarshalZerologObject implements zerolog.LogObjectMarshaler for safe logging.
 // SECURITY: This method intentionally does NOT log the full key or hash.
 // Only the masked prefix is logged for identification purposes.
 func (pak *PreAuthKey) MarshalZerologObject(e *zerolog.Event) {
diff --git a/hscontrol/types/registration.go b/hscontrol/types/registration.go
index 669114d97..e6991b4d5 100644
--- a/hscontrol/types/registration.go
+++ b/hscontrol/types/registration.go
@@ -9,7 +9,7 @@ import (
 )
 
 // RegistrationData is the payload cached for a pending node registration.
-// It replaces the previous practice of caching a full *[Node] and carries
+// It replaces the previous practice of caching a full *Node and carries
 // only the fields the registration callback path actually consumes when
 // promoting a pending registration to a real node.
 //
@@ -34,18 +34,18 @@ type RegistrationData struct {
 	// Already validated/normalised by EnsureHostname at producer time.
 	Hostname string
 
-	// Hostinfo is the original [tailcfg.Hostinfo] from the [tailcfg.RegisterRequest],
+	// Hostinfo is the original Hostinfo from the RegisterRequest,
 	// stored so that the auth callback can populate the new node's
-	// initial [tailcfg.Hostinfo] (and so that observability/CLI consumers see
+	// initial Hostinfo (and so that observability/CLI consumers see
 	// fields like OS, OSVersion, and IPNVersion before the first
-	// [tailcfg.MapRequest] restores the live set).
+	// MapRequest restores the live set).
 	//
-	// May be nil if the client did not send [tailcfg.Hostinfo] in the original
-	// [tailcfg.RegisterRequest].
+	// May be nil if the client did not send Hostinfo in the original
+	// RegisterRequest.
 	Hostinfo *tailcfg.Hostinfo
 
 	// Endpoints is the initial set of WireGuard endpoints the node
-	// reported. The first [tailcfg.MapRequest] after registration overwrites
+	// reported. The first MapRequest after registration overwrites
 	// this with the live set.
 	Endpoints []netip.AddrPort
 
diff --git a/hscontrol/types/routes.go b/hscontrol/types/routes.go
index ac54f0043..3ff560274 100644
--- a/hscontrol/types/routes.go
+++ b/hscontrol/types/routes.go
@@ -19,10 +19,13 @@ type Route struct {
 	// Advertised is now only stored as part of [Node.Hostinfo].
 	Advertised bool
 
-	// Enabled is stored directly on the node as [Node.ApprovedRoutes].
+	// Enabled is stored directly on the node as ApprovedRoutes.
 	Enabled bool
 
 	// IsPrimary is only determined in memory as it is only relevant
 	// when the server is up.
 	IsPrimary bool
 }
+
+// Deprecated: Approval of routes is denormalised onto the relevant node.
+type Routes []Route
diff --git a/hscontrol/types/slices.go b/hscontrol/types/slices.go
deleted file mode 100644
index 9e744cb49..000000000
--- a/hscontrol/types/slices.go
+++ /dev/null
@@ -1,46 +0,0 @@
-package types
-
-import "net/netip"
-
-// The named slice types below are used for GORM-persisted [Node] columns
-// that serialise as JSON. GORM v2's struct-based Updates skips fields
-// it considers zero — for unnamed slice types that is nil — and the
-// default [reflect.Value.IsZero] treats a nil slice as zero. By giving
-// each slice an IsZero() that always returns false, the column is
-// always included in UPDATE statements regardless of whether the
-// caller is clearing the field. JSON marshalling is unchanged: a nil
-// value serialises to null and an empty value serialises to [].
-//
-// The .List() helpers return the underlying unnamed slice for the
-// places (mainly testify assertions over [reflect.DeepEqual]) where the
-// distinction between the named and unnamed type matters.
-
-// Strings is a []string with a GORM-friendly [Strings.IsZero].
-type Strings []string
-
-// IsZero implements GORM's zeroer interface to keep the column in the
-// UPDATE set even when the slice is nil or empty.
-func (Strings) IsZero() bool { return false }
-
-// List returns the underlying []string.
-func (s Strings) List() []string { return []string(s) }
-
-// Prefixes is a []netip.Prefix with a GORM-friendly [Prefixes.IsZero].
-type Prefixes []netip.Prefix
-
-// IsZero implements GORM's zeroer interface to keep the column in the
-// UPDATE set even when the slice is nil or empty.
-func (Prefixes) IsZero() bool { return false }
-
-// List returns the underlying []netip.Prefix.
-func (s Prefixes) List() []netip.Prefix { return []netip.Prefix(s) }
-
-// AddrPorts is a []netip.AddrPort with a GORM-friendly [AddrPorts.IsZero].
-type AddrPorts []netip.AddrPort
-
-// IsZero implements GORM's zeroer interface to keep the column in the
-// UPDATE set even when the slice is nil or empty.
-func (AddrPorts) IsZero() bool { return false }
-
-// List returns the underlying []netip.AddrPort.
-func (s AddrPorts) List() []netip.AddrPort { return []netip.AddrPort(s) }
diff --git a/hscontrol/types/testcapture/header.go b/hscontrol/types/testcapture/header.go
index 142937d5a..9b29b9034 100644
--- a/hscontrol/types/testcapture/header.go
+++ b/hscontrol/types/testcapture/header.go
@@ -6,7 +6,7 @@ import (
 )
 
 // CommentHeader returns the // comment header that gets prepended to
-// a [Capture] file when it is written. The header is purely
+// a Capture file when it is written. The header is purely
 // informational; consumers ignore it. Format:
 //
 //	<TestID>
@@ -16,11 +16,11 @@ import (
 //	Nodes with filter rules: <X> of <Y>           ← for non-SSH captures
 //	Nodes with SSH rules: <X> of <Y>              ← for SSH captures
 //	Captured at:    <RFC3339 UTC>
-//	tool version:   <ToolVersion>
+//	tscap version:  <ToolVersion>
 //	schema version: <SchemaVersion>
 //
 // Both `tool_version` and `schema_version` are also stored as
-// first-class JSON fields on the [Capture] struct; the comment lines
+// first-class JSON fields on the Capture struct; the comment lines
 // exist purely so the values are visible at a glance without
 // parsing the file.
 //
@@ -53,7 +53,7 @@ func CommentHeader(c *Capture) string {
 	}
 
 	if c.ToolVersion != "" {
-		fmt.Fprintf(&b, "tool version:   %s\n", c.ToolVersion)
+		fmt.Fprintf(&b, "tscap version:  %s\n", c.ToolVersion)
 	}
 
 	if c.SchemaVersion != 0 {
@@ -68,8 +68,8 @@ func CommentHeader(c *Capture) string {
 // captures at all.
 //
 // The phrasing depends on which fields the capture uses:
-//   - SSH captures populate [NodeCapture.SSHRules]
-//   - other captures populate [NodeCapture.PacketFilterRules]
+//   - SSH captures populate SSHRules
+//   - other captures populate PacketFilterRules
 //
 // If both fields appear (mixed/unusual), filter rules wins.
 func captureStats(c *Capture) string {
diff --git a/hscontrol/types/testcapture/read.go b/hscontrol/types/testcapture/read.go
index 2c153bbba..03ec4809b 100644
--- a/hscontrol/types/testcapture/read.go
+++ b/hscontrol/types/testcapture/read.go
@@ -9,17 +9,17 @@ import (
 	"github.com/tailscale/hujson"
 )
 
-// ErrUnsupportedSchemaVersion is returned by [Read] when a capture
-// advertises a [Capture.SchemaVersion] newer than the current binary supports.
+// ErrUnsupportedSchemaVersion is returned by Read when a capture
+// advertises a SchemaVersion newer than the current binary supports.
 var ErrUnsupportedSchemaVersion = errors.New("testcapture: unsupported schema version")
 
-// Read parses a HuJSON capture file from disk into a [Capture].
+// Read parses a HuJSON capture file from disk into a Capture.
 //
 // Comments and trailing commas in the file are stripped before
-// unmarshaling. Files advertising a [Capture.SchemaVersion] newer than the
-// current binary's are rejected with [ErrUnsupportedSchemaVersion];
-// [Capture.SchemaVersion] == 0 (pre-versioning) is accepted for backwards compat.
-// The returned [Capture]'s [Capture.CapturedAt] is the value recorded in the file
+// unmarshaling. Files advertising a SchemaVersion newer than the
+// current binary's are rejected with ErrUnsupportedSchemaVersion;
+// SchemaVersion == 0 (pre-versioning) is accepted for backwards compat.
+// The returned Capture's CapturedAt is the value recorded in the file
 // (not "now").
 func Read(path string) (*Capture, error) {
 	data, err := os.ReadFile(path)
@@ -43,8 +43,8 @@ func Read(path string) (*Capture, error) {
 }
 
 // unmarshalHuJSON parses HuJSON bytes (JSON with comments / trailing
-// commas) into v. Comments are stripped via [hujson.Value.Standardize] before
-// [json.Unmarshal] is called.
+// commas) into v. Comments are stripped via hujson.Standardize before
+// json.Unmarshal is called.
 func unmarshalHuJSON(data []byte, v any) error {
 	ast, err := hujson.Parse(data)
 	if err != nil {
diff --git a/hscontrol/types/testcapture/testcapture.go b/hscontrol/types/testcapture/testcapture.go
index 75e18ff86..cc0ee0a0e 100644
--- a/hscontrol/types/testcapture/testcapture.go
+++ b/hscontrol/types/testcapture/testcapture.go
@@ -1,18 +1,18 @@
 // Package testcapture defines the on-disk format used by Headscale's
-// policy v2 compatibility tests for golden data captured from a
-// Tailscale-hosted control plane by an external capture tool.
+// policy v2 compatibility tests for golden data captured from
+// Tailscale SaaS by the tscap tool.
 //
 // Files are HuJSON. Wire-format Tailscale data (filter rules, netmap,
 // whois, SSH rules) is stored as proper tailcfg/netmap/filtertype/
-// apitype values rather than [json.RawMessage] so that schema drift
-// between the capture tool and headscale becomes a compile error
-// rather than a silent test failure, and so that consumers don't
-// have to repeat [json.Unmarshal] at every read site. Storing data as
-// [json.RawMessage] previously hid a serious capture-pipeline bug (the
-// IPN bus initial notification returns a stale Peers slice — see the
-// comment on [Node.Netmap] below) for months.
+// apitype values rather than json.RawMessage so that schema drift
+// between tscap and headscale becomes a compile error rather than a
+// silent test failure, and so that consumers don't have to repeat
+// json.Unmarshal at every read site. Storing data as json.RawMessage
+// previously hid a serious capture-pipeline bug (the IPN bus initial
+// notification returns a stale Peers slice — see the comment on
+// Node.Netmap below) for months.
 //
-// All four capture types (acl, routes, grant, ssh) use the same [Capture]
+// All four capture types (acl, routes, grant, ssh) use the same Capture
 // shape. SSH scenarios populate Captures[name].SSHRules; the others
 // populate Captures[name].PacketFilterRules + Captures[name].Netmap.
 package testcapture
@@ -31,17 +31,17 @@ import (
 // SchemaVersion identifies the on-disk format. Bumped on breaking changes.
 //
 // Files written before SchemaVersion existed do not have this field; new
-// captures always set it to the current value.
+// captures from tscap always set it to the current value.
 const SchemaVersion = 1
 
 // Capture is one captured run of one scenario.
 //
 // All four capture types (acl, routes, grant, ssh) use this same shape.
-// SSH scenarios populate [Capture.Captures][name].SSHRules; the others populate
-// [Capture.Captures][name].PacketFilterRules + [Capture.Captures][name].Netmap.
+// SSH scenarios populate Captures[name].SSHRules; the others populate
+// Captures[name].PacketFilterRules + Captures[name].Netmap.
 type Capture struct {
 	// SchemaVersion identifies the on-disk format version. Always set
-	// to [SchemaVersion] when written.
+	// to testcapture.SchemaVersion when written by tscap.
 	SchemaVersion int `json:"schema_version"`
 
 	// TestID is the stable identifier of the scenario, derived from
@@ -67,15 +67,15 @@ type Capture struct {
 	Tailnet string `json:"tailnet"`
 
 	// Error is true when the SaaS API rejected the policy or when
-	// capture itself failed. In the rejection case, [Capture.Captures] reflects
-	// the pre-push baseline (deny-all default) and [Input.APIResponseBody]
+	// capture itself failed. In the rejection case, Captures reflects
+	// the pre-push baseline (deny-all default) and Input.APIResponseBody
 	// is populated.
 	Error bool `json:"error,omitempty"`
 
 	// CaptureError is set when the capture itself failed (timeout,
-	// missing data, etc.). The partially-captured [Capture.Captures] map is
+	// missing data, etc.). The partially-captured Captures map is
 	// still included for post-mortem. Distinct from
-	// [Input.APIResponseBody] which describes a SaaS API rejection.
+	// Input.APIResponseBody which describes a SaaS API rejection.
 	CaptureError string `json:"capture_error,omitempty"`
 
 	// Input is everything that was sent to the tailnet to produce
@@ -83,7 +83,7 @@ type Capture struct {
 	Input Input `json:"input"`
 
 	// Topology is the users and nodes present in the tailnet at
-	// capture time. Always populated by the capture tool.
+	// capture time. Always populated by tscap.
 	Topology Topology `json:"topology"`
 
 	// Captures holds the per-node captured data, keyed by node
@@ -94,7 +94,7 @@ type Capture struct {
 // Input describes everything that was sent to the tailnet to produce
 // the captured state.
 //
-// [Input] has a custom [Input.UnmarshalJSON] to accept both the new on-disk
+// Input has a custom UnmarshalJSON to accept both the new on-disk
 // shape (where full_policy is a JSON-encoded string) and the legacy
 // shape (where full_policy is a JSON object). The legacy shape is
 // re-marshaled to a string at load time so consumers see the typed
@@ -109,10 +109,10 @@ type Input struct {
 	// APIResponseCode is the HTTP status code of the policy POST.
 	APIResponseCode int `json:"api_response_code"`
 
-	// APIResponseBody is only populated when [Input.APIResponseCode] != 200.
+	// APIResponseBody is only populated when APIResponseCode != 200.
 	APIResponseBody *APIResponseBody `json:"api_response_body,omitempty"`
 
-	// Tailnet describes the tailnet-wide settings the capture tool applied
+	// Tailnet describes the tailnet-wide settings tscap applied
 	// before pushing the policy.
 	Tailnet TailnetInput `json:"tailnet"`
 
@@ -126,10 +126,10 @@ type Input struct {
 	ScenarioPath string `json:"scenario_path,omitempty"`
 }
 
-// MarshalJSON writes [Input.FullPolicy] as a raw JSON object rather than a
+// MarshalJSON writes FullPolicy as a raw JSON object rather than a
 // double-quoted string. Consumers (including via_compat_test.go which
 // uses its own local types) expect to parse full_policy as a JSON
-// object, not a JSON string. The [Input.UnmarshalJSON] below accepts both
+// object, not a JSON string. The UnmarshalJSON below accepts both
 // forms on read so old and new captures are interchangeable.
 func (i Input) MarshalJSON() ([]byte, error) {
 	type alias Input
@@ -153,7 +153,7 @@ func (i Input) MarshalJSON() ([]byte, error) {
 // as a JSON-encoded string) and the legacy shape (full_policy as a
 // JSON object). Legacy objects are re-marshaled into a string at
 // load time so consumers see the typed field uniformly. New captures
-// always write the object form via the custom [Input.MarshalJSON] above.
+// always write the object form via the custom MarshalJSON above.
 func (i *Input) UnmarshalJSON(data []byte) error {
 	type alias Input
 
@@ -209,7 +209,7 @@ type APIResponseBody struct {
 	Message string `json:"message,omitempty"`
 }
 
-// TailnetInput captures tailnet-wide settings the capture tool applied before
+// TailnetInput captures tailnet-wide settings tscap applied before
 // pushing the policy.
 type TailnetInput struct {
 	DNS      DNSInput      `json:"dns"`
@@ -227,25 +227,18 @@ type DNSInput struct {
 // SettingsInput describes tailnet settings applied via the API.
 //
 // Pointer fields are nil when the scenario does not override the
-// reset default for that setting. The fields mirror the
-// PATCH /tailnet/{tailnet}/settings request shape exposed by
-// tailscale.com/client/tailscale/v2 — in practice the headscale
-// compatibility tests use the subset that observably affects the
-// captured netmap CapMap or DNSConfig.
+// reset default for that setting.
 type SettingsInput struct {
-	DevicesApprovalOn           *bool `json:"devices_approval_on,omitempty"`
-	DevicesAutoUpdatesOn        *bool `json:"devices_auto_updates_on,omitempty"`
-	DevicesKeyDurationDays      *int  `json:"devices_key_duration_days,omitempty"`
-	NetworkFlowLoggingOn        *bool `json:"network_flow_logging_on,omitempty"`
-	RegionalRoutingOn           *bool `json:"regional_routing_on,omitempty"`
-	PostureIdentityCollectionOn *bool `json:"posture_identity_collection_on,omitempty"`
+	DevicesApprovalOn      *bool `json:"devices_approval_on,omitempty"`
+	DevicesAutoUpdatesOn   *bool `json:"devices_auto_updates_on,omitempty"`
+	DevicesKeyDurationDays *int  `json:"devices_key_duration_days,omitempty"`
 }
 
 // Topology describes the users and nodes present in the tailnet at
 // capture time. Headscale's compat tests use this to construct
-// equivalent [types.User] and [types.Node] objects.
+// equivalent types.User and types.Node objects.
 type Topology struct {
-	// Users in the tailnet. Always populated by the capture tool.
+	// Users in the tailnet. Always populated by tscap.
 	Users []TopologyUser `json:"users"`
 
 	// Nodes in the tailnet, keyed by GivenName.
@@ -266,22 +259,22 @@ type TopologyNode struct {
 	IPv4     string   `json:"ipv4"`
 	IPv6     string   `json:"ipv6"`
 
-	// User is the [TopologyUser.Name] for user-owned nodes. Empty for
+	// User is the TopologyUser.Name for user-owned nodes. Empty for
 	// tagged nodes.
 	User string `json:"user,omitempty"`
 
 	// RoutableIPs is what the node advertised
-	// ([tailcfg.Hostinfo.RoutableIPs] in its own [netmap.NetworkMap.SelfNode]).
+	// (Hostinfo.RoutableIPs in its own netmap.SelfNode).
 	// May include 0.0.0.0/0 + ::/0 for exit nodes.
 	RoutableIPs []string `json:"routable_ips"`
 
-	// ApprovedRoutes is the subset of [TopologyNode.RoutableIPs] the tailnet has
+	// ApprovedRoutes is the subset of RoutableIPs the tailnet has
 	// approved. Used by Headscale's NodeCanApproveRoute test.
 	ApprovedRoutes []string `json:"approved_routes"`
 }
 
 // Node is the captured state for one node, keyed by GivenName in
-// [Capture.Captures].
+// Capture.Captures.
 //
 // All four capture types populate the same struct. Different fields are
 // used by different test types:
@@ -300,23 +293,23 @@ type Node struct {
 	// PacketFilterMatches is the compiled filter matches (with
 	// CapMatch) returned by tailscaled localapi
 	// /debug-packet-filter-matches. Captured alongside
-	// [Node.PacketFilterRules]; useful for grant tests that want the
+	// PacketFilterRules; useful for grant tests that want the
 	// compiled form.
 	PacketFilterMatches []filtertype.Match `json:"packet_filter_matches,omitempty"`
 
 	// Netmap is the full netmap as observed by the local tailscaled.
 	// NEVER trimmed. Consumers extract whatever fields they need.
 	//
-	// IMPORTANT: the capture tool captures this by waiting for the IPN bus to
+	// IMPORTANT: tscap captures this by waiting for the IPN bus to
 	// settle on a fresh delta-triggered notification, NOT by reading
 	// the WatchIPNBus(NotifyInitialNetMap) initial notification.
 	// The initial notification carries cn.NetMap() which returns
-	// nb.netMap as-is — the [netmap.NetworkMap] whose Peers slice was
+	// nb.netMap as-is — the netmap.NetworkMap whose Peers slice was
 	// set at full-sync time and never re-synchronized from the
-	// authoritative nb.peers map. The capture tool previously used the initial
+	// authoritative nb.peers map. tscap previously used the initial
 	// notification and silently captured netmaps with mostly-empty
 	// Peers, which corrupted every via-grant compat test against the
-	// stale data. See the capture tool source for the for the
+	// stale data. See tscap/tsdaemon/capture.go:NetMap for the
 	// stability-wait pattern, and tailscale.com/ipn/ipnlocal/c2n.go
 	// :handleC2NDebugNetMap which uses netMapWithPeers() for the
 	// same reason.
@@ -327,6 +320,6 @@ type Node struct {
 	Whois map[string]*apitype.WhoIsResponse `json:"whois,omitempty"`
 
 	// SSHRules is the SSH rules slice extracted from
-	// [netmap.NetworkMap.SSHPolicy].Rules. Populated only for SSH scenarios.
+	// netmap.SSHPolicy.Rules. Populated only for SSH scenarios.
 	SSHRules []*tailcfg.SSHRule `json:"ssh_rules,omitempty"`
 }
diff --git a/hscontrol/types/testcapture/testcapture_test.go b/hscontrol/types/testcapture/testcapture_test.go
index 7cc98351b..e3e6282da 100644
--- a/hscontrol/types/testcapture/testcapture_test.go
+++ b/hscontrol/types/testcapture/testcapture_test.go
@@ -34,7 +34,7 @@ func sampleACLCapture() *testcapture.Capture {
 		Description:   "wildcard ACL: every node sees every other node",
 		Category:      "acl",
 		CapturedAt:    time.Date(2026, 4, 7, 12, 34, 56, 0, time.UTC),
-		ToolVersion:   "capture-test-0.0.0",
+		ToolVersion:   "tscap-test-0.0.0",
 		Tailnet:       "kratail2tid@passkey",
 		Input: testcapture.Input{
 			FullPolicy:      `{"acls":[{"action":"accept","src":["*"],"dst":["*:*"]}]}`,
@@ -102,7 +102,7 @@ func sampleSSHCapture() *testcapture.Capture {
 		Description:   "ssh accept autogroup:member to autogroup:self",
 		Category:      "ssh",
 		CapturedAt:    time.Date(2026, 4, 7, 13, 0, 0, 0, time.UTC),
-		ToolVersion:   "capture-test-0.0.0",
+		ToolVersion:   "tscap-test-0.0.0",
 		Tailnet:       "kratail2tid@passkey",
 		Input: testcapture.Input{
 			FullPolicy:      `{"ssh":[{"action":"accept","src":["autogroup:member"],"dst":["autogroup:self"],"users":["root"]}]}`,
@@ -138,9 +138,9 @@ func sampleSSHCapture() *testcapture.Capture {
 }
 
 // equalViaJSON compares two captures by JSON-marshaling them and
-// comparing the bytes. The [testcapture.Capture] struct embeds tailcfg view types
+// comparing the bytes. The Capture struct embeds tailcfg view types
 // with unexported pointer fields that go-cmp can't traverse, so a
-// JSON round-trip is the simplest way to verify [testcapture.Write]+[testcapture.Read] produced
+// JSON round-trip is the simplest way to verify Write+Read produced
 // equivalent values.
 func equalViaJSON(t *testing.T, want, got *testcapture.Capture) {
 	t.Helper()
@@ -238,7 +238,7 @@ func TestWrite_ProducesCommentHeader(t *testing.T) {
 		t.Errorf("header missing capture timestamp; got:\n%s", header)
 	}
 
-	if !strings.Contains(header, "tool version:") || !strings.Contains(header, "capture-test-0.0.0") {
+	if !strings.Contains(header, "tscap version:") || !strings.Contains(header, "tscap-test-0.0.0") {
 		t.Errorf("header missing tool version; got:\n%s", header)
 	}
 
@@ -416,7 +416,7 @@ func TestCommentHeader_EmptyFilterRulesCountAsEmpty(t *testing.T) {
 
 // TestInputUnmarshal_LegacyObjectForm asserts that a legacy capture
 // file written with full_policy as a raw JSON object (not a
-// JSON-encoded string) still deserialises into a valid [testcapture.Input], with
+// JSON-encoded string) still deserialises into a valid Input, with
 // the policy re-marshaled to a compact string so downstream consumers
 // see a uniform typed field.
 func TestInputUnmarshal_LegacyObjectForm(t *testing.T) {
@@ -444,8 +444,8 @@ func TestInputUnmarshal_LegacyObjectForm(t *testing.T) {
 		t.Errorf("FullPolicy:\n got %q\nwant %q", got.FullPolicy, want)
 	}
 
-	// Round-trip: the new [testcapture.Input.MarshalJSON] must emit the object form so
-	// [testcapture.Input.UnmarshalJSON] re-reads it identically.
+	// Round-trip: the new MarshalJSON must emit the object form so
+	// UnmarshalJSON re-reads it identically.
 	out, err := json.Marshal(got)
 	if err != nil {
 		t.Fatalf("re-marshal: %v", err)
diff --git a/hscontrol/types/testcapture/write.go b/hscontrol/types/testcapture/write.go
index 13e2d08ba..f6d21a577 100644
--- a/hscontrol/types/testcapture/write.go
+++ b/hscontrol/types/testcapture/write.go
@@ -11,7 +11,7 @@ import (
 	"github.com/tailscale/hujson"
 )
 
-// ErrNilCapture is returned by [Write] when called with a nil [Capture].
+// ErrNilCapture is returned by Write when called with a nil Capture.
 var ErrNilCapture = errors.New("testcapture: nil capture")
 
 // Write serializes c as a HuJSON file with a comment header. The
@@ -19,9 +19,9 @@ var ErrNilCapture = errors.New("testcapture: nil capture")
 // and is then renamed into place, so concurrent regeneration cannot
 // leave a half-written file behind.
 //
-// The comment header is built by [CommentHeader] from c's [Capture.TestID],
-// [Capture.Description], and [Capture.Captures]. The file's parent directory must
-// already exist; callers should [os.MkdirAll] first.
+// The comment header is built by CommentHeader from c's TestID,
+// Description, and Captures. The file's parent directory must
+// already exist; callers should MkdirAll first.
 func Write(path string, c *Capture) error {
 	if c == nil {
 		return fmt.Errorf("testcapture: Write %s: %w", path, ErrNilCapture)
@@ -86,7 +86,7 @@ func Write(path string, c *Capture) error {
 }
 
 // marshalHuJSON serializes v as HuJSON-formatted bytes. It is
-// standard JSON encoding followed by [hujson.Format] which produces
+// standard JSON encoding followed by hujson.Format which produces
 // consistent indentation/whitespace.
 func marshalHuJSON(v any) ([]byte, error) {
 	raw, err := json.Marshal(v)
diff --git a/hscontrol/types/testlog.go b/hscontrol/types/testlog.go
index 07429edac..af7f5b422 100644
--- a/hscontrol/types/testlog.go
+++ b/hscontrol/types/testlog.go
@@ -17,18 +17,18 @@ const EnvTestLogLevel = "HEADSCALE_TEST_LOG_LEVEL"
 // emits zerolog output, so this init() runs once per test binary and is
 // the only place that needs to know about test logging configuration.
 //
-// Default: [zerolog.ErrorLevel] (silent in green-path runs, real errors still surface).
+// Default: ErrorLevel (silent in green-path runs, real errors still surface).
 // Override: HEADSCALE_TEST_LOG_LEVEL=debug (or trace, info, warn, disabled).
 //
-// Production binaries are unaffected because [testing.Testing] returns false
-// outside of test execution. The same [testing.Testing] pattern is already
+// Production binaries are unaffected because testing.Testing() returns false
+// outside of test execution. The same testing.Testing() pattern is already
 // used in hscontrol/db/users.go and hscontrol/db/node.go, so importing the
 // testing package here is consistent with existing project conventions.
 //
 // Pitfalls:
-//   - log.Fatal still calls [os.Exit] and log.Panic still panics regardless of
+//   - log.Fatal still calls os.Exit and log.Panic still panics regardless of
 //     level — only the rendered message is suppressed.
-//   - Local buffer loggers ([zerolog.New] with a buffer) are also gated by the global
+//   - Local buffer loggers (zerolog.New(&buf)) are also gated by the global
 //     level. Tests that assert on log output (currently only
 //     hscontrol/util/zlog) re-enable trace level via their own init_test.go.
 func init() {
diff --git a/hscontrol/types/types_clone.go b/hscontrol/types/types_clone.go
index 1040e2142..6739beed3 100644
--- a/hscontrol/types/types_clone.go
+++ b/hscontrol/types/types_clone.go
@@ -86,7 +86,7 @@ var _NodeCloneNeedsRegeneration = Node(struct {
 	MachineKey     key.MachinePublic
 	NodeKey        key.NodePublic
 	DiscoKey       key.DiscoPublic
-	Endpoints      AddrPorts
+	Endpoints      []netip.AddrPort
 	Hostinfo       *tailcfg.Hostinfo
 	IPv4           *netip.Addr
 	IPv6           *netip.Addr
@@ -95,18 +95,17 @@ var _NodeCloneNeedsRegeneration = Node(struct {
 	UserID         *uint
 	User           *User
 	RegisterMethod string
-	Tags           Strings
+	Tags           []string
 	AuthKeyID      *uint64
 	AuthKey        *PreAuthKey
 	Expiry         *time.Time
 	LastSeen       *time.Time
-	ApprovedRoutes Prefixes
+	ApprovedRoutes []netip.Prefix
 	CreatedAt      time.Time
 	UpdatedAt      time.Time
 	DeletedAt      *time.Time
 	IsOnline       *bool
 	Unhealthy      bool
-	ActiveSessions int
 	SessionEpoch   uint64
 }{})
 
@@ -132,26 +131,21 @@ func (src *PreAuthKey) Clone() *PreAuthKey {
 	if dst.Expiration != nil {
 		dst.Expiration = new(*src.Expiration)
 	}
-	if dst.Revoked != nil {
-		dst.Revoked = new(*src.Revoked)
-	}
 	return dst
 }
 
 // A compilation failure here means this code must be regenerated, with the command at the top of this file.
 var _PreAuthKeyCloneNeedsRegeneration = PreAuthKey(struct {
-	ID          uint64
-	Key         string
-	Prefix      string
-	Hash        []byte
-	UserID      *uint
-	User        *User
-	Description string
-	Reusable    bool
-	Ephemeral   bool
-	Used        bool
-	Tags        []string
-	CreatedAt   *time.Time
-	Expiration  *time.Time
-	Revoked     *time.Time
+	ID         uint64
+	Key        string
+	Prefix     string
+	Hash       []byte
+	UserID     *uint
+	User       *User
+	Reusable   bool
+	Ephemeral  bool
+	Used       bool
+	Tags       []string
+	CreatedAt  *time.Time
+	Expiration *time.Time
 }{})
diff --git a/hscontrol/types/types_view.go b/hscontrol/types/types_view.go
index 6adcdda12..6684ecd61 100644
--- a/hscontrol/types/types_view.go
+++ b/hscontrol/types/types_view.go
@@ -92,29 +92,27 @@ func (v *UserView) UnmarshalJSONFrom(dec *jsontext.Decoder) error {
 func (v UserView) Model() gorm.Model { return v.ж.Model }
 
 // Name (username) for the user, is used if email is empty
-// Should not be used, please use [User.Username].
-// It is unique if [User.ProviderIdentifier] is not set.
+// Should not be used, please use Username().
+// It is unique if ProviderIdentifier is not set.
 func (v UserView) Name() string { return v.ж.Name }
 
 // Typically the full name of the user
 func (v UserView) DisplayName() string { return v.ж.DisplayName }
 
 // Email of the user
-// Should not be used, please use [User.Username].
+// Should not be used, please use Username().
 func (v UserView) Email() string { return v.ж.Email }
 
 // ProviderIdentifier is a unique or not set identifier of the
 // user from OIDC. It is the combination of `iss`
 // and `sub` claim in the OIDC token.
 // It is unique if set.
-// It is unique together with [User.Name].
+// It is unique together with Name.
 func (v UserView) ProviderIdentifier() sql.NullString { return v.ж.ProviderIdentifier }
 
 // Provider is the origin of the user account,
 // same as RegistrationMethod, without authkey.
-func (v UserView) Provider() string { return v.ж.Provider }
-
-// TODO(kradalby): See if we can fill in Gravatar here.
+func (v UserView) Provider() string      { return v.ж.Provider }
 func (v UserView) ProfilePicURL() string { return v.ж.ProfilePicURL }
 
 // A compilation failure here means this code must be regenerated, with the command at the top of this file.
@@ -210,8 +208,8 @@ func (v NodeView) IPv6() views.ValuePointer[netip.Addr] { return views.ValuePoin
 func (v NodeView) Hostname() string { return v.ж.Hostname }
 
 // Givenname represents either:
-// a DNS normalized version of [Node.Hostname]
-// a valid name set by the [User]
+// a DNS normalized version of Hostname
+// a valid name set by the User
 //
 // GivenName is the name used in all DNS related
 // parts of headscale.
@@ -230,7 +228,7 @@ func (v NodeView) RegisterMethod() string { return v.ж.RegisterMethod }
 // Tags cannot be removed once set (one-way transition).
 func (v NodeView) Tags() views.Slice[string] { return views.SliceOf(v.ж.Tags) }
 
-// When a node has been created with a [PreAuthKey], we need to
+// When a node has been created with a PreAuthKey, we need to
 // prevent the preauthkey from being deleted before the node.
 // The preauthkey can define "tags" of the node so we need it
 // around.
@@ -264,21 +262,10 @@ func (v NodeView) IsOnline() views.ValuePointer[bool] { return views.ValuePointe
 // online. Written by the HA prober. Runtime-only.
 func (v NodeView) Unhealthy() bool { return v.ж.Unhealthy }
 
-// ActiveSessions counts live poll sessions for this node.
-// [State.Connect] increments it and every session release
-// ([State.Disconnect]) decrements it, so the node goes offline
-// exactly when its last session ends — regardless of the order in
-// which overlapping sessions' cleanups run. Never persisted, like
-// SessionEpoch.
-func (v NodeView) ActiveSessions() int { return v.ж.ActiveSessions }
-
-// SessionEpoch identifies a poll session generation; Connect bumps
-// it. It complements ActiveSessions rather than duplicating it:
-// the epoch is monotonic, which the HA prober needs to detect that
-// a probe target reconnected mid-cycle — a refcount can return to
-// its old value, a generation cannot. poll.go also uses the epoch
-// returned by Connect as a "Connect ran" sentinel for its cleanup,
-// and Disconnect logs it. Runtime-only.
+// SessionEpoch identifies a poll session. Connect bumps it; a
+// Disconnect carrying a stale value is dropped, so a deferred
+// disconnect from a previous session cannot overwrite a newer
+// Connect. Runtime-only.
 func (v NodeView) SessionEpoch() uint64 { return v.ж.SessionEpoch }
 func (v NodeView) String() string       { return v.ж.String() }
 
@@ -288,7 +275,7 @@ var _NodeViewNeedsRegeneration = Node(struct {
 	MachineKey     key.MachinePublic
 	NodeKey        key.NodePublic
 	DiscoKey       key.DiscoPublic
-	Endpoints      AddrPorts
+	Endpoints      []netip.AddrPort
 	Hostinfo       *tailcfg.Hostinfo
 	IPv4           *netip.Addr
 	IPv6           *netip.Addr
@@ -297,18 +284,17 @@ var _NodeViewNeedsRegeneration = Node(struct {
 	UserID         *uint
 	User           *User
 	RegisterMethod string
-	Tags           Strings
+	Tags           []string
 	AuthKeyID      *uint64
 	AuthKey        *PreAuthKey
 	Expiry         *time.Time
 	LastSeen       *time.Time
-	ApprovedRoutes Prefixes
+	ApprovedRoutes []netip.Prefix
 	CreatedAt      time.Time
 	UpdatedAt      time.Time
 	DeletedAt      *time.Time
 	IsOnline       *bool
 	Unhealthy      bool
-	ActiveSessions int
 	SessionEpoch   uint64
 }{})
 
@@ -390,19 +376,15 @@ func (v PreAuthKeyView) Prefix() string { return v.ж.Prefix }
 // bcrypt
 func (v PreAuthKeyView) Hash() views.ByteSlice[[]byte] { return views.ByteSliceOf(v.ж.Hash) }
 
-// For tagged keys: [PreAuthKey.UserID] tracks who created the key (informational)
-// For user-owned keys: [PreAuthKey.UserID] tracks the node owner
+// For tagged keys: UserID tracks who created the key (informational)
+// For user-owned keys: UserID tracks the node owner
 // Can be nil for system-created tagged keys
 func (v PreAuthKeyView) UserID() views.ValuePointer[uint] { return views.ValuePointerOf(v.ж.UserID) }
 
-func (v PreAuthKeyView) User() UserView { return v.ж.User.View() }
-
-// Free-text description, set via the v2 API. Empty for keys created through
-// the v1 API or CLI.
-func (v PreAuthKeyView) Description() string { return v.ж.Description }
-func (v PreAuthKeyView) Reusable() bool      { return v.ж.Reusable }
-func (v PreAuthKeyView) Ephemeral() bool     { return v.ж.Ephemeral }
-func (v PreAuthKeyView) Used() bool          { return v.ж.Used }
+func (v PreAuthKeyView) User() UserView  { return v.ж.User.View() }
+func (v PreAuthKeyView) Reusable() bool  { return v.ж.Reusable }
+func (v PreAuthKeyView) Ephemeral() bool { return v.ж.Ephemeral }
+func (v PreAuthKeyView) Used() bool      { return v.ж.Used }
 
 // Tags to assign to nodes registered with this key.
 // Tags are copied to the node during registration.
@@ -416,27 +398,18 @@ func (v PreAuthKeyView) Expiration() views.ValuePointer[time.Time] {
 	return views.ValuePointerOf(v.ж.Expiration)
 }
 
-// Revoked is set when the key is revoked through the v2 API (Tailscale's
-// DELETE). A revoked key is invalid but kept retrievable until the
-// background collector reaps it after the configured retention window.
-func (v PreAuthKeyView) Revoked() views.ValuePointer[time.Time] {
-	return views.ValuePointerOf(v.ж.Revoked)
-}
-
 // A compilation failure here means this code must be regenerated, with the command at the top of this file.
 var _PreAuthKeyViewNeedsRegeneration = PreAuthKey(struct {
-	ID          uint64
-	Key         string
-	Prefix      string
-	Hash        []byte
-	UserID      *uint
-	User        *User
-	Description string
-	Reusable    bool
-	Ephemeral   bool
-	Used        bool
-	Tags        []string
-	CreatedAt   *time.Time
-	Expiration  *time.Time
-	Revoked     *time.Time
+	ID         uint64
+	Key        string
+	Prefix     string
+	Hash       []byte
+	UserID     *uint
+	User       *User
+	Reusable   bool
+	Ephemeral  bool
+	Used       bool
+	Tags       []string
+	CreatedAt  *time.Time
+	Expiration *time.Time
 }{})
diff --git a/hscontrol/types/users.go b/hscontrol/types/users.go
index cc194aa49..8b87a6ce8 100644
--- a/hscontrol/types/users.go
+++ b/hscontrol/types/users.go
@@ -10,12 +10,13 @@ import (
 	"net/url"
 	"strconv"
 	"strings"
-	"time"
 
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/hscontrol/util/zlog/zf"
 	"github.com/rs/zerolog"
 	"github.com/rs/zerolog/log"
+	"google.golang.org/protobuf/types/known/timestamppb"
 	"gorm.io/gorm"
 	"tailscale.com/tailcfg"
 )
@@ -36,7 +37,7 @@ const (
 	TaggedDevicesUserID = 2147455555
 )
 
-// TaggedDevices is a special user used in [tailcfg.MapResponse] for tagged nodes.
+// TaggedDevices is a special user used in MapResponse for tagged nodes.
 // Tagged nodes don't belong to a real user - the tag is their identity.
 // This special user ID is used when rendering tagged nodes in the Tailscale protocol.
 var TaggedDevices = User{
@@ -71,29 +72,28 @@ type User struct {
 	// but not if you only run with CLI users.
 
 	// Name (username) for the user, is used if email is empty
-	// Should not be used, please use [User.Username].
-	// It is unique if [User.ProviderIdentifier] is not set.
+	// Should not be used, please use Username().
+	// It is unique if ProviderIdentifier is not set.
 	Name string
 
 	// Typically the full name of the user
 	DisplayName string
 
 	// Email of the user
-	// Should not be used, please use [User.Username].
+	// Should not be used, please use Username().
 	Email string
 
 	// ProviderIdentifier is a unique or not set identifier of the
 	// user from OIDC. It is the combination of `iss`
 	// and `sub` claim in the OIDC token.
 	// It is unique if set.
-	// It is unique together with [User.Name].
+	// It is unique together with Name.
 	ProviderIdentifier sql.NullString
 
 	// Provider is the origin of the user account,
 	// same as RegistrationMethod, without authkey.
 	Provider string
 
-	// TODO(kradalby): See if we can fill in Gravatar here.
 	ProfilePicURL string
 }
 
@@ -105,7 +105,7 @@ func (u *User) StringID() string {
 	return strconv.FormatUint(uint64(u.ID), 10)
 }
 
-// TypedID returns a pointer to the user's ID as a [UserID] type.
+// TypedID returns a pointer to the user's ID as a UserID type.
 // This is a convenience method to avoid ugly casting like ptr.To(types.UserID(user.ID)).
 func (u *User) TypedID() *UserID {
 	uid := UserID(u.ID)
@@ -128,44 +128,22 @@ func (u *User) Username() string {
 	)
 }
 
-// Display returns the [User.DisplayName] if it exists, otherwise
-// it will return the [User.Username].
+// Display returns the DisplayName if it exists, otherwise
+// it will return the Username.
 func (u *User) Display() string {
 	return cmp.Or(u.DisplayName, u.Username())
 }
 
-// Username returns the user's login name via the view; see [User.Username].
-func (v UserView) Username() string {
-	if !v.Valid() {
-		return ""
-	}
-
-	return v.ж.Username()
-}
-
-// Display returns the user's display name via the view; see [User.Display].
-func (v UserView) Display() string {
-	if !v.Valid() {
-		return ""
-	}
-
-	return v.ж.Display()
-}
-
-// CreatedAt returns when the user was created.
-func (v UserView) CreatedAt() time.Time {
-	if !v.Valid() {
-		return time.Time{}
-	}
-
-	return v.ж.CreatedAt
+// TODO(kradalby): See if we can fill in Gravatar here.
+func (u *User) profilePicURL() string {
+	return u.ProfilePicURL
 }
 
 func (u *User) TailscaleUser() tailcfg.User {
 	return tailcfg.User{
 		ID:            tailcfg.UserID(u.ID), //nolint:gosec // UserID is bounded
 		DisplayName:   u.Display(),
-		ProfilePicURL: u.ProfilePicURL,
+		ProfilePicURL: u.profilePicURL(),
 		Created:       u.CreatedAt,
 	}
 }
@@ -175,7 +153,7 @@ func (u UserView) TailscaleUser() tailcfg.User {
 }
 
 // ID returns the user's ID.
-// This is a custom accessor because [gorm.Model].ID is embedded
+// This is a custom accessor because gorm.Model.ID is embedded
 // and the viewer generator doesn't always produce it.
 func (u UserView) ID() uint {
 	return u.ж.ID
@@ -187,7 +165,7 @@ func (u *User) TailscaleLogin() tailcfg.Login {
 		Provider:      u.Provider,
 		LoginName:     u.Username(),
 		DisplayName:   u.Display(),
-		ProfilePicURL: u.ProfilePicURL,
+		ProfilePicURL: u.profilePicURL(),
 	}
 }
 
@@ -200,7 +178,7 @@ func (u *User) TailscaleUserProfile() tailcfg.UserProfile {
 		ID:            tailcfg.UserID(u.ID), //nolint:gosec // UserID is bounded
 		LoginName:     u.Username(),
 		DisplayName:   u.Display(),
-		ProfilePicURL: u.ProfilePicURL,
+		ProfilePicURL: u.profilePicURL(),
 	}
 }
 
@@ -208,7 +186,29 @@ func (u UserView) TailscaleUserProfile() tailcfg.UserProfile {
 	return u.ж.TailscaleUserProfile()
 }
 
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler] for safe logging.
+func (u *User) Proto() *v1.User {
+	// Use Name if set, otherwise fall back to Username() which provides
+	// a display-friendly identifier (Email > ProviderIdentifier > ID).
+	// This ensures OIDC users (who typically have empty Name) display
+	// their email, while CLI users retain their original Name.
+	name := u.Name
+	if name == "" {
+		name = u.Username()
+	}
+
+	return &v1.User{
+		Id:            uint64(u.ID),
+		Name:          name,
+		CreatedAt:     timestamppb.New(u.CreatedAt),
+		DisplayName:   u.DisplayName,
+		Email:         u.Email,
+		ProviderId:    u.ProviderIdentifier.String,
+		Provider:      u.Provider,
+		ProfilePicUrl: u.ProfilePicURL,
+	}
+}
+
+// MarshalZerologObject implements zerolog.LogObjectMarshaler for safe logging.
 func (u *User) MarshalZerologObject(e *zerolog.Event) {
 	if u == nil {
 		return
@@ -223,7 +223,7 @@ func (u *User) MarshalZerologObject(e *zerolog.Event) {
 	}
 }
 
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler] for [UserView].
+// MarshalZerologObject implements zerolog.LogObjectMarshaler for UserView.
 func (u UserView) MarshalZerologObject(e *zerolog.Event) {
 	if !u.Valid() {
 		return
@@ -239,7 +239,6 @@ type FlexibleStringSlice []string
 
 func (f *FlexibleStringSlice) UnmarshalJSON(data []byte) error {
 	var arr []string
-
 	err := json.Unmarshal(data, &arr)
 	if err == nil {
 		*f = arr
@@ -247,7 +246,6 @@ func (f *FlexibleStringSlice) UnmarshalJSON(data []byte) error {
 	}
 
 	var single string
-
 	err = json.Unmarshal(data, &single)
 	if err == nil {
 		*f = []string{single}
@@ -261,6 +259,7 @@ func (f *FlexibleStringSlice) UnmarshalJSON(data []byte) error {
 // string "true" or "false" instead of a boolean.
 // This maps bool to a specific type with a custom unmarshaler to
 // ensure we can decode it from a string.
+// https://github.com/juanfont/headscale/issues/2293
 type FlexibleBoolean bool
 
 func (bit *FlexibleBoolean) UnmarshalJSON(data []byte) error {
@@ -295,23 +294,23 @@ type OIDCClaims struct {
 	Iss string `json:"iss"`
 
 	// Name is the user's full name.
-	Name              string              `json:"name,omitempty"`
+	Name              string          `json:"name,omitempty"`
 	Groups            FlexibleStringSlice `json:"groups,omitempty"`
 	Email             string              `json:"email,omitempty"`
 	EmailVerified     FlexibleBoolean     `json:"email_verified,omitempty"`
-	ProfilePictureURL string              `json:"picture,omitempty"`
-	Username          string              `json:"preferred_username,omitempty"`
+	ProfilePictureURL string          `json:"picture,omitempty"`
+	Username          string          `json:"preferred_username,omitempty"`
 }
 
-// Identifier returns a unique identifier string combining the [OIDCClaims.Iss] and [OIDCClaims.Sub] claims.
-// The format depends on whether [OIDCClaims.Iss] is a URL or not:
+// Identifier returns a unique identifier string combining the Iss and Sub claims.
+// The format depends on whether Iss is a URL or not:
 // - For URLs: Joins the URL and sub path (e.g., "https://example.com/sub")
 // - For non-URLs: Joins with a slash (e.g., "oidc/sub")
-// - For empty [OIDCClaims.Iss]: Returns just "sub"
-// - For empty [OIDCClaims.Sub]: Returns just the Issuer
+// - For empty Iss: Returns just "sub"
+// - For empty Sub: Returns just the Issuer
 // - For both empty: Returns empty string
 //
-// The result is cleaned using [CleanIdentifier] to ensure consistent formatting.
+// The result is cleaned using CleanIdentifier() to ensure consistent formatting.
 func (c *OIDCClaims) Identifier() string {
 	// Handle empty components special cases
 	if c.Iss == "" && c.Sub == "" {
@@ -366,7 +365,19 @@ func CleanIdentifier(identifier string) string {
 	u, err := url.Parse(identifier)
 	if err == nil && u.Scheme != "" {
 		// Clean path by removing empty segments and whitespace within segments
-		if cleanParts := cleanSlashSegments(u.Path); len(cleanParts) == 0 {
+		parts := strings.FieldsFunc(u.Path, func(c rune) bool { return c == '/' })
+		for i, part := range parts {
+			parts[i] = strings.TrimSpace(part)
+		}
+		// Remove empty parts after trimming
+		cleanParts := make([]string, 0, len(parts))
+		for _, part := range parts {
+			if part != "" {
+				cleanParts = append(cleanParts, part)
+			}
+		}
+
+		if len(cleanParts) == 0 {
 			u.Path = ""
 		} else {
 			u.Path = "/" + strings.Join(cleanParts, "/")
@@ -378,7 +389,16 @@ func CleanIdentifier(identifier string) string {
 	}
 
 	// Handle non-URL identifiers
-	cleanParts := cleanSlashSegments(identifier)
+	parts := strings.FieldsFunc(identifier, func(c rune) bool { return c == '/' })
+	// Clean whitespace from each part
+	cleanParts := make([]string, 0, len(parts))
+	for _, part := range parts {
+		trimmed := strings.TrimSpace(part)
+		if trimmed != "" {
+			cleanParts = append(cleanParts, trimmed)
+		}
+	}
+
 	if len(cleanParts) == 0 {
 		return ""
 	}
@@ -386,34 +406,19 @@ func CleanIdentifier(identifier string) string {
 	return strings.Join(cleanParts, "/")
 }
 
-// cleanSlashSegments splits s on '/', trims whitespace from each segment, and
-// returns the non-empty segments.
-func cleanSlashSegments(s string) []string {
-	parts := strings.FieldsFunc(s, func(c rune) bool { return c == '/' })
-
-	cleanParts := make([]string, 0, len(parts))
-	for _, part := range parts {
-		if part = strings.TrimSpace(part); part != "" {
-			cleanParts = append(cleanParts, part)
-		}
-	}
-
-	return cleanParts
-}
-
 type OIDCUserInfo struct {
-	Sub               string              `json:"sub"`
-	Name              string              `json:"name"`
-	GivenName         string              `json:"given_name"`
-	FamilyName        string              `json:"family_name"`
-	PreferredUsername string              `json:"preferred_username"`
-	Email             string              `json:"email"`
+	Sub               string          `json:"sub"`
+	Name              string          `json:"name"`
+	GivenName         string          `json:"given_name"`
+	FamilyName        string          `json:"family_name"`
+	PreferredUsername string          `json:"preferred_username"`
+	Email             string          `json:"email"`
 	EmailVerified     FlexibleBoolean     `json:"email_verified,omitempty"`
 	Groups            FlexibleStringSlice `json:"groups"`
 	Picture           string              `json:"picture"`
 }
 
-// FromClaim overrides a [User] from OIDC claims.
+// FromClaim overrides a User from OIDC claims.
 // All fields will be updated, except for the ID.
 func (u *User) FromClaim(claims *OIDCClaims, emailVerifiedRequired bool) {
 	err := util.ValidateUsername(claims.Username)
diff --git a/hscontrol/types/version.go b/hscontrol/types/version.go
index ec07a239b..62124db1d 100644
--- a/hscontrol/types/version.go
+++ b/hscontrol/types/version.go
@@ -50,6 +50,7 @@ var GetVersionInfo = sync.OnceValue(func() *VersionInfo {
 			OS:      runtime.GOOS,
 			Arch:    runtime.GOARCH,
 		},
+		Dirty: false,
 	}
 
 	buildInfo, ok := buildInfo()
diff --git a/hscontrol/util/addr.go b/hscontrol/util/addr.go
index b44343255..782f15e68 100644
--- a/hscontrol/util/addr.go
+++ b/hscontrol/util/addr.go
@@ -9,9 +9,13 @@ import (
 	"go4.org/netipx"
 )
 
-// This is borrowed from, and updated to use [netipx.IPSet]
+// This is borrowed from, and updated to use IPSet
 // https://github.com/tailscale/tailscale/blob/71029cea2ddf82007b80f465b256d027eab0f02d/wgengine/filter/tailcfg.go#L97-L162
 // TODO(kradalby): contribute upstream and make public.
+var (
+	zeroIP4 = netip.AddrFrom4([4]byte{})
+	zeroIP6 = netip.AddrFrom16([16]byte{})
+)
 
 // parseIPSet parses arg as one:
 //
@@ -20,14 +24,14 @@ import (
 //   - a CIDR (e.g. "192.168.0.0/16")
 //   - a range of two IPs, inclusive, separated by hyphen ("2eff::1-2eff::0800")
 //
-// bits, if non-nil, is the legacy [tailcfg.FilterRule.SrcBits] CIDR length to make a IP
+// bits, if non-nil, is the legacy SrcBits CIDR length to make a IP
 // address (without a slash) treated as a CIDR of *bits length.
 // nolint
 func ParseIPSet(arg string, bits *int) (*netipx.IPSet, error) {
 	var ipSet netipx.IPSetBuilder
 	if arg == "*" {
-		ipSet.AddPrefix(netip.PrefixFrom(netip.IPv4Unspecified(), 0))
-		ipSet.AddPrefix(netip.PrefixFrom(netip.IPv6Unspecified(), 0))
+		ipSet.AddPrefix(netip.PrefixFrom(zeroIP4, 0))
+		ipSet.AddPrefix(netip.PrefixFrom(zeroIP6, 0))
 
 		return ipSet.IPSet()
 	}
@@ -86,9 +90,13 @@ func ParseIPSet(arg string, bits *int) (*netipx.IPSet, error) {
 }
 
 func GetIPPrefixEndpoints(na netip.Prefix) (netip.Addr, netip.Addr) {
-	ipRange := netipx.RangeOfPrefix(na)
+	var network, broadcast netip.Addr
 
-	return ipRange.From(), ipRange.To()
+	ipRange := netipx.RangeOfPrefix(na)
+	network = ipRange.From()
+	broadcast = ipRange.To()
+
+	return network, broadcast
 }
 
 func StringToIPPrefix(prefixes []string) ([]netip.Prefix, error) {
@@ -106,7 +114,7 @@ func StringToIPPrefix(prefixes []string) ([]netip.Prefix, error) {
 	return result, nil
 }
 
-// IPSetAddrIter returns a function that iterates over all the IPs in the [netipx.IPSet].
+// IPSetAddrIter returns a function that iterates over all the IPs in the IPSet.
 func IPSetAddrIter(ipSet *netipx.IPSet) iter.Seq[netip.Addr] {
 	return func(yield func(netip.Addr) bool) {
 		for _, rng := range ipSet.Ranges() {
diff --git a/hscontrol/util/dns.go b/hscontrol/util/dns.go
index 025cb50d6..c78a68d43 100644
--- a/hscontrol/util/dns.go
+++ b/hscontrol/util/dns.go
@@ -4,7 +4,6 @@ import (
 	"errors"
 	"fmt"
 	"net/netip"
-	"slices"
 	"strconv"
 	"strings"
 	"unicode"
@@ -24,7 +23,7 @@ const (
 )
 
 // DNS validation errors. Hostname-side validation lives on
-// `tailscale.com/util/dnsname` and [state.NodeStore] collision handling; only
+// `tailscale.com/util/dnsname` and NodeStore collision handling; only
 // the username-side errors stay in this package.
 var (
 	ErrUsernameTooShort        = errors.New("username must be at least 2 characters long")
@@ -72,12 +71,12 @@ func ValidateUsername(username string) error {
 	return nil
 }
 
-// generateMagicDNSRootDomains generates a list of DNS entries to be included in [tailcfg.DNSConfig.Routes] in [tailcfg.MapResponse].
+// generateMagicDNSRootDomains generates a list of DNS entries to be included in `Routes` in `MapResponse`.
 // This list of reverse DNS entries instructs the OS on what subnets and domains the Tailscale embedded DNS
 // server (listening in 100.100.100.100 udp/53) should be used for.
 //
 // Tailscale.com includes in the list:
-// - the [types.DNSConfig.BaseDomain] of the user
+// - the `BaseDomain` of the user
 // - the reverse DNS entry for IPv6 (0.e.1.a.c.5.1.1.a.7.d.f.ip6.arpa., see below more on IPv6)
 // - the reverse DNS entries for the IPv4 subnets covered by the user's `IPPrefix`.
 //   In the public SaaS this is [64-127].100.in-addr.arpa.
@@ -94,7 +93,7 @@ func ValidateUsername(username string) error {
 // From the netmask we can find out the wildcard bits (the bits that are not set in the netmask).
 // This allows us to then calculate the subnets included in the subsequent class block and generate the entries.
 func GenerateIPv4DNSRootDomain(ipPrefix netip.Prefix) []dnsname.FQDN {
-	// Conversion to the std lib [net.IPNet], a bit easier to operate
+	// Conversion to the std lib net.IPnet, a bit easier to operate
 	netRange := netipx.PrefixIPNet(ipPrefix)
 	maskBits, _ := netRange.Mask.Size()
 
@@ -104,25 +103,6 @@ func GenerateIPv4DNSRootDomain(ipPrefix netip.Prefix) []dnsname.FQDN {
 	// wildcardBits is the number of bits not under the mask in the lastOctet
 	wildcardBits := ByteSize - maskBits%ByteSize
 
-	// A mask covering the full address width (an IPv4 /32) leaves no wildcard
-	// octet, so lastOctet would index past the address. Emit the single
-	// reverse-DNS name for that exact address instead of panicking.
-	if lastOctet >= len(netRange.IP) {
-		rdnsSlice := make([]string, 0, len(netRange.IP)+1)
-		for _, v := range slices.Backward(netRange.IP) {
-			rdnsSlice = append(rdnsSlice, strconv.FormatUint(uint64(v), 10))
-		}
-
-		rdnsSlice = append(rdnsSlice, "in-addr.arpa.")
-
-		fqdn, err := dnsname.ToFQDN(strings.Join(rdnsSlice, "."))
-		if err != nil {
-			return nil
-		}
-
-		return []dnsname.FQDN{fqdn}
-	}
-
 	// minVal is the value in the lastOctet byte of the IP
 	// maxVal is basically 2^wildcardBits - i.e., the value when all the wildcardBits are set to 1
 	minVal := uint(netRange.IP[lastOctet])
@@ -130,8 +110,8 @@ func GenerateIPv4DNSRootDomain(ipPrefix netip.Prefix) []dnsname.FQDN {
 
 	// here we generate the base domain (e.g., 100.in-addr.arpa., 16.172.in-addr.arpa., etc.)
 	rdnsSlice := []string{}
-	for _, b := range slices.Backward(netRange.IP[:lastOctet]) {
-		rdnsSlice = append(rdnsSlice, strconv.FormatUint(uint64(b), 10))
+	for i := lastOctet - 1; i >= 0; i-- {
+		rdnsSlice = append(rdnsSlice, strconv.FormatUint(uint64(netRange.IP[i]), 10))
 	}
 
 	rdnsSlice = append(rdnsSlice, "in-addr.arpa.")
@@ -150,6 +130,24 @@ func GenerateIPv4DNSRootDomain(ipPrefix netip.Prefix) []dnsname.FQDN {
 	return fqdns
 }
 
+// generateMagicDNSRootDomains generates a list of DNS entries to be included in `Routes` in `MapResponse`.
+// This list of reverse DNS entries instructs the OS on what subnets and domains the Tailscale embedded DNS
+// server (listening in 100.100.100.100 udp/53) should be used for.
+//
+// Tailscale.com includes in the list:
+// - the `BaseDomain` of the user
+// - the reverse DNS entry for IPv6 (0.e.1.a.c.5.1.1.a.7.d.f.ip6.arpa., see below more on IPv6)
+// - the reverse DNS entries for the IPv4 subnets covered by the user's `IPPrefix`.
+//   In the public SaaS this is [64-127].100.in-addr.arpa.
+//
+// The main purpose of this function is then generating the list of IPv4 entries. For the 100.64.0.0/10, this
+// is clear, and could be hardcoded. But we are allowing any range as `IPPrefix`, so we need to find out the
+// subnets when we have 172.16.0.0/16 (i.e., [0-255].16.172.in-addr.arpa.), or any other subnet.
+//
+// How IN-ADDR.ARPA domains work is defined in RFC1035 (section 3.5). Tailscale.com seems to adhere to this,
+// and do not make use of RFC2317 ("Classless IN-ADDR.ARPA delegation") - hence generating the entries for the next
+// class block only.
+
 // GenerateIPv6DNSRootDomain generates the IPv6 reverse DNS root domains.
 // From the netmask we can find out the wildcard bits (the bits that are not set in the netmask).
 // This allows us to then calculate the subnets included in the subsequent class block and generate the entries.
@@ -158,19 +156,25 @@ func GenerateIPv6DNSRootDomain(ipPrefix netip.Prefix) []dnsname.FQDN {
 
 	maskBits, _ := netipx.PrefixIPNet(ipPrefix).Mask.Size()
 	expanded := ipPrefix.Addr().StringExpanded()
-	nibbleStr := strings.ReplaceAll(expanded, ":", "")
+	nibbleStr := strings.Map(func(r rune) rune {
+		if r == ':' {
+			return -1
+		}
+
+		return r
+	}, expanded)
 
 	// TODO?: that does not look the most efficient implementation,
 	// but the inputs are not so long as to cause problems,
 	// and from what I can see, the generateMagicDNSRootDomains
 	// function is called only once over the lifetime of a server process.
-	prefixConstantParts := make([]string, 0, maskBits/nibbleLen)
+	prefixConstantParts := []string{}
 	for i := range maskBits / nibbleLen {
-		prefixConstantParts = append(prefixConstantParts, string(nibbleStr[i]))
+		prefixConstantParts = append(
+			[]string{string(nibbleStr[i])},
+			prefixConstantParts...)
 	}
 
-	slices.Reverse(prefixConstantParts)
-
 	makeDomain := func(variablePrefix ...string) (dnsname.FQDN, error) {
 		prefix := strings.Join(append(variablePrefix, prefixConstantParts...), ".")
 
diff --git a/hscontrol/util/dns_rootdomain_test.go b/hscontrol/util/dns_rootdomain_test.go
deleted file mode 100644
index a53d64803..000000000
--- a/hscontrol/util/dns_rootdomain_test.go
+++ /dev/null
@@ -1,20 +0,0 @@
-package util
-
-import (
-	"net/netip"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestGenerateIPv4DNSRootDomainSingleAddress ensures a single-address IPv4
-// prefix (/32) does not index past the 4-byte address and panic. A full-width
-// mask leaves no wildcard octet, so the function must emit the one reverse-DNS
-// name for that address.
-func TestGenerateIPv4DNSRootDomainSingleAddress(t *testing.T) {
-	require.NotPanics(t, func() {
-		fqdns := GenerateIPv4DNSRootDomain(netip.MustParsePrefix("100.64.0.1/32"))
-		assert.Len(t, fqdns, 1)
-	})
-}
diff --git a/hscontrol/util/dns_test.go b/hscontrol/util/dns_test.go
index f16ab8dda..a70a1520f 100644
--- a/hscontrol/util/dns_test.go
+++ b/hscontrol/util/dns_test.go
@@ -9,6 +9,7 @@ import (
 	"tailscale.com/util/must"
 )
 
+
 func TestMagicDNSRootDomains100(t *testing.T) {
 	domains := GenerateIPv4DNSRootDomain(netip.MustParsePrefix("100.64.0.0/10"))
 
diff --git a/hscontrol/util/log.go b/hscontrol/util/log.go
index 597767a67..03de9c344 100644
--- a/hscontrol/util/log.go
+++ b/hscontrol/util/log.go
@@ -32,15 +32,19 @@ type DBLogWrapper struct {
 }
 
 func NewDBLogWrapper(origin *zerolog.Logger, slowThreshold time.Duration, skipErrRecordNotFound bool, parameterizedQueries bool) *DBLogWrapper {
-	return &DBLogWrapper{
+	l := &DBLogWrapper{
 		Logger:                origin,
 		Level:                 origin.GetLevel(),
 		SlowThreshold:         slowThreshold,
 		SkipErrRecordNotFound: skipErrRecordNotFound,
 		ParameterizedQueries:  parameterizedQueries,
 	}
+
+	return l
 }
 
+type DBLogWrapperOption func(*DBLogWrapper)
+
 func (l *DBLogWrapper) LogMode(gormLogger.LogLevel) gormLogger.Interface {
 	return l
 }
@@ -67,16 +71,16 @@ func (l *DBLogWrapper) Trace(ctx context.Context, begin time.Time, fc func() (sq
 	}
 
 	if err != nil && (!errors.Is(err, gorm.ErrRecordNotFound) || !l.SkipErrRecordNotFound) {
-		l.Logger.Error().Err(err).Fields(fields).Msg("")
+		l.Logger.Error().Err(err).Fields(fields).Msgf("")
 		return
 	}
 
 	if l.SlowThreshold != 0 && elapsed > l.SlowThreshold {
-		l.Logger.Warn().Fields(fields).Msg("")
+		l.Logger.Warn().Fields(fields).Msgf("")
 		return
 	}
 
-	l.Logger.Debug().Fields(fields).Msg("")
+	l.Logger.Debug().Fields(fields).Msgf("")
 }
 
 func (l *DBLogWrapper) ParamsFilter(ctx context.Context, sql string, params ...any) (string, []any) {
diff --git a/hscontrol/util/net.go b/hscontrol/util/net.go
index c3c15cefb..e28bb00b4 100644
--- a/hscontrol/util/net.go
+++ b/hscontrol/util/net.go
@@ -10,9 +10,7 @@ import (
 	"tailscale.com/net/tsaddr"
 )
 
-// SocketDialer dials a local unix-domain socket, letting the HTTP CLI client
-// reach the headscale API over its unix socket.
-func SocketDialer(ctx context.Context, addr string) (net.Conn, error) {
+func GrpcSocketDialer(ctx context.Context, addr string) (net.Conn, error) {
 	var d net.Dialer
 
 	return d.DialContext(ctx, "unix", addr)
@@ -28,15 +26,16 @@ func PrefixesToString(prefixes []netip.Prefix) []string {
 }
 
 func MustStringsToPrefixes(strings []string) []netip.Prefix {
-	prefixes, err := StringToIPPrefix(strings)
-	if err != nil {
-		panic(err)
+	ret := make([]netip.Prefix, 0, len(strings))
+	for _, str := range strings {
+		prefix := netip.MustParsePrefix(str)
+		ret = append(ret, prefix)
 	}
 
-	return prefixes
+	return ret
 }
 
-// TheInternet returns the [netipx.IPSet] for the Internet.
+// TheInternet returns the IPSet for the Internet.
 // https://www.youtube.com/watch?v=iDbyYGrswtg
 var TheInternet = sync.OnceValue(func() *netipx.IPSet {
 	var internetBuilder netipx.IPSetBuilder
@@ -62,19 +61,3 @@ var TheInternet = sync.OnceValue(func() *netipx.IPSet {
 
 	return theInternetSet
 })
-
-// IPSetSubsetOf reports whether every prefix of candidate is contained in
-// container. A nil candidate or container returns false.
-func IPSetSubsetOf(candidate, container *netipx.IPSet) bool {
-	if candidate == nil || container == nil {
-		return false
-	}
-
-	for _, pref := range candidate.Prefixes() {
-		if !container.ContainsPrefix(pref) {
-			return false
-		}
-	}
-
-	return true
-}
diff --git a/hscontrol/util/prompt.go b/hscontrol/util/prompt.go
index 8abda2305..5f0adedef 100644
--- a/hscontrol/util/prompt.go
+++ b/hscontrol/util/prompt.go
@@ -3,7 +3,6 @@ package util
 import (
 	"fmt"
 	"os"
-	"slices"
 	"strings"
 )
 
@@ -19,6 +18,10 @@ func YesNo(msg string) bool {
 	_, _ = fmt.Scanln(&resp)
 
 	resp = strings.ToLower(resp)
+	switch resp {
+	case "y", "yes", "sure":
+		return true
+	}
 
-	return slices.Contains([]string{"y", "yes", "sure"}, resp)
+	return false
 }
diff --git a/hscontrol/util/string.go b/hscontrol/util/string.go
new file mode 100644
index 000000000..b0f0376a8
--- /dev/null
+++ b/hscontrol/util/string.go
@@ -0,0 +1,109 @@
+package util
+
+import (
+	"crypto/rand"
+	"encoding/base64"
+	"fmt"
+	"strings"
+
+	"tailscale.com/tailcfg"
+)
+
+// GenerateRandomBytes returns securely generated random bytes.
+// It will return an error if the system's secure random
+// number generator fails to function correctly, in which
+// case the caller should not continue.
+func GenerateRandomBytes(n int) ([]byte, error) {
+	bytes := make([]byte, n)
+
+	// Note that err == nil only if we read len(b) bytes.
+	if _, err := rand.Read(bytes); err != nil { //nolint:noinlineerr
+		return nil, err
+	}
+
+	return bytes, nil
+}
+
+// GenerateRandomStringURLSafe returns a URL-safe, base64 encoded
+// securely generated random string.
+// It will return an error if the system's secure random
+// number generator fails to function correctly, in which
+// case the caller should not continue.
+func GenerateRandomStringURLSafe(n int) (string, error) {
+	b, err := GenerateRandomBytes(n)
+
+	uenc := base64.RawURLEncoding.EncodeToString(b)
+
+	return uenc[:n], err
+}
+
+// GenerateRandomStringDNSSafe returns a DNS-safe
+// securely generated random string.
+// It will return an error if the system's secure random
+// number generator fails to function correctly, in which
+// case the caller should not continue.
+func GenerateRandomStringDNSSafe(size int) (string, error) {
+	var (
+		str string
+		err error
+	)
+
+	for len(str) < size {
+		str, err = GenerateRandomStringURLSafe(size)
+		if err != nil {
+			return "", err
+		}
+
+		str = strings.ToLower(
+			strings.ReplaceAll(strings.ReplaceAll(str, "_", ""), "-", ""),
+		)
+	}
+
+	return str[:size], nil
+}
+
+func MustGenerateRandomStringDNSSafe(size int) string {
+	hash, err := GenerateRandomStringDNSSafe(size)
+	if err != nil {
+		panic(err)
+	}
+
+	return hash
+}
+
+func TailNodesToString(nodes []*tailcfg.Node) string {
+	temp := make([]string, len(nodes))
+
+	for index, node := range nodes {
+		temp[index] = node.Name
+	}
+
+	return fmt.Sprintf("[ %s ](%d)", strings.Join(temp, ", "), len(temp))
+}
+
+func TailMapResponseToString(resp tailcfg.MapResponse) string {
+	return fmt.Sprintf(
+		"{ Node: %s, Peers: %s }",
+		resp.Node.Name,
+		TailNodesToString(resp.Peers),
+	)
+}
+
+func TailcfgFilterRulesToString(rules []tailcfg.FilterRule) string {
+	var sb strings.Builder
+
+	for index, rule := range rules {
+		fmt.Fprintf(&sb, `
+{
+  SrcIPs: %v
+  DstIPs: %v
+}
+`, rule.SrcIPs, rule.DstPorts)
+
+		if index < len(rules)-1 {
+			sb.WriteString(", ")
+		}
+	}
+
+	return fmt.Sprintf("[ %s ](%d)", sb.String(), len(rules))
+}
diff --git a/hscontrol/util/string_test.go b/hscontrol/util/string_test.go
new file mode 100644
index 000000000..f0b4c5585
--- /dev/null
+++ b/hscontrol/util/string_test.go
@@ -0,0 +1,16 @@
+package util
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestGenerateRandomStringDNSSafe(t *testing.T) {
+	for range 100000 {
+		str, err := GenerateRandomStringDNSSafe(8)
+		require.NoError(t, err)
+		assert.Len(t, str, 8)
+	}
+}
diff --git a/hscontrol/util/test.go b/hscontrol/util/test.go
index 7d7d71e90..d37f33152 100644
--- a/hscontrol/util/test.go
+++ b/hscontrol/util/test.go
@@ -21,20 +21,20 @@ var AddrPortComparer = cmp.Comparer(func(x, y netip.AddrPort) bool {
 	return x == y
 })
 
-func strComparer[T interface{ String() string }]() cmp.Option {
-	return cmp.Comparer(func(x, y T) bool {
-		return x.String() == y.String()
-	})
-}
+var MkeyComparer = cmp.Comparer(func(x, y key.MachinePublic) bool {
+	return x.String() == y.String()
+})
 
-var (
-	MkeyComparer = strComparer[key.MachinePublic]()
-	NkeyComparer = strComparer[key.NodePublic]()
-	DkeyComparer = strComparer[key.DiscoPublic]()
-)
+var NkeyComparer = cmp.Comparer(func(x, y key.NodePublic) bool {
+	return x.String() == y.String()
+})
+
+var DkeyComparer = cmp.Comparer(func(x, y key.DiscoPublic) bool {
+	return x.String() == y.String()
+})
 
 var ViewSliceIPProtoComparer = cmp.Comparer(views.SliceEqual[ipproto.Proto])
 
-var Comparers = []cmp.Option{
+var Comparers []cmp.Option = []cmp.Option{
 	IPComparer, PrefixComparer, AddrPortComparer, MkeyComparer, NkeyComparer, DkeyComparer, ViewSliceIPProtoComparer,
 }
diff --git a/hscontrol/util/util.go b/hscontrol/util/util.go
index d0120e051..134434f97 100644
--- a/hscontrol/util/util.go
+++ b/hscontrol/util/util.go
@@ -12,7 +12,6 @@ import (
 	"time"
 
 	"tailscale.com/util/cmpver"
-	"tailscale.com/util/rands"
 )
 
 // URL parsing errors.
@@ -25,9 +24,13 @@ var (
 )
 
 func TailscaleVersionNewerOrEqual(minimum, toCheck string) bool {
-	return cmpver.Compare(minimum, toCheck) <= 0 ||
+	if cmpver.Compare(minimum, toCheck) <= 0 ||
 		toCheck == "unstable" ||
-		toCheck == "head"
+		toCheck == "head" {
+		return true
+	}
+
+	return false
 }
 
 // ParseLoginURLFromCLILogin parses the output of the tailscale up command to extract the login URL.
@@ -91,20 +94,7 @@ type Traceroute struct {
 	Err error
 }
 
-// parseLatency parses a traceroute latency token such as "1.5" or "<1",
-// returning the duration rounded to the nearest microsecond. The second
-// return value reports whether the token was a valid number.
-func parseLatency(tok string) (time.Duration, bool) {
-	ms, err := strconv.ParseFloat(strings.TrimPrefix(tok, "<"), 64)
-	if err != nil {
-		return 0, false
-	}
-
-	// Round to nearest microsecond to avoid floating point precision issues.
-	return time.Duration(ms * float64(time.Millisecond)).Round(time.Microsecond), true
-}
-
-// ParseTraceroute parses the output of the traceroute command and returns a [Traceroute] struct.
+// ParseTraceroute parses the output of the traceroute command and returns a Traceroute struct.
 func ParseTraceroute(output string) (Traceroute, error) {
 	lines := strings.Split(strings.TrimSpace(output), "\n")
 	if len(lines) < 1 {
@@ -195,8 +185,13 @@ func ParseTraceroute(output string) (Traceroute, error) {
 					break
 				}
 				// Extract and remove the latency from the beginning
-				if d, ok := parseLatency(remainder[latMatch[2]:latMatch[3]]); ok {
-					latencies = append(latencies, d)
+				latStr := strings.TrimPrefix(remainder[latMatch[2]:latMatch[3]], "<")
+
+				ms, err := strconv.ParseFloat(latStr, 64)
+				if err == nil {
+					// Round to nearest microsecond to avoid floating point precision issues
+					duration := time.Duration(ms * float64(time.Millisecond))
+					latencies = append(latencies, duration.Round(time.Microsecond))
 				}
 
 				remainder = strings.TrimSpace(remainder[latMatch[1]:])
@@ -237,8 +232,14 @@ func ParseTraceroute(output string) (Traceroute, error) {
 			latencyMatches := latencyRegex.FindAllStringSubmatch(remainder, -1)
 			for _, match := range latencyMatches {
 				if len(match) > 1 {
-					if d, ok := parseLatency(match[1]); ok {
-						latencies = append(latencies, d)
+					// Remove '<' prefix if present (e.g., "<1 ms")
+					latStr := strings.TrimPrefix(match[1], "<")
+
+					ms, err := strconv.ParseFloat(latStr, 64)
+					if err == nil {
+						// Round to nearest microsecond to avoid floating point precision issues
+						duration := time.Duration(ms * float64(time.Millisecond))
+						latencies = append(latencies, duration.Round(time.Microsecond))
 					}
 				}
 			}
@@ -268,10 +269,15 @@ func ParseTraceroute(output string) (Traceroute, error) {
 }
 
 func IsCI() bool {
-	_, ci := os.LookupEnv("CI")
-	_, gh := os.LookupEnv("GITHUB_RUN_ID")
+	if _, ok := os.LookupEnv("CI"); ok {
+		return true
+	}
 
-	return ci || gh
+	if _, ok := os.LookupEnv("GITHUB_RUN_ID"); ok {
+		return true
+	}
+
+	return false
 }
 
 // GenerateRegistrationKey generates a vanity key for tracking web authentication
@@ -283,5 +289,10 @@ func GenerateRegistrationKey() (string, error) {
 		registerKeyLength = 64
 	)
 
-	return registerKeyPrefix + rands.HexString(registerKeyLength), nil
+	randomPart, err := GenerateRandomStringURLSafe(registerKeyLength)
+	if err != nil {
+		return "", fmt.Errorf("generating registration key: %w", err)
+	}
+
+	return registerKeyPrefix + randomPart, nil
 }
diff --git a/hscontrol/util/util_test.go b/hscontrol/util/util_test.go
index 656c5b361..117fb76f3 100644
--- a/hscontrol/util/util_test.go
+++ b/hscontrol/util/util_test.go
@@ -796,6 +796,7 @@ over a maximum of 30 hops:
 	}
 }
 
+
 func TestGenerateRegistrationKey(t *testing.T) {
 	t.Parallel()
 
diff --git a/hscontrol/util/zlog/fields.go b/hscontrol/util/zlog/fields.go
index 1944f76e2..978b311f6 100644
--- a/hscontrol/util/zlog/fields.go
+++ b/hscontrol/util/zlog/fields.go
@@ -1,8 +1,8 @@
 // Package zlog provides zerolog utilities for safe and consistent logging.
 //
 // This package contains:
-//   - Safe wrapper types for external types ([tailcfg.Hostinfo], [tailcfg.MapRequest])
-//     that implement [zerolog.LogObjectMarshaler] with security-conscious field redaction
+//   - Safe wrapper types for external types (tailcfg.Hostinfo, tailcfg.MapRequest)
+//     that implement LogObjectMarshaler with security-conscious field redaction
 //
 // For field name constants, use the zf subpackage:
 //
diff --git a/hscontrol/util/zlog/hostinfo.go b/hscontrol/util/zlog/hostinfo.go
index c8d74db4f..3152b8b2e 100644
--- a/hscontrol/util/zlog/hostinfo.go
+++ b/hscontrol/util/zlog/hostinfo.go
@@ -6,7 +6,7 @@ import (
 	"tailscale.com/tailcfg"
 )
 
-// SafeHostinfo wraps [tailcfg.Hostinfo] for safe logging.
+// SafeHostinfo wraps tailcfg.Hostinfo for safe logging.
 //
 // SECURITY: This wrapper intentionally redacts device fingerprinting data
 // that could be used to identify or track specific devices:
@@ -24,12 +24,12 @@ type SafeHostinfo struct {
 	hi *tailcfg.Hostinfo
 }
 
-// Hostinfo creates a [SafeHostinfo] wrapper for safe logging.
+// Hostinfo creates a SafeHostinfo wrapper for safe logging.
 func Hostinfo(hi *tailcfg.Hostinfo) SafeHostinfo {
 	return SafeHostinfo{hi: hi}
 }
 
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler].
+// MarshalZerologObject implements zerolog.LogObjectMarshaler.
 func (s SafeHostinfo) MarshalZerologObject(e *zerolog.Event) {
 	if s.hi == nil {
 		return
diff --git a/hscontrol/util/zlog/init_test.go b/hscontrol/util/zlog/init_test.go
index 76951d255..ce001334f 100644
--- a/hscontrol/util/zlog/init_test.go
+++ b/hscontrol/util/zlog/init_test.go
@@ -2,9 +2,9 @@ package zlog
 
 import "github.com/rs/zerolog"
 
-// init pins zerolog to [zerolog.TraceLevel] for the zlog test binary.
+// init pins zerolog to TraceLevel for the zlog test binary.
 //
-// zlog's tests use [zerolog.New] with a buffer and assert on Info-level output. zerolog's
+// zlog's tests use zerolog.New(&buf) and assert on Info-level output. zerolog's
 // (*Logger).should() gates emission on the global level, so any global level
 // above Info would silently break the assertions.
 //
diff --git a/hscontrol/util/zlog/maprequest.go b/hscontrol/util/zlog/maprequest.go
index 0c5a68bb6..86cff8fa0 100644
--- a/hscontrol/util/zlog/maprequest.go
+++ b/hscontrol/util/zlog/maprequest.go
@@ -6,11 +6,11 @@ import (
 	"tailscale.com/tailcfg"
 )
 
-// SafeMapRequest wraps [tailcfg.MapRequest] for safe logging.
+// SafeMapRequest wraps tailcfg.MapRequest for safe logging.
 //
 // SECURITY: This wrapper does not log sensitive information:
 //   - Endpoints: Client IP addresses and ports
-//   - Hostinfo: Device fingerprinting data (handled by [SafeHostinfo])
+//   - Hostinfo: Device fingerprinting data (handled by SafeHostinfo)
 //   - DERPForceWebsockets: Network configuration details
 //
 // Only safe fields are logged:
@@ -23,12 +23,12 @@ type SafeMapRequest struct {
 	req *tailcfg.MapRequest
 }
 
-// MapRequest creates a [SafeMapRequest] wrapper for safe logging.
+// MapRequest creates a SafeMapRequest wrapper for safe logging.
 func MapRequest(req *tailcfg.MapRequest) SafeMapRequest {
 	return SafeMapRequest{req: req}
 }
 
-// MarshalZerologObject implements [zerolog.LogObjectMarshaler].
+// MarshalZerologObject implements zerolog.LogObjectMarshaler.
 func (s SafeMapRequest) MarshalZerologObject(e *zerolog.Event) {
 	if s.req == nil {
 		return
@@ -46,6 +46,6 @@ func (s SafeMapRequest) MarshalZerologObject(e *zerolog.Event) {
 
 	// SECURITY: The following fields are intentionally NOT logged:
 	// - Endpoints: Client IP addresses and ports
-	// - Hostinfo: Device fingerprinting data (use [SafeHostinfo] separately if needed)
+	// - Hostinfo: Device fingerprinting data (use SafeHostinfo separately if needed)
 	// - DERPForceWebsockets: Network configuration details
 }
diff --git a/integration/acl_test.go b/integration/acl_test.go
index 6410a2214..de339fb53 100644
--- a/integration/acl_test.go
+++ b/integration/acl_test.go
@@ -10,7 +10,7 @@ import (
 
 	"github.com/google/go-cmp/cmp"
 	"github.com/google/go-cmp/cmp/cmpopts"
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/integration/hsic"
@@ -325,7 +325,7 @@ func TestACLHostsInNetMapTable(t *testing.T) {
 					user := status.User[status.Self.UserID].LoginName
 
 					assert.Len(c, status.Peer, (testCase.want[user]))
-				}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for expected peer visibility")
+				}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for expected peer visibility")
 			}
 		})
 	}
@@ -372,8 +372,10 @@ func TestACLAllowUser80Dst(t *testing.T) {
 			t.Logf("url from %s to %s", client.Hostname(), url)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "Verifying user1 can reach user2")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user1 can reach user2")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user1 can reach user2")
 		}
 	}
 
@@ -388,7 +390,7 @@ func TestACLAllowUser80Dst(t *testing.T) {
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
 				assertCurlFailWithCollect(c, client, url, "user2 should not reach user1")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user2 cannot reach user1")
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user2 cannot reach user1")
 		}
 	}
 }
@@ -435,7 +437,7 @@ func TestACLDenyAllPort80(t *testing.T) {
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
 				assertCurlFailWithCollect(c, client, url, "all traffic should be denied")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying all traffic is denied")
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying all traffic is denied")
 		}
 	}
 }
@@ -479,8 +481,10 @@ func TestACLAllowUserDst(t *testing.T) {
 			t.Logf("url from %s to %s", client.Hostname(), url)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "Verifying user1 can reach user2")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user1 can reach user2")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user1 can reach user2")
 		}
 	}
 
@@ -495,7 +499,7 @@ func TestACLAllowUserDst(t *testing.T) {
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
 				assertCurlFailWithCollect(c, client, url, "user2 should not reach user1")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user2 cannot reach user1")
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user2 cannot reach user1")
 		}
 	}
 }
@@ -538,8 +542,10 @@ func TestACLAllowStarDst(t *testing.T) {
 			t.Logf("url from %s to %s", client.Hostname(), url)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "Verifying user1 can reach user2")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user1 can reach user2")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user1 can reach user2")
 		}
 	}
 
@@ -554,7 +560,7 @@ func TestACLAllowStarDst(t *testing.T) {
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
 				assertCurlFailWithCollect(c, client, url, "user2 should not reach user1")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user2 cannot reach user1")
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user2 cannot reach user1")
 		}
 	}
 }
@@ -602,8 +608,10 @@ func TestACLNamedHostsCanReachBySubnet(t *testing.T) {
 			t.Logf("url from %s to %s", client.Hostname(), url)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "Verifying user1 can reach user2")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user1 can reach user2")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user1 can reach user2")
 		}
 	}
 
@@ -619,8 +627,10 @@ func TestACLNamedHostsCanReachBySubnet(t *testing.T) {
 			t.Logf("url from %s to %s", client.Hostname(), url)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "Verifying user2 can reach user1")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user2 can reach user1")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user2 can reach user1")
 		}
 	}
 }
@@ -780,7 +790,7 @@ func TestACLNamedHostsCanReach(t *testing.T) {
 					test3URL,
 					result,
 				)
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "test1 should reach test3")
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "test1 should reach test3")
 
 			// test2 can query test3 (everyone -> test3)
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -794,7 +804,7 @@ func TestACLNamedHostsCanReach(t *testing.T) {
 					test3URL,
 					result,
 				)
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "test2 should reach test3")
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "test2 should reach test3")
 
 			// test3 cannot query test1
 			_, err = test3.CurlFailFast(test1URL)
@@ -816,7 +826,7 @@ func TestACLNamedHostsCanReach(t *testing.T) {
 					test2URL,
 					result,
 				)
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "test1 should reach test2")
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "test1 should reach test2")
 
 			// test2 cannot query test1
 			_, err = test2.CurlFailFast(test1URL)
@@ -971,12 +981,12 @@ func TestACLDevice1CanAccessDevice2(t *testing.T) {
 					test2URL,
 					result,
 				)
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "test1 should reach test2")
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "test1 should reach test2")
 
 			// test2 cannot query test1 (asymmetric policy)
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
 				assertCurlFailWithCollect(c, test2, test1URL, "test2 should not reach test1")
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "test2 should NOT reach test1")
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "test2 should NOT reach test1")
 		})
 	}
 }
@@ -1037,8 +1047,10 @@ func TestPolicyUpdateWhileRunningWithCLIInDatabase(t *testing.T) {
 			t.Logf("url from %s to %s", client.Hostname(), url)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "Verifying user1 can reach user2")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying user1 can reach user2")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying user1 can reach user2")
 		}
 	}
 
@@ -1084,7 +1096,7 @@ func TestPolicyUpdateWhileRunningWithCLIInDatabase(t *testing.T) {
 		if diff := cmp.Diff(p, *output, cmpopts.IgnoreUnexported(policyv2.Policy{}), cmpopts.EquateEmpty()); diff != "" {
 			ct.Errorf("unexpected policy(-want +got):\n%s", diff)
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "verifying that the new policy took place")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "verifying that the new policy took place")
 
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		// Test that user1 can visit all user2
@@ -1096,7 +1108,9 @@ func TestPolicyUpdateWhileRunningWithCLIInDatabase(t *testing.T) {
 				url := fmt.Sprintf("http://%s/etc/hostname", fqdn)
 				t.Logf("url from %s to %s", client.Hostname(), url)
 
-				assertCurlDockerHostname(ct, client, url, "new policy did not get propagated to nodes")
+				result, err := client.Curl(url)
+				assert.Len(ct, result, 13)
+				assert.NoError(ct, err)
 			}
 		}
 
@@ -1112,7 +1126,7 @@ func TestPolicyUpdateWhileRunningWithCLIInDatabase(t *testing.T) {
 				assertCurlFailWithCollect(ct, client, url, "user2 should not reach user1")
 			}
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "new policy did not get propagated to nodes")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "new policy did not get propagated to nodes")
 }
 
 func TestACLAutogroupMember(t *testing.T) {
@@ -1151,7 +1165,7 @@ func TestACLAutogroupMember(t *testing.T) {
 
 			clientIsUntagged = status.Self.Tags == nil || status.Self.Tags.Len() == 0
 			assert.True(c, clientIsUntagged, "Expected client %s to be untagged for autogroup:member test", client.Hostname())
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for client %s to be untagged", client.Hostname())
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for client %s to be untagged", client.Hostname())
 
 		if !clientIsUntagged {
 			continue
@@ -1170,7 +1184,7 @@ func TestACLAutogroupMember(t *testing.T) {
 
 				peerIsUntagged = status.Self.Tags == nil || status.Self.Tags.Len() == 0
 				assert.True(c, peerIsUntagged, "Expected peer %s to be untagged for autogroup:member test", peer.Hostname())
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for peer %s to be untagged", peer.Hostname())
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for peer %s to be untagged", peer.Hostname())
 
 			if !peerIsUntagged {
 				continue
@@ -1183,8 +1197,10 @@ func TestACLAutogroupMember(t *testing.T) {
 			t.Logf("url from %s to %s", client.Hostname(), url)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "Verifying autogroup:member connectivity")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "Verifying autogroup:member connectivity")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "Verifying autogroup:member connectivity")
 		}
 	}
 }
@@ -1232,10 +1248,10 @@ func TestACLAutogroupTagged(t *testing.T) {
 		require.NoError(t, err)
 
 		// Create two pre-auth keys per user: one tagged, one untagged
-		taggedAuthKey, err := scenario.CreatePreAuthKeyWithTags(mustParseID(user.Id), true, false, []string{"tag:test"})
+		taggedAuthKey, err := scenario.CreatePreAuthKeyWithTags(user.GetId(), true, false, []string{"tag:test"})
 		require.NoError(t, err)
 
-		untaggedAuthKey, err := scenario.CreatePreAuthKey(mustParseID(user.Id), true, false)
+		untaggedAuthKey, err := scenario.CreatePreAuthKey(user.GetId(), true, false)
 		require.NoError(t, err)
 
 		// Create nodes with proper naming
@@ -1247,13 +1263,13 @@ func TestACLAutogroupTagged(t *testing.T) {
 
 			if i == 0 {
 				// First node is tagged - use tagged PreAuthKey
-				authKey = taggedAuthKey.Key
+				authKey = taggedAuthKey.GetKey()
 				version = "head"
 
 				t.Logf("Creating tagged node for %s", userStr)
 			} else {
 				// Second node is untagged - use untagged PreAuthKey
-				authKey = untaggedAuthKey.Key
+				authKey = untaggedAuthKey.GetKey()
 				version = "unstable"
 
 				t.Logf("Creating untagged node for %s", userStr)
@@ -1268,9 +1284,9 @@ func TestACLAutogroupTagged(t *testing.T) {
 			}
 
 			// Create the tailscale node with appropriate options.
-			// [tsic.WithCACert] and [tsic.WithHeadscaleName] are passed explicitly because
-			// nodes created via [Scenario.CreateTailscaleNode] are not part of
-			// the standard [Scenario.CreateHeadscaleEnv] flow.
+			// CACert and HeadscaleName are passed explicitly because
+			// nodes created via CreateTailscaleNode are not part of
+			// the standard CreateHeadscaleEnv flow.
 			opts := []tsic.Option{
 				tsic.WithCACert(headscale.GetCert()),
 				tsic.WithHeadscaleName(headscale.GetHostname()),
@@ -1360,7 +1376,7 @@ func TestACLAutogroupTagged(t *testing.T) {
 					untaggedClients = append(untaggedClients, client)
 				}
 			}
-		}, integrationutil.StatusReadyTimeout, 1*time.Second, "verifying peer visibility for node %s", hostname)
+		}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "verifying peer visibility for node %s", hostname)
 	}
 
 	// Verify we have the expected number of tagged and untagged nodes
@@ -1374,7 +1390,7 @@ func TestACLAutogroupTagged(t *testing.T) {
 			assert.NoError(c, err)
 			assert.NotNil(c, status.Self.Tags, "tagged node %s should have tags", client.Hostname())
 			assert.Positive(c, status.Self.Tags.Len(), "tagged node %s should have at least one tag", client.Hostname())
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for tags to be applied to tagged nodes")
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for tags to be applied to tagged nodes")
 	}
 
 	// Verify untagged nodes have no tags
@@ -1386,7 +1402,7 @@ func TestACLAutogroupTagged(t *testing.T) {
 			if status.Self.Tags != nil {
 				assert.Equal(c, 0, status.Self.Tags.Len(), "untagged node %s should have no tags", client.Hostname())
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting to verify untagged nodes have no tags")
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting to verify untagged nodes have no tags")
 	}
 
 	// Test that tagged nodes can communicate with each other
@@ -1404,8 +1420,10 @@ func TestACLAutogroupTagged(t *testing.T) {
 			t.Logf("Testing connection from tagged node %s to tagged node %s", client.Hostname(), peer.Hostname())
 
 			assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-				assertCurlDockerHostname(ct, client, url, "tagged nodes should be able to communicate")
-			}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.SlowPoll, "tagged nodes should be able to communicate")
+				result, err := client.Curl(url)
+				assert.NoError(ct, err)
+				assert.Len(ct, result, 13)
+			}, integrationutil.ScaledTimeout(20*time.Second), 500*time.Millisecond, "tagged nodes should be able to communicate")
 		}
 	}
 
@@ -1424,7 +1442,7 @@ func TestACLAutogroupTagged(t *testing.T) {
 				result, err := client.CurlFailFast(url)
 				assert.Empty(ct, result)
 				assert.Error(ct, err)
-			}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "untagged nodes should not be able to reach tagged nodes")
+			}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "untagged nodes should not be able to reach tagged nodes")
 		}
 
 		// Try to reach other untagged nodes (should also fail)
@@ -1444,7 +1462,7 @@ func TestACLAutogroupTagged(t *testing.T) {
 				result, err := client.CurlFailFast(url)
 				assert.Empty(ct, result)
 				assert.Error(ct, err)
-			}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "untagged nodes should not be able to reach other untagged nodes")
+			}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "untagged nodes should not be able to reach other untagged nodes")
 		}
 	}
 
@@ -1462,7 +1480,7 @@ func TestACLAutogroupTagged(t *testing.T) {
 				result, err := client.CurlFailFast(url)
 				assert.Empty(ct, result)
 				assert.Error(ct, err)
-			}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "tagged nodes should not be able to reach untagged nodes")
+			}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "tagged nodes should not be able to reach untagged nodes")
 		}
 	}
 }
@@ -1554,13 +1572,13 @@ func TestACLAutogroupSelf(t *testing.T) {
 	require.NoError(t, err)
 
 	// Create a tagged PreAuthKey for the router node (tags-as-identity model)
-	authKey, err := scenario.CreatePreAuthKeyWithTags(mustParseID(routerUser.Id), true, false, []string{"tag:router-node"})
+	authKey, err := scenario.CreatePreAuthKeyWithTags(routerUser.GetId(), true, false, []string{"tag:router-node"})
 	require.NoError(t, err)
 
 	// Create router node (tags come from the PreAuthKey).
-	// [tsic.WithCACert] and [tsic.WithHeadscaleName] are passed explicitly because
-	// nodes created via [tsic.New] are not part of the standard
-	// [Scenario.CreateHeadscaleEnv] flow.
+	// CACert and HeadscaleName are passed explicitly because
+	// nodes created via tsic.New are not part of the standard
+	// CreateHeadscaleEnv flow.
 	routerClient, err := tsic.New(
 		scenario.Pool(),
 		"unstable",
@@ -1577,7 +1595,7 @@ func TestACLAutogroupSelf(t *testing.T) {
 	err = routerClient.WaitForNeedsLogin(integrationutil.PeerSyncTimeout())
 	require.NoError(t, err)
 
-	err = routerClient.Login(headscale.GetEndpoint(), authKey.Key)
+	err = routerClient.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	err = routerClient.WaitForRunning(integrationutil.PeerSyncTimeout())
@@ -1646,8 +1664,10 @@ func TestACLAutogroupSelf(t *testing.T) {
 			t.Logf("url from %s (user1) to %s (user1)", client.Hostname(), fqdn)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "user1 device should reach other user1 device via autogroup:self")
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "user1 device should reach other user1 device via autogroup:self")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "user1 device should reach other user1 device via autogroup:self")
 		}
 	}
 
@@ -1665,8 +1685,10 @@ func TestACLAutogroupSelf(t *testing.T) {
 			t.Logf("url from %s (user2) to %s (user2)", client.Hostname(), fqdn)
 
 			assert.EventuallyWithT(t, func(c *assert.CollectT) {
-				assertCurlDockerHostname(c, client, url, "user2 device should reach other user2 device via autogroup:self")
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "user2 device should reach other user2 device via autogroup:self")
+				result, err := client.Curl(url)
+				assert.NoError(c, err)
+				assert.Len(c, result, 13)
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "user2 device should reach other user2 device via autogroup:self")
 		}
 	}
 
@@ -1682,7 +1704,7 @@ func TestACLAutogroupSelf(t *testing.T) {
 			result, err := client.Curl(url)
 			assert.NoError(c, err)
 			assert.NotEmpty(c, result, "user1 should be able to access router-node via group:home -> tag:router-node rule")
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "user1 device should reach router-node (proves autogroup:self doesn't interfere)")
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "user1 device should reach router-node (proves autogroup:self doesn't interfere)")
 	}
 
 	// Test that user2's regular devices can access router-node
@@ -1697,7 +1719,7 @@ func TestACLAutogroupSelf(t *testing.T) {
 			result, err := client.Curl(url)
 			assert.NoError(c, err)
 			assert.NotEmpty(c, result, "user2 should be able to access router-node via group:home -> tag:router-node rule")
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "user2 device should reach router-node (proves autogroup:self doesn't interfere)")
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "user2 device should reach router-node (proves autogroup:self doesn't interfere)")
 	}
 
 	// Test that devices from different users cannot access each other's regular devices
@@ -1845,32 +1867,20 @@ func TestACLPolicyPropagationOverTime(t *testing.T) {
 					assert.Len(ct, result, 13, "iteration %d: response from %s to %s should be valid", iteration, client.Hostname(), fqdn)
 				}
 			}
-		}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "iteration %d: Phase 1 - all connectivity tests with allow-all policy", iteration)
+		}, integrationutil.ScaledTimeout(90*time.Second), 500*time.Millisecond, "iteration %d: Phase 1 - all connectivity tests with allow-all policy", iteration)
 
 		// Phase 2: Autogroup:self policy (only same user can access)
 		t.Logf("Iteration %d: Phase 2 - Setting autogroup:self policy", iteration)
 
-		preFilters := snapshotClientFilters(t, allClients)
-
 		err = headscale.SetPolicy(autogroupSelfPolicy)
 		require.NoError(t, err)
 
 		// Wait for peer lists to sync with autogroup:self - ensures cross-user peers are removed
 		t.Logf("Iteration %d: Phase 2 - Waiting for peer lists to sync with autogroup:self", iteration)
 
-		err = scenario.WaitForTailscaleSyncPerUser(
-			integrationutil.PolicyPropagationTimeout,
-			integrationutil.SlowPoll,
-		)
+		err = scenario.WaitForTailscaleSyncPerUser(integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond)
 		require.NoError(t, err, "iteration %d: Phase 2 - failed to sync after autogroup:self policy", iteration)
 
-		// Gate on each client's wgengine having applied the new
-		// PacketFilter before asserting reachability. WaitForTailscale
-		// SyncPerUser only checks peer-count parity, which trips
-		// before the filter rules have actually replaced the
-		// allow-all rules.
-		waitForClientFilterChange(t, allClients, preFilters, integrationutil.PolicyPropagationTimeout)
-
 		// Test ALL connectivity (positive and negative) in one block after state is settled
 		t.Logf("Iteration %d: Phase 2 - Testing all connectivity with autogroup:self", iteration)
 		assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -1937,7 +1947,7 @@ func TestACLPolicyPropagationOverTime(t *testing.T) {
 					assertCurlFailWithCollect(ct, client, url, fmt.Sprintf("iteration %d: user2 %s should NOT reach user1 %s", iteration, client.Hostname(), peer.Hostname()))
 				}
 			}
-		}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "iteration %d: Phase 2 - all connectivity tests with autogroup:self", iteration)
+		}, integrationutil.ScaledTimeout(90*time.Second), 500*time.Millisecond, "iteration %d: Phase 2 - all connectivity tests with autogroup:self", iteration)
 
 		// Phase 2b: Add a new node to user1 and validate policy propagation
 		t.Logf("Iteration %d: Phase 2b - Adding new node to user1 during autogroup:self policy", iteration)
@@ -2001,14 +2011,14 @@ func TestACLPolicyPropagationOverTime(t *testing.T) {
 					assertCurlFailWithCollect(ct, client, url, fmt.Sprintf("iteration %d: user1 %s should NOT reach user2 %s", iteration, client.Hostname(), peer.Hostname()))
 				}
 			}
-		}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "iteration %d: Phase 2b - all connectivity tests after new node addition", iteration)
+		}, integrationutil.ScaledTimeout(90*time.Second), 500*time.Millisecond, "iteration %d: Phase 2b - all connectivity tests after new node addition", iteration)
 
 		// Delete the newly added node before Phase 3
 		t.Logf("Iteration %d: Phase 2b - Deleting the newly added node from user1", iteration)
 
 		// Get the node list and find the newest node (highest ID)
 		var (
-			nodeList       []*clientv1.Node
+			nodeList       []*v1.Node
 			nodeToDeleteID uint64
 		)
 
@@ -2019,11 +2029,11 @@ func TestACLPolicyPropagationOverTime(t *testing.T) {
 
 			// Find the node with the highest ID (the newest one)
 			for _, node := range nodeList {
-				if mustParseID(node.Id) > nodeToDeleteID {
-					nodeToDeleteID = mustParseID(node.Id)
+				if node.GetId() > nodeToDeleteID {
+					nodeToDeleteID = node.GetId()
 				}
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "iteration %d: Phase 2b - listing nodes before deletion", iteration)
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "iteration %d: Phase 2b - listing nodes before deletion", iteration)
 
 		// Delete the node via headscale helper
 		t.Logf("Iteration %d: Phase 2b - Deleting node ID %d from headscale", iteration, nodeToDeleteID)
@@ -2056,7 +2066,7 @@ func TestACLPolicyPropagationOverTime(t *testing.T) {
 			nodeListAfter, err := headscale.ListNodes("user1")
 			assert.NoError(ct, err, "failed to list nodes after deletion")
 			assert.Len(ct, nodeListAfter, 2, "iteration %d: should have 2 user1 nodes after deletion, got %d", iteration, len(nodeListAfter))
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "iteration %d: Phase 2b - node should be deleted", iteration)
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "iteration %d: Phase 2b - node should be deleted", iteration)
 
 		// Wait for sync after deletion to ensure peer counts are correct
 		// Use WaitForTailscaleSyncPerUser because autogroup:self is still active,
@@ -2084,9 +2094,9 @@ func TestACLPolicyPropagationOverTime(t *testing.T) {
 		err = headscale.SetPolicy(user1ToUser2Policy)
 		require.NoError(t, err)
 
-		// Note: Cannot use [Scenario.WaitForTailscaleSync] here because directional policy means
+		// Note: Cannot use WaitForTailscaleSync() here because directional policy means
 		// user2 nodes don't see user1 nodes in their peer list (asymmetric visibility).
-		// The [assert.EventuallyWithT] block below will handle waiting for policy propagation.
+		// The EventuallyWithT block below will handle waiting for policy propagation.
 
 		// Test ALL connectivity (positive and negative) in one block after policy settles
 		t.Logf("Iteration %d: Phase 3 - Testing all connectivity with directional policy", iteration)
@@ -2118,7 +2128,7 @@ func TestACLPolicyPropagationOverTime(t *testing.T) {
 					assertCurlFailWithCollect(ct, client, url, fmt.Sprintf("iteration %d: user2 %s should NOT reach user1 %s", iteration, client.Hostname(), peer.Hostname()))
 				}
 			}
-		}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "iteration %d: Phase 3 - all connectivity tests with directional policy", iteration)
+		}, integrationutil.ScaledTimeout(90*time.Second), 500*time.Millisecond, "iteration %d: Phase 3 - all connectivity tests with directional policy", iteration)
 
 		t.Logf("=== Iteration %d/5 completed successfully - All 3 phases passed ===", iteration)
 	}
@@ -2205,7 +2215,7 @@ func TestACLTagPropagation(t *testing.T) {
 				nodes, err := headscale.ListNodes("user1")
 				require.NoError(t, err)
 
-				return user2Clients[0], user1Clients[0], mustParseID(nodes[0].Id)
+				return user2Clients[0], user1Clients[0], nodes[0].GetId()
 			},
 			initialAccess: false,                  // user2 cannot access user1 (no tag)
 			tagChange:     []string{"tag:shared"}, // add tag:shared
@@ -2256,7 +2266,7 @@ func TestACLTagPropagation(t *testing.T) {
 
 				// Create user1's node WITH tag:shared via PreAuthKey
 				taggedKey, err := scenario.CreatePreAuthKeyWithTags(
-					mustParseID(userMap["user1"].Id), false, false, []string{"tag:shared"},
+					userMap["user1"].GetId(), false, false, []string{"tag:shared"},
 				)
 				require.NoError(t, err)
 
@@ -2269,11 +2279,11 @@ func TestACLTagPropagation(t *testing.T) {
 					tsic.WithNetfilter("off"),
 				)
 				require.NoError(t, err)
-				err = user1Node.Login(headscale.GetEndpoint(), taggedKey.Key)
+				err = user1Node.Login(headscale.GetEndpoint(), taggedKey.GetKey())
 				require.NoError(t, err)
 
 				// Create user2's node (untagged)
-				untaggedKey, err := scenario.CreatePreAuthKey(mustParseID(userMap["user2"].Id), false, false)
+				untaggedKey, err := scenario.CreatePreAuthKey(userMap["user2"].GetId(), false, false)
 				require.NoError(t, err)
 
 				user2Node, err := scenario.CreateTailscaleNode(
@@ -2285,7 +2295,7 @@ func TestACLTagPropagation(t *testing.T) {
 					tsic.WithNetfilter("off"),
 				)
 				require.NoError(t, err)
-				err = user2Node.Login(headscale.GetEndpoint(), untaggedKey.Key)
+				err = user2Node.Login(headscale.GetEndpoint(), untaggedKey.GetKey())
 				require.NoError(t, err)
 
 				err = scenario.WaitForTailscaleSync()
@@ -2295,10 +2305,10 @@ func TestACLTagPropagation(t *testing.T) {
 				allNodes, err := headscale.ListNodes()
 				require.NoError(t, err)
 
-				tagged := findNode(allNodes, func(n *clientv1.Node) bool { return len(n.Tags) > 0 })
+				tagged := findNode(allNodes, func(n *v1.Node) bool { return len(n.GetTags()) > 0 })
 				require.NotNil(t, tagged, "expected a tagged node")
 
-				return user2Node, user1Node, mustParseID(tagged.Id)
+				return user2Node, user1Node, tagged.GetId()
 			},
 			initialAccess: true,                  // user2 can access user1 (has tag:shared)
 			tagChange:     []string{"tag:other"}, // replace with tag:other
@@ -2349,7 +2359,7 @@ func TestACLTagPropagation(t *testing.T) {
 
 				// Create user1's node with tag:team-a (user2 has NO ACL for this)
 				taggedKey, err := scenario.CreatePreAuthKeyWithTags(
-					mustParseID(userMap["user1"].Id), false, false, []string{"tag:team-a"},
+					userMap["user1"].GetId(), false, false, []string{"tag:team-a"},
 				)
 				require.NoError(t, err)
 
@@ -2362,11 +2372,11 @@ func TestACLTagPropagation(t *testing.T) {
 					tsic.WithNetfilter("off"),
 				)
 				require.NoError(t, err)
-				err = user1Node.Login(headscale.GetEndpoint(), taggedKey.Key)
+				err = user1Node.Login(headscale.GetEndpoint(), taggedKey.GetKey())
 				require.NoError(t, err)
 
 				// Create user2's node
-				untaggedKey, err := scenario.CreatePreAuthKey(mustParseID(userMap["user2"].Id), false, false)
+				untaggedKey, err := scenario.CreatePreAuthKey(userMap["user2"].GetId(), false, false)
 				require.NoError(t, err)
 
 				user2Node, err := scenario.CreateTailscaleNode(
@@ -2378,7 +2388,7 @@ func TestACLTagPropagation(t *testing.T) {
 					tsic.WithNetfilter("off"),
 				)
 				require.NoError(t, err)
-				err = user2Node.Login(headscale.GetEndpoint(), untaggedKey.Key)
+				err = user2Node.Login(headscale.GetEndpoint(), untaggedKey.GetKey())
 				require.NoError(t, err)
 
 				err = scenario.WaitForTailscaleSync()
@@ -2388,10 +2398,10 @@ func TestACLTagPropagation(t *testing.T) {
 				allNodes, err := headscale.ListNodes()
 				require.NoError(t, err)
 
-				tagged := findNode(allNodes, func(n *clientv1.Node) bool { return len(n.Tags) > 0 })
+				tagged := findNode(allNodes, func(n *v1.Node) bool { return len(n.GetTags()) > 0 })
 				require.NotNil(t, tagged, "expected a tagged node")
 
-				return user2Node, user1Node, mustParseID(tagged.Id)
+				return user2Node, user1Node, tagged.GetId()
 			},
 			initialAccess: false,                  // user2 cannot access (tag:team-a not in ACL)
 			tagChange:     []string{"tag:team-b"}, // change to tag:team-b
@@ -2442,7 +2452,7 @@ func TestACLTagPropagation(t *testing.T) {
 
 				// Create user1's node with BOTH tags
 				taggedKey, err := scenario.CreatePreAuthKeyWithTags(
-					mustParseID(userMap["user1"].Id), false, false, []string{"tag:web", "tag:internal"},
+					userMap["user1"].GetId(), false, false, []string{"tag:web", "tag:internal"},
 				)
 				require.NoError(t, err)
 
@@ -2455,11 +2465,11 @@ func TestACLTagPropagation(t *testing.T) {
 					tsic.WithNetfilter("off"),
 				)
 				require.NoError(t, err)
-				err = user1Node.Login(headscale.GetEndpoint(), taggedKey.Key)
+				err = user1Node.Login(headscale.GetEndpoint(), taggedKey.GetKey())
 				require.NoError(t, err)
 
 				// Create user2's node
-				untaggedKey, err := scenario.CreatePreAuthKey(mustParseID(userMap["user2"].Id), false, false)
+				untaggedKey, err := scenario.CreatePreAuthKey(userMap["user2"].GetId(), false, false)
 				require.NoError(t, err)
 
 				user2Node, err := scenario.CreateTailscaleNode(
@@ -2471,7 +2481,7 @@ func TestACLTagPropagation(t *testing.T) {
 					tsic.WithNetfilter("off"),
 				)
 				require.NoError(t, err)
-				err = user2Node.Login(headscale.GetEndpoint(), untaggedKey.Key)
+				err = user2Node.Login(headscale.GetEndpoint(), untaggedKey.GetKey())
 				require.NoError(t, err)
 
 				err = scenario.WaitForTailscaleSync()
@@ -2481,10 +2491,10 @@ func TestACLTagPropagation(t *testing.T) {
 				allNodes, err := headscale.ListNodes()
 				require.NoError(t, err)
 
-				tagged := findNode(allNodes, func(n *clientv1.Node) bool { return len(n.Tags) > 0 })
+				tagged := findNode(allNodes, func(n *v1.Node) bool { return len(n.GetTags()) > 0 })
 				require.NotNil(t, tagged, "expected a tagged node")
 
-				return user2Node, user1Node, mustParseID(tagged.Id)
+				return user2Node, user1Node, tagged.GetId()
 			},
 			initialAccess: true,                     // user2 can access (has tag:web)
 			tagChange:     []string{"tag:internal"}, // remove tag:web, keep tag:internal
@@ -2535,7 +2545,7 @@ func TestACLTagPropagation(t *testing.T) {
 				nodes, err := headscale.ListNodes("user1")
 				require.NoError(t, err)
 
-				return user2Clients[0], user1Clients[0], mustParseID(nodes[0].Id)
+				return user2Clients[0], user1Clients[0], nodes[0].GetId()
 			},
 			initialAccess: false,                  // user2 cannot access user1 (no tag yet)
 			tagChange:     []string{"tag:server"}, // assign tag:server
@@ -2581,7 +2591,7 @@ func TestACLTagPropagation(t *testing.T) {
 				} else {
 					assertCurlFailWithCollect(c, sourceClient, targetURL, "initial access should fail")
 				}
-			}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying initial access state")
+			}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying initial access state")
 
 			// Step 1b: Verify initial NetMap visibility
 			t.Logf("Step 1b: Verifying initial NetMap visibility (expect visible=%v)", tt.initialAccess)
@@ -2604,7 +2614,7 @@ func TestACLTagPropagation(t *testing.T) {
 				} else {
 					assert.False(c, found, "Target should NOT be visible in NetMap initially")
 				}
-			}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying initial NetMap visibility")
+			}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying initial NetMap visibility")
 
 			// Step 2: Apply tag change
 			t.Logf("Step 2: Setting tags on node %d to %v", targetNodeID, tt.tagChange)
@@ -2616,18 +2626,18 @@ func TestACLTagPropagation(t *testing.T) {
 				allNodes, err := headscale.ListNodes()
 				assert.NoError(c, err)
 
-				node := findNode(allNodes, func(n *clientv1.Node) bool { return mustParseID(n.Id) == targetNodeID })
+				node := findNode(allNodes, func(n *v1.Node) bool { return n.GetId() == targetNodeID })
 				assert.NotNil(c, node, "Node should still exist")
 
 				if node != nil {
-					assert.ElementsMatch(c, tt.tagChange, node.Tags, "Tags should be updated")
+					assert.ElementsMatch(c, tt.tagChange, node.GetTags(), "Tags should be updated")
 				}
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying tag change applied")
+			}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying tag change applied")
 
 			// Step 3: Verify final NetMap visibility first (fast signal that
-			// the [tailcfg.MapResponse] propagated to the client).
+			// the MapResponse propagated to the client).
 			// The full propagation chain (docker exec → gRPC → state update →
-			// batcher delay → [tailcfg.MapResponse] → noise transport → client processing)
+			// batcher delay → MapResponse → noise transport → client processing)
 			// can take over 120s on congested CI runners, so use a generous
 			// base timeout.
 			t.Logf("Step 3: Verifying final NetMap visibility (expect visible=%v)", tt.finalAccess)
@@ -2650,10 +2660,10 @@ func TestACLTagPropagation(t *testing.T) {
 				} else {
 					assert.False(c, found, "Target should NOT be visible in NetMap after tag change")
 				}
-			}, integrationutil.HASlowConvergeTimeout, integrationutil.SlowPoll, "verifying NetMap visibility propagated after tag change")
+			}, integrationutil.ScaledTimeout(120*time.Second), 500*time.Millisecond, "verifying NetMap visibility propagated after tag change")
 
 			// Step 4: Verify final access state (this is the key test for #2389).
-			// Even though Step 3 confirmed the [tailcfg.MapResponse] arrived, the full
+			// Even though Step 3 confirmed the MapResponse arrived, the full
 			// WireGuard handshake and tunnel establishment can take significant
 			// time on congested CI runners, so use the same generous base
 			// timeout as Step 3.
@@ -2664,7 +2674,7 @@ func TestACLTagPropagation(t *testing.T) {
 				} else {
 					assertCurlFailWithCollect(c, sourceClient, targetURL, "final access should fail after tag change")
 				}
-			}, integrationutil.HASlowConvergeTimeout, integrationutil.SlowPoll, "verifying access propagated after tag change")
+			}, integrationutil.ScaledTimeout(120*time.Second), 500*time.Millisecond, "verifying access propagated after tag change")
 
 			t.Logf("Test %s PASSED: Tag change propagated correctly", tt.name)
 		})
@@ -2759,7 +2769,7 @@ func TestACLTagPropagationPortSpecific(t *testing.T) {
 
 	// Create user1's node WITH tag:webserver
 	taggedKey, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["user1"].Id), false, false, []string{"tag:webserver"},
+		userMap["user1"].GetId(), false, false, []string{"tag:webserver"},
 	)
 	require.NoError(t, err)
 
@@ -2773,11 +2783,11 @@ func TestACLTagPropagationPortSpecific(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	err = user1Node.Login(headscale.GetEndpoint(), taggedKey.Key)
+	err = user1Node.Login(headscale.GetEndpoint(), taggedKey.GetKey())
 	require.NoError(t, err)
 
 	// Create user2's node
-	untaggedKey, err := scenario.CreatePreAuthKey(mustParseID(userMap["user2"].Id), false, false)
+	untaggedKey, err := scenario.CreatePreAuthKey(userMap["user2"].GetId(), false, false)
 	require.NoError(t, err)
 
 	user2Node, err := scenario.CreateTailscaleNode(
@@ -2789,7 +2799,7 @@ func TestACLTagPropagationPortSpecific(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	err = user2Node.Login(headscale.GetEndpoint(), untaggedKey.Key)
+	err = user2Node.Login(headscale.GetEndpoint(), untaggedKey.GetKey())
 	require.NoError(t, err)
 
 	err = scenario.WaitForTailscaleSync()
@@ -2799,10 +2809,10 @@ func TestACLTagPropagationPortSpecific(t *testing.T) {
 	allNodes, err := headscale.ListNodes()
 	require.NoError(t, err)
 
-	tagged := findNode(allNodes, func(n *clientv1.Node) bool { return len(n.Tags) > 0 })
+	tagged := findNode(allNodes, func(n *v1.Node) bool { return len(n.GetTags()) > 0 })
 	require.NotNil(t, tagged, "expected a tagged node")
 
-	targetNodeID := mustParseID(tagged.Id)
+	targetNodeID := tagged.GetId()
 
 	targetFQDN, err := user1Node.FQDN()
 	require.NoError(t, err)
@@ -2813,7 +2823,7 @@ func TestACLTagPropagationPortSpecific(t *testing.T) {
 	t.Log("Step 1: Verifying HTTP access with tag:webserver (should succeed)")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertCurlSuccessWithCollect(c, user2Node, targetURL, "HTTP should work with tag:webserver")
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "initial HTTP access with tag:webserver")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "initial HTTP access with tag:webserver")
 
 	// Step 2: Change tag from webserver to sshonly
 	t.Logf("Step 2: Changing tag from webserver to sshonly on node %d", targetNodeID)
@@ -2828,13 +2838,13 @@ func TestACLTagPropagationPortSpecific(t *testing.T) {
 		allNodes, err := headscale.ListNodes()
 		assert.NoError(c, err) //nolint:testifylint // CollectT requires assert
 
-		node := findNode(allNodes, func(n *clientv1.Node) bool { return mustParseID(n.Id) == targetNodeID })
+		node := findNode(allNodes, func(n *v1.Node) bool { return n.GetId() == targetNodeID })
 		assert.NotNil(c, node, "Node should still exist")
 
 		if node != nil {
-			assert.ElementsMatch(c, []string{"tag:sshonly"}, node.Tags, "Tags should be updated to sshonly")
+			assert.ElementsMatch(c, []string{"tag:sshonly"}, node.GetTags(), "Tags should be updated to sshonly")
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying tag change applied")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying tag change applied")
 
 	// Step 3: Verify peer is still visible in NetMap (partial access, not full removal)
 	t.Log("Step 3: Verifying peer remains visible in NetMap after tag change")
@@ -2853,16 +2863,16 @@ func TestACLTagPropagationPortSpecific(t *testing.T) {
 		}
 
 		assert.True(c, found, "Peer should still be visible with tag:sshonly (port 22 access)")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "peer visibility after tag change")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "peer visibility after tag change")
 
 	// Step 4: Verify HTTP on port 80 now fails (tag:sshonly only allows port 22).
 	// Port-specific filter changes are harder than peer removal because
 	// the WireGuard tunnel stays up and both endpoints must process
-	// the new [tailcfg.PacketFilter] from the [tailcfg.MapResponse].
+	// the new PacketFilter from the MapResponse.
 	t.Log("Step 4: Verifying HTTP access is now blocked (tag:sshonly only allows port 22)")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertCurlFailWithCollect(c, user2Node, targetURL, "HTTP should fail with tag:sshonly (only port 22 allowed)")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "HTTP blocked after tag change to sshonly")
+	}, integrationutil.ScaledTimeout(90*time.Second), 500*time.Millisecond, "HTTP blocked after tag change to sshonly")
 
 	t.Log("Test PASSED: Port-specific ACL changes propagated correctly")
 }
@@ -2953,15 +2963,19 @@ func TestACLGroupWithUnknownUser(t *testing.T) {
 	t.Log("Testing connectivity: user1 -> user2 (should succeed despite unknown user in group)")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user2FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should be able to reach user2")
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "user1 should reach user2")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should be able to reach user2")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "user1 should reach user2")
 
 	// Test that user2 can reach user1 (bidirectional)
 	t.Log("Testing connectivity: user2 -> user1 (should succeed despite unknown user in group)")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user2, url, "user2 should be able to reach user1")
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "user2 should reach user1")
+		result, err := user2.Curl(url)
+		assert.NoError(c, err, "user2 should be able to reach user1")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "user2 should reach user1")
 
 	t.Log("Test PASSED: Valid users can communicate despite unknown user reference in group")
 }
@@ -3055,13 +3069,17 @@ func TestACLGroupAfterUserDeletion(t *testing.T) {
 	t.Log("Step 1: Verifying initial connectivity between all users")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user2FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should be able to reach user2 initially")
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "initial user1 -> user2 connectivity")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should be able to reach user2 initially")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "initial user1 -> user2 connectivity")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user2, url, "user2 should be able to reach user1 initially")
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "initial user2 -> user1 connectivity")
+		result, err := user2.Curl(url)
+		assert.NoError(c, err, "user2 should be able to reach user1 initially")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "initial user2 -> user1 connectivity")
 
 	// Step 2: Get user3's node and user, then delete them
 	t.Log("Step 2: Deleting user3's node and user from headscale")
@@ -3070,7 +3088,7 @@ func TestACLGroupAfterUserDeletion(t *testing.T) {
 	nodes, err := headscale.ListNodes("user3")
 	require.NoError(t, err)
 	require.Len(t, nodes, 1, "user3 should have exactly one node")
-	user3NodeID := mustParseID(nodes[0].Id)
+	user3NodeID := nodes[0].GetId()
 
 	// Delete user3's node first (required before deleting the user)
 	err = headscale.DeleteNode(user3NodeID)
@@ -3081,7 +3099,7 @@ func TestACLGroupAfterUserDeletion(t *testing.T) {
 	require.NoError(t, err, "user3 should exist")
 
 	// Now delete user3 (after their nodes are deleted)
-	err = headscale.DeleteUser(mustParseID(user3.Id))
+	err = headscale.DeleteUser(user3.GetId())
 	require.NoError(t, err)
 
 	// Verify user3 is deleted
@@ -3096,10 +3114,12 @@ func TestACLGroupAfterUserDeletion(t *testing.T) {
 	// Test that user1 can still reach user2
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user2FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should still be able to reach user2 after user3 deletion (stale cache)")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "user1 -> user2 after user3 deletion")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should still be able to reach user2 after user3 deletion (stale cache)")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user1 -> user2 after user3 deletion")
 
-	// Step 4: Create a NEW user - this triggers [State.updatePolicyManagerUsers] which
+	// Step 4: Create a NEW user - this triggers updatePolicyManagerUsers() which
 	// re-evaluates the policy. According to issue #2967, this is when the bug manifests:
 	// the deleted user3@ in the group causes the entire group to fail resolution.
 	t.Log("Step 4: Creating a new user (user4) to trigger policy re-evaluation")
@@ -3119,14 +3139,18 @@ func TestACLGroupAfterUserDeletion(t *testing.T) {
 	// Test that user1 can still reach user2 AFTER the policy refresh triggered by user creation
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user2FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should still reach user2 after policy refresh (BUG if this fails)")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "user1 -> user2 after policy refresh (issue #2967)")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should still reach user2 after policy refresh (BUG if this fails)")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user1 -> user2 after policy refresh (issue #2967)")
 
 	// Test that user2 can still reach user1
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user2, url, "user2 should still reach user1 after policy refresh (BUG if this fails)")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "user2 -> user1 after policy refresh (issue #2967)")
+		result, err := user2.Curl(url)
+		assert.NoError(c, err, "user2 should still reach user1 after policy refresh (BUG if this fails)")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user2 -> user1 after policy refresh (issue #2967)")
 
 	t.Log("Test PASSED: Remaining users can communicate after deleted user and policy refresh")
 }
@@ -3232,13 +3256,17 @@ func TestACLGroupDeletionExactReproduction(t *testing.T) {
 	t.Log("Step 1: Verifying initial connectivity (user1 <-> user3)")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user3FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should reach user3")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "user1 -> user3")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should reach user3")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user1 -> user3")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user3, url, "user3 should reach user1")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "user3 -> user1")
+		result, err := user3.Curl(url)
+		assert.NoError(c, err, "user3 should reach user1")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user3 -> user1")
 
 	t.Log("Step 1: PASSED - initial connectivity works")
 
@@ -3249,13 +3277,13 @@ func TestACLGroupDeletionExactReproduction(t *testing.T) {
 	nodes, err := headscale.ListNodes(userToDelete)
 	require.NoError(t, err)
 	require.Len(t, nodes, 1)
-	err = headscale.DeleteNode(mustParseID(nodes[0].Id))
+	err = headscale.DeleteNode(nodes[0].GetId())
 	require.NoError(t, err)
 
 	userToDeleteObj, err := GetUserByName(headscale, userToDelete)
 	require.NoError(t, err, "user to delete should exist")
 
-	err = headscale.DeleteUser(mustParseID(userToDeleteObj.Id))
+	err = headscale.DeleteUser(userToDeleteObj.GetId())
 	require.NoError(t, err)
 
 	t.Log("Step 2: DONE - user2 deleted, ACL still has user2@ reference")
@@ -3265,17 +3293,21 @@ func TestACLGroupDeletionExactReproduction(t *testing.T) {
 	t.Log("Step 3: Verifying connectivity STILL works after user2 deletion")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user3FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should still reach user3 after user2 deletion")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "user1 -> user3 after user2 deletion")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should still reach user3 after user2 deletion")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user1 -> user3 after user2 deletion")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user3, url, "user3 should still reach user1 after user2 deletion")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "user3 -> user1 after user2 deletion")
+		result, err := user3.Curl(url)
+		assert.NoError(c, err, "user3 should still reach user1 after user2 deletion")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user3 -> user1 after user2 deletion")
 
 	t.Log("Step 3: PASSED - connectivity works after user2 deletion")
 
-	// Step 4: Create a NEW user - this triggers [State.updatePolicyManagerUsers]
+	// Step 4: Create a NEW user - this triggers updatePolicyManagerUsers()
 	// According to the reporter, this is when the bug manifests
 	t.Log("Step 4: Creating new user (user4) - this triggers policy re-evaluation")
 
@@ -3283,20 +3315,24 @@ func TestACLGroupDeletionExactReproduction(t *testing.T) {
 	require.NoError(t, err)
 
 	// Step 5: THE CRITICAL TEST - verify connectivity STILL works
-	// Without the fix: [state.State.DeleteUser] didn't update policy, so when [state.State.CreateUser]
-	// triggers [State.updatePolicyManagerUsers], the stale user2@ is now unknown,
+	// Without the fix: DeleteUser didn't update policy, so when CreateUser
+	// triggers updatePolicyManagerUsers(), the stale user2@ is now unknown,
 	// potentially breaking the group.
 	t.Log("Step 5: Verifying connectivity AFTER creating new user (BUG trigger point)")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user3FQDN)
-		assertCurlDockerHostname(c, user1, url, "BUG #2967: user1 should still reach user3 after user4 creation")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "user1 -> user3 after user4 creation (issue #2967)")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "BUG #2967: user1 should still reach user3 after user4 creation")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user1 -> user3 after user4 creation (issue #2967)")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user3, url, "BUG #2967: user3 should still reach user1 after user4 creation")
-	}, integrationutil.PolicyPropagationTimeout, integrationutil.SlowPoll, "user3 -> user1 after user4 creation (issue #2967)")
+		result, err := user3.Curl(url)
+		assert.NoError(c, err, "BUG #2967: user3 should still reach user1 after user4 creation")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user3 -> user1 after user4 creation (issue #2967)")
 
 	// Additional verification: check filter rules are not empty
 	filter, err := headscale.DebugFilter()
@@ -3396,13 +3432,17 @@ func TestACLDynamicUnknownUserAddition(t *testing.T) {
 	t.Log("Step 1: Verifying initial connectivity with valid policy (no unknown users)")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user2FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should reach user2")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "initial user1 -> user2")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should reach user2")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "initial user1 -> user2")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user2, url, "user2 should reach user1")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "initial user2 -> user1")
+		result, err := user2.Curl(url)
+		assert.NoError(c, err, "user2 should reach user1")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "initial user2 -> user1")
 
 	t.Log("Step 1: PASSED - connectivity works with valid policy")
 
@@ -3443,13 +3483,17 @@ func TestACLDynamicUnknownUserAddition(t *testing.T) {
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user2FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should STILL reach user2 after adding unknown user")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "user1 -> user2 after unknown user added")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should STILL reach user2 after adding unknown user")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user1 -> user2 after unknown user added")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user2, url, "user2 should STILL reach user1 after adding unknown user")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "user2 -> user1 after unknown user added")
+		result, err := user2.Curl(url)
+		assert.NoError(c, err, "user2 should STILL reach user1 after adding unknown user")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user2 -> user1 after unknown user added")
 
 	t.Log("Step 3: PASSED - connectivity maintained after adding unknown user")
 	t.Log("Test PASSED: v0.28.0-beta.1 scenario - unknown user added dynamically, valid users still work")
@@ -3545,13 +3589,17 @@ func TestACLDynamicUnknownUserRemoval(t *testing.T) {
 	t.Log("Step 1: Verifying connectivity with unknown user in policy (v2 graceful handling)")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user2FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should reach user2 even with unknown user in policy")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "initial user1 -> user2 with unknown")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should reach user2 even with unknown user in policy")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "initial user1 -> user2 with unknown")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user2, url, "user2 should reach user1 even with unknown user in policy")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "initial user2 -> user1 with unknown")
+		result, err := user2.Curl(url)
+		assert.NoError(c, err, "user2 should reach user1 even with unknown user in policy")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "initial user2 -> user1 with unknown")
 
 	t.Log("Step 1: PASSED - connectivity works even with unknown user (v2 graceful handling)")
 
@@ -3590,13 +3638,17 @@ func TestACLDynamicUnknownUserRemoval(t *testing.T) {
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user2FQDN)
-		assertCurlDockerHostname(c, user1, url, "user1 should reach user2 after removing unknown user")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "user1 -> user2 after unknown removed")
+		result, err := user1.Curl(url)
+		assert.NoError(c, err, "user1 should reach user2 after removing unknown user")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user1 -> user2 after unknown removed")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		url := fmt.Sprintf("http://%s/etc/hostname", user1FQDN)
-		assertCurlDockerHostname(c, user2, url, "user2 should reach user1 after removing unknown user")
-	}, integrationutil.HAConvergeTimeout, integrationutil.SlowPoll, "user2 -> user1 after unknown removed")
+		result, err := user2.Curl(url)
+		assert.NoError(c, err, "user2 should reach user1 after removing unknown user")
+		assert.Len(c, result, 13, "expected hostname response")
+	}, integrationutil.ScaledTimeout(60*time.Second), 500*time.Millisecond, "user2 -> user1 after unknown removed")
 
 	t.Log("Step 3: PASSED - connectivity maintained after removing unknown user")
 	t.Log("Test PASSED: Removing unknown users from policy works correctly")
diff --git a/integration/api_auth_test.go b/integration/api_auth_test.go
index 7195159d7..33e4b49a3 100644
--- a/integration/api_auth_test.go
+++ b/integration/api_auth_test.go
@@ -11,12 +11,13 @@ import (
 	"testing"
 	"time"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/integration/hsic"
 	"github.com/juanfont/headscale/integration/integrationutil"
 	"github.com/juanfont/headscale/integration/tsic"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"google.golang.org/protobuf/encoding/protojson"
 )
 
 // TestAPIAuthenticationBypass tests that the API authentication middleware
@@ -214,19 +215,19 @@ func TestAPIAuthenticationBypass(t *testing.T) {
 		assert.Equal(t, http.StatusOK, resp.StatusCode,
 			"Expected 200 status code with valid API key")
 
-		// Should be able to parse as JSON
-		var response clientv1.ListUsersOutputBody
+		// Should be able to parse as protobuf JSON
+		var response v1.ListUsersResponse
 
-		err = json.Unmarshal(body, &response)
-		require.NoError(t, err, "Response should be valid JSON with valid API key")
+		err = protojson.Unmarshal(body, &response)
+		require.NoError(t, err, "Response should be valid protobuf JSON with valid API key")
 
 		// Should contain our test users
-		users := response.Users
+		users := response.GetUsers()
 		assert.Len(t, users, 3, "Should have 3 users")
 
 		userNames := make([]string, len(users))
 		for i, u := range users {
-			userNames[i] = u.Name
+			userNames[i] = u.GetName()
 		}
 
 		assert.Contains(t, userNames, "user1")
@@ -405,12 +406,12 @@ func TestAPIAuthenticationBypassCurl(t *testing.T) {
 			"Curl with valid API key should return 200")
 
 		// Should contain user data
-		var response clientv1.ListUsersOutputBody
+		var response v1.ListUsersResponse
 
-		err = json.Unmarshal([]byte(responseBody), &response)
-		require.NoError(t, err, "Response should be valid JSON")
+		err = protojson.Unmarshal([]byte(responseBody), &response)
+		require.NoError(t, err, "Response should be valid protobuf JSON")
 
-		users := response.Users
+		users := response.GetUsers()
 		assert.Len(t, users, 2, "Should have 2 users")
 	})
 }
@@ -419,7 +420,7 @@ func TestAPIAuthenticationBypassCurl(t *testing.T) {
 // properly blocks unauthorized requests.
 // This test verifies that the gRPC API does not have the same bypass issue
 // as the HTTP API middleware.
-func TestRemoteCLIAuthenticationBypass(t *testing.T) {
+func TestGRPCAuthenticationBypass(t *testing.T) {
 	IntegrationSkip(t)
 
 	spec := ScenarioSpec{
@@ -431,9 +432,14 @@ func TestRemoteCLIAuthenticationBypass(t *testing.T) {
 	require.NoError(t, err)
 	defer scenario.ShutdownAssertNoPanics(t)
 
+	// We need TLS for remote gRPC connections
 	err = scenario.CreateHeadscaleEnv(
 		[]tsic.Option{},
-		hsic.WithTestName("remotecliauth"),
+		hsic.WithTestName("grpcauthtest"),
+		hsic.WithConfigEnv(map[string]string{
+			// Enable gRPC on the standard port
+			"HEADSCALE_GRPC_LISTEN_ADDR": "0.0.0.0:50443",
+		}),
 	)
 	require.NoError(t, err)
 
@@ -454,44 +460,43 @@ func TestRemoteCLIAuthenticationBypass(t *testing.T) {
 
 	validAPIKey := strings.TrimSpace(apiKeyOutput)
 
-	// Get the remote HTTP API endpoint as host:port; the CLI dials it over TLS
-	// with --insecure to skip verification of the test certificate.
-	remoteAddr := strings.TrimPrefix(strings.TrimPrefix(headscale.GetEndpoint(), "https://"), "http://")
+	// Get the gRPC endpoint
+	// For gRPC, we need to use the hostname and port 50443
+	grpcAddress := headscale.GetHostname() + ":50443"
 
-	t.Run("Remote_NoAPIKey", func(t *testing.T) {
+	t.Run("gRPC_NoAPIKey", func(t *testing.T) {
 		// Test 1: Try to use CLI without API key (should fail)
 		// When HEADSCALE_CLI_ADDRESS is set but HEADSCALE_CLI_API_KEY is not set,
 		// the CLI should fail immediately
 		_, err := headscale.Execute(
 			[]string{
 				"sh", "-c",
-				fmt.Sprintf("HEADSCALE_CLI_ADDRESS=%s HEADSCALE_CLI_INSECURE=true headscale users list --output json 2>&1", remoteAddr),
+				fmt.Sprintf("HEADSCALE_CLI_ADDRESS=%s HEADSCALE_CLI_INSECURE=true headscale users list --output json 2>&1", grpcAddress),
 			},
 		)
 
 		// Should fail - CLI exits when API key is missing
 		assert.Error(t, err,
-			"remote connection without API key should fail")
+			"gRPC connection without API key should fail")
 	})
 
-	t.Run("Remote_InvalidAPIKey", func(t *testing.T) {
+	t.Run("gRPC_InvalidAPIKey", func(t *testing.T) {
 		// Test 2: Try to use CLI with invalid API key (should fail with auth error)
 		output, err := headscale.Execute(
 			[]string{
 				"sh", "-c",
-				fmt.Sprintf("HEADSCALE_CLI_ADDRESS=%s HEADSCALE_CLI_API_KEY=invalid-key-12345 HEADSCALE_CLI_INSECURE=true headscale users list --output json 2>&1", remoteAddr),
+				fmt.Sprintf("HEADSCALE_CLI_ADDRESS=%s HEADSCALE_CLI_API_KEY=invalid-key-12345 HEADSCALE_CLI_INSECURE=true headscale users list --output json 2>&1", grpcAddress),
 			},
 		)
 
 		// Should fail with authentication error
 		require.Error(t, err,
-			"remote connection with invalid API key should fail")
+			"gRPC connection with invalid API key should fail")
 
 		// Should contain authentication error message
 		outputStr := strings.ToLower(output)
 		assert.True(t,
-			strings.Contains(outputStr, "unauthorized") ||
-				strings.Contains(outputStr, "unauthenticated") ||
+			strings.Contains(outputStr, "unauthenticated") ||
 				strings.Contains(outputStr, "invalid token") ||
 				strings.Contains(outputStr, "validating token") ||
 				strings.Contains(outputStr, "authentication"),
@@ -499,27 +504,27 @@ func TestRemoteCLIAuthenticationBypass(t *testing.T) {
 
 		// Should NOT leak user data
 		assert.NotContains(t, output, "grpcuser1",
-			"SECURITY ISSUE: remote API should not leak user data with invalid auth")
+			"SECURITY ISSUE: gRPC should not leak user data with invalid auth")
 		assert.NotContains(t, output, "grpcuser2",
-			"SECURITY ISSUE: remote API should not leak user data with invalid auth")
+			"SECURITY ISSUE: gRPC should not leak user data with invalid auth")
 	})
 
-	t.Run("Remote_ValidAPIKey", func(t *testing.T) {
+	t.Run("gRPC_ValidAPIKey", func(t *testing.T) {
 		// Test 3: Use CLI with valid API key (should succeed)
 		output, err := headscale.Execute(
 			[]string{
 				"sh", "-c",
-				fmt.Sprintf("HEADSCALE_CLI_ADDRESS=%s HEADSCALE_CLI_API_KEY=%s HEADSCALE_CLI_INSECURE=true headscale users list --output json", remoteAddr, validAPIKey),
+				fmt.Sprintf("HEADSCALE_CLI_ADDRESS=%s HEADSCALE_CLI_API_KEY=%s HEADSCALE_CLI_INSECURE=true headscale users list --output json", grpcAddress, validAPIKey),
 			},
 		)
 
 		// Should succeed
 		require.NoError(t, err,
-			"remote connection with valid API key should succeed, output: %s", output)
+			"gRPC connection with valid API key should succeed, output: %s", output)
 
-		// CLI outputs the users array directly, not wrapped in a response object
-		// Parse as JSON array (CLI uses [json.Marshal])
-		var users []*clientv1.User
+		// CLI outputs the users array directly, not wrapped in ListUsersResponse
+		// Parse as JSON array (CLI uses json.Marshal, not protojson)
+		var users []*v1.User
 
 		err = json.Unmarshal([]byte(output), &users)
 		require.NoError(t, err, "Response should be valid JSON array")
@@ -527,7 +532,7 @@ func TestRemoteCLIAuthenticationBypass(t *testing.T) {
 
 		userNames := make([]string, len(users))
 		for i, u := range users {
-			userNames[i] = u.Name
+			userNames[i] = u.GetName()
 		}
 
 		assert.Contains(t, userNames, "grpcuser1")
@@ -539,7 +544,7 @@ func TestRemoteCLIAuthenticationBypass(t *testing.T) {
 // with --config flag does not have authentication bypass issues when
 // connecting to a remote server.
 // Note: When using --config with local unix socket, no auth is needed.
-// This test focuses on remote HTTP connections which require API keys.
+// This test focuses on remote gRPC connections which require API keys.
 func TestCLIWithConfigAuthenticationBypass(t *testing.T) {
 	IntegrationSkip(t)
 
@@ -555,6 +560,9 @@ func TestCLIWithConfigAuthenticationBypass(t *testing.T) {
 	err = scenario.CreateHeadscaleEnv(
 		[]tsic.Option{},
 		hsic.WithTestName("cliconfigauth"),
+		hsic.WithConfigEnv(map[string]string{
+			"HEADSCALE_GRPC_LISTEN_ADDR": "0.0.0.0:50443",
+		}),
 	)
 	require.NoError(t, err)
 
@@ -575,9 +583,7 @@ func TestCLIWithConfigAuthenticationBypass(t *testing.T) {
 
 	validAPIKey := strings.TrimSpace(apiKeyOutput)
 
-	// Remote HTTP API endpoint as host:port; the CLI dials it over TLS with
-	// insecure verification skipped for the test certificate.
-	remoteAddr := strings.TrimPrefix(strings.TrimPrefix(headscale.GetEndpoint(), "https://"), "http://")
+	grpcAddress := headscale.GetHostname() + ":50443"
 
 	// Create a config file for testing
 	configWithoutKey := fmt.Sprintf(`
@@ -585,7 +591,7 @@ cli:
   address: %s
   timeout: 5s
   insecure: true
-`, remoteAddr)
+`, grpcAddress)
 
 	configWithInvalidKey := fmt.Sprintf(`
 cli:
@@ -593,7 +599,7 @@ cli:
   api_key: invalid-key-12345
   timeout: 5s
   insecure: true
-`, remoteAddr)
+`, grpcAddress)
 
 	configWithValidKey := fmt.Sprintf(`
 cli:
@@ -601,7 +607,7 @@ cli:
   api_key: %s
   timeout: 5s
   insecure: true
-`, remoteAddr, validAPIKey)
+`, grpcAddress, validAPIKey)
 
 	t.Run("CLI_Config_NoAPIKey", func(t *testing.T) {
 		// Create config file without API key
@@ -643,8 +649,7 @@ cli:
 		// Should indicate authentication failure
 		outputStr := strings.ToLower(output)
 		assert.True(t,
-			strings.Contains(outputStr, "unauthorized") ||
-				strings.Contains(outputStr, "unauthenticated") ||
+			strings.Contains(outputStr, "unauthenticated") ||
 				strings.Contains(outputStr, "invalid token") ||
 				strings.Contains(outputStr, "validating token") ||
 				strings.Contains(outputStr, "authentication"),
@@ -676,9 +681,9 @@ cli:
 		require.NoError(t, err,
 			"CLI with valid API key should succeed")
 
-		// CLI outputs the users array directly, not wrapped in a response object
-		// Parse as JSON array (CLI uses [json.Marshal])
-		var users []*clientv1.User
+		// CLI outputs the users array directly, not wrapped in ListUsersResponse
+		// Parse as JSON array (CLI uses json.Marshal, not protojson)
+		var users []*v1.User
 
 		err = json.Unmarshal([]byte(output), &users)
 		require.NoError(t, err, "Response should be valid JSON array")
@@ -686,7 +691,7 @@ cli:
 
 		userNames := make([]string, len(users))
 		for i, u := range users {
-			userNames[i] = u.Name
+			userNames[i] = u.GetName()
 		}
 
 		assert.Contains(t, userNames, "cliuser1")
diff --git a/integration/auth_key_test.go b/integration/auth_key_test.go
index 82db8b819..02cf203bb 100644
--- a/integration/auth_key_test.go
+++ b/integration/auth_key_test.go
@@ -4,10 +4,11 @@ import (
 	"fmt"
 	"net/netip"
 	"slices"
+	"strconv"
 	"testing"
 	"time"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/integration/hsic"
@@ -56,7 +57,7 @@ func TestAuthKeyLogoutAndReloginSameUser(t *testing.T) {
 			expectedNodes := collectExpectedNodeIDs(t, allClients)
 			requireAllClientsOnline(t, headscale, expectedNodes, true, "all clients should be connected", integrationutil.ScaledTimeout(120*time.Second))
 
-			// Validate that all nodes have [tailcfg.NetInfo] and DERP servers before logout
+			// Validate that all nodes have NetInfo and DERP servers before logout
 			requireAllClientsNetInfoAndDERP(t, headscale, expectedNodes, "all clients should have NetInfo and DERP before logout", 3*time.Minute)
 
 			// assertClientsState(t, allClients)
@@ -73,7 +74,7 @@ func TestAuthKeyLogoutAndReloginSameUser(t *testing.T) {
 			}
 
 			var (
-				listNodes             []*clientv1.Node
+				listNodes             []*v1.Node
 				nodeCountBeforeLogout int
 			)
 
@@ -87,7 +88,7 @@ func TestAuthKeyLogoutAndReloginSameUser(t *testing.T) {
 				for _, node := range listNodes {
 					assertLastSeenSetWithCollect(c, node)
 				}
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for expected node list before logout")
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for expected node list before logout")
 
 			nodeCountBeforeLogout = len(listNodes)
 			t.Logf("node count before logout: %d", nodeCountBeforeLogout)
@@ -114,7 +115,7 @@ func TestAuthKeyLogoutAndReloginSameUser(t *testing.T) {
 				listNodes, err = headscale.ListNodes()
 				assert.NoError(ct, err, "Failed to list nodes after logout")
 				assert.Len(ct, listNodes, nodeCountBeforeLogout, "Node count should match before logout count - expected %d nodes, got %d", nodeCountBeforeLogout, len(listNodes))
-			}, integrationutil.StatusReadyTimeout, 2*time.Second, "validating node persistence after logout (nodes should remain in database)")
+			}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second, "validating node persistence after logout (nodes should remain in database)")
 
 			for _, node := range listNodes {
 				assertLastSeenSet(t, node)
@@ -134,12 +135,12 @@ func TestAuthKeyLogoutAndReloginSameUser(t *testing.T) {
 			require.NoError(t, err)
 
 			for _, userName := range spec.Users {
-				key, err := scenario.CreatePreAuthKey(mustParseID(userMap[userName].Id), true, false)
+				key, err := scenario.CreatePreAuthKey(userMap[userName].GetId(), true, false)
 				if err != nil {
 					t.Fatalf("failed to create pre-auth key for user %s: %s", userName, err)
 				}
 
-				err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.Key)
+				err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.GetKey())
 				if err != nil {
 					t.Fatalf("failed to run tailscale up for user %s: %s", userName, err)
 				}
@@ -152,7 +153,7 @@ func TestAuthKeyLogoutAndReloginSameUser(t *testing.T) {
 				listNodes, err = headscale.ListNodes()
 				assert.NoError(ct, err, "Failed to list nodes after relogin")
 				assert.Len(ct, listNodes, nodeCountBeforeLogout, "Node count should remain unchanged after relogin - expected %d nodes, got %d", nodeCountBeforeLogout, len(listNodes))
-			}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating node count stability after same-user auth key relogin")
+			}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating node count stability after same-user auth key relogin")
 
 			for _, node := range listNodes {
 				assertLastSeenSet(t, node)
@@ -160,11 +161,11 @@ func TestAuthKeyLogoutAndReloginSameUser(t *testing.T) {
 
 			requireAllClientsOnline(t, headscale, expectedNodes, true, "all clients should be connected to batcher", integrationutil.ScaledTimeout(120*time.Second))
 
-			// Wait for Tailscale sync before validating [tailcfg.NetInfo] to ensure proper state propagation
+			// Wait for Tailscale sync before validating NetInfo to ensure proper state propagation
 			err = scenario.WaitForTailscaleSync()
 			requireNoErrSync(t, err)
 
-			// Validate that all nodes have [tailcfg.NetInfo] and DERP servers after reconnection
+			// Validate that all nodes have NetInfo and DERP servers after reconnection
 			requireAllClientsNetInfoAndDERP(t, headscale, expectedNodes, "all clients should have NetInfo and DERP after reconnection", 3*time.Minute)
 
 			err = scenario.WaitForTailscaleSync()
@@ -209,7 +210,7 @@ func TestAuthKeyLogoutAndReloginSameUser(t *testing.T) {
 				for _, node := range listNodes {
 					assertLastSeenSetWithCollect(c, node)
 				}
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for node list after relogin")
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for node list after relogin")
 		})
 	}
 }
@@ -255,7 +256,7 @@ func TestAuthKeyLogoutAndReloginNewUser(t *testing.T) {
 	requireAllClientsNetInfoAndDERP(t, headscale, expectedNodes, "all clients should have NetInfo and DERP after initial login", 3*time.Minute)
 
 	var (
-		listNodes             []*clientv1.Node
+		listNodes             []*v1.Node
 		nodeCountBeforeLogout int
 	)
 
@@ -265,7 +266,7 @@ func TestAuthKeyLogoutAndReloginNewUser(t *testing.T) {
 		listNodes, err = headscale.ListNodes()
 		assert.NoError(c, err)
 		assert.Len(c, listNodes, len(allClients))
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for expected node list before logout")
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for expected node list before logout")
 
 	nodeCountBeforeLogout = len(listNodes)
 	t.Logf("node count before logout: %d", nodeCountBeforeLogout)
@@ -289,7 +290,7 @@ func TestAuthKeyLogoutAndReloginNewUser(t *testing.T) {
 	require.NoError(t, err)
 
 	// Create a new authkey for user1, to be used for all clients
-	key, err := scenario.CreatePreAuthKey(mustParseID(userMap["user1"].Id), true, false)
+	key, err := scenario.CreatePreAuthKey(userMap["user1"].GetId(), true, false)
 	if err != nil {
 		t.Fatalf("failed to create pre-auth key for user1: %s", err)
 	}
@@ -297,13 +298,13 @@ func TestAuthKeyLogoutAndReloginNewUser(t *testing.T) {
 	// Log in all clients as user1, iterating over the spec only returns the
 	// clients, not the usernames.
 	for _, userName := range spec.Users {
-		err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.Key)
+		err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.GetKey())
 		if err != nil {
 			t.Fatalf("failed to run tailscale up for user %s: %s", userName, err)
 		}
 	}
 
-	var user1Nodes []*clientv1.Node
+	var user1Nodes []*v1.Node
 
 	t.Logf("Validating user1 node count after relogin at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -312,12 +313,12 @@ func TestAuthKeyLogoutAndReloginNewUser(t *testing.T) {
 		user1Nodes, err = headscale.ListNodes("user1")
 		assert.NoError(ct, err, "Failed to list nodes for user1 after relogin")
 		assert.Len(ct, user1Nodes, len(allClients), "User1 should have all %d clients after relogin, got %d nodes", len(allClients), len(user1Nodes))
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating user1 has all client nodes after auth key relogin")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating user1 has all client nodes after auth key relogin")
 
 	// Collect expected node IDs for user1 after relogin
 	expectedUser1Nodes := make([]types.NodeID, 0, len(user1Nodes))
 	for _, node := range user1Nodes {
-		expectedUser1Nodes = append(expectedUser1Nodes, types.NodeID(mustParseID(node.Id)))
+		expectedUser1Nodes = append(expectedUser1Nodes, types.NodeID(node.GetId()))
 	}
 
 	// Validate connection state after relogin as user1
@@ -327,7 +328,7 @@ func TestAuthKeyLogoutAndReloginNewUser(t *testing.T) {
 	// Validate that user2 still has their original nodes after user1's re-authentication
 	// When nodes re-authenticate with a different user's pre-auth key, NEW nodes are created
 	// for the new user. The original nodes remain with the original user.
-	var user2Nodes []*clientv1.Node
+	var user2Nodes []*v1.Node
 
 	t.Logf("Validating user2 node persistence after user1 relogin at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -336,7 +337,7 @@ func TestAuthKeyLogoutAndReloginNewUser(t *testing.T) {
 		user2Nodes, err = headscale.ListNodes("user2")
 		assert.NoError(ct, err, "Failed to list nodes for user2 after user1 relogin")
 		assert.Len(ct, user2Nodes, len(allClients)/2, "User2 should still have %d clients after user1 relogin, got %d nodes", len(allClients)/2, len(user2Nodes))
-	}, integrationutil.StatusReadyTimeout, 2*time.Second, "validating user2 nodes persist after user1 relogin (should not be affected)")
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second, "validating user2 nodes persist after user1 relogin (should not be affected)")
 
 	t.Logf("Validating client login states after user switch at %s", time.Now().Format(TimestampFormat))
 
@@ -345,7 +346,7 @@ func TestAuthKeyLogoutAndReloginNewUser(t *testing.T) {
 			status, err := client.Status()
 			assert.NoError(ct, err, "Failed to get status for client %s", client.Hostname())
 			assert.Equal(ct, "user1@test.no", status.User[status.Self.UserID].LoginName, "Client %s should be logged in as user1 after user switch, got %s", client.Hostname(), status.User[status.Self.UserID].LoginName)
-		}, integrationutil.StatusReadyTimeout, 2*time.Second, "validating %s is logged in as user1 after auth key user switch", client.Hostname())
+		}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second, "validating %s is logged in as user1 after auth key user switch", client.Hostname())
 	}
 }
 
@@ -401,7 +402,7 @@ func TestAuthKeyLogoutAndReloginSameUserExpiredKey(t *testing.T) {
 			requireAllClientsNetInfoAndDERP(t, headscale, expectedNodes, "all clients should have NetInfo and DERP after initial login", 3*time.Minute)
 
 			var (
-				listNodes             []*clientv1.Node
+				listNodes             []*v1.Node
 				nodeCountBeforeLogout int
 			)
 
@@ -411,7 +412,7 @@ func TestAuthKeyLogoutAndReloginSameUserExpiredKey(t *testing.T) {
 				listNodes, err = headscale.ListNodes()
 				assert.NoError(c, err)
 				assert.Len(c, listNodes, len(allClients))
-			}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for expected node list before logout")
+			}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for expected node list before logout")
 
 			nodeCountBeforeLogout = len(listNodes)
 			t.Logf("node count before logout: %d", nodeCountBeforeLogout)
@@ -445,7 +446,7 @@ func TestAuthKeyLogoutAndReloginSameUserExpiredKey(t *testing.T) {
 			require.NoError(t, err)
 
 			for _, userName := range spec.Users {
-				key, err := scenario.CreatePreAuthKey(mustParseID(userMap[userName].Id), true, false)
+				key, err := scenario.CreatePreAuthKey(userMap[userName].GetId(), true, false)
 				if err != nil {
 					t.Fatalf("failed to create pre-auth key for user %s: %s", userName, err)
 				}
@@ -457,12 +458,12 @@ func TestAuthKeyLogoutAndReloginSameUserExpiredKey(t *testing.T) {
 						"preauthkeys",
 						"expire",
 						"--id",
-						key.Id,
+						strconv.FormatUint(key.GetId(), 10),
 					})
 				require.NoError(t, err)
 				require.NoError(t, err)
 
-				err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.Key)
+				err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.GetKey())
 				assert.ErrorContains(t, err, "authkey expired")
 			}
 		})
@@ -474,7 +475,7 @@ func TestAuthKeyLogoutAndReloginSameUserExpiredKey(t *testing.T) {
 // Steps:
 // 1. Create node with auth key
 // 2. DELETE the auth key from database (completely remove it)
-// 3. Restart node - should successfully reconnect using [tailcfg.Node.MachineKey] identity.
+// 3. Restart node - should successfully reconnect using MachineKey identity.
 func TestAuthKeyDeleteKey(t *testing.T) {
 	IntegrationSkip(t)
 
@@ -497,14 +498,14 @@ func TestAuthKeyDeleteKey(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap["user1"].Id)
+	userID := userMap["user1"].GetId()
 
 	// Create a pre-auth key - we keep the full key string before it gets redacted
 	authKey, err := scenario.CreatePreAuthKey(userID, false, false)
 	require.NoError(t, err)
 
-	authKeyString := authKey.Key
-	authKeyID := mustParseID(authKey.Id)
+	authKeyString := authKey.GetKey()
+	authKeyID := authKey.GetId()
 	t.Logf("Created pre-auth key ID %d: %s", authKeyID, authKeyString)
 
 	// Create a tailscale client and log it in with the auth key
@@ -518,7 +519,7 @@ func TestAuthKeyDeleteKey(t *testing.T) {
 	require.NoError(t, err)
 
 	// Wait for the node to be registered
-	var user1Nodes []*clientv1.Node
+	var user1Nodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		var err error
@@ -526,10 +527,10 @@ func TestAuthKeyDeleteKey(t *testing.T) {
 		user1Nodes, err = headscale.ListNodes("user1")
 		assert.NoError(c, err)
 		assert.Len(c, user1Nodes, 1)
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for node to be registered")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for node to be registered")
 
-	nodeID := mustParseID(user1Nodes[0].Id)
-	nodeName := user1Nodes[0].Name
+	nodeID := user1Nodes[0].GetId()
+	nodeName := user1Nodes[0].GetName()
 	t.Logf("Node %d (%s) created successfully with auth_key_id=%d", nodeID, nodeName, authKeyID)
 
 	// Verify node is online
@@ -553,14 +554,14 @@ func TestAuthKeyDeleteKey(t *testing.T) {
 		status, err := client.Status()
 		assert.NoError(c, err)
 		assert.Equal(c, "Stopped", status.BackendState)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "client should be stopped")
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "client should be stopped")
 
 	err = client.Up()
 	require.NoError(t, err)
 
 	// Verify node comes back online
 	// This will FAIL without the fix because auth key validation will reject deleted key
-	// With the fix, [tailcfg.Node.MachineKey] identity allows reconnection even with deleted key
+	// With the fix, MachineKey identity allows reconnection even with deleted key
 	requireAllClientsOnline(t, headscale, []types.NodeID{types.NodeID(nodeID)}, true, "node should reconnect after restart despite deleted key", integrationutil.ScaledTimeout(120*time.Second))
 
 	t.Logf("✓ Node successfully reconnected after its auth key was deleted")
@@ -639,7 +640,7 @@ func TestAuthKeyLogoutAndReloginRoutesPreserved(t *testing.T) {
 	// Step 1: Verify initial route is advertised, approved, and SERVING
 	t.Logf("Step 1: Verifying initial route is advertised, approved, and SERVING at %s", time.Now().Format(TimestampFormat))
 
-	var initialNode *clientv1.Node
+	var initialNode *v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err := headscale.ListNodes()
@@ -649,21 +650,21 @@ func TestAuthKeyLogoutAndReloginRoutesPreserved(t *testing.T) {
 		if len(nodes) == 1 {
 			initialNode = nodes[0]
 			// Check: 1 announced, 1 approved, 1 serving (subnet route)
-			assert.Lenf(c, initialNode.AvailableRoutes, 1,
-				"Node should have 1 available route, got %v", initialNode.AvailableRoutes)
-			assert.Lenf(c, initialNode.ApprovedRoutes, 1,
-				"Node should have 1 approved route, got %v", initialNode.ApprovedRoutes)
-			assert.Lenf(c, initialNode.SubnetRoutes, 1,
-				"Node should have 1 serving (subnet) route, got %v - THIS IS THE BUG if empty", initialNode.SubnetRoutes)
-			assert.Contains(c, initialNode.SubnetRoutes, advertiseRoute,
+			assert.Lenf(c, initialNode.GetAvailableRoutes(), 1,
+				"Node should have 1 available route, got %v", initialNode.GetAvailableRoutes())
+			assert.Lenf(c, initialNode.GetApprovedRoutes(), 1,
+				"Node should have 1 approved route, got %v", initialNode.GetApprovedRoutes())
+			assert.Lenf(c, initialNode.GetSubnetRoutes(), 1,
+				"Node should have 1 serving (subnet) route, got %v - THIS IS THE BUG if empty", initialNode.GetSubnetRoutes())
+			assert.Contains(c, initialNode.GetSubnetRoutes(), advertiseRoute,
 				"Subnet routes should contain %s", advertiseRoute)
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "initial route should be serving")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "initial route should be serving")
 
 	require.NotNil(t, initialNode, "Initial node should be found")
-	initialNodeID := initialNode.Id
-	t.Logf("Initial node ID: %s, Available: %v, Approved: %v, Serving: %v",
-		initialNodeID, initialNode.AvailableRoutes, initialNode.ApprovedRoutes, initialNode.SubnetRoutes)
+	initialNodeID := initialNode.GetId()
+	t.Logf("Initial node ID: %d, Available: %v, Approved: %v, Serving: %v",
+		initialNodeID, initialNode.GetAvailableRoutes(), initialNode.GetApprovedRoutes(), initialNode.GetSubnetRoutes())
 
 	// Step 2: Logout
 	t.Logf("Step 2: Logging out at %s", time.Now().Format(TimestampFormat))
@@ -676,7 +677,7 @@ func TestAuthKeyLogoutAndReloginRoutesPreserved(t *testing.T) {
 		status, err := client.Status()
 		assert.NoError(ct, err)
 		assert.Equal(ct, "NeedsLogin", status.BackendState, "Expected NeedsLogin state after logout")
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for logout to complete")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for logout to complete")
 
 	t.Logf("Logout completed, node should still exist in database")
 
@@ -685,7 +686,7 @@ func TestAuthKeyLogoutAndReloginRoutesPreserved(t *testing.T) {
 		nodes, err := headscale.ListNodes()
 		assert.NoError(c, err)
 		assert.Len(c, nodes, 1, "Node should persist in database after logout")
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "node should persist after logout")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "node should persist after logout")
 
 	// Step 3: Re-authenticate with the SAME user (using auth key)
 	t.Logf("Step 3: Re-authenticating with same user at %s", time.Now().Format(TimestampFormat))
@@ -693,12 +694,12 @@ func TestAuthKeyLogoutAndReloginRoutesPreserved(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	key, err := scenario.CreatePreAuthKey(mustParseID(userMap[user].Id), true, false)
+	key, err := scenario.CreatePreAuthKey(userMap[user].GetId(), true, false)
 	require.NoError(t, err)
 
 	// Re-login - the container already has extraLoginArgs with --advertise-routes
 	// from the initial setup, so routes will be advertised on re-login
-	err = scenario.RunTailscaleUp(user, headscale.GetEndpoint(), key.Key)
+	err = scenario.RunTailscaleUp(user, headscale.GetEndpoint(), key.GetKey())
 	require.NoError(t, err)
 
 	// Wait for client to be running
@@ -706,7 +707,7 @@ func TestAuthKeyLogoutAndReloginRoutesPreserved(t *testing.T) {
 		status, err := client.Status()
 		assert.NoError(ct, err)
 		assert.Equal(ct, "Running", status.BackendState, "Expected Running state after relogin")
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for relogin to complete")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for relogin to complete")
 
 	t.Logf("Re-authentication completed at %s", time.Now().Format(TimestampFormat))
 
@@ -721,26 +722,26 @@ func TestAuthKeyLogoutAndReloginRoutesPreserved(t *testing.T) {
 		if len(nodes) == 1 {
 			node := nodes[0]
 			t.Logf("After relogin - Available: %v, Approved: %v, Serving: %v",
-				node.AvailableRoutes, node.ApprovedRoutes, node.SubnetRoutes)
+				node.GetAvailableRoutes(), node.GetApprovedRoutes(), node.GetSubnetRoutes())
 
 			// This is where issue #2896 manifests:
-			// - Available shows the route (from [tailcfg.Hostinfo.RoutableIPs])
-			// - Approved shows the route (from [tailcfg.Node.ApprovedRoutes])
-			// - BUT Serving ([tailcfg.Node.SubnetRoutes]/[ipnstate.PeerStatus.PrimaryRoutes]) is EMPTY!
-			assert.Lenf(c, node.AvailableRoutes, 1,
-				"Node should have 1 available route after relogin, got %v", node.AvailableRoutes)
-			assert.Lenf(c, node.ApprovedRoutes, 1,
-				"Node should have 1 approved route after relogin, got %v", node.ApprovedRoutes)
-			assert.Lenf(c, node.SubnetRoutes, 1,
-				"BUG #2896: Node should have 1 SERVING route after relogin, got %v", node.SubnetRoutes)
-			assert.Contains(c, node.SubnetRoutes, advertiseRoute,
+			// - Available shows the route (from Hostinfo.RoutableIPs)
+			// - Approved shows the route (from ApprovedRoutes)
+			// - BUT Serving (SubnetRoutes/PrimaryRoutes) is EMPTY!
+			assert.Lenf(c, node.GetAvailableRoutes(), 1,
+				"Node should have 1 available route after relogin, got %v", node.GetAvailableRoutes())
+			assert.Lenf(c, node.GetApprovedRoutes(), 1,
+				"Node should have 1 approved route after relogin, got %v", node.GetApprovedRoutes())
+			assert.Lenf(c, node.GetSubnetRoutes(), 1,
+				"BUG #2896: Node should have 1 SERVING route after relogin, got %v", node.GetSubnetRoutes())
+			assert.Contains(c, node.GetSubnetRoutes(), advertiseRoute,
 				"BUG #2896: Subnet routes should contain %s after relogin", advertiseRoute)
 
 			// Also verify node ID was preserved (same node, not new registration)
-			assert.Equal(c, initialNodeID, node.Id,
+			assert.Equal(c, initialNodeID, node.GetId(),
 				"Node ID should be preserved after same-user relogin")
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll,
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond,
 		"BUG #2896: routes should remain SERVING after logout/relogin with same user")
 
 	t.Logf("Test completed - verifying issue #2896 fix")
diff --git a/integration/auth_oidc_test.go b/integration/auth_oidc_test.go
index 7b6b1e7c7..88b8a371a 100644
--- a/integration/auth_oidc_test.go
+++ b/integration/auth_oidc_test.go
@@ -11,7 +11,7 @@ import (
 
 	"github.com/google/go-cmp/cmp"
 	"github.com/google/go-cmp/cmp/cmpopts"
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/integration/hsic"
@@ -28,7 +28,7 @@ import (
 func TestOIDCAuthenticationPingAll(t *testing.T) {
 	IntegrationSkip(t)
 
-	// Logins to [mockoidc.MockOIDC] is served by a queue with a strict order,
+	// Logins to MockOIDC is served by a queue with a strict order,
 	// if we use more than one node per user, the order of the logins
 	// will not be deterministic and the test will fail.
 	spec := ScenarioSpec{
@@ -86,26 +86,26 @@ func TestOIDCAuthenticationPingAll(t *testing.T) {
 	listUsers, err := headscale.ListUsers()
 	require.NoError(t, err)
 
-	want := []*clientv1.User{
+	want := []*v1.User{
 		{
-			Id:    "1",
+			Id:    1,
 			Name:  "user1",
 			Email: "user1@test.no",
 		},
 		{
-			Id:         "2",
+			Id:         2,
 			Name:       "user1",
 			Email:      "user1@headscale.net",
 			Provider:   "oidc",
 			ProviderId: scenario.mockOIDC.Issuer() + "/user1",
 		},
 		{
-			Id:    "3",
+			Id:    3,
 			Name:  "user2",
 			Email: "user2@test.no",
 		},
 		{
-			Id:         "4",
+			Id:         4,
 			Name:       "user2",
 			Email:      "", // Unverified
 			Provider:   "oidc",
@@ -114,10 +114,10 @@ func TestOIDCAuthenticationPingAll(t *testing.T) {
 	}
 
 	sort.Slice(listUsers, func(i, j int) bool {
-		return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+		return listUsers[i].GetId() < listUsers[j].GetId()
 	})
 
-	if diff := cmp.Diff(want, listUsers, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
+	if diff := cmp.Diff(want, listUsers, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
 		t.Fatalf("unexpected users: %s", diff)
 	}
 }
@@ -202,10 +202,10 @@ func TestOIDCExpireNodesBasedOnTokenExpiry(t *testing.T) {
 	t.Logf("Waiting %v for OIDC tokens to expire (TTL: %v, spread: %v, buffer: %v)",
 		totalWaitTime, shortAccessTTL, loginTimeSpread, safetyBuffer)
 
-	// [assert.EventuallyWithT] retries the test function until it passes or times out.
-	// IMPORTANT: Use 'ct' ([assert.CollectT]) for all assertions inside the function, not 't'.
+	// EventuallyWithT retries the test function until it passes or times out.
+	// IMPORTANT: Use 'ct' (CollectT) for all assertions inside the function, not 't'.
 	// Using 't' would cause immediate test failure without retries, defeating the purpose
-	// of [assert.EventuallyWithT] which is designed to handle timing-dependent conditions.
+	// of EventuallyWithT which is designed to handle timing-dependent conditions.
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		// Check each client's status individually to provide better diagnostics
 		expiredCount := 0
@@ -245,34 +245,34 @@ func TestOIDC024UserCreation(t *testing.T) {
 		emailVerified bool
 		cliUsers      []string
 		oidcUsers     []string
-		want          func(iss string) []*clientv1.User
+		want          func(iss string) []*v1.User
 	}{
 		{
 			name:          "no-migration-verified-email",
 			emailVerified: true,
 			cliUsers:      []string{"user1", "user2"},
 			oidcUsers:     []string{"user1", "user2"},
-			want: func(iss string) []*clientv1.User {
-				return []*clientv1.User{
+			want: func(iss string) []*v1.User {
+				return []*v1.User{
 					{
-						Id:    "1",
+						Id:    1,
 						Name:  "user1",
 						Email: "user1@test.no",
 					},
 					{
-						Id:         "2",
+						Id:         2,
 						Name:       "user1",
 						Email:      "user1@headscale.net",
 						Provider:   "oidc",
 						ProviderId: iss + "/user1",
 					},
 					{
-						Id:    "3",
+						Id:    3,
 						Name:  "user2",
 						Email: "user2@test.no",
 					},
 					{
-						Id:         "4",
+						Id:         4,
 						Name:       "user2",
 						Email:      "user2@headscale.net",
 						Provider:   "oidc",
@@ -286,26 +286,26 @@ func TestOIDC024UserCreation(t *testing.T) {
 			emailVerified: false,
 			cliUsers:      []string{"user1", "user2"},
 			oidcUsers:     []string{"user1", "user2"},
-			want: func(iss string) []*clientv1.User {
-				return []*clientv1.User{
+			want: func(iss string) []*v1.User {
+				return []*v1.User{
 					{
-						Id:    "1",
+						Id:    1,
 						Name:  "user1",
 						Email: "user1@test.no",
 					},
 					{
-						Id:         "2",
+						Id:         2,
 						Name:       "user1",
 						Provider:   "oidc",
 						ProviderId: iss + "/user1",
 					},
 					{
-						Id:    "3",
+						Id:    3,
 						Name:  "user2",
 						Email: "user2@test.no",
 					},
 					{
-						Id:         "4",
+						Id:         4,
 						Name:       "user2",
 						Provider:   "oidc",
 						ProviderId: iss + "/user2",
@@ -318,26 +318,26 @@ func TestOIDC024UserCreation(t *testing.T) {
 			emailVerified: false,
 			cliUsers:      []string{"user1.headscale.net", "user2.headscale.net"},
 			oidcUsers:     []string{"user1", "user2"},
-			want: func(iss string) []*clientv1.User {
-				return []*clientv1.User{
+			want: func(iss string) []*v1.User {
+				return []*v1.User{
 					{
-						Id:    "1",
+						Id:    1,
 						Name:  "user1.headscale.net",
 						Email: "user1.headscale.net@test.no",
 					},
 					{
-						Id:         "2",
+						Id:         2,
 						Name:       "user1",
 						Provider:   "oidc",
 						ProviderId: iss + "/user1",
 					},
 					{
-						Id:    "3",
+						Id:    3,
 						Name:  "user2.headscale.net",
 						Email: "user2.headscale.net@test.no",
 					},
 					{
-						Id:         "4",
+						Id:         4,
 						Name:       "user2",
 						Provider:   "oidc",
 						ProviderId: iss + "/user2",
@@ -393,10 +393,10 @@ func TestOIDC024UserCreation(t *testing.T) {
 			require.NoError(t, err)
 
 			sort.Slice(listUsers, func(i, j int) bool {
-				return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+				return listUsers[i].GetId() < listUsers[j].GetId()
 			})
 
-			if diff := cmp.Diff(want, listUsers, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
+			if diff := cmp.Diff(want, listUsers, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
 				t.Errorf("unexpected users: %s", diff)
 			}
 		})
@@ -509,9 +509,9 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		assert.NoError(ct, err, "Failed to list users during initial validation")
 		assert.Len(ct, listUsers, 1, "Expected exactly 1 user after first login, got %d", len(listUsers))
 
-		wantUsers := []*clientv1.User{
+		wantUsers := []*v1.User{
 			{
-				Id:         "1",
+				Id:         1,
 				Name:       "user1",
 				Email:      "user1@headscale.net",
 				Provider:   "oidc",
@@ -520,17 +520,17 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		}
 
 		sort.Slice(listUsers, func(i, j int) bool {
-			return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+			return listUsers[i].GetId() < listUsers[j].GetId()
 		})
 
-		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
+		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
 			ct.Errorf("User validation failed after first login - unexpected users: %s", diff)
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating user1 creation after initial OIDC login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating user1 creation after initial OIDC login")
 
 	t.Logf("Validating initial node creation at %s", time.Now().Format(TimestampFormat))
 
-	var listNodes []*clientv1.Node
+	var listNodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		var err error
@@ -538,7 +538,7 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		listNodes, err = headscale.ListNodes()
 		assert.NoError(ct, err, "Failed to list nodes during initial validation")
 		assert.Len(ct, listNodes, 1, "Expected exactly 1 node after first login, got %d", len(listNodes))
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating initial node creation for user1 after OIDC login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating initial node creation for user1 after OIDC login")
 
 	// Collect expected node IDs for validation after user1 initial login
 	expectedNodes := make([]types.NodeID, 0, 1)
@@ -553,7 +553,7 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 
 		nodeID, err = strconv.ParseUint(string(status.Self.ID), 10, 64)
 		assert.NoError(ct, err, "Failed to parse node ID from status")
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for node ID to be populated in status after initial login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for node ID to be populated in status after initial login")
 
 	expectedNodes = append(expectedNodes, types.NodeID(nodeID))
 
@@ -579,7 +579,7 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		status, err := ts.Status()
 		assert.NoError(ct, err, "Failed to get client status during logout validation")
 		assert.Equal(ct, "NeedsLogin", status.BackendState, "Expected NeedsLogin state after logout, got %s", status.BackendState)
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for user1 logout to complete before user2 login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for user1 logout to complete before user2 login")
 
 	u, err = ts.LoginWithURL(headscale.GetEndpoint())
 	require.NoError(t, err)
@@ -593,16 +593,16 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		assert.NoError(ct, err, "Failed to list users after user2 login")
 		assert.Len(ct, listUsers, 2, "Expected exactly 2 users after user2 login, got %d users", len(listUsers))
 
-		wantUsers := []*clientv1.User{
+		wantUsers := []*v1.User{
 			{
-				Id:         "1",
+				Id:         1,
 				Name:       "user1",
 				Email:      "user1@headscale.net",
 				Provider:   "oidc",
 				ProviderId: scenario.mockOIDC.Issuer() + "/user1",
 			},
 			{
-				Id:         "2",
+				Id:         2,
 				Name:       "user2",
 				Email:      "user2@headscale.net",
 				Provider:   "oidc",
@@ -611,15 +611,15 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		}
 
 		sort.Slice(listUsers, func(i, j int) bool {
-			return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+			return listUsers[i].GetId() < listUsers[j].GetId()
 		})
 
-		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
+		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
 			ct.Errorf("User validation failed after user2 login - expected both user1 and user2: %s", diff)
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating both user1 and user2 exist after second OIDC login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating both user1 and user2 exist after second OIDC login")
 
-	var listNodesAfterNewUserLogin []*clientv1.Node
+	var listNodesAfterNewUserLogin []*v1.Node
 	// First, wait for the new node to be created
 	t.Logf("Waiting for user2 node creation at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -627,7 +627,7 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		assert.NoError(ct, err, "Failed to list nodes after user2 login")
 		// We might temporarily have more than 2 nodes during cleanup, so check for at least 2
 		assert.GreaterOrEqual(ct, len(listNodesAfterNewUserLogin), 2, "Should have at least 2 nodes after user2 login, got %d (may include temporary nodes during cleanup)", len(listNodesAfterNewUserLogin))
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for user2 node creation (allowing temporary extra nodes during cleanup)")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for user2 node creation (allowing temporary extra nodes during cleanup)")
 
 	// Then wait for cleanup to stabilize at exactly 2 nodes
 	t.Logf("Waiting for node cleanup stabilization at %s", time.Now().Format(TimestampFormat))
@@ -640,19 +640,19 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		if len(listNodesAfterNewUserLogin) >= 2 {
 			// Machine key is the same as the "machine" has not changed,
 			// but Node key is not as it is a new node
-			assert.Equal(ct, listNodes[0].MachineKey, listNodesAfterNewUserLogin[0].MachineKey, "Machine key should be preserved from original node")
-			assert.Equal(ct, listNodesAfterNewUserLogin[0].MachineKey, listNodesAfterNewUserLogin[1].MachineKey, "Both nodes should share the same machine key")
-			assert.NotEqual(ct, listNodesAfterNewUserLogin[0].NodeKey, listNodesAfterNewUserLogin[1].NodeKey, "Node keys should be different between user1 and user2 nodes")
+			assert.Equal(ct, listNodes[0].GetMachineKey(), listNodesAfterNewUserLogin[0].GetMachineKey(), "Machine key should be preserved from original node")
+			assert.Equal(ct, listNodesAfterNewUserLogin[0].GetMachineKey(), listNodesAfterNewUserLogin[1].GetMachineKey(), "Both nodes should share the same machine key")
+			assert.NotEqual(ct, listNodesAfterNewUserLogin[0].GetNodeKey(), listNodesAfterNewUserLogin[1].GetNodeKey(), "Node keys should be different between user1 and user2 nodes")
 		}
-	}, integrationutil.PolicyPropagationTimeout, 2*time.Second, "waiting for node count stabilization at exactly 2 nodes after user2 login")
+	}, integrationutil.ScaledTimeout(90*time.Second), 2*time.Second, "waiting for node count stabilization at exactly 2 nodes after user2 login")
 
 	// Security validation: Only user2's node should be active after user switch
 	var activeUser2NodeID types.NodeID
 
 	for _, node := range listNodesAfterNewUserLogin {
-		if node.User.Id == "2" { // user2
-			activeUser2NodeID = types.NodeID(mustParseID(node.Id))
-			t.Logf("Active user2 node: %d (User: %s)", mustParseID(node.Id), node.User.Name)
+		if node.GetUser().GetId() == 2 { // user2
+			activeUser2NodeID = types.NodeID(node.GetId())
+			t.Logf("Active user2 node: %d (User: %s)", node.GetId(), node.GetUser().GetName())
 
 			break
 		}
@@ -674,7 +674,7 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		} else {
 			assert.Fail(c, "User2 node not found in nodestore")
 		}
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating only user2 node is online after user switch")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating only user2 node is online after user switch")
 
 	// Before logging out user2, validate we have exactly 2 nodes and both are stable
 	t.Logf("Pre-logout validation: checking node stability at %s", time.Now().Format(TimestampFormat))
@@ -685,11 +685,11 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 
 		// Validate node stability - ensure no phantom nodes
 		for i, node := range currentNodes {
-			assert.NotEmpty(ct, node.User.Id, "Node %d should have a valid user before logout", i)
-			assert.NotEmpty(ct, node.MachineKey, "Node %d should have a valid machine key before logout", i)
-			t.Logf("Pre-logout node %d: User=%s, MachineKey=%s", i, node.User.Name, node.MachineKey[:16]+"...")
+			assert.NotNil(ct, node.GetUser(), "Node %d should have a valid user before logout", i)
+			assert.NotEmpty(ct, node.GetMachineKey(), "Node %d should have a valid machine key before logout", i)
+			t.Logf("Pre-logout node %d: User=%s, MachineKey=%s", i, node.GetUser().GetName(), node.GetMachineKey()[:16]+"...")
 		}
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating stable node count and integrity before user2 logout")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating stable node count and integrity before user2 logout")
 
 	// Log out user2, and log into user1, no new node should be created,
 	// the node should now "become" node1 again
@@ -715,10 +715,10 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		status, err := ts.Status()
 		assert.NoError(ct, err, "Failed to get client status during user2 logout validation")
 		assert.Equal(ct, "NeedsLogin", status.BackendState, "Expected NeedsLogin state after user2 logout, got %s", status.BackendState)
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for user2 logout to complete before user1 relogin")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for user2 logout to complete before user1 relogin")
 
 	// Before logging back in, ensure we still have exactly 2 nodes
-	// Note: We skip [validateLogoutComplete] here since it expects all nodes to be offline,
+	// Note: We skip validateLogoutComplete here since it expects all nodes to be offline,
 	// but in OIDC scenario we maintain both nodes in DB with only active user online
 
 	// Additional validation that nodes are properly maintained during logout
@@ -730,11 +730,11 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 
 		// Ensure both nodes are still valid (not cleaned up incorrectly)
 		for i, node := range currentNodes {
-			assert.NotEmpty(ct, node.User.Id, "Node %d should still have a valid user after user2 logout", i)
-			assert.NotEmpty(ct, node.MachineKey, "Node %d should still have a valid machine key after user2 logout", i)
-			t.Logf("Post-logout node %d: User=%s, MachineKey=%s", i, node.User.Name, node.MachineKey[:16]+"...")
+			assert.NotNil(ct, node.GetUser(), "Node %d should still have a valid user after user2 logout", i)
+			assert.NotEmpty(ct, node.GetMachineKey(), "Node %d should still have a valid machine key after user2 logout", i)
+			t.Logf("Post-logout node %d: User=%s, MachineKey=%s", i, node.GetUser().GetName(), node.GetMachineKey()[:16]+"...")
 		}
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating node persistence and integrity after user2 logout")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating node persistence and integrity after user2 logout")
 
 	// We do not actually "change" the user here, it is done by logging in again
 	// as the OIDC mock server is kind of like a stack, and the next user is
@@ -750,7 +750,7 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		status, err := ts.Status()
 		assert.NoError(ct, err, "Failed to get client status during user1 relogin validation")
 		assert.Equal(ct, "Running", status.BackendState, "Expected Running state after user1 relogin, got %s", status.BackendState)
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for user1 relogin to complete (final login)")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for user1 relogin to complete (final login)")
 
 	t.Logf("Logged back in")
 	t.Log("timestamp: " + time.Now().Format(TimestampFormat) + "\n")
@@ -761,16 +761,16 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		assert.NoError(ct, err, "Failed to list users during final validation")
 		assert.Len(ct, listUsers, 2, "Should still have exactly 2 users after user1 relogin, got %d", len(listUsers))
 
-		wantUsers := []*clientv1.User{
+		wantUsers := []*v1.User{
 			{
-				Id:         "1",
+				Id:         1,
 				Name:       "user1",
 				Email:      "user1@headscale.net",
 				Provider:   "oidc",
 				ProviderId: scenario.mockOIDC.Issuer() + "/user1",
 			},
 			{
-				Id:         "2",
+				Id:         2,
 				Name:       "user2",
 				Email:      "user2@headscale.net",
 				Provider:   "oidc",
@@ -779,15 +779,15 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		}
 
 		sort.Slice(listUsers, func(i, j int) bool {
-			return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+			return listUsers[i].GetId() < listUsers[j].GetId()
 		})
 
-		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
+		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
 			ct.Errorf("Final user validation failed - both users should persist after relogin cycle: %s", diff)
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating user persistence after complete relogin cycle (user1->user2->user1)")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating user persistence after complete relogin cycle (user1->user2->user1)")
 
-	var listNodesAfterLoggingBackIn []*clientv1.Node
+	var listNodesAfterLoggingBackIn []*v1.Node
 	// Wait for login to complete and nodes to stabilize
 	t.Logf("Final node validation: checking node stability after user1 relogin at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -806,35 +806,35 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		// Validate that the machine we had when we logged in the first time, has the same
 		// machine key, but a different ID than the newly logged in version of the same
 		// machine.
-		assert.Equal(ct, listNodes[0].MachineKey, listNodesAfterNewUserLogin[0].MachineKey, "Original user1 machine key should match user1 node after user switch")
-		assert.Equal(ct, listNodes[0].NodeKey, listNodesAfterNewUserLogin[0].NodeKey, "Original user1 node key should match user1 node after user switch")
-		assert.Equal(ct, listNodes[0].Id, listNodesAfterNewUserLogin[0].Id, "Original user1 node ID should match user1 node after user switch")
-		assert.Equal(ct, listNodes[0].MachineKey, listNodesAfterNewUserLogin[1].MachineKey, "User1 and user2 nodes should share the same machine key")
-		assert.NotEqual(ct, listNodes[0].Id, listNodesAfterNewUserLogin[1].Id, "User1 and user2 nodes should have different node IDs")
-		assert.NotEqual(ct, listNodes[0].User.Id, listNodesAfterNewUserLogin[1].User.Id, "User1 and user2 nodes should belong to different users")
+		assert.Equal(ct, listNodes[0].GetMachineKey(), listNodesAfterNewUserLogin[0].GetMachineKey(), "Original user1 machine key should match user1 node after user switch")
+		assert.Equal(ct, listNodes[0].GetNodeKey(), listNodesAfterNewUserLogin[0].GetNodeKey(), "Original user1 node key should match user1 node after user switch")
+		assert.Equal(ct, listNodes[0].GetId(), listNodesAfterNewUserLogin[0].GetId(), "Original user1 node ID should match user1 node after user switch")
+		assert.Equal(ct, listNodes[0].GetMachineKey(), listNodesAfterNewUserLogin[1].GetMachineKey(), "User1 and user2 nodes should share the same machine key")
+		assert.NotEqual(ct, listNodes[0].GetId(), listNodesAfterNewUserLogin[1].GetId(), "User1 and user2 nodes should have different node IDs")
+		assert.NotEqual(ct, listNodes[0].GetUser().GetId(), listNodesAfterNewUserLogin[1].GetUser().GetId(), "User1 and user2 nodes should belong to different users")
 
 		// Even tho we are logging in again with the same user, the previous key has been expired
 		// and a new one has been generated. The node entry in the database should be the same
 		// as the user + machinekey still matches.
-		assert.Equal(ct, listNodes[0].MachineKey, listNodesAfterLoggingBackIn[0].MachineKey, "Machine key should remain consistent after user1 relogin")
-		assert.NotEqual(ct, listNodes[0].NodeKey, listNodesAfterLoggingBackIn[0].NodeKey, "Node key should be regenerated after user1 relogin")
-		assert.Equal(ct, listNodes[0].Id, listNodesAfterLoggingBackIn[0].Id, "Node ID should be preserved for user1 after relogin")
+		assert.Equal(ct, listNodes[0].GetMachineKey(), listNodesAfterLoggingBackIn[0].GetMachineKey(), "Machine key should remain consistent after user1 relogin")
+		assert.NotEqual(ct, listNodes[0].GetNodeKey(), listNodesAfterLoggingBackIn[0].GetNodeKey(), "Node key should be regenerated after user1 relogin")
+		assert.Equal(ct, listNodes[0].GetId(), listNodesAfterLoggingBackIn[0].GetId(), "Node ID should be preserved for user1 after relogin")
 
 		// The "logged back in" machine should have the same machinekey but a different nodekey
 		// than the version logged in with a different user.
-		assert.Equal(ct, listNodesAfterLoggingBackIn[0].MachineKey, listNodesAfterLoggingBackIn[1].MachineKey, "Both final nodes should share the same machine key")
-		assert.NotEqual(ct, listNodesAfterLoggingBackIn[0].NodeKey, listNodesAfterLoggingBackIn[1].NodeKey, "Final nodes should have different node keys for different users")
+		assert.Equal(ct, listNodesAfterLoggingBackIn[0].GetMachineKey(), listNodesAfterLoggingBackIn[1].GetMachineKey(), "Both final nodes should share the same machine key")
+		assert.NotEqual(ct, listNodesAfterLoggingBackIn[0].GetNodeKey(), listNodesAfterLoggingBackIn[1].GetNodeKey(), "Final nodes should have different node keys for different users")
 
 		t.Logf("Final validation complete - node counts and key relationships verified at %s", time.Now().Format(TimestampFormat))
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating final node state after complete user1->user2->user1 relogin cycle with detailed key validation")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating final node state after complete user1->user2->user1 relogin cycle with detailed key validation")
 
 	// Security validation: Only user1's node should be active after relogin
 	var activeUser1NodeID types.NodeID
 
 	for _, node := range listNodesAfterLoggingBackIn {
-		if node.User.Id == "1" { // user1
-			activeUser1NodeID = types.NodeID(mustParseID(node.Id))
-			t.Logf("Active user1 node after relogin: %d (User: %s)", mustParseID(node.Id), node.User.Name)
+		if node.GetUser().GetId() == 1 { // user1
+			activeUser1NodeID = types.NodeID(node.GetId())
+			t.Logf("Active user1 node after relogin: %d (User: %s)", node.GetId(), node.GetUser().GetName())
 
 			break
 		}
@@ -856,7 +856,7 @@ func TestOIDCReloginSameNodeNewUser(t *testing.T) {
 		} else {
 			assert.Fail(c, "User1 node not found in nodestore after relogin")
 		}
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating only user1 node is online after final relogin")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating only user1 node is online after final relogin")
 }
 
 // TestOIDCFollowUpUrl validates the follow-up login flow
@@ -933,7 +933,7 @@ func TestOIDCFollowUpUrl(t *testing.T) {
 		assert.NoError(c, err)
 
 		assert.NotEqual(c, u.String(), st.AuthURL, "AuthURL should change")
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for registration cache to expire and status to reflect NeedsLogin")
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for registration cache to expire and status to reflect NeedsLogin")
 
 	_, err = doLoginURL(ts.Hostname(), newUrl)
 	require.NoError(t, err)
@@ -942,9 +942,9 @@ func TestOIDCFollowUpUrl(t *testing.T) {
 	require.NoError(t, err)
 	assert.Len(t, listUsers, 1)
 
-	wantUsers := []*clientv1.User{
+	wantUsers := []*v1.User{
 		{
-			Id:         "1",
+			Id:         1,
 			Name:       "user1",
 			Email:      "user1@headscale.net",
 			Provider:   "oidc",
@@ -954,15 +954,15 @@ func TestOIDCFollowUpUrl(t *testing.T) {
 
 	sort.Slice(
 		listUsers, func(i, j int) bool {
-			return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+			return listUsers[i].GetId() < listUsers[j].GetId()
 		},
 	)
 
 	if diff := cmp.Diff(
 		wantUsers,
 		listUsers,
-		cmpopts.IgnoreUnexported(clientv1.User{}),
-		cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt"),
+		cmpopts.IgnoreUnexported(v1.User{}),
+		cmpopts.IgnoreFields(v1.User{}, "CreatedAt"),
 	); diff != "" {
 		t.Fatalf("unexpected users: %s", diff)
 	}
@@ -971,7 +971,7 @@ func TestOIDCFollowUpUrl(t *testing.T) {
 		listNodes, err := headscale.ListNodes()
 		assert.NoError(c, err)
 		assert.Len(c, listNodes, 1)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for expected node list after OIDC login")
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for expected node list after OIDC login")
 }
 
 // TestOIDCMultipleOpenedLoginUrls tests the scenario:
@@ -1051,9 +1051,9 @@ func TestOIDCMultipleOpenedLoginUrls(t *testing.T) {
 	require.NoError(t, err)
 	assert.Len(t, listUsers, 1)
 
-	wantUsers := []*clientv1.User{
+	wantUsers := []*v1.User{
 		{
-			Id:         "1",
+			Id:         1,
 			Name:       "user1",
 			Email:      "user1@headscale.net",
 			Provider:   "oidc",
@@ -1063,15 +1063,15 @@ func TestOIDCMultipleOpenedLoginUrls(t *testing.T) {
 
 	sort.Slice(
 		listUsers, func(i, j int) bool {
-			return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+			return listUsers[i].GetId() < listUsers[j].GetId()
 		},
 	)
 
 	if diff := cmp.Diff(
 		wantUsers,
 		listUsers,
-		cmpopts.IgnoreUnexported(clientv1.User{}),
-		cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt"),
+		cmpopts.IgnoreUnexported(v1.User{}),
+		cmpopts.IgnoreFields(v1.User{}, "CreatedAt"),
 	); diff != "" {
 		t.Fatalf("unexpected users: %s", diff)
 	}
@@ -1081,7 +1081,7 @@ func TestOIDCMultipleOpenedLoginUrls(t *testing.T) {
 			listNodes, err := headscale.ListNodes()
 			assert.NoError(c, err)
 			assert.Len(c, listNodes, 1)
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for expected node list after OIDC login",
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for expected node list after OIDC login",
 	)
 }
 
@@ -1159,9 +1159,9 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		assert.NoError(ct, err, "Failed to list users during initial validation")
 		assert.Len(ct, listUsers, 1, "Expected exactly 1 user after first login, got %d", len(listUsers))
 
-		wantUsers := []*clientv1.User{
+		wantUsers := []*v1.User{
 			{
-				Id:         "1",
+				Id:         1,
 				Name:       "user1",
 				Email:      "user1@headscale.net",
 				Provider:   "oidc",
@@ -1170,17 +1170,17 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		}
 
 		sort.Slice(listUsers, func(i, j int) bool {
-			return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+			return listUsers[i].GetId() < listUsers[j].GetId()
 		})
 
-		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
+		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
 			ct.Errorf("User validation failed after first login - unexpected users: %s", diff)
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating user1 creation after initial OIDC login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating user1 creation after initial OIDC login")
 
 	t.Logf("Validating initial node creation at %s", time.Now().Format(TimestampFormat))
 
-	var initialNodes []*clientv1.Node
+	var initialNodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		var err error
@@ -1188,7 +1188,7 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		initialNodes, err = headscale.ListNodes()
 		assert.NoError(ct, err, "Failed to list nodes during initial validation")
 		assert.Len(ct, initialNodes, 1, "Expected exactly 1 node after first login, got %d", len(initialNodes))
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating initial node creation for user1 after OIDC login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating initial node creation for user1 after OIDC login")
 
 	// Collect expected node IDs for validation after user1 initial login
 	expectedNodes := make([]types.NodeID, 0, 1)
@@ -1203,7 +1203,7 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 
 		nodeID, err = strconv.ParseUint(string(status.Self.ID), 10, 64)
 		assert.NoError(ct, err, "Failed to parse node ID from status")
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for node ID to be populated in status after initial login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for node ID to be populated in status after initial login")
 
 	expectedNodes = append(expectedNodes, types.NodeID(nodeID))
 
@@ -1211,9 +1211,9 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 	validateInitialConnection(t, headscale, expectedNodes)
 
 	// Store initial node keys for comparison
-	initialMachineKey := initialNodes[0].MachineKey
-	initialNodeKey := initialNodes[0].NodeKey
-	initialNodeID := initialNodes[0].Id
+	initialMachineKey := initialNodes[0].GetMachineKey()
+	initialNodeKey := initialNodes[0].GetNodeKey()
+	initialNodeID := initialNodes[0].GetId()
 
 	// Logout user1
 	err = ts.Logout()
@@ -1232,7 +1232,7 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		status, err := ts.Status()
 		assert.NoError(ct, err, "Failed to get client status during logout validation")
 		assert.Equal(ct, "NeedsLogin", status.BackendState, "Expected NeedsLogin state after logout, got %s", status.BackendState)
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for user1 logout to complete before same-user relogin")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for user1 logout to complete before same-user relogin")
 
 	// Validate node persistence during logout (node should remain in DB)
 	t.Logf("Validating node persistence during logout at %s", time.Now().Format(TimestampFormat))
@@ -1240,7 +1240,7 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		listNodes, err := headscale.ListNodes()
 		assert.NoError(ct, err, "Failed to list nodes during logout validation")
 		assert.Len(ct, listNodes, 1, "Should still have exactly 1 node during logout (node should persist in DB), got %d", len(listNodes))
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating node persistence in database during same-user logout")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating node persistence in database during same-user logout")
 
 	// Login again as the same user (user1)
 	u, err = ts.LoginWithURL(headscale.GetEndpoint())
@@ -1254,7 +1254,7 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		status, err := ts.Status()
 		assert.NoError(ct, err, "Failed to get client status during relogin validation")
 		assert.Equal(ct, "Running", status.BackendState, "Expected Running state after user1 relogin, got %s", status.BackendState)
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for user1 relogin to complete (same user)")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for user1 relogin to complete (same user)")
 
 	t.Logf("Final validation: checking user persistence after same-user relogin at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -1262,9 +1262,9 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		assert.NoError(ct, err, "Failed to list users during final validation")
 		assert.Len(ct, listUsers, 1, "Should still have exactly 1 user after same-user relogin, got %d", len(listUsers))
 
-		wantUsers := []*clientv1.User{
+		wantUsers := []*v1.User{
 			{
-				Id:         "1",
+				Id:         1,
 				Name:       "user1",
 				Email:      "user1@headscale.net",
 				Provider:   "oidc",
@@ -1273,15 +1273,15 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		}
 
 		sort.Slice(listUsers, func(i, j int) bool {
-			return mustParseID(listUsers[i].Id) < mustParseID(listUsers[j].Id)
+			return listUsers[i].GetId() < listUsers[j].GetId()
 		})
 
-		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
+		if diff := cmp.Diff(wantUsers, listUsers, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
 			ct.Errorf("Final user validation failed - user1 should persist after same-user relogin: %s", diff)
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating user1 persistence after same-user OIDC relogin cycle")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating user1 persistence after same-user OIDC relogin cycle")
 
-	var finalNodes []*clientv1.Node
+	var finalNodes []*v1.Node
 
 	t.Logf("Final node validation: checking node stability after same-user relogin at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -1293,19 +1293,19 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		finalNode := finalNodes[0]
 
 		// Machine key should be preserved (same physical machine)
-		assert.Equal(ct, initialMachineKey, finalNode.MachineKey, "Machine key should be preserved for same user same node relogin")
+		assert.Equal(ct, initialMachineKey, finalNode.GetMachineKey(), "Machine key should be preserved for same user same node relogin")
 
 		// Node ID should be preserved (same user, same machine)
-		assert.Equal(ct, initialNodeID, finalNode.Id, "Node ID should be preserved for same user same node relogin")
+		assert.Equal(ct, initialNodeID, finalNode.GetId(), "Node ID should be preserved for same user same node relogin")
 
 		// Node key should be regenerated (new session after logout)
-		assert.NotEqual(ct, initialNodeKey, finalNode.NodeKey, "Node key should be regenerated after logout/relogin even for same user")
+		assert.NotEqual(ct, initialNodeKey, finalNode.GetNodeKey(), "Node key should be regenerated after logout/relogin even for same user")
 
 		t.Logf("Final validation complete - same user relogin key relationships verified at %s", time.Now().Format(TimestampFormat))
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating final node state after same-user OIDC relogin cycle with key preservation validation")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating final node state after same-user OIDC relogin cycle with key preservation validation")
 
 	// Security validation: user1's node should be active after relogin
-	activeUser1NodeID := types.NodeID(mustParseID(finalNodes[0].Id))
+	activeUser1NodeID := types.NodeID(finalNodes[0].GetId())
 
 	t.Logf("Validating user1 node is online after same-user relogin at %s", time.Now().Format(TimestampFormat))
 	require.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1322,7 +1322,7 @@ func TestOIDCReloginSameNodeSameUser(t *testing.T) {
 		} else {
 			assert.Fail(c, "User1 node not found in nodestore after same-user relogin")
 		}
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating user1 node is online after same-user OIDC relogin")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating user1 node is online after same-user OIDC relogin")
 }
 
 // TestOIDCExpiryAfterRestart validates that node expiry is preserved
@@ -1389,16 +1389,16 @@ func TestOIDCExpiryAfterRestart(t *testing.T) {
 		assert.Len(ct, nodes, 1)
 
 		node := nodes[0]
-		assert.NotNil(ct, node.Expiry, "Expiry should be set after OIDC login")
+		assert.NotNil(ct, node.GetExpiry(), "Expiry should be set after OIDC login")
 
-		if node.Expiry != nil {
-			expiryTime := *node.Expiry
+		if node.GetExpiry() != nil {
+			expiryTime := node.GetExpiry().AsTime()
 			assert.False(ct, expiryTime.IsZero(), "Expiry should not be zero time")
 
 			initialExpiry = expiryTime
 			t.Logf("Initial expiry set to: %v (expires in %v)", expiryTime, time.Until(expiryTime))
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating initial expiry after OIDC login")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating initial expiry after OIDC login")
 
 	// Now restart the tailscaled container
 	t.Logf("Restarting tailscaled container at %s", time.Now().Format(TimestampFormat))
@@ -1420,7 +1420,7 @@ func TestOIDCExpiryAfterRestart(t *testing.T) {
 		}
 
 		assert.Equal(ct, "Running", status.BackendState)
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "waiting for tailscale to reconnect after restart")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "waiting for tailscale to reconnect after restart")
 
 	// THE CRITICAL TEST: Verify expiry is still set correctly after restart
 	t.Logf("Validating expiry preservation after restart at %s", time.Now().Format(TimestampFormat))
@@ -1431,10 +1431,10 @@ func TestOIDCExpiryAfterRestart(t *testing.T) {
 		assert.Len(ct, nodes, 1, "Should still have exactly 1 node after restart")
 
 		node := nodes[0]
-		assert.NotNil(ct, node.Expiry, "Expiry should NOT be nil after restart")
+		assert.NotNil(ct, node.GetExpiry(), "Expiry should NOT be nil after restart")
 
-		if node.Expiry != nil {
-			expiryTime := *node.Expiry
+		if node.GetExpiry() != nil {
+			expiryTime := node.GetExpiry().AsTime()
 
 			// This is the bug check - expiry should NOT be zero time
 			assert.False(ct, expiryTime.IsZero(),
@@ -1448,7 +1448,7 @@ func TestOIDCExpiryAfterRestart(t *testing.T) {
 			t.Logf("SUCCESS: Expiry preserved after restart: %v (expires in %v)",
 				expiryTime, time.Until(expiryTime))
 		}
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "validating expiry preservation after restart")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "validating expiry preservation after restart")
 }
 
 // TestOIDCACLPolicyOnJoin validates that ACL policies are correctly applied
@@ -1468,8 +1468,8 @@ func TestOIDCExpiryAfterRestart(t *testing.T) {
 // 4. Verifies that the OIDC user's node IMMEDIATELY sees the advertised route
 //
 // Expected behavior:
-// - Without fix: OIDC node cannot see the route ([ipnstate.PeerStatus.PrimaryRoutes] is nil/empty)
-// - With fix: OIDC node immediately sees the route in [ipnstate.PeerStatus.PrimaryRoutes]
+// - Without fix: OIDC node cannot see the route (PrimaryRoutes is nil/empty)
+// - With fix: OIDC node immediately sees the route in PrimaryRoutes
 //
 // Root cause: The buggy code called a.h.Change(c) immediately after user
 // creation but BEFORE node registration completed, creating a race condition
@@ -1567,10 +1567,10 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 		assert.Len(ct, nodes, 1)
 
 		gatewayNode := nodes[0]
-		gatewayNodeID = mustParseID(gatewayNode.Id)
-		assert.Len(ct, gatewayNode.AvailableRoutes, 1)
-		assert.Contains(ct, gatewayNode.AvailableRoutes, advertiseRoute)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "route advertisement should propagate to headscale")
+		gatewayNodeID = gatewayNode.GetId()
+		assert.Len(ct, gatewayNode.GetAvailableRoutes(), 1)
+		assert.Contains(ct, gatewayNode.GetAvailableRoutes(), advertiseRoute)
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "route advertisement should propagate to headscale")
 
 	// Approve the advertised route
 	_, err = headscale.ApproveRoutes(
@@ -1586,9 +1586,9 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 		assert.Len(ct, nodes, 1)
 
 		gatewayNode := nodes[0]
-		assert.Len(ct, gatewayNode.ApprovedRoutes, 1)
-		assert.Contains(ct, gatewayNode.ApprovedRoutes, advertiseRoute)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "route approval should propagate to headscale")
+		assert.Len(ct, gatewayNode.GetApprovedRoutes(), 1)
+		assert.Contains(ct, gatewayNode.GetApprovedRoutes(), advertiseRoute)
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "route approval should propagate to headscale")
 
 	// NOW create the OIDC user by having them join
 	// This is where issue #2888 manifests - the new OIDC node should immediately
@@ -1618,8 +1618,8 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 	// see the gateway's advertised route WITHOUT needing a client restart.
 	//
 	// This is where the bug manifests:
-	// - Without fix: [ipnstate.PeerStatus.PrimaryRoutes] will be nil/empty
-	// - With fix: [ipnstate.PeerStatus.PrimaryRoutes] immediately contains the advertised route
+	// - Without fix: PrimaryRoutes will be nil/empty
+	// - With fix: PrimaryRoutes immediately contains the advertised route
 	t.Logf("Verifying OIDC user can immediately see advertised routes at %s", time.Now().Format(TimestampFormat))
 
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -1641,7 +1641,7 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 		assert.NotNil(ct, gatewayPeer, "OIDC user should see gateway as peer")
 
 		if gatewayPeer != nil {
-			// This is the critical assertion - [ipnstate.PeerStatus.PrimaryRoutes] should NOT be nil
+			// This is the critical assertion - PrimaryRoutes should NOT be nil
 			assert.NotNil(ct, gatewayPeer.PrimaryRoutes,
 				"BUG #2888: Gateway peer PrimaryRoutes is nil - ACL policy not applied to new OIDC node!")
 
@@ -1652,13 +1652,13 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 				t.Logf("SUCCESS: OIDC user can see advertised route %s in gateway's PrimaryRoutes", advertiseRoute)
 			}
 
-			// Also verify [ipnstate.PeerStatus.AllowedIPs] includes the route
+			// Also verify AllowedIPs includes the route
 			if gatewayPeer.AllowedIPs != nil && gatewayPeer.AllowedIPs.Len() > 0 {
 				allowedIPs := gatewayPeer.AllowedIPs.AsSlice()
 				t.Logf("Gateway peer AllowedIPs: %v", allowedIPs)
 			}
 		}
-	}, integrationutil.ScaledTimeout(15*time.Second), integrationutil.SlowPoll,
+	}, integrationutil.ScaledTimeout(15*time.Second), 500*time.Millisecond,
 		"OIDC user should immediately see gateway's advertised route without client restart (issue #2888)")
 
 	// Verify that the Gateway node sees the OIDC node's advertised route (AutoApproveRoutes check)
@@ -1690,7 +1690,7 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 					"Gateway user should immediately see OIDC's advertised route %s in PrimaryRoutes", oidcAdvertiseRoute)
 			}
 		}
-	}, integrationutil.ScaledTimeout(15*time.Second), integrationutil.SlowPoll,
+	}, integrationutil.ScaledTimeout(15*time.Second), 500*time.Millisecond,
 		"Gateway user should immediately see OIDC's advertised route (AutoApproveRoutes check)")
 
 	// Additional validation: Verify nodes in headscale match expectations
@@ -1707,10 +1707,10 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 		assert.GreaterOrEqual(ct, len(users), 2, "Should have at least 2 users (gateway CLI user + oidcuser)")
 
 		// Find gateway CLI user
-		var gatewayUser *clientv1.User
+		var gatewayUser *v1.User
 
 		for _, user := range users {
-			if user.Name == "gateway" && user.Provider == "" {
+			if user.GetName() == "gateway" && user.GetProvider() == "" {
 				gatewayUser = user
 				break
 			}
@@ -1719,14 +1719,14 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 		assert.NotNil(ct, gatewayUser, "Should have gateway CLI user")
 
 		if gatewayUser != nil {
-			assert.Equal(ct, "gateway", gatewayUser.Name)
+			assert.Equal(ct, "gateway", gatewayUser.GetName())
 		}
 
 		// Find OIDC user
-		var oidcUserFound *clientv1.User
+		var oidcUserFound *v1.User
 
 		for _, user := range users {
-			if user.Name == "oidcuser" && user.Provider == "oidc" {
+			if user.GetName() == "oidcuser" && user.GetProvider() == "oidc" {
 				oidcUserFound = user
 				break
 			}
@@ -1735,10 +1735,10 @@ func TestOIDCACLPolicyOnJoin(t *testing.T) {
 		assert.NotNil(ct, oidcUserFound, "Should have OIDC user")
 
 		if oidcUserFound != nil {
-			assert.Equal(ct, "oidcuser", oidcUserFound.Name)
-			assert.Equal(ct, "oidcuser@headscale.net", oidcUserFound.Email)
+			assert.Equal(ct, "oidcuser", oidcUserFound.GetName())
+			assert.Equal(ct, "oidcuser@headscale.net", oidcUserFound.GetEmail())
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "headscale should have correct users and nodes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "headscale should have correct users and nodes")
 
 	t.Logf("Test completed successfully - issue #2888 fix validated")
 }
@@ -1829,12 +1829,12 @@ func TestOIDCReloginSameUserRoutesPreserved(t *testing.T) {
 		status, err := ts.Status()
 		assert.NoError(ct, err)
 		assert.Equal(ct, "Running", status.BackendState)
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for initial login to complete")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for initial login to complete")
 
 	// Step 1: Verify initial route is advertised, approved, and SERVING
 	t.Logf("Step 1: Verifying initial route is advertised, approved, and SERVING at %s", time.Now().Format(TimestampFormat))
 
-	var initialNode *clientv1.Node
+	var initialNode *v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err := headscale.ListNodes()
@@ -1844,21 +1844,21 @@ func TestOIDCReloginSameUserRoutesPreserved(t *testing.T) {
 		if len(nodes) == 1 {
 			initialNode = nodes[0]
 			// Check: 1 announced, 1 approved, 1 serving (subnet route)
-			assert.Lenf(c, initialNode.AvailableRoutes, 1,
-				"Node should have 1 available route, got %v", initialNode.AvailableRoutes)
-			assert.Lenf(c, initialNode.ApprovedRoutes, 1,
-				"Node should have 1 approved route, got %v", initialNode.ApprovedRoutes)
-			assert.Lenf(c, initialNode.SubnetRoutes, 1,
-				"Node should have 1 serving (subnet) route, got %v - THIS IS THE BUG if empty", initialNode.SubnetRoutes)
-			assert.Contains(c, initialNode.SubnetRoutes, advertiseRoute,
+			assert.Lenf(c, initialNode.GetAvailableRoutes(), 1,
+				"Node should have 1 available route, got %v", initialNode.GetAvailableRoutes())
+			assert.Lenf(c, initialNode.GetApprovedRoutes(), 1,
+				"Node should have 1 approved route, got %v", initialNode.GetApprovedRoutes())
+			assert.Lenf(c, initialNode.GetSubnetRoutes(), 1,
+				"Node should have 1 serving (subnet) route, got %v - THIS IS THE BUG if empty", initialNode.GetSubnetRoutes())
+			assert.Contains(c, initialNode.GetSubnetRoutes(), advertiseRoute,
 				"Subnet routes should contain %s", advertiseRoute)
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "initial route should be serving")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "initial route should be serving")
 
 	require.NotNil(t, initialNode, "Initial node should be found")
-	initialNodeID := initialNode.Id
-	t.Logf("Initial node ID: %s, Available: %v, Approved: %v, Serving: %v",
-		initialNodeID, initialNode.AvailableRoutes, initialNode.ApprovedRoutes, initialNode.SubnetRoutes)
+	initialNodeID := initialNode.GetId()
+	t.Logf("Initial node ID: %d, Available: %v, Approved: %v, Serving: %v",
+		initialNodeID, initialNode.GetAvailableRoutes(), initialNode.GetApprovedRoutes(), initialNode.GetSubnetRoutes())
 
 	// Step 2: Logout
 	t.Logf("Step 2: Logging out at %s", time.Now().Format(TimestampFormat))
@@ -1871,7 +1871,7 @@ func TestOIDCReloginSameUserRoutesPreserved(t *testing.T) {
 		status, err := ts.Status()
 		assert.NoError(ct, err)
 		assert.Equal(ct, "NeedsLogin", status.BackendState, "Expected NeedsLogin state after logout")
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for logout to complete")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for logout to complete")
 
 	t.Logf("Logout completed, node should still exist in database")
 
@@ -1880,7 +1880,7 @@ func TestOIDCReloginSameUserRoutesPreserved(t *testing.T) {
 		nodes, err := headscale.ListNodes()
 		assert.NoError(c, err)
 		assert.Len(c, nodes, 1, "Node should persist in database after logout")
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "node should persist after logout")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "node should persist after logout")
 
 	// Step 3: Re-authenticate via OIDC as the same user
 	t.Logf("Step 3: Re-authenticating with same user via OIDC at %s", time.Now().Format(TimestampFormat))
@@ -1896,7 +1896,7 @@ func TestOIDCReloginSameUserRoutesPreserved(t *testing.T) {
 		status, err := ts.Status()
 		assert.NoError(ct, err)
 		assert.Equal(ct, "Running", status.BackendState, "Expected Running state after relogin")
-	}, integrationutil.StatusReadyTimeout, 1*time.Second, "waiting for relogin to complete")
+	}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second, "waiting for relogin to complete")
 
 	t.Logf("Re-authentication completed at %s", time.Now().Format(TimestampFormat))
 
@@ -1911,26 +1911,26 @@ func TestOIDCReloginSameUserRoutesPreserved(t *testing.T) {
 		if len(nodes) == 1 {
 			node := nodes[0]
 			t.Logf("After relogin - Available: %v, Approved: %v, Serving: %v",
-				node.AvailableRoutes, node.ApprovedRoutes, node.SubnetRoutes)
+				node.GetAvailableRoutes(), node.GetApprovedRoutes(), node.GetSubnetRoutes())
 
 			// This is where issue #2896 manifests:
-			// - Available shows the route (from [tailcfg.Hostinfo.RoutableIPs])
-			// - Approved shows the route (from [tailcfg.Node.ApprovedRoutes])
-			// - BUT Serving ([tailcfg.Node.SubnetRoutes]/[ipnstate.PeerStatus.PrimaryRoutes]) is EMPTY!
-			assert.Lenf(c, node.AvailableRoutes, 1,
-				"Node should have 1 available route after relogin, got %v", node.AvailableRoutes)
-			assert.Lenf(c, node.ApprovedRoutes, 1,
-				"Node should have 1 approved route after relogin, got %v", node.ApprovedRoutes)
-			assert.Lenf(c, node.SubnetRoutes, 1,
-				"BUG #2896: Node should have 1 SERVING route after relogin, got %v", node.SubnetRoutes)
-			assert.Contains(c, node.SubnetRoutes, advertiseRoute,
+			// - Available shows the route (from Hostinfo.RoutableIPs)
+			// - Approved shows the route (from ApprovedRoutes)
+			// - BUT Serving (SubnetRoutes/PrimaryRoutes) is EMPTY!
+			assert.Lenf(c, node.GetAvailableRoutes(), 1,
+				"Node should have 1 available route after relogin, got %v", node.GetAvailableRoutes())
+			assert.Lenf(c, node.GetApprovedRoutes(), 1,
+				"Node should have 1 approved route after relogin, got %v", node.GetApprovedRoutes())
+			assert.Lenf(c, node.GetSubnetRoutes(), 1,
+				"BUG #2896: Node should have 1 SERVING route after relogin, got %v", node.GetSubnetRoutes())
+			assert.Contains(c, node.GetSubnetRoutes(), advertiseRoute,
 				"BUG #2896: Subnet routes should contain %s after relogin", advertiseRoute)
 
 			// Also verify node ID was preserved (same node, not new registration)
-			assert.Equal(c, initialNodeID, node.Id,
+			assert.Equal(c, initialNodeID, node.GetId(),
 				"Node ID should be preserved after same-user relogin")
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll,
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond,
 		"BUG #2896: routes should remain SERVING after OIDC logout/relogin with same user")
 
 	t.Logf("Test completed - verifying issue #2896 fix for OIDC")
diff --git a/integration/auth_web_flow_test.go b/integration/auth_web_flow_test.go
index 26c23d06e..f8f66df0e 100644
--- a/integration/auth_web_flow_test.go
+++ b/integration/auth_web_flow_test.go
@@ -6,7 +6,7 @@ import (
 	"testing"
 	"time"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/integration/hsic"
 	"github.com/juanfont/headscale/integration/integrationutil"
@@ -98,7 +98,7 @@ func TestAuthWebFlowLogoutAndReloginSameUser(t *testing.T) {
 	// Validate initial connection state
 	validateInitialConnection(t, headscale, expectedNodes)
 
-	var listNodes []*clientv1.Node
+	var listNodes []*v1.Node
 
 	t.Logf("Validating initial node count after web auth at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -107,7 +107,7 @@ func TestAuthWebFlowLogoutAndReloginSameUser(t *testing.T) {
 		listNodes, err = headscale.ListNodes()
 		assert.NoError(ct, err, "Failed to list nodes after web authentication")
 		assert.Len(ct, listNodes, len(allClients), "Expected %d nodes after web auth, got %d", len(allClients), len(listNodes))
-	}, integrationutil.StatusReadyTimeout, 2*time.Second, "validating node count matches client count after web authentication")
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second, "validating node count matches client count after web authentication")
 
 	nodeCountBeforeLogout := len(listNodes)
 	t.Logf("node count before logout: %d", nodeCountBeforeLogout)
@@ -154,7 +154,7 @@ func TestAuthWebFlowLogoutAndReloginSameUser(t *testing.T) {
 		listNodes, err = headscale.ListNodes()
 		assert.NoError(ct, err, "Failed to list nodes after web flow logout")
 		assert.Len(ct, listNodes, nodeCountBeforeLogout, "Node count should remain unchanged after logout - expected %d nodes, got %d", nodeCountBeforeLogout, len(listNodes))
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating node persistence in database after web flow logout")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating node persistence in database after web flow logout")
 	t.Logf("node count first login: %d, after relogin: %d", nodeCountBeforeLogout, len(listNodes))
 
 	// Validate connection state after relogin
@@ -256,7 +256,7 @@ func TestAuthWebFlowLogoutAndReloginNewUser(t *testing.T) {
 	// Validate initial connection state
 	validateInitialConnection(t, headscale, expectedNodes)
 
-	var listNodes []*clientv1.Node
+	var listNodes []*v1.Node
 
 	t.Logf("Validating initial node count after web auth at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -265,7 +265,7 @@ func TestAuthWebFlowLogoutAndReloginNewUser(t *testing.T) {
 		listNodes, err = headscale.ListNodes()
 		assert.NoError(ct, err, "Failed to list nodes after initial web authentication")
 		assert.Len(ct, listNodes, len(allClients), "Expected %d nodes after web auth, got %d", len(allClients), len(listNodes))
-	}, integrationutil.StatusReadyTimeout, 2*time.Second, "validating node count matches client count after initial web authentication")
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second, "validating node count matches client count after initial web authentication")
 
 	nodeCountBeforeLogout := len(listNodes)
 	t.Logf("node count before logout: %d", nodeCountBeforeLogout)
@@ -316,7 +316,7 @@ func TestAuthWebFlowLogoutAndReloginNewUser(t *testing.T) {
 
 	t.Logf("all clients logged back in as user1")
 
-	var user1Nodes []*clientv1.Node
+	var user1Nodes []*v1.Node
 
 	t.Logf("Validating user1 node count after relogin at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -325,12 +325,12 @@ func TestAuthWebFlowLogoutAndReloginNewUser(t *testing.T) {
 		user1Nodes, err = headscale.ListNodes("user1")
 		assert.NoError(ct, err, "Failed to list nodes for user1 after web flow relogin")
 		assert.Len(ct, user1Nodes, len(allClients), "User1 should have all %d clients after web flow relogin, got %d nodes", len(allClients), len(user1Nodes))
-	}, integrationutil.HAConvergeTimeout, 2*time.Second, "validating user1 has all client nodes after web flow user switch relogin")
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second, "validating user1 has all client nodes after web flow user switch relogin")
 
 	// Collect expected node IDs for user1 after relogin
 	expectedUser1Nodes := make([]types.NodeID, 0, len(user1Nodes))
 	for _, node := range user1Nodes {
-		expectedUser1Nodes = append(expectedUser1Nodes, types.NodeID(mustParseID(node.Id)))
+		expectedUser1Nodes = append(expectedUser1Nodes, types.NodeID(node.GetId()))
 	}
 
 	// Validate connection state after relogin as user1
@@ -338,7 +338,7 @@ func TestAuthWebFlowLogoutAndReloginNewUser(t *testing.T) {
 
 	// Validate that user2's old nodes still exist in database (but are expired/offline)
 	// When CLI registration creates new nodes for user1, user2's old nodes remain
-	var user2Nodes []*clientv1.Node
+	var user2Nodes []*v1.Node
 
 	t.Logf("Validating user2 old nodes remain in database after CLI registration to user1 at %s", time.Now().Format(TimestampFormat))
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -347,7 +347,7 @@ func TestAuthWebFlowLogoutAndReloginNewUser(t *testing.T) {
 		user2Nodes, err = headscale.ListNodes("user2")
 		assert.NoError(ct, err, "Failed to list nodes for user2 after CLI registration to user1")
 		assert.Len(ct, user2Nodes, len(allClients)/2, "User2 should still have %d old nodes (likely expired) after CLI registration to user1, got %d nodes", len(allClients)/2, len(user2Nodes))
-	}, integrationutil.StatusReadyTimeout, 2*time.Second, "validating user2 old nodes remain in database after CLI registration to user1")
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second, "validating user2 old nodes remain in database after CLI registration to user1")
 
 	t.Logf("Validating client login states after web flow user switch at %s", time.Now().Format(TimestampFormat))
 
@@ -356,7 +356,7 @@ func TestAuthWebFlowLogoutAndReloginNewUser(t *testing.T) {
 			status, err := client.Status()
 			assert.NoError(ct, err, "Failed to get status for client %s", client.Hostname())
 			assert.Equal(ct, "user1@test.no", status.User[status.Self.UserID].LoginName, "Client %s should be logged in as user1 after web flow user switch, got %s", client.Hostname(), status.User[status.Self.UserID].LoginName)
-		}, integrationutil.StatusReadyTimeout, 2*time.Second, "validating %s is logged in as user1 after web flow user switch", client.Hostname())
+		}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second, "validating %s is logged in as user1 after web flow user switch", client.Hostname())
 	}
 
 	// Test connectivity after user switch
diff --git a/integration/cli_apikeys_test.go b/integration/cli_apikeys_test.go
deleted file mode 100644
index fab3a1c7d..000000000
--- a/integration/cli_apikeys_test.go
+++ /dev/null
@@ -1,319 +0,0 @@
-package integration
-
-import (
-	"testing"
-	"time"
-
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	"github.com/juanfont/headscale/integration/hsic"
-	"github.com/juanfont/headscale/integration/integrationutil"
-	"github.com/juanfont/headscale/integration/tsic"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-func TestApiKeyCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	count := 5
-
-	spec := ScenarioSpec{
-		Users: []string{"user1", "user2"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-apikey"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	keys := make([]string, count)
-
-	for idx := range count {
-		apiResult, err := headscale.Execute(
-			[]string{
-				"headscale",
-				"apikeys",
-				"create",
-				"--expiration",
-				"24h",
-				"--output",
-				"json",
-			},
-		)
-		require.NoError(t, err)
-		assert.NotEmpty(t, apiResult)
-
-		keys[idx] = apiResult
-	}
-
-	assert.Len(t, keys, 5)
-
-	var listedAPIKeys []clientv1.ApiKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"apikeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedAPIKeys,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for API keys list")
-
-	assert.Len(t, listedAPIKeys, 5)
-
-	assert.Equal(t, "1", listedAPIKeys[0].Id)
-	assert.Equal(t, "2", listedAPIKeys[1].Id)
-	assert.Equal(t, "3", listedAPIKeys[2].Id)
-	assert.Equal(t, "4", listedAPIKeys[3].Id)
-	assert.Equal(t, "5", listedAPIKeys[4].Id)
-
-	assert.NotEmpty(t, listedAPIKeys[0].Prefix)
-	assert.NotEmpty(t, listedAPIKeys[1].Prefix)
-	assert.NotEmpty(t, listedAPIKeys[2].Prefix)
-	assert.NotEmpty(t, listedAPIKeys[3].Prefix)
-	assert.NotEmpty(t, listedAPIKeys[4].Prefix)
-
-	assert.True(t, listedAPIKeys[0].Expiration.After(time.Now()))
-	assert.True(t, listedAPIKeys[1].Expiration.After(time.Now()))
-	assert.True(t, listedAPIKeys[2].Expiration.After(time.Now()))
-	assert.True(t, listedAPIKeys[3].Expiration.After(time.Now()))
-	assert.True(t, listedAPIKeys[4].Expiration.After(time.Now()))
-
-	assert.True(
-		t,
-		listedAPIKeys[0].Expiration.Before(time.Now().Add(time.Hour*26)),
-	)
-	assert.True(
-		t,
-		listedAPIKeys[1].Expiration.Before(time.Now().Add(time.Hour*26)),
-	)
-	assert.True(
-		t,
-		listedAPIKeys[2].Expiration.Before(time.Now().Add(time.Hour*26)),
-	)
-	assert.True(
-		t,
-		listedAPIKeys[3].Expiration.Before(time.Now().Add(time.Hour*26)),
-	)
-	assert.True(
-		t,
-		listedAPIKeys[4].Expiration.Before(time.Now().Add(time.Hour*26)),
-	)
-
-	expiredPrefixes := make(map[string]bool)
-
-	// Expire three keys
-	for idx := range 3 {
-		_, err := headscale.Execute(
-			[]string{
-				"headscale",
-				"apikeys",
-				"expire",
-				"--prefix",
-				listedAPIKeys[idx].Prefix,
-			},
-		)
-		require.NoError(t, err)
-
-		expiredPrefixes[listedAPIKeys[idx].Prefix] = true
-	}
-
-	var listedAfterExpireAPIKeys []clientv1.ApiKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"apikeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedAfterExpireAPIKeys,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for API keys list after expire")
-
-	for index := range listedAfterExpireAPIKeys {
-		if _, ok := expiredPrefixes[listedAfterExpireAPIKeys[index].Prefix]; ok {
-			// Expired
-			assert.True(
-				t,
-				listedAfterExpireAPIKeys[index].Expiration.Before(time.Now()),
-			)
-		} else {
-			// Not expired
-			assert.False(
-				t,
-				listedAfterExpireAPIKeys[index].Expiration.Before(time.Now()),
-			)
-		}
-	}
-
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"apikeys",
-			"delete",
-			"--prefix",
-			listedAPIKeys[0].Prefix,
-		})
-	require.NoError(t, err)
-
-	var listedAPIKeysAfterDelete []clientv1.ApiKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"apikeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedAPIKeysAfterDelete,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for API keys list after delete")
-
-	assert.Len(t, listedAPIKeysAfterDelete, 4)
-
-	// Test expire by ID (using key at index 0)
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"apikeys",
-			"expire",
-			"--id",
-			listedAPIKeysAfterDelete[0].Id,
-		})
-	require.NoError(t, err)
-
-	var listedAPIKeysAfterExpireByID []clientv1.ApiKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"apikeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedAPIKeysAfterExpireByID,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for API keys list after expire by ID")
-
-	// Verify the key was expired
-	for idx := range listedAPIKeysAfterExpireByID {
-		if listedAPIKeysAfterExpireByID[idx].Id == listedAPIKeysAfterDelete[0].Id {
-			assert.True(t, listedAPIKeysAfterExpireByID[idx].Expiration.Before(time.Now()),
-				"Key expired by ID should have expiration in the past")
-		}
-	}
-
-	// Test delete by ID (using key at index 1)
-	deletedKeyID := listedAPIKeysAfterExpireByID[1].Id
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"apikeys",
-			"delete",
-			"--id",
-			deletedKeyID,
-		})
-	require.NoError(t, err)
-
-	var listedAPIKeysAfterDeleteByID []clientv1.ApiKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"apikeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedAPIKeysAfterDeleteByID,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for API keys list after delete by ID")
-
-	assert.Len(t, listedAPIKeysAfterDeleteByID, 3)
-
-	// Verify the specific key was deleted
-	for idx := range listedAPIKeysAfterDeleteByID {
-		assert.NotEqual(t, deletedKeyID, listedAPIKeysAfterDeleteByID[idx].Id,
-			"Deleted key should not be present in the list")
-	}
-}
-
-// TestApiKeyCommandValidation covers the validation permutations of
-// `apikeys expire` and `apikeys delete`: the mutually-exclusive --id/--prefix
-// flags (neither / both), a non-existent prefix, and an invalid --expiration on
-// create. A real key is created so the "both flags" path has a valid prefix.
-func TestApiKeyCommandValidation(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-apikeyval", []string{"user1"}, 0)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	// Create a real key so a valid prefix exists. `apikeys create` prints the
-	// raw secret, not JSON of the key, so list to discover the prefix.
-	_, err := headscale.Execute([]string{"headscale", "apikeys", "create", "--output", "json"})
-	require.NoError(t, err)
-
-	var listed []clientv1.ApiKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{"headscale", "apikeys", "list", "--output", "json"},
-			&listed,
-		)
-		assert.NoError(c, err)
-		assert.Len(c, listed, 1)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for API key list")
-
-	prefix := listed[0].Prefix
-	id := listed[0].Id
-
-	tests := []struct {
-		name    string
-		args    []string
-		wantErr string
-	}{
-		{name: "create invalid expiration", args: []string{"apikeys", "create", "--expiration", "not-a-duration"}},
-		{name: "expire neither selector", args: []string{"apikeys", "expire"}, wantErr: "either --id or --prefix must be provided"},
-		{name: "expire both selectors", args: []string{"apikeys", "expire", "--id", id, "--prefix", prefix}, wantErr: "only one of --id or --prefix can be provided"},
-		{name: "expire nonexistent prefix", args: []string{"apikeys", "expire", "--prefix", "nonexistent"}},
-		{name: "delete neither selector", args: []string{"apikeys", "delete"}, wantErr: "either --id or --prefix must be provided"},
-		{name: "delete both selectors", args: []string{"apikeys", "delete", "--id", id, "--prefix", prefix}, wantErr: "only one of --id or --prefix can be provided"},
-		{name: "delete nonexistent id", args: []string{"apikeys", "delete", "--id", "99999"}},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			_, err := headscale.Execute(append([]string{"headscale"}, tt.args...))
-			if tt.wantErr != "" {
-				require.ErrorContains(t, err, tt.wantErr)
-
-				return
-			}
-
-			require.Error(t, err)
-		})
-	}
-}
diff --git a/integration/cli_auth_test.go b/integration/cli_auth_test.go
deleted file mode 100644
index e3ea96d7e..000000000
--- a/integration/cli_auth_test.go
+++ /dev/null
@@ -1,49 +0,0 @@
-package integration
-
-import (
-	"testing"
-
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/require"
-)
-
-// TestAuthCommandValidation exercises the validation permutations of the auth
-// subcommands over the gRPC transport: `register` against a non-existent user
-// and a malformed auth-id, and `approve`/`reject` against malformed and unknown
-// auth-ids.
-//
-// approve/reject are only covered at this level: an approve carries an empty
-// verdict that does not itself register a node — the waiting client is told to
-// restart registration (hscontrol/auth.go waitForFollowup), so a driven
-// web-login would hang. Completing an interactive registration is covered by
-// `auth register` in the node tests and the web-auth flow tests.
-func TestAuthCommandValidation(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-authval", []string{"user1"}, 0)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	// Well-formed (correct prefix/length) but unknown auth-id: the handler
-	// reaches the cache lookup and reports no pending session.
-	unknown := types.MustAuthID().String()
-
-	tests := []struct {
-		name    string
-		args    []string
-		wantErr string
-	}{
-		{name: "register malformed auth-id", args: []string{"auth", "register", "--user", "user1", "--auth-id", "not-valid"}, wantErr: "invalid"},
-		{name: "register nonexistent user", args: []string{"auth", "register", "--user", "ghost", "--auth-id", unknown}, wantErr: "looking up user"},
-		{name: "approve malformed auth-id", args: []string{"auth", "approve", "--auth-id", "not-valid"}, wantErr: "invalid auth_id"},
-		{name: "approve unknown auth-id", args: []string{"auth", "approve", "--auth-id", unknown}, wantErr: "no pending auth session"},
-		{name: "reject malformed auth-id", args: []string{"auth", "reject", "--auth-id", "not-valid"}, wantErr: "invalid auth_id"},
-		{name: "reject unknown auth-id", args: []string{"auth", "reject", "--auth-id", unknown}, wantErr: "no pending auth session"},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			_, err := headscale.Execute(append([]string{"headscale"}, tt.args...))
-			require.ErrorContains(t, err, tt.wantErr)
-		})
-	}
-}
diff --git a/integration/cli_nodes_test.go b/integration/cli_nodes_test.go
deleted file mode 100644
index bbf02331f..000000000
--- a/integration/cli_nodes_test.go
+++ /dev/null
@@ -1,1242 +0,0 @@
-package integration
-
-import (
-	"fmt"
-	"strings"
-	"testing"
-	"time"
-
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/juanfont/headscale/integration/hsic"
-	"github.com/juanfont/headscale/integration/integrationutil"
-	"github.com/juanfont/headscale/integration/tsic"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-func TestNodeCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	spec := ScenarioSpec{
-		Users: []string{"node-user", "other-user"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-node"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	regIDs := []string{
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-	}
-	nodes := make([]*clientv1.Node, len(regIDs))
-
-	require.NoError(t, err)
-
-	for index, regID := range regIDs {
-		_, err := headscale.Execute(
-			[]string{
-				"headscale",
-				"debug",
-				"create-node",
-				"--name",
-				fmt.Sprintf("node-%d", index+1),
-				"--user",
-				"node-user",
-				"--key",
-				regID,
-				"--output",
-				"json",
-			},
-		)
-		require.NoError(t, err)
-
-		var node clientv1.Node
-
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			err = executeAndUnmarshal(
-				headscale,
-				[]string{
-					"headscale",
-					"auth",
-					"register",
-					"--user",
-					"node-user",
-					"--auth-id",
-					regID,
-					"--output",
-					"json",
-				},
-				&node,
-			)
-			assert.NoError(c, err)
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for node registration")
-
-		nodes[index] = &node
-	}
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		assert.Len(ct, nodes, len(regIDs), "Should have correct number of nodes after CLI operations")
-	}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second)
-
-	// Test list all nodes after added seconds
-	var listAll []clientv1.Node
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		err := executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAll,
-		)
-		assert.NoError(ct, err)
-		assert.Len(ct, listAll, len(regIDs), "Should list all nodes after CLI operations")
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	assert.Equal(t, "1", listAll[0].Id)
-	assert.Equal(t, "2", listAll[1].Id)
-	assert.Equal(t, "3", listAll[2].Id)
-	assert.Equal(t, "4", listAll[3].Id)
-	assert.Equal(t, "5", listAll[4].Id)
-
-	assert.Equal(t, "node-1", listAll[0].Name)
-	assert.Equal(t, "node-2", listAll[1].Name)
-	assert.Equal(t, "node-3", listAll[2].Name)
-	assert.Equal(t, "node-4", listAll[3].Name)
-	assert.Equal(t, "node-5", listAll[4].Name)
-
-	otherUserRegIDs := []string{
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-	}
-	otherUserMachines := make([]*clientv1.Node, len(otherUserRegIDs))
-
-	require.NoError(t, err)
-
-	for index, regID := range otherUserRegIDs {
-		_, err := headscale.Execute(
-			[]string{
-				"headscale",
-				"debug",
-				"create-node",
-				"--name",
-				fmt.Sprintf("otheruser-node-%d", index+1),
-				"--user",
-				"other-user",
-				"--key",
-				regID,
-				"--output",
-				"json",
-			},
-		)
-		require.NoError(t, err)
-
-		var node clientv1.Node
-
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			err = executeAndUnmarshal(
-				headscale,
-				[]string{
-					"headscale",
-					"auth",
-					"register",
-					"--user",
-					"other-user",
-					"--auth-id",
-					regID,
-					"--output",
-					"json",
-				},
-				&node,
-			)
-			assert.NoError(c, err)
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for other-user node registration")
-
-		otherUserMachines[index] = &node
-	}
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		assert.Len(ct, otherUserMachines, len(otherUserRegIDs), "Should have correct number of otherUser machines after CLI operations")
-	}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second)
-
-	// Test list all nodes after added otherUser
-	var listAllWithotherUser []clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAllWithotherUser,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for nodes list after adding other-user nodes")
-
-	// All nodes, nodes + otherUser
-	assert.Len(t, listAllWithotherUser, 7)
-
-	assert.Equal(t, "6", listAllWithotherUser[5].Id)
-	assert.Equal(t, "7", listAllWithotherUser[6].Id)
-
-	assert.Equal(t, "otheruser-node-1", listAllWithotherUser[5].Name)
-	assert.Equal(t, "otheruser-node-2", listAllWithotherUser[6].Name)
-
-	// Test list all nodes after added otherUser
-	var listOnlyotherUserMachineUser []clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--user",
-				"other-user",
-				"--output",
-				"json",
-			},
-			&listOnlyotherUserMachineUser,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for nodes list filtered by other-user")
-
-	assert.Len(t, listOnlyotherUserMachineUser, 2)
-
-	assert.Equal(t, "6", listOnlyotherUserMachineUser[0].Id)
-	assert.Equal(t, "7", listOnlyotherUserMachineUser[1].Id)
-
-	assert.Equal(
-		t,
-		"otheruser-node-1",
-		listOnlyotherUserMachineUser[0].Name,
-	)
-	assert.Equal(
-		t,
-		"otheruser-node-2",
-		listOnlyotherUserMachineUser[1].Name,
-	)
-
-	// Delete a nodes
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"nodes",
-			"delete",
-			"--identifier",
-			// Delete the last added machine
-			"4",
-			"--output",
-			"json",
-			"--force",
-		},
-	)
-	require.NoError(t, err)
-
-	// Test: list main user after node is deleted
-	var listOnlyMachineUserAfterDelete []clientv1.Node
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		err := executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--user",
-				"node-user",
-				"--output",
-				"json",
-			},
-			&listOnlyMachineUserAfterDelete,
-		)
-		assert.NoError(ct, err)
-		assert.Len(ct, listOnlyMachineUserAfterDelete, 4, "Should have 4 nodes for node-user after deletion")
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-}
-
-func TestNodeExpireCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	spec := ScenarioSpec{
-		Users: []string{"node-expire-user"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-nodeexpire"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	regIDs := []string{
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-	}
-	nodes := make([]*clientv1.Node, len(regIDs))
-
-	for index, regID := range regIDs {
-		_, err := headscale.Execute(
-			[]string{
-				"headscale",
-				"debug",
-				"create-node",
-				"--name",
-				fmt.Sprintf("node-%d", index+1),
-				"--user",
-				"node-expire-user",
-				"--key",
-				regID,
-				"--output",
-				"json",
-			},
-		)
-		require.NoError(t, err)
-
-		var node clientv1.Node
-
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			err = executeAndUnmarshal(
-				headscale,
-				[]string{
-					"headscale",
-					"auth",
-					"register",
-					"--user",
-					"node-expire-user",
-					"--auth-id",
-					regID,
-					"--output",
-					"json",
-				},
-				&node,
-			)
-			assert.NoError(c, err)
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for node-expire-user node registration")
-
-		nodes[index] = &node
-	}
-
-	assert.Len(t, nodes, len(regIDs))
-
-	var listAll []clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAll,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for nodes list in expire test")
-
-	assert.Len(t, listAll, 5)
-
-	// With node.expiry defaulting to 0, non-tagged nodes have zero expiry
-	// (never expire unless explicitly expired).
-	for i := range 5 {
-		assert.True(t, listAll[i].Expiry == nil || listAll[i].Expiry.IsZero(),
-			"node %d should have zero expiry (no default node.expiry)", i)
-	}
-
-	for idx := range 3 {
-		_, err := headscale.Execute(
-			[]string{
-				"headscale",
-				"nodes",
-				"expire",
-				"--identifier",
-				listAll[idx].Id,
-			},
-		)
-		require.NoError(t, err)
-	}
-
-	var listAllAfterExpiry []clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAllAfterExpiry,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for nodes list after expiry")
-
-	assert.Len(t, listAllAfterExpiry, 5)
-
-	require.NotNil(t, listAllAfterExpiry[0].Expiry)
-	require.NotNil(t, listAllAfterExpiry[1].Expiry)
-	require.NotNil(t, listAllAfterExpiry[2].Expiry)
-	assert.True(t, listAllAfterExpiry[0].Expiry.Before(time.Now()))
-	assert.True(t, listAllAfterExpiry[1].Expiry.Before(time.Now()))
-	assert.True(t, listAllAfterExpiry[2].Expiry.Before(time.Now()))
-	assert.True(t, listAllAfterExpiry[3].Expiry == nil || listAllAfterExpiry[3].Expiry.IsZero())
-	assert.True(t, listAllAfterExpiry[4].Expiry == nil || listAllAfterExpiry[4].Expiry.IsZero())
-}
-
-func TestNodeRenameCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	spec := ScenarioSpec{
-		Users: []string{"node-rename-command"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-noderename"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	regIDs := []string{
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-		types.MustAuthID().String(),
-	}
-	nodes := make([]*clientv1.Node, len(regIDs))
-
-	require.NoError(t, err)
-
-	for index, regID := range regIDs {
-		_, err := headscale.Execute(
-			[]string{
-				"headscale",
-				"debug",
-				"create-node",
-				"--name",
-				fmt.Sprintf("node-%d", index+1),
-				"--user",
-				"node-rename-command",
-				"--key",
-				regID,
-				"--output",
-				"json",
-			},
-		)
-		require.NoError(t, err)
-
-		var node clientv1.Node
-
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			err = executeAndUnmarshal(
-				headscale,
-				[]string{
-					"headscale",
-					"auth",
-					"register",
-					"--user",
-					"node-rename-command",
-					"--auth-id",
-					regID,
-					"--output",
-					"json",
-				},
-				&node,
-			)
-			assert.NoError(c, err)
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for node-rename-command node registration")
-
-		nodes[index] = &node
-	}
-
-	assert.Len(t, nodes, len(regIDs))
-
-	var listAll []clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAll,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for nodes list in rename test")
-
-	assert.Len(t, listAll, 5)
-
-	assert.Contains(t, listAll[0].GivenName, "node-1")
-	assert.Contains(t, listAll[1].GivenName, "node-2")
-	assert.Contains(t, listAll[2].GivenName, "node-3")
-	assert.Contains(t, listAll[3].GivenName, "node-4")
-	assert.Contains(t, listAll[4].GivenName, "node-5")
-
-	for idx := range 3 {
-		res, err := headscale.Execute(
-			[]string{
-				"headscale",
-				"nodes",
-				"rename",
-				"--identifier",
-				listAll[idx].Id,
-				fmt.Sprintf("newnode-%d", idx+1),
-			},
-		)
-		require.NoError(t, err)
-
-		assert.Contains(t, res, "Node renamed")
-	}
-
-	var listAllAfterRename []clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAllAfterRename,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for nodes list after rename")
-
-	assert.Len(t, listAllAfterRename, 5)
-
-	assert.Equal(t, "newnode-1", listAllAfterRename[0].GivenName)
-	assert.Equal(t, "newnode-2", listAllAfterRename[1].GivenName)
-	assert.Equal(t, "newnode-3", listAllAfterRename[2].GivenName)
-	assert.Contains(t, listAllAfterRename[3].GivenName, "node-4")
-	assert.Contains(t, listAllAfterRename[4].GivenName, "node-5")
-
-	// Test failure for too long names
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"nodes",
-			"rename",
-			"--identifier",
-			listAll[4].Id,
-			strings.Repeat("t", 64),
-		},
-	)
-	require.ErrorContains(t, err, "is too long, max length is 63 bytes")
-
-	var listAllAfterRenameAttempt []clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"nodes",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAllAfterRenameAttempt,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for nodes list after failed rename attempt")
-
-	assert.Len(t, listAllAfterRenameAttempt, 5)
-
-	assert.Equal(t, "newnode-1", listAllAfterRenameAttempt[0].GivenName)
-	assert.Equal(t, "newnode-2", listAllAfterRenameAttempt[1].GivenName)
-	assert.Equal(t, "newnode-3", listAllAfterRenameAttempt[2].GivenName)
-	assert.Contains(t, listAllAfterRenameAttempt[3].GivenName, "node-4")
-	assert.Contains(t, listAllAfterRenameAttempt[4].GivenName, "node-5")
-}
-
-func TestPreAuthKeyCorrectUserLoggedInCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	//nolint:goconst // test data, not worth extracting
-	user1 := "user1"
-	//nolint:goconst // test data, not worth extracting
-	user2 := "user2"
-
-	spec := ScenarioSpec{
-		NodesPerUser: 1,
-		Users:        []string{user1},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv(
-		[]tsic.Option{},
-		hsic.WithTestName("cli-paklogin"),
-	)
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	u2, err := headscale.CreateUser(user2)
-	require.NoError(t, err)
-
-	var user2Key clientv1.PreAuthKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"--user",
-				u2.Id,
-				"create",
-				"--reusable",
-				"--expiration",
-				"24h",
-				"--output",
-				"json",
-				"--tags",
-				"tag:test1,tag:test2",
-			},
-			&user2Key,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for user2 preauth key creation")
-
-	var listNodes []*clientv1.Node
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		var err error
-
-		listNodes, err = headscale.ListNodes()
-		assert.NoError(ct, err)
-		assert.Len(ct, listNodes, 1, "Should have exactly 1 node for user1")
-		assert.Equal(ct, user1, listNodes[0].User.Name, "Node should belong to user1")
-	}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second)
-
-	allClients, err := scenario.ListTailscaleClients()
-	requireNoErrListClients(t, err)
-
-	require.Len(t, allClients, 1)
-
-	client := allClients[0]
-
-	// Log out from user1
-	err = client.Logout()
-	require.NoError(t, err)
-
-	err = scenario.WaitForTailscaleLogout()
-	require.NoError(t, err)
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		status, err := client.Status()
-		assert.NoError(ct, err)
-		assert.NotContains(ct, []string{"Starting", "Running"}, status.BackendState,
-			"Expected node to be logged out, backend state: %s", status.BackendState)
-	}, integrationutil.StatusReadyTimeout, 2*time.Second)
-
-	err = client.Login(headscale.GetEndpoint(), user2Key.Key)
-	require.NoError(t, err)
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		status, err := client.Status()
-		assert.NoError(ct, err)
-		assert.Equal(ct, "Running", status.BackendState, "Expected node to be logged in, backend state: %s", status.BackendState)
-		// With tags-as-identity model, tagged nodes show as [types.TaggedDevices] user (2147455555)
-		// The PreAuthKey was created with tags, so the node is tagged
-		assert.Equal(ct, "userid:2147455555", status.Self.UserID.String(), "Expected node to be logged in as tagged-devices user")
-	}, integrationutil.StatusReadyTimeout, 2*time.Second)
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		var err error
-
-		listNodes, err = headscale.ListNodes()
-		assert.NoError(ct, err)
-		assert.Len(ct, listNodes, 2, "Should have 2 nodes after re-login")
-		assert.Equal(ct, user1, listNodes[0].User.Name, "First node should belong to user1")
-		// Second node is tagged (created with tagged PreAuthKey), so it shows as "tagged-devices"
-		assert.Equal(ct, "tagged-devices", listNodes[1].User.Name, "Second node should be tagged-devices")
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-}
-
-func TestTaggedNodesCLIOutput(t *testing.T) {
-	IntegrationSkip(t)
-
-	user1 := "user1"
-	user2 := "user2"
-
-	spec := ScenarioSpec{
-		NodesPerUser: 1,
-		Users:        []string{user1},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv(
-		[]tsic.Option{},
-		hsic.WithTestName("tagcli"),
-	)
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	u2, err := headscale.CreateUser(user2)
-	require.NoError(t, err)
-
-	var user2Key clientv1.PreAuthKey
-
-	// Create a tagged PreAuthKey for user2
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"--user",
-				u2.Id,
-				"create",
-				"--reusable",
-				"--expiration",
-				"24h",
-				"--output",
-				"json",
-				"--tags",
-				"tag:test1,tag:test2",
-			},
-			&user2Key,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for user2 tagged preauth key creation")
-
-	allClients, err := scenario.ListTailscaleClients()
-	requireNoErrListClients(t, err)
-
-	require.Len(t, allClients, 1)
-
-	client := allClients[0]
-
-	// Log out from user1
-	err = client.Logout()
-	require.NoError(t, err)
-
-	err = scenario.WaitForTailscaleLogout()
-	require.NoError(t, err)
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		status, err := client.Status()
-		assert.NoError(ct, err)
-		assert.NotContains(ct, []string{"Starting", "Running"}, status.BackendState,
-			"Expected node to be logged out, backend state: %s", status.BackendState)
-	}, integrationutil.StatusReadyTimeout, 2*time.Second)
-
-	// Log in with the tagged PreAuthKey (from user2, with tags)
-	err = client.Login(headscale.GetEndpoint(), user2Key.Key)
-	require.NoError(t, err)
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		status, err := client.Status()
-		assert.NoError(ct, err)
-		assert.Equal(ct, "Running", status.BackendState, "Expected node to be logged in, backend state: %s", status.BackendState)
-		// With tags-as-identity model, tagged nodes show as [types.TaggedDevices] user (2147455555)
-		assert.Equal(ct, "userid:2147455555", status.Self.UserID.String(), "Expected node to be logged in as tagged-devices user")
-	}, integrationutil.StatusReadyTimeout, 2*time.Second)
-
-	// Wait for the second node to appear
-	var listNodes []*clientv1.Node
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		var err error
-
-		listNodes, err = headscale.ListNodes()
-		assert.NoError(ct, err)
-		assert.Len(ct, listNodes, 2, "Should have 2 nodes after re-login with tagged key")
-		assert.Equal(ct, user1, listNodes[0].User.Name, "First node should belong to user1")
-		assert.Equal(ct, "tagged-devices", listNodes[1].User.Name, "Second node should be tagged-devices")
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	// Test: tailscale status output should show "tagged-devices" not "userid:2147455555"
-	// This is the fix for issue #2970 - the Tailscale client should display user-friendly names
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		stdout, stderr, err := client.Execute([]string{"tailscale", "status"})
-		assert.NoError(ct, err, "tailscale status command should succeed, stderr: %s", stderr)
-
-		t.Logf("Tailscale status output:\n%s", stdout)
-
-		// The output should contain "tagged-devices" for tagged nodes
-		assert.Contains(ct, stdout, "tagged-devices", "Tailscale status should show 'tagged-devices' for tagged nodes")
-
-		// The output should NOT show the raw numeric userid to the user
-		assert.NotContains(ct, stdout, "userid:2147455555", "Tailscale status should not show numeric userid for tagged nodes")
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-}
-
-// TestNodeExpireFlagsCommand covers the two `nodes expire` flags that the basic
-// expire test does not: --expiry (set a future expiry) and --disable (clear
-// expiry so the node never expires).
-func TestNodeExpireFlagsCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-nodeexpireflags", []string{"expire-flags-user"}, 0)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	regID := types.MustAuthID().String()
-
-	_, err := headscale.Execute([]string{
-		"headscale", "debug", "create-node",
-		"--name", "flagnode",
-		"--user", "expire-flags-user",
-		"--key", regID,
-		"--output", "json",
-	})
-	require.NoError(t, err)
-
-	var node clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{
-				"headscale", "auth", "register",
-				"--user", "expire-flags-user",
-				"--auth-id", regID,
-				"--output", "json",
-			},
-			&node,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for node registration")
-
-	nodeID := node.Id
-
-	// listNodeByID returns the node with the given id from `nodes list`. The
-	// expire mutations are verified by reading the node back (authoritative,
-	// eventually-consistent) rather than trusting the mutation's immediate
-	// response.
-	listNodeByID := func(ct *assert.CollectT) *clientv1.Node {
-		var nodes []clientv1.Node
-
-		err := executeAndUnmarshal(headscale,
-			[]string{"headscale", "nodes", "list", "--output", "json"},
-			&nodes,
-		)
-		require.NoError(ct, err)
-
-		for i := range nodes {
-			if nodes[i].Id == node.Id {
-				return &nodes[i]
-			}
-		}
-
-		assert.Fail(ct, "node not found in list", "id %s", nodeID)
-
-		return nil
-	}
-
-	// Set a future expiry, then confirm the node reports it.
-	future := time.Now().Add(2 * time.Hour).UTC()
-
-	_, err = headscale.Execute([]string{
-		"headscale", "nodes", "expire",
-		"--identifier", nodeID,
-		"--expiry", future.Format(time.RFC3339),
-		"--output", "json",
-	})
-	require.NoError(t, err)
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		n := listNodeByID(ct)
-		if n == nil {
-			return
-		}
-
-		assert.True(ct, n.Expiry != nil && !n.Expiry.IsZero(), "expiry should be set")
-		assert.True(ct, n.Expiry != nil && n.Expiry.After(time.Now()), "expiry should be in the future")
-	}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second, "Waiting for future expiry to apply")
-
-	// Disable expiry entirely; the node should then report no expiry.
-	_, err = headscale.Execute([]string{
-		"headscale", "nodes", "expire",
-		"--identifier", nodeID,
-		"--disable",
-		"--output", "json",
-	})
-	require.NoError(t, err)
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		n := listNodeByID(ct)
-		if n == nil {
-			return
-		}
-
-		// --disable clears the expiry (nil), so the node has no expiry in the
-		// future — it never expires. A nil expiry deserialises to the Unix
-		// epoch rather than the zero time, so assert "not in the future"
-		// rather than IsZero.
-		assert.False(ct, n.Expiry != nil && n.Expiry.After(time.Now()),
-			"disabled node should not have a future expiry")
-	}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second, "Waiting for --disable to clear expiry")
-}
-
-// TestNodeCommandValidation exercises the validation and error permutations of
-// the node subcommands and their flags against a single populated server: a
-// missing required --identifier, non-existent identifiers, and malformed flag
-// values (bad expiry time, bad tag, bad CIDR). One real node is registered so
-// the "valid id, bad value" paths reach the server.
-func TestNodeCommandValidation(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-nodeval", []string{"user1"}, 0)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	regID := types.MustAuthID().String()
-
-	_, err := headscale.Execute([]string{
-		"headscale", "debug", "create-node",
-		"--name", "valnode", "--user", "user1", "--key", regID, "--output", "json",
-	})
-	require.NoError(t, err)
-
-	var node clientv1.Node
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{"headscale", "auth", "register", "--user", "user1", "--auth-id", regID, "--output", "json"},
-			&node,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for node registration")
-
-	id := node.Id
-
-	// wantErr is matched with ErrorContains; an empty wantErr only requires
-	// that the command fails (used where the exact message is not load-bearing).
-	tests := []struct {
-		name    string
-		args    []string
-		wantErr string
-	}{
-		{"delete missing identifier", []string{"nodes", "delete", "--force"}, "identifier"},
-		{"delete nonexistent", []string{"nodes", "delete", "--identifier", "99999", "--force"}, "node not found"},
-		{"rename missing identifier", []string{"nodes", "rename", "newname"}, "identifier"},
-		{"rename nonexistent", []string{"nodes", "rename", "--identifier", "99999", "newname"}, ""},
-		{"rename too long", []string{"nodes", "rename", "--identifier", id, strings.Repeat("t", 64)}, "too long"},
-		{"expire missing identifier", []string{"nodes", "expire"}, "identifier"},
-		{"expire nonexistent", []string{"nodes", "expire", "--identifier", "99999"}, ""},
-		{"expire invalid time", []string{"nodes", "expire", "--identifier", id, "--expiry", "not-a-time"}, "parsing expiry"},
-		{"tag missing identifier", []string{"nodes", "tag", "--tags", "tag:x"}, "identifier"},
-		{"tag empty", []string{"nodes", "tag", "--identifier", id}, "cannot remove all tags"},
-		{"tag invalid format", []string{"nodes", "tag", "--identifier", id, "--tags", "notatag"}, "tag must start"},
-		{"tag unpermitted", []string{"nodes", "tag", "--identifier", id, "--tags", "tag:undefined"}, "invalid or not permitted"},
-		{"approve missing identifier", []string{"nodes", "approve-routes", "--routes", "10.0.0.0/24"}, "identifier"},
-		{"approve nonexistent", []string{"nodes", "approve-routes", "--identifier", "99999", "--routes", "10.0.0.0/24"}, ""},
-		{"approve invalid cidr", []string{"nodes", "approve-routes", "--identifier", id, "--routes", "notacidr"}, "parsing route"},
-		// The deprecated `nodes register` alias drives its own RegisterNode path;
-		// cover its error cases (the happy path is covered via `auth register`).
-		{"register nonexistent user", []string{"nodes", "register", "--user", "ghost", "--key", types.MustAuthID().String()}, ""},
-		{"register invalid key", []string{"nodes", "register", "--user", "user1", "--key", "badkey"}, ""},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			_, err := headscale.Execute(append([]string{"headscale"}, tt.args...))
-			if tt.wantErr == "" {
-				require.Error(t, err)
-
-				return
-			}
-
-			require.ErrorContains(t, err, tt.wantErr)
-		})
-	}
-}
-
-// TestNodeTagCommand exercises `headscale nodes tag` against a live node: it
-// sets tags (converting a user-owned node into a tagged node) and validates the
-// error paths (no tags, invalid tag format).
-func TestNodeTagCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	spec := ScenarioSpec{
-		Users:        []string{"user1"},
-		NodesPerUser: 1,
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	// tag:test1 / tag:test2 must be defined in the policy and owned by user1,
-	// otherwise the admin `nodes tag` command is rejected as "invalid or not
-	// permitted" — tags must exist in tagOwners.
-	policy := &policyv2.Policy{
-		ACLs: []policyv2.ACL{
-			{
-				Action:   "accept",
-				Protocol: "tcp",
-				Sources:  []policyv2.Alias{wildcard()},
-				Destinations: []policyv2.AliasWithPorts{
-					aliasWithPorts(wildcard(), tailcfg.PortRangeAny),
-				},
-			},
-		},
-		TagOwners: policyv2.TagOwners{
-			policyv2.Tag("tag:test1"): policyv2.Owners{usernameOwner("user1@")},
-			policyv2.Tag("tag:test2"): policyv2.Owners{usernameOwner("user1@")},
-		},
-	}
-
-	err = scenario.CreateHeadscaleEnv(
-		[]tsic.Option{},
-		hsic.WithTestName("cli-nodetag"),
-		hsic.WithACLPolicy(policy),
-	)
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	require.NoError(t, scenario.WaitForTailscaleSync())
-
-	var nodeID string
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		nodes, err := headscale.ListNodes()
-		assert.NoError(ct, err)
-		assert.Len(ct, nodes, 1)
-
-		if len(nodes) == 1 {
-			nodeID = nodes[0].Id
-			assert.Equal(ct, "user1", nodes[0].User.Name, "node should start user-owned")
-		}
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	idStr := nodeID
-
-	// Set two tags. The command response is round-tripped (transport check);
-	// the resulting tag state is asserted via the authoritative list read-back
-	// below rather than the immediate mutation response.
-	tagged := assertJSONRoundtrip[*clientv1.Node](t, headscale, []string{
-		"headscale", "nodes", "tag",
-		"--identifier", idStr,
-		"--tags", "tag:test1,tag:test2",
-		"--output", "json",
-	})
-	assert.Equal(t, nodeID, tagged.Id, "tag response should be for the same node")
-
-	// The node is now a tagged node, presented as the tagged-devices user.
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		nodes, err := headscale.ListNodes()
-		assert.NoError(ct, err)
-		assert.Len(ct, nodes, 1)
-
-		if len(nodes) == 1 {
-			assert.Equal(ct, "tagged-devices", nodes[0].User.Name, "tagged node shows as tagged-devices")
-			assert.ElementsMatch(ct, []string{"tag:test1", "tag:test2"}, nodes[0].Tags)
-		}
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	// Error: tagged nodes must keep at least one tag, so an empty tag set is
-	// rejected.
-	_, err = headscale.Execute([]string{
-		"headscale", "nodes", "tag",
-		"--identifier", idStr,
-	})
-	require.ErrorContains(t, err, "cannot remove all tags")
-
-	// Error: malformed tag (missing the "tag:" prefix).
-	_, err = headscale.Execute([]string{
-		"headscale", "nodes", "tag",
-		"--identifier", idStr,
-		"--tags", "not-a-valid-tag",
-	})
-	require.Error(t, err, "an invalid tag format must be rejected")
-}
-
-// TestNodeRouteCommands exercises `nodes approve-routes` and `nodes list-routes`
-// end-to-end against a client that advertises a subnet route.
-func TestNodeRouteCommands(t *testing.T) {
-	IntegrationSkip(t)
-
-	spec := ScenarioSpec{
-		Users:        []string{"user1"},
-		NodesPerUser: 1,
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv(
-		[]tsic.Option{tsic.WithAcceptRoutes()},
-		hsic.WithTestName("cli-noderoutes"),
-	)
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	allClients, err := scenario.ListTailscaleClients()
-	requireNoErrListClients(t, err)
-	require.Len(t, allClients, 1)
-
-	require.NoError(t, scenario.WaitForTailscaleSync())
-
-	const route = "10.33.0.0/24"
-
-	// Advertise a subnet route from the client.
-	_, _, err = allClients[0].Execute([]string{"tailscale", "set", "--advertise-routes=" + route})
-	require.NoError(t, err)
-
-	require.NoError(t, scenario.WaitForTailscaleSync())
-
-	// The advertised route should show up as available (but not approved).
-	var nodeID string
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		var nodes []clientv1.Node
-
-		err := executeAndUnmarshal(headscale,
-			[]string{"headscale", "nodes", "list-routes", "--output", "json"},
-			&nodes,
-		)
-		assert.NoError(ct, err)
-		assert.Len(ct, nodes, 1, "list-routes should show the route-advertising node")
-
-		if len(nodes) == 1 {
-			nodeID = nodes[0].Id
-			assert.Contains(ct, nodes[0].AvailableRoutes, route)
-			assert.Empty(ct, nodes[0].ApprovedRoutes)
-		}
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	idStr := nodeID
-
-	// Approve the route via the CLI.
-	approved := assertJSONRoundtrip[*clientv1.Node](t, headscale, []string{
-		"headscale", "nodes", "approve-routes",
-		"--identifier", idStr,
-		"--routes=" + route,
-		"--output", "json",
-	})
-	assert.Contains(t, approved.ApprovedRoutes, route)
-
-	// list-routes filtered by the identifier should report the approved route
-	// as a primary subnet route.
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		var nodes []clientv1.Node
-
-		err := executeAndUnmarshal(headscale,
-			[]string{"headscale", "nodes", "list-routes", "--identifier", idStr, "--output", "json"},
-			&nodes,
-		)
-		assert.NoError(ct, err)
-		assert.Len(ct, nodes, 1)
-
-		if len(nodes) == 1 {
-			assert.Contains(ct, nodes[0].ApprovedRoutes, route)
-			assert.Contains(ct, nodes[0].SubnetRoutes, route)
-		}
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	// Remove all approved routes by passing an empty --routes value.
-	cleared := assertJSONRoundtrip[*clientv1.Node](t, headscale, []string{
-		"headscale", "nodes", "approve-routes",
-		"--identifier", idStr,
-		"--routes=",
-		"--output", "json",
-	})
-	assert.Empty(t, cleared.ApprovedRoutes, "approved routes should be cleared")
-}
-
-// TestNodeBackfillIPsCommand exercises `nodes backfillips` against live nodes.
-// With both IPv4 and IPv6 prefixes configured (the integration default) the
-// command is a no-op for IP assignment, but it must still run cleanly and the
-// nodes must retain their addresses.
-func TestNodeBackfillIPsCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-backfillips", []string{"user1"}, 2)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	require.NoError(t, scenario.WaitForTailscaleSync())
-
-	var before []*clientv1.Node
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		var err error
-
-		before, err = headscale.ListNodes()
-		assert.NoError(ct, err)
-		assert.Len(ct, before, 2)
-
-		for _, n := range before {
-			assert.NotEmpty(ct, n.IpAddresses, "node should have IPs before backfill")
-		}
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	out, err := headscale.Execute([]string{"headscale", "nodes", "backfillips", "--force"})
-	require.NoError(t, err)
-	assert.Contains(t, out, "backfilled")
-
-	// Nodes must still have their IP addresses afterwards.
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		after, err := headscale.ListNodes()
-		assert.NoError(ct, err)
-		assert.Len(ct, after, 2)
-
-		for _, n := range after {
-			assert.NotEmpty(ct, n.IpAddresses, "node should still have IPs after backfill")
-		}
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-}
diff --git a/integration/cli_oauth_clients_test.go b/integration/cli_oauth_clients_test.go
deleted file mode 100644
index 8c6a11d63..000000000
--- a/integration/cli_oauth_clients_test.go
+++ /dev/null
@@ -1,126 +0,0 @@
-package integration
-
-import (
-	"encoding/json"
-	"testing"
-	"time"
-
-	"github.com/juanfont/headscale/integration/hsic"
-	"github.com/juanfont/headscale/integration/integrationutil"
-	"github.com/juanfont/headscale/integration/tsic"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// cliOAuthClient is the JSON the `oauth-clients` commands emit (the v2 Key shape,
-// only the fields the test asserts on).
-type cliOAuthClient struct {
-	ID          string   `json:"id"`
-	Key         string   `json:"key"`
-	KeyType     string   `json:"keyType"`
-	Scopes      []string `json:"scopes"`
-	Tags        []string `json:"tags"`
-	Description string   `json:"description"`
-}
-
-// TestOAuthClientCommand exercises the `headscale oauth-clients` CLI end to end:
-// create (with scopes and tags) -> list (secret hidden) -> delete. The CLI talks
-// to the v2 keys handler over the local unix socket, so this also proves the v2
-// API is reachable over the socket with local trust.
-func TestOAuthClientCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, err := NewScenario(ScenarioSpec{Users: []string{}})
-	require.NoError(t, err)
-
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-oauthclient"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	// Create an OAuth client with scopes and a tag. devices:core/auth_keys
-	// require a tag, which is supplied.
-	createOut, err := headscale.Execute([]string{
-		"headscale", "oauth-clients", "create",
-		"--scope", "auth_keys",
-		"--scope", "devices:core",
-		"--tag", "tag:k8s-operator",
-		"--description", "operator",
-		"--output", "json",
-	})
-	require.NoError(t, err)
-
-	var created cliOAuthClient
-	require.NoError(t, json.Unmarshal([]byte(createOut), &created))
-	assert.Equal(t, "client", created.KeyType)
-	assert.NotEmpty(t, created.ID, "client id returned")
-	assert.NotEmpty(t, created.Key, "secret returned once on create")
-	assert.ElementsMatch(t, []string{"auth_keys", "devices:core"}, created.Scopes)
-	assert.Equal(t, []string{"tag:k8s-operator"}, created.Tags)
-
-	// List shows the client without its secret.
-	var listed []cliOAuthClient
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{"headscale", "oauth-clients", "list", "--output", "json"}, &listed)
-		assert.NoError(c, err)
-		assert.Len(c, listed, 1)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "waiting for oauth client list")
-
-	assert.Equal(t, created.ID, listed[0].ID)
-	assert.Empty(t, listed[0].Key, "secret is never exposed on list")
-	assert.ElementsMatch(t, []string{"auth_keys", "devices:core"}, listed[0].Scopes)
-	assert.Equal(t, "operator", listed[0].Description)
-
-	// Delete it.
-	_, err = headscale.Execute([]string{"headscale", "oauth-clients", "delete", "--id", created.ID})
-	require.NoError(t, err)
-
-	var afterDelete []cliOAuthClient
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{"headscale", "oauth-clients", "list", "--output", "json"}, &afterDelete)
-		assert.NoError(c, err)
-		assert.Empty(c, afterDelete)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "waiting for oauth client list after delete")
-}
-
-// TestOAuthClientCommandValidation covers the CLI's input validation and the
-// server's 404 on deleting an unknown client.
-func TestOAuthClientCommandValidation(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, err := NewScenario(ScenarioSpec{Users: []string{}})
-	require.NoError(t, err)
-
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-oauthclientval"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	tests := []struct {
-		name    string
-		args    []string
-		wantErr string
-	}{
-		{name: "no scope", args: []string{"oauth-clients", "create"}, wantErr: "at least one --scope is required"},
-		{name: "devices:core needs tag", args: []string{"oauth-clients", "create", "--scope", "devices:core"}, wantErr: "tags are required"},
-		{name: "delete no id", args: []string{"oauth-clients", "delete"}, wantErr: "--id is required"},
-		{name: "delete nonexistent id", args: []string{"oauth-clients", "delete", "--id", "doesnotexist"}, wantErr: "404"},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			_, err := headscale.Execute(append([]string{"headscale"}, tt.args...))
-			require.ErrorContains(t, err, tt.wantErr)
-		})
-	}
-}
diff --git a/integration/cli_policy_test.go b/integration/cli_policy_test.go
index 20e003ed3..5a3d6a743 100644
--- a/integration/cli_policy_test.go
+++ b/integration/cli_policy_test.go
@@ -3,14 +3,11 @@ package integration
 import (
 	"encoding/json"
 	"testing"
-	"time"
 
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/integration/hsic"
-	"github.com/juanfont/headscale/integration/integrationutil"
 	"github.com/juanfont/headscale/integration/tsic"
-	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 	"tailscale.com/tailcfg"
 )
@@ -152,7 +149,7 @@ func TestPolicyCheckCommand(t *testing.T) {
 				// --force suppresses the "is the server running?"
 				// confirmation prompt so the command can run
 				// non-interactively under the test harness.
-				cmd = append(cmd, "--bypass-server-and-access-database-directly", "--force")
+				cmd = append(cmd, "--bypass-grpc-and-access-database-directly", "--force")
 			}
 
 			stdout, err := headscale.Execute(cmd)
@@ -169,10 +166,16 @@ func TestPolicyCheckCommand(t *testing.T) {
 	}
 }
 
-// TestSSHTestsRejectFailingPolicy asserts `headscale policy set` rejects
-// a policy whose sshTests fail, surfaces the engine's "test(s) failed"
-// sentinel, and leaves the stored policy unchanged. autogroup:member as
-// dst lets every scenario node count, so no tagged node is needed.
+// TestSSHTestsRejectFailingPolicy asserts that `headscale policy set`
+// rejects a policy whose sshTests evaluate to a failure, surfaces the
+// engine's "test(s) failed" sentinel on stderr, and leaves the previously
+// stored policy untouched. The good policy admits user1@ → autogroup:member
+// as root; the bad policy reuses the same SSH rule but asserts user2@ can
+// SSH, which the rule denies. autogroup:member is used as the dst so the
+// test does not need a separately-tagged node: every scenario node is a
+// member, so dst resolution finds real nodes to evaluate against. SaaS
+// returns the same literal "test(s) failed" body for both ACL tests and
+// SSH tests; headscale matches that surface.
 func TestSSHTestsRejectFailingPolicy(t *testing.T) {
 	IntegrationSkip(t)
 
@@ -181,7 +184,9 @@ func TestSSHTestsRejectFailingPolicy(t *testing.T) {
 		user2 = "user2@"
 	)
 
-	// Good policy: user1@ may SSH as root, and the sshTests asserts it.
+	// Good policy: SSH rule and sshTests agree — user1@ may SSH as root
+	// to any autogroup:member node, and the sshTests entry asserts exactly
+	// that.
 	goodPolicy := policyv2.Policy{
 		SSHs: []policyv2.SSH{
 			{
@@ -202,8 +207,11 @@ func TestSSHTestsRejectFailingPolicy(t *testing.T) {
 		},
 	}
 
-	// Bad policy: same SSH rule, but the sshTests asserts user2@ — who
-	// the rule does not admit — can SSH. Must be rejected.
+	// Bad policy: same SSH rule, but the sshTests block asserts that
+	// user2@ can SSH as root to autogroup:member. The rule only admits
+	// user1@, so the assertion must fail and the write must be rejected.
+	// SSHTests is a slice (reference type), so reassigning the field
+	// rather than mutating in place preserves goodPolicy.SSHTests.
 	badPolicy := goodPolicy
 	badPolicy.SSHTests = []policyv2.SSHPolicyTest{
 		{
@@ -264,8 +272,8 @@ func TestSSHTestsRejectFailingPolicy(t *testing.T) {
 		"server should report the good policy after the initial set")
 
 	// Attempt to overwrite with a policy whose sshTests fail. The CLI
-	// must surface the engine's "test(s) failed" sentinel and exit
-	// non-zero.
+	// must surface the engine's "test(s) failed" sentinel (SaaS uses the
+	// same body for ACL tests and SSH tests) and exit non-zero.
 	_, err = headscale.Execute([]string{
 		"headscale", "policy", "set", "-f", badPath,
 	})
@@ -281,164 +289,3 @@ func TestSSHTestsRejectFailingPolicy(t *testing.T) {
 	require.JSONEq(t, string(goodBytes), stdoutAfter,
 		"stored policy must be unchanged after a rejected set")
 }
-
-func TestPolicyCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	spec := ScenarioSpec{
-		Users: []string{"user1"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv(
-		[]tsic.Option{},
-		hsic.WithTestName("cli-policy"),
-		hsic.WithConfigEnv(map[string]string{
-			"HEADSCALE_POLICY_MODE": "database", // test sets/gets policy via CLI
-		}),
-	)
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	p := policyv2.Policy{
-		ACLs: []policyv2.ACL{
-			{
-				Action:   "accept",
-				Protocol: "tcp",
-				Sources:  []policyv2.Alias{wildcard()},
-				Destinations: []policyv2.AliasWithPorts{
-					aliasWithPorts(wildcard(), tailcfg.PortRangeAny),
-				},
-			},
-		},
-		TagOwners: policyv2.TagOwners{
-			policyv2.Tag("tag:exists"): policyv2.Owners{usernameOwner("user1@")},
-		},
-	}
-
-	pBytes, _ := json.Marshal(p) //nolint:errchkjson
-
-	policyFilePath := "/etc/headscale/policy.json"
-
-	err = headscale.WriteFile(policyFilePath, pBytes)
-	require.NoError(t, err)
-
-	// No policy is present at this time.
-	// Add a new policy from a file.
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"policy",
-			"set",
-			"-f",
-			policyFilePath,
-		},
-	)
-
-	require.NoError(t, err)
-
-	// Get the current policy and check
-	// if it is the same as the one we set.
-	var output *policyv2.Policy
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"policy",
-				"get",
-				"--output",
-				"json",
-			},
-			&output,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for policy get command")
-
-	assert.Len(t, output.TagOwners, 1)
-	assert.Len(t, output.ACLs, 1)
-}
-
-func TestPolicyBrokenConfigCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	spec := ScenarioSpec{
-		NodesPerUser: 1,
-		Users:        []string{"user1"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv(
-		[]tsic.Option{},
-		hsic.WithTestName("cli-policybad"),
-		hsic.WithConfigEnv(map[string]string{
-			"HEADSCALE_POLICY_MODE": "database", // test sets invalid policy via CLI
-		}),
-	)
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	p := policyv2.Policy{
-		ACLs: []policyv2.ACL{
-			{
-				// This is an unknown action, so it will return an error
-				// and the config will not be applied.
-				Action:   "unknown-action",
-				Protocol: "tcp",
-				Sources:  []policyv2.Alias{wildcard()},
-				Destinations: []policyv2.AliasWithPorts{
-					aliasWithPorts(wildcard(), tailcfg.PortRangeAny),
-				},
-			},
-		},
-		TagOwners: policyv2.TagOwners{
-			policyv2.Tag("tag:exists"): policyv2.Owners{usernameOwner("user1@")},
-		},
-	}
-
-	pBytes, _ := json.Marshal(p) //nolint:errchkjson
-
-	policyFilePath := "/etc/headscale/policy.json"
-
-	err = headscale.WriteFile(policyFilePath, pBytes)
-	require.NoError(t, err)
-
-	// No policy is present at this time.
-	// Add a new policy from a file.
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"policy",
-			"set",
-			"-f",
-			policyFilePath,
-		},
-	)
-	require.ErrorContains(t, err, `action="unknown-action" is not supported: invalid ACL action`)
-
-	// The new policy was invalid, the old one should still be in place, which
-	// is none.
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"policy",
-			"get",
-			"--output",
-			"json",
-		},
-	)
-	assert.ErrorContains(t, err, "acl policy not found")
-}
diff --git a/integration/cli_preauthkeys_test.go b/integration/cli_preauthkeys_test.go
deleted file mode 100644
index 75f76edad..000000000
--- a/integration/cli_preauthkeys_test.go
+++ /dev/null
@@ -1,396 +0,0 @@
-package integration
-
-import (
-	"testing"
-	"time"
-
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	"github.com/juanfont/headscale/integration/hsic"
-	"github.com/juanfont/headscale/integration/integrationutil"
-	"github.com/juanfont/headscale/integration/tsic"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-func TestPreAuthKeyCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	user := "preauthkeyspace"
-	count := 3
-
-	spec := ScenarioSpec{
-		Users: []string{user},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("clipak"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	keys := make([]*clientv1.PreAuthKey, count)
-
-	require.NoError(t, err)
-
-	for index := range count {
-		var preAuthKey clientv1.PreAuthKey
-
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			err := executeAndUnmarshal(
-				headscale,
-				[]string{
-					"headscale",
-					"preauthkeys",
-					"--user",
-					"1",
-					"create",
-					"--reusable",
-					"--expiration",
-					"24h",
-					"--output",
-					"json",
-					"--tags",
-					"tag:test1,tag:test2",
-				},
-				&preAuthKey,
-			)
-			assert.NoError(c, err)
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for preauth key creation")
-
-		keys[index] = &preAuthKey
-	}
-
-	assert.Len(t, keys, 3)
-
-	var listedPreAuthKeys []clientv1.PreAuthKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedPreAuthKeys,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for preauth keys list")
-
-	// There is one key created by [Scenario.CreateHeadscaleEnv]
-	assert.Len(t, listedPreAuthKeys, 4)
-
-	assert.Equal(
-		t,
-		[]string{keys[0].Id, keys[1].Id, keys[2].Id},
-		[]string{
-			listedPreAuthKeys[1].Id,
-			listedPreAuthKeys[2].Id,
-			listedPreAuthKeys[3].Id,
-		},
-	)
-
-	// New keys show prefix after listing, so check the created keys instead
-	assert.NotEmpty(t, keys[0].Key)
-	assert.NotEmpty(t, keys[1].Key)
-	assert.NotEmpty(t, keys[2].Key)
-
-	assert.True(t, listedPreAuthKeys[1].Expiration.After(time.Now()))
-	assert.True(t, listedPreAuthKeys[2].Expiration.After(time.Now()))
-	assert.True(t, listedPreAuthKeys[3].Expiration.After(time.Now()))
-
-	assert.True(
-		t,
-		listedPreAuthKeys[1].Expiration.Before(time.Now().Add(time.Hour*26)),
-	)
-	assert.True(
-		t,
-		listedPreAuthKeys[2].Expiration.Before(time.Now().Add(time.Hour*26)),
-	)
-	assert.True(
-		t,
-		listedPreAuthKeys[3].Expiration.Before(time.Now().Add(time.Hour*26)),
-	)
-
-	for index := range listedPreAuthKeys {
-		if index == 0 {
-			continue
-		}
-
-		assert.Equal(
-			t,
-			[]string{"tag:test1", "tag:test2"},
-			listedPreAuthKeys[index].AclTags,
-		)
-	}
-
-	// Test key expiry
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"preauthkeys",
-			"expire",
-			"--id",
-			keys[0].Id,
-		},
-	)
-	require.NoError(t, err)
-
-	var listedPreAuthKeysAfterExpire []clientv1.PreAuthKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedPreAuthKeysAfterExpire,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for preauth keys list after expire")
-
-	assert.True(t, listedPreAuthKeysAfterExpire[1].Expiration.Before(time.Now()))
-	assert.True(t, listedPreAuthKeysAfterExpire[2].Expiration.After(time.Now()))
-	assert.True(t, listedPreAuthKeysAfterExpire[3].Expiration.After(time.Now()))
-}
-
-func TestPreAuthKeyCommandWithoutExpiry(t *testing.T) {
-	IntegrationSkip(t)
-
-	user := "pre-auth-key-without-exp-user"
-	spec := ScenarioSpec{
-		Users: []string{user},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("clipaknaexp"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	var preAuthKey clientv1.PreAuthKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"--user",
-				"1",
-				"create",
-				"--reusable",
-				"--output",
-				"json",
-			},
-			&preAuthKey,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for preauth key creation without expiry")
-
-	var listedPreAuthKeys []clientv1.PreAuthKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedPreAuthKeys,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for preauth keys list")
-
-	// There is one key created by [Scenario.CreateHeadscaleEnv]
-	assert.Len(t, listedPreAuthKeys, 2)
-
-	assert.True(t, listedPreAuthKeys[1].Expiration.After(time.Now()))
-	assert.True(
-		t,
-		listedPreAuthKeys[1].Expiration.Before(time.Now().Add(time.Minute*70)),
-	)
-}
-
-func TestPreAuthKeyCommandReusableEphemeral(t *testing.T) {
-	IntegrationSkip(t)
-
-	user := "pre-auth-key-reus-ephm-user"
-	spec := ScenarioSpec{
-		Users: []string{user},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("clipakresueeph"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	var preAuthReusableKey clientv1.PreAuthKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"--user",
-				"1",
-				"create",
-				"--reusable=true",
-				"--output",
-				"json",
-			},
-			&preAuthReusableKey,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for reusable preauth key creation")
-
-	var preAuthEphemeralKey clientv1.PreAuthKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"--user",
-				"1",
-				"create",
-				"--ephemeral=true",
-				"--output",
-				"json",
-			},
-			&preAuthEphemeralKey,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for ephemeral preauth key creation")
-
-	assert.True(t, preAuthEphemeralKey.Ephemeral)
-	assert.False(t, preAuthEphemeralKey.Reusable)
-
-	var listedPreAuthKeys []clientv1.PreAuthKey
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(
-			headscale,
-			[]string{
-				"headscale",
-				"preauthkeys",
-				"list",
-				"--output",
-				"json",
-			},
-			&listedPreAuthKeys,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for preauth keys list after reusable/ephemeral creation")
-
-	// There is one key created by [Scenario.CreateHeadscaleEnv]
-	assert.Len(t, listedPreAuthKeys, 3)
-}
-
-// TestPreAuthKeyDeleteCommand covers `preauthkeys delete --id` (the only
-// pre-auth-key subcommand not otherwise exercised) plus its missing-flag
-// validation.
-func TestPreAuthKeyDeleteCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-pakdelete", []string{"user1"}, 0)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	// Create a key to delete.
-	created := assertJSONRoundtrip[*clientv1.PreAuthKey](t, headscale, []string{
-		"headscale",
-		"preauthkeys",
-		"--user", "1",
-		"create",
-		"--reusable",
-		"--output", "json",
-	})
-	require.NotEmpty(t, created.Id)
-
-	// delete with no --id must be rejected.
-	_, err := headscale.Execute([]string{"headscale", "preauthkeys", "delete"})
-	require.ErrorContains(t, err, "missing --id parameter")
-
-	// delete the created key by id.
-	_, err = headscale.Execute([]string{
-		"headscale", "preauthkeys", "delete",
-		"--id", created.Id,
-	})
-	require.NoError(t, err)
-
-	// The deleted key must be gone from the list.
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		var listed []clientv1.PreAuthKey
-
-		err := executeAndUnmarshal(headscale,
-			[]string{"headscale", "preauthkeys", "list", "--output", "json"},
-			&listed,
-		)
-		assert.NoError(c, err)
-
-		for i := range listed {
-			assert.NotEqual(c, created.Id, listed[i].Id, "deleted key should not be listed")
-		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for preauth key list after delete")
-}
-
-// TestPreAuthKeyCommandValidation covers the validation permutations of the
-// pre-auth-key subcommands: create with a malformed tag or a non-existent user,
-// the required --id on expire/delete, and deleting a non-existent key.
-func TestPreAuthKeyCommandValidation(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-pakval", []string{"user1"}, 0)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	tests := []struct {
-		name    string
-		args    []string
-		wantErr string
-	}{
-		{name: "create malformed tag", args: []string{"preauthkeys", "--user", "1", "create", "--tags", "notatag", "--output", "json"}},
-		{name: "create nonexistent user", args: []string{"preauthkeys", "--user", "99999", "create", "--output", "json"}},
-		{name: "expire missing id", args: []string{"preauthkeys", "expire"}, wantErr: "missing --id parameter"},
-		{name: "delete missing id", args: []string{"preauthkeys", "delete"}, wantErr: "missing --id parameter"},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			_, err := headscale.Execute(append([]string{"headscale"}, tt.args...))
-			if tt.wantErr != "" {
-				require.ErrorContains(t, err, tt.wantErr)
-
-				return
-			}
-
-			require.Error(t, err)
-		})
-	}
-}
diff --git a/integration/cli_server_test.go b/integration/cli_server_test.go
deleted file mode 100644
index bab44896f..000000000
--- a/integration/cli_server_test.go
+++ /dev/null
@@ -1,47 +0,0 @@
-package integration
-
-import (
-	"testing"
-
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	"github.com/juanfont/headscale/hscontrol/types"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// TestServerInfoCommands covers the standalone server/info commands that do not
-// fit the resource CRUD groups: `health`, `version` and
-// `generate private-key`. They are exercised against a populated server (one
-// user with a node) so `health` reports a real, connected database.
-func TestServerInfoCommands(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-serverinfo", []string{"user1"}, 1)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	t.Run("health", func(t *testing.T) {
-		health := assertJSONRoundtrip[*clientv1.HealthResponseBody](t, headscale, []string{
-			"headscale", "health", "--output", "json",
-		})
-		assert.True(t, health.DatabaseConnectivity, "database should be reachable")
-	})
-
-	t.Run("version", func(t *testing.T) {
-		info := assertJSONRoundtrip[types.VersionInfo](t, headscale, []string{
-			"headscale", "version", "--output", "json",
-		})
-		assert.NotEmpty(t, info.Version, "version string should be populated")
-		assert.NotEmpty(t, info.Go.Version, "go version should be populated")
-	})
-
-	t.Run("generate-private-key", func(t *testing.T) {
-		key := assertJSONRoundtrip[map[string]string](t, headscale, []string{
-			"headscale", "generate", "private-key", "--output", "json",
-		})
-
-		priv, ok := key["private_key"]
-		require.True(t, ok, "output should contain a private_key field")
-		assert.NotEmpty(t, priv, "generated private key should not be empty")
-		assert.Contains(t, priv, "privkey:", "machine private key should carry the privkey: prefix")
-	})
-}
diff --git a/integration/cli_test.go b/integration/cli_test.go
index aa047e120..7ee002717 100644
--- a/integration/cli_test.go
+++ b/integration/cli_test.go
@@ -4,25 +4,25 @@ import (
 	"cmp"
 	"encoding/json"
 	"fmt"
+	"slices"
+	"strconv"
+	"strings"
 	"testing"
+	"time"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	tcmp "github.com/google/go-cmp/cmp"
+	"github.com/google/go-cmp/cmp/cmpopts"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
+	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
+	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/integration/hsic"
+	"github.com/juanfont/headscale/integration/integrationutil"
 	"github.com/juanfont/headscale/integration/tsic"
+	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"tailscale.com/tailcfg"
 )
 
-// This file holds the shared helpers used by the per-command CLI integration
-// test files (cli_users_test.go, cli_nodes_test.go, cli_apikeys_test.go,
-// cli_preauthkeys_test.go, cli_auth_test.go, cli_server_test.go and
-// cli_policy_test.go). The tests themselves live in those files, grouped by
-// the command they exercise.
-//
-// The whole point of the CLI test suite is to guard the transport: every
-// command is invoked with `--output json` and the result is unmarshalled into
-// the matching HTTP-client Go type, so a change to the API handlers,
-// schema definitions or output encoders that breaks a command is caught here.
-
 func executeAndUnmarshal[T any](headscale ControlServer, command []string, result T) error {
 	str, err := headscale.Execute(command)
 	if err != nil {
@@ -37,61 +37,1744 @@ func executeAndUnmarshal[T any](headscale ControlServer, command []string, resul
 	return nil
 }
 
-// assertJSONRoundtrip executes command (which must include `--output json`),
-// decodes the stdout into T, then marshals T back to JSON and re-decodes it,
-// asserting the serialisation is stable. This is the transport contract guard:
-// if the underlying type drifts in a way that loses data, the round-trip
-// breaks. The decoded value is returned so callers can assert on real fields.
-func assertJSONRoundtrip[T any](t require.TestingT, headscale ControlServer, command []string) T {
-	var first T
-
-	err := executeAndUnmarshal(headscale, command, &first)
-	require.NoError(t, err, "decoding CLI json output")
-
-	firstBytes, err := json.Marshal(first)
-	require.NoError(t, err, "re-marshalling decoded value")
-
-	var second T
-
-	require.NoError(t, json.Unmarshal(firstBytes, &second), "re-decoding marshalled value")
-
-	secondBytes, err := json.Marshal(second)
-	require.NoError(t, err, "re-marshalling round-tripped value")
-
-	require.JSONEq(t, string(firstBytes), string(secondBytes), "json round-trip should be stable")
-
-	return second
+// Interface ensuring that we can sort structs from gRPC that
+// have an ID field.
+type GRPCSortable interface {
+	GetId() uint64
 }
 
-// sortWithID orders users by their numeric ID. The HTTP client emits IDs as
-// decimal strings, so they are parsed back to integers to preserve numeric
-// (not lexicographic) ordering.
-func sortWithID(a, b *clientv1.User) int {
-	return cmp.Compare(mustParseID(a.Id), mustParseID(b.Id))
+func sortWithID[T GRPCSortable](a, b T) int {
+	return cmp.Compare(a.GetId(), b.GetId())
 }
 
-// setupCLIScenario boots a scenario with the given users and nodes-per-user,
-// creates the headscale environment and returns the running scenario and its
-// control server. It removes the repeated NewScenario/CreateHeadscaleEnv/
-// Headscale boilerplate shared by the CLI tests. Callers still defer
-// scenario.ShutdownAssertNoPanics(t) themselves so the cleanup is visible at
-// the call site.
-func setupCLIScenario(t *testing.T, testName string, users []string, nodesPerUser int) (*Scenario, ControlServer) {
-	t.Helper()
+func TestUserCommand(t *testing.T) {
+	IntegrationSkip(t)
 
 	spec := ScenarioSpec{
-		Users:        users,
-		NodesPerUser: nodesPerUser,
+		Users: []string{"user1", "user2"},
 	}
 
 	scenario, err := NewScenario(spec)
-	require.NoError(t, err)
 
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName(testName))
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-user"))
 	require.NoError(t, err)
 
 	headscale, err := scenario.Headscale()
 	require.NoError(t, err)
 
-	return scenario, headscale
+	var (
+		listUsers []*v1.User
+		result    []string
+	)
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		err := executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"users",
+				"list",
+				"--output",
+				"json",
+			},
+			&listUsers,
+		)
+		assert.NoError(ct, err)
+
+		slices.SortFunc(listUsers, sortWithID)
+		result = []string{listUsers[0].GetName(), listUsers[1].GetName()}
+
+		assert.Equal(
+			ct,
+			[]string{"user1", "user2"},
+			result,
+			"Should have user1 and user2 in users list",
+		)
+	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
+
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"users",
+			"rename",
+			"--output=json",
+			fmt.Sprintf("--identifier=%d", listUsers[1].GetId()),
+			"--new-name=newname",
+		},
+	)
+	require.NoError(t, err)
+
+	var listAfterRenameUsers []*v1.User
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		err := executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"users",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAfterRenameUsers,
+		)
+		assert.NoError(ct, err)
+
+		slices.SortFunc(listAfterRenameUsers, sortWithID)
+		result = []string{listAfterRenameUsers[0].GetName(), listAfterRenameUsers[1].GetName()}
+
+		assert.Equal(
+			ct,
+			[]string{"user1", "newname"},
+			result,
+			"Should have user1 and newname after rename operation",
+		)
+	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
+
+	var listByUsername []*v1.User
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"users",
+				"list",
+				"--output",
+				"json",
+				"--name=user1",
+			},
+			&listByUsername,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for user list by username")
+
+	slices.SortFunc(listByUsername, sortWithID)
+
+	want := []*v1.User{
+		{
+			Id:    1,
+			Name:  "user1",
+			Email: "user1@test.no",
+		},
+	}
+
+	if diff := tcmp.Diff(want, listByUsername, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
+		t.Errorf("unexpected users (-want +got):\n%s", diff)
+	}
+
+	var listByID []*v1.User
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"users",
+				"list",
+				"--output",
+				"json",
+				"--identifier=1",
+			},
+			&listByID,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for user list by ID")
+
+	slices.SortFunc(listByID, sortWithID)
+
+	want = []*v1.User{
+		{
+			Id:    1,
+			Name:  "user1",
+			Email: "user1@test.no",
+		},
+	}
+
+	if diff := tcmp.Diff(want, listByID, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
+		t.Errorf("unexpected users (-want +got):\n%s", diff)
+	}
+
+	deleteResult, err := headscale.Execute(
+		[]string{
+			"headscale",
+			"users",
+			"destroy",
+			"--force",
+			// Delete "user1"
+			"--identifier=1",
+		},
+	)
+	require.NoError(t, err)
+	assert.Contains(t, deleteResult, "User destroyed")
+
+	var listAfterIDDelete []*v1.User
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		err := executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"users",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAfterIDDelete,
+		)
+		assert.NoError(ct, err)
+
+		slices.SortFunc(listAfterIDDelete, sortWithID)
+
+		want := []*v1.User{
+			{
+				Id:    2,
+				Name:  "newname",
+				Email: "user2@test.no",
+			},
+		}
+
+		if diff := tcmp.Diff(want, listAfterIDDelete, cmpopts.IgnoreUnexported(v1.User{}), cmpopts.IgnoreFields(v1.User{}, "CreatedAt")); diff != "" {
+			assert.Fail(ct, "unexpected users", "diff (-want +got):\n%s", diff)
+		}
+	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
+
+	deleteResult, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"users",
+			"destroy",
+			"--force",
+			"--name=newname",
+		},
+	)
+	require.NoError(t, err)
+	assert.Contains(t, deleteResult, "User destroyed")
+
+	var listAfterNameDelete []v1.User
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"users",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAfterNameDelete,
+		)
+		assert.NoError(c, err)
+		assert.Empty(c, listAfterNameDelete)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for user list after name delete")
+}
+
+func TestPreAuthKeyCommand(t *testing.T) {
+	IntegrationSkip(t)
+
+	user := "preauthkeyspace"
+	count := 3
+
+	spec := ScenarioSpec{
+		Users: []string{user},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("clipak"))
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	keys := make([]*v1.PreAuthKey, count)
+
+	require.NoError(t, err)
+
+	for index := range count {
+		var preAuthKey v1.PreAuthKey
+
+		assert.EventuallyWithT(t, func(c *assert.CollectT) {
+			err := executeAndUnmarshal(
+				headscale,
+				[]string{
+					"headscale",
+					"preauthkeys",
+					"--user",
+					"1",
+					"create",
+					"--reusable",
+					"--expiration",
+					"24h",
+					"--output",
+					"json",
+					"--tags",
+					"tag:test1,tag:test2",
+				},
+				&preAuthKey,
+			)
+			assert.NoError(c, err)
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for preauth key creation")
+
+		keys[index] = &preAuthKey
+	}
+
+	assert.Len(t, keys, 3)
+
+	var listedPreAuthKeys []v1.PreAuthKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedPreAuthKeys,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for preauth keys list")
+
+	// There is one key created by "scenario.CreateHeadscaleEnv"
+	assert.Len(t, listedPreAuthKeys, 4)
+
+	assert.Equal(
+		t,
+		[]uint64{keys[0].GetId(), keys[1].GetId(), keys[2].GetId()},
+		[]uint64{
+			listedPreAuthKeys[1].GetId(),
+			listedPreAuthKeys[2].GetId(),
+			listedPreAuthKeys[3].GetId(),
+		},
+	)
+
+	// New keys show prefix after listing, so check the created keys instead
+	assert.NotEmpty(t, keys[0].GetKey())
+	assert.NotEmpty(t, keys[1].GetKey())
+	assert.NotEmpty(t, keys[2].GetKey())
+
+	assert.True(t, listedPreAuthKeys[1].GetExpiration().AsTime().After(time.Now()))
+	assert.True(t, listedPreAuthKeys[2].GetExpiration().AsTime().After(time.Now()))
+	assert.True(t, listedPreAuthKeys[3].GetExpiration().AsTime().After(time.Now()))
+
+	assert.True(
+		t,
+		listedPreAuthKeys[1].GetExpiration().AsTime().Before(time.Now().Add(time.Hour*26)),
+	)
+	assert.True(
+		t,
+		listedPreAuthKeys[2].GetExpiration().AsTime().Before(time.Now().Add(time.Hour*26)),
+	)
+	assert.True(
+		t,
+		listedPreAuthKeys[3].GetExpiration().AsTime().Before(time.Now().Add(time.Hour*26)),
+	)
+
+	for index := range listedPreAuthKeys {
+		if index == 0 {
+			continue
+		}
+
+		assert.Equal(
+			t,
+			[]string{"tag:test1", "tag:test2"},
+			listedPreAuthKeys[index].GetAclTags(),
+		)
+	}
+
+	// Test key expiry
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"preauthkeys",
+			"expire",
+			"--id",
+			strconv.FormatUint(keys[0].GetId(), 10),
+		},
+	)
+	require.NoError(t, err)
+
+	var listedPreAuthKeysAfterExpire []v1.PreAuthKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedPreAuthKeysAfterExpire,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for preauth keys list after expire")
+
+	assert.True(t, listedPreAuthKeysAfterExpire[1].GetExpiration().AsTime().Before(time.Now()))
+	assert.True(t, listedPreAuthKeysAfterExpire[2].GetExpiration().AsTime().After(time.Now()))
+	assert.True(t, listedPreAuthKeysAfterExpire[3].GetExpiration().AsTime().After(time.Now()))
+}
+
+func TestPreAuthKeyCommandWithoutExpiry(t *testing.T) {
+	IntegrationSkip(t)
+
+	user := "pre-auth-key-without-exp-user"
+	spec := ScenarioSpec{
+		Users: []string{user},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("clipaknaexp"))
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	var preAuthKey v1.PreAuthKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"--user",
+				"1",
+				"create",
+				"--reusable",
+				"--output",
+				"json",
+			},
+			&preAuthKey,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for preauth key creation without expiry")
+
+	var listedPreAuthKeys []v1.PreAuthKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedPreAuthKeys,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for preauth keys list")
+
+	// There is one key created by "scenario.CreateHeadscaleEnv"
+	assert.Len(t, listedPreAuthKeys, 2)
+
+	assert.True(t, listedPreAuthKeys[1].GetExpiration().AsTime().After(time.Now()))
+	assert.True(
+		t,
+		listedPreAuthKeys[1].GetExpiration().AsTime().Before(time.Now().Add(time.Minute*70)),
+	)
+}
+
+func TestPreAuthKeyCommandReusableEphemeral(t *testing.T) {
+	IntegrationSkip(t)
+
+	user := "pre-auth-key-reus-ephm-user"
+	spec := ScenarioSpec{
+		Users: []string{user},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("clipakresueeph"))
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	var preAuthReusableKey v1.PreAuthKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"--user",
+				"1",
+				"create",
+				"--reusable=true",
+				"--output",
+				"json",
+			},
+			&preAuthReusableKey,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for reusable preauth key creation")
+
+	var preAuthEphemeralKey v1.PreAuthKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"--user",
+				"1",
+				"create",
+				"--ephemeral=true",
+				"--output",
+				"json",
+			},
+			&preAuthEphemeralKey,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for ephemeral preauth key creation")
+
+	assert.True(t, preAuthEphemeralKey.GetEphemeral())
+	assert.False(t, preAuthEphemeralKey.GetReusable())
+
+	var listedPreAuthKeys []v1.PreAuthKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedPreAuthKeys,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for preauth keys list after reusable/ephemeral creation")
+
+	// There is one key created by "scenario.CreateHeadscaleEnv"
+	assert.Len(t, listedPreAuthKeys, 3)
+}
+
+func TestPreAuthKeyCorrectUserLoggedInCommand(t *testing.T) {
+	IntegrationSkip(t)
+
+	//nolint:goconst // test data, not worth extracting
+	user1 := "user1"
+	//nolint:goconst // test data, not worth extracting
+	user2 := "user2"
+
+	spec := ScenarioSpec{
+		NodesPerUser: 1,
+		Users:        []string{user1},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv(
+		[]tsic.Option{},
+		hsic.WithTestName("cli-paklogin"),
+	)
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	u2, err := headscale.CreateUser(user2)
+	require.NoError(t, err)
+
+	var user2Key v1.PreAuthKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"--user",
+				strconv.FormatUint(u2.GetId(), 10),
+				"create",
+				"--reusable",
+				"--expiration",
+				"24h",
+				"--output",
+				"json",
+				"--tags",
+				"tag:test1,tag:test2",
+			},
+			&user2Key,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for user2 preauth key creation")
+
+	var listNodes []*v1.Node
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		var err error
+
+		listNodes, err = headscale.ListNodes()
+		assert.NoError(ct, err)
+		assert.Len(ct, listNodes, 1, "Should have exactly 1 node for user1")
+		assert.Equal(ct, user1, listNodes[0].GetUser().GetName(), "Node should belong to user1")
+	}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second)
+
+	allClients, err := scenario.ListTailscaleClients()
+	requireNoErrListClients(t, err)
+
+	require.Len(t, allClients, 1)
+
+	client := allClients[0]
+
+	// Log out from user1
+	err = client.Logout()
+	require.NoError(t, err)
+
+	err = scenario.WaitForTailscaleLogout()
+	require.NoError(t, err)
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		status, err := client.Status()
+		assert.NoError(ct, err)
+		assert.NotContains(ct, []string{"Starting", "Running"}, status.BackendState,
+			"Expected node to be logged out, backend state: %s", status.BackendState)
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
+
+	err = client.Login(headscale.GetEndpoint(), user2Key.GetKey())
+	require.NoError(t, err)
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		status, err := client.Status()
+		assert.NoError(ct, err)
+		assert.Equal(ct, "Running", status.BackendState, "Expected node to be logged in, backend state: %s", status.BackendState)
+		// With tags-as-identity model, tagged nodes show as TaggedDevices user (2147455555)
+		// The PreAuthKey was created with tags, so the node is tagged
+		assert.Equal(ct, "userid:2147455555", status.Self.UserID.String(), "Expected node to be logged in as tagged-devices user")
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		var err error
+
+		listNodes, err = headscale.ListNodes()
+		assert.NoError(ct, err)
+		assert.Len(ct, listNodes, 2, "Should have 2 nodes after re-login")
+		assert.Equal(ct, user1, listNodes[0].GetUser().GetName(), "First node should belong to user1")
+		// Second node is tagged (created with tagged PreAuthKey), so it shows as "tagged-devices"
+		assert.Equal(ct, "tagged-devices", listNodes[1].GetUser().GetName(), "Second node should be tagged-devices")
+	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
+}
+
+func TestTaggedNodesCLIOutput(t *testing.T) {
+	IntegrationSkip(t)
+
+	user1 := "user1"
+	user2 := "user2"
+
+	spec := ScenarioSpec{
+		NodesPerUser: 1,
+		Users:        []string{user1},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv(
+		[]tsic.Option{},
+		hsic.WithTestName("tagcli"),
+	)
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	u2, err := headscale.CreateUser(user2)
+	require.NoError(t, err)
+
+	var user2Key v1.PreAuthKey
+
+	// Create a tagged PreAuthKey for user2
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"preauthkeys",
+				"--user",
+				strconv.FormatUint(u2.GetId(), 10),
+				"create",
+				"--reusable",
+				"--expiration",
+				"24h",
+				"--output",
+				"json",
+				"--tags",
+				"tag:test1,tag:test2",
+			},
+			&user2Key,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for user2 tagged preauth key creation")
+
+	allClients, err := scenario.ListTailscaleClients()
+	requireNoErrListClients(t, err)
+
+	require.Len(t, allClients, 1)
+
+	client := allClients[0]
+
+	// Log out from user1
+	err = client.Logout()
+	require.NoError(t, err)
+
+	err = scenario.WaitForTailscaleLogout()
+	require.NoError(t, err)
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		status, err := client.Status()
+		assert.NoError(ct, err)
+		assert.NotContains(ct, []string{"Starting", "Running"}, status.BackendState,
+			"Expected node to be logged out, backend state: %s", status.BackendState)
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
+
+	// Log in with the tagged PreAuthKey (from user2, with tags)
+	err = client.Login(headscale.GetEndpoint(), user2Key.GetKey())
+	require.NoError(t, err)
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		status, err := client.Status()
+		assert.NoError(ct, err)
+		assert.Equal(ct, "Running", status.BackendState, "Expected node to be logged in, backend state: %s", status.BackendState)
+		// With tags-as-identity model, tagged nodes show as TaggedDevices user (2147455555)
+		assert.Equal(ct, "userid:2147455555", status.Self.UserID.String(), "Expected node to be logged in as tagged-devices user")
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
+
+	// Wait for the second node to appear
+	var listNodes []*v1.Node
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		var err error
+
+		listNodes, err = headscale.ListNodes()
+		assert.NoError(ct, err)
+		assert.Len(ct, listNodes, 2, "Should have 2 nodes after re-login with tagged key")
+		assert.Equal(ct, user1, listNodes[0].GetUser().GetName(), "First node should belong to user1")
+		assert.Equal(ct, "tagged-devices", listNodes[1].GetUser().GetName(), "Second node should be tagged-devices")
+	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
+
+	// Test: tailscale status output should show "tagged-devices" not "userid:2147455555"
+	// This is the fix for issue #2970 - the Tailscale client should display user-friendly names
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		stdout, stderr, err := client.Execute([]string{"tailscale", "status"})
+		assert.NoError(ct, err, "tailscale status command should succeed, stderr: %s", stderr)
+
+		t.Logf("Tailscale status output:\n%s", stdout)
+
+		// The output should contain "tagged-devices" for tagged nodes
+		assert.Contains(ct, stdout, "tagged-devices", "Tailscale status should show 'tagged-devices' for tagged nodes")
+
+		// The output should NOT show the raw numeric userid to the user
+		assert.NotContains(ct, stdout, "userid:2147455555", "Tailscale status should not show numeric userid for tagged nodes")
+	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
+}
+
+func TestApiKeyCommand(t *testing.T) {
+	IntegrationSkip(t)
+
+	count := 5
+
+	spec := ScenarioSpec{
+		Users: []string{"user1", "user2"},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-apikey"))
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	keys := make([]string, count)
+
+	for idx := range count {
+		apiResult, err := headscale.Execute(
+			[]string{
+				"headscale",
+				"apikeys",
+				"create",
+				"--expiration",
+				"24h",
+				"--output",
+				"json",
+			},
+		)
+		require.NoError(t, err)
+		assert.NotEmpty(t, apiResult)
+
+		keys[idx] = apiResult
+	}
+
+	assert.Len(t, keys, 5)
+
+	var listedAPIKeys []v1.ApiKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"apikeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedAPIKeys,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for API keys list")
+
+	assert.Len(t, listedAPIKeys, 5)
+
+	assert.Equal(t, uint64(1), listedAPIKeys[0].GetId())
+	assert.Equal(t, uint64(2), listedAPIKeys[1].GetId())
+	assert.Equal(t, uint64(3), listedAPIKeys[2].GetId())
+	assert.Equal(t, uint64(4), listedAPIKeys[3].GetId())
+	assert.Equal(t, uint64(5), listedAPIKeys[4].GetId())
+
+	assert.NotEmpty(t, listedAPIKeys[0].GetPrefix())
+	assert.NotEmpty(t, listedAPIKeys[1].GetPrefix())
+	assert.NotEmpty(t, listedAPIKeys[2].GetPrefix())
+	assert.NotEmpty(t, listedAPIKeys[3].GetPrefix())
+	assert.NotEmpty(t, listedAPIKeys[4].GetPrefix())
+
+	assert.True(t, listedAPIKeys[0].GetExpiration().AsTime().After(time.Now()))
+	assert.True(t, listedAPIKeys[1].GetExpiration().AsTime().After(time.Now()))
+	assert.True(t, listedAPIKeys[2].GetExpiration().AsTime().After(time.Now()))
+	assert.True(t, listedAPIKeys[3].GetExpiration().AsTime().After(time.Now()))
+	assert.True(t, listedAPIKeys[4].GetExpiration().AsTime().After(time.Now()))
+
+	assert.True(
+		t,
+		listedAPIKeys[0].GetExpiration().AsTime().Before(time.Now().Add(time.Hour*26)),
+	)
+	assert.True(
+		t,
+		listedAPIKeys[1].GetExpiration().AsTime().Before(time.Now().Add(time.Hour*26)),
+	)
+	assert.True(
+		t,
+		listedAPIKeys[2].GetExpiration().AsTime().Before(time.Now().Add(time.Hour*26)),
+	)
+	assert.True(
+		t,
+		listedAPIKeys[3].GetExpiration().AsTime().Before(time.Now().Add(time.Hour*26)),
+	)
+	assert.True(
+		t,
+		listedAPIKeys[4].GetExpiration().AsTime().Before(time.Now().Add(time.Hour*26)),
+	)
+
+	expiredPrefixes := make(map[string]bool)
+
+	// Expire three keys
+	for idx := range 3 {
+		_, err := headscale.Execute(
+			[]string{
+				"headscale",
+				"apikeys",
+				"expire",
+				"--prefix",
+				listedAPIKeys[idx].GetPrefix(),
+			},
+		)
+		require.NoError(t, err)
+
+		expiredPrefixes[listedAPIKeys[idx].GetPrefix()] = true
+	}
+
+	var listedAfterExpireAPIKeys []v1.ApiKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"apikeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedAfterExpireAPIKeys,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for API keys list after expire")
+
+	for index := range listedAfterExpireAPIKeys {
+		if _, ok := expiredPrefixes[listedAfterExpireAPIKeys[index].GetPrefix()]; ok {
+			// Expired
+			assert.True(
+				t,
+				listedAfterExpireAPIKeys[index].GetExpiration().AsTime().Before(time.Now()),
+			)
+		} else {
+			// Not expired
+			assert.False(
+				t,
+				listedAfterExpireAPIKeys[index].GetExpiration().AsTime().Before(time.Now()),
+			)
+		}
+	}
+
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"apikeys",
+			"delete",
+			"--prefix",
+			listedAPIKeys[0].GetPrefix(),
+		})
+	require.NoError(t, err)
+
+	var listedAPIKeysAfterDelete []v1.ApiKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"apikeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedAPIKeysAfterDelete,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for API keys list after delete")
+
+	assert.Len(t, listedAPIKeysAfterDelete, 4)
+
+	// Test expire by ID (using key at index 0)
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"apikeys",
+			"expire",
+			"--id",
+			strconv.FormatUint(listedAPIKeysAfterDelete[0].GetId(), 10),
+		})
+	require.NoError(t, err)
+
+	var listedAPIKeysAfterExpireByID []v1.ApiKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"apikeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedAPIKeysAfterExpireByID,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for API keys list after expire by ID")
+
+	// Verify the key was expired
+	for idx := range listedAPIKeysAfterExpireByID {
+		if listedAPIKeysAfterExpireByID[idx].GetId() == listedAPIKeysAfterDelete[0].GetId() {
+			assert.True(t, listedAPIKeysAfterExpireByID[idx].GetExpiration().AsTime().Before(time.Now()),
+				"Key expired by ID should have expiration in the past")
+		}
+	}
+
+	// Test delete by ID (using key at index 1)
+	deletedKeyID := listedAPIKeysAfterExpireByID[1].GetId()
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"apikeys",
+			"delete",
+			"--id",
+			strconv.FormatUint(deletedKeyID, 10),
+		})
+	require.NoError(t, err)
+
+	var listedAPIKeysAfterDeleteByID []v1.ApiKey
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(headscale,
+			[]string{
+				"headscale",
+				"apikeys",
+				"list",
+				"--output",
+				"json",
+			},
+			&listedAPIKeysAfterDeleteByID,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for API keys list after delete by ID")
+
+	assert.Len(t, listedAPIKeysAfterDeleteByID, 3)
+
+	// Verify the specific key was deleted
+	for idx := range listedAPIKeysAfterDeleteByID {
+		assert.NotEqual(t, deletedKeyID, listedAPIKeysAfterDeleteByID[idx].GetId(),
+			"Deleted key should not be present in the list")
+	}
+}
+
+func TestNodeCommand(t *testing.T) {
+	IntegrationSkip(t)
+
+	spec := ScenarioSpec{
+		Users: []string{"node-user", "other-user"},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-node"))
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	regIDs := []string{
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+	}
+	nodes := make([]*v1.Node, len(regIDs))
+
+	require.NoError(t, err)
+
+	for index, regID := range regIDs {
+		_, err := headscale.Execute(
+			[]string{
+				"headscale",
+				"debug",
+				"create-node",
+				"--name",
+				fmt.Sprintf("node-%d", index+1),
+				"--user",
+				"node-user",
+				"--key",
+				regID,
+				"--output",
+				"json",
+			},
+		)
+		require.NoError(t, err)
+
+		var node v1.Node
+
+		assert.EventuallyWithT(t, func(c *assert.CollectT) {
+			err = executeAndUnmarshal(
+				headscale,
+				[]string{
+					"headscale",
+					"auth",
+					"register",
+					"--user",
+					"node-user",
+					"--auth-id",
+					regID,
+					"--output",
+					"json",
+				},
+				&node,
+			)
+			assert.NoError(c, err)
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for node registration")
+
+		nodes[index] = &node
+	}
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		assert.Len(ct, nodes, len(regIDs), "Should have correct number of nodes after CLI operations")
+	}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second)
+
+	// Test list all nodes after added seconds
+	var listAll []v1.Node
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		err := executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAll,
+		)
+		assert.NoError(ct, err)
+		assert.Len(ct, listAll, len(regIDs), "Should list all nodes after CLI operations")
+	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
+
+	assert.Equal(t, uint64(1), listAll[0].GetId())
+	assert.Equal(t, uint64(2), listAll[1].GetId())
+	assert.Equal(t, uint64(3), listAll[2].GetId())
+	assert.Equal(t, uint64(4), listAll[3].GetId())
+	assert.Equal(t, uint64(5), listAll[4].GetId())
+
+	assert.Equal(t, "node-1", listAll[0].GetName())
+	assert.Equal(t, "node-2", listAll[1].GetName())
+	assert.Equal(t, "node-3", listAll[2].GetName())
+	assert.Equal(t, "node-4", listAll[3].GetName())
+	assert.Equal(t, "node-5", listAll[4].GetName())
+
+	otherUserRegIDs := []string{
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+	}
+	otherUserMachines := make([]*v1.Node, len(otherUserRegIDs))
+
+	require.NoError(t, err)
+
+	for index, regID := range otherUserRegIDs {
+		_, err := headscale.Execute(
+			[]string{
+				"headscale",
+				"debug",
+				"create-node",
+				"--name",
+				fmt.Sprintf("otheruser-node-%d", index+1),
+				"--user",
+				"other-user",
+				"--key",
+				regID,
+				"--output",
+				"json",
+			},
+		)
+		require.NoError(t, err)
+
+		var node v1.Node
+
+		assert.EventuallyWithT(t, func(c *assert.CollectT) {
+			err = executeAndUnmarshal(
+				headscale,
+				[]string{
+					"headscale",
+					"auth",
+					"register",
+					"--user",
+					"other-user",
+					"--auth-id",
+					regID,
+					"--output",
+					"json",
+				},
+				&node,
+			)
+			assert.NoError(c, err)
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for other-user node registration")
+
+		otherUserMachines[index] = &node
+	}
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		assert.Len(ct, otherUserMachines, len(otherUserRegIDs), "Should have correct number of otherUser machines after CLI operations")
+	}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second)
+
+	// Test list all nodes after added otherUser
+	var listAllWithotherUser []v1.Node
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAllWithotherUser,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for nodes list after adding other-user nodes")
+
+	// All nodes, nodes + otherUser
+	assert.Len(t, listAllWithotherUser, 7)
+
+	assert.Equal(t, uint64(6), listAllWithotherUser[5].GetId())
+	assert.Equal(t, uint64(7), listAllWithotherUser[6].GetId())
+
+	assert.Equal(t, "otheruser-node-1", listAllWithotherUser[5].GetName())
+	assert.Equal(t, "otheruser-node-2", listAllWithotherUser[6].GetName())
+
+	// Test list all nodes after added otherUser
+	var listOnlyotherUserMachineUser []v1.Node
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--user",
+				"other-user",
+				"--output",
+				"json",
+			},
+			&listOnlyotherUserMachineUser,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for nodes list filtered by other-user")
+
+	assert.Len(t, listOnlyotherUserMachineUser, 2)
+
+	assert.Equal(t, uint64(6), listOnlyotherUserMachineUser[0].GetId())
+	assert.Equal(t, uint64(7), listOnlyotherUserMachineUser[1].GetId())
+
+	assert.Equal(
+		t,
+		"otheruser-node-1",
+		listOnlyotherUserMachineUser[0].GetName(),
+	)
+	assert.Equal(
+		t,
+		"otheruser-node-2",
+		listOnlyotherUserMachineUser[1].GetName(),
+	)
+
+	// Delete a nodes
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"nodes",
+			"delete",
+			"--identifier",
+			// Delete the last added machine
+			"4",
+			"--output",
+			"json",
+			"--force",
+		},
+	)
+	require.NoError(t, err)
+
+	// Test: list main user after node is deleted
+	var listOnlyMachineUserAfterDelete []v1.Node
+
+	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
+		err := executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--user",
+				"node-user",
+				"--output",
+				"json",
+			},
+			&listOnlyMachineUserAfterDelete,
+		)
+		assert.NoError(ct, err)
+		assert.Len(ct, listOnlyMachineUserAfterDelete, 4, "Should have 4 nodes for node-user after deletion")
+	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
+}
+
+func TestNodeExpireCommand(t *testing.T) {
+	IntegrationSkip(t)
+
+	spec := ScenarioSpec{
+		Users: []string{"node-expire-user"},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-nodeexpire"))
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	regIDs := []string{
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+	}
+	nodes := make([]*v1.Node, len(regIDs))
+
+	for index, regID := range regIDs {
+		_, err := headscale.Execute(
+			[]string{
+				"headscale",
+				"debug",
+				"create-node",
+				"--name",
+				fmt.Sprintf("node-%d", index+1),
+				"--user",
+				"node-expire-user",
+				"--key",
+				regID,
+				"--output",
+				"json",
+			},
+		)
+		require.NoError(t, err)
+
+		var node v1.Node
+
+		assert.EventuallyWithT(t, func(c *assert.CollectT) {
+			err = executeAndUnmarshal(
+				headscale,
+				[]string{
+					"headscale",
+					"auth",
+					"register",
+					"--user",
+					"node-expire-user",
+					"--auth-id",
+					regID,
+					"--output",
+					"json",
+				},
+				&node,
+			)
+			assert.NoError(c, err)
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for node-expire-user node registration")
+
+		nodes[index] = &node
+	}
+
+	assert.Len(t, nodes, len(regIDs))
+
+	var listAll []v1.Node
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAll,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for nodes list in expire test")
+
+	assert.Len(t, listAll, 5)
+
+	// With node.expiry defaulting to 0, non-tagged nodes have zero expiry
+	// (never expire unless explicitly expired).
+	for i := range 5 {
+		assert.True(t, listAll[i].GetExpiry().AsTime().IsZero(),
+			"node %d should have zero expiry (no default node.expiry)", i)
+	}
+
+	for idx := range 3 {
+		_, err := headscale.Execute(
+			[]string{
+				"headscale",
+				"nodes",
+				"expire",
+				"--identifier",
+				strconv.FormatUint(listAll[idx].GetId(), 10),
+			},
+		)
+		require.NoError(t, err)
+	}
+
+	var listAllAfterExpiry []v1.Node
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAllAfterExpiry,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for nodes list after expiry")
+
+	assert.Len(t, listAllAfterExpiry, 5)
+
+	assert.True(t, listAllAfterExpiry[0].GetExpiry().AsTime().Before(time.Now()))
+	assert.True(t, listAllAfterExpiry[1].GetExpiry().AsTime().Before(time.Now()))
+	assert.True(t, listAllAfterExpiry[2].GetExpiry().AsTime().Before(time.Now()))
+	assert.True(t, listAllAfterExpiry[3].GetExpiry().AsTime().IsZero())
+	assert.True(t, listAllAfterExpiry[4].GetExpiry().AsTime().IsZero())
+}
+
+func TestNodeRenameCommand(t *testing.T) {
+	IntegrationSkip(t)
+
+	spec := ScenarioSpec{
+		Users: []string{"node-rename-command"},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-noderename"))
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	regIDs := []string{
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+		types.MustAuthID().String(),
+	}
+	nodes := make([]*v1.Node, len(regIDs))
+
+	require.NoError(t, err)
+
+	for index, regID := range regIDs {
+		_, err := headscale.Execute(
+			[]string{
+				"headscale",
+				"debug",
+				"create-node",
+				"--name",
+				fmt.Sprintf("node-%d", index+1),
+				"--user",
+				"node-rename-command",
+				"--key",
+				regID,
+				"--output",
+				"json",
+			},
+		)
+		require.NoError(t, err)
+
+		var node v1.Node
+
+		assert.EventuallyWithT(t, func(c *assert.CollectT) {
+			err = executeAndUnmarshal(
+				headscale,
+				[]string{
+					"headscale",
+					"auth",
+					"register",
+					"--user",
+					"node-rename-command",
+					"--auth-id",
+					regID,
+					"--output",
+					"json",
+				},
+				&node,
+			)
+			assert.NoError(c, err)
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for node-rename-command node registration")
+
+		nodes[index] = &node
+	}
+
+	assert.Len(t, nodes, len(regIDs))
+
+	var listAll []v1.Node
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAll,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for nodes list in rename test")
+
+	assert.Len(t, listAll, 5)
+
+	assert.Contains(t, listAll[0].GetGivenName(), "node-1")
+	assert.Contains(t, listAll[1].GetGivenName(), "node-2")
+	assert.Contains(t, listAll[2].GetGivenName(), "node-3")
+	assert.Contains(t, listAll[3].GetGivenName(), "node-4")
+	assert.Contains(t, listAll[4].GetGivenName(), "node-5")
+
+	for idx := range 3 {
+		res, err := headscale.Execute(
+			[]string{
+				"headscale",
+				"nodes",
+				"rename",
+				"--identifier",
+				strconv.FormatUint(listAll[idx].GetId(), 10),
+				fmt.Sprintf("newnode-%d", idx+1),
+			},
+		)
+		require.NoError(t, err)
+
+		assert.Contains(t, res, "Node renamed")
+	}
+
+	var listAllAfterRename []v1.Node
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAllAfterRename,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for nodes list after rename")
+
+	assert.Len(t, listAllAfterRename, 5)
+
+	assert.Equal(t, "newnode-1", listAllAfterRename[0].GetGivenName())
+	assert.Equal(t, "newnode-2", listAllAfterRename[1].GetGivenName())
+	assert.Equal(t, "newnode-3", listAllAfterRename[2].GetGivenName())
+	assert.Contains(t, listAllAfterRename[3].GetGivenName(), "node-4")
+	assert.Contains(t, listAllAfterRename[4].GetGivenName(), "node-5")
+
+	// Test failure for too long names
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"nodes",
+			"rename",
+			"--identifier",
+			strconv.FormatUint(listAll[4].GetId(), 10),
+			strings.Repeat("t", 64),
+		},
+	)
+	require.ErrorContains(t, err, "is too long, max length is 63 bytes")
+
+	var listAllAfterRenameAttempt []v1.Node
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"nodes",
+				"list",
+				"--output",
+				"json",
+			},
+			&listAllAfterRenameAttempt,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for nodes list after failed rename attempt")
+
+	assert.Len(t, listAllAfterRenameAttempt, 5)
+
+	assert.Equal(t, "newnode-1", listAllAfterRenameAttempt[0].GetGivenName())
+	assert.Equal(t, "newnode-2", listAllAfterRenameAttempt[1].GetGivenName())
+	assert.Equal(t, "newnode-3", listAllAfterRenameAttempt[2].GetGivenName())
+	assert.Contains(t, listAllAfterRenameAttempt[3].GetGivenName(), "node-4")
+	assert.Contains(t, listAllAfterRenameAttempt[4].GetGivenName(), "node-5")
+}
+
+func TestPolicyCommand(t *testing.T) {
+	IntegrationSkip(t)
+
+	spec := ScenarioSpec{
+		Users: []string{"user1"},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv(
+		[]tsic.Option{},
+		hsic.WithTestName("cli-policy"),
+		hsic.WithConfigEnv(map[string]string{
+			"HEADSCALE_POLICY_MODE": "database", // test sets/gets policy via CLI
+		}),
+	)
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	p := policyv2.Policy{
+		ACLs: []policyv2.ACL{
+			{
+				Action:   "accept",
+				Protocol: "tcp",
+				Sources:  []policyv2.Alias{wildcard()},
+				Destinations: []policyv2.AliasWithPorts{
+					aliasWithPorts(wildcard(), tailcfg.PortRangeAny),
+				},
+			},
+		},
+		TagOwners: policyv2.TagOwners{
+			policyv2.Tag("tag:exists"): policyv2.Owners{usernameOwner("user1@")},
+		},
+	}
+
+	pBytes, _ := json.Marshal(p) //nolint:errchkjson
+
+	policyFilePath := "/etc/headscale/policy.json"
+
+	err = headscale.WriteFile(policyFilePath, pBytes)
+	require.NoError(t, err)
+
+	// No policy is present at this time.
+	// Add a new policy from a file.
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"policy",
+			"set",
+			"-f",
+			policyFilePath,
+		},
+	)
+
+	require.NoError(t, err)
+
+	// Get the current policy and check
+	// if it is the same as the one we set.
+	var output *policyv2.Policy
+
+	assert.EventuallyWithT(t, func(c *assert.CollectT) {
+		err = executeAndUnmarshal(
+			headscale,
+			[]string{
+				"headscale",
+				"policy",
+				"get",
+				"--output",
+				"json",
+			},
+			&output,
+		)
+		assert.NoError(c, err)
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for policy get command")
+
+	assert.Len(t, output.TagOwners, 1)
+	assert.Len(t, output.ACLs, 1)
+}
+
+func TestPolicyBrokenConfigCommand(t *testing.T) {
+	IntegrationSkip(t)
+
+	spec := ScenarioSpec{
+		NodesPerUser: 1,
+		Users:        []string{"user1"},
+	}
+
+	scenario, err := NewScenario(spec)
+
+	require.NoError(t, err)
+	defer scenario.ShutdownAssertNoPanics(t)
+
+	err = scenario.CreateHeadscaleEnv(
+		[]tsic.Option{},
+		hsic.WithTestName("cli-policybad"),
+		hsic.WithConfigEnv(map[string]string{
+			"HEADSCALE_POLICY_MODE": "database", // test sets invalid policy via CLI
+		}),
+	)
+	require.NoError(t, err)
+
+	headscale, err := scenario.Headscale()
+	require.NoError(t, err)
+
+	p := policyv2.Policy{
+		ACLs: []policyv2.ACL{
+			{
+				// This is an unknown action, so it will return an error
+				// and the config will not be applied.
+				Action:   "unknown-action",
+				Protocol: "tcp",
+				Sources:  []policyv2.Alias{wildcard()},
+				Destinations: []policyv2.AliasWithPorts{
+					aliasWithPorts(wildcard(), tailcfg.PortRangeAny),
+				},
+			},
+		},
+		TagOwners: policyv2.TagOwners{
+			policyv2.Tag("tag:exists"): policyv2.Owners{usernameOwner("user1@")},
+		},
+	}
+
+	pBytes, _ := json.Marshal(p) //nolint:errchkjson
+
+	policyFilePath := "/etc/headscale/policy.json"
+
+	err = headscale.WriteFile(policyFilePath, pBytes)
+	require.NoError(t, err)
+
+	// No policy is present at this time.
+	// Add a new policy from a file.
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"policy",
+			"set",
+			"-f",
+			policyFilePath,
+		},
+	)
+	require.ErrorContains(t, err, `action="unknown-action" is not supported: invalid ACL action`)
+
+	// The new policy was invalid, the old one should still be in place, which
+	// is none.
+	_, err = headscale.Execute(
+		[]string{
+			"headscale",
+			"policy",
+			"get",
+			"--output",
+			"json",
+		},
+	)
+	assert.ErrorContains(t, err, "acl policy not found")
 }
diff --git a/integration/cli_users_test.go b/integration/cli_users_test.go
deleted file mode 100644
index 7441f431a..000000000
--- a/integration/cli_users_test.go
+++ /dev/null
@@ -1,338 +0,0 @@
-package integration
-
-import (
-	"encoding/json"
-	"slices"
-	"testing"
-	"time"
-
-	tcmp "github.com/google/go-cmp/cmp"
-	"github.com/google/go-cmp/cmp/cmpopts"
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	"github.com/juanfont/headscale/integration/hsic"
-	"github.com/juanfont/headscale/integration/integrationutil"
-	"github.com/juanfont/headscale/integration/tsic"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-func TestUserCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	spec := ScenarioSpec{
-		Users: []string{"user1", "user2"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoError(t, err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("cli-user"))
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	var (
-		listUsers []*clientv1.User
-		result    []string
-	)
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"users",
-				"list",
-				"--output",
-				"json",
-			},
-			&listUsers,
-		)
-		assert.NoError(ct, err)
-
-		slices.SortFunc(listUsers, sortWithID)
-		result = []string{listUsers[0].Name, listUsers[1].Name}
-
-		assert.Equal(
-			ct,
-			[]string{"user1", "user2"},
-			result,
-			"Should have user1 and user2 in users list",
-		)
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	_, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"users",
-			"rename",
-			"--output=json",
-			"--identifier=" + listUsers[1].Id,
-			"--new-name=newname",
-		},
-	)
-	require.NoError(t, err)
-
-	var listAfterRenameUsers []*clientv1.User
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"users",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAfterRenameUsers,
-		)
-		assert.NoError(ct, err)
-
-		slices.SortFunc(listAfterRenameUsers, sortWithID)
-		result = []string{listAfterRenameUsers[0].Name, listAfterRenameUsers[1].Name}
-
-		assert.Equal(
-			ct,
-			[]string{"user1", "newname"},
-			result,
-			"Should have user1 and newname after rename operation",
-		)
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	var listByUsername []*clientv1.User
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"users",
-				"list",
-				"--output",
-				"json",
-				"--name=user1",
-			},
-			&listByUsername,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for user list by username")
-
-	slices.SortFunc(listByUsername, sortWithID)
-
-	want := []*clientv1.User{
-		{
-			Id:    "1",
-			Name:  "user1",
-			Email: "user1@test.no",
-		},
-	}
-
-	if diff := tcmp.Diff(want, listByUsername, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
-		t.Errorf("unexpected users (-want +got):\n%s", diff)
-	}
-
-	var listByID []*clientv1.User
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"users",
-				"list",
-				"--output",
-				"json",
-				"--identifier=1",
-			},
-			&listByID,
-		)
-		assert.NoError(c, err)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for user list by ID")
-
-	slices.SortFunc(listByID, sortWithID)
-
-	want = []*clientv1.User{
-		{
-			Id:    "1",
-			Name:  "user1",
-			Email: "user1@test.no",
-		},
-	}
-
-	if diff := tcmp.Diff(want, listByID, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
-		t.Errorf("unexpected users (-want +got):\n%s", diff)
-	}
-
-	deleteResult, err := headscale.Execute(
-		[]string{
-			"headscale",
-			"users",
-			"destroy",
-			"--force",
-			// Delete "user1"
-			"--identifier=1",
-		},
-	)
-	require.NoError(t, err)
-	assert.Contains(t, deleteResult, "User destroyed")
-
-	var listAfterIDDelete []*clientv1.User
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"users",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAfterIDDelete,
-		)
-		assert.NoError(ct, err)
-
-		slices.SortFunc(listAfterIDDelete, sortWithID)
-
-		want := []*clientv1.User{
-			{
-				Id:    "2",
-				Name:  "newname",
-				Email: "user2@test.no",
-			},
-		}
-
-		if diff := tcmp.Diff(want, listAfterIDDelete, cmpopts.IgnoreUnexported(clientv1.User{}), cmpopts.IgnoreFields(clientv1.User{}, "CreatedAt")); diff != "" {
-			assert.Fail(ct, "unexpected users", "diff (-want +got):\n%s", diff)
-		}
-	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
-
-	deleteResult, err = headscale.Execute(
-		[]string{
-			"headscale",
-			"users",
-			"destroy",
-			"--force",
-			"--name=newname",
-		},
-	)
-	require.NoError(t, err)
-	assert.Contains(t, deleteResult, "User destroyed")
-
-	var listAfterNameDelete []clientv1.User
-
-	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		err = executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"users",
-				"list",
-				"--output",
-				"json",
-			},
-			&listAfterNameDelete,
-		)
-		assert.NoError(c, err)
-		assert.Empty(c, listAfterNameDelete)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for user list after name delete")
-}
-
-// TestUserCreateCommand exercises `headscale users create` with all of its
-// optional flags (--display-name, --email, --picture-url), the --email list
-// filter, and the validation error paths (duplicate name, missing flags).
-func TestUserCreateCommand(t *testing.T) {
-	IntegrationSkip(t)
-
-	// One pre-existing user with a node so the server holds real data while we
-	// create and inspect additional users via the CLI.
-	scenario, headscale := setupCLIScenario(t, "cli-usercreate", []string{"existing"}, 1)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	// Create a user populated with every optional field. The created user is
-	// returned on stdout and round-tripped through the User type.
-	created := assertJSONRoundtrip[*clientv1.User](t, headscale, []string{
-		"headscale",
-		"users",
-		"create",
-		"cli-created",
-		"--display-name", "CLI Created",
-		"--email", "cli-created@example.com",
-		"--picture-url", "https://example.com/avatar.png",
-		"--output", "json",
-	})
-
-	assert.Equal(t, "cli-created", created.Name)
-	assert.Equal(t, "CLI Created", created.DisplayName)
-	assert.Equal(t, "cli-created@example.com", created.Email)
-	assert.Equal(t, "https://example.com/avatar.png", created.ProfilePicUrl)
-
-	// The created fields must survive a list query (read-after-write) and be
-	// filterable by email.
-	var byEmail []*clientv1.User
-
-	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-		err := executeAndUnmarshal(headscale,
-			[]string{
-				"headscale",
-				"users",
-				"list",
-				"--email", "cli-created@example.com",
-				"--output", "json",
-			},
-			&byEmail,
-		)
-		assert.NoError(ct, err)
-		assert.Len(ct, byEmail, 1, "exactly one user should match the email filter")
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for user list by email")
-
-	require.Len(t, byEmail, 1)
-	assert.Equal(t, "cli-created", byEmail[0].Name)
-	assert.Equal(t, "CLI Created", byEmail[0].DisplayName)
-}
-
-// TestUserCommandValidation exercises the validation and error permutations of
-// the user subcommands and their flags: a missing name, a duplicate name, the
-// required --new-name on rename, and the "--name or --identifier" requirement
-// on rename/destroy. user1 already exists so the duplicate path has a conflict.
-func TestUserCommandValidation(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario, headscale := setupCLIScenario(t, "cli-userval", []string{"user1"}, 0)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	// wantEmptyList means the command must succeed and return no users;
-	// otherwise the command must fail, matching wantErr when it is non-empty.
-	tests := []struct {
-		name          string
-		args          []string
-		wantErr       string
-		wantEmptyList bool
-	}{
-		{name: "create missing name", args: []string{"users", "create"}, wantErr: "missing parameters"},
-		{name: "create duplicate", args: []string{"users", "create", "user1"}},
-		{name: "rename missing new-name", args: []string{"users", "rename", "--identifier", "1"}, wantErr: "new-name"},
-		{name: "rename missing selector", args: []string{"users", "rename", "--new-name", "x"}, wantErr: "--name or --identifier"},
-		{name: "destroy missing selector", args: []string{"users", "destroy", "--force"}, wantErr: "--name or --identifier"},
-		{name: "destroy nonexistent", args: []string{"users", "destroy", "--force", "--identifier", "99999"}},
-		{name: "list nonexistent name is empty", args: []string{"users", "list", "--name", "ghost", "--output", "json"}, wantEmptyList: true},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			out, err := headscale.Execute(append([]string{"headscale"}, tt.args...))
-
-			switch {
-			case tt.wantEmptyList:
-				require.NoError(t, err)
-
-				var users []clientv1.User
-
-				require.NoError(t, json.Unmarshal([]byte(out), &users))
-				require.Empty(t, users)
-			case tt.wantErr != "":
-				require.ErrorContains(t, err, tt.wantErr)
-			default:
-				require.Error(t, err)
-			}
-		})
-	}
-}
diff --git a/integration/control.go b/integration/control.go
index f0b5611f7..8c3cdbf07 100644
--- a/integration/control.go
+++ b/integration/control.go
@@ -1,10 +1,9 @@
 package integration
 
 import (
-	"context"
 	"net/netip"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol"
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
@@ -23,23 +22,20 @@ type ControlServer interface {
 	ConnectToNetwork(network *dockertest.Network) error
 	GetHealthEndpoint() string
 	GetEndpoint() string
-	GetIPEndpoint() string
-	CreateOAuthClient(ctx context.Context, scopes, tags []string) (string, string, error)
 	WaitForRunning() error
-	Restart() error
-	CreateUser(user string) (*clientv1.User, error)
-	CreateAuthKey(user uint64, reusable bool, ephemeral bool) (*clientv1.PreAuthKey, error)
-	CreateAuthKeyWithTags(user uint64, reusable bool, ephemeral bool, tags []string) (*clientv1.PreAuthKey, error)
-	CreateAuthKeyWithOptions(opts hsic.AuthKeyOptions) (*clientv1.PreAuthKey, error)
+	CreateUser(user string) (*v1.User, error)
+	CreateAuthKey(user uint64, reusable bool, ephemeral bool) (*v1.PreAuthKey, error)
+	CreateAuthKeyWithTags(user uint64, reusable bool, ephemeral bool, tags []string) (*v1.PreAuthKey, error)
+	CreateAuthKeyWithOptions(opts hsic.AuthKeyOptions) (*v1.PreAuthKey, error)
 	DeleteAuthKey(id uint64) error
-	ListNodes(users ...string) ([]*clientv1.Node, error)
+	ListNodes(users ...string) ([]*v1.Node, error)
 	DeleteNode(nodeID uint64) error
-	NodesByUser() (map[string][]*clientv1.Node, error)
-	NodesByName() (map[string]*clientv1.Node, error)
-	ListUsers() ([]*clientv1.User, error)
-	MapUsers() (map[string]*clientv1.User, error)
+	NodesByUser() (map[string][]*v1.Node, error)
+	NodesByName() (map[string]*v1.Node, error)
+	ListUsers() ([]*v1.User, error)
+	MapUsers() (map[string]*v1.User, error)
 	DeleteUser(userID uint64) error
-	ApproveRoutes(nodeID uint64, routes []netip.Prefix) (*clientv1.Node, error)
+	ApproveRoutes(nodeID uint64, routes []netip.Prefix) (*v1.Node, error)
 	SetNodeTags(nodeID uint64, tags []string) error
 	GetCert() []byte
 	GetHostname() string
diff --git a/integration/derp_verify_endpoint_test.go b/integration/derp_verify_endpoint_test.go
index c3cc88378..4abf6bec8 100644
--- a/integration/derp_verify_endpoint_test.go
+++ b/integration/derp_verify_endpoint_test.go
@@ -6,6 +6,7 @@ import (
 	"strconv"
 	"testing"
 
+	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/integration/dsic"
 	"github.com/juanfont/headscale/integration/hsic"
 	"github.com/juanfont/headscale/integration/integrationutil"
@@ -16,14 +17,14 @@ import (
 	"tailscale.com/net/netmon"
 	"tailscale.com/tailcfg"
 	"tailscale.com/types/key"
-	"tailscale.com/util/rands"
 )
 
 func TestDERPVerifyEndpoint(t *testing.T) {
 	IntegrationSkip(t)
 
 	// Generate random hostname for the headscale instance
-	hash := rands.HexString(6)
+	hash, err := util.GenerateRandomStringDNSSafe(6)
+	require.NoError(t, err)
 
 	testName := "derpverify"
 	hostname := fmt.Sprintf("hs-%s-%s", testName, hash)
@@ -44,8 +45,7 @@ func TestDERPVerifyEndpoint(t *testing.T) {
 	require.NoError(t, err)
 	defer scenario.ShutdownAssertNoPanics(t)
 
-	derper, err := scenario.CreateDERPServer(
-		"head",
+	derper, err := scenario.CreateDERPServer("head",
 		dsic.WithCACert(caHeadscale),
 		dsic.WithVerifyClientURL(fmt.Sprintf("https://%s/verify", net.JoinHostPort(hostname, strconv.Itoa(headscalePort)))),
 	)
@@ -72,12 +72,12 @@ func TestDERPVerifyEndpoint(t *testing.T) {
 		},
 	}
 
-	// [hsic.WithHostname] is used instead of [hsic.WithTestName] because the hostname
+	// WithHostname is used instead of WithTestName because the hostname
 	// must match the pre-generated TLS certificate created above.
 	// The test name "derpverify" is embedded in the hostname variable.
 	//
-	// [tsic.WithCACert] passes the external DERP server's certificate so
-	// tailscale clients trust it. [hsic.WithCustomTLS] and [hsic.WithDERPConfig]
+	// WithCACert passes the external DERP server's certificate so
+	// tailscale clients trust it. WithCustomTLS and WithDERPConfig
 	// configure headscale to use the external DERP server created
 	// above instead of the default embedded one.
 	err = scenario.CreateHeadscaleEnv([]tsic.Option{tsic.WithCACert(derper.GetCert())},
diff --git a/integration/dns_test.go b/integration/dns_test.go
index 5dc2386ab..3841c7a16 100644
--- a/integration/dns_test.go
+++ b/integration/dns_test.go
@@ -67,7 +67,7 @@ func TestResolveMagicDNS(t *testing.T) {
 				for _, ip := range ips {
 					assert.Contains(ct, result, ip.String(), "IP %s should be found in DNS resolution result from %s to %s", ip.String(), client.Hostname(), peer.Hostname())
 				}
-			}, integrationutil.StatusReadyTimeout, 2*time.Second)
+			}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
 		}
 	}
 }
diff --git a/integration/dockertestutil/auth.go b/integration/dockertestutil/auth.go
deleted file mode 100644
index d818783f9..000000000
--- a/integration/dockertestutil/auth.go
+++ /dev/null
@@ -1,171 +0,0 @@
-package dockertestutil
-
-import (
-	"context"
-	"encoding/base64"
-	"encoding/json"
-	"fmt"
-	"os"
-	"path/filepath"
-	"strings"
-	"time"
-
-	"github.com/cenkalti/backoff/v5"
-	"github.com/ory/dockertest/v3"
-	"github.com/ory/dockertest/v3/docker"
-)
-
-const dockerHubServer = "https://index.docker.io/v1/"
-
-type CredentialSource string
-
-const (
-	CredentialSourceEnv       CredentialSource = "env"
-	CredentialSourceConfig    CredentialSource = "config"
-	CredentialSourceAnonymous CredentialSource = "anonymous"
-)
-
-// Credentials resolves Docker Hub credentials from
-// DOCKERHUB_USERNAME/DOCKERHUB_TOKEN, then ~/.docker/config.json, then
-// anonymous. The Docker Go SDKs do not read config.json on their own.
-func Credentials() (string, string, CredentialSource) {
-	if u := os.Getenv("DOCKERHUB_USERNAME"); u != "" {
-		return u, os.Getenv("DOCKERHUB_TOKEN"), CredentialSourceEnv
-	}
-
-	user, pass, ok := credentialsFromConfig()
-	if ok {
-		return user, pass, CredentialSourceConfig
-	}
-
-	return "", "", CredentialSourceAnonymous
-}
-
-// AuthConfiguration returns Docker Hub auth for the dockertest pool.
-func AuthConfiguration() docker.AuthConfiguration {
-	u, p, _ := Credentials()
-
-	return docker.AuthConfiguration{
-		Username:      u,
-		Password:      p,
-		ServerAddress: dockerHubServer,
-	}
-}
-
-// RegistryAuth returns base64-encoded credentials for the modern
-// Docker SDK's image.PullOptions{RegistryAuth: ...}, or "" when none.
-func RegistryAuth() (string, error) {
-	u, p, _ := Credentials()
-	if u == "" && p == "" {
-		return "", nil
-	}
-
-	auth := struct {
-		Username string `json:"username"`
-		Password string `json:"password"`
-	}{Username: u, Password: p}
-
-	b, err := json.Marshal(auth) //nolint:gosec // G117: password field holds the Docker Hub token, intentional
-	if err != nil {
-		return "", fmt.Errorf("marshalling docker auth: %w", err)
-	}
-
-	return base64.URLEncoding.EncodeToString(b), nil
-}
-
-// PullWithAuth ensures imageRef is local, pulling with auth and
-// retrying transient errors when it is not.
-func PullWithAuth(pool *dockertest.Pool, imageRef string) error {
-	if img, _ := pool.Client.InspectImage(imageRef); img != nil {
-		return nil
-	}
-
-	repo, tag := splitImageRef(imageRef)
-	auth := AuthConfiguration()
-
-	_, err := backoff.Retry(
-		context.Background(),
-		func() (struct{}, error) {
-			err := pool.Client.PullImage(docker.PullImageOptions{
-				Repository: repo,
-				Tag:        tag,
-			}, auth)
-			if err == nil {
-				return struct{}{}, nil
-			}
-
-			if isPermanentPullError(err) {
-				return struct{}{}, backoff.Permanent(err)
-			}
-
-			return struct{}{}, fmt.Errorf("pulling %s: %w", imageRef, err)
-		},
-		backoff.WithBackOff(backoff.NewExponentialBackOff()),
-		backoff.WithMaxElapsedTime(60*time.Second),
-	)
-	if err != nil {
-		return fmt.Errorf("pulling %s with auth (source=%s): %w", imageRef, AuthConfiguration().ServerAddress, err)
-	}
-
-	return nil
-}
-
-func splitImageRef(ref string) (string, string) {
-	if i := strings.LastIndex(ref, ":"); i >= 0 {
-		return ref[:i], ref[i+1:]
-	}
-
-	return ref, "latest"
-}
-
-func isPermanentPullError(err error) bool {
-	msg := strings.ToLower(err.Error())
-
-	return strings.Contains(msg, "manifest unknown") ||
-		strings.Contains(msg, "manifest not found") ||
-		strings.Contains(msg, "repository does not exist") ||
-		strings.Contains(msg, "name unknown") ||
-		strings.Contains(msg, "no such image")
-}
-
-// credentialsFromConfig reads the Hub entry from ~/.docker/config.json.
-// Credential helpers (osxkeychain etc.) are not supported; use env vars.
-func credentialsFromConfig() (string, string, bool) {
-	home, err := os.UserHomeDir()
-	if err != nil {
-		return "", "", false
-	}
-
-	raw, err := os.ReadFile(filepath.Join(home, ".docker", "config.json"))
-	if err != nil {
-		return "", "", false
-	}
-
-	var cfg struct {
-		Auths map[string]struct {
-			Auth string `json:"auth"`
-		} `json:"auths"`
-	}
-
-	err = json.Unmarshal(raw, &cfg)
-	if err != nil {
-		return "", "", false
-	}
-
-	entry, found := cfg.Auths[dockerHubServer]
-	if !found || entry.Auth == "" {
-		return "", "", false
-	}
-
-	decoded, err := base64.StdEncoding.DecodeString(entry.Auth)
-	if err != nil {
-		return "", "", false
-	}
-
-	user, pass, ok := strings.Cut(string(decoded), ":")
-	if !ok {
-		return "", "", false
-	}
-
-	return user, pass, true
-}
diff --git a/integration/dockertestutil/config.go b/integration/dockertestutil/config.go
index 692dc9def..88b2712c6 100644
--- a/integration/dockertestutil/config.go
+++ b/integration/dockertestutil/config.go
@@ -6,8 +6,8 @@ import (
 	"strings"
 	"time"
 
+	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/ory/dockertest/v3"
-	"tailscale.com/util/rands"
 )
 
 const (
@@ -22,9 +22,9 @@ func GetIntegrationRunID() string {
 	return os.Getenv("HEADSCALE_INTEGRATION_RUN_ID")
 }
 
-// DockerAddIntegrationLabels adds integration test labels to Docker [dockertest.RunOptions].
+// DockerAddIntegrationLabels adds integration test labels to Docker RunOptions.
 // This allows the hi tool to identify containers belonging to specific test runs.
-// This function should be called before passing [dockertest.RunOptions] to dockertest functions.
+// This function should be called before passing RunOptions to dockertest functions.
 func DockerAddIntegrationLabels(opts *dockertest.RunOptions, testType string) {
 	runID := GetIntegrationRunID()
 	if runID == "" {
@@ -46,7 +46,7 @@ func GenerateRunID() string {
 	timestamp := now.Format(TimestampFormatRunID)
 
 	// Add a short random hash to ensure uniqueness
-	randomHash := rands.HexString(6)
+	randomHash := util.MustGenerateRandomStringDNSSafe(6)
 
 	return fmt.Sprintf("%s-%s", timestamp, randomHash)
 }
diff --git a/integration/dockertestutil/execute.go b/integration/dockertestutil/execute.go
index 79511e2e0..da5b7c068 100644
--- a/integration/dockertestutil/execute.go
+++ b/integration/dockertestutil/execute.go
@@ -40,7 +40,7 @@ func ExecuteCommandTimeout(timeout time.Duration) ExecuteCommandOption {
 	})
 }
 
-// buffer is a goroutine safe [bytes.Buffer].
+// buffer is a goroutine safe bytes.buffer.
 type buffer struct {
 	store bytes.Buffer
 	mutex sync.Mutex
diff --git a/integration/dockertestutil/network.go b/integration/dockertestutil/network.go
index df7f55c1a..1e9915e62 100644
--- a/integration/dockertestutil/network.go
+++ b/integration/dockertestutil/network.go
@@ -1,13 +1,11 @@
 package dockertestutil
 
 import (
-	"bytes"
 	"context"
 	"errors"
 	"fmt"
 	"log"
 	"net"
-	"strings"
 	"time"
 
 	"github.com/cenkalti/backoff/v5"
@@ -16,22 +14,18 @@ import (
 	"github.com/ory/dockertest/v3/docker"
 )
 
-var (
-	ErrContainerNotFound = errors.New("container not found")
-	ErrConditionTimeout  = errors.New("condition not met within timeout")
-)
+var ErrContainerNotFound = errors.New("container not found")
 
 // retryDockerOp absorbs eventual-consistency races in libnetwork endpoint cleanup.
-// Pulls its backoff bounds from retry.go so every helper that drives a
-// docker control-plane call uses the same budget.
 func retryDockerOp(ctx context.Context, op func() error) error {
-	bo := backoff.NewExponentialBackOff()
-	bo.InitialInterval = DockerOpInitialInterval
-	bo.MaxInterval = DockerOpMaxInterval
-
 	_, err := backoff.Retry(ctx, func() (struct{}, error) {
-		return struct{}{}, op()
-	}, backoff.WithBackOff(bo), backoff.WithMaxElapsedTime(DockerOpMaxElapsedTime))
+		err := op()
+		if err != nil {
+			return struct{}{}, err
+		}
+
+		return struct{}{}, nil
+	}, backoff.WithBackOff(backoff.NewExponentialBackOff()), backoff.WithMaxElapsedTime(30*time.Second))
 
 	return err
 }
@@ -63,16 +57,17 @@ func GetFirstOrCreateNetworkWithSubnet(pool *dockertest.Pool, name, subnet strin
 			})
 		}
 
-		_, err = pool.CreateNetwork(name, opts...)
-		if err != nil {
-			return nil, fmt.Errorf("creating network: %w", err)
-		}
+		if _, err := pool.CreateNetwork(name, opts...); err == nil { //nolint:noinlineerr // intentional inline check
+			// Create does not give us an updated version of the resource, so we need to
+			// get it again.
+			networks, err := pool.NetworksByName(name)
+			if err != nil {
+				return nil, err
+			}
 
-		// Create does not give us an updated version of the resource, so we need to
-		// get it again.
-		networks, err = pool.NetworksByName(name)
-		if err != nil {
-			return nil, fmt.Errorf("looking up network names: %w", err)
+			return &networks[0], nil
+		} else {
+			return nil, fmt.Errorf("creating network: %w", err)
 		}
 	}
 
@@ -110,268 +105,46 @@ func AddContainerToNetwork(
 	})
 }
 
-// DisconnectContainerFromNetwork detaches the container at the docker
-// daemon level (cable-pull semantics) and waits for libnetwork to drop
-// the endpoint before returning — re-attaching during the
-// reprogramming window otherwise fails with "network is unreachable".
+// DisconnectContainerFromNetwork removes the container from network at
+// the docker daemon level. Mirrors a physical cable pull: the
+// container's network interface for that network disappears and any
+// in-flight TCP connections are left half-open, exactly the failure
+// mode iptables-based simulations cannot reproduce.
 func DisconnectContainerFromNetwork(
 	pool *dockertest.Pool,
 	network *dockertest.Network,
 	testContainer string,
 ) error {
-	containerID, err := lookupContainerID(pool, testContainer)
-	if err != nil {
-		return err
-	}
-
-	err = retryDockerOp(context.Background(), func() error {
-		return pool.Client.DisconnectNetwork(network.Network.ID, docker.NetworkConnectionOptions{
-			Container: containerID,
-		})
+	containers, err := pool.Client.ListContainers(docker.ListContainersOptions{
+		All: true,
+		Filters: map[string][]string{
+			"name": {testContainer},
+		},
 	})
 	if err != nil {
 		return err
 	}
 
-	err = waitNetworkContainerAbsent(pool, network, testContainer, DockerOpMaxElapsedTime)
-	if err != nil {
-		return err
+	if len(containers) == 0 {
+		return fmt.Errorf("%w: %s", ErrContainerNotFound, testContainer)
 	}
 
-	// libnetwork drops the endpoint from its model before the kernel
-	// netns has flushed the matching route. Re-attach with the sticky
-	// IP otherwise fails with "conflicts with existing route".
-	return waitContainerRouteAbsent(pool, containerID, network, DockerOpMaxElapsedTime)
+	return retryDockerOp(context.Background(), func() error {
+		return pool.Client.DisconnectNetwork(network.Network.ID, docker.NetworkConnectionOptions{
+			Container: containers[0].ID,
+		})
+	})
 }
 
 // ReconnectContainerToNetwork is the inverse of
-// [DisconnectContainerFromNetwork] — re-attaches the container to the
+// DisconnectContainerFromNetwork — re-attaches the container to the
 // network so traffic can flow again.
 func ReconnectContainerToNetwork(
 	pool *dockertest.Pool,
 	network *dockertest.Network,
 	testContainer string,
 ) error {
-	containerID, err := lookupContainerID(pool, testContainer)
-	if err != nil {
-		return err
-	}
-
-	err = retryDockerOp(context.Background(), func() error {
-		connectErr := pool.Client.ConnectNetwork(network.Network.ID, docker.NetworkConnectionOptions{
-			Container: containerID,
-		})
-		if connectErr != nil && isStaleRouteConflict(connectErr) {
-			// Defensive cleanup: a route survived the netns flush
-			// despite the wait above. Drop subnet routes that point
-			// at the disconnected interface so libnetwork can
-			// reprogram the sticky IP, then let the retry budget
-			// try the ConnectNetwork call again.
-			removeContainerSubnetRoutes(pool, containerID, network)
-		}
-
-		return connectErr
-	})
-	if err != nil {
-		return err
-	}
-
-	return waitNetworkContainerPresent(pool, network, testContainer, DockerOpMaxElapsedTime)
-}
-
-// lookupContainerID resolves a container name to its docker ID.
-func lookupContainerID(pool *dockertest.Pool, testContainer string) (string, error) {
-	containers, err := pool.Client.ListContainers(docker.ListContainersOptions{
-		All:     true,
-		Filters: map[string][]string{"name": {testContainer}},
-	})
-	if err != nil {
-		return "", err
-	}
-
-	if len(containers) == 0 {
-		return "", fmt.Errorf("%w: %s", ErrContainerNotFound, testContainer)
-	}
-
-	return containers[0].ID, nil
-}
-
-// DisconnectAndReconnect calls Disconnect followed by Reconnect; both
-// primitives drive their own libnetwork settle waits.
-func DisconnectAndReconnect(
-	pool *dockertest.Pool,
-	network *dockertest.Network,
-	testContainer string,
-) error {
-	err := DisconnectContainerFromNetwork(pool, network, testContainer)
-	if err != nil {
-		return fmt.Errorf("disconnecting %s from %s: %w", testContainer, network.Network.Name, err)
-	}
-
-	err = ReconnectContainerToNetwork(pool, network, testContainer)
-	if err != nil {
-		return fmt.Errorf("reconnecting %s to %s: %w", testContainer, network.Network.Name, err)
-	}
-
-	return nil
-}
-
-func waitNetworkContainer(
-	pool *dockertest.Pool,
-	network *dockertest.Network,
-	testContainer string,
-	timeout time.Duration,
-	want bool,
-	match func(docker.Endpoint) bool,
-) error {
-	return pollUntil(timeout, func() (bool, error) {
-		net, err := pool.Client.NetworkInfo(network.Network.ID)
-		if err != nil {
-			return false, fmt.Errorf("inspecting network %s: %w", network.Network.Name, err)
-		}
-
-		found := false
-
-		for _, c := range net.Containers {
-			if (c.Name == testContainer || c.Name == "/"+testContainer) && match(c) {
-				found = true
-				break
-			}
-		}
-
-		return found == want, nil
-	})
-}
-
-func waitNetworkContainerAbsent(
-	pool *dockertest.Pool,
-	network *dockertest.Network,
-	testContainer string,
-	timeout time.Duration,
-) error {
-	return waitNetworkContainer(pool, network, testContainer, timeout, false, func(docker.Endpoint) bool { return true })
-}
-
-func waitNetworkContainerPresent(
-	pool *dockertest.Pool,
-	network *dockertest.Network,
-	testContainer string,
-	timeout time.Duration,
-) error {
-	return waitNetworkContainer(pool, network, testContainer, timeout, true, func(c docker.Endpoint) bool { return c.IPv4Address != "" })
-}
-
-// waitContainerRouteAbsent polls the container's routing table until no
-// route remains for the network's IPAM subnet. libnetwork's docker-side
-// endpoint teardown is asynchronous from the kernel netns flush, and a
-// surviving route blocks a subsequent reconnect at sticky-IP assignment
-// with "conflicts with existing route".
-func waitContainerRouteAbsent(pool *dockertest.Pool, containerID string, network *dockertest.Network, timeout time.Duration) error {
-	subnets := networkSubnets(network)
-	if len(subnets) == 0 {
-		return nil
-	}
-
-	return pollUntil(timeout, func() (bool, error) {
-		stdout, err := execStdout(pool, containerID, []string{"ip", "-4", "route", "show"})
-		if err != nil {
-			return false, fmt.Errorf("inspecting routes in %s: %w", containerID, err)
-		}
-
-		for _, subnet := range subnets {
-			if strings.Contains(stdout, subnet+" ") || strings.HasSuffix(strings.TrimSpace(stdout), subnet) {
-				return false, nil
-			}
-		}
-
-		return true, nil
-	})
-}
-
-// removeContainerSubnetRoutes drops residue subnet routes in the
-// container's netns — the leftover that libnetwork's async endpoint
-// teardown can leave behind.
-func removeContainerSubnetRoutes(pool *dockertest.Pool, containerID string, network *dockertest.Network) {
-	for _, subnet := range networkSubnets(network) {
-		_, err := execStdout(pool, containerID, []string{"ip", "-4", "route", "del", subnet})
-		if err != nil {
-			log.Printf("removing stale route %s in %s: %v", subnet, containerID, err)
-		}
-	}
-}
-
-// isStaleRouteConflict matches the libnetwork 500 raised when a
-// surviving subnet route blocks sticky-IP reprogramming on reconnect.
-func isStaleRouteConflict(err error) bool {
-	if err == nil {
-		return false
-	}
-
-	return strings.Contains(err.Error(), "conflicts with existing route")
-}
-
-// networkSubnets returns the IPAM-configured subnets for a docker
-// network. Empty when IPAM is left to docker defaults.
-func networkSubnets(network *dockertest.Network) []string {
-	out := make([]string, 0, len(network.Network.IPAM.Config))
-	for _, cfg := range network.Network.IPAM.Config {
-		if cfg.Subnet != "" {
-			out = append(out, cfg.Subnet)
-		}
-	}
-
-	return out
-}
-
-// execStdout runs a one-shot command in containerID and returns stdout.
-func execStdout(pool *dockertest.Pool, containerID string, cmd []string) (string, error) {
-	exec, err := pool.Client.CreateExec(docker.CreateExecOptions{
-		Container:    containerID,
-		Cmd:          cmd,
-		AttachStdout: true,
-		AttachStderr: true,
-	})
-	if err != nil {
-		return "", fmt.Errorf("create exec: %w", err)
-	}
-
-	var stdout, stderr bytes.Buffer
-
-	err = pool.Client.StartExec(exec.ID, docker.StartExecOptions{
-		OutputStream: &stdout,
-		ErrorStream:  &stderr,
-	})
-	if err != nil {
-		return stdout.String(), fmt.Errorf("start exec: %w", err)
-	}
-
-	return stdout.String(), nil
-}
-
-// pollUntil ticks every DockerOpInitialInterval until check returns
-// done=true or timeout elapses. A non-nil check error aborts the loop.
-func pollUntil(timeout time.Duration, check func() (done bool, err error)) error {
-	deadline := time.Now().Add(timeout)
-
-	ticker := time.NewTicker(DockerOpInitialInterval)
-	defer ticker.Stop()
-
-	for {
-		done, err := check()
-		if err != nil {
-			return err
-		}
-
-		if done {
-			return nil
-		}
-
-		if time.Now().After(deadline) {
-			return fmt.Errorf("%w: %s", ErrConditionTimeout, timeout)
-		}
-
-		<-ticker.C
-	}
+	return AddContainerToNetwork(pool, network, testContainer)
 }
 
 // RandomFreeHostPort asks the kernel for a free open port that is ready to use.
diff --git a/integration/dockertestutil/retry.go b/integration/dockertestutil/retry.go
deleted file mode 100644
index 68fdc76bd..000000000
--- a/integration/dockertestutil/retry.go
+++ /dev/null
@@ -1,12 +0,0 @@
-package dockertestutil
-
-import "time"
-
-// Docker control-plane retry policy. MaxElapsedTime sits above the
-// worst observed libnetwork bridge reprogramming time (~60 s on
-// contended GHA runners).
-const (
-	DockerOpInitialInterval = 1 * time.Second
-	DockerOpMaxInterval     = 10 * time.Second
-	DockerOpMaxElapsedTime  = 90 * time.Second
-)
diff --git a/integration/dsic/dsic.go b/integration/dsic/dsic.go
index c165eee10..c442e6555 100644
--- a/integration/dsic/dsic.go
+++ b/integration/dsic/dsic.go
@@ -11,11 +11,11 @@ import (
 	"strings"
 	"time"
 
+	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/integration/dockertestutil"
 	"github.com/juanfont/headscale/integration/integrationutil"
 	"github.com/ory/dockertest/v3"
 	"github.com/ory/dockertest/v3/docker"
-	"tailscale.com/util/rands"
 )
 
 const (
@@ -136,14 +136,17 @@ func (dsic *DERPServerInContainer) buildEntrypoint(derperArgs string) []string {
 	return []string{"/bin/sh", "-c", strings.Join(commands, " ; ")}
 }
 
-// New returns a new [tsic.TailscaleInContainer] instance.
+// New returns a new TailscaleInContainer instance.
 func New(
 	pool *dockertest.Pool,
 	version string,
 	networks []*dockertest.Network,
 	opts ...Option,
 ) (*DERPServerInContainer, error) {
-	hash := rands.HexString(dsicHashLength)
+	hash, err := util.GenerateRandomStringDNSSafe(dsicHashLength)
+	if err != nil {
+		return nil, err
+	}
 
 	// Include run ID in hostname for easier identification of which test run owns this container
 	runID := dockertestutil.GetIntegrationRunID()
@@ -176,7 +179,7 @@ func New(
 	}
 
 	// Install the CA cert so the DERP server trusts its own certificate
-	// and any headscale CA certs passed via [WithCACert].
+	// and any headscale CA certs passed via WithCACert.
 	dsic.caCerts = append(dsic.caCerts, tlsCACert)
 
 	for _, opt := range opts {
@@ -316,7 +319,7 @@ func (t *DERPServerInContainer) Version() string {
 	return t.version
 }
 
-// ID returns the Docker container ID of the [DERPServerInContainer]
+// ID returns the Docker container ID of the DERPServerInContainer
 // instance.
 func (t *DERPServerInContainer) ID() string {
 	return t.container.Container.ID
diff --git a/integration/embedded_derp_test.go b/integration/embedded_derp_test.go
index c35057c80..f55de2cc6 100644
--- a/integration/embedded_derp_test.go
+++ b/integration/embedded_derp_test.go
@@ -153,7 +153,7 @@ func derpServerScenario(
 				assert.NotContains(ct, health, "could not connect to the 'Headscale Embedded DERP' relay server.",
 					"Client %s should be connected to Headscale Embedded DERP", client.Hostname())
 			}
-		}, integrationutil.StatusReadyTimeout, 2*time.Second)
+		}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
 	}
 
 	success := pingDerpAllHelper(t, allClients, allHostnames)
@@ -174,13 +174,13 @@ func derpServerScenario(
 				assert.NotContains(ct, health, "could not connect to the 'Headscale Embedded DERP' relay server.",
 					"Client %s should be connected to Headscale Embedded DERP after first run", client.Hostname())
 			}
-		}, integrationutil.StatusReadyTimeout, 2*time.Second)
+		}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
 	}
 
 	t.Logf("Run 1: %d successful pings out of %d", success, len(allClients)*len(allHostnames))
 
 	// Let the DERP updater run a couple of times to ensure it does not
-	// break the [tailcfg.DERPMap]. The updater runs on a 10s interval by default.
+	// break the DERPMap. The updater runs on a 10s interval by default.
 	//nolint:forbidigo // Intentional delay: must wait for DERP updater to run multiple times (interval-based)
 	time.Sleep(30 * time.Second)
 
@@ -200,7 +200,7 @@ func derpServerScenario(
 				assert.NotContains(ct, health, "could not connect to the 'Headscale Embedded DERP' relay server.",
 					"Client %s should be connected to Headscale Embedded DERP after second run", client.Hostname())
 			}
-		}, integrationutil.StatusReadyTimeout, 2*time.Second)
+		}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
 	}
 
 	t.Logf("Run2: %d successful pings out of %d", success, len(allClients)*len(allHostnames))
diff --git a/integration/general_test.go b/integration/general_test.go
index 9bdfd8c71..71d4371aa 100644
--- a/integration/general_test.go
+++ b/integration/general_test.go
@@ -10,9 +10,10 @@ import (
 	"testing"
 	"time"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/integration/hsic"
+	"tailscale.com/util/dnsname"
 	"github.com/juanfont/headscale/integration/integrationutil"
 	"github.com/juanfont/headscale/integration/tsic"
 	"github.com/rs/zerolog/log"
@@ -22,7 +23,6 @@ import (
 	"golang.org/x/sync/errgroup"
 	"tailscale.com/client/tailscale/apitype"
 	"tailscale.com/types/key"
-	"tailscale.com/util/dnsname"
 )
 
 func TestPingAllByIP(t *testing.T) {
@@ -169,12 +169,12 @@ func testEphemeralWithOptions(t *testing.T, opts ...hsic.Option) {
 			t.Fatalf("failed to create tailscale nodes in user %s: %s", userName, err)
 		}
 
-		key, err := scenario.CreatePreAuthKey(mustParseID(user.Id), true, true)
+		key, err := scenario.CreatePreAuthKey(user.GetId(), true, true)
 		if err != nil {
 			t.Fatalf("failed to create pre-auth key for user %s: %s", userName, err)
 		}
 
-		err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.Key)
+		err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.GetKey())
 		if err != nil {
 			t.Fatalf("failed to run tailscale up for user %s: %s", userName, err)
 		}
@@ -211,7 +211,7 @@ func testEphemeralWithOptions(t *testing.T, opts ...hsic.Option) {
 		nodes, err := headscale.ListNodes()
 		assert.NoError(ct, err)
 		assert.Len(ct, nodes, 0, "All ephemeral nodes should be cleaned up after logout")
-	}, integrationutil.StatusReadyTimeout, 2*time.Second)
+	}, integrationutil.ScaledTimeout(30*time.Second), 2*time.Second)
 }
 
 // TestEphemeral2006DeletedTooQuickly verifies that ephemeral nodes are not
@@ -247,12 +247,12 @@ func TestEphemeral2006DeletedTooQuickly(t *testing.T) {
 			t.Fatalf("failed to create tailscale nodes in user %s: %s", userName, err)
 		}
 
-		key, err := scenario.CreatePreAuthKey(mustParseID(user.Id), true, true)
+		key, err := scenario.CreatePreAuthKey(user.GetId(), true, true)
 		if err != nil {
 			t.Fatalf("failed to create pre-auth key for user %s: %s", userName, err)
 		}
 
-		err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.Key)
+		err = scenario.RunTailscaleUp(userName, headscale.GetEndpoint(), key.GetKey())
 		if err != nil {
 			t.Fatalf("failed to run tailscale up for user %s: %s", userName, err)
 		}
@@ -298,7 +298,7 @@ func TestEphemeral2006DeletedTooQuickly(t *testing.T) {
 		assert.NoError(ct, err)
 
 		assertPingAllWithCollect(ct, allClients, allAddrs)
-	}, integrationutil.HAConvergeTimeout, 2*time.Second)
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second)
 
 	// Take down all clients, this should start an expiry timer for each.
 	for _, client := range allClients {
@@ -402,7 +402,7 @@ func TestTaildrop(t *testing.T) {
 	network := networks[0]
 
 	// Create untagged nodes for user1 using all test versions
-	user1Key, err := scenario.CreatePreAuthKey(mustParseID(userMap["user1"].Id), true, false)
+	user1Key, err := scenario.CreatePreAuthKey(userMap["user1"].GetId(), true, false)
 	require.NoError(t, err)
 
 	var user1Clients []TailscaleClient
@@ -414,7 +414,7 @@ func TestTaildrop(t *testing.T) {
 		)
 		require.NoError(t, err)
 
-		err = client.Login(headscale.GetEndpoint(), user1Key.Key)
+		err = client.Login(headscale.GetEndpoint(), user1Key.GetKey())
 		require.NoError(t, err)
 
 		err = client.WaitForRunning(integrationutil.PeerSyncTimeout())
@@ -425,7 +425,7 @@ func TestTaildrop(t *testing.T) {
 	}
 
 	// Create untagged nodes for user2 using all test versions
-	user2Key, err := scenario.CreatePreAuthKey(mustParseID(userMap["user2"].Id), true, false)
+	user2Key, err := scenario.CreatePreAuthKey(userMap["user2"].GetId(), true, false)
 	require.NoError(t, err)
 
 	var user2Clients []TailscaleClient
@@ -437,7 +437,7 @@ func TestTaildrop(t *testing.T) {
 		)
 		require.NoError(t, err)
 
-		err = client.Login(headscale.GetEndpoint(), user2Key.Key)
+		err = client.Login(headscale.GetEndpoint(), user2Key.GetKey())
 		require.NoError(t, err)
 
 		err = client.WaitForRunning(integrationutil.PeerSyncTimeout())
@@ -449,7 +449,7 @@ func TestTaildrop(t *testing.T) {
 
 	// Create a tagged device (tags-as-identity: tags come from PreAuthKey)
 	// Use "head" version to test latest behavior
-	taggedKey, err := scenario.CreatePreAuthKeyWithTags(mustParseID(userMap["user1"].Id), true, false, []string{"tag:server"})
+	taggedKey, err := scenario.CreatePreAuthKeyWithTags(userMap["user1"].GetId(), true, false, []string{"tag:server"})
 	require.NoError(t, err)
 
 	taggedClient, err := scenario.CreateTailscaleNode(
@@ -458,7 +458,7 @@ func TestTaildrop(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	err = taggedClient.Login(headscale.GetEndpoint(), taggedKey.Key)
+	err = taggedClient.Login(headscale.GetEndpoint(), taggedKey.GetKey())
 	require.NoError(t, err)
 
 	err = taggedClient.WaitForRunning(integrationutil.PeerSyncTimeout())
@@ -767,8 +767,8 @@ func TestUpdateHostnameFromClient(t *testing.T) {
 	// Pre-rewrite these were rejected by ApplyHostnameFromHostInfo with
 	// "invalid characters" and the node was stuck on an invalid-<rand>
 	// GivenName with the HostName update dropped. The assertions below
-	// verify both raw preservation ([clientv1.Node.Name]) and SaaS-matching sanitisation
-	// ([clientv1.Node.GivenName]) for each awkward input.
+	// verify both raw preservation (node.Name) and SaaS-matching sanitisation
+	// (node.GivenName) for each awkward input.
 	hostnames := map[string]string{
 		"1": "Joe's Mac mini",
 		"2": "Test@Host",
@@ -813,8 +813,8 @@ func TestUpdateHostnameFromClient(t *testing.T) {
 	requireNoErrSync(t, err)
 
 	// Wait for nodestore batch processing to complete
-	// [state.NodeStore] batching timeout is 500ms, so we wait up to 1 second
-	var nodes []*clientv1.Node
+	// NodeStore batching timeout is 500ms, so we wait up to 1 second
+	var nodes []*v1.Node
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		err := executeAndUnmarshal(
 			headscale,
@@ -831,18 +831,18 @@ func TestUpdateHostnameFromClient(t *testing.T) {
 		assert.Len(ct, nodes, 3, "Should have 3 nodes after hostname updates")
 
 		for _, node := range nodes {
-			hostname := hostnames[node.Id]
-			assert.Equal(ct, hostname, node.Name, "Node name should match hostname")
+			hostname := hostnames[strconv.FormatUint(node.GetId(), 10)]
+			assert.Equal(ct, hostname, node.GetName(), "Node name should match hostname")
 
-			// GivenName is sanitised via [dnsname.SanitizeHostname] (SaaS algorithm).
-			assert.Equal(ct, dnsname.SanitizeHostname(hostname), node.GivenName,
+			// GivenName is sanitised via dnsname.SanitizeHostname (SaaS algorithm).
+			assert.Equal(ct, dnsname.SanitizeHostname(hostname), node.GetGivenName(),
 				"Given name should match SaaS hostname-sanitisation rules")
 		}
 	}, integrationutil.ScaledTimeout(20*time.Second), 1*time.Second)
 
 	// Rename givenName in nodes
 	for _, node := range nodes {
-		givenName := fmt.Sprintf("%s-givenname", node.Id)
+		givenName := fmt.Sprintf("%d-givenname", node.GetId())
 		_, err = headscale.Execute(
 			[]string{
 				"headscale",
@@ -850,7 +850,7 @@ func TestUpdateHostnameFromClient(t *testing.T) {
 				"rename",
 				givenName,
 				"--identifier",
-				node.Id,
+				strconv.FormatUint(node.GetId(), 10),
 			})
 		require.NoError(t, err)
 	}
@@ -860,8 +860,8 @@ func TestUpdateHostnameFromClient(t *testing.T) {
 		// Build a map of expected DNSNames by node ID
 		expectedDNSNames := make(map[string]string)
 		for _, node := range nodes {
-			nodeID := node.Id
-			expectedDNSNames[nodeID] = fmt.Sprintf("%s-givenname.headscale.net.", node.Id)
+			nodeID := strconv.FormatUint(node.GetId(), 10)
+			expectedDNSNames[nodeID] = fmt.Sprintf("%d-givenname.headscale.net.", node.GetId())
 		}
 
 		// Verify from each client's perspective
@@ -894,7 +894,7 @@ func TestUpdateHostnameFromClient(t *testing.T) {
 				}
 			}
 		}
-	}, integrationutil.HAConvergeTimeout, 2*time.Second)
+	}, integrationutil.ScaledTimeout(60*time.Second), 2*time.Second)
 
 	for _, client := range allClients {
 		status := client.MustStatus()
@@ -912,7 +912,7 @@ func TestUpdateHostnameFromClient(t *testing.T) {
 	requireNoErrSync(t, err)
 
 	// Wait for nodestore batch processing to complete
-	// [state.NodeStore] batching timeout is 500ms, so we wait up to 1 second
+	// NodeStore batching timeout is 500ms, so we wait up to 1 second
 	assert.Eventually(t, func() bool {
 		err = executeAndUnmarshal(
 			headscale,
@@ -931,9 +931,9 @@ func TestUpdateHostnameFromClient(t *testing.T) {
 		}
 
 		for _, node := range nodes {
-			hostname := hostnames[node.Id]
-			givenName := fmt.Sprintf("%s-givenname", node.Id)
-			if node.Name != hostname+"NEW" || node.GivenName != givenName {
+			hostname := hostnames[strconv.FormatUint(node.GetId(), 10)]
+			givenName := fmt.Sprintf("%d-givenname", node.GetId())
+			if node.GetName() != hostname+"NEW" || node.GetGivenName() != givenName {
 				return false
 			}
 		}
@@ -980,28 +980,28 @@ func TestExpireNode(t *testing.T) {
 
 			// Assert that we have the original count - self
 			assert.Len(ct, status.Peers(), spec.NodesPerUser-1, "Client %s should see correct number of peers", client.Hostname())
-		}, integrationutil.StatusReadyTimeout, 1*time.Second)
+		}, integrationutil.ScaledTimeout(30*time.Second), 1*time.Second)
 	}
 
 	headscale, err := scenario.Headscale()
 	require.NoError(t, err)
 
 	// TODO(kradalby): This is Headscale specific and would not play nicely
-	// with other implementations of the [ControlServer] interface
+	// with other implementations of the ControlServer interface
 	result, err := headscale.Execute([]string{
 		"headscale", "nodes", "expire", "--identifier", "1", "--output", "json",
 	})
 	require.NoError(t, err)
 
-	var node clientv1.Node
+	var node v1.Node
 	err = json.Unmarshal([]byte(result), &node)
 	require.NoError(t, err)
 
 	var expiredNodeKey key.NodePublic
-	err = expiredNodeKey.UnmarshalText([]byte(node.NodeKey))
+	err = expiredNodeKey.UnmarshalText([]byte(node.GetNodeKey()))
 	require.NoError(t, err)
 
-	t.Logf("Node %s with node_key %s has been expired", node.Name, expiredNodeKey.String())
+	t.Logf("Node %s with node_key %s has been expired", node.GetName(), expiredNodeKey.String())
 
 	// Verify that the expired node has been marked in all peers list.
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
@@ -1009,7 +1009,7 @@ func TestExpireNode(t *testing.T) {
 			status, err := client.Status()
 			assert.NoError(ct, err)
 
-			if client.Hostname() != node.Name {
+			if client.Hostname() != node.GetName() {
 				// Check if the expired node appears as expired in this client's peer list
 				for key, peer := range status.Peer {
 					if key == expiredNodeKey {
@@ -1025,7 +1025,7 @@ func TestExpireNode(t *testing.T) {
 
 	// Verify that the expired node has been marked in all peers list.
 	for _, client := range allClients {
-		if client.Hostname() == node.Name {
+		if client.Hostname() == node.GetName() {
 			continue
 		}
 
@@ -1060,16 +1060,16 @@ func TestExpireNode(t *testing.T) {
 					peerStatus.Expired,
 				)
 
-				_, stderr, _ := client.Execute([]string{"tailscale", "ping", node.Name})
+				_, stderr, _ := client.Execute([]string{"tailscale", "ping", node.GetName()})
 				if !strings.Contains(stderr, "node key has expired") {
 					c.Errorf(
 						"expected to be unable to ping expired host %q from %q",
-						node.Name,
+						node.GetName(),
 						client.Hostname(),
 					)
 				}
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for expired node status to propagate")
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for expired node status to propagate")
 	}
 }
 
@@ -1111,19 +1111,19 @@ func TestSetNodeExpiryInFuture(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	var node clientv1.Node
+	var node v1.Node
 	err = json.Unmarshal([]byte(result), &node)
 	require.NoError(t, err)
 
-	require.True(t, node.Expiry.After(time.Now()))
-	require.WithinDuration(t, targetExpiry, *node.Expiry, 2*time.Second)
+	require.True(t, node.GetExpiry().AsTime().After(time.Now()))
+	require.WithinDuration(t, targetExpiry, node.GetExpiry().AsTime(), 2*time.Second)
 
 	var nodeKey key.NodePublic
-	err = nodeKey.UnmarshalText([]byte(node.NodeKey))
+	err = nodeKey.UnmarshalText([]byte(node.GetNodeKey()))
 	require.NoError(t, err)
 
 	for _, client := range allClients {
-		if client.Hostname() == node.Name {
+		if client.Hostname() == node.GetName() {
 			continue
 		}
 
@@ -1208,10 +1208,10 @@ func TestDisableNodeExpiry(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	var node clientv1.Node
+	var node v1.Node
 	err = json.Unmarshal([]byte(result), &node)
 	require.NoError(t, err)
-	require.NotNil(t, node.Expiry, "node should have an expiry set")
+	require.NotNil(t, node.GetExpiry(), "node should have an expiry set")
 
 	// Now disable the expiry.
 	result, err = headscale.Execute(
@@ -1224,23 +1224,23 @@ func TestDisableNodeExpiry(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	var nodeDisabled clientv1.Node
+	var nodeDisabled v1.Node
 	err = json.Unmarshal([]byte(result), &nodeDisabled)
 	require.NoError(t, err)
 
 	// Expiry should be nil (or zero time) when disabled.
-	if nodeDisabled.Expiry != nil {
-		require.True(t, nodeDisabled.Expiry.IsZero(),
+	if nodeDisabled.GetExpiry() != nil {
+		require.True(t, nodeDisabled.GetExpiry().AsTime().IsZero(),
 			"node expiry should be zero/nil after disabling")
 	}
 
 	var nodeKey key.NodePublic
-	err = nodeKey.UnmarshalText([]byte(nodeDisabled.NodeKey))
+	err = nodeKey.UnmarshalText([]byte(nodeDisabled.GetNodeKey()))
 	require.NoError(t, err)
 
 	// Verify peers see the node as not expired.
 	for _, client := range allClients {
-		if client.Hostname() == nodeDisabled.Name {
+		if client.Hostname() == nodeDisabled.GetName() {
 			continue
 		}
 
@@ -1307,7 +1307,7 @@ func TestNodeOnlineStatus(t *testing.T) {
 
 			// Assert that we have the original count - self
 			assert.Len(c, status.Peers(), len(MustTestVersions)-1)
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for expected peer count")
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for expected peer count")
 	}
 
 	headscale, err := scenario.Headscale()
@@ -1320,11 +1320,6 @@ func TestNodeOnlineStatus(t *testing.T) {
 
 	log.Printf("Starting online test from %v to %v", start, end)
 
-	// Pace the outer loop at one iteration per second so the
-	// continuous online-check does not hammer the docker daemon.
-	tick := time.NewTicker(time.Second)
-	defer tick.Stop()
-
 	for {
 		// Let the test run continuously for X minutes to verify
 		// all nodes stay connected and has the expected status over time.
@@ -1332,7 +1327,7 @@ func TestNodeOnlineStatus(t *testing.T) {
 			return
 		}
 
-		var nodes []*clientv1.Node
+		var nodes []*v1.Node
 		assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 			result, err := headscale.Execute([]string{
 				"headscale", "nodes", "list", "--output", "json",
@@ -1347,9 +1342,9 @@ func TestNodeOnlineStatus(t *testing.T) {
 				// All nodes should be online
 				assert.Truef(
 					ct,
-					node.Online,
+					node.GetOnline(),
 					"expected %s to have online status in Headscale, marked as offline %s after start",
-					node.Name,
+					node.GetName(),
 					time.Since(start),
 				)
 			}
@@ -1389,7 +1384,8 @@ func TestNodeOnlineStatus(t *testing.T) {
 			}, integrationutil.ScaledTimeout(15*time.Second), 1*time.Second)
 		}
 
-		<-tick.C
+		// Check maximum once per second
+		time.Sleep(time.Second)
 	}
 }
 
@@ -1537,7 +1533,7 @@ func Test2118DeletingOnlineNodePanics(t *testing.T) {
 	require.NoError(t, err)
 
 	// Test list all nodes after added otherUser
-	var nodeList []clientv1.Node
+	var nodeList []v1.Node
 	err = executeAndUnmarshal(
 		headscale,
 		[]string{
@@ -1551,8 +1547,8 @@ func Test2118DeletingOnlineNodePanics(t *testing.T) {
 	)
 	require.NoError(t, err)
 	assert.Len(t, nodeList, 2)
-	assert.True(t, nodeList[0].Online)
-	assert.True(t, nodeList[1].Online)
+	assert.True(t, nodeList[0].GetOnline())
+	assert.True(t, nodeList[1].GetOnline())
 
 	// Delete the first node, which is online
 	_, err = headscale.Execute(
@@ -1562,7 +1558,7 @@ func Test2118DeletingOnlineNodePanics(t *testing.T) {
 			"delete",
 			"--identifier",
 			// Delete the last added machine
-			nodeList[0].Id,
+			fmt.Sprintf("%d", nodeList[0].GetId()),
 			"--output",
 			"json",
 			"--force",
@@ -1571,7 +1567,7 @@ func Test2118DeletingOnlineNodePanics(t *testing.T) {
 	require.NoError(t, err)
 
 	// Ensure that the node has been deleted, this did not occur due to a panic.
-	var nodeListAfter []clientv1.Node
+	var nodeListAfter []v1.Node
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		err = executeAndUnmarshal(
 			headscale,
@@ -1601,6 +1597,6 @@ func Test2118DeletingOnlineNodePanics(t *testing.T) {
 	)
 	require.NoError(t, err)
 	assert.Len(t, nodeListAfter, 1)
-	assert.True(t, nodeListAfter[0].Online)
-	assert.Equal(t, nodeList[1].Id, nodeListAfter[0].Id)
+	assert.True(t, nodeListAfter[0].GetOnline())
+	assert.Equal(t, nodeList[1].GetId(), nodeListAfter[0].GetId())
 }
diff --git a/integration/grant_cap_test.go b/integration/grant_cap_test.go
index b3a897332..b81696ff3 100644
--- a/integration/grant_cap_test.go
+++ b/integration/grant_cap_test.go
@@ -17,8 +17,8 @@ import (
 	"tailscale.com/wgengine/filter"
 )
 
-// hasCapMatchInPacketFilter checks if any [filter.Match] entry in the packet
-// filter contains a [filter.CapMatch] with the given capability name.
+// hasCapMatchInPacketFilter checks if any Match entry in the packet
+// filter contains a CapMatch with the given capability name.
 func hasCapMatchInPacketFilter(pf []filter.Match, peerCap tailcfg.PeerCapability) bool {
 	for _, m := range pf {
 		for _, cm := range m.Caps {
@@ -31,7 +31,7 @@ func hasCapMatchInPacketFilter(pf []filter.Match, peerCap tailcfg.PeerCapability
 	return false
 }
 
-// hasCapMatchForIP checks if any [filter.CapMatch] with the given capability
+// hasCapMatchForIP checks if any CapMatch with the given capability
 // has a Dst prefix that contains the given IP. This validates that
 // the cap is directed at the correct node, not just present.
 func hasCapMatchForIP(pf []filter.Match, peerCap tailcfg.PeerCapability, ip netip.Addr) bool {
@@ -47,7 +47,7 @@ func hasCapMatchForIP(pf []filter.Match, peerCap tailcfg.PeerCapability, ip neti
 }
 
 // parsePeerRelay parses a PeerRelay string of the form "ip:port:vni:N"
-// and returns the [netip.AddrPort] and VNI. Returns zero values on parse failure.
+// and returns the address and VNI. Returns zero values on parse failure.
 func parsePeerRelay(pr string) (netip.AddrPort, string, bool) {
 	// Format: "172.18.0.4:58738:vni:1"
 	// Split into: host part "172.18.0.4:58738" and vni part "vni:1"
@@ -159,10 +159,10 @@ func TestGrantCapRelay(t *testing.T) {
 	defer func() { _, _, _ = relayR.Shutdown() }()
 
 	pakRelay, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["relay"].Id), false, false, []string{"tag:relay"},
+		userMap["relay"].GetId(), false, false, []string{"tag:relay"},
 	)
 	require.NoError(t, err)
-	err = relayR.Login(headscale.GetEndpoint(), pakRelay.Key)
+	err = relayR.Login(headscale.GetEndpoint(), pakRelay.GetKey())
 	require.NoError(t, err)
 	err = relayR.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -192,10 +192,10 @@ func TestGrantCapRelay(t *testing.T) {
 	defer func() { _, _, _ = clientA.Shutdown() }()
 
 	pakClientA, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["clienta"].Id), false, false, []string{"tag:client-a"},
+		userMap["clienta"].GetId(), false, false, []string{"tag:client-a"},
 	)
 	require.NoError(t, err)
-	err = clientA.Login(headscale.GetEndpoint(), pakClientA.Key)
+	err = clientA.Login(headscale.GetEndpoint(), pakClientA.GetKey())
 	require.NoError(t, err)
 	err = clientA.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -209,10 +209,10 @@ func TestGrantCapRelay(t *testing.T) {
 	defer func() { _, _, _ = clientB.Shutdown() }()
 
 	pakClientB, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["clientb"].Id), false, false, []string{"tag:client-b"},
+		userMap["clientb"].GetId(), false, false, []string{"tag:client-b"},
 	)
 	require.NoError(t, err)
-	err = clientB.Login(headscale.GetEndpoint(), pakClientB.Key)
+	err = clientB.Login(headscale.GetEndpoint(), pakClientB.GetKey())
 	require.NoError(t, err)
 	err = clientB.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -553,19 +553,6 @@ func TestGrantCapDrive(t *testing.T) {
 			policyv2.Tag("tag:ro-client"): policyv2.Owners{usernameOwner("roclient@")},
 			policyv2.Tag("tag:no-access"): policyv2.Owners{usernameOwner("noaccess@")},
 		},
-		// Taildrive caps (drive:share / drive:access) are policy-driven
-		// per https://tailscale.com/docs/features/taildrive; no longer
-		// emitted as TailNode baseline. Stamp on every node so the
-		// SelfNode.CapMap assertions below remain meaningful.
-		NodeAttrs: []policyv2.NodeAttrGrant{
-			{
-				Targets: policyv2.Aliases{policyv2.Wildcard},
-				Attrs: []tailcfg.NodeCapability{
-					tailcfg.NodeAttrsTaildriveShare,
-					tailcfg.NodeAttrsTaildriveAccess,
-				},
-			},
-		},
 		Grants: []policyv2.Grant{
 			// Grant 1: IP connectivity between ALL nodes.
 			{
@@ -637,10 +624,10 @@ func TestGrantCapDrive(t *testing.T) {
 	defer func() { _, _, _ = sharer.Shutdown() }()
 
 	pakSharer, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["sharer"].Id), false, false, []string{"tag:sharer"},
+		userMap["sharer"].GetId(), false, false, []string{"tag:sharer"},
 	)
 	require.NoError(t, err)
-	err = sharer.Login(headscale.GetEndpoint(), pakSharer.Key)
+	err = sharer.Login(headscale.GetEndpoint(), pakSharer.GetKey())
 	require.NoError(t, err)
 	err = sharer.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -654,10 +641,10 @@ func TestGrantCapDrive(t *testing.T) {
 	defer func() { _, _, _ = rwClient.Shutdown() }()
 
 	pakRW, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["rwclient"].Id), false, false, []string{"tag:rw-client"},
+		userMap["rwclient"].GetId(), false, false, []string{"tag:rw-client"},
 	)
 	require.NoError(t, err)
-	err = rwClient.Login(headscale.GetEndpoint(), pakRW.Key)
+	err = rwClient.Login(headscale.GetEndpoint(), pakRW.GetKey())
 	require.NoError(t, err)
 	err = rwClient.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -671,10 +658,10 @@ func TestGrantCapDrive(t *testing.T) {
 	defer func() { _, _, _ = roClient.Shutdown() }()
 
 	pakRO, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["roclient"].Id), false, false, []string{"tag:ro-client"},
+		userMap["roclient"].GetId(), false, false, []string{"tag:ro-client"},
 	)
 	require.NoError(t, err)
-	err = roClient.Login(headscale.GetEndpoint(), pakRO.Key)
+	err = roClient.Login(headscale.GetEndpoint(), pakRO.GetKey())
 	require.NoError(t, err)
 	err = roClient.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -688,10 +675,10 @@ func TestGrantCapDrive(t *testing.T) {
 	defer func() { _, _, _ = noAccess.Shutdown() }()
 
 	pakNA, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["noaccess"].Id), false, false, []string{"tag:no-access"},
+		userMap["noaccess"].GetId(), false, false, []string{"tag:no-access"},
 	)
 	require.NoError(t, err)
-	err = noAccess.Login(headscale.GetEndpoint(), pakNA.Key)
+	err = noAccess.Login(headscale.GetEndpoint(), pakNA.GetKey())
 	require.NoError(t, err)
 	err = noAccess.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
diff --git a/integration/helpers.go b/integration/helpers.go
index 908c7447b..f51f4703c 100644
--- a/integration/helpers.go
+++ b/integration/helpers.go
@@ -8,7 +8,6 @@ import (
 	"io"
 	"maps"
 	"net/netip"
-	"reflect"
 	"slices"
 	"strconv"
 	"strings"
@@ -18,7 +17,7 @@ import (
 
 	"github.com/cenkalti/backoff/v5"
 	"github.com/google/go-cmp/cmp"
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/util"
@@ -28,7 +27,6 @@ import (
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 	"tailscale.com/tailcfg"
-	"tailscale.com/wgengine/filter"
 )
 
 const (
@@ -55,15 +53,6 @@ const (
 	stateOffline = "offline"
 )
 
-// onlineLabel returns the log string for the given online state.
-func onlineLabel(online bool) string {
-	if online {
-		return stateOnline
-	}
-
-	return stateOffline
-}
-
 var errNoNewClientFound = errors.New("no new client found")
 
 // NodeSystemStatus represents the status of a node across different systems.
@@ -123,7 +112,7 @@ func requireNoErrLogout(t *testing.T, err error) {
 	require.NoError(t, err, "failed to log out tailscale nodes")
 }
 
-// collectExpectedNodeIDs extracts node IDs from a list of [TailscaleClient]s for validation purposes.
+// collectExpectedNodeIDs extracts node IDs from a list of TailscaleClients for validation purposes.
 func collectExpectedNodeIDs(t *testing.T, clients []TailscaleClient) []types.NodeID {
 	t.Helper()
 
@@ -140,7 +129,7 @@ func collectExpectedNodeIDs(t *testing.T, clients []TailscaleClient) []types.Nod
 }
 
 // validateInitialConnection performs comprehensive validation after initial client login.
-// Validates that all nodes are online and have proper [tailcfg.NetInfo]/DERP configuration,
+// Validates that all nodes are online and have proper NetInfo/DERP configuration,
 // essential for ensuring successful initial connection state in relogin tests.
 func validateInitialConnection(t *testing.T, headscale ControlServer, expectedNodes []types.NodeID) {
 	t.Helper()
@@ -159,7 +148,7 @@ func validateLogoutComplete(t *testing.T, headscale ControlServer, expectedNodes
 }
 
 // validateReloginComplete performs comprehensive validation after client relogin.
-// Validates that all nodes are back online with proper [tailcfg.NetInfo]/DERP configuration,
+// Validates that all nodes are back online with proper NetInfo/DERP configuration,
 // ensuring successful relogin state restoration in integration tests.
 func validateReloginComplete(t *testing.T, headscale ControlServer, expectedNodes []types.NodeID) {
 	t.Helper()
@@ -175,7 +164,10 @@ func requireAllClientsOnline(t *testing.T, headscale ControlServer, expectedNode
 
 	startTime := time.Now()
 
-	stateStr := onlineLabel(expectedOnline)
+	stateStr := stateOffline
+	if expectedOnline {
+		stateStr = stateOnline
+	}
 
 	t.Logf("requireAllSystemsOnline: Starting %s validation for %d nodes at %s - %s", stateStr, len(expectedNodes), startTime.Format(TimestampFormat), message)
 
@@ -199,8 +191,6 @@ func requireAllClientsOnlineWithSingleTimeout(t *testing.T, headscale ControlSer
 
 	var prevReport string
 
-	stateStr := onlineLabel(expectedOnline)
-
 	require.EventuallyWithT(t, func(c *assert.CollectT) {
 		// Get batcher state
 		debugInfo, err := headscale.DebugBatcher()
@@ -247,7 +237,7 @@ func requireAllClientsOnlineWithSingleTimeout(t *testing.T, headscale ControlSer
 
 		// Check batcher state for expected nodes
 		for _, nodeID := range expectedNodes {
-			nodeIDStr := nodeID.String()
+			nodeIDStr := fmt.Sprintf("%d", nodeID)
 			if nodeInfo, exists := debugInfo.ConnectedNodes[nodeIDStr]; exists {
 				if status, exists := nodeStatus[nodeID]; exists {
 					status.Batcher = nodeInfo.Connected
@@ -264,7 +254,7 @@ func requireAllClientsOnlineWithSingleTimeout(t *testing.T, headscale ControlSer
 			}
 		}
 
-		// Check map responses using [integrationutil.BuildExpectedOnlineMap]
+		// Check map responses using buildExpectedOnlineMap
 		onlineFromMaps := make(map[types.NodeID]bool)
 		onlineMap := integrationutil.BuildExpectedOnlineMap(mapResponses)
 
@@ -334,7 +324,8 @@ func requireAllClientsOnlineWithSingleTimeout(t *testing.T, headscale ControlSer
 
 		var failureReport strings.Builder
 
-		ids := types.NodeIDs(slices.Sorted(maps.Keys(nodeStatus)))
+		ids := types.NodeIDs(slices.AppendSeq(make([]types.NodeID, 0, len(nodeStatus)), maps.Keys(nodeStatus)))
+		slices.Sort(ids)
 
 		for _, nodeID := range ids {
 			status := nodeStatus[nodeID]
@@ -345,6 +336,11 @@ func requireAllClientsOnlineWithSingleTimeout(t *testing.T, headscale ControlSer
 			if !systemsMatch {
 				allMatch = false
 
+				stateStr := stateOffline
+				if expectedOnline {
+					stateStr = stateOnline
+				}
+
 				fmt.Fprintf(&failureReport, "node:%d is not fully %s (timestamp: %s):\n", nodeID, stateStr, time.Now().Format(TimestampFormat))
 				fmt.Fprintf(&failureReport, "  - batcher: %t (expected: %t)\n", status.Batcher, expectedOnline)
 				fmt.Fprintf(&failureReport, "    - conn count: %d\n", status.BatcherConnCount)
@@ -369,6 +365,11 @@ func requireAllClientsOnlineWithSingleTimeout(t *testing.T, headscale ControlSer
 			assert.Fail(c, failureReport.String())
 		}
 
+		stateStr := stateOffline
+		if expectedOnline {
+			stateStr = stateOnline
+		}
+
 		assert.True(c, allMatch, "Not all %d nodes are %s across all systems (batcher, mapresponses, nodestore)", len(expectedNodes), stateStr)
 	}, timeout, 2*time.Second, message)
 }
@@ -390,7 +391,7 @@ func requireAllClientsOfflineStaged(t *testing.T, headscale ControlServer, expec
 		allBatcherOffline := true
 
 		for _, nodeID := range expectedNodes {
-			nodeIDStr := nodeID.String()
+			nodeIDStr := fmt.Sprintf("%d", nodeID)
 			if nodeInfo, exists := debugInfo.ConnectedNodes[nodeIDStr]; exists && nodeInfo.Connected {
 				allBatcherOffline = false
 
@@ -472,9 +473,9 @@ func requireAllClientsOfflineStaged(t *testing.T, headscale ControlServer, expec
 	t.Logf("All stages completed: nodes are fully offline across all systems")
 }
 
-// requireAllClientsNetInfoAndDERP validates that all nodes have [tailcfg.NetInfo] in the database
-// and a valid DERP server based on the [tailcfg.NetInfo]. This function follows the pattern of
-// [requireAllClientsOnline] by using [hsic.HeadscaleInContainer.DebugNodeStore] to get the database state.
+// requireAllClientsNetInfoAndDERP validates that all nodes have NetInfo in the database
+// and a valid DERP server based on the NetInfo. This function follows the pattern of
+// requireAllClientsOnline by using hsic.DebugNodeStore to get the database state.
 //
 //nolint:unparam // timeout is configurable for flexibility even though callers currently use same value
 func requireAllClientsNetInfoAndDERP(t *testing.T, headscale ControlServer, expectedNodes []types.NodeID, message string, timeout time.Duration) {
@@ -507,7 +508,7 @@ func requireAllClientsNetInfoAndDERP(t *testing.T, headscale ControlServer, expe
 				continue
 			}
 
-			// Validate that the node has [tailcfg.Hostinfo]
+			// Validate that the node has Hostinfo
 			assert.NotNil(c, node.Hostinfo, "Node %d (%s) should have Hostinfo for NetInfo validation", nodeID, node.Hostname)
 
 			if node.Hostinfo == nil {
@@ -515,7 +516,7 @@ func requireAllClientsNetInfoAndDERP(t *testing.T, headscale ControlServer, expe
 				continue
 			}
 
-			// Validate that the node has [tailcfg.NetInfo]
+			// Validate that the node has NetInfo
 			assert.NotNil(c, node.Hostinfo.NetInfo, "Node %d (%s) should have NetInfo in Hostinfo for DERP connectivity", nodeID, node.Hostname)
 
 			if node.Hostinfo.NetInfo == nil {
@@ -538,79 +539,29 @@ func requireAllClientsNetInfoAndDERP(t *testing.T, headscale ControlServer, expe
 
 // assertLastSeenSet validates that a node has a non-nil LastSeen timestamp.
 // Critical for ensuring node activity tracking is functioning properly.
-func assertLastSeenSet(t *testing.T, node *clientv1.Node) {
+func assertLastSeenSet(t *testing.T, node *v1.Node) {
 	t.Helper()
 	assert.NotNil(t, node)
-	assert.NotNil(t, node.LastSeen)
+	assert.NotNil(t, node.GetLastSeen())
 }
 
-func assertLastSeenSetWithCollect(c *assert.CollectT, node *clientv1.Node) {
+func assertLastSeenSetWithCollect(c *assert.CollectT, node *v1.Node) {
 	assert.NotNil(c, node)
-	assert.NotNil(c, node.LastSeen)
+	assert.NotNil(c, node.GetLastSeen())
 }
 
 // assertCurlSuccessWithCollect asserts that a curl request succeeds with
-// non-empty content. For use inside [assert.EventuallyWithT] blocks.
+// non-empty content. For use inside EventuallyWithT blocks.
 func assertCurlSuccessWithCollect(c *assert.CollectT, client TailscaleClient, url, msg string) {
 	result, err := client.Curl(url)
 	assert.NoError(c, err, msg) //nolint:testifylint // CollectT requires assert, not require
 	assert.NotEmpty(c, result, msg)
 }
 
-// assertCurlDockerHostname curls url and asserts the body is the
-// 13-byte Docker auto-generated container hostname (12 hex chars +
-// trailing newline from /etc/hostname). For use inside [assert.EventuallyWithT].
-func assertCurlDockerHostname(c *assert.CollectT, client TailscaleClient, url, msg string) {
-	const dockerHostnameLen = 13
-
-	result, err := client.Curl(url)
-	assert.NoError(c, err, msg) //nolint:testifylint // CollectT requires assert, not require
-	assert.Len(c, result, dockerHostnameLen, msg)
-}
-
-// snapshotClientFilters snapshots each client's current netmap
-// PacketFilter keyed by hostname. Pair with [waitForClientFilterChange].
-func snapshotClientFilters(t *testing.T, clients []TailscaleClient) map[string][]filter.Match {
-	t.Helper()
-
-	out := make(map[string][]filter.Match, len(clients))
-
-	for _, c := range clients {
-		nm, err := c.Netmap()
-		require.NoError(t, err, "snapshot netmap for %s", c.Hostname())
-
-		out[c.Hostname()] = nm.PacketFilter
-	}
-
-	return out
-}
-
-// waitForClientFilterChange polls each client until its netmap
-// PacketFilter differs from baselines[Hostname]. Use after SetPolicy
-// to gate on client-side filter application before asserting
-// reachability.
-func waitForClientFilterChange(t *testing.T, clients []TailscaleClient, baselines map[string][]filter.Match, timeout time.Duration) {
-	t.Helper()
-
-	for _, client := range clients {
-		c := client
-		baseline := baselines[c.Hostname()]
-
-		assert.EventuallyWithT(t, func(ct *assert.CollectT) {
-			nm, err := c.Netmap()
-			if !assert.NoError(ct, err, "fetch netmap for %s", c.Hostname()) {
-				return
-			}
-
-			assert.False(ct, reflect.DeepEqual(baseline, nm.PacketFilter), "client %s PacketFilter unchanged since baseline", c.Hostname())
-		}, timeout, integrationutil.SlowPoll, "client %s PacketFilter should change after SetPolicy", c.Hostname())
-	}
-}
-
 // assertCurlFailWithCollect asserts that a curl request fails. Uses
-// [tsic.TailscaleInContainer.CurlFailFast] internally for aggressive timeouts, avoiding wasted
+// CurlFailFast internally for aggressive timeouts, avoiding wasted
 // time on retries when we expect the connection to be blocked.
-// For use inside [assert.EventuallyWithT] blocks.
+// For use inside EventuallyWithT blocks.
 func assertCurlFailWithCollect(c *assert.CollectT, client TailscaleClient, url, msg string) {
 	_, err := client.CurlFailFast(url)
 	assert.Error(c, err, msg)
@@ -632,7 +583,7 @@ func assertTailscaleNodesLogout(t assert.TestingT, clients []TailscaleClient) {
 }
 
 // assertPingAll verifies that every client can ping every address.
-// The entire ping matrix is retried via [assert.EventuallyWithT] to handle
+// The entire ping matrix is retried via EventuallyWithT to handle
 // transient failures on slow CI runners. The timeout scales with
 // the number of pings since they run serially and each can take
 // up to ~2s on CI (docker exec overhead + ping timeout).
@@ -647,8 +598,7 @@ func assertPingAll(t *testing.T, clients []TailscaleClient, addrs []string, opts
 	perPingBudget := 2 * time.Second
 	timeout := max(
 		// Floor at 30s for small matrices.
-		integrationutil.ScaledTimeout(time.Duration(pingCount)*perPingBudget*2), integrationutil.ScaledTimeout(30*time.Second),
-	)
+		integrationutil.ScaledTimeout(time.Duration(pingCount)*perPingBudget*2), integrationutil.ScaledTimeout(30*time.Second))
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertPingAllWithCollect(c, clients, addrs, opts...)
@@ -658,9 +608,9 @@ func assertPingAll(t *testing.T, clients []TailscaleClient, addrs []string, opts
 }
 
 // assertPingAllWithCollect pings every address from every client and
-// collects failures on the provided [assert.CollectT]. Pings run serially to
+// collects failures on the provided CollectT. Pings run serially to
 // avoid overloading the Docker daemon on resource-constrained CI
-// runners. For use inside [assert.EventuallyWithT] blocks when the caller
+// runners. For use inside EventuallyWithT blocks when the caller
 // needs custom timeout or retry control.
 func assertPingAllWithCollect(c *assert.CollectT, clients []TailscaleClient, addrs []string, opts ...tsic.PingOption) {
 	for _, client := range clients {
@@ -789,6 +739,7 @@ func assertValidNetmap(t *testing.T, client TailscaleClient) {
 		assert.Falsef(c, netmap.SelfNode.DiscoKey().IsZero(), "%q does not have a valid DiscoKey", client.Hostname())
 
 		for _, peer := range netmap.Peers {
+			assert.NotEqualf(c, "127.3.3.40:0", peer.LegacyDERPString(), "peer (%s) has no home DERP in %q's netmap, got: %s", peer.ComputedName(), client.Hostname(), peer.LegacyDERPString()) //nolint:staticcheck // SA1019: testing legacy field
 			assert.NotEqualf(c, 0, peer.HomeDERP(), "peer (%s) has no home DERP in %q's netmap, got: %d", peer.ComputedName(), client.Hostname(), peer.HomeDERP())
 
 			assert.Truef(c, peer.Hostinfo().Valid(), "peer (%s) of %q does not have Hostinfo", peer.ComputedName(), client.Hostname())
@@ -894,7 +845,7 @@ func assertValidNetcheck(t *testing.T, client TailscaleClient) {
 
 // assertCommandOutputContains executes a command with exponential backoff retry until the output
 // contains the expected string or timeout is reached (10 seconds).
-// This implements eventual consistency patterns and should be used instead of [time.Sleep]
+// This implements eventual consistency patterns and should be used instead of time.Sleep
 // before executing commands that depend on network state propagation.
 //
 // Timeout: 10 seconds with exponential backoff
@@ -979,43 +930,42 @@ func countMatchingLines(in io.Reader, predicate func(string) bool) (int, error)
 
 // wildcard returns a wildcard alias (*) for use in policy v2 configurations.
 // Provides a convenient helper for creating permissive policy rules.
-// Returns [policyv2.Wildcard].
 func wildcard() policyv2.Alias {
 	return policyv2.Wildcard
 }
 
-// usernamep returns a pointer to a [policyv2.Username] as an [policyv2.Alias] for policy v2 configurations.
+// usernamep returns a pointer to a Username as an Alias for policy v2 configurations.
 // Used in ACL rules to reference specific users in network access policies.
 func usernamep(name string) policyv2.Alias {
 	return new(policyv2.Username(name))
 }
 
-// hostp returns a pointer to a [policyv2.Host] as an [policyv2.Alias] for policy v2 configurations.
+// hostp returns a pointer to a Host as an Alias for policy v2 configurations.
 // Used in ACL rules to reference specific hosts in network access policies.
 func hostp(name string) policyv2.Alias {
 	return new(policyv2.Host(name))
 }
 
-// groupp returns a pointer to a [policyv2.Group] as an [policyv2.Alias] for policy v2 configurations.
+// groupp returns a pointer to a Group as an Alias for policy v2 configurations.
 // Used in ACL rules to reference user groups in network access policies.
 func groupp(name string) policyv2.Alias {
 	return new(policyv2.Group(name))
 }
 
-// tagp returns a pointer to a [policyv2.Tag] as an [policyv2.Alias] for policy v2 configurations.
+// tagp returns a pointer to a Tag as an Alias for policy v2 configurations.
 // Used in ACL rules to reference node tags in network access policies.
 func tagp(name string) policyv2.Alias {
 	return new(policyv2.Tag(name))
 }
 
-// prefixp returns a pointer to a [policyv2.Prefix] from a CIDR string for policy v2 configurations.
+// prefixp returns a pointer to a Prefix from a CIDR string for policy v2 configurations.
 // Converts CIDR notation to policy prefix format for network range specifications.
 func prefixp(cidr string) policyv2.Alias {
 	p := policyv2.Prefix(netip.MustParsePrefix(cidr))
 	return &p
 }
 
-// aliasWithPorts creates an [policyv2.AliasWithPorts] structure from an alias and port ranges.
+// aliasWithPorts creates an AliasWithPorts structure from an alias and port ranges.
 // Combines network targets with specific port restrictions for fine-grained
 // access control in policy v2 configurations.
 func aliasWithPorts(alias policyv2.Alias, ports ...tailcfg.PortRange) policyv2.AliasWithPorts {
@@ -1025,13 +975,13 @@ func aliasWithPorts(alias policyv2.Alias, ports ...tailcfg.PortRange) policyv2.A
 	}
 }
 
-// usernameOwner returns a [policyv2.Username] as an [policyv2.Owner] for use in [policyv2.TagOwners] policies.
+// usernameOwner returns a Username as an Owner for use in TagOwners policies.
 // Specifies which users can assign and manage specific tags in ACL configurations.
 func usernameOwner(name string) policyv2.Owner {
 	return new(policyv2.Username(name))
 }
 
-// groupOwner returns a [policyv2.Group] as an [policyv2.Owner] for use in [policyv2.TagOwners] policies.
+// groupOwner returns a Group as an Owner for use in TagOwners policies.
 // Specifies which groups can assign and manage specific tags in ACL configurations.
 //
 //nolint:unused
@@ -1039,25 +989,25 @@ func groupOwner(name string) policyv2.Owner {
 	return new(policyv2.Group(name))
 }
 
-// usernameApprover returns a [policyv2.Username] as an [policyv2.AutoApprover] for subnet route policies.
+// usernameApprover returns a Username as an AutoApprover for subnet route policies.
 // Specifies which users can automatically approve subnet route advertisements.
 func usernameApprover(name string) policyv2.AutoApprover {
 	return new(policyv2.Username(name))
 }
 
-// groupApprover returns a [policyv2.Group] as an [policyv2.AutoApprover] for subnet route policies.
+// groupApprover returns a Group as an AutoApprover for subnet route policies.
 // Specifies which groups can automatically approve subnet route advertisements.
 func groupApprover(name string) policyv2.AutoApprover {
 	return new(policyv2.Group(name))
 }
 
-// tagApprover returns a [policyv2.Tag] as an [policyv2.AutoApprover] for subnet route policies.
+// tagApprover returns a Tag as an AutoApprover for subnet route policies.
 // Specifies which tagged nodes can automatically approve subnet route advertisements.
 func tagApprover(name string) policyv2.AutoApprover {
 	return new(policyv2.Tag(name))
 }
 
-// oidcMockUser creates a [mockoidc.MockUser] for OIDC authentication testing.
+// oidcMockUser creates a MockUser for OIDC authentication testing.
 // Generates consistent test user data with configurable email verification status
 // for validating OIDC integration flows in headscale authentication tests.
 func oidcMockUser(username string, emailVerified bool) mockoidc.MockUser {
@@ -1071,14 +1021,14 @@ func oidcMockUser(username string, emailVerified bool) mockoidc.MockUser {
 
 // GetUserByName retrieves a user by name from the headscale server.
 // This is a common pattern used when creating preauth keys or managing users.
-func GetUserByName(headscale ControlServer, username string) (*clientv1.User, error) {
+func GetUserByName(headscale ControlServer, username string) (*v1.User, error) {
 	users, err := headscale.ListUsers()
 	if err != nil {
 		return nil, fmt.Errorf("listing users: %w", err)
 	}
 
 	for _, u := range users {
-		if u.Name == username {
+		if u.GetName() == username {
 			return u, nil
 		}
 	}
@@ -1088,7 +1038,7 @@ func GetUserByName(headscale ControlServer, username string) (*clientv1.User, er
 
 // findNode returns the first node in nodes for which match returns true,
 // or nil if no node matches.
-func findNode(nodes []*clientv1.Node, match func(*clientv1.Node) bool) *clientv1.Node {
+func findNode(nodes []*v1.Node, match func(*v1.Node) bool) *v1.Node {
 	for _, n := range nodes {
 		if match(n) {
 			return n
@@ -1098,19 +1048,6 @@ func findNode(nodes []*clientv1.Node, match func(*clientv1.Node) bool) *clientv1
 	return nil
 }
 
-// mustParseID parses a string ID emitted by the HTTP client types into a
-// uint64 for the APIs that still take numeric identifiers (NodeID, user and
-// key IDs). It panics on malformed input, which only happens if the server
-// emits a non-numeric ID — a bug worth failing the test loudly.
-func mustParseID(id string) uint64 {
-	parsed, err := strconv.ParseUint(id, 10, 64)
-	if err != nil {
-		panic(fmt.Sprintf("parsing id %q: %s", id, err))
-	}
-
-	return parsed
-}
-
 // FindNewClient finds a client that is in the new list but not in the original list.
 // This is useful when dynamically adding nodes during tests and needing to identify
 // which client was just added.
@@ -1190,13 +1127,13 @@ func (s *Scenario) AddAndLoginClient(
 		return nil, fmt.Errorf("getting user: %w", err)
 	}
 
-	authKey, err := s.CreatePreAuthKey(mustParseID(user.Id), true, false)
+	authKey, err := s.CreatePreAuthKey(user.GetId(), true, false)
 	if err != nil {
 		return nil, fmt.Errorf("creating preauth key: %w", err)
 	}
 
 	// Login the new client
-	err = newClient.Login(headscale.GetEndpoint(), authKey.Key)
+	err = newClient.Login(headscale.GetEndpoint(), authKey.GetKey())
 	if err != nil {
 		return nil, fmt.Errorf("logging in new client: %w", err)
 	}
@@ -1204,7 +1141,7 @@ func (s *Scenario) AddAndLoginClient(
 	return newClient, nil
 }
 
-// MustAddAndLoginClient is like [Scenario.AddAndLoginClient] but fails the test on error.
+// MustAddAndLoginClient is like AddAndLoginClient but fails the test on error.
 func (s *Scenario) MustAddAndLoginClient(
 	t *testing.T,
 	username string,
diff --git a/integration/hsic/config.go b/integration/hsic/config.go
index 02b5277a8..961c92f1b 100644
--- a/integration/hsic/config.go
+++ b/integration/hsic/config.go
@@ -32,14 +32,14 @@ func DefaultConfigEnv() map[string]string {
 
 		// Embedded DERP is the default for test isolation.
 		// Tests should not depend on external DERP infrastructure.
-		// Use [WithPublicDERP] to opt out for tests that explicitly
+		// Use WithPublicDERP() to opt out for tests that explicitly
 		// need public DERP relays.
 		"HEADSCALE_DERP_URLS":                    "",
 		"HEADSCALE_DERP_AUTO_UPDATE_ENABLED":     "false",
 		"HEADSCALE_DERP_UPDATE_FREQUENCY":        "1m",
 		"HEADSCALE_DERP_SERVER_ENABLED":          "true",
 		"HEADSCALE_DERP_SERVER_REGION_ID":        "999",
-		"HEADSCALE_DERP_SERVER_REGION_CODE":      binHeadscale,
+		"HEADSCALE_DERP_SERVER_REGION_CODE":      "headscale",
 		"HEADSCALE_DERP_SERVER_REGION_NAME":      "Headscale Embedded DERP",
 		"HEADSCALE_DERP_SERVER_STUN_LISTEN_ADDR": "0.0.0.0:3478",
 		"HEADSCALE_DERP_SERVER_PRIVATE_KEY_PATH": "/tmp/derp.key",
diff --git a/integration/hsic/hsic.go b/integration/hsic/hsic.go
index d37bac9af..2974998fa 100644
--- a/integration/hsic/hsic.go
+++ b/integration/hsic/hsic.go
@@ -6,7 +6,6 @@ import (
 	"cmp"
 	"context"
 	"crypto/tls"
-	"crypto/x509"
 	"encoding/json"
 	"errors"
 	"fmt"
@@ -19,14 +18,13 @@ import (
 	"os"
 	"path"
 	"path/filepath"
-	"slices"
+	"sort"
 	"strconv"
 	"strings"
 	"time"
 
 	"github.com/davecgh/go-spew/spew"
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	clientv2 "github.com/juanfont/headscale/gen/client/v2"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol"
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
@@ -38,7 +36,6 @@ import (
 	"gopkg.in/yaml.v3"
 	"tailscale.com/tailcfg"
 	"tailscale.com/util/mak"
-	"tailscale.com/util/rands"
 )
 
 const (
@@ -51,9 +48,6 @@ const (
 	headscaleDefaultPort          = 8080
 	IntegrationTestDockerFileName = "Dockerfile.integration"
 	defaultDirPerm                = 0o755
-	binHeadscale                  = "headscale"
-	flagOutput                    = "--output"
-	acceptJSON                    = "Accept: application/json"
 )
 
 var (
@@ -100,8 +94,8 @@ type HeadscaleInContainer struct {
 // Headscale instance.
 type Option = func(c *HeadscaleInContainer)
 
-// WithACLPolicy adds a [policyv2.Policy] to the
-// [HeadscaleInContainer] instance.
+// WithACLPolicy adds a hscontrol.ACLPolicy policy to the
+// HeadscaleInContainer instance.
 func WithACLPolicy(acl *policyv2.Policy) Option {
 	return func(hsic *HeadscaleInContainer) {
 		if acl == nil {
@@ -133,7 +127,7 @@ func WithoutTLS() Option {
 
 // WithCustomTLS uses the given certificates for the Headscale instance.
 // The caCert is installed into the container's trust store and returned
-// by [HeadscaleInContainer.GetCert] so that clients can trust this server.
+// by GetCert() so that clients can trust this server.
 func WithCustomTLS(caCert, cert, key []byte) Option {
 	return func(hsic *HeadscaleInContainer) {
 		hsic.tlsCACert = caCert
@@ -175,7 +169,7 @@ func WithHostPortBindings(bindings map[string][]string) Option {
 // in the Docker container name.
 func WithTestName(testName string) Option {
 	return func(hsic *HeadscaleInContainer) {
-		hash := rands.HexString(hsicHashLength)
+		hash, _ := util.GenerateRandomStringDNSSafe(hsicHashLength)
 
 		hostname := fmt.Sprintf("hs-%s-%s", testName, hash)
 		hsic.hostname = hostname
@@ -326,7 +320,7 @@ func (hsic *HeadscaleInContainer) buildEntrypoint() []string {
 	return []string{"/bin/bash", "-c", strings.Join(commands, " ; ")}
 }
 
-// New returns a new [HeadscaleInContainer] instance.
+// New returns a new HeadscaleInContainer instance.
 //
 //nolint:gocyclo // complex container setup with many options
 func New(
@@ -334,7 +328,10 @@ func New(
 	networks []*dockertest.Network,
 	opts ...Option,
 ) (*HeadscaleInContainer, error) {
-	hash := rands.HexString(hsicHashLength)
+	hash, err := util.GenerateRandomStringDNSSafe(hsicHashLength)
+	if err != nil {
+		return nil, err
+	}
 
 	// Include run ID in hostname for easier identification of which test run owns this container
 	runID := dockertestutil.GetIntegrationRunID()
@@ -367,8 +364,8 @@ func New(
 
 	// TLS is enabled by default for all integration tests.
 	// Generate a self-signed certificate if TLS was not explicitly
-	// disabled via [WithoutTLS] and no custom cert was provided
-	// via [WithCustomTLS].
+	// disabled via WithoutTLS() and no custom cert was provided
+	// via WithCustomTLS().
 	if !hsic.noTLS && len(hsic.tlsCert) == 0 {
 		caCert, cert, key, err := integrationutil.CreateCertificate(hsic.hostname)
 		if err != nil {
@@ -397,9 +394,9 @@ func New(
 	if hsic.postgres {
 		hsic.env["HEADSCALE_DATABASE_TYPE"] = "postgres"
 		hsic.env["HEADSCALE_DATABASE_POSTGRES_HOST"] = "postgres-" + hash
-		hsic.env["HEADSCALE_DATABASE_POSTGRES_USER"] = binHeadscale
-		hsic.env["HEADSCALE_DATABASE_POSTGRES_PASS"] = binHeadscale
-		hsic.env["HEADSCALE_DATABASE_POSTGRES_NAME"] = binHeadscale
+		hsic.env["HEADSCALE_DATABASE_POSTGRES_USER"] = "headscale"
+		hsic.env["HEADSCALE_DATABASE_POSTGRES_PASS"] = "headscale"
+		hsic.env["HEADSCALE_DATABASE_POSTGRES_NAME"] = "headscale"
 		delete(hsic.env, "HEADSCALE_DATABASE_SQLITE_PATH")
 
 		// Determine postgres image - use prebuilt if available, otherwise pull from registry
@@ -490,8 +487,7 @@ func New(
 			for _, hostPort := range hostPorts {
 				runOptions.PortBindings[docker.Port(port)] = append(
 					runOptions.PortBindings[docker.Port(port)],
-					docker.PortBinding{HostPort: hostPort},
-				)
+					docker.PortBinding{HostPort: hostPort})
 			}
 		}
 	}
@@ -499,13 +495,13 @@ func New(
 	// dockertest isn't very good at handling containers that has already
 	// been created, this is an attempt to make sure this container isn't
 	// present.
-	err := pool.RemoveContainerByName(hsic.hostname)
+	err = pool.RemoveContainerByName(hsic.hostname)
 	if err != nil {
 		return nil, err
 	}
 
 	// Add integration test labels if running under hi tool
-	dockertestutil.DockerAddIntegrationLabels(runOptions, binHeadscale)
+	dockertestutil.DockerAddIntegrationLabels(runOptions, "headscale")
 
 	var container *dockertest.Resource
 
@@ -513,7 +509,7 @@ func New(
 	prebuiltImage := os.Getenv("HEADSCALE_INTEGRATION_HEADSCALE_IMAGE")
 
 	if prebuiltImage != "" {
-		log.Printf("Using pre-built headscale image: %s", prebuiltImage) //nolint:gosec // G706: integration-only log of trusted env value
+		log.Printf("Using pre-built headscale image: %s", prebuiltImage)
 		// Parse image into repository and tag
 		repo, tag, ok := strings.Cut(prebuiltImage, ":")
 		if !ok {
@@ -713,7 +709,7 @@ func (t *HeadscaleInContainer) Shutdown() (string, string, error) {
 }
 
 // WriteLogs writes the current stdout/stderr log of the container to
-// the given [io.Writer]s.
+// the given io.Writers.
 func (t *HeadscaleInContainer) WriteLogs(stdout, stderr io.Writer) error {
 	return dockertestutil.WriteLog(t.pool, t.container, stdout, stderr)
 }
@@ -1014,101 +1010,17 @@ func (t *HeadscaleInContainer) GetHostMetricsPort() string {
 	return t.hostMetricsPort
 }
 
-// GetHealthEndpoint returns a health endpoint for the [HeadscaleInContainer]
+// GetHealthEndpoint returns a health endpoint for the HeadscaleInContainer
 // instance.
 func (t *HeadscaleInContainer) GetHealthEndpoint() string {
 	return t.GetEndpoint() + "/health"
 }
 
-// GetEndpoint returns the Headscale endpoint for the [HeadscaleInContainer].
+// GetEndpoint returns the Headscale endpoint for the HeadscaleInContainer.
 func (t *HeadscaleInContainer) GetEndpoint() string {
 	return t.getEndpoint(false)
 }
 
-var errOAuthSecretMissing = errors.New(`OAuth client response missing secret in "key" field`)
-
-// CreateOAuthClient mints an admin API key and uses it to create an OAuth client
-// via the v2 keys HTTP API (POST /api/v2/tailnet/-/keys, keyType=client),
-// returning the client id and secret. The secret is only returned once, in the
-// "key" field. It is a reusable building block for tests that need OAuth client
-// credentials (such as the Kubernetes operator).
-func (t *HeadscaleInContainer) CreateOAuthClient(
-	ctx context.Context,
-	scopes, tags []string,
-) (string, string, error) {
-	apiKey, err := t.Execute([]string{"headscale", "apikeys", "create", "--expiration", "24h"})
-	if err != nil {
-		return "", "", fmt.Errorf("creating admin api key: %w", err)
-	}
-
-	apiKey = strings.TrimSpace(apiKey)
-
-	client, err := clientv2.NewClientWithResponses(
-		t.GetEndpoint(),
-		clientv2.WithHTTPClient(t.httpClient()),
-		clientv2.WithRequestEditorFn(func(_ context.Context, req *http.Request) error {
-			req.Header.Set("Authorization", "Bearer "+apiKey)
-
-			return nil
-		}),
-	)
-	if err != nil {
-		return "", "", fmt.Errorf("building v2 API client: %w", err)
-	}
-
-	keyType := "client"
-
-	resp, err := client.CreateKeyWithResponse(ctx, "-", clientv2.CreateKeyRequest{
-		KeyType: &keyType,
-		Scopes:  &scopes,
-		Tags:    &tags,
-	})
-	if err != nil {
-		return "", "", fmt.Errorf("creating OAuth client: %w", err)
-	}
-
-	if resp.JSON200 == nil {
-		return "", "", fmt.Errorf( //nolint:err113
-			"creating OAuth client: status %s: %s", resp.Status(), strings.TrimSpace(string(resp.Body)))
-	}
-
-	if resp.JSON200.Key == nil || *resp.JSON200.Key == "" {
-		return "", "", errOAuthSecretMissing
-	}
-
-	// The operator expects clientId and clientSecret as separate values. When the
-	// server returns a single opaque credential, the client-credentials grant
-	// splits it on "-" (id-secret), matching the Tailscale SaaS shape. Fall back
-	// to the whole key as the secret when no id is given.
-	clientID, clientSecret := resp.JSON200.Id, *resp.JSON200.Key
-
-	if clientID == "" {
-		if id, secret, ok := strings.Cut(*resp.JSON200.Key, "-"); ok {
-			clientID, clientSecret = id, secret
-		}
-	}
-
-	return clientID, clientSecret, nil
-}
-
-// httpClient returns an HTTP client that trusts this Headscale's TLS CA when TLS
-// is enabled, or a default client when it serves plain HTTP.
-func (t *HeadscaleInContainer) httpClient() *http.Client {
-	if !t.hasTLS() {
-		return &http.Client{Timeout: 30 * time.Second}
-	}
-
-	pool := x509.NewCertPool()
-	pool.AppendCertsFromPEM(t.tlsCACert)
-
-	return &http.Client{
-		Timeout: 30 * time.Second,
-		Transport: &http.Transport{
-			TLSClientConfig: &tls.Config{RootCAs: pool, MinVersion: tls.VersionTLS12},
-		},
-	}
-}
-
 // GetIPEndpoint returns the Headscale endpoint using IP address instead of hostname.
 func (t *HeadscaleInContainer) GetIPEndpoint() string {
 	return t.getEndpoint(true)
@@ -1139,12 +1051,12 @@ func (t *HeadscaleInContainer) GetCert() []byte {
 	return t.tlsCACert
 }
 
-// GetHostname returns the hostname of the [HeadscaleInContainer].
+// GetHostname returns the hostname of the HeadscaleInContainer.
 func (t *HeadscaleInContainer) GetHostname() string {
 	return t.hostname
 }
 
-// GetIPInNetwork returns the IP address of the [HeadscaleInContainer] in the given network.
+// GetIPInNetwork returns the IP address of the HeadscaleInContainer in the given network.
 func (t *HeadscaleInContainer) GetIPInNetwork(network *dockertest.Network) string {
 	return t.container.GetIPInNetwork(network)
 }
@@ -1181,14 +1093,14 @@ func (t *HeadscaleInContainer) WaitForRunning() error {
 // CreateUser adds a new user to the Headscale instance.
 func (t *HeadscaleInContainer) CreateUser(
 	user string,
-) (*clientv1.User, error) {
+) (*v1.User, error) {
 	command := []string{
-		binHeadscale,
+		"headscale",
 		"users",
 		"create",
 		user,
 		fmt.Sprintf("--email=%s@test.no", user),
-		flagOutput,
+		"--output",
 		"json",
 	}
 
@@ -1201,7 +1113,7 @@ func (t *HeadscaleInContainer) CreateUser(
 		return nil, err
 	}
 
-	var u clientv1.User
+	var u v1.User
 
 	err = json.Unmarshal([]byte(result), &u)
 	if err != nil {
@@ -1226,9 +1138,9 @@ type AuthKeyOptions struct {
 
 // CreateAuthKeyWithOptions creates a new "authorisation key" with the specified options.
 // This supports both user-owned and tags-only auth keys.
-func (t *HeadscaleInContainer) CreateAuthKeyWithOptions(opts AuthKeyOptions) (*clientv1.PreAuthKey, error) {
+func (t *HeadscaleInContainer) CreateAuthKeyWithOptions(opts AuthKeyOptions) (*v1.PreAuthKey, error) {
 	command := []string{
-		binHeadscale,
+		"headscale",
 	}
 
 	// Only add --user flag if User is specified
@@ -1236,13 +1148,12 @@ func (t *HeadscaleInContainer) CreateAuthKeyWithOptions(opts AuthKeyOptions) (*c
 		command = append(command, "--user", strconv.FormatUint(*opts.User, 10))
 	}
 
-	command = append(
-		command,
+	command = append(command,
 		"preauthkeys",
 		"create",
 		"--expiration",
 		"24h",
-		flagOutput,
+		"--output",
 		"json",
 	)
 
@@ -1267,7 +1178,7 @@ func (t *HeadscaleInContainer) CreateAuthKeyWithOptions(opts AuthKeyOptions) (*c
 		return nil, fmt.Errorf("executing create auth key command: %w", err)
 	}
 
-	var preAuthKey clientv1.PreAuthKey
+	var preAuthKey v1.PreAuthKey
 
 	err = json.Unmarshal([]byte(result), &preAuthKey)
 	if err != nil {
@@ -1278,12 +1189,12 @@ func (t *HeadscaleInContainer) CreateAuthKeyWithOptions(opts AuthKeyOptions) (*c
 }
 
 // CreateAuthKey creates a new "authorisation key" for a User that can be used
-// to authorise a TailscaleClient with the [HeadscaleInContainer] instance.
+// to authorise a TailscaleClient with the Headscale instance.
 func (t *HeadscaleInContainer) CreateAuthKey(
 	user uint64,
 	reusable bool,
 	ephemeral bool,
-) (*clientv1.PreAuthKey, error) {
+) (*v1.PreAuthKey, error) {
 	return t.CreateAuthKeyWithOptions(AuthKeyOptions{
 		User:      &user,
 		Reusable:  reusable,
@@ -1298,7 +1209,7 @@ func (t *HeadscaleInContainer) CreateAuthKeyWithTags(
 	reusable bool,
 	ephemeral bool,
 	tags []string,
-) (*clientv1.PreAuthKey, error) {
+) (*v1.PreAuthKey, error) {
 	return t.CreateAuthKeyWithOptions(AuthKeyOptions{
 		User:      &user,
 		Reusable:  reusable,
@@ -1312,12 +1223,12 @@ func (t *HeadscaleInContainer) DeleteAuthKey(
 	id uint64,
 ) error {
 	command := []string{
-		binHeadscale,
+		"headscale",
 		"preauthkeys",
 		"delete",
 		"--id",
 		strconv.FormatUint(id, 10),
-		flagOutput,
+		"--output",
 		"json",
 	}
 
@@ -1338,8 +1249,8 @@ func (t *HeadscaleInContainer) DeleteAuthKey(
 // specific users.
 func (t *HeadscaleInContainer) ListNodes(
 	users ...string,
-) ([]*clientv1.Node, error) {
-	var ret []*clientv1.Node
+) ([]*v1.Node, error) {
+	var ret []*v1.Node
 
 	execUnmarshal := func(command []string) error {
 		result, _, err := dockertestutil.ExecuteCommand(
@@ -1351,7 +1262,7 @@ func (t *HeadscaleInContainer) ListNodes(
 			return fmt.Errorf("executing list node command: %w", err)
 		}
 
-		var nodes []*clientv1.Node
+		var nodes []*v1.Node
 
 		err = json.Unmarshal([]byte(result), &nodes)
 		if err != nil {
@@ -1364,13 +1275,13 @@ func (t *HeadscaleInContainer) ListNodes(
 	}
 
 	if len(users) == 0 {
-		err := execUnmarshal([]string{binHeadscale, "nodes", "list", flagOutput, "json"})
+		err := execUnmarshal([]string{"headscale", "nodes", "list", "--output", "json"})
 		if err != nil {
 			return nil, err
 		}
 	} else {
 		for _, user := range users {
-			command := []string{binHeadscale, "--user", user, "nodes", "list", flagOutput, "json"}
+			command := []string{"headscale", "--user", user, "nodes", "list", "--output", "json"}
 
 			err := execUnmarshal(command)
 			if err != nil {
@@ -1379,11 +1290,8 @@ func (t *HeadscaleInContainer) ListNodes(
 		}
 	}
 
-	slices.SortFunc(ret, func(a, b *clientv1.Node) int {
-		ai, _ := strconv.ParseUint(a.Id, 10, 64)
-		bi, _ := strconv.ParseUint(b.Id, 10, 64)
-
-		return cmp.Compare(ai, bi)
+	sort.Slice(ret, func(i, j int) bool {
+		return cmp.Compare(ret[i].GetId(), ret[j].GetId()) == -1
 	})
 
 	return ret, nil
@@ -1391,12 +1299,12 @@ func (t *HeadscaleInContainer) ListNodes(
 
 func (t *HeadscaleInContainer) DeleteNode(nodeID uint64) error {
 	command := []string{
-		binHeadscale,
+		"headscale",
 		"nodes",
 		"delete",
 		"--identifier",
 		strconv.FormatUint(nodeID, 10),
-		flagOutput,
+		"--output",
 		"json",
 		"--force",
 	}
@@ -1413,39 +1321,41 @@ func (t *HeadscaleInContainer) DeleteNode(nodeID uint64) error {
 	return nil
 }
 
-func (t *HeadscaleInContainer) NodesByUser() (map[string][]*clientv1.Node, error) {
+func (t *HeadscaleInContainer) NodesByUser() (map[string][]*v1.Node, error) {
 	nodes, err := t.ListNodes()
 	if err != nil {
 		return nil, err
 	}
 
-	userMap := make(map[string][]*clientv1.Node)
-
+	var userMap map[string][]*v1.Node
 	for _, node := range nodes {
-		name := node.User.Name
-		userMap[name] = append(userMap[name], node)
+		if _, ok := userMap[node.GetUser().GetName()]; !ok {
+			mak.Set(&userMap, node.GetUser().GetName(), []*v1.Node{node})
+		} else {
+			userMap[node.GetUser().GetName()] = append(userMap[node.GetUser().GetName()], node)
+		}
 	}
 
 	return userMap, nil
 }
 
-func (t *HeadscaleInContainer) NodesByName() (map[string]*clientv1.Node, error) {
+func (t *HeadscaleInContainer) NodesByName() (map[string]*v1.Node, error) {
 	nodes, err := t.ListNodes()
 	if err != nil {
 		return nil, err
 	}
 
-	var nameMap map[string]*clientv1.Node
+	var nameMap map[string]*v1.Node
 	for _, node := range nodes {
-		mak.Set(&nameMap, node.Name, node)
+		mak.Set(&nameMap, node.GetName(), node)
 	}
 
 	return nameMap, nil
 }
 
 // ListUsers returns a list of users from Headscale.
-func (t *HeadscaleInContainer) ListUsers() ([]*clientv1.User, error) {
-	command := []string{binHeadscale, "users", "list", flagOutput, "json"}
+func (t *HeadscaleInContainer) ListUsers() ([]*v1.User, error) {
+	command := []string{"headscale", "users", "list", "--output", "json"}
 
 	result, _, err := dockertestutil.ExecuteCommand(
 		t.container,
@@ -1456,7 +1366,7 @@ func (t *HeadscaleInContainer) ListUsers() ([]*clientv1.User, error) {
 		return nil, fmt.Errorf("executing list node command: %w", err)
 	}
 
-	var users []*clientv1.User
+	var users []*v1.User
 
 	err = json.Unmarshal([]byte(result), &users)
 	if err != nil {
@@ -1468,15 +1378,15 @@ func (t *HeadscaleInContainer) ListUsers() ([]*clientv1.User, error) {
 
 // MapUsers returns a map of users from Headscale. It is keyed by the
 // user name.
-func (t *HeadscaleInContainer) MapUsers() (map[string]*clientv1.User, error) {
+func (t *HeadscaleInContainer) MapUsers() (map[string]*v1.User, error) {
 	users, err := t.ListUsers()
 	if err != nil {
 		return nil, err
 	}
 
-	var userMap map[string]*clientv1.User
+	var userMap map[string]*v1.User
 	for _, user := range users {
-		mak.Set(&userMap, user.Name, user)
+		mak.Set(&userMap, user.GetName(), user)
 	}
 
 	return userMap, nil
@@ -1485,13 +1395,13 @@ func (t *HeadscaleInContainer) MapUsers() (map[string]*clientv1.User, error) {
 // DeleteUser deletes a user from the Headscale instance.
 func (t *HeadscaleInContainer) DeleteUser(userID uint64) error {
 	command := []string{
-		binHeadscale,
+		"headscale",
 		"users",
 		"delete",
 		"--identifier",
 		strconv.FormatUint(userID, 10),
 		"--force",
-		flagOutput,
+		"--output",
 		"json",
 	}
 
@@ -1534,7 +1444,7 @@ func (h *HeadscaleInContainer) SetPolicy(pol *policyv2.Policy) error {
 func (h *HeadscaleInContainer) reloadDatabasePolicy() error {
 	_, err := h.Execute(
 		[]string{
-			binHeadscale,
+			"headscale",
 			"policy",
 			"set",
 			"-f",
@@ -1566,7 +1476,7 @@ func (h *HeadscaleInContainer) PID() (int, error) {
 	// Use pidof to find the headscale process, which is more reliable than grep
 	// as it only looks for the actual binary name, not processes that contain
 	// "headscale" in their command line (like the dlv debugger).
-	output, err := h.Execute([]string{"pidof", binHeadscale})
+	output, err := h.Execute([]string{"pidof", "headscale"})
 	if err != nil {
 		// pidof returns exit code 1 when no process is found
 		return 0, os.ErrNotExist
@@ -1620,25 +1530,11 @@ func (h *HeadscaleInContainer) Reload() error {
 	return nil
 }
 
-// Restart restarts the headscale container. The on-disk database and keys
-// persist across the restart, but all in-memory state is dropped — including
-// the bounded cache of pending authentication sessions. This reproduces a
-// control-plane restart, one of the real-world cases where a pending SSH-check
-// auth session is lost.
-func (h *HeadscaleInContainer) Restart() error {
-	err := h.pool.Client.RestartContainer(h.container.Container.ID, 30)
-	if err != nil {
-		return fmt.Errorf("restarting headscale container %s: %w", h.hostname, err)
-	}
-
-	return h.WaitForRunning()
-}
-
 // ApproveRoutes approves routes for a node.
-func (t *HeadscaleInContainer) ApproveRoutes(id uint64, routes []netip.Prefix) (*clientv1.Node, error) {
+func (t *HeadscaleInContainer) ApproveRoutes(id uint64, routes []netip.Prefix) (*v1.Node, error) {
 	command := []string{
-		binHeadscale, "nodes", "approve-routes",
-		flagOutput, "json",
+		"headscale", "nodes", "approve-routes",
+		"--output", "json",
 		"--identifier", strconv.FormatUint(id, 10),
 		"--routes=" + strings.Join(util.PrefixesToString(routes), ","),
 	}
@@ -1657,7 +1553,7 @@ func (t *HeadscaleInContainer) ApproveRoutes(id uint64, routes []netip.Prefix) (
 		)
 	}
 
-	var node *clientv1.Node
+	var node *v1.Node
 
 	err = json.Unmarshal([]byte(result), &node)
 	if err != nil {
@@ -1672,9 +1568,9 @@ func (t *HeadscaleInContainer) ApproveRoutes(id uint64, routes []netip.Prefix) (
 // SetTags API which is exposed via the CLI command: headscale nodes tag -i <id> -t <tags>.
 func (t *HeadscaleInContainer) SetNodeTags(nodeID uint64, tags []string) error {
 	command := []string{
-		binHeadscale, "nodes", "tag",
+		"headscale", "nodes", "tag",
 		"--identifier", strconv.FormatUint(nodeID, 10),
-		flagOutput, "json",
+		"--output", "json",
 	}
 
 	// Add tags - the CLI expects -t flag for each tag or comma-separated
@@ -1709,7 +1605,7 @@ func (t *HeadscaleInContainer) FetchPath(path string) ([]byte, error) {
 }
 
 func (t *HeadscaleInContainer) SendInterrupt() error {
-	pid, err := t.Execute([]string{"pidof", binHeadscale})
+	pid, err := t.Execute([]string{"pidof", "headscale"})
 	if err != nil {
 		return err
 	}
@@ -1723,50 +1619,104 @@ func (t *HeadscaleInContainer) SendInterrupt() error {
 }
 
 func (t *HeadscaleInContainer) GetAllMapReponses() (map[types.NodeID][]tailcfg.MapResponse, error) {
-	return debugJSON[map[types.NodeID][]tailcfg.MapResponse](t, "mapresponses")
-}
-
-// PrimaryRoutes fetches the primary routes from the debug endpoint.
-func (t *HeadscaleInContainer) PrimaryRoutes() (*types.DebugRoutes, error) {
-	return debugJSON[*types.DebugRoutes](t, "routes")
-}
-
-// DebugBatcher fetches the batcher debug information from the debug endpoint.
-func (t *HeadscaleInContainer) DebugBatcher() (*hscontrol.DebugBatcherInfo, error) {
-	return debugJSON[*hscontrol.DebugBatcherInfo](t, "batcher")
-}
-
-// DebugNodeStore fetches the [state.NodeStore] data from the debug endpoint.
-func (t *HeadscaleInContainer) DebugNodeStore() (map[types.NodeID]types.Node, error) {
-	return debugJSON[map[types.NodeID]types.Node](t, "nodestore")
-}
-
-// DebugFilter fetches the current filter rules from the debug endpoint.
-func (t *HeadscaleInContainer) DebugFilter() ([]tailcfg.FilterRule, error) {
-	return debugJSON[[]tailcfg.FilterRule](t, "filter")
-}
-
-// debugJSON fetches and decodes a JSON-returning debug endpoint by name.
-func debugJSON[T any](t *HeadscaleInContainer, endpoint string) (T, error) {
-	var res T
-
 	// Execute curl inside the container to access the debug endpoint locally
 	command := []string{
-		"curl", "-s", "-H", acceptJSON, "http://localhost:9090/debug/" + endpoint,
+		"curl", "-s", "-H", "Accept: application/json", "http://localhost:9090/debug/mapresponses",
 	}
 
 	result, err := t.Execute(command)
 	if err != nil {
-		return res, fmt.Errorf("fetching %s from debug endpoint: %w", endpoint, err)
+		return nil, fmt.Errorf("fetching mapresponses from debug endpoint: %w", err)
 	}
 
+	var res map[types.NodeID][]tailcfg.MapResponse
 	if err := json.Unmarshal([]byte(result), &res); err != nil { //nolint:noinlineerr
-		return res, fmt.Errorf("decoding %s response: %w", endpoint, err)
+		return nil, fmt.Errorf("decoding routes response: %w", err)
 	}
 
 	return res, nil
 }
 
+// PrimaryRoutes fetches the primary routes from the debug endpoint.
+func (t *HeadscaleInContainer) PrimaryRoutes() (*types.DebugRoutes, error) {
+	// Execute curl inside the container to access the debug endpoint locally
+	command := []string{
+		"curl", "-s", "-H", "Accept: application/json", "http://localhost:9090/debug/routes",
+	}
+
+	result, err := t.Execute(command)
+	if err != nil {
+		return nil, fmt.Errorf("fetching routes from debug endpoint: %w", err)
+	}
+
+	var debugRoutes types.DebugRoutes
+	if err := json.Unmarshal([]byte(result), &debugRoutes); err != nil { //nolint:noinlineerr
+		return nil, fmt.Errorf("decoding routes response: %w", err)
+	}
+
+	return &debugRoutes, nil
+}
+
+// DebugBatcher fetches the batcher debug information from the debug endpoint.
+func (t *HeadscaleInContainer) DebugBatcher() (*hscontrol.DebugBatcherInfo, error) {
+	// Execute curl inside the container to access the debug endpoint locally
+	command := []string{
+		"curl", "-s", "-H", "Accept: application/json", "http://localhost:9090/debug/batcher",
+	}
+
+	result, err := t.Execute(command)
+	if err != nil {
+		return nil, fmt.Errorf("fetching batcher debug info: %w", err)
+	}
+
+	var debugInfo hscontrol.DebugBatcherInfo
+	if err := json.Unmarshal([]byte(result), &debugInfo); err != nil { //nolint:noinlineerr
+		return nil, fmt.Errorf("decoding batcher debug response: %w", err)
+	}
+
+	return &debugInfo, nil
+}
+
+// DebugNodeStore fetches the NodeStore data from the debug endpoint.
+func (t *HeadscaleInContainer) DebugNodeStore() (map[types.NodeID]types.Node, error) {
+	// Execute curl inside the container to access the debug endpoint locally
+	command := []string{
+		"curl", "-s", "-H", "Accept: application/json", "http://localhost:9090/debug/nodestore",
+	}
+
+	result, err := t.Execute(command)
+	if err != nil {
+		return nil, fmt.Errorf("fetching nodestore debug info: %w", err)
+	}
+
+	var nodeStore map[types.NodeID]types.Node
+	if err := json.Unmarshal([]byte(result), &nodeStore); err != nil { //nolint:noinlineerr
+		return nil, fmt.Errorf("decoding nodestore debug response: %w", err)
+	}
+
+	return nodeStore, nil
+}
+
+// DebugFilter fetches the current filter rules from the debug endpoint.
+func (t *HeadscaleInContainer) DebugFilter() ([]tailcfg.FilterRule, error) {
+	// Execute curl inside the container to access the debug endpoint locally
+	command := []string{
+		"curl", "-s", "-H", "Accept: application/json", "http://localhost:9090/debug/filter",
+	}
+
+	result, err := t.Execute(command)
+	if err != nil {
+		return nil, fmt.Errorf("fetching filter from debug endpoint: %w", err)
+	}
+
+	var filterRules []tailcfg.FilterRule
+	if err := json.Unmarshal([]byte(result), &filterRules); err != nil { //nolint:noinlineerr
+		return nil, fmt.Errorf("decoding filter response: %w", err)
+	}
+
+	return filterRules, nil
+}
+
 // DebugPolicy fetches the current policy from the debug endpoint.
 func (t *HeadscaleInContainer) DebugPolicy() (string, error) {
 	// Execute curl inside the container to access the debug endpoint locally
diff --git a/integration/integrationutil/timeouts.go b/integration/integrationutil/timeouts.go
deleted file mode 100644
index 0e36041a4..000000000
--- a/integration/integrationutil/timeouts.go
+++ /dev/null
@@ -1,40 +0,0 @@
-package integrationutil
-
-import "time"
-
-// CI-scaled convergence budgets. ScaledTimeout doubles each on CI.
-var (
-	// HAConvergeTimeout: routes / ACL / policy propagation to reach
-	// every node and show up in status, traceroute, or curl.
-	HAConvergeTimeout = ScaledTimeout(60 * time.Second)
-
-	// HASlowConvergeTimeout: multi-step failover sequences that need
-	// at least one HA prober cycle plus a data-plane settle.
-	HASlowConvergeTimeout = ScaledTimeout(120 * time.Second)
-
-	// PolicyPropagationTimeout: post-SetPolicy filter rules and peer
-	// reachability to reflect the change. Sized for wgengine's
-	// rule-reload lag on contended CI runners (~2 min observed).
-	PolicyPropagationTimeout = ScaledTimeout(180 * time.Second)
-
-	// AuthFlowTimeout: OIDC / web-auth / preauth-key flows to reach
-	// Running.
-	AuthFlowTimeout = ScaledTimeout(30 * time.Second)
-
-	// StatusReadyTimeout: post-event read to reflect the event
-	// (created node visible in list, set tags visible on node).
-	StatusReadyTimeout = ScaledTimeout(30 * time.Second)
-)
-
-// Polling intervals for [assert.EventuallyWithT].
-const (
-	// FastPoll: in-process reads (HA state, route table snapshots).
-	FastPoll = 200 * time.Millisecond
-
-	// SlowPoll: cross-container reads (tailscale status, curl,
-	// headscale API) where each tick pays a docker exec round-trip.
-	SlowPoll = 500 * time.Millisecond
-
-	// PingPoll: gap between full ping-matrix sweeps.
-	PingPoll = 2 * time.Second
-)
diff --git a/integration/integrationutil/util.go b/integration/integrationutil/util.go
index a70145e0c..a9fb60931 100644
--- a/integration/integrationutil/util.go
+++ b/integration/integrationutil/util.go
@@ -241,23 +241,23 @@ func BuildExpectedOnlineMap(all map[types.NodeID][]tailcfg.MapResponse) map[type
 	for nid, mrs := range all {
 		res[nid] = make(map[types.NodeID]bool)
 
-		set := func(id tailcfg.NodeID, online *bool) {
-			if online != nil {
-				res[nid][types.NodeID(id)] = *online //nolint:gosec // safe conversion for peer ID
-			}
-		}
-
 		for _, mr := range mrs {
 			for _, peer := range mr.Peers {
-				set(peer.ID, peer.Online)
+				if peer.Online != nil {
+					res[nid][types.NodeID(peer.ID)] = *peer.Online //nolint:gosec // safe conversion for peer ID
+				}
 			}
 
 			for _, peer := range mr.PeersChanged {
-				set(peer.ID, peer.Online)
+				if peer.Online != nil {
+					res[nid][types.NodeID(peer.ID)] = *peer.Online //nolint:gosec // safe conversion for peer ID
+				}
 			}
 
 			for _, peer := range mr.PeersChangedPatch {
-				set(peer.NodeID, peer.Online)
+				if peer.Online != nil {
+					res[nid][types.NodeID(peer.NodeID)] = *peer.Online //nolint:gosec // safe conversion for peer ID
+				}
 			}
 		}
 	}
diff --git a/integration/k3sic/k3sic.go b/integration/k3sic/k3sic.go
deleted file mode 100644
index 6dc805634..000000000
--- a/integration/k3sic/k3sic.go
+++ /dev/null
@@ -1,603 +0,0 @@
-// Package k3sic wraps a single-container k3s cluster (server + agent) as a
-// privileged sibling container on the host docker daemon, like the
-// DERP-in-container wrapper in the dsic package.
-//
-// It exists so that integration tests can install the real Tailscale
-// Kubernetes operator (via its Helm chart) into a real Kubernetes cluster and
-// point it at an in-test Headscale. k3s bundles kubectl and we run helm inside
-// the container through Execute, so the host dev shell needs no kube tooling.
-//
-// The operator is pointed at Headscale over plain HTTP (see
-// hsic.WithoutTLS), so the operator and proxy pods need no CA: there is no
-// image baking and no CoreDNS hostname mapping. To run instead against a TLS
-// Headscale with a private CA, see tls-ca-baking.md.
-//
-// The harness runs as sibling containers on the host docker daemon (the
-// test-suite container has the host docker socket bind-mounted); it is NOT
-// docker-in-docker. We therefore run the purpose-built single-container k3s image
-// as one more privileged sibling joined to the scenario networks, rather than using
-// k3d/kind which shell out to the docker daemon and fight the sibling model.
-// Privileged is the harness-wide norm here, not a k3s-specific escalation: the
-// tsic (client) and dsic (DERP) containers run privileged too (see
-// dockertestutil.DockerAllowNetworkAdministration).
-package k3sic
-
-import (
-	"archive/tar"
-	"compress/gzip"
-	"context"
-	"errors"
-	"fmt"
-	"io"
-	"log"
-	"net/http"
-	"runtime"
-	"strings"
-	"time"
-
-	"github.com/juanfont/headscale/hscontrol/capver"
-	"github.com/juanfont/headscale/integration/dockertestutil"
-	"github.com/juanfont/headscale/integration/integrationutil"
-	"github.com/ory/dockertest/v3"
-	"github.com/ory/dockertest/v3/docker"
-	"tailscale.com/util/rands"
-)
-
-const (
-	k3sicHashLength = 6
-
-	// K3sImage is the single-container k3s server+agent image, pinned on ghcr (no
-	// anonymous Docker Hub rate limit). Pinned rather than resolved from the k3s
-	// stable channel because that channel floats the k8s minor unpredictably and
-	// would outrun the cgroup-v2 and br_netfilter workarounds below. Bump by hand.
-	K3sImage = "ghcr.io/k3s-io/k3s:v1.35.5-k3s1"
-
-	// operatorImageRepo and proxyImageRepo are the ghcr-hosted operator and
-	// proxy images. ghcr is used instead of Docker Hub to avoid anonymous pull
-	// rate limits; the pods pull these directly.
-	operatorImageRepo = "ghcr.io/tailscale/k8s-operator"
-	proxyImageRepo    = "ghcr.io/tailscale/tailscale"
-
-	dockerExecuteTimeout = 300 * time.Second
-
-	// helmVersionFallback is used when the latest helm release cannot be
-	// resolved at runtime (see resolveHelmVersion). The image ships no helm and
-	// cannot fetch it itself, so we inject a binary that matches the container
-	// arch.
-	helmVersionFallback = "v3.19.1"
-
-	// kubeconfigPath is where k3s writes the kubeconfig (see RunOptions.Env);
-	// helm needs it pointed explicitly, kubectl finds it by default.
-	kubeconfigPath = "/etc/rancher/k3s/k3s.yaml"
-
-	// kubectlBin is the in-container kubectl the k3s image ships on PATH.
-	kubectlBin = "kubectl"
-
-	// shellBin is the in-container shell used for compound commands.
-	shellBin = "/bin/sh"
-
-	// tailscaleNamespace is where the operator and its proxies are installed.
-	tailscaleNamespace = "tailscale"
-
-	// kubeSystemNamespace holds CoreDNS and the rest of the k3s system addons.
-	kubeSystemNamespace = "kube-system"
-)
-
-var (
-	errHelmDownload     = errors.New("helm download failed")
-	errHelmNotInTarball = errors.New("helm binary not found in release tarball")
-
-	errNoKubeDNSEndpoints = errors.New("kube-dns Service has no ready endpoints yet")
-)
-
-// OperatorImageTag is the image tag the operator and proxy images use, derived
-// from the Tailscale minor Headscale tracks via capver (e.g. "v1.98"). The
-// operator shares the Tailscale release train, so this keeps the images and the
-// Helm chart in lockstep with the client versions Headscale is tested against,
-// without a hand-pinned constant. The tag is a rolling tag within the minor.
-func OperatorImageTag() string {
-	return capver.TailscaleLatestMajorMinor(1, false)[0]
-}
-
-// OperatorImage and ProxyImage are the ghcr operator/proxy image references the
-// test wires into the Helm chart.
-func OperatorImage() string { return operatorImageRepo + ":" + OperatorImageTag() }
-func ProxyImage() string    { return proxyImageRepo + ":" + OperatorImageTag() }
-
-// OperatorChartVersion is the Helm chart version constraint matching the derived
-// minor; helm resolves the latest patch in that line. The top-level loginServer
-// value the operator needs to target Headscale instead of the Tailscale SaaS
-// first shipped in chart 1.98.4.
-func OperatorChartVersion() string {
-	return strings.TrimPrefix(OperatorImageTag(), "v") + ".*"
-}
-
-// K3sInContainer represents a k3s cluster running in a single privileged
-// container (K3sInContainer, hence k3sic).
-type K3sInContainer struct {
-	hostname string
-
-	pool      *dockertest.Pool
-	container *dockertest.Resource
-	networks  []*dockertest.Network
-}
-
-// New starts a new [K3sInContainer] joined to the given networks.
-func New(
-	pool *dockertest.Pool,
-	networks []*dockertest.Network,
-) (*K3sInContainer, error) {
-	hash := rands.HexString(k3sicHashLength)
-
-	// Include the run ID in the hostname for easier identification of which
-	// test run owns this container, matching the dsic/tsic convention.
-	runID := dockertestutil.GetIntegrationRunID()
-
-	var hostname string
-
-	if runID != "" {
-		runIDShort := runID[len(runID)-6:]
-		hostname = fmt.Sprintf("k3s-%s-%s", runIDShort, hash)
-	} else {
-		hostname = "k3s-" + hash
-	}
-
-	k := &K3sInContainer{
-		hostname: hostname,
-		pool:     pool,
-		networks: networks,
-	}
-
-	// Pull the k3s image (ghcr, not built) via PullWithAuth, as hsic does for
-	// prebuilt/pulled images.
-	err := dockertestutil.PullWithAuth(pool, K3sImage)
-	if err != nil {
-		return nil, fmt.Errorf("pulling %s: %w", K3sImage, err)
-	}
-
-	repo, tag, ok := strings.Cut(K3sImage, ":")
-	if !ok {
-		return nil, fmt.Errorf("invalid k3s image reference %q", K3sImage) //nolint:err113
-	}
-
-	runOptions := &dockertest.RunOptions{
-		Name:       hostname,
-		Repository: repo,
-		Tag:        tag,
-		Networks:   networks,
-		// "server" runs both the control plane and a built-in agent in one
-		// container. --disable traefik/servicelb/metrics-server keeps the
-		// cluster lean: the test only needs the API server and the ability to
-		// schedule the operator pods. --tls-san pins the hostname into the
-		// apiserver cert (not strictly needed since we exec kubectl in-container,
-		// but harmless and future-proof).
-		Cmd: []string{
-			"server",
-			"--disable", "traefik",
-			"--disable", "servicelb",
-			"--disable", "metrics-server",
-			"--disable-network-policy",
-			"--snapshotter", "native",
-			"--tls-san", hostname,
-		},
-		Env: []string{
-			"K3S_KUBECONFIG_OUTPUT=" + kubeconfigPath,
-			"K3S_KUBECONFIG_MODE=0644",
-		},
-	}
-
-	// Stamp the run-id label or the reaper leaks the container.
-	dockertestutil.DockerAddIntegrationLabels(runOptions, "k3s")
-
-	// dockertest does not handle pre-existing containers well; make sure a
-	// stale one with this name is gone first.
-	err = pool.RemoveContainerByName(hostname)
-	if err != nil {
-		return nil, err
-	}
-
-	container, err := pool.RunWithOptions(
-		runOptions,
-		dockertestutil.DockerRestartPolicy,
-		// Privileged + NET_ADMIN: k3s manages iptables/ipvs, mounts cgroups and
-		// runs containerd. This is the same knob dsic uses for the DERP server.
-		dockertestutil.DockerAllowNetworkAdministration,
-		withK3sHostConfig,
-	)
-	if err != nil {
-		return nil, fmt.Errorf("%s starting k3s container: %w", hostname, err)
-	}
-
-	log.Printf("Created %s container\n", hostname)
-
-	k.container = container
-
-	// Make ClusterIP DNAT work before k3s programs kube-proxy rules; without it
-	// in-cluster DNS times out on hosts where br_netfilter is not preloaded.
-	k.ensureBridgeNetfilter()
-
-	return k, nil
-}
-
-// withK3sHostConfig sets the HostConfig knobs k3s needs beyond
-// privileged/NET_ADMIN: a tmpfs on /run and /var/run, which the k3s image
-// expects.
-//
-// It deliberately does NOT bind-mount the host /sys/fs/cgroup. On a cgroup-v2
-// host, bind-mounting the host cgroup tree into a container that keeps its own
-// (private) cgroup namespace makes the cgroup root visible to the container
-// disagree with the namespace runc places workload pods under. The kubelet can
-// then start (the apiserver and node go Ready), but every workload pod fails to
-// create its sandbox with "failed to apply cgroup configuration: ...
-// cgroup.procs: no such file or directory", so nothing the operator schedules
-// ever runs. Leaving the bind-mount off lets the privileged k3s entrypoint set
-// up cgroup-v2 delegation within its own namespace, which it is
-// designed to do, and workload pods schedule normally.
-func withK3sHostConfig(config *docker.HostConfig) {
-	config.Tmpfs = map[string]string{
-		"/run":     "",
-		"/var/run": "",
-	}
-
-	// Bind the host kernel modules read-only so the container can load
-	// br_netfilter (see ensureBridgeNetfilter). Without bridge netfilter,
-	// kube-proxy's ClusterIP DNAT rules do not apply to bridged pod-to-pod
-	// traffic, so kube-dns (and every other Service) is unreachable from pods —
-	// the in-cluster DNS timeout seen on the arm64 CI runner. The container
-	// shares the host kernel, so the modules match.
-	config.Binds = append(config.Binds, "/lib/modules:/lib/modules:ro")
-}
-
-// ensureBridgeNetfilter loads br_netfilter and enables the sysctls that make
-// kube-proxy's ClusterIP DNAT apply to bridged pod-to-pod traffic. On a host
-// where the module is already loaded (e.g. the amd64 dev box, where Docker
-// loads it for bridge networks) these are no-ops; on the arm64 CI runner the
-// module is absent and pods cannot reach any Service IP — kube-dns included —
-// so in-cluster DNS times out. Best-effort: k3s also loads the module, and a
-// genuinely missing module surfaces in DumpDiagnostics rather than here.
-func (k *K3sInContainer) ensureBridgeNetfilter() {
-	for _, cmd := range []string{
-		"modprobe br_netfilter || true",
-		"sysctl -w net.bridge.bridge-nf-call-iptables=1 || true",
-		"sysctl -w net.bridge.bridge-nf-call-ip6tables=1 || true",
-		"sysctl -w net.ipv4.ip_forward=1 || true",
-	} {
-		out, stderr, err := k.Execute([]string{shellBin, "-c", cmd})
-		if err != nil {
-			log.Printf("[k3s] %q failed: %v (stdout: %s, stderr: %s)", cmd, err, out, stderr)
-		}
-	}
-}
-
-// Hostname returns the hostname of the [K3sInContainer].
-func (k *K3sInContainer) Hostname() string {
-	return k.hostname
-}
-
-// ID returns the docker container ID of the [K3sInContainer].
-func (k *K3sInContainer) ID() string {
-	return k.container.Container.ID
-}
-
-// ConnectToNetwork connects the cluster container to an additional network.
-func (k *K3sInContainer) ConnectToNetwork(network *dockertest.Network) error {
-	return k.container.ConnectToNetwork(network)
-}
-
-// Execute runs a command inside the k3s container and returns its stdout.
-// kubectl and the k3s-bundled tools (and helm, once installed via
-// [K3sInContainer.InstallHelm]) are on PATH. KUBECONFIG is exported so helm,
-// which (unlike the image's kubectl) does not default to the k3s config, can
-// reach the cluster.
-func (k *K3sInContainer) Execute(command []string) (string, string, error) {
-	return dockertestutil.ExecuteCommand(
-		k.container,
-		command,
-		[]string{"KUBECONFIG=" + kubeconfigPath},
-		dockertestutil.ExecuteCommandTimeout(dockerExecuteTimeout),
-	)
-}
-
-// WriteFile saves a file inside the container.
-func (k *K3sInContainer) WriteFile(path string, data []byte) error {
-	return integrationutil.WriteFileToContainer(k.pool, k.container, path, data)
-}
-
-// WaitForRunning blocks until the cluster is ready to schedule DNS-dependent
-// workloads: the kube-apiserver is serving, the single node reports Ready, and
-// in-cluster DNS is servable (CoreDNS rolled out with a backed kube-dns
-// Service). Gating on DNS here pins a missing-DNS failure at its source rather
-// than letting the operator crashloop on an opaque lookup timeout.
-func (k *K3sInContainer) WaitForRunning() error {
-	log.Printf("waiting for k3s API server in %s to be ready", k.hostname)
-
-	err := k.pool.Retry(func() error {
-		// `kubectl get --raw=/readyz` returns "ok" once the apiserver is up.
-		out, _, err := k.Execute([]string{
-			kubectlBin, "get", "--raw=/readyz",
-		})
-		if err != nil {
-			return fmt.Errorf("k3s apiserver not ready: %w", err)
-		}
-
-		if !strings.Contains(out, "ok") {
-			return fmt.Errorf("k3s apiserver readyz returned %q", strings.TrimSpace(out)) //nolint:err113
-		}
-
-		// Wait for the node object to exist and be Ready before returning so
-		// pods can actually be scheduled.
-		nodeOut, _, err := k.Execute([]string{
-			kubectlBin, "get", "nodes", "--no-headers",
-		})
-		if err != nil {
-			return fmt.Errorf("k3s node not ready: %w", err)
-		}
-
-		if !strings.Contains(nodeOut, " Ready") {
-			return fmt.Errorf("k3s node not Ready yet: %q", strings.TrimSpace(nodeOut)) //nolint:err113
-		}
-
-		return nil
-	})
-	if err != nil {
-		return err
-	}
-
-	return k.waitForClusterDNS()
-}
-
-// InstallHelm installs the helm binary into the container so the operator can be
-// installed. The k3s image ships kubectl but not helm, has no curl, and its
-// busybox wget cannot do HTTPS, so we download helm in the test process (which
-// has network egress) and inject the binary. helm's own HTTPS client then
-// fetches the operator chart from inside the container.
-func (k *K3sInContainer) InstallHelm() error {
-	bin, err := fetchHelmBinary(resolveHelmVersion(), runtime.GOARCH)
-	if err != nil {
-		return fmt.Errorf("fetching helm: %w", err)
-	}
-
-	err = k.WriteFile("/usr/local/bin/helm", bin)
-	if err != nil {
-		return fmt.Errorf("writing helm binary: %w", err)
-	}
-
-	// WriteFile uploads with mode 0; make it readable+executable.
-	_, stderr, err := k.Execute([]string{"chmod", "0755", "/usr/local/bin/helm"})
-	if err != nil {
-		return fmt.Errorf("chmod helm (stderr: %s): %w", stderr, err)
-	}
-
-	return nil
-}
-
-// waitForClusterDNS blocks until CoreDNS is rolled out and the kube-dns Service
-// has at least one ready endpoint — i.e. in-cluster name resolution is actually
-// servable, which every workload (starting with the operator) depends on. k3s
-// deploys CoreDNS via its addon manager shortly after the node reports Ready, so
-// the deployment may not exist yet; retry until it does before checking rollout.
-func (k *K3sInContainer) waitForClusterDNS() error {
-	err := k.pool.Retry(func() error {
-		_, stderr, err := k.Execute([]string{
-			kubectlBin, "-n", kubeSystemNamespace, "get", "deployment", "coredns",
-		})
-		if err != nil {
-			return fmt.Errorf("coredns deployment not present yet (stderr: %s): %w", stderr, err)
-		}
-
-		return nil
-	})
-	if err != nil {
-		return fmt.Errorf("waiting for coredns deployment to appear: %w", err)
-	}
-
-	_, stderr, err := k.Execute([]string{
-		kubectlBin, "-n", kubeSystemNamespace, "rollout", "status",
-		"deployment/coredns", "--timeout=150s",
-	})
-	if err != nil {
-		return fmt.Errorf("coredns did not become available (stderr: %s): %w", stderr, err)
-	}
-
-	return k.pool.Retry(func() error {
-		// A populated endpoint set means a CoreDNS pod is serving :53 and
-		// kube-proxy has a backend to DNAT the kube-dns ClusterIP to; empty means
-		// in-cluster lookups will time out no matter how long a client waits.
-		out, stderr, err := k.Execute([]string{
-			kubectlBin, "-n", kubeSystemNamespace, "get", "endpoints", "kube-dns",
-			"-o", "jsonpath={.subsets[*].addresses[*].ip}",
-		})
-		if err != nil {
-			return fmt.Errorf("reading kube-dns endpoints (stderr: %s): %w", stderr, err)
-		}
-
-		if strings.TrimSpace(out) == "" {
-			return errNoKubeDNSEndpoints
-		}
-
-		return nil
-	})
-}
-
-// ConfigureCoreDNSHost makes in-cluster pods resolve hostname to ip via CoreDNS.
-// The operator targets Headscale's control plane by IP, but the embedded DERP map
-// references Headscale by hostname; without this, the proxy pods cannot resolve
-// the DERP server, never connect to it, and — since they only advertise
-// unreachable pod-network endpoints — get no data path to nodes outside the
-// cluster. It installs a coredns-custom ConfigMap (a k3s-native extension point:
-// keys ending in .server become additional server blocks), which CoreDNS's reload
-// plugin picks up without a restart.
-func (k *K3sInContainer) ConfigureCoreDNSHost(hostname, ip string) error {
-	manifest := fmt.Sprintf(`apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: coredns-custom
-  namespace: kube-system
-data:
-  headscale.server: |
-    %s {
-      hosts {
-        %s %s
-        fallthrough
-      }
-    }
-`, hostname, ip, hostname)
-
-	return k.ApplyManifest("coredns-custom", manifest)
-}
-
-// DumpDiagnostics logs cluster state useful for debugging a failed operator
-// install: pod status across namespaces and the operator's own logs and events.
-// Best-effort — every command's failure is logged, not returned.
-func (k *K3sInContainer) DumpDiagnostics() {
-	for _, c := range [][]string{
-		{kubectlBin, "get", "pods", "-A", "-o", "wide"},
-		{kubectlBin, "-n", tailscaleNamespace, "get", "events", "--sort-by=.lastTimestamp"},
-		{kubectlBin, "-n", tailscaleNamespace, "describe", "pods"},
-		{kubectlBin, "-n", tailscaleNamespace, "logs", "deployment/operator", "--tail=200"},
-		// A crashlooping operator's fatal error is in the previous container.
-		{kubectlBin, "-n", tailscaleNamespace, "logs", "deployment/operator", "--previous", "--tail=200"},
-		{kubectlBin, "-n", tailscaleNamespace, "get", "statefulsets,pods", "-o", "wide"},
-		// Proxy pods' tailscaled logs: DERP-connection and registration failures
-		// (the data-path culprits) surface here, not in the operator log.
-		{
-			shellBin, "-c",
-			"for p in $(kubectl -n " + tailscaleNamespace + " get pods -o name | grep /ts-); do " +
-				"echo \"== $p ==\"; kubectl -n " + tailscaleNamespace +
-				" logs $p -c tailscale --tail=80 2>&1; done",
-		},
-		// In-cluster DNS: the operator's first dependency. A "lookup
-		// kubernetes.default.svc ... i/o timeout" crash means CoreDNS is not
-		// serving, so capture its pod state, logs (Corefile parse errors land
-		// here), and the Service endpoints.
-		{kubectlBin, "-n", kubeSystemNamespace, "get", "pods", "-l", "k8s-app=kube-dns", "-o", "wide"},
-		{kubectlBin, "-n", kubeSystemNamespace, "logs", "-l", "k8s-app=kube-dns", "--tail=100"},
-		{kubectlBin, "-n", kubeSystemNamespace, "get", "endpoints", "kube-dns", "-o", "wide"},
-		// Host network state behind a ClusterIP-unreachable DNS timeout: whether
-		// br_netfilter is loaded and the call-iptables/forward sysctls are on, and
-		// whether kube-proxy actually programmed the kube-dns DNAT rule. If CoreDNS
-		// is healthy (above) but these are missing, the fault is the Service DNAT
-		// path, not DNS.
-		{shellBin, "-c", "lsmod | grep -E 'br_netfilter|nf_conntrack' || echo 'br_netfilter NOT loaded'"},
-		{shellBin, "-c", "sysctl net.bridge.bridge-nf-call-iptables net.ipv4.ip_forward 2>&1 || true"},
-		{shellBin, "-c", "iptables-save -t nat 2>/dev/null | grep -iE 'KUBE-SERVICES|kube-dns|10.43.0.10' | head -40 || echo 'no kube-dns nat rules'"},
-	} {
-		out, stderr, err := k.Execute(c)
-		label := strings.Join(c, " ")
-
-		if err != nil {
-			log.Printf("[k3s diag] %s failed: %v (stderr: %s)", label, err, stderr)
-			continue
-		}
-
-		log.Printf("[k3s diag] %s:\n%s", label, out)
-	}
-}
-
-// resolveHelmVersion returns the latest published helm release tag (e.g.
-// "v3.19.1"), falling back to [helmVersionFallback] if it cannot be resolved.
-// get.helm.sh is not Docker Hub and has no anonymous rate limit, so a "rolling"
-// latest is cheap; the fallback keeps a broken release from breaking CI.
-func resolveHelmVersion() string {
-	req, err := http.NewRequestWithContext(
-		context.Background(), http.MethodGet, "https://get.helm.sh/helm-latest-version", nil)
-	if err != nil {
-		return helmVersionFallback
-	}
-
-	resp, err := http.DefaultClient.Do(req)
-	if err != nil {
-		return helmVersionFallback
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		return helmVersionFallback
-	}
-
-	body, err := io.ReadAll(io.LimitReader(resp.Body, 32))
-	if err != nil {
-		return helmVersionFallback
-	}
-
-	version := strings.TrimSpace(string(body))
-	if !strings.HasPrefix(version, "v") {
-		return helmVersionFallback
-	}
-
-	return version
-}
-
-// fetchHelmBinary downloads the helm release tarball for version and goarch and
-// returns the helm binary bytes.
-func fetchHelmBinary(version, goarch string) ([]byte, error) {
-	url := fmt.Sprintf("https://get.helm.sh/helm-%s-linux-%s.tar.gz", version, goarch)
-
-	req, err := http.NewRequestWithContext(context.Background(), http.MethodGet, url, nil)
-	if err != nil {
-		return nil, err
-	}
-
-	resp, err := http.DefaultClient.Do(req)
-	if err != nil {
-		return nil, err
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != http.StatusOK {
-		return nil, fmt.Errorf("%w: %s returned status %d", errHelmDownload, url, resp.StatusCode)
-	}
-
-	gz, err := gzip.NewReader(resp.Body)
-	if err != nil {
-		return nil, err
-	}
-	defer gz.Close()
-
-	want := "linux-" + goarch + "/helm"
-	tr := tar.NewReader(gz)
-
-	for {
-		hdr, err := tr.Next()
-		if errors.Is(err, io.EOF) {
-			break
-		}
-
-		if err != nil {
-			return nil, err
-		}
-
-		if hdr.Name == want {
-			return io.ReadAll(tr)
-		}
-	}
-
-	return nil, fmt.Errorf("%w: %s", errHelmNotInTarball, want)
-}
-
-// Shutdown saves the container log and then runs k3s-killall in-container so
-// k3s's own child processes/containers (containerd-shims, pods) do not leak,
-// before purging the container itself.
-func (k *K3sInContainer) Shutdown() error {
-	err := k.SaveLog("/tmp/control")
-	if err != nil {
-		log.Printf("saving log from %s: %s", k.hostname, err)
-	}
-
-	// k3s spawns containerd and a tree of child processes inside this
-	// container; the bundled k3s-killall.sh tears them down. Best-effort: the
-	// Purge below removes the container regardless.
-	_, _, err = k.Execute([]string{shellBin, "-c", "k3s-killall.sh || true"})
-	if err != nil {
-		log.Printf("running k3s-killall in %s: %s", k.hostname, err)
-	}
-
-	return k.pool.Purge(k.container)
-}
-
-// SaveLog saves the container stdout/stderr logs to a path on the host.
-func (k *K3sInContainer) SaveLog(path string) error {
-	_, _, err := dockertestutil.SaveLog(k.pool, k.container, path)
-
-	return err
-}
diff --git a/integration/k3sic/operator.go b/integration/k3sic/operator.go
deleted file mode 100644
index e9eee1709..000000000
--- a/integration/k3sic/operator.go
+++ /dev/null
@@ -1,243 +0,0 @@
-package k3sic
-
-import (
-	"fmt"
-	"strings"
-)
-
-// This file holds the reusable building blocks for driving the Tailscale
-// Kubernetes operator inside the cluster: installing it and applying the CRs and
-// workloads a test needs. Tests compose these methods rather than embedding
-// kubectl/helm invocations, so adding a new operator test is a few method calls.
-
-// ApplyManifest writes manifest into the container as /tmp/<name>.yaml and
-// kubectl-applies it. It is the building block the helpers below use, and is
-// exported so tests can apply ad-hoc manifests without a bespoke method.
-func (k *K3sInContainer) ApplyManifest(name, manifest string) error {
-	path := "/tmp/" + name + ".yaml"
-
-	err := k.WriteFile(path, []byte(manifest))
-	if err != nil {
-		return fmt.Errorf("writing manifest %s: %w", name, err)
-	}
-
-	_, stderr, err := k.Execute([]string{kubectlBin, "apply", "-f", path})
-	if err != nil {
-		return fmt.Errorf("applying manifest %s (stderr: %s): %w", name, stderr, err)
-	}
-
-	return nil
-}
-
-// InstallOperator installs the Tailscale Kubernetes operator via Helm into the
-// tailscale namespace, pointed at loginServer with the given OAuth client
-// credentials. loginServer is used by the operator for both the control plane
-// and the management API; for an in-test Headscale pass its HTTP endpoint by IP
-// (hsic.HeadscaleInContainer.GetIPEndpoint) so the pods need no DNS or CA. The
-// operator and proxy images come from ghcr at the capver-derived tag. Blocks
-// (helm --wait) until the operator deployment is available.
-func (k *K3sInContainer) InstallOperator(loginServer, clientID, clientSecret string) error {
-	repoAdd := "helm repo add tailscale https://pkgs.tailscale.com/helmcharts && helm repo update"
-
-	_, stderr, err := k.Execute([]string{shellBin, "-c", repoAdd})
-	if err != nil {
-		return fmt.Errorf("helm repo add/update (stderr: %s): %w", stderr, err)
-	}
-
-	_, stderr, err = k.Execute([]string{
-		kubectlBin, "create", "namespace", tailscaleNamespace,
-	})
-	if err != nil {
-		return fmt.Errorf("creating %s namespace (stderr: %s): %w", tailscaleNamespace, stderr, err)
-	}
-
-	// Precreate the operator-oauth Secret with --from-literal instead of the
-	// chart's oauth.clientId/clientSecret: the chart interpolates those unquoted,
-	// so an all-digit credential renders as a YAML number and the apiserver
-	// rejects it. --from-literal always stores strings. The chart uses a Secret
-	// named operator-oauth when oauth.clientId is unset.
-	_, stderr, err = k.Execute([]string{
-		kubectlBin, "-n", tailscaleNamespace, "create", "secret", "generic", "operator-oauth",
-		"--from-literal=client_id=" + clientID,
-		"--from-literal=client_secret=" + clientSecret,
-	})
-	if err != nil {
-		return fmt.Errorf("creating operator-oauth secret (stderr: %s): %w", stderr, err)
-	}
-
-	opRepo, opTag, _ := strings.Cut(OperatorImage(), ":")
-	proxyRepo, proxyTag, _ := strings.Cut(ProxyImage(), ":")
-
-	const set = "--set-string"
-
-	install := []string{
-		"helm", "upgrade", "--install", "tailscale-operator",
-		"tailscale/tailscale-operator",
-		"--version", OperatorChartVersion(),
-		"--namespace", tailscaleNamespace,
-		set, "loginServer=" + loginServer,
-		set, "operatorConfig.image.repository=" + opRepo,
-		set, "operatorConfig.image.tag=" + opTag,
-		set, "proxyConfig.image.repository=" + proxyRepo,
-		set, "proxyConfig.image.tag=" + proxyTag,
-		"--wait", "--timeout", "5m",
-	}
-
-	_, stderr, err = k.Execute(install)
-	if err != nil {
-		k.DumpDiagnostics()
-		return fmt.Errorf("helm install operator (stderr: %s): %w", stderr, err)
-	}
-
-	// hsic serves the embedded DERP without TLS, but a proxy dials DERP over HTTPS
-	// and so cannot relay through it. Pods on the k3s pod network can only reach
-	// off-cluster nodes via DERP (their only endpoint is an unreachable pod IP),
-	// so without this the ingress/egress proxies get no data path. The ProxyClass
-	// injects TS_DEBUG_DERP_WS_CLIENT + TS_DEBUG_USE_DERP_HTTP, switching proxies to
-	// plain-HTTP websocket DERP. The proxy-creating helpers below reference it.
-	return k.applyDERPWebsocketProxyClass()
-}
-
-// DERPWebsocketProxyClass is the ProxyClass [InstallOperator] creates to make
-// operator proxies reach the embedded (non-TLS) DERP over websocket. Proxy
-// resources reference it via spec.proxyClass / the tailscale.com/proxy-class
-// annotation.
-const DERPWebsocketProxyClass = "headscale-derp-ws" //nolint:gosec // G101 false positive: a ProxyClass name, not a credential
-
-func (k *K3sInContainer) applyDERPWebsocketProxyClass() error {
-	manifest := fmt.Sprintf(`apiVersion: tailscale.com/v1alpha1
-kind: ProxyClass
-metadata:
-  name: %s
-spec:
-  statefulSet:
-    pod:
-      tailscaleContainer:
-        env:
-          - name: TS_DEBUG_DERP_WS_CLIENT
-            value: "true"
-          - name: TS_DEBUG_USE_DERP_HTTP
-            value: "true"
-`, DERPWebsocketProxyClass)
-
-	return k.ApplyManifest("proxyclass-"+DERPWebsocketProxyClass, manifest)
-}
-
-// DeployConnector applies a Connector CR advertising an egress subnet router for
-// advertiseRoutes, tagged with tags. The operator provisions a proxy and
-// registers it as a node in Headscale.
-func (k *K3sInContainer) DeployConnector(name string, tags, advertiseRoutes []string) error {
-	manifest := fmt.Sprintf(`apiVersion: tailscale.com/v1alpha1
-kind: Connector
-metadata:
-  name: %s
-spec:
-  proxyClass: %s
-  tags:
-%s
-  subnetRouter:
-    advertiseRoutes:
-%s
-`, name, DERPWebsocketProxyClass, yamlList(tags, 4), yamlList(advertiseRoutes, 6))
-
-	return k.ApplyManifest("connector-"+name, manifest)
-}
-
-// DeployProxyGroup applies a ProxyGroup CR of the given type ("ingress" or
-// "egress") with replicas proxies tagged with tags. ProxyGroups are the current
-// way to run a pool of operator proxies for HA ingress/egress.
-func (k *K3sInContainer) DeployProxyGroup(name, proxyType string, replicas int, tags []string) error {
-	manifest := fmt.Sprintf(`apiVersion: tailscale.com/v1alpha1
-kind: ProxyGroup
-metadata:
-  name: %s
-spec:
-  type: %s
-  replicas: %d
-  proxyClass: %s
-  tags:
-%s
-`, name, proxyType, replicas, DERPWebsocketProxyClass, yamlList(tags, 4))
-
-	return k.ApplyManifest("proxygroup-"+name, manifest)
-}
-
-// DeployEchoServer deploys a minimal HTTP server (agnhost, served from
-// registry.k8s.io to avoid Docker Hub rate limits) labelled app=<name> with a
-// ClusterIP Service of the same name on port 80. Use it as the in-cluster target
-// for connectivity tests; expose it to the tailnet with [ExposeServiceToTailnet].
-func (k *K3sInContainer) DeployEchoServer(name string) error {
-	manifest := fmt.Sprintf(`apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: %s
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: %s
-  template:
-    metadata:
-      labels:
-        app: %s
-    spec:
-      containers:
-        - name: echo
-          image: registry.k8s.io/e2e-test-images/agnhost:2.47
-          args: ["netexec", "--http-port=80"]
-          ports:
-            - containerPort: 80
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: %s
-spec:
-  selector:
-    app: %s
-  ports:
-    - port: 80
-      targetPort: 80
-`, name, name, name, name, name)
-
-	return k.ApplyManifest("echo-"+name, manifest)
-}
-
-// ExposeServiceToTailnet creates a tailscale LoadBalancer Service named
-// "<name>-ts" that exposes the pods labelled app=<name> to the tailnet, tagged
-// with tags. The operator provisions an ingress proxy and registers a node, so a
-// node outside the cluster (a regular tsic client) can reach the service over
-// the tailnet.
-func (k *K3sInContainer) ExposeServiceToTailnet(name string, tags []string) error {
-	manifest := fmt.Sprintf(`apiVersion: v1
-kind: Service
-metadata:
-  name: %s-ts
-  annotations:
-    tailscale.com/tags: "%s"
-    tailscale.com/proxy-class: %s
-spec:
-  type: LoadBalancer
-  loadBalancerClass: tailscale
-  selector:
-    app: %s
-  ports:
-    - port: 80
-      targetPort: 80
-`, name, strings.Join(tags, ","), DERPWebsocketProxyClass, name)
-
-	return k.ApplyManifest("expose-"+name, manifest)
-}
-
-// yamlList renders items as a YAML block sequence indented by indent spaces,
-// e.g. "    - tag:k8s". Returns "" for an empty list.
-func yamlList(items []string, indent int) string {
-	var b strings.Builder
-
-	pad := strings.Repeat(" ", indent)
-	for _, item := range items {
-		fmt.Fprintf(&b, "%s- %s\n", pad, item)
-	}
-
-	return strings.TrimRight(b.String(), "\n")
-}
diff --git a/integration/k3sic/tls-ca-baking.md b/integration/k3sic/tls-ca-baking.md
deleted file mode 100644
index 7d2507f34..000000000
--- a/integration/k3sic/tls-ca-baking.md
+++ /dev/null
@@ -1,70 +0,0 @@
-# Running the operator against a private-CA TLS Headscale
-
-`TestK8sOperator` points the Tailscale Kubernetes operator at an **HTTP**
-Headscale (`hsic.WithoutTLS`, `loginServer = http://<ip>:<port>`). That keeps
-the harness small: the operator and proxy pods need no CA, so there is no image
-baking, no containerd import, and no CoreDNS hostname mapping.
-
-This note records how to run the same test against a **TLS** Headscale serving a
-private CA, in case a future test needs to exercise realistic TLS. It is not
-wired up; reconstruct it from here.
-
-## Why it is involved
-
-tailscaled/tsnet verify the control connection against Go's
-`x509.SystemCertPool` (on the Alpine images: `/etc/ssl/certs/ca-certificates.crt`).
-A private CA must therefore be in the pod's **system trust store**.
-
-As of the tailscale operator chart on `main`, there is no supported way to hand
-a CA _file_ to a proxy pod:
-
-- `ProxyClass.spec.statefulSet.pod` has no `volumes`.
-- `ProxyClass...tailscaleContainer` has no `volumeMounts`, and its `env` is a
-  reduced schema (`name`/`value` only — no `valueFrom`/`envFrom`).
-- `operatorConfig` exposes `extraEnv` but no `extraVolumes`.
-
-`SSL_CERT_FILE`/`SSL_CERT_DIR` _are_ honoured by tailscaled, but they need a
-file that cannot be projected in. So the CA has to be baked into the images.
-
-## The recipe
-
-1. Serve Headscale with TLS (the `hsic` default) and grab `headscale.GetCert()`.
-   Pass it to the cluster so in-container `helm`/`kubectl` trust it.
-
-2. Bake the CA into derived operator and proxy images. For each of
-   `tailscale/k8s-operator:<tag>` and `tailscale/tailscale:<tag>`, build:
-
-   ```Dockerfile
-   FROM <base>
-   COPY headscale-ca.crt /usr/local/share/ca-certificates/headscale-ca.crt
-   RUN update-ca-certificates
-   ```
-
-   Build on the host docker daemon (it has egress to pull the base images),
-   `ExportImage` the result to a docker-format tarball, stream it into the k3s
-   container, and import it into the kubelet's containerd namespace:
-
-   ```
-   ctr --namespace k8s.io images import <tarball>
-   ```
-
-   Tag the derived images `headscale.local/...:<tag>-ca` and run them with
-   `imagePullPolicy: Never` (the `headscale.local/` prefix is never resolved by
-   a registry).
-
-3. Wire the derived images into the chart via `operatorConfig.image` /
-   `proxyConfig.image`. The operator's proxy StatefulSet template hard-codes
-   `imagePullPolicy: Always`, so a `ProxyClass` must override the proxy image
-   **and** set `imagePullPolicy: Never`; Connectors must reference that
-   ProxyClass explicitly (`defaultProxyClass` does not apply to them).
-
-4. Pods resolve Headscale through CoreDNS, not the container's `/etc/hosts`, and
-   the cert's only SAN is the Headscale hostname (dialing by IP fails TLS
-   verification). Install a `coredns-custom` ConfigMap mapping the hostname to
-   the Headscale IP and gate on the `kube-dns` Service having ready endpoints
-   before starting the operator.
-
-The full implementation lived in `integration/k3sic/k3sic.go` and
-`integration/k8s_operator_test.go` before the switch to HTTP; recover it from
-git history (`PrepareTailscaleImages`, `bakeAndImportImage`, `caBuildContext`,
-`ConfigureCoreDNSHost`) if needed.
diff --git a/integration/k8s_operator_test.go b/integration/k8s_operator_test.go
deleted file mode 100644
index 7af22ae84..000000000
--- a/integration/k8s_operator_test.go
+++ /dev/null
@@ -1,266 +0,0 @@
-package integration
-
-import (
-	"fmt"
-	"net/netip"
-	"slices"
-	"strings"
-	"testing"
-	"time"
-
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
-	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
-	"github.com/juanfont/headscale/integration/hsic"
-	"github.com/juanfont/headscale/integration/integrationutil"
-	"github.com/juanfont/headscale/integration/k3sic"
-	"github.com/juanfont/headscale/integration/tsic"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/tailcfg"
-)
-
-const (
-	tagK8sOperator = "tag:k8s-operator"
-	tagK8s         = "tag:k8s"
-)
-
-// k8sOperatorPolicy is the tagOwners policy the Tailscale Kubernetes operator
-// requires: tag:k8s-operator is self/admin-owned, and the operator
-// (tag:k8s-operator) owns tag:k8s so it can mint auth keys for the proxy nodes
-// it spins up. The wildcard ACL lets the in-cluster proxies and the out-of-cluster
-// tsic client reach each other for the connectivity checks.
-func k8sOperatorPolicy() *policyv2.Policy {
-	return &policyv2.Policy{
-		TagOwners: policyv2.TagOwners{
-			tagK8sOperator: policyv2.Owners{},
-			tagK8s:         policyv2.Owners{new(policyv2.Tag(tagK8sOperator))},
-		},
-		ACLs: []policyv2.ACL{
-			{
-				Action:  "accept",
-				Sources: []policyv2.Alias{policyv2.Wildcard},
-				Destinations: []policyv2.AliasWithPorts{
-					{Alias: policyv2.Wildcard, Ports: []tailcfg.PortRange{tailcfg.PortRangeAny}},
-				},
-			},
-		},
-	}
-}
-
-// TestK8sOperator verifies that the real Tailscale Kubernetes operator, installed
-// into a real k3s cluster via its Helm chart and pointed at an in-test Headscale,
-// can authenticate with OAuth client credentials, mint auth keys, and register
-// nodes that then interoperate with a regular tailnet node.
-//
-// The operator targets Headscale over plain HTTP by IP (hsic.WithoutTLS +
-// GetIPEndpoint), so the operator and proxy pods need no CA and no DNS entry for
-// Headscale. See integration/k3sic/tls-ca-baking.md for the TLS variant.
-//
-// The cluster-side steps are reusable building blocks on k3sic.K3sInContainer
-// (InstallOperator, DeployConnector, DeployEchoServer, ExposeServiceToTailnet,
-// DeployProxyGroup), so further operator scenarios are a few method calls.
-//
-// Run it with `go run ./cmd/hi run "TestK8sOperator"`.
-func TestK8sOperator(t *testing.T) {
-	IntegrationSkip(t)
-
-	// One regular user+node provides the out-of-cluster tailnet peer used by the
-	// connectivity subtest; the operator registers its own nodes on top.
-	spec := ScenarioSpec{
-		Users:        []string{"k8s-user"},
-		NodesPerUser: 1,
-	}
-
-	scenario, err := NewScenario(spec)
-	require.NoError(t, err)
-
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv(
-		// The tsic client reaches the in-cluster proxy only via DERP (no direct
-		// path to the k3s pod network), and hsic's embedded DERP is non-TLS, so the
-		// client must reach DERP over plain-HTTP websockets — as the proxy pods do.
-		[]tsic.Option{tsic.WithDERPOverHTTP()},
-		hsic.WithTestName("k8soperator"),
-		hsic.WithoutTLS(),
-		hsic.WithACLPolicy(k8sOperatorPolicy()),
-	)
-	require.NoError(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	// Mint an OAuth client for the operator: devices:core + auth_keys scopes,
-	// tagged tag:k8s-operator. CreateOAuthClient mints the admin API key and calls
-	// the v2 keys API itself.
-	clientID, clientSecret, err := headscale.CreateOAuthClient(
-		t.Context(),
-		[]string{"devices:core", "auth_keys"},
-		[]string{tagK8sOperator},
-	)
-	require.NoError(t, err, "creating OAuth client (server-side OAuth must be implemented)")
-	require.NotEmpty(t, clientID)
-	require.NotEmpty(t, clientSecret)
-
-	// Bring up the k3s cluster on the scenario networks.
-	k3s, err := k3sic.New(scenario.Pool(), scenario.Networks())
-	require.NoError(t, err)
-
-	defer func() {
-		shutdownErr := k3s.Shutdown()
-		if shutdownErr != nil {
-			t.Logf("shutting down k3s: %s", shutdownErr)
-		}
-	}()
-
-	// Registered after Shutdown so it runs first (defers are LIFO): dump cluster
-	// state while it is still up if anything below fails.
-	defer func() {
-		if t.Failed() {
-			k3s.DumpDiagnostics()
-		}
-	}()
-
-	require.NoError(t, k3s.WaitForRunning())
-	require.NoError(t, k3s.InstallHelm())
-
-	// The operator reaches the control plane by IP, but the embedded DERP map
-	// references Headscale by hostname; teach CoreDNS to resolve it so the proxy
-	// pods can connect to DERP and get a data path to nodes outside the cluster.
-	hsIP := headscale.GetIPInNetwork(scenario.Networks()[0])
-	require.NoError(t, k3s.ConfigureCoreDNSHost(headscale.GetHostname(), hsIP))
-
-	// loginServer is the in-cluster-reachable HTTP endpoint by IP; the operator
-	// uses it for both the control plane and the management API.
-	loginServer := headscale.GetIPEndpoint()
-	require.NoError(t, k3s.InstallOperator(loginServer, clientID, clientSecret))
-
-	t.Run("operator-registers", func(t *testing.T) {
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			nodes, err := headscale.ListNodes()
-			assert.NoError(c, err)
-			assert.True(c, hasNodeWithTag(nodes, tagK8sOperator),
-				"expected a node tagged %s registered by the operator, got %s",
-				tagK8sOperator, describeNodes(nodes))
-		}, integrationutil.ScaledTimeout(180*time.Second), 2*time.Second,
-			"operator node should register and be tagged "+tagK8sOperator)
-	})
-
-	t.Run("egress-connector", func(t *testing.T) {
-		require.NoError(t, k3s.DeployConnector("k8s-egress", []string{tagK8s}, []string{"10.40.0.0/14"}))
-
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			nodes, err := headscale.ListNodes()
-			assert.NoError(c, err)
-			assert.True(c, hasNodeWithTag(nodes, tagK8s),
-				"expected a proxy node tagged %s registered by the operator, got %s",
-				tagK8s, describeNodes(nodes))
-		}, integrationutil.ScaledTimeout(180*time.Second), 2*time.Second,
-			"egress proxy node should register and be tagged "+tagK8s)
-	})
-
-	t.Run("ingress-service-reachable-from-tailnet", func(t *testing.T) {
-		require.NoError(t, k3s.DeployEchoServer("echo"))
-		require.NoError(t, k3s.ExposeServiceToTailnet("echo", []string{tagK8s}))
-
-		clients, err := scenario.ListTailscaleClients("k8s-user")
-		require.NoError(t, err)
-		require.NotEmpty(t, clients)
-
-		// The operator registers the ingress proxy as a tailnet node named after
-		// the exposed Service (<namespace>-<service>, here default-echo-ts). Read
-		// its IP from Headscale rather than the Service's LoadBalancer status,
-		// which the operator does not populate against Headscale.
-		var svcIP string
-
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			nodes, err := headscale.ListNodes()
-			assert.NoError(c, err)
-
-			ip, ok := nodeIPv4ByName(nodes, "echo")
-			assert.True(c, ok, "ingress proxy node for echo should register, got %s", describeNodes(nodes))
-
-			svcIP = ip
-		}, integrationutil.ScaledTimeout(180*time.Second), 2*time.Second,
-			"operator should register an ingress proxy node for the exposed service")
-
-		// The out-of-cluster node reaches the in-cluster service through the proxy
-		// over the tailnet. /hostname is an agnhost endpoint that returns the
-		// backend pod's hostname, proving the request reached the service.
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			body, err := clients[0].Curl("http://" + svcIP + "/hostname")
-			assert.NoError(c, err)
-			assert.NotEmpty(c, body, "expected a response from the exposed service")
-		}, integrationutil.ScaledTimeout(120*time.Second), 2*time.Second,
-			"tsic node should reach the k8s-exposed service over the tailnet")
-	})
-
-	t.Run("proxy-group", func(t *testing.T) {
-		nodes, err := headscale.ListNodes()
-		require.NoError(t, err)
-
-		before := countNodesWithTag(nodes, tagK8s)
-
-		const replicas = 2
-
-		require.NoError(t, k3s.DeployProxyGroup("ts-ingress", "ingress", replicas, []string{tagK8s}))
-
-		// A ProxyGroup runs a pool of proxies; each replica registers its own node.
-		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			nodes, err := headscale.ListNodes()
-			assert.NoError(c, err)
-			assert.GreaterOrEqual(c, countNodesWithTag(nodes, tagK8s), before+replicas,
-				"expected %d more %s nodes from the ProxyGroup, got %s",
-				replicas, tagK8s, describeNodes(nodes))
-		}, integrationutil.ScaledTimeout(180*time.Second), 2*time.Second,
-			"ProxyGroup replicas should each register a node tagged "+tagK8s)
-	})
-}
-
-// hasNodeWithTag reports whether any node carries the given tag.
-func hasNodeWithTag(nodes []*clientv1.Node, tag string) bool {
-	return countNodesWithTag(nodes, tag) > 0
-}
-
-// countNodesWithTag counts the nodes carrying the given tag.
-func countNodesWithTag(nodes []*clientv1.Node, tag string) int {
-	count := 0
-
-	for _, node := range nodes {
-		if slices.Contains(node.Tags, tag) {
-			count++
-		}
-	}
-
-	return count
-}
-
-// nodeIPv4ByName returns the IPv4 of the first node whose given name contains
-// substr, identifying an operator-registered proxy by the Service/Connector it
-// fronts (e.g. "echo" matches the default-echo-ts ingress proxy).
-func nodeIPv4ByName(nodes []*clientv1.Node, substr string) (string, bool) {
-	for _, node := range nodes {
-		if !strings.Contains(node.GivenName, substr) {
-			continue
-		}
-
-		for _, ip := range node.IpAddresses {
-			addr, err := netip.ParseAddr(ip)
-			if err == nil && addr.Is4() {
-				return ip, true
-			}
-		}
-	}
-
-	return "", false
-}
-
-// describeNodes renders a compact name->tags summary for failure messages.
-func describeNodes(nodes []*clientv1.Node) string {
-	parts := make([]string, 0, len(nodes))
-	for _, node := range nodes {
-		parts = append(parts, fmt.Sprintf("%s%v", node.Name, node.Tags))
-	}
-
-	return "[" + strings.Join(parts, " ") + "]"
-}
diff --git a/integration/route_test.go b/integration/route_test.go
index 387a0ae1f..a9b1f7f5c 100644
--- a/integration/route_test.go
+++ b/integration/route_test.go
@@ -8,13 +8,14 @@ import (
 	"net/netip"
 	"slices"
 	"sort"
+	"strconv"
 	"strings"
 	"testing"
 	"time"
 
 	cmpdiff "github.com/google/go-cmp/cmp"
 	"github.com/google/go-cmp/cmp/cmpopts"
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/types"
 	"github.com/juanfont/headscale/hscontrol/util"
@@ -86,8 +87,8 @@ func TestEnablingRoutes(t *testing.T) {
 	err = scenario.WaitForTailscaleSync()
 	requireNoErrSync(t, err)
 
-	var nodes []*clientv1.Node
-	// Wait for route advertisements to propagate to [state.NodeStore]
+	var nodes []*v1.Node
+	// Wait for route advertisements to propagate to NodeStore
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		var err error
 
@@ -95,9 +96,9 @@ func TestEnablingRoutes(t *testing.T) {
 		assert.NoError(ct, err)
 
 		for _, node := range nodes {
-			assert.Len(ct, node.AvailableRoutes, 1)
-			assert.Empty(ct, node.ApprovedRoutes)
-			assert.Empty(ct, node.SubnetRoutes)
+			assert.Len(ct, node.GetAvailableRoutes(), 1)
+			assert.Empty(ct, node.GetApprovedRoutes())
+			assert.Empty(ct, node.GetSubnetRoutes())
 		}
 	}, integrationutil.ScaledTimeout(10*time.Second), 100*time.Millisecond, "route advertisements should propagate to all nodes")
 
@@ -113,18 +114,18 @@ func TestEnablingRoutes(t *testing.T) {
 
 				assert.Nil(c, peerStatus.PrimaryRoutes)
 			}
-		}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying no routes are active before approval")
+		}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying no routes are active before approval")
 	}
 
 	for _, node := range nodes {
 		_, err := headscale.ApproveRoutes(
-			mustParseID(node.Id),
-			util.MustStringsToPrefixes(node.AvailableRoutes),
+			node.GetId(),
+			util.MustStringsToPrefixes(node.GetAvailableRoutes()),
 		)
 		require.NoError(t, err)
 	}
 
-	// Wait for route approvals to propagate to [state.NodeStore]
+	// Wait for route approvals to propagate to NodeStore
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		var err error
 
@@ -132,9 +133,9 @@ func TestEnablingRoutes(t *testing.T) {
 		assert.NoError(ct, err)
 
 		for _, node := range nodes {
-			assert.Len(ct, node.AvailableRoutes, 1)
-			assert.Len(ct, node.ApprovedRoutes, 1)
-			assert.Len(ct, node.SubnetRoutes, 1)
+			assert.Len(ct, node.GetAvailableRoutes(), 1)
+			assert.Len(ct, node.GetApprovedRoutes(), 1)
+			assert.Len(ct, node.GetSubnetRoutes(), 1)
 		}
 	}, integrationutil.ScaledTimeout(10*time.Second), 100*time.Millisecond, "route approvals should propagate to all nodes")
 
@@ -158,7 +159,7 @@ func TestEnablingRoutes(t *testing.T) {
 				requirePeerSubnetRoutesWithCollect(c, peerStatus, []netip.Prefix{netip.MustParsePrefix(expectedRoutes[string(peerStatus.ID)])})
 			}
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "clients should see new routes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "clients should see new routes")
 
 	_, err = headscale.ApproveRoutes(
 		1,
@@ -180,22 +181,21 @@ func TestEnablingRoutes(t *testing.T) {
 		assert.NoError(c, err)
 
 		for _, node := range nodes {
-			switch node.Id {
-			case "1":
-				assert.Len(c, node.AvailableRoutes, 1) // 10.0.0.0/24
-				assert.Len(c, node.ApprovedRoutes, 1)  // 10.0.1.0/24
-				assert.Empty(c, node.SubnetRoutes)
-			case "2":
-				assert.Len(c, node.AvailableRoutes, 1) // 10.0.1.0/24
-				assert.Empty(c, node.ApprovedRoutes)
-				assert.Empty(c, node.SubnetRoutes)
-			default:
-				assert.Len(c, node.AvailableRoutes, 1) // 10.0.2.0/24
-				assert.Len(c, node.ApprovedRoutes, 1)  // 10.0.2.0/24
-				assert.Len(c, node.SubnetRoutes, 1)    // 10.0.2.0/24
+			if node.GetId() == 1 {
+				assert.Len(c, node.GetAvailableRoutes(), 1) // 10.0.0.0/24
+				assert.Len(c, node.GetApprovedRoutes(), 1)  // 10.0.1.0/24
+				assert.Empty(c, node.GetSubnetRoutes())
+			} else if node.GetId() == 2 {
+				assert.Len(c, node.GetAvailableRoutes(), 1) // 10.0.1.0/24
+				assert.Empty(c, node.GetApprovedRoutes())
+				assert.Empty(c, node.GetSubnetRoutes())
+			} else {
+				assert.Len(c, node.GetAvailableRoutes(), 1) // 10.0.2.0/24
+				assert.Len(c, node.GetApprovedRoutes(), 1)  // 10.0.2.0/24
+				assert.Len(c, node.GetSubnetRoutes(), 1)    // 10.0.2.0/24
 			}
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "route state changes should propagate to nodes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "route state changes should propagate to nodes")
 
 	// Verify that the clients can see the new routes
 	for _, client := range allClients {
@@ -215,7 +215,7 @@ func TestEnablingRoutes(t *testing.T) {
 					requirePeerSubnetRoutesWithCollect(c, peerStatus, []netip.Prefix{netip.MustParsePrefix("10.0.2.0/24")})
 				}
 			}
-		}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying final route state visible to clients")
+		}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying final route state visible to clients")
 	}
 }
 
@@ -223,10 +223,7 @@ func TestEnablingRoutes(t *testing.T) {
 func TestHASubnetRouterFailover(t *testing.T) {
 	IntegrationSkip(t)
 
-	// HASlowConverge (not HAConverge): tailscale's wgengine sometimes
-	// keeps routing through the previous primary for ~2 min after
-	// the netmap update flips PrimaryRoutes server-side.
-	propagationTime := integrationutil.HASlowConvergeTimeout
+	propagationTime := integrationutil.ScaledTimeout(60 * time.Second)
 
 	// Helper function to validate primary routes table state
 	validatePrimaryRoutes := func(t *testing.T, headscale ControlServer, expectedRoutes *types.DebugRoutes, message string) {
@@ -333,7 +330,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	requireNoErrSync(t, err)
 
 	// Wait for route configuration changes after advertising routes
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err = headscale.ListNodes()
@@ -361,7 +358,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 		}, propagationTime, 200*time.Millisecond, "Verifying no routes are active before approval")
 	}
 
-	// Declare variables that will be used across multiple [assert.EventuallyWithT] blocks
+	// Declare variables that will be used across multiple EventuallyWithT blocks
 	var (
 		srs1, srs2, srs3 *ipnstate.Status
 		clientStatus     *ipnstate.Status
@@ -400,7 +397,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	t.Logf("  Expected: Client can access webservice through router 1 only")
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id),
+		MustFindNode(subRouter1.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
@@ -461,7 +458,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	t.Logf("[%s] Starting test section", time.Now().Format(TimestampFormat))
 	t.Logf("  Expected: Traffic flows through router 1 as it's the only approved route")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 1")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 1")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -479,11 +478,11 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state - router 1 is primary
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
 			// Note: Router 2 and 3 are available but not approved
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()),
 		},
 	}, "Router 1 should be primary for route "+pref.String())
 
@@ -498,7 +497,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	t.Logf("  Expected: HA is now active - if router 1 fails, router 2 can take over")
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id),
+		MustFindNode(subRouter2.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
@@ -514,7 +513,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 			requireNodeRouteCountWithCollect(c, nodes[1], 1, 1, 0)
 			requireNodeRouteCountWithCollect(c, nodes[2], 1, 0, 0)
 		}
-	}, integrationutil.ScaledTimeout(3*time.Second), integrationutil.FastPoll, "HA setup verification: Router 2 approved as STANDBY (available=1, approved=1, subnet=0), Router 1 stays PRIMARY (subnet=1)")
+	}, integrationutil.ScaledTimeout(3*time.Second), 200*time.Millisecond, "HA setup verification: Router 2 approved as STANDBY (available=1, approved=1, subnet=0), Router 1 stays PRIMARY (subnet=1)")
 
 	// Verify that the client has routes from the primary machine
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -559,12 +558,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state - router 1 still primary, router 2 approved but standby
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
 			// Note: Router 3 is available but not approved
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()),
 		},
 	}, "Router 1 should remain primary after router 2 approval")
 
@@ -576,7 +575,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	t.Logf("  Expected: Router 1 continues to handle all traffic (no change from before)")
 	t.Logf("  Expected: Router 2 is ready to take over if router 1 fails")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 1 in HA mode")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 1 in HA mode")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -594,12 +595,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state - router 1 primary, router 2 approved (standby)
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
 			// Note: Router 3 is available but not approved
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()),
 		},
 	}, "Router 1 primary with router 2 as standby")
 
@@ -615,7 +616,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	t.Logf("  Expected: Full HA configuration with 1 PRIMARY + 2 STANDBY routers")
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id),
+		MustFindNode(subRouter3.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
@@ -629,7 +630,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 		requireNodeRouteCountWithCollect(c, nodes[0], 1, 1, 1)
 		requireNodeRouteCountWithCollect(c, nodes[1], 1, 1, 0)
 		requireNodeRouteCountWithCollect(c, nodes[2], 1, 1, 0)
-	}, integrationutil.ScaledTimeout(3*time.Second), integrationutil.FastPoll, "Full HA verification: Router 3 approved as second STANDBY (available=1, approved=1, subnet=0), Router 1 PRIMARY, Router 2 first STANDBY")
+	}, integrationutil.ScaledTimeout(3*time.Second), 200*time.Millisecond, "Full HA verification: Router 3 approved as second STANDBY (available=1, approved=1, subnet=0), Router 1 PRIMARY, Router 2 first STANDBY")
 
 	// Verify that the client has routes from the primary machine
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -672,7 +673,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "Verifying full HA with 3 routers: Router 1 PRIMARY, Routers 2 & 3 STANDBY")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 1 with full HA")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 1 with full HA")
 
 	// Wait for traceroute to work correctly through the expected router
@@ -702,12 +705,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state - all 3 routers approved, router 1 still primary
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()): {pref},
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()),
 		},
 	}, "Router 1 primary with all 3 routers approved")
 
@@ -763,7 +766,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "Failover verification: Router 1 offline, Router 2 should be new PRIMARY with routes, Router 3 still STANDBY")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 2 after failover")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 2 after failover")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -782,11 +787,11 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
 			// Router 1 is disconnected, so not in AvailableRoutes
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()): {pref},
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()),
 		},
 	}, "Router 2 should be primary after router 1 failure")
 
@@ -835,7 +840,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "Second failover verification: Router 1 & 2 offline, Router 3 should be new PRIMARY (last router standing) with routes")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 3 after second failover")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 3 after second failover")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -854,10 +861,10 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
 			// Routers 1 and 2 are disconnected, so not in AvailableRoutes
-			types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()): {pref},
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()),
 		},
 	}, "Router 3 should be primary after router 2 failure")
 
@@ -913,7 +920,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "Recovery verification: Router 1 back online as STANDBY, Router 3 remains PRIMARY (no flapping) with routes")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can still reach webservice through router 3 after router 1 recovery")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can still reach webservice through router 3 after router 1 recovery")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -931,12 +940,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state - router 3 remains primary after router 1 comes back
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
 			// Router 2 is still disconnected
-			types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()): {pref},
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()),
 		},
 	}, "Router 3 should remain primary after router 1 recovery")
 
@@ -956,7 +965,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	require.NoError(t, err)
 
 	// Wait for nodestore batch processing to complete and online status to be updated
-	// [state.NodeStore] batching timeout is 500ms, so we wait up to 10 seconds for all routers to be online
+	// NodeStore batching timeout is 500ms, so we wait up to 10 seconds for all routers to be online
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		clientStatus, err = client.Status()
 		assert.NoError(c, err)
@@ -991,10 +1000,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 				pref,
 			)
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "Full recovery verification: All 3 routers online, Router 3 remains PRIMARY (no flapping) with routes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "Full recovery verification: All 3 routers online, Router 3 remains PRIMARY (no flapping) with routes")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 3 after full recovery")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 3 after full recovery")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1012,12 +1023,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state - router 3 remains primary after all routers back online
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()): {pref},
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()),
 		},
 	}, "Router 3 should remain primary after full recovery")
 
@@ -1030,10 +1041,10 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	t.Logf("  Expected: Router 1 (%s) should become new PRIMARY (lowest ID with approved route)", subRouter1.Hostname())
 	t.Logf("  Expected: Router 2 (%s) remains STANDBY", subRouter2.Hostname())
 	t.Logf("  Expected: Router 3 (%s) goes to advertised-only state (no longer serving)", subRouter3.Hostname())
-	_, err = headscale.ApproveRoutes(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id), []netip.Prefix{})
+	_, err = headscale.ApproveRoutes(MustFindNode(subRouter3.Hostname(), nodes).GetId(), []netip.Prefix{})
 
 	// Wait for nodestore batch processing and route state changes to complete
-	// [state.NodeStore] batching timeout is 500ms, so we wait up to 10 seconds for route failover
+	// NodeStore batching timeout is 500ms, so we wait up to 10 seconds for route failover
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err = headscale.ListNodes()
 		assert.NoError(c, err)
@@ -1043,7 +1054,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 		requireNodeRouteCountWithCollect(c, MustFindNode(subRouter1.Hostname(), nodes), 1, 1, 1)
 		requireNodeRouteCountWithCollect(c, MustFindNode(subRouter2.Hostname(), nodes), 1, 1, 0)
 		requireNodeRouteCountWithCollect(c, MustFindNode(subRouter3.Hostname(), nodes), 1, 0, 0)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "Route disable verification: Router 3 route disabled, Router 1 should be new PRIMARY, Router 2 STANDBY")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "Route disable verification: Router 3 route disabled, Router 1 should be new PRIMARY, Router 2 STANDBY")
 
 	// Verify that the route is announced from subnet router 1
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1079,7 +1090,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "Verifying Router 1 becomes PRIMARY after Router 3 route disabled")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 1 after route disable")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 1 after route disable")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1097,12 +1110,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state - router 1 is primary after router 3 route disabled
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
 			// Router 3's route is no longer approved, so not in AvailableRoutes
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()),
 		},
 	}, "Router 1 should be primary after router 3 route disabled")
 
@@ -1116,10 +1129,10 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	t.Logf("  Expected: Router 2 (%s) should become new PRIMARY (only remaining approved route)", subRouter2.Hostname())
 	t.Logf("  Expected: Router 1 (%s) goes to advertised-only state", subRouter1.Hostname())
 	t.Logf("  Expected: Router 3 (%s) remains advertised-only", subRouter3.Hostname())
-	_, err = headscale.ApproveRoutes(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id), []netip.Prefix{})
+	_, err = headscale.ApproveRoutes(MustFindNode(subRouter1.Hostname(), nodes).GetId(), []netip.Prefix{})
 
 	// Wait for nodestore batch processing and route state changes to complete
-	// [state.NodeStore] batching timeout is 500ms, so we wait up to 10 seconds for route failover
+	// NodeStore batching timeout is 500ms, so we wait up to 10 seconds for route failover
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err = headscale.ListNodes()
 		assert.NoError(c, err)
@@ -1129,7 +1142,7 @@ func TestHASubnetRouterFailover(t *testing.T) {
 		requireNodeRouteCountWithCollect(c, MustFindNode(subRouter1.Hostname(), nodes), 1, 0, 0)
 		requireNodeRouteCountWithCollect(c, MustFindNode(subRouter2.Hostname(), nodes), 1, 1, 1)
 		requireNodeRouteCountWithCollect(c, MustFindNode(subRouter3.Hostname(), nodes), 1, 0, 0)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "Second route disable verification: Router 1 route disabled, Router 2 should be new PRIMARY")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "Second route disable verification: Router 1 route disabled, Router 2 should be new PRIMARY")
 
 	// Verify that the route is announced from subnet router 1
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1165,7 +1178,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "Verifying Router 2 becomes PRIMARY after Router 1 route disabled")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 2 after second route disable")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 2 after second route disable")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1184,11 +1199,11 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
 			// Router 1's route is no longer approved, so not in AvailableRoutes
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
 			// Router 3's route is still not approved
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()),
 		},
 	}, "Router 2 should be primary after router 1 route disabled")
 
@@ -1205,8 +1220,8 @@ func TestHASubnetRouterFailover(t *testing.T) {
 
 	r1Node := MustFindNode(subRouter1.Hostname(), nodes)
 	_, err = headscale.ApproveRoutes(
-		mustParseID(r1Node.Id),
-		util.MustStringsToPrefixes(r1Node.AvailableRoutes),
+		r1Node.GetId(),
+		util.MustStringsToPrefixes(r1Node.GetAvailableRoutes()),
 	)
 
 	// Wait for route state changes after re-enabling r1
@@ -1250,7 +1265,9 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "Verifying Router 2 remains PRIMARY after Router 1 route re-enabled")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "Verifying client can reach webservice through router 2 after route re-enable")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "Verifying client can reach webservice through router 2 after route re-enable")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1268,12 +1285,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state after router 1 re-approval
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
 			// Router 3 route is still not approved
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()),
 		},
 	}, "Router 2 should remain primary after router 1 re-approval")
 
@@ -1290,8 +1307,8 @@ func TestHASubnetRouterFailover(t *testing.T) {
 
 	r3Node := MustFindNode(subRouter3.Hostname(), nodes)
 	_, err = headscale.ApproveRoutes(
-		mustParseID(r3Node.Id),
-		util.MustStringsToPrefixes(r3Node.AvailableRoutes),
+		r3Node.GetId(),
+		util.MustStringsToPrefixes(r3Node.GetAvailableRoutes()),
 	)
 
 	// Wait for route state changes after re-enabling r3
@@ -1310,12 +1327,12 @@ func TestHASubnetRouterFailover(t *testing.T) {
 	// Validate primary routes table state after router 3 re-approval
 	validatePrimaryRoutes(t, headscale, &types.DebugRoutes{
 		AvailableRoutes: map[types.NodeID][]netip.Prefix{
-			types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)): {pref},
-			types.NodeID(mustParseID(MustFindNode(subRouter3.Hostname(), nodes).Id)): {pref},
+			types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()): {pref},
+			types.NodeID(MustFindNode(subRouter3.Hostname(), nodes).GetId()): {pref},
 		},
 		PrimaryRoutes: map[string]types.NodeID{
-			pref.String(): types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id)),
+			pref.String(): types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId()),
 		},
 	}, "Router 2 should remain primary after router 3 re-approval")
 
@@ -1393,40 +1410,28 @@ func TestSubnetRouteACL(t *testing.T) {
 
 	client := allClients[1]
 
-	// Read Self.ID inside a retry (it lags initial connection); apply
-	// the route mutation outside, since retrying a mutation hides
-	// real failures.
 	for _, client := range allClients {
-		var status *ipnstate.Status
-
-		require.EventuallyWithT(t, func(c *assert.CollectT) {
-			s, err := client.Status()
+		assert.EventuallyWithT(t, func(c *assert.CollectT) {
+			status, err := client.Status()
 			assert.NoError(c, err)
-			assert.NotNil(c, s)
 
-			if s != nil {
-				status = s
+			if route, ok := expectedRoutes[string(status.Self.ID)]; ok {
+				command := []string{
+					"tailscale",
+					"set",
+					"--advertise-routes=" + route,
+				}
+				_, _, err = client.Execute(command)
+				assert.NoErrorf(c, err, "failed to advertise route: %s", err)
 			}
-		}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Reading client status before route advertisement")
-
-		route, ok := expectedRoutes[string(status.Self.ID)]
-		if !ok {
-			continue
-		}
-
-		_, _, err = client.Execute([]string{
-			"tailscale",
-			"set",
-			"--advertise-routes=" + route,
-		})
-		require.NoErrorf(t, err, "failed to advertise route on %s", client.Hostname())
+		}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Configuring route advertisements")
 	}
 
 	err = scenario.WaitForTailscaleSync()
 	requireNoErrSync(t, err)
 
 	// Wait for route advertisements to propagate to the server
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 
 	require.EventuallyWithT(t, func(c *assert.CollectT) {
 		var err error
@@ -1437,12 +1442,12 @@ func TestSubnetRouteACL(t *testing.T) {
 
 		// Find the node that should have the route by checking node IDs
 		var (
-			routeNode *clientv1.Node
-			otherNode *clientv1.Node
+			routeNode *v1.Node
+			otherNode *v1.Node
 		)
 
 		for _, node := range nodes {
-			nodeIDStr := node.Id
+			nodeIDStr := strconv.FormatUint(node.GetId(), 10)
 			if _, shouldHaveRoute := expectedRoutes[nodeIDStr]; shouldHaveRoute {
 				routeNode = node
 			} else {
@@ -1453,7 +1458,7 @@ func TestSubnetRouteACL(t *testing.T) {
 		assert.NotNil(c, routeNode, "could not find node that should have route")
 		assert.NotNil(c, otherNode, "could not find node that should not have route")
 
-		// After [state.NodeStore] fix: routes are properly tracked in route manager
+		// After NodeStore fix: routes are properly tracked in route manager
 		// This test uses a policy with NO auto-approvers, so routes should be:
 		// announced=1, approved=0, subnet=0 (routes announced but not approved)
 		requireNodeRouteCountWithCollect(c, routeNode, 1, 0, 0)
@@ -1473,7 +1478,7 @@ func TestSubnetRouteACL(t *testing.T) {
 				assert.Nil(c, peerStatus.PrimaryRoutes)
 				requirePeerSubnetRoutesWithCollect(c, peerStatus, nil)
 			}
-		}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying no routes are active before approval")
+		}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying no routes are active before approval")
 	}
 
 	_, err = headscale.ApproveRoutes(
@@ -1490,7 +1495,7 @@ func TestSubnetRouteACL(t *testing.T) {
 
 		requireNodeRouteCountWithCollect(c, nodes[0], 1, 1, 1)
 		requireNodeRouteCountWithCollect(c, nodes[1], 0, 0, 0)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "route state changes should propagate to nodes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "route state changes should propagate to nodes")
 
 	// Verify that the client has routes from the primary machine
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1509,7 +1514,7 @@ func TestSubnetRouteACL(t *testing.T) {
 		}
 
 		requirePeerSubnetRoutesWithCollect(c, srs1PeerStatus, []netip.Prefix{netip.MustParsePrefix(expectedRoutes["1"])})
-	}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying client can see subnet routes from router")
+	}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying client can see subnet routes from router")
 
 	// Wait for packet filter updates to propagate to client netmap
 	wantClientFilter := []filter.Match{
@@ -1544,7 +1549,7 @@ func TestSubnetRouteACL(t *testing.T) {
 		if diff := cmpdiff.Diff(wantClientFilter, clientNm.PacketFilter, util.ViewSliceIPProtoComparer, util.PrefixComparer); diff != "" {
 			assert.Fail(c, fmt.Sprintf("Client (%s) filter, unexpected result (-want +got):\n%s", client.Hostname(), diff))
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for client packet filter to update")
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for client packet filter to update")
 
 	// Wait for packet filter updates to propagate to subnet router netmap
 	// The two ACL rules (group:admins -> group:admins:* and group:admins -> 10.33.0.0/16:*)
@@ -1585,7 +1590,7 @@ func TestSubnetRouteACL(t *testing.T) {
 		if diff := cmpdiff.Diff(wantSubnetFilter, subnetNm.PacketFilter, util.ViewSliceIPProtoComparer, util.PrefixComparer); diff != "" {
 			assert.Fail(c, fmt.Sprintf("Subnet (%s) filter, unexpected result (-want +got):\n%s", subRouter1.Hostname(), diff))
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for subnet router packet filter to update")
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for subnet router packet filter to update")
 }
 
 // TestEnablingExitRoutes tests enabling exit routes for clients.
@@ -1623,7 +1628,7 @@ func TestEnablingExitRoutes(t *testing.T) {
 	err = scenario.WaitForTailscaleSync()
 	requireNoErrSync(t, err)
 
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		var err error
@@ -1634,7 +1639,7 @@ func TestEnablingExitRoutes(t *testing.T) {
 
 		requireNodeRouteCountWithCollect(c, nodes[0], 2, 0, 0)
 		requireNodeRouteCountWithCollect(c, nodes[1], 2, 0, 0)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll, "Waiting for route advertisements to propagate")
+	}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond, "Waiting for route advertisements to propagate")
 
 	// Verify that no routes has been sent to the client,
 	// they are not yet enabled.
@@ -1648,18 +1653,18 @@ func TestEnablingExitRoutes(t *testing.T) {
 
 				assert.Nil(c, peerStatus.PrimaryRoutes)
 			}
-		}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying no exit routes are active before approval")
+		}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying no exit routes are active before approval")
 	}
 
 	// Enable all routes, but do v4 on one and v6 on other to ensure they
 	// are both added since they are exit routes.
 	_, err = headscale.ApproveRoutes(
-		mustParseID(nodes[0].Id),
+		nodes[0].GetId(),
 		[]netip.Prefix{tsaddr.AllIPv4()},
 	)
 	require.NoError(t, err)
 	_, err = headscale.ApproveRoutes(
-		mustParseID(nodes[1].Id),
+		nodes[1].GetId(),
 		[]netip.Prefix{tsaddr.AllIPv6()},
 	)
 	require.NoError(t, err)
@@ -1672,7 +1677,7 @@ func TestEnablingExitRoutes(t *testing.T) {
 
 		requireNodeRouteCountWithCollect(c, nodes[0], 2, 2, 2)
 		requireNodeRouteCountWithCollect(c, nodes[1], 2, 2, 2)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "route state changes should propagate to both nodes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "route state changes should propagate to both nodes")
 
 	// Wait for route state changes to propagate to clients
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1693,7 +1698,7 @@ func TestEnablingExitRoutes(t *testing.T) {
 				}
 			}
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "clients should see new routes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "clients should see new routes")
 }
 
 // TestExitRoutesWithAutogroupInternetACL reproduces juanfont/headscale#3212.
@@ -1705,7 +1710,7 @@ func TestEnablingExitRoutes(t *testing.T) {
 // (verified against a live tailnet on 2026-04-28; see captures
 // routes-b17/b18 in tscap). The bug was that headscale stripped
 // autogroup:internet rules from both the client packet filter AND the
-// matcher source used by [types.Node.CanAccess], breaking exit-node visibility.
+// matcher source used by Node.CanAccess, breaking exit-node visibility.
 func TestExitRoutesWithAutogroupInternetACL(t *testing.T) {
 	IntegrationSkip(t)
 
@@ -1750,11 +1755,11 @@ func TestExitRoutesWithAutogroupInternetACL(t *testing.T) {
 	requireNoErrGetHeadscale(t, err)
 
 	// The autogroup:internet ACL grants no peer visibility until the
-	// exit routes are approved ([types.Node.IsExitNode] flips on approval),
+	// exit routes are approved (Node.IsExitNode() flips on approval),
 	// so the standard WaitForTailscaleSync wait would deadlock here —
-	// the post-approval [assert.EventuallyWithT] block below covers the peer
+	// the post-approval EventuallyWithT block below covers the peer
 	// state we actually care about.
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err = headscale.ListNodes()
@@ -1763,19 +1768,19 @@ func TestExitRoutesWithAutogroupInternetACL(t *testing.T) {
 
 		requireNodeRouteCountWithCollect(c, nodes[0], 2, 0, 0)
 		requireNodeRouteCountWithCollect(c, nodes[1], 2, 0, 0)
-	}, integrationutil.ScaledTimeout(20*time.Second), integrationutil.FastPoll,
+	}, integrationutil.ScaledTimeout(20*time.Second), 200*time.Millisecond,
 		"Waiting for exit-route advertisements to propagate")
 
 	// Approve exit routes on both nodes so either could serve as
 	// alice's exit. The bug fix is about visibility, not which node
 	// is chosen.
 	_, err = headscale.ApproveRoutes(
-		mustParseID(nodes[0].Id),
+		nodes[0].GetId(),
 		[]netip.Prefix{tsaddr.AllIPv4(), tsaddr.AllIPv6()},
 	)
 	require.NoError(t, err)
 	_, err = headscale.ApproveRoutes(
-		mustParseID(nodes[1].Id),
+		nodes[1].GetId(),
 		[]netip.Prefix{tsaddr.AllIPv4(), tsaddr.AllIPv6()},
 	)
 	require.NoError(t, err)
@@ -1787,12 +1792,12 @@ func TestExitRoutesWithAutogroupInternetACL(t *testing.T) {
 
 		requireNodeRouteCountWithCollect(c, nodes[0], 2, 2, 2)
 		requireNodeRouteCountWithCollect(c, nodes[1], 2, 2, 2)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll,
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond,
 		"approved exit routes should propagate to nodes")
 
 	// The end-to-end UX assertion: every client must see the OTHER
 	// node as a peer carrying both default-route prefixes in
-	// AllowedIPs. Tailscale derives [ipnstate.PeerStatus.ExitNodeOption] from
+	// AllowedIPs. Tailscale derives PeerStatus.ExitNodeOption from
 	// those AllowedIPs, which is what `tailscale exit-node list`
 	// reads (see tailscale.com/ipn/ipnlocal/local.go).
 	for _, client := range allClients {
@@ -1830,7 +1835,7 @@ func TestExitRoutesWithAutogroupInternetACL(t *testing.T) {
 				"client %s should see the other node as a peer "+
 					"via the autogroup:internet ACL",
 				status.Self.HostName)
-		}, integrationutil.ScaledTimeout(15*time.Second), integrationutil.SlowPoll,
+		}, integrationutil.ScaledTimeout(15*time.Second), 500*time.Millisecond,
 			"client should see exit nodes as peers via autogroup:internet ACL")
 	}
 }
@@ -1902,8 +1907,8 @@ func TestSubnetRouterMultiNetwork(t *testing.T) {
 	_, _, err = user1c.Execute(command)
 	require.NoErrorf(t, err, "failed to advertise route: %s", err)
 
-	var nodes []*clientv1.Node
-	// Wait for route advertisements to propagate to [state.NodeStore]
+	var nodes []*v1.Node
+	// Wait for route advertisements to propagate to NodeStore
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		var err error
 
@@ -1925,11 +1930,11 @@ func TestSubnetRouterMultiNetwork(t *testing.T) {
 			assert.Nil(c, peerStatus.PrimaryRoutes)
 			requirePeerSubnetRoutesWithCollect(c, peerStatus, nil)
 		}
-	}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying no routes are active before approval")
+	}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying no routes are active before approval")
 
 	// Enable route
 	_, err = headscale.ApproveRoutes(
-		mustParseID(nodes[0].Id),
+		nodes[0].GetId(),
 		[]netip.Prefix{*pref},
 	)
 	require.NoError(t, err)
@@ -1942,7 +1947,7 @@ func TestSubnetRouterMultiNetwork(t *testing.T) {
 		assert.NoError(c, err)
 		assert.Len(c, nodes, 2)
 		requireNodeRouteCountWithCollect(c, nodes[0], 1, 1, 1)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "route state changes should propagate to nodes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "route state changes should propagate to nodes")
 
 	// Verify that the routes have been sent to the client
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -1958,7 +1963,7 @@ func TestSubnetRouterMultiNetwork(t *testing.T) {
 
 			requirePeerSubnetRoutesWithCollect(c, peerStatus, []netip.Prefix{*pref})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "routes should be visible to client")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "routes should be visible to client")
 
 	usernet1, err := scenario.Network("usernet1")
 	require.NoError(t, err)
@@ -1974,8 +1979,10 @@ func TestSubnetRouterMultiNetwork(t *testing.T) {
 	t.Logf("url from %s to %s", user2c.Hostname(), url)
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, user2c, url, "Verifying client can reach webservice through subnet route")
-	}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying client can reach webservice through subnet route")
+		result, err := user2c.Curl(url)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
+	}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying client can reach webservice through subnet route")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		tr, err := user2c.Traceroute(webip)
@@ -1987,7 +1994,7 @@ func TestSubnetRouterMultiNetwork(t *testing.T) {
 		}
 
 		assertTracerouteViaIPWithCollect(c, tr, ip)
-	}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying traceroute goes through subnet router")
+	}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying traceroute goes through subnet router")
 }
 
 func TestSubnetRouterMultiNetworkExitNode(t *testing.T) {
@@ -2058,7 +2065,7 @@ func TestSubnetRouterMultiNetworkExitNode(t *testing.T) {
 	_, _, err = user1c.Execute(command)
 	require.NoErrorf(t, err, "failed to advertise routes: %s", err)
 
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 	// Wait for route advertisements to propagate (3 routes: v4 exit + v6 exit + subnet).
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		var err error
@@ -2081,10 +2088,10 @@ func TestSubnetRouterMultiNetworkExitNode(t *testing.T) {
 			assert.Nil(c, peerStatus.PrimaryRoutes)
 			requirePeerSubnetRoutesWithCollect(c, peerStatus, nil)
 		}
-	}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying no routes sent to client before approval")
+	}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying no routes sent to client before approval")
 
 	// Approve exit routes and subnet route.
-	_, err = headscale.ApproveRoutes(mustParseID(nodes[0].Id), []netip.Prefix{tsaddr.AllIPv4(), tsaddr.AllIPv6(), *route})
+	_, err = headscale.ApproveRoutes(nodes[0].GetId(), []netip.Prefix{tsaddr.AllIPv4(), tsaddr.AllIPv6(), *route})
 	require.NoError(t, err)
 
 	// Wait for route state changes to propagate.
@@ -2093,7 +2100,7 @@ func TestSubnetRouterMultiNetworkExitNode(t *testing.T) {
 		assert.NoError(c, err)
 		assert.Len(c, nodes, 2)
 		requireNodeRouteCountWithCollect(c, nodes[0], 3, 3, 3)
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "route state changes should propagate to nodes")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "route state changes should propagate to nodes")
 
 	// Wait for exit routes to be visible to the client.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -2104,7 +2111,7 @@ func TestSubnetRouterMultiNetworkExitNode(t *testing.T) {
 			peerStatus := status.Peer[peerKey]
 			assert.True(c, peerStatus.ExitNodeOption, "peer should be an exit node option")
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "exit routes should be visible to client")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "exit routes should be visible to client")
 
 	// Tell user2c to use user1c as an exit node.
 	command = []string{
@@ -2135,7 +2142,9 @@ func TestSubnetRouterMultiNetworkExitNode(t *testing.T) {
 	weburl := fmt.Sprintf("http://%s/etc/hostname", webip)
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, user2c, weburl, "user2 should reach webservice via exit node")
+		result, err := user2c.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, 10*time.Second, 200*time.Millisecond, "user2 should reach webservice via exit node")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -2151,9 +2160,9 @@ func TestSubnetRouterMultiNetworkExitNode(t *testing.T) {
 	}, 10*time.Second, 200*time.Millisecond, "user2 traceroute should go through user1 exit node")
 }
 
-func MustFindNode(hostname string, nodes []*clientv1.Node) *clientv1.Node {
+func MustFindNode(hostname string, nodes []*v1.Node) *v1.Node {
 	for _, node := range nodes {
-		if node.Name == hostname {
+		if node.GetName() == hostname {
 			return node
 		}
 	}
@@ -2182,7 +2191,7 @@ func MustFindNode(hostname string, nodes []*clientv1.Node) *clientv1.Node {
 func TestAutoApproveMultiNetwork(t *testing.T) {
 	IntegrationSkip(t)
 
-	// Timeout for [assert.EventuallyWithT] assertions.
+	// Timeout for EventuallyWithT assertions.
 	// Set generously to account for CI infrastructure variability.
 	assertTimeout := integrationutil.ScaledTimeout(60 * time.Second)
 
@@ -2430,7 +2439,7 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 				name := fmt.Sprintf("%s-advertiseduringup-%t-pol-%s", tt.name, advertiseDuringUp, polMode)
 				t.Run(name, func(t *testing.T) {
 					// Create a deep copy of the policy to avoid mutating the shared test case.
-					// Each subtest modifies [policyv2.AutoApproverPolicy.Routes] (add then delete), so we need
+					// Each subtest modifies AutoApprovers.Routes (add then delete), so we need
 					// an isolated copy to prevent state leakage between sequential test runs.
 					pol := &policyv2.Policy{
 						ACLs:      slices.Clone(tt.pol.ACLs),
@@ -2447,7 +2456,7 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 					require.NoErrorf(t, err, "failed to create scenario: %s", err)
 					defer scenario.ShutdownAssertNoPanics(t)
 
-					var nodes []*clientv1.Node
+					var nodes []*v1.Node
 
 					opts := []hsic.Option{
 						hsic.WithTestName("autoapprovemulti"),
@@ -2565,16 +2574,16 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 
 						// If the approver is a tag, create a tagged PreAuthKey
 						// (tags-as-identity model: tags come from PreAuthKey, not --advertise-tags)
-						var pak *clientv1.PreAuthKey
+						var pak *v1.PreAuthKey
 						if strings.HasPrefix(tt.approver, "tag:") {
-							pak, err = scenario.CreatePreAuthKeyWithTags(mustParseID(userMap["user1"].Id), false, false, []string{tt.approver})
+							pak, err = scenario.CreatePreAuthKeyWithTags(userMap["user1"].GetId(), false, false, []string{tt.approver})
 						} else {
-							pak, err = scenario.CreatePreAuthKey(mustParseID(userMap["user1"].Id), false, false)
+							pak, err = scenario.CreatePreAuthKey(userMap["user1"].GetId(), false, false)
 						}
 
 						require.NoError(t, err)
 
-						err = routerUsernet1.Login(headscale.GetEndpoint(), pak.Key)
+						err = routerUsernet1.Login(headscale.GetEndpoint(), pak.GetKey())
 						require.NoError(t, err)
 					}
 					// extra creation end.
@@ -2646,10 +2655,10 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 
 						routerNode := MustFindNode(routerUsernet1.Hostname(), nodes)
 						t.Logf("Initial auto-approval check - Router node %s: announced=%v, approved=%v, subnet=%v",
-							routerNode.Name,
-							routerNode.AvailableRoutes,
-							routerNode.ApprovedRoutes,
-							routerNode.SubnetRoutes)
+							routerNode.GetName(),
+							routerNode.GetAvailableRoutes(),
+							routerNode.GetApprovedRoutes(),
+							routerNode.GetSubnetRoutes())
 
 						requireNodeRouteCountWithCollect(c, routerNode, 1, 1, 1)
 					}, assertTimeout, 500*time.Millisecond, "Initial route auto-approval: Route should be approved via policy")
@@ -2710,7 +2719,9 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 					t.Logf("url from %s to %s", client.Hostname(), url)
 
 					assert.EventuallyWithT(t, func(c *assert.CollectT) {
-						assertCurlDockerHostname(c, client, url, "Verifying client can reach webservice through auto-approved route")
+						result, err := client.Curl(url)
+						assert.NoError(c, err)
+						assert.Len(c, result, 13)
 					}, assertTimeout, 200*time.Millisecond, "Verifying client can reach webservice through auto-approved route")
 
 					assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -2740,10 +2751,10 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 
 						routerNode := MustFindNode(routerUsernet1.Hostname(), nodes)
 						t.Logf("After policy removal - Router node %s: announced=%v, approved=%v, subnet=%v",
-							routerNode.Name,
-							routerNode.AvailableRoutes,
-							routerNode.ApprovedRoutes,
-							routerNode.SubnetRoutes)
+							routerNode.GetName(),
+							routerNode.GetAvailableRoutes(),
+							routerNode.GetApprovedRoutes(),
+							routerNode.GetSubnetRoutes())
 
 						requireNodeRouteCountWithCollect(c, routerNode, 1, 1, 1)
 					}, assertTimeout, 500*time.Millisecond, "Routes should remain approved after auto-approver removal")
@@ -2774,7 +2785,9 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 					t.Logf("url from %s to %s", client.Hostname(), url)
 
 					assert.EventuallyWithT(t, func(c *assert.CollectT) {
-						assertCurlDockerHostname(c, client, url, "Verifying client can still reach webservice after policy change")
+						result, err := client.Curl(url)
+						assert.NoError(c, err)
+						assert.Len(c, result, 13)
 					}, assertTimeout, 200*time.Millisecond, "Verifying client can still reach webservice after policy change")
 
 					assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -2791,7 +2804,7 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 
 					// Disable the route, making it unavailable since it is no longer auto-approved
 					_, err = headscale.ApproveRoutes(
-						mustParseID(MustFindNode(routerUsernet1.Hostname(), nodes).Id),
+						MustFindNode(routerUsernet1.Hostname(), nodes).GetId(),
 						[]netip.Prefix{},
 					)
 					require.NoError(t, err)
@@ -2869,7 +2882,9 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 					t.Logf("url from %s to %s", client.Hostname(), url)
 
 					assert.EventuallyWithT(t, func(c *assert.CollectT) {
-						assertCurlDockerHostname(c, client, url, "Verifying client can reach webservice after route re-approval")
+						result, err := client.Curl(url)
+						assert.NoError(c, err)
+						assert.Len(c, result, 13)
 					}, assertTimeout, 200*time.Millisecond, "Verifying client can reach webservice after route re-approval")
 
 					assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -3017,14 +3032,14 @@ func TestAutoApproveMultiNetwork(t *testing.T) {
 	}
 }
 
-// assertTracerouteViaIPWithCollect is a version of [assertTracerouteViaIP] that works with [assert.CollectT].
+// assertTracerouteViaIPWithCollect is a version of assertTracerouteViaIP that works with assert.CollectT.
 func assertTracerouteViaIPWithCollect(c *assert.CollectT, tr util.Traceroute, ip netip.Addr) {
 	assert.NotNil(c, tr)
 	assert.True(c, tr.Success)
 	assert.NoError(c, tr.Err) //nolint:testifylint // using assert.CollectT
 	assert.NotEmpty(c, tr.Route)
-	// Since we're inside [assert.EventuallyWithT], we can't use [require.Greater] with t
-	// but [assert.NotEmpty] above ensures len(tr.Route) > 0
+	// Since we're inside EventuallyWithT, we can't use require.Greater with t
+	// but assert.NotEmpty above ensures len(tr.Route) > 0
 	if len(tr.Route) > 0 {
 		assert.Equal(c, tr.Route[0].IP.String(), ip.String())
 	}
@@ -3078,10 +3093,10 @@ func requirePeerSubnetRoutesWithCollect(c *assert.CollectT, status *ipnstate.Pee
 	}
 }
 
-func requireNodeRouteCountWithCollect(c *assert.CollectT, node *clientv1.Node, announced, approved, subnet int) {
-	assert.Lenf(c, node.AvailableRoutes, announced, "expected %q announced routes(%v) to have %d route, had %d", node.Name, node.AvailableRoutes, announced, len(node.AvailableRoutes))
-	assert.Lenf(c, node.ApprovedRoutes, approved, "expected %q approved routes(%v) to have %d route, had %d", node.Name, node.ApprovedRoutes, approved, len(node.ApprovedRoutes))
-	assert.Lenf(c, node.SubnetRoutes, subnet, "expected %q subnet routes(%v) to have %d route, had %d", node.Name, node.SubnetRoutes, subnet, len(node.SubnetRoutes))
+func requireNodeRouteCountWithCollect(c *assert.CollectT, node *v1.Node, announced, approved, subnet int) {
+	assert.Lenf(c, node.GetAvailableRoutes(), announced, "expected %q announced routes(%v) to have %d route, had %d", node.GetName(), node.GetAvailableRoutes(), announced, len(node.GetAvailableRoutes()))
+	assert.Lenf(c, node.GetApprovedRoutes(), approved, "expected %q approved routes(%v) to have %d route, had %d", node.GetName(), node.GetApprovedRoutes(), approved, len(node.GetApprovedRoutes()))
+	assert.Lenf(c, node.GetSubnetRoutes(), subnet, "expected %q subnet routes(%v) to have %d route, had %d", node.GetName(), node.GetSubnetRoutes(), subnet, len(node.GetSubnetRoutes()))
 }
 
 // TestSubnetRouteACLFiltering tests that a node can only access subnet routes
@@ -3218,8 +3233,8 @@ func TestSubnetRouteACLFiltering(t *testing.T) {
 	err = scenario.WaitForTailscaleSync()
 	requireNoErrSync(t, err)
 
-	var routerNode, nodeNode *clientv1.Node
-	// Wait for route advertisements to propagate to [state.NodeStore]
+	var routerNode, nodeNode *v1.Node
+	// Wait for route advertisements to propagate to NodeStore
 	assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 		// List nodes and verify the router has 3 available routes
 		nodes, err := headscale.NodesByUser()
@@ -3240,8 +3255,8 @@ func TestSubnetRouteACLFiltering(t *testing.T) {
 
 	// Approve all routes for the router
 	_, err = headscale.ApproveRoutes(
-		mustParseID(routerNode.Id),
-		util.MustStringsToPrefixes(routerNode.AvailableRoutes),
+		routerNode.GetId(),
+		util.MustStringsToPrefixes(routerNode.GetAvailableRoutes()),
 	)
 	require.NoError(t, err)
 
@@ -3259,7 +3274,7 @@ func TestSubnetRouteACLFiltering(t *testing.T) {
 
 		// Check that the router has 3 routes now approved and available
 		requireNodeRouteCountWithCollect(c, routerNode, 3, 3, 3)
-	}, integrationutil.ScaledTimeout(15*time.Second), integrationutil.SlowPoll, "route state changes should propagate")
+	}, integrationutil.ScaledTimeout(15*time.Second), 500*time.Millisecond, "route state changes should propagate")
 
 	// Now check the client node status
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -3274,11 +3289,13 @@ func TestSubnetRouteACLFiltering(t *testing.T) {
 
 		// The node should only have 1 subnet route
 		requirePeerSubnetRoutesWithCollect(c, routerPeerStatus, []netip.Prefix{*route})
-	}, integrationutil.ScaledTimeout(5*time.Second), integrationutil.FastPoll, "Verifying node sees filtered subnet routes")
+	}, integrationutil.ScaledTimeout(5*time.Second), 200*time.Millisecond, "Verifying node sees filtered subnet routes")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, nodeClient, weburl, "Verifying node can reach webservice through allowed route")
-	}, integrationutil.HAConvergeTimeout, integrationutil.FastPoll, "Verifying node can reach webservice through allowed route")
+		result, err := nodeClient.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
+	}, integrationutil.ScaledTimeout(60*time.Second), 200*time.Millisecond, "Verifying node can reach webservice through allowed route")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		tr, err := nodeClient.Traceroute(webip)
@@ -3290,7 +3307,7 @@ func TestSubnetRouteACLFiltering(t *testing.T) {
 		}
 
 		assertTracerouteViaIPWithCollect(c, tr, ip)
-	}, integrationutil.HAConvergeTimeout, integrationutil.FastPoll, "Verifying traceroute goes through router")
+	}, integrationutil.ScaledTimeout(60*time.Second), 200*time.Millisecond, "Verifying traceroute goes through router")
 }
 
 // TestGrantViaSubnetSteering validates that via grants steer different source
@@ -3409,10 +3426,10 @@ func TestGrantViaSubnetSteering(t *testing.T) {
 	defer func() { _, _, _ = routerA.Shutdown() }()
 
 	pakRouterA, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["router"].Id), false, false, []string{"tag:router-a"},
+		userMap["router"].GetId(), false, false, []string{"tag:router-a"},
 	)
 	require.NoError(t, err)
-	err = routerA.Login(headscale.GetEndpoint(), pakRouterA.Key)
+	err = routerA.Login(headscale.GetEndpoint(), pakRouterA.GetKey())
 	require.NoError(t, err)
 	err = routerA.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -3426,10 +3443,10 @@ func TestGrantViaSubnetSteering(t *testing.T) {
 	defer func() { _, _, _ = routerB.Shutdown() }()
 
 	pakRouterB, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["router"].Id), false, false, []string{"tag:router-b"},
+		userMap["router"].GetId(), false, false, []string{"tag:router-b"},
 	)
 	require.NoError(t, err)
-	err = routerB.Login(headscale.GetEndpoint(), pakRouterB.Key)
+	err = routerB.Login(headscale.GetEndpoint(), pakRouterB.GetKey())
 	require.NoError(t, err)
 	err = routerB.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -3444,10 +3461,10 @@ func TestGrantViaSubnetSteering(t *testing.T) {
 	defer func() { _, _, _ = clientA.Shutdown() }()
 
 	pakClientA, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["client"].Id), false, false, []string{"tag:group-a"},
+		userMap["client"].GetId(), false, false, []string{"tag:group-a"},
 	)
 	require.NoError(t, err)
-	err = clientA.Login(headscale.GetEndpoint(), pakClientA.Key)
+	err = clientA.Login(headscale.GetEndpoint(), pakClientA.GetKey())
 	require.NoError(t, err)
 	err = clientA.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -3462,10 +3479,10 @@ func TestGrantViaSubnetSteering(t *testing.T) {
 	defer func() { _, _, _ = clientB.Shutdown() }()
 
 	pakClientB, err := scenario.CreatePreAuthKeyWithTags(
-		mustParseID(userMap["client"].Id), false, false, []string{"tag:group-b"},
+		userMap["client"].GetId(), false, false, []string{"tag:group-b"},
 	)
 	require.NoError(t, err)
-	err = clientB.Login(headscale.GetEndpoint(), pakClientB.Key)
+	err = clientB.Login(headscale.GetEndpoint(), pakClientB.GetKey())
 	require.NoError(t, err)
 	err = clientB.WaitForRunning(30 * time.Second)
 	require.NoError(t, err)
@@ -3497,21 +3514,21 @@ func TestGrantViaSubnetSteering(t *testing.T) {
 
 		routerANode := MustFindNode(routerA.Hostname(), nodes)
 		t.Logf("Router A %s: announced=%v, approved=%v, subnet=%v",
-			routerANode.Name,
-			routerANode.AvailableRoutes,
-			routerANode.ApprovedRoutes,
-			routerANode.SubnetRoutes)
-		assert.Len(c, routerANode.AvailableRoutes, 1, "Router A should have 1 announced route")
-		assert.Len(c, routerANode.ApprovedRoutes, 1, "Router A should have 1 approved route")
+			routerANode.GetName(),
+			routerANode.GetAvailableRoutes(),
+			routerANode.GetApprovedRoutes(),
+			routerANode.GetSubnetRoutes())
+		assert.Len(c, routerANode.GetAvailableRoutes(), 1, "Router A should have 1 announced route")
+		assert.Len(c, routerANode.GetApprovedRoutes(), 1, "Router A should have 1 approved route")
 
 		routerBNode := MustFindNode(routerB.Hostname(), nodes)
 		t.Logf("Router B %s: announced=%v, approved=%v, subnet=%v",
-			routerBNode.Name,
-			routerBNode.AvailableRoutes,
-			routerBNode.ApprovedRoutes,
-			routerBNode.SubnetRoutes)
-		assert.Len(c, routerBNode.AvailableRoutes, 1, "Router B should have 1 announced route")
-		assert.Len(c, routerBNode.ApprovedRoutes, 1, "Router B should have 1 approved route")
+			routerBNode.GetName(),
+			routerBNode.GetAvailableRoutes(),
+			routerBNode.GetApprovedRoutes(),
+			routerBNode.GetSubnetRoutes())
+		assert.Len(c, routerBNode.GetAvailableRoutes(), 1, "Router B should have 1 announced route")
+		assert.Len(c, routerBNode.GetApprovedRoutes(), 1, "Router B should have 1 approved route")
 	}, assertTimeout, 500*time.Millisecond, "Both routers should have auto-approved routes")
 
 	// Get webservice info.
@@ -3578,12 +3595,16 @@ func TestGrantViaSubnetSteering(t *testing.T) {
 
 	// Verify Client A can reach the webservice.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, clientA, weburl, "Client A should reach webservice")
+		result, err := clientA.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, assertTimeout, 200*time.Millisecond, "Client A should reach webservice")
 
 	// Verify Client B can reach the webservice.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, clientB, weburl, "Client B should reach webservice")
+		result, err := clientB.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, assertTimeout, 200*time.Millisecond, "Client B should reach webservice")
 
 	// Verify Client A's traffic goes through Router A.
@@ -3621,7 +3642,7 @@ func TestGrantViaSubnetSteering(t *testing.T) {
 func TestHASubnetRouterPingFailover(t *testing.T) {
 	IntegrationSkip(t)
 
-	propagationTime := integrationutil.HAConvergeTimeout
+	propagationTime := integrationutil.ScaledTimeout(60 * time.Second)
 
 	spec := ScenarioSpec{
 		NodesPerUser: 2,
@@ -3697,7 +3718,7 @@ func TestHASubnetRouterPingFailover(t *testing.T) {
 	err = scenario.WaitForTailscaleSync()
 	requireNoErrSync(t, err)
 
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err = headscale.ListNodes()
@@ -3707,19 +3728,19 @@ func TestHASubnetRouterPingFailover(t *testing.T) {
 
 	// Approve routes on both routers.
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id),
+		MustFindNode(subRouter1.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id),
+		MustFindNode(subRouter2.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
 
-	nodeID1 := types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id))
-	nodeID2 := types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id))
+	nodeID1 := types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId())
+	nodeID2 := types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId())
 
 	// Wait for HA to be set up: router 1 primary, router 2 standby.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -3736,7 +3757,9 @@ func TestHASubnetRouterPingFailover(t *testing.T) {
 
 	// Verify connectivity through router 1.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "client should reach webservice through router 1")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "client should reach webservice through router 1")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -3791,7 +3814,9 @@ func TestHASubnetRouterPingFailover(t *testing.T) {
 	t.Log("Failover detected. Verifying connectivity through router 2.")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "client should reach webservice through router 2")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "client should reach webservice through router 2")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -3858,14 +3883,14 @@ func TestHASubnetRouterPingFailover(t *testing.T) {
 //
 // Two assertion sets split the failure surface:
 //   - R1: server-side primary route table restores after reconnect.
-//     If R1 fails, the bug is in [state.State.Connect] / primaryRoutes.
+//     If R1 fails, the bug is in state.Connect / primaryRoutes.
 //   - R2: client's view shows r2 online with the route in PrimaryRoutes.
 //     If R1 passes and R2 fails, the bug is in change broadcast /
 //     mapBatcher / multiChannelNodeConn.
 func TestHASubnetRouterFailoverBothOffline(t *testing.T) {
 	IntegrationSkip(t)
 
-	propagationTime := integrationutil.HAConvergeTimeout
+	propagationTime := integrationutil.ScaledTimeout(60 * time.Second)
 
 	spec := ScenarioSpec{
 		NodesPerUser: 2,
@@ -3937,7 +3962,7 @@ func TestHASubnetRouterFailoverBothOffline(t *testing.T) {
 	err = scenario.WaitForTailscaleSync()
 	requireNoErrSync(t, err)
 
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err = headscale.ListNodes()
@@ -3947,19 +3972,19 @@ func TestHASubnetRouterFailoverBothOffline(t *testing.T) {
 
 	// Approve the route on both routers explicitly.
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id),
+		MustFindNode(subRouter1.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id),
+		MustFindNode(subRouter2.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
 
-	nodeID1 := types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id))
-	nodeID2 := types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id))
+	nodeID1 := types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId())
+	nodeID2 := types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId())
 
 	// Sanity: r1 starts as primary (lower NodeID).
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -3972,7 +3997,9 @@ func TestHASubnetRouterFailoverBothOffline(t *testing.T) {
 
 	// Confirm initial connectivity through r1.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "client reaches webservice via r1")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "client reaches webservice via r1")
 
 	t.Log("=== Step 1: r1 goes offline. r2 should take over. ===")
@@ -4040,7 +4067,9 @@ func TestHASubnetRouterFailoverBothOffline(t *testing.T) {
 
 	// End-to-end traffic should reach the webservice via r2.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "client reaches webservice via r2 after recovery")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 200*time.Millisecond, "client reaches webservice via r2 after recovery")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -4066,13 +4095,13 @@ func TestHASubnetRouterFailoverBothOffline(t *testing.T) {
 //     connection until kernel keepalives time out (often >60 s). When
 //     the cable returns, two server-side longpoll sessions can overlap.
 //
-// This variant blocks all traffic between the router container and
-// headscale via iptables and then removes the block to mimic the
-// cable-pull behaviour.
+// Issue #3203 reports the bug after cable pulls; this variant blocks all
+// traffic between the router container and headscale via iptables and then
+// removes the block to mimic that behaviour.
 func TestHASubnetRouterFailoverBothOfflineCablePull(t *testing.T) {
 	IntegrationSkip(t)
 
-	propagationTime := integrationutil.HASlowConvergeTimeout
+	propagationTime := integrationutil.ScaledTimeout(120 * time.Second)
 
 	spec := ScenarioSpec{
 		NodesPerUser: 2,
@@ -4142,7 +4171,7 @@ func TestHASubnetRouterFailoverBothOfflineCablePull(t *testing.T) {
 	err = scenario.WaitForTailscaleSync()
 	requireNoErrSync(t, err)
 
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err = headscale.ListNodes()
@@ -4151,18 +4180,18 @@ func TestHASubnetRouterFailoverBothOfflineCablePull(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "nodes registered")
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id),
+		MustFindNode(subRouter1.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id),
+		MustFindNode(subRouter2.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
 
-	nodeID2 := types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id))
+	nodeID2 := types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId())
 
 	// Sanity: r1 starts as primary.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
@@ -4263,7 +4292,9 @@ func TestHASubnetRouterFailoverBothOfflineCablePull(t *testing.T) {
 	}, propagationTime, 1*time.Second, "R2: waiting for client to see r2")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
-		assertCurlDockerHostname(c, client, weburl, "client reaches webservice via r2 after recovery")
+		result, err := client.Curl(weburl)
+		assert.NoError(c, err)
+		assert.Len(c, result, 13)
 	}, propagationTime, 1*time.Second, "client reaches webservice via r2 after recovery")
 }
 
@@ -4298,7 +4329,7 @@ func TestHASubnetRouterFailoverBothOfflineCablePull(t *testing.T) {
 func TestHASubnetRouterFailoverDockerDisconnect(t *testing.T) {
 	IntegrationSkip(t)
 
-	propagationTime := integrationutil.HASlowConvergeTimeout
+	propagationTime := integrationutil.ScaledTimeout(120 * time.Second)
 	flapWindow := integrationutil.ScaledTimeout(40 * time.Second)
 
 	spec := ScenarioSpec{
@@ -4366,7 +4397,7 @@ func TestHASubnetRouterFailoverDockerDisconnect(t *testing.T) {
 	err = scenario.WaitForTailscaleSync()
 	requireNoErrSync(t, err)
 
-	var nodes []*clientv1.Node
+	var nodes []*v1.Node
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err = headscale.ListNodes()
@@ -4375,19 +4406,19 @@ func TestHASubnetRouterFailoverDockerDisconnect(t *testing.T) {
 	}, propagationTime, 200*time.Millisecond, "nodes registered")
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id),
+		MustFindNode(subRouter1.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
 
 	_, err = headscale.ApproveRoutes(
-		mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id),
+		MustFindNode(subRouter2.Hostname(), nodes).GetId(),
 		[]netip.Prefix{pref},
 	)
 	require.NoError(t, err)
 
-	nodeID1 := types.NodeID(mustParseID(MustFindNode(subRouter1.Hostname(), nodes).Id))
-	nodeID2 := types.NodeID(mustParseID(MustFindNode(subRouter2.Hostname(), nodes).Id))
+	nodeID1 := types.NodeID(MustFindNode(subRouter1.Hostname(), nodes).GetId())
+	nodeID2 := types.NodeID(MustFindNode(subRouter2.Hostname(), nodes).GetId())
 
 	// requirePrimary blocks until headscale reports want as the
 	// primary advertiser for pref.
@@ -4407,7 +4438,9 @@ func TestHASubnetRouterFailoverDockerDisconnect(t *testing.T) {
 	requireTrafficWorks := func(msg string) {
 		t.Helper()
 		assert.EventuallyWithT(t, func(c *assert.CollectT) {
-			assertCurlDockerHostname(c, client, weburl, msg)
+			result, err := client.Curl(weburl)
+			assert.NoError(c, err)
+			assert.Len(c, result, 13)
 		}, propagationTime, 1*time.Second, msg)
 	}
 
diff --git a/integration/scenario.go b/integration/scenario.go
index 7af281619..779a9bffe 100644
--- a/integration/scenario.go
+++ b/integration/scenario.go
@@ -21,9 +21,10 @@ import (
 	"testing"
 	"time"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	"github.com/juanfont/headscale/hscontrol/capver"
 	"github.com/juanfont/headscale/hscontrol/types"
+	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/integration/dockertestutil"
 	"github.com/juanfont/headscale/integration/dsic"
 	"github.com/juanfont/headscale/integration/hsic"
@@ -41,7 +42,6 @@ import (
 	"tailscale.com/envknob"
 	"tailscale.com/util/mak"
 	"tailscale.com/util/multierr"
-	"tailscale.com/util/rands"
 )
 
 const (
@@ -56,7 +56,7 @@ var (
 	errNoClientFound        = errors.New("client not found")
 
 	// AllVersions represents a list of Tailscale versions the suite
-	// uses to test compatibility with the [ControlServer].
+	// uses to test compatibility with the ControlServer.
 	//
 	// The list contains two special cases, "head" and "unstable" which
 	// points to the current tip of Tailscale's main branch and the latest
@@ -78,7 +78,7 @@ var (
 	)
 )
 
-// User represents a User in the [ControlServer] and a map of [TailscaleClient]'s
+// User represents a User in the ControlServer and a map of TailscaleClient's
 // associated with the User.
 type User struct {
 	Clients map[string]TailscaleClient
@@ -88,10 +88,10 @@ type User struct {
 	syncWaitGroup   errgroup.Group
 }
 
-// Scenario is a representation of an environment with one [ControlServer] and
-// one or more [User]'s and its associated [TailscaleClient]s.
+// Scenario is a representation of an environment with one ControlServer and
+// one or more User's and its associated TailscaleClients.
 // A Scenario is intended to simplify setting up a new testcase for testing
-// a [ControlServer] with [TailscaleClient]s.
+// a ControlServer with TailscaleClients.
 // TODO(kradalby): make control server configurable, test correctness with Tailscale SaaS.
 type Scenario struct {
 	// TODO(kradalby): support multiple headcales for later, currently only
@@ -177,34 +177,14 @@ func (s *Scenario) prefixedNetworkName(name string) string {
 	return s.testHashPrefix + "-" + name
 }
 
-// NewScenario creates a test [Scenario] which can be used to bootstraps a [ControlServer] with
-// a set of [User]s and [TailscaleClient]s.
+// NewScenario creates a test Scenario which can be used to bootstraps a ControlServer with
+// a set of Users and TailscaleClients.
 func NewScenario(spec ScenarioSpec) (*Scenario, error) {
 	pool, err := dockertest.NewPool("")
 	if err != nil {
 		return nil, fmt.Errorf("connecting to docker: %w", err)
 	}
 
-	// dockertest's bundled go-dockerclient stamps image builds with API
-	// v1.25 (the `ver` tag on BuildImageOptions.Dockerfile) whenever the
-	// client has no pinned version. Docker Engine 29 raised the minimum API
-	// version to 1.40 and rejects v1.25 with a 400, which surfaces mid-build
-	// as a "write: broken pipe". Pin the client to the daemon's reported API
-	// version so build (and every other) request uses an accepted path.
-	version, err := pool.Client.Version()
-	if err != nil {
-		return nil, fmt.Errorf("querying docker API version: %w", err)
-	}
-
-	if api := version.Get("ApiVersion"); api != "" {
-		client, err := docker.NewVersionedClientFromEnv(api)
-		if err != nil {
-			return nil, fmt.Errorf("pinning docker client to API version %s: %w", api, err)
-		}
-
-		pool.Client = client
-	}
-
 	// Opportunity to clean up unreferenced networks.
 	// This might be a no op, but it is worth a try as we sometime
 	// dont clean up nicely after ourselves.
@@ -217,7 +197,7 @@ func NewScenario(spec ScenarioSpec) (*Scenario, error) {
 		pool.MaxWait = spec.MaxWait
 	}
 
-	testHashPrefix := "hs-" + rands.HexString(scenarioHashLength)
+	testHashPrefix := "hs-" + util.MustGenerateRandomStringDNSSafe(scenarioHashLength)
 	s := &Scenario{
 		controlServers: xsync.NewMap[string, ControlServer](),
 		users:          make(map[string]*User),
@@ -231,7 +211,7 @@ func NewScenario(spec ScenarioSpec) (*Scenario, error) {
 
 	var userToNetwork map[string]*dockertest.Network
 
-	if spec.Networks != nil {
+	if spec.Networks != nil || len(spec.Networks) != 0 {
 		for name, netSpec := range s.spec.Networks {
 			networkName := testHashPrefix + "-" + name
 
@@ -426,6 +406,8 @@ func (s *Scenario) ShutdownAssertNoPanics(t *testing.T) {
 	}
 
 	if s.mockOIDC.r != nil {
+		s.mockOIDC.r.Close()
+
 		err := s.mockOIDC.r.Close()
 		if err != nil {
 			log.Printf("tearing down oidc server: %s", err)
@@ -440,15 +422,15 @@ func (s *Scenario) ShutdownAssertNoPanics(t *testing.T) {
 	}
 }
 
-// Shutdown shuts down and cleans up all the containers ([ControlServer], [TailscaleClient])
+// Shutdown shuts down and cleans up all the containers (ControlServer, TailscaleClient)
 // and networks associated with it.
-// In addition, it will save the logs of the [ControlServer] to `/tmp/control` in the
+// In addition, it will save the logs of the ControlServer to `/tmp/control` in the
 // environment running the tests.
 func (s *Scenario) Shutdown() {
 	s.ShutdownAssertNoPanics(nil)
 }
 
-// Users returns the name of all users associated with the [Scenario].
+// Users returns the name of all users associated with the Scenario.
 func (s *Scenario) Users() []string {
 	users := make([]string, 0, len(s.users))
 	for user := range s.users {
@@ -461,8 +443,8 @@ func (s *Scenario) Users() []string {
 /// Headscale related stuff
 // Note: These functions assume that there is a _single_ headscale instance for now
 
-// Headscale returns a [ControlServer] instance based on hsic ([hsic.HeadscaleInContainer]).
-// If the [Scenario] already has an instance, the pointer to the running container
+// Headscale returns a ControlServer instance based on hsic (HeadscaleInContainer)
+// If the Scenario already has an instance, the pointer to the running container
 // will be return, otherwise a new instance will be created.
 // TODO(kradalby): make port and headscale configurable, multiple instances support?
 func (s *Scenario) Headscale(opts ...hsic.Option) (ControlServer, error) {
@@ -492,12 +474,12 @@ func (s *Scenario) Headscale(opts ...hsic.Option) (ControlServer, error) {
 	return headscale, nil
 }
 
-// Pool returns the [dockertest.Pool] for the scenario.
+// Pool returns the dockertest pool for the scenario.
 func (s *Scenario) Pool() *dockertest.Pool {
 	return s.pool
 }
 
-// GetOrCreateUser gets or creates a user in the [Scenario].
+// GetOrCreateUser gets or creates a user in the scenario.
 func (s *Scenario) GetOrCreateUser(userStr string) *User {
 	s.mu.Lock()
 	defer s.mu.Unlock()
@@ -515,12 +497,12 @@ func (s *Scenario) GetOrCreateUser(userStr string) *User {
 }
 
 // CreatePreAuthKey creates a "pre authentorised key" to be created in the
-// Headscale instance on behalf of the [Scenario].
+// Headscale instance on behalf of the Scenario.
 func (s *Scenario) CreatePreAuthKey(
 	user uint64,
 	reusable bool,
 	ephemeral bool,
-) (*clientv1.PreAuthKey, error) {
+) (*v1.PreAuthKey, error) {
 	if headscale, err := s.Headscale(); err == nil { //nolint:noinlineerr
 		key, err := headscale.CreateAuthKey(user, reusable, ephemeral)
 		if err != nil {
@@ -534,8 +516,8 @@ func (s *Scenario) CreatePreAuthKey(
 }
 
 // CreatePreAuthKeyWithOptions creates a "pre authorised key" with the specified options
-// to be created in the Headscale instance on behalf of the [Scenario].
-func (s *Scenario) CreatePreAuthKeyWithOptions(opts hsic.AuthKeyOptions) (*clientv1.PreAuthKey, error) {
+// to be created in the Headscale instance on behalf of the Scenario.
+func (s *Scenario) CreatePreAuthKeyWithOptions(opts hsic.AuthKeyOptions) (*v1.PreAuthKey, error) {
 	headscale, err := s.Headscale()
 	if err != nil {
 		return nil, fmt.Errorf("creating preauth key with options: %w", errNoHeadscaleAvailable)
@@ -550,13 +532,13 @@ func (s *Scenario) CreatePreAuthKeyWithOptions(opts hsic.AuthKeyOptions) (*clien
 }
 
 // CreatePreAuthKeyWithTags creates a "pre authorised key" with the specified tags
-// to be created in the Headscale instance on behalf of the [Scenario].
+// to be created in the Headscale instance on behalf of the Scenario.
 func (s *Scenario) CreatePreAuthKeyWithTags(
 	user uint64,
 	reusable bool,
 	ephemeral bool,
 	tags []string,
-) (*clientv1.PreAuthKey, error) {
+) (*v1.PreAuthKey, error) {
 	headscale, err := s.Headscale()
 	if err != nil {
 		return nil, fmt.Errorf("creating preauth key with tags: %w", errNoHeadscaleAvailable)
@@ -570,9 +552,9 @@ func (s *Scenario) CreatePreAuthKeyWithTags(
 	return key, nil
 }
 
-// CreateUser creates a [User] to be created in the
-// Headscale instance on behalf of the [Scenario].
-func (s *Scenario) CreateUser(user string) (*clientv1.User, error) {
+// CreateUser creates a User to be created in the
+// Headscale instance on behalf of the Scenario.
+func (s *Scenario) CreateUser(user string) (*v1.User, error) {
 	if headscale, err := s.Headscale(); err == nil { //nolint:noinlineerr
 		u, err := headscale.CreateUser(user)
 		if err != nil {
@@ -608,8 +590,7 @@ func (s *Scenario) CreateTailscaleNode(
 	s.mu.Lock()
 	defer s.mu.Unlock()
 
-	opts = append(
-		opts,
+	opts = append(opts,
 		tsic.WithCACert(cert),
 		tsic.WithHeadscaleName(hostname),
 	)
@@ -638,8 +619,8 @@ func (s *Scenario) CreateTailscaleNode(
 	return tsClient, nil
 }
 
-// CreateTailscaleNodesInUser creates and adds a new [TailscaleClient] to a
-// [User] in the [Scenario].
+// CreateTailscaleNodesInUser creates and adds a new TailscaleClient to a
+// User in the Scenario.
 func (s *Scenario) CreateTailscaleNodesInUser(
 	userStr string,
 	requestedVersion string,
@@ -683,8 +664,7 @@ func (s *Scenario) CreateTailscaleNodesInUser(
 
 			s.mu.Lock()
 
-			opts = append(
-				opts,
+			opts = append(opts,
 				tsic.WithCACert(cert),
 				tsic.WithHeadscaleName(hostname),
 				tsic.WithExtraHosts(extraHosts),
@@ -740,8 +720,8 @@ func (s *Scenario) CreateTailscaleNodesInUser(
 	return fmt.Errorf("adding tailscale node: %w", errNoUserAvailable)
 }
 
-// RunTailscaleUp will log in all of the [TailscaleClient]s associated with a
-// [User] to the given [ControlServer] (by URL).
+// RunTailscaleUp will log in all of the TailscaleClients associated with a
+// User to the given ControlServer (by URL).
 func (s *Scenario) RunTailscaleUp(
 	userStr, loginServer, authKey string,
 ) error {
@@ -772,7 +752,7 @@ func (s *Scenario) RunTailscaleUp(
 	return fmt.Errorf("bringing up tailscale node: %w", errNoUserAvailable)
 }
 
-// CountTailscale returns the total number of [TailscaleClient]s in a [Scenario].
+// CountTailscale returns the total number of TailscaleClients in a Scenario.
 // This is the sum of Users x TailscaleClients.
 func (s *Scenario) CountTailscale() int {
 	count := 0
@@ -784,8 +764,8 @@ func (s *Scenario) CountTailscale() int {
 	return count
 }
 
-// WaitForTailscaleSync blocks execution until all the [TailscaleClient] reports
-// to have all other [TailscaleClient]s present in their [netmap.NetworkMap].
+// WaitForTailscaleSync blocks execution until all the TailscaleClient reports
+// to have all other TailscaleClients present in their netmap.NetworkMap.
 func (s *Scenario) WaitForTailscaleSync() error {
 	tsCount := s.CountTailscale()
 
@@ -804,65 +784,49 @@ func (s *Scenario) WaitForTailscaleSync() error {
 	return err
 }
 
-// SyncOption configures [Scenario.WaitForTailscaleSyncPerUser].
-type SyncOption func(*syncOptions)
-
-type syncOptions struct {
-	preBarrier func(context.Context) error
-}
-
-// WithPreBarrier runs a precondition check before per-user peer-count
-// waits begin, sharing the outer timeout via context. Use to gate on
-// a server-side signal (e.g. policy compile) that the peer-count
-// alone cannot observe.
-func WithPreBarrier(barrier func(context.Context) error) SyncOption {
-	return func(o *syncOptions) { o.preBarrier = barrier }
-}
-
-// WaitForTailscaleSyncPerUser blocks until each [TailscaleClient] has
-// the expected per-user peer count (necessary for policies like
-// autogroup:self where cross-user peers are invisible).
-func (s *Scenario) WaitForTailscaleSyncPerUser(timeout, retryInterval time.Duration, opts ...SyncOption) error {
-	options := syncOptions{}
-	for _, opt := range opts {
-		opt(&options)
-	}
-
-	if options.preBarrier != nil {
-		barrierCtx, cancel := context.WithTimeout(context.Background(), timeout)
-
-		err := options.preBarrier(barrierCtx)
-
-		cancel()
-
-		if err != nil {
-			return fmt.Errorf("pre-barrier: %w", err)
-		}
-	}
-
-	// Calculate expected peer count: number of nodes in this user minus 1 (self)
-	return s.waitPeers(func(u *User) int { return len(u.Clients) - 1 }, timeout, retryInterval)
-}
-
-// WaitForTailscaleSyncWithPeerCount blocks execution until all the [TailscaleClient] reports
-// to have all other [TailscaleClient]s present in their [netmap.NetworkMap].
-func (s *Scenario) WaitForTailscaleSyncWithPeerCount(peerCount int, timeout, retryInterval time.Duration) error {
-	return s.waitPeers(func(*User) int { return peerCount }, timeout, retryInterval)
-}
-
-// waitPeers blocks until every [TailscaleClient] reports the expected peer
-// count returned by perUser for its owning user, fanning out per user.
-func (s *Scenario) waitPeers(perUser func(*User) int, timeout, retryInterval time.Duration) error {
+// WaitForTailscaleSyncPerUser blocks execution until each TailscaleClient has the expected
+// number of peers for its user. This is useful for policies like autogroup:self where nodes
+// only see same-user peers, not all nodes in the network.
+func (s *Scenario) WaitForTailscaleSyncPerUser(timeout, retryInterval time.Duration) error {
 	var allErrors []error
 
 	for _, user := range s.users {
-		expectedCount := perUser(user)
+		// Calculate expected peer count: number of nodes in this user minus 1 (self)
+		expectedPeers := len(user.Clients) - 1
 
+		for _, client := range user.Clients {
+			c := client
+			expectedCount := expectedPeers
+
+			user.syncWaitGroup.Go(func() error {
+				return c.WaitForPeers(expectedCount, timeout, retryInterval)
+			})
+		}
+
+		err := user.syncWaitGroup.Wait()
+		if err != nil {
+			allErrors = append(allErrors, err)
+		}
+	}
+
+	if len(allErrors) > 0 {
+		return multierr.New(allErrors...)
+	}
+
+	return nil
+}
+
+// WaitForTailscaleSyncWithPeerCount blocks execution until all the TailscaleClient reports
+// to have all other TailscaleClients present in their netmap.NetworkMap.
+func (s *Scenario) WaitForTailscaleSyncWithPeerCount(peerCount int, timeout, retryInterval time.Duration) error {
+	var allErrors []error
+
+	for _, user := range s.users {
 		for _, client := range user.Clients {
 			c := client
 
 			user.syncWaitGroup.Go(func() error {
-				return c.WaitForPeers(expectedCount, timeout, retryInterval)
+				return c.WaitForPeers(peerCount, timeout, retryInterval)
 			})
 		}
 
@@ -894,7 +858,7 @@ func (s *Scenario) CreateHeadscaleEnv(
 }
 
 // CreateHeadscaleEnv starts the headscale environment and the clients
-// according to the [ScenarioSpec] passed to the [Scenario].
+// according to the ScenarioSpec passed to the Scenario.
 func (s *Scenario) createHeadscaleEnv(
 	withURL bool,
 	tsOpts []tsic.Option,
@@ -904,7 +868,7 @@ func (s *Scenario) createHeadscaleEnv(
 }
 
 // createHeadscaleEnvWithTags starts the headscale environment and the clients
-// according to the [ScenarioSpec] passed to the [Scenario]. If preAuthKeyTags is
+// according to the ScenarioSpec passed to the Scenario. If preAuthKeyTags is
 // non-empty and withURL is false, the tags will be applied to the PreAuthKey
 // (tags-as-identity model).
 //
@@ -925,7 +889,7 @@ func (s *Scenario) createHeadscaleEnvWithTags(
 	}
 
 	for _, user := range s.spec.Users {
-		var u *clientv1.User
+		var u *v1.User
 
 		if s.spec.OIDCSkipUserCreation {
 			// Only register locally — OIDC login will create the headscale user.
@@ -964,18 +928,18 @@ func (s *Scenario) createHeadscaleEnvWithTags(
 			}
 		} else {
 			// Use tagged PreAuthKey if tags are provided (tags-as-identity model)
-			var key *clientv1.PreAuthKey
+			var key *v1.PreAuthKey
 			if len(preAuthKeyTags) > 0 {
-				key, err = s.CreatePreAuthKeyWithTags(mustParseID(u.Id), true, false, preAuthKeyTags)
+				key, err = s.CreatePreAuthKeyWithTags(u.GetId(), true, false, preAuthKeyTags)
 			} else {
-				key, err = s.CreatePreAuthKey(mustParseID(u.Id), true, false)
+				key, err = s.CreatePreAuthKey(u.GetId(), true, false)
 			}
 
 			if err != nil {
 				return err
 			}
 
-			err = s.RunTailscaleUp(user, headscale.GetEndpoint(), key.Key)
+			err = s.RunTailscaleUp(user, headscale.GetEndpoint(), key.GetKey())
 			if err != nil {
 				return err
 			}
@@ -1385,7 +1349,6 @@ func (t LoggingRoundTripper) RoundTrip(req *http.Request) (*http.Response, error
 		return nil, err
 	}
 
-	//nolint:gosec // G706: integration-only log of trusted scenario state
 	log.Printf(`
 ---
 %s - method: %s | url: %s
@@ -1396,8 +1359,8 @@ func (t LoggingRoundTripper) RoundTrip(req *http.Request) (*http.Response, error
 	return resp, nil
 }
 
-// GetIPs returns all [netip.Addr] of [TailscaleClient]s associated with a [User]
-// in a [Scenario].
+// GetIPs returns all netip.Addr of TailscaleClients associated with a User
+// in a Scenario.
 func (s *Scenario) GetIPs(user string) ([]netip.Addr, error) {
 	var ips []netip.Addr
 
@@ -1417,16 +1380,22 @@ func (s *Scenario) GetIPs(user string) ([]netip.Addr, error) {
 	return ips, fmt.Errorf("getting IPs: %w", errNoUserAvailable)
 }
 
-// GetClients returns all [TailscaleClient]s associated with a [User] in a [Scenario].
+// GetClients returns all TailscaleClients associated with a User in a Scenario.
 func (s *Scenario) GetClients(user string) ([]TailscaleClient, error) {
+	var clients []TailscaleClient
+
 	if ns, ok := s.users[user]; ok {
-		return xmaps.Values(ns.Clients), nil
+		for _, client := range ns.Clients {
+			clients = append(clients, client)
+		}
+
+		return clients, nil
 	}
 
-	return nil, fmt.Errorf("getting clients: %w", errNoUserAvailable)
+	return clients, fmt.Errorf("getting clients: %w", errNoUserAvailable)
 }
 
-// ListTailscaleClients returns a list of [TailscaleClient]s given the [User]s
+// ListTailscaleClients returns a list of TailscaleClients given the Users
 // passed as parameters.
 func (s *Scenario) ListTailscaleClients(users ...string) ([]TailscaleClient, error) {
 	var allClients []TailscaleClient
@@ -1447,7 +1416,7 @@ func (s *Scenario) ListTailscaleClients(users ...string) ([]TailscaleClient, err
 	return allClients, nil
 }
 
-// FindTailscaleClientByIP returns a [TailscaleClient] associated with an IP address
+// FindTailscaleClientByIP returns a TailscaleClient associated with an IP address
 // if it exists.
 func (s *Scenario) FindTailscaleClientByIP(ip netip.Addr) (TailscaleClient, error) {
 	clients, err := s.ListTailscaleClients()
@@ -1465,7 +1434,7 @@ func (s *Scenario) FindTailscaleClientByIP(ip netip.Addr) (TailscaleClient, erro
 	return nil, errNoClientFound
 }
 
-// ListTailscaleClientsIPs returns a list of [netip.Addr] based on [User]s
+// ListTailscaleClientsIPs returns a list of netip.Addr based on Users
 // passed as parameters.
 func (s *Scenario) ListTailscaleClientsIPs(users ...string) ([]netip.Addr, error) {
 	var allIps []netip.Addr
@@ -1486,7 +1455,7 @@ func (s *Scenario) ListTailscaleClientsIPs(users ...string) ([]netip.Addr, error
 	return allIps, nil
 }
 
-// ListTailscaleClientsFQDNs returns a list of FQDN based on [User]s
+// ListTailscaleClientsFQDNs returns a list of FQDN based on Users
 // passed as parameters.
 func (s *Scenario) ListTailscaleClientsFQDNs(users ...string) ([]string, error) {
 	allFQDNs := make([]string, 0)
@@ -1508,8 +1477,8 @@ func (s *Scenario) ListTailscaleClientsFQDNs(users ...string) ([]string, error)
 	return allFQDNs, nil
 }
 
-// WaitForTailscaleLogout blocks execution until all [TailscaleClient]s have
-// logged out of the [ControlServer].
+// WaitForTailscaleLogout blocks execution until all TailscaleClients have
+// logged out of the ControlServer.
 func (s *Scenario) WaitForTailscaleLogout() error {
 	for _, user := range s.users {
 		for _, client := range user.Clients {
@@ -1591,7 +1560,7 @@ func (s *Scenario) runMockOIDC(accessTTL time.Duration, users []mockoidc.MockUse
 
 	portNotation := fmt.Sprintf("%d/tcp", port)
 
-	hash := rands.HexString(hsicOIDCMockHashLength)
+	hash, _ := util.GenerateRandomStringDNSSafe(hsicOIDCMockHashLength)
 
 	hostname := "hs-oidcmock-" + hash
 
@@ -1636,8 +1605,7 @@ func (s *Scenario) runMockOIDC(accessTTL time.Duration, users []mockoidc.MockUse
 	if pmockoidc, err := s.pool.BuildAndRunWithBuildOptions( //nolint:noinlineerr
 		headscaleBuildOptions,
 		mockOidcOptions,
-		dockertestutil.DockerRestartPolicy,
-	); err == nil {
+		dockertestutil.DockerRestartPolicy); err == nil {
 		s.mockOIDC.r = pmockoidc
 	} else {
 		return err
@@ -1699,7 +1667,7 @@ func Webservice(s *Scenario, networkName string) (*dockertest.Resource, error) {
 	// 	log.Fatalf("finding open port: %s", err)
 	// }
 	// portNotation := fmt.Sprintf("%d/tcp", port)
-	hash := rands.HexString(hsicOIDCMockHashLength)
+	hash := util.MustGenerateRandomStringDNSSafe(hsicOIDCMockHashLength)
 
 	hostname := "hs-webservice-" + hash
 
@@ -1730,8 +1698,7 @@ func Webservice(s *Scenario, networkName string) (*dockertest.Resource, error) {
 	web, err := s.pool.BuildAndRunWithBuildOptions(
 		webBOpts,
 		webOpts,
-		dockertestutil.DockerRestartPolicy,
-	)
+		dockertestutil.DockerRestartPolicy)
 	if err != nil {
 		return nil, err
 	}
diff --git a/integration/scenario_test.go b/integration/scenario_test.go
index 9fa0d854e..ae264221e 100644
--- a/integration/scenario_test.go
+++ b/integration/scenario_test.go
@@ -137,7 +137,7 @@ func TestTailscaleNodesJoiningHeadcale(t *testing.T) {
 		err = scenario.RunTailscaleUp(
 			user,
 			headscale.GetEndpoint(),
-			key.Key,
+			key.GetKey(),
 		)
 		if err != nil {
 			t.Fatalf("failed to login: %s", err)
diff --git a/integration/ssh_test.go b/integration/ssh_test.go
index 7ed50c206..544ca03a6 100644
--- a/integration/ssh_test.go
+++ b/integration/ssh_test.go
@@ -459,7 +459,7 @@ func doSSHWithRetryAsUser(
 	)
 
 	if retry {
-		// Use [assert.EventuallyWithT] to retry SSH connections for success cases
+		// Use assert.EventuallyWithT to retry SSH connections for success cases
 		assert.EventuallyWithT(t, func(ct *assert.CollectT) {
 			result, stderr, err = client.Execute(command)
 
@@ -471,7 +471,7 @@ func doSSHWithRetryAsUser(
 
 			// For all other errors, assert no error to trigger retry
 			assert.NoError(ct, err)
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.FastPoll)
+		}, integrationutil.ScaledTimeout(10*time.Second), 200*time.Millisecond)
 	} else {
 		// For failure cases, just execute once
 		result, stderr, err = client.Execute(command)
@@ -644,20 +644,6 @@ func doSSHCheck(
 ) chan sshCheckResult {
 	t.Helper()
 
-	return doSSHCheckWithTimeout(t, client, peer, 60*time.Second)
-}
-
-// doSSHCheckWithTimeout is like doSSHCheck but lets the caller extend how long
-// the blocking SSH command may run, for flows that hold the check open longer
-// (e.g. while the control plane restarts).
-func doSSHCheckWithTimeout(
-	t *testing.T,
-	client TailscaleClient,
-	peer TailscaleClient,
-	timeout time.Duration,
-) chan sshCheckResult {
-	t.Helper()
-
 	peerFQDN, _ := peer.FQDN()
 
 	command := []string{
@@ -677,7 +663,7 @@ func doSSHCheckWithTimeout(
 	go func() {
 		stdout, stderr, err := client.Execute(
 			command,
-			dockertestutil.ExecuteCommandTimeout(timeout),
+			dockertestutil.ExecuteCommandTimeout(60*time.Second),
 		)
 		ch <- sshCheckResult{stdout, stderr, err}
 	}()
@@ -715,12 +701,12 @@ func findSSHCheckAuthID(t *testing.T, headscale ControlServer) string {
 		}
 
 		assert.NotEmpty(c, authID, "auth-id not found in headscale logs")
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "waiting for SSH check auth-id in headscale logs")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "waiting for SSH check auth-id in headscale logs")
 
 	return authID
 }
 
-// sshCheckPolicy returns a [policyv2.Policy] with SSH "check" mode for group:integration-test
+// sshCheckPolicy returns a policy with SSH "check" mode for group:integration-test
 // targeting autogroup:member and autogroup:tagged destinations.
 func sshCheckPolicy() *policyv2.Policy {
 	return &policyv2.Policy{
@@ -753,7 +739,7 @@ func sshCheckPolicy() *policyv2.Policy {
 	}
 }
 
-// sshCheckPolicyWithPeriod returns a [policyv2.Policy] with SSH "check" mode and a
+// sshCheckPolicyWithPeriod returns a policy with SSH "check" mode and a
 // specified checkPeriod for session duration.
 func sshCheckPolicyWithPeriod(period time.Duration) *policyv2.Policy {
 	return &policyv2.Policy{
@@ -824,7 +810,7 @@ func findNewSSHCheckAuthID(
 		}
 
 		assert.NotEmpty(c, authID, "new auth-id not found in headscale logs")
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "waiting for new SSH check auth-id")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "waiting for new SSH check auth-id")
 
 	return authID
 }
@@ -1262,90 +1248,6 @@ func TestSSHCheckModeAutoApprove(t *testing.T) {
 	}
 }
 
-// TestSSHCheckModeSessionLossReDelegates reproduces the failure in
-// https://github.com/juanfont/headscale/issues/3305 with a real client: an SSH
-// connection in check mode is pending a verdict when the control plane
-// restarts, which drops the in-memory auth cache so the session the client is
-// still polling for is gone. The client must recover — the server re-delegates
-// a fresh check rather than dead-ending the now-defunct auth_id — and once that
-// fresh check is approved the SSH connection completes.
-func TestSSHCheckModeSessionLossReDelegates(t *testing.T) {
-	IntegrationSkip(t)
-
-	scenario := sshScenario(t, sshCheckPolicy(), "ssh-sessionloss", 1)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	allClients, err := scenario.ListTailscaleClients()
-	requireNoErrListClients(t, err)
-
-	user1Clients, err := scenario.ListTailscaleClients("user1")
-	requireNoErrListClients(t, err)
-
-	headscale, err := scenario.Headscale()
-	require.NoError(t, err)
-
-	err = scenario.WaitForTailscaleSync()
-	requireNoErrSync(t, err)
-
-	_, err = scenario.ListTailscaleClientsFQDNs()
-	requireNoErrListFQDN(t, err)
-
-	for _, client := range user1Clients {
-		for _, peer := range allClients {
-			if client.Hostname() == peer.Hostname() {
-				continue
-			}
-
-			// Start SSH — blocks waiting for the check verdict while the
-			// pending auth session sits in the control plane's cache. Allow a
-			// generous window: the flow spans a full control-plane restart.
-			sshResult := doSSHCheckWithTimeout(t, client, peer, 120*time.Second)
-
-			firstAuthID := findSSHCheckAuthID(t, headscale)
-
-			// Restart the control plane: the in-memory auth cache is dropped
-			// (the on-disk database and keys persist), so the auth_id the
-			// client is still polling for no longer exists.
-			err := headscale.Restart()
-			require.NoError(t, err, "restarting headscale should succeed")
-
-			err = scenario.WaitForTailscaleSync()
-			requireNoErrSync(t, err)
-
-			// The client keeps polling the now-missing auth_id; with the fix the
-			// server re-delegates a fresh session instead of returning an error
-			// the client cannot recover from. A new auth_id only appears if the
-			// re-delegation happened.
-			secondAuthID := findNewSSHCheckAuthID(t, headscale, firstAuthID)
-			require.NotEqual(t, firstAuthID, secondAuthID,
-				"a lost session under an active check must re-delegate with a new auth_id")
-
-			// Approve the re-delegated session; the SSH connection must now
-			// complete instead of hanging until it times out.
-			_, err = headscale.Execute(
-				[]string{
-					"headscale", "auth", "approve",
-					"--auth-id", secondAuthID,
-				},
-			)
-			require.NoError(t, err)
-
-			select {
-			case result := <-sshResult:
-				require.NoError(t, result.err,
-					"SSH should succeed after re-delegation recovers the lost session")
-				require.Contains(
-					t,
-					peer.ContainerID(),
-					strings.ReplaceAll(result.stdout, "\n", ""),
-				)
-			case <-time.After(90 * time.Second):
-				t.Fatal("SSH did not complete after session-loss re-delegation")
-			}
-		}
-	}
-}
-
 // TestSSHCheckModeNegativeCLI verifies that `headscale auth reject`
 // properly denies an SSH check.
 func TestSSHCheckModeNegativeCLI(t *testing.T) {
diff --git a/integration/tags_test.go b/integration/tags_test.go
index 27cf1c731..1d66c5931 100644
--- a/integration/tags_test.go
+++ b/integration/tags_test.go
@@ -5,7 +5,7 @@ import (
 	"testing"
 	"time"
 
-	clientv1 "github.com/juanfont/headscale/gen/client/v1"
+	v1 "github.com/juanfont/headscale/gen/go/headscale/v1"
 	policyv2 "github.com/juanfont/headscale/hscontrol/policy/v2"
 	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/integration/hsic"
@@ -67,19 +67,19 @@ func tagsEqual(actual, expected []string) bool {
 }
 
 // assertNodeHasTagsWithCollect asserts that a node has exactly the expected tags (order-independent).
-func assertNodeHasTagsWithCollect(c *assert.CollectT, node *clientv1.Node, expectedTags []string) {
-	actualTags := node.Tags
+func assertNodeHasTagsWithCollect(c *assert.CollectT, node *v1.Node, expectedTags []string) {
+	actualTags := node.GetTags()
 	sortedActual := append([]string{}, actualTags...)
 	sortedExpected := append([]string{}, expectedTags...)
 
 	sort.Strings(sortedActual)
 	sort.Strings(sortedExpected)
-	assert.Equal(c, sortedExpected, sortedActual, "Node %s tags mismatch", node.Name)
+	assert.Equal(c, sortedExpected, sortedActual, "Node %s tags mismatch", node.GetName())
 }
 
 // assertNodeHasNoTagsWithCollect asserts that a node has no tags.
-func assertNodeHasNoTagsWithCollect(c *assert.CollectT, node *clientv1.Node) {
-	assert.Empty(c, node.Tags, "Node %s should have no tags, but has: %v", node.Name, node.Tags)
+func assertNodeHasNoTagsWithCollect(c *assert.CollectT, node *v1.Node) {
+	assert.Empty(c, node.GetTags(), "Node %s should have no tags, but has: %v", node.GetName(), node.GetTags())
 }
 
 // assertNodeSelfHasTagsWithCollect asserts that a client's self view has exactly the expected tags.
@@ -148,12 +148,12 @@ func TestTagsAuthKeyWithTagRequestDifferentTag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey with tag:valid-owned
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
 	require.NoError(t, err)
-	t.Logf("Created tagged PreAuthKey with tags: %v", authKey.AclTags)
+	t.Logf("Created tagged PreAuthKey with tags: %v", authKey.GetAclTags())
 
 	// Create a tailscale client that will try to use --advertise-tags with a DIFFERENT tag
 	client, err := scenario.CreateTailscaleNode(
@@ -164,7 +164,7 @@ func TestTagsAuthKeyWithTagRequestDifferentTag(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login should fail because the advertised tags don't match the auth key's tags
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 
 	// Document actual behavior - we expect this to fail
 	if err != nil {
@@ -180,9 +180,9 @@ func TestTagsAuthKeyWithTagRequestDifferentTag(t *testing.T) {
 			assert.NoError(c, err)
 
 			if len(nodes) == 1 {
-				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].Tags)
+				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].GetTags())
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "checking node state")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "checking node state")
 
 		t.Fail()
 	}
@@ -222,12 +222,12 @@ func TestTagsAuthKeyWithTagNoAdvertiseFlag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey with tag:valid-owned
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
 	require.NoError(t, err)
-	t.Logf("Created tagged PreAuthKey with tags: %v", authKey.AclTags)
+	t.Logf("Created tagged PreAuthKey with tags: %v", authKey.GetAclTags())
 
 	// Create a tailscale client WITHOUT --advertise-tags
 	client, err := scenario.CreateTailscaleNode(
@@ -238,7 +238,7 @@ func TestTagsAuthKeyWithTagNoAdvertiseFlag(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login with the tagged PreAuthKey
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for node to be registered and verify it has the key's tags
@@ -249,10 +249,10 @@ func TestTagsAuthKeyWithTagNoAdvertiseFlag(t *testing.T) {
 
 		if len(nodes) == 1 {
 			node := nodes[0]
-			t.Logf("Node registered with tags: %v", node.Tags)
+			t.Logf("Node registered with tags: %v", node.GetTags())
 			assertNodeHasTagsWithCollect(c, node, []string{"tag:valid-owned"})
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying node inherited tags from auth key")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying node inherited tags from auth key")
 
 	t.Logf("Test 2.2 completed - node inherited tags from auth key")
 }
@@ -294,7 +294,7 @@ func TestTagsAuthKeyWithTagCannotAddViaCLI(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey with tag:valid-owned
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
@@ -308,7 +308,7 @@ func TestTagsAuthKeyWithTagCannotAddViaCLI(t *testing.T) {
 	require.NoError(t, err)
 
 	// Initial login
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for initial registration
@@ -320,7 +320,7 @@ func TestTagsAuthKeyWithTagCannotAddViaCLI(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	t.Logf("Node registered with tag:valid-owned, now attempting to add tag:second via CLI")
 
@@ -328,7 +328,7 @@ func TestTagsAuthKeyWithTagCannotAddViaCLI(t *testing.T) {
 	command := []string{
 		"tailscale", "up",
 		"--login-server=" + headscale.GetEndpoint(),
-		"--authkey=" + authKey.Key,
+		"--authkey=" + authKey.GetKey(),
 		"--advertise-tags=tag:valid-owned,tag:second",
 	}
 	_, stderr, err := client.Execute(command)
@@ -346,14 +346,14 @@ func TestTagsAuthKeyWithTagCannotAddViaCLI(t *testing.T) {
 
 			if len(nodes) == 1 {
 				// If still only has original tag, that's the expected behavior
-				if tagsEqual(nodes[0].Tags, []string{"tag:valid-owned"}) {
-					t.Logf("Test 2.3 PASS: Tags unchanged after CLI attempt: %v", nodes[0].Tags)
+				if tagsEqual(nodes[0].GetTags(), []string{"tag:valid-owned"}) {
+					t.Logf("Test 2.3 PASS: Tags unchanged after CLI attempt: %v", nodes[0].GetTags())
 				} else {
-					t.Logf("Test 2.3 FAIL: Tags changed unexpectedly to: %v", nodes[0].Tags)
+					t.Logf("Test 2.3 FAIL: Tags changed unexpectedly to: %v", nodes[0].GetTags())
 					assert.Fail(c, "Tags should not have changed")
 				}
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying tags unchanged")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying tags unchanged")
 	}
 }
 
@@ -394,7 +394,7 @@ func TestTagsAuthKeyWithTagCannotChangeViaCLI(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey with tag:valid-owned
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
@@ -408,7 +408,7 @@ func TestTagsAuthKeyWithTagCannotChangeViaCLI(t *testing.T) {
 	require.NoError(t, err)
 
 	// Initial login
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for initial registration
@@ -416,7 +416,7 @@ func TestTagsAuthKeyWithTagCannotChangeViaCLI(t *testing.T) {
 		nodes, err := headscale.ListNodes()
 		assert.NoError(c, err)
 		assert.Len(c, nodes, 1)
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	t.Logf("Node registered, now attempting to change to different tag via CLI")
 
@@ -424,7 +424,7 @@ func TestTagsAuthKeyWithTagCannotChangeViaCLI(t *testing.T) {
 	command := []string{
 		"tailscale", "up",
 		"--login-server=" + headscale.GetEndpoint(),
-		"--authkey=" + authKey.Key,
+		"--authkey=" + authKey.GetKey(),
 		"--advertise-tags=tag:second",
 	}
 	_, stderr, err := client.Execute(command)
@@ -441,14 +441,14 @@ func TestTagsAuthKeyWithTagCannotChangeViaCLI(t *testing.T) {
 			assert.NoError(c, err)
 
 			if len(nodes) == 1 {
-				if tagsEqual(nodes[0].Tags, []string{"tag:valid-owned"}) {
-					t.Logf("Test 2.4 PASS: Tags unchanged: %v", nodes[0].Tags)
+				if tagsEqual(nodes[0].GetTags(), []string{"tag:valid-owned"}) {
+					t.Logf("Test 2.4 PASS: Tags unchanged: %v", nodes[0].GetTags())
 				} else {
-					t.Logf("Test 2.4 FAIL: Tags changed unexpectedly to: %v", nodes[0].Tags)
+					t.Logf("Test 2.4 FAIL: Tags changed unexpectedly to: %v", nodes[0].GetTags())
 					assert.Fail(c, "Tags should not have changed")
 				}
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying tags unchanged")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying tags unchanged")
 	}
 }
 
@@ -490,7 +490,7 @@ func TestTagsAuthKeyWithTagAdminOverrideReauthPreserves(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey with tag:valid-owned
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, true, false, []string{"tag:valid-owned"})
@@ -504,7 +504,7 @@ func TestTagsAuthKeyWithTagAdminOverrideReauthPreserves(t *testing.T) {
 	require.NoError(t, err)
 
 	// Initial login
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for initial registration and get node ID
@@ -516,10 +516,10 @@ func TestTagsAuthKeyWithTagAdminOverrideReauthPreserves(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
+			nodeID = nodes[0].GetId()
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	t.Logf("Step 1 complete: Node %d registered with tag:valid-owned", nodeID)
 
@@ -533,15 +533,15 @@ func TestTagsAuthKeyWithTagAdminOverrideReauthPreserves(t *testing.T) {
 		assert.NoError(c, err)
 
 		if len(nodes) == 1 {
-			t.Logf("After admin assignment, server tags are: %v", nodes[0].Tags)
+			t.Logf("After admin assignment, server tags are: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying admin tag assignment on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying admin tag assignment on server")
 
 	// Verify admin assignment propagated to node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying admin tag assignment propagated to node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying admin tag assignment propagated to node self")
 
 	t.Logf("Step 2 complete: Admin assigned tag:second (verified on both server and node self)")
 
@@ -549,7 +549,7 @@ func TestTagsAuthKeyWithTagAdminOverrideReauthPreserves(t *testing.T) {
 	command := []string{
 		"tailscale", "up",
 		"--login-server=" + headscale.GetEndpoint(),
-		"--authkey=" + authKey.Key,
+		"--authkey=" + authKey.GetKey(),
 		"--force-reauth",
 	}
 	//nolint:errcheck // Intentionally ignoring error - we check results below
@@ -564,17 +564,17 @@ func TestTagsAuthKeyWithTagAdminOverrideReauthPreserves(t *testing.T) {
 		if len(nodes) >= 1 {
 			// Find the most recently updated node (in case a new one was created)
 			node := nodes[len(nodes)-1]
-			t.Logf("After reauth, server tags are: %v", node.Tags)
+			t.Logf("After reauth, server tags are: %v", node.GetTags())
 
 			// Expected: admin-assigned tags are preserved through reauth
 			assertNodeHasTagsWithCollect(c, node, []string{"tag:second"})
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "admin tags should be preserved after reauth on server")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "admin tags should be preserved after reauth on server")
 
 	// Verify admin tags are preserved in node's self view after reauth (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "admin tags should be preserved after reauth in node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "admin tags should be preserved after reauth in node self")
 
 	t.Logf("Test 2.5 PASS: Admin tags preserved through reauth (admin decisions are authoritative)")
 }
@@ -617,7 +617,7 @@ func TestTagsAuthKeyWithTagCLICannotModifyAdminTags(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey with tag:valid-owned
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, true, false, []string{"tag:valid-owned"})
@@ -631,7 +631,7 @@ func TestTagsAuthKeyWithTagCLICannotModifyAdminTags(t *testing.T) {
 	require.NoError(t, err)
 
 	// Initial login
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for initial registration and get node ID
@@ -643,9 +643,9 @@ func TestTagsAuthKeyWithTagCLICannotModifyAdminTags(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
+			nodeID = nodes[0].GetId()
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	// Step 2: Admin assigns multiple tags via headscale CLI
 	err = headscale.SetNodeTags(nodeID, []string{"tag:valid-owned", "tag:second"})
@@ -659,12 +659,12 @@ func TestTagsAuthKeyWithTagCLICannotModifyAdminTags(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned", "tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying admin tag assignment on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying admin tag assignment on server")
 
 	// Verify admin assignment propagated to node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned", "tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying admin tag assignment propagated to node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying admin tag assignment propagated to node self")
 
 	t.Logf("Admin assigned both tags, now attempting to reduce via CLI")
 
@@ -672,7 +672,7 @@ func TestTagsAuthKeyWithTagCLICannotModifyAdminTags(t *testing.T) {
 	command := []string{
 		"tailscale", "up",
 		"--login-server=" + headscale.GetEndpoint(),
-		"--authkey=" + authKey.Key,
+		"--authkey=" + authKey.GetKey(),
 		"--advertise-tags=tag:valid-owned",
 	}
 	_, stderr, err := client.Execute(command)
@@ -686,17 +686,17 @@ func TestTagsAuthKeyWithTagCLICannotModifyAdminTags(t *testing.T) {
 		assert.Len(c, nodes, 1, "Should have exactly 1 node")
 
 		if len(nodes) == 1 {
-			t.Logf("After CLI attempt, server tags are: %v", nodes[0].Tags)
+			t.Logf("After CLI attempt, server tags are: %v", nodes[0].GetTags())
 
 			// Expected: tags should remain unchanged (admin wins)
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned", "tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "admin tags should be preserved after CLI attempt on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "admin tags should be preserved after CLI attempt on server")
 
 	// Verify admin tags are preserved in node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned", "tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "admin tags should be preserved after CLI attempt in node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "admin tags should be preserved after CLI attempt in node self")
 
 	t.Logf("Test 2.6 PASS: Admin tags preserved - CLI cannot modify admin-assigned tags")
 }
@@ -739,7 +739,7 @@ func TestTagsAuthKeyWithoutTagCannotRequestTags(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create an auth key WITHOUT tags
 	authKey, err := scenario.CreatePreAuthKey(userID, false, false)
@@ -755,7 +755,7 @@ func TestTagsAuthKeyWithoutTagCannotRequestTags(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login should fail because the auth key has no tags
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	if err != nil {
 		t.Logf("Test 3.1 PASS: Registration correctly rejected: %v", err)
 		assert.ErrorContains(t, err, "requested tags")
@@ -768,9 +768,9 @@ func TestTagsAuthKeyWithoutTagCannotRequestTags(t *testing.T) {
 			assert.NoError(c, err)
 
 			if len(nodes) == 1 {
-				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].Tags)
+				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].GetTags())
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "checking node state")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "checking node state")
 
 		t.Fail()
 	}
@@ -810,7 +810,7 @@ func TestTagsAuthKeyWithoutTagRegisterNoTags(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create an auth key WITHOUT tags
 	authKey, err := scenario.CreatePreAuthKey(userID, false, false)
@@ -824,7 +824,7 @@ func TestTagsAuthKeyWithoutTagRegisterNoTags(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login should succeed
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Verify node has no tags
@@ -834,10 +834,10 @@ func TestTagsAuthKeyWithoutTagRegisterNoTags(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			t.Logf("Node registered with tags: %v", nodes[0].Tags)
+			t.Logf("Node registered with tags: %v", nodes[0].GetTags())
 			assertNodeHasNoTagsWithCollect(c, nodes[0])
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying node has no tags")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying node has no tags")
 
 	t.Logf("Test 3.2 completed - node registered without tags")
 }
@@ -879,7 +879,7 @@ func TestTagsAuthKeyWithoutTagCannotAddViaCLI(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create an auth key WITHOUT tags
 	authKey, err := scenario.CreatePreAuthKey(userID, true, false)
@@ -893,7 +893,7 @@ func TestTagsAuthKeyWithoutTagCannotAddViaCLI(t *testing.T) {
 	require.NoError(t, err)
 
 	// Initial login
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for initial registration
@@ -905,7 +905,7 @@ func TestTagsAuthKeyWithoutTagCannotAddViaCLI(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasNoTagsWithCollect(c, nodes[0])
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	t.Logf("Node registered without tags, attempting to add via CLI")
 
@@ -913,7 +913,7 @@ func TestTagsAuthKeyWithoutTagCannotAddViaCLI(t *testing.T) {
 	command := []string{
 		"tailscale", "up",
 		"--login-server=" + headscale.GetEndpoint(),
-		"--authkey=" + authKey.Key,
+		"--authkey=" + authKey.GetKey(),
 		"--advertise-tags=tag:valid-owned",
 	}
 	_, stderr, err := client.Execute(command)
@@ -929,14 +929,14 @@ func TestTagsAuthKeyWithoutTagCannotAddViaCLI(t *testing.T) {
 			assert.NoError(c, err)
 
 			if len(nodes) == 1 {
-				if len(nodes[0].Tags) == 0 {
+				if len(nodes[0].GetTags()) == 0 {
 					t.Logf("Test 3.3 PASS: Tags still empty after CLI attempt")
 				} else {
-					t.Logf("Test 3.3 FAIL: Tags changed to: %v", nodes[0].Tags)
+					t.Logf("Test 3.3 FAIL: Tags changed to: %v", nodes[0].GetTags())
 					assert.Fail(c, "Tags should not have changed")
 				}
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying tags unchanged")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying tags unchanged")
 	}
 }
 
@@ -978,7 +978,7 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithReset(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create an auth key WITHOUT tags
 	authKey, err := scenario.CreatePreAuthKey(userID, true, false)
@@ -992,7 +992,7 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithReset(t *testing.T) {
 	require.NoError(t, err)
 
 	// Initial login
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for initial registration and get node ID
@@ -1004,10 +1004,10 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithReset(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
+			nodeID = nodes[0].GetId()
 			assertNodeHasNoTagsWithCollect(c, nodes[0])
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	// Step 2: Admin assigns tags
 	err = headscale.SetNodeTags(nodeID, []string{"tag:valid-owned"})
@@ -1021,12 +1021,12 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithReset(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying admin tag assignment on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying admin tag assignment on server")
 
 	// Verify admin assignment propagated to node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying admin tag assignment propagated to node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying admin tag assignment propagated to node self")
 
 	t.Logf("Admin assigned tag, now running CLI with --reset")
 
@@ -1034,7 +1034,7 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithReset(t *testing.T) {
 	command := []string{
 		"tailscale", "up",
 		"--login-server=" + headscale.GetEndpoint(),
-		"--authkey=" + authKey.Key,
+		"--authkey=" + authKey.GetKey(),
 		"--reset",
 	}
 	_, stderr, err := client.Execute(command)
@@ -1047,15 +1047,15 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithReset(t *testing.T) {
 		assert.Len(c, nodes, 1, "Should have exactly 1 node")
 
 		if len(nodes) == 1 {
-			t.Logf("After --reset, server tags are: %v", nodes[0].Tags)
+			t.Logf("After --reset, server tags are: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "admin tags should be preserved after --reset on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "admin tags should be preserved after --reset on server")
 
 	// Verify admin tags are preserved in node's self view after --reset (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "admin tags should be preserved after --reset in node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "admin tags should be preserved after --reset in node self")
 
 	t.Logf("Test 3.4 PASS: Admin tags preserved after --reset")
 }
@@ -1098,7 +1098,7 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithEmptyAdvertise(t *testing.T)
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create an auth key WITHOUT tags
 	authKey, err := scenario.CreatePreAuthKey(userID, true, false)
@@ -1112,7 +1112,7 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithEmptyAdvertise(t *testing.T)
 	require.NoError(t, err)
 
 	// Initial login
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for initial registration and get node ID
@@ -1124,9 +1124,9 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithEmptyAdvertise(t *testing.T)
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
+			nodeID = nodes[0].GetId()
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	// Step 2: Admin assigns tags
 	err = headscale.SetNodeTags(nodeID, []string{"tag:valid-owned"})
@@ -1140,12 +1140,12 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithEmptyAdvertise(t *testing.T)
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying admin tag assignment on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying admin tag assignment on server")
 
 	// Verify admin assignment propagated to node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying admin tag assignment propagated to node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying admin tag assignment propagated to node self")
 
 	t.Logf("Admin assigned tag, now running CLI with empty --advertise-tags")
 
@@ -1153,7 +1153,7 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithEmptyAdvertise(t *testing.T)
 	command := []string{
 		"tailscale", "up",
 		"--login-server=" + headscale.GetEndpoint(),
-		"--authkey=" + authKey.Key,
+		"--authkey=" + authKey.GetKey(),
 		"--advertise-tags=",
 	}
 	_, stderr, err := client.Execute(command)
@@ -1166,15 +1166,15 @@ func TestTagsAuthKeyWithoutTagCLINoOpAfterAdminWithEmptyAdvertise(t *testing.T)
 		assert.Len(c, nodes, 1, "Should have exactly 1 node")
 
 		if len(nodes) == 1 {
-			t.Logf("After empty --advertise-tags, server tags are: %v", nodes[0].Tags)
+			t.Logf("After empty --advertise-tags, server tags are: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "admin tags should be preserved after empty --advertise-tags on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "admin tags should be preserved after empty --advertise-tags on server")
 
 	// Verify admin tags are preserved in node's self view after empty --advertise-tags (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "admin tags should be preserved after empty --advertise-tags in node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "admin tags should be preserved after empty --advertise-tags in node self")
 
 	t.Logf("Test 3.5 PASS: Admin tags preserved after empty --advertise-tags")
 }
@@ -1217,7 +1217,7 @@ func TestTagsAuthKeyWithoutTagCLICannotReduceAdminMultiTag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create an auth key WITHOUT tags
 	authKey, err := scenario.CreatePreAuthKey(userID, true, false)
@@ -1231,7 +1231,7 @@ func TestTagsAuthKeyWithoutTagCLICannotReduceAdminMultiTag(t *testing.T) {
 	require.NoError(t, err)
 
 	// Initial login
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for initial registration and get node ID
@@ -1243,9 +1243,9 @@ func TestTagsAuthKeyWithoutTagCLICannotReduceAdminMultiTag(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
+			nodeID = nodes[0].GetId()
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	// Step 2: Admin assigns multiple tags
 	err = headscale.SetNodeTags(nodeID, []string{"tag:valid-owned", "tag:second"})
@@ -1259,12 +1259,12 @@ func TestTagsAuthKeyWithoutTagCLICannotReduceAdminMultiTag(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned", "tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying admin tag assignment on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying admin tag assignment on server")
 
 	// Verify admin assignment propagated to node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned", "tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying admin tag assignment propagated to node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying admin tag assignment propagated to node self")
 
 	t.Logf("Admin assigned both tags, now attempting to reduce via CLI")
 
@@ -1272,7 +1272,7 @@ func TestTagsAuthKeyWithoutTagCLICannotReduceAdminMultiTag(t *testing.T) {
 	command := []string{
 		"tailscale", "up",
 		"--login-server=" + headscale.GetEndpoint(),
-		"--authkey=" + authKey.Key,
+		"--authkey=" + authKey.GetKey(),
 		"--advertise-tags=tag:valid-owned",
 	}
 	_, stderr, err := client.Execute(command)
@@ -1285,15 +1285,15 @@ func TestTagsAuthKeyWithoutTagCLICannotReduceAdminMultiTag(t *testing.T) {
 		assert.Len(c, nodes, 1, "Should have exactly 1 node")
 
 		if len(nodes) == 1 {
-			t.Logf("After CLI reduce attempt, server tags are: %v", nodes[0].Tags)
+			t.Logf("After CLI reduce attempt, server tags are: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned", "tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "admin tags should be preserved after CLI reduce attempt on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "admin tags should be preserved after CLI reduce attempt on server")
 
 	// Verify admin tags are preserved in node's self view after CLI reduce attempt (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned", "tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "admin tags should be preserved after CLI reduce attempt in node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "admin tags should be preserved after CLI reduce attempt in node self")
 
 	t.Logf("Test 3.6 PASS: Admin tags preserved - CLI cannot reduce admin-assigned multi-tag set")
 }
@@ -1366,10 +1366,10 @@ func TestTagsUserLoginOwnedTagAtRegistration(t *testing.T) {
 		assert.Len(c, nodes, 1, "Should have exactly 1 node")
 
 		if len(nodes) == 1 {
-			t.Logf("Node registered with tags: %v", nodes[0].Tags)
+			t.Logf("Node registered with tags: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying node has advertised tag")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying node has advertised tag")
 
 	t.Logf("Test 1.1 completed - web auth with owned tag succeeded")
 }
@@ -1438,11 +1438,11 @@ func TestTagsUserLoginNonExistentTagAtRegistration(t *testing.T) {
 				t.Logf("Test 1.2 PASS: Registration rejected - no nodes registered")
 			} else {
 				// If a node was registered, it should NOT have the non-existent tag
-				assert.NotContains(c, nodes[0].Tags, "tag:nonexistent",
+				assert.NotContains(c, nodes[0].GetTags(), "tag:nonexistent",
 					"Non-existent tag should not be applied to node")
-				t.Logf("Test 1.2: Node registered with tags: %v (non-existent tag correctly rejected)", nodes[0].Tags)
+				t.Logf("Test 1.2: Node registered with tags: %v (non-existent tag correctly rejected)", nodes[0].GetTags())
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "checking node registration result")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "checking node registration result")
 	}
 }
 
@@ -1506,11 +1506,11 @@ func TestTagsUserLoginUnownedTagAtRegistration(t *testing.T) {
 			t.Logf("Test 1.3 PASS: Registration rejected - no nodes registered")
 		} else {
 			// If a node was registered, it should NOT have the unowned tag
-			assert.NotContains(c, nodes[0].Tags, "tag:valid-unowned",
+			assert.NotContains(c, nodes[0].GetTags(), "tag:valid-unowned",
 				"Unowned tag should not be applied to node (tag:valid-unowned is owned by other-user)")
-			t.Logf("Test 1.3: Node registered with tags: %v (unowned tag correctly rejected)", nodes[0].Tags)
+			t.Logf("Test 1.3: Node registered with tags: %v (unowned tag correctly rejected)", nodes[0].GetTags())
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "checking node registration result")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "checking node registration result")
 }
 
 // TestTagsUserLoginAddTagViaCLIReauth tests that a user can add tags via CLI reauthentication.
@@ -1572,9 +1572,9 @@ func TestTagsUserLoginAddTagViaCLIReauth(t *testing.T) {
 		assert.NoError(c, err)
 
 		if len(nodes) == 1 {
-			t.Logf("Initial tags: %v", nodes[0].Tags)
+			t.Logf("Initial tags: %v", nodes[0].GetTags())
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "checking initial tags")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "checking initial tags")
 
 	// Step 2: Try to add second tag via CLI
 	t.Logf("Attempting to add second tag via CLI reauth")
@@ -1587,21 +1587,21 @@ func TestTagsUserLoginAddTagViaCLIReauth(t *testing.T) {
 	_, stderr, err := client.Execute(command)
 	t.Logf("CLI result: err=%v, stderr=%s", err, stderr)
 
-	// Check final state - [assert.EventuallyWithT] handles waiting for propagation
+	// Check final state - EventuallyWithT handles waiting for propagation
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err := headscale.ListNodes()
 		assert.NoError(c, err)
 
 		if len(nodes) >= 1 {
-			t.Logf("Test 1.4: After CLI, tags are: %v", nodes[0].Tags)
+			t.Logf("Test 1.4: After CLI, tags are: %v", nodes[0].GetTags())
 
-			if tagsEqual(nodes[0].Tags, []string{"tag:valid-owned", "tag:second"}) {
+			if tagsEqual(nodes[0].GetTags(), []string{"tag:valid-owned", "tag:second"}) {
 				t.Logf("Test 1.4 PASS: Both tags present after reauth")
 			} else {
-				t.Logf("Test 1.4: Tags are %v (may require manual reauth completion)", nodes[0].Tags)
+				t.Logf("Test 1.4: Tags are %v (may require manual reauth completion)", nodes[0].GetTags())
 			}
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "checking tags after CLI")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "checking tags after CLI")
 }
 
 // TestTagsUserLoginRemoveTagViaCLIReauth tests that a user can remove tags via CLI reauthentication.
@@ -1663,9 +1663,9 @@ func TestTagsUserLoginRemoveTagViaCLIReauth(t *testing.T) {
 		assert.NoError(c, err)
 
 		if len(nodes) == 1 {
-			t.Logf("Initial tags: %v", nodes[0].Tags)
+			t.Logf("Initial tags: %v", nodes[0].GetTags())
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "checking initial tags")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "checking initial tags")
 
 	// Step 2: Try to remove second tag via CLI
 	t.Logf("Attempting to remove tag via CLI reauth")
@@ -1678,19 +1678,19 @@ func TestTagsUserLoginRemoveTagViaCLIReauth(t *testing.T) {
 	_, stderr, err := client.Execute(command)
 	t.Logf("CLI result: err=%v, stderr=%s", err, stderr)
 
-	// Check final state - [assert.EventuallyWithT] handles waiting for propagation
+	// Check final state - EventuallyWithT handles waiting for propagation
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err := headscale.ListNodes()
 		assert.NoError(c, err)
 
 		if len(nodes) >= 1 {
-			t.Logf("Test 1.5: After CLI, tags are: %v", nodes[0].Tags)
+			t.Logf("Test 1.5: After CLI, tags are: %v", nodes[0].GetTags())
 
-			if tagsEqual(nodes[0].Tags, []string{"tag:valid-owned"}) {
+			if tagsEqual(nodes[0].GetTags(), []string{"tag:valid-owned"}) {
 				t.Logf("Test 1.5 PASS: Only one tag after removal")
 			}
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "checking tags after CLI")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "checking tags after CLI")
 }
 
 // TestTagsUserLoginCLINoOpAfterAdminAssignment tests that CLI advertise-tags becomes
@@ -1757,10 +1757,10 @@ func TestTagsUserLoginCLINoOpAfterAdminAssignment(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
-			t.Logf("Step 1: Node %d registered with tags: %v", nodeID, nodes[0].Tags)
+			nodeID = nodes[0].GetId()
+			t.Logf("Step 1: Node %d registered with tags: %v", nodeID, nodes[0].GetTags())
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	// Step 2: Admin assigns different tag
 	err = headscale.SetNodeTags(nodeID, []string{"tag:second"})
@@ -1772,15 +1772,15 @@ func TestTagsUserLoginCLINoOpAfterAdminAssignment(t *testing.T) {
 		assert.NoError(c, err)
 
 		if len(nodes) == 1 {
-			t.Logf("Step 2: After admin assignment, server tags: %v", nodes[0].Tags)
+			t.Logf("Step 2: After admin assignment, server tags: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying admin assignment on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying admin assignment on server")
 
 	// Verify admin assignment propagated to node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying admin assignment propagated to node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying admin assignment propagated to node self")
 
 	// Step 3: Try to change tags via CLI
 	command := []string{
@@ -1798,15 +1798,15 @@ func TestTagsUserLoginCLINoOpAfterAdminAssignment(t *testing.T) {
 		assert.Len(c, nodes, 1, "Should have exactly 1 node")
 
 		if len(nodes) == 1 {
-			t.Logf("Step 3: After CLI, server tags are: %v", nodes[0].Tags)
+			t.Logf("Step 3: After CLI, server tags are: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "admin tags should be preserved - CLI advertise-tags should be no-op on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "admin tags should be preserved - CLI advertise-tags should be no-op on server")
 
 	// Verify admin tags are preserved in node's self view after CLI attempt (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "admin tags should be preserved - CLI advertise-tags should be no-op in node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "admin tags should be preserved - CLI advertise-tags should be no-op in node self")
 
 	t.Logf("Test 1.6 PASS: Admin tags preserved (CLI was no-op)")
 }
@@ -1874,9 +1874,9 @@ func TestTagsUserLoginCLICannotRemoveAdminTags(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
+			nodeID = nodes[0].GetId()
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	// Step 2: Admin assigns both tags
 	err = headscale.SetNodeTags(nodeID, []string{"tag:valid-owned", "tag:second"})
@@ -1888,15 +1888,15 @@ func TestTagsUserLoginCLICannotRemoveAdminTags(t *testing.T) {
 		assert.NoError(c, err)
 
 		if len(nodes) == 1 {
-			t.Logf("After admin assignment, server tags: %v", nodes[0].Tags)
+			t.Logf("After admin assignment, server tags: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned", "tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying admin assignment on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying admin assignment on server")
 
 	// Verify admin assignment propagated to node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned", "tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying admin assignment propagated to node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying admin assignment propagated to node self")
 
 	// Step 3: Try to reduce tags via CLI
 	command := []string{
@@ -1914,15 +1914,15 @@ func TestTagsUserLoginCLICannotRemoveAdminTags(t *testing.T) {
 		assert.Len(c, nodes, 1, "Should have exactly 1 node")
 
 		if len(nodes) == 1 {
-			t.Logf("Test 1.7: After CLI, server tags are: %v", nodes[0].Tags)
+			t.Logf("Test 1.7: After CLI, server tags are: %v", nodes[0].GetTags())
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned", "tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "admin tags should be preserved - CLI cannot remove them on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "admin tags should be preserved - CLI cannot remove them on server")
 
 	// Verify admin tags are preserved in node's self view after CLI attempt (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned", "tag:second"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "admin tags should be preserved - CLI cannot remove them in node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "admin tags should be preserved - CLI cannot remove them in node self")
 
 	t.Logf("Test 1.7 PASS: Admin tags preserved (CLI cannot remove)")
 }
@@ -1965,12 +1965,12 @@ func TestTagsAuthKeyWithTagRequestNonExistentTag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey with tag:valid-owned
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
 	require.NoError(t, err)
-	t.Logf("Created tagged PreAuthKey with tags: %v", authKey.AclTags)
+	t.Logf("Created tagged PreAuthKey with tags: %v", authKey.GetAclTags())
 
 	// Create a tailscale client that will try to use --advertise-tags with a NON-EXISTENT tag
 	client, err := scenario.CreateTailscaleNode(
@@ -1981,7 +1981,7 @@ func TestTagsAuthKeyWithTagRequestNonExistentTag(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login should fail because ANY advertise-tags is rejected for PreAuthKey registrations
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	if err != nil {
 		t.Logf("Test 2.7 PASS: Registration correctly rejected with error: %v", err)
 		assert.ErrorContains(t, err, "requested tags")
@@ -1993,9 +1993,9 @@ func TestTagsAuthKeyWithTagRequestNonExistentTag(t *testing.T) {
 			assert.NoError(c, err)
 
 			if len(nodes) == 1 {
-				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].Tags)
+				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].GetTags())
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "checking node state")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "checking node state")
 
 		t.Fail()
 	}
@@ -2035,12 +2035,12 @@ func TestTagsAuthKeyWithTagRequestUnownedTag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey with tag:valid-owned
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
 	require.NoError(t, err)
-	t.Logf("Created tagged PreAuthKey with tags: %v", authKey.AclTags)
+	t.Logf("Created tagged PreAuthKey with tags: %v", authKey.GetAclTags())
 
 	// Create a tailscale client that will try to use --advertise-tags with an UNOWNED tag
 	client, err := scenario.CreateTailscaleNode(
@@ -2051,7 +2051,7 @@ func TestTagsAuthKeyWithTagRequestUnownedTag(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login should fail because ANY advertise-tags is rejected for PreAuthKey registrations
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	if err != nil {
 		t.Logf("Test 2.8 PASS: Registration correctly rejected with error: %v", err)
 		assert.ErrorContains(t, err, "requested tags")
@@ -2063,9 +2063,9 @@ func TestTagsAuthKeyWithTagRequestUnownedTag(t *testing.T) {
 			assert.NoError(c, err)
 
 			if len(nodes) == 1 {
-				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].Tags)
+				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].GetTags())
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "checking node state")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "checking node state")
 
 		t.Fail()
 	}
@@ -2109,7 +2109,7 @@ func TestTagsAuthKeyWithoutTagRequestNonExistentTag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create an auth key WITHOUT tags
 	authKey, err := scenario.CreatePreAuthKey(userID, false, false)
@@ -2125,7 +2125,7 @@ func TestTagsAuthKeyWithoutTagRequestNonExistentTag(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login should fail because ANY advertise-tags is rejected for PreAuthKey registrations
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	if err != nil {
 		t.Logf("Test 3.7 PASS: Registration correctly rejected: %v", err)
 		assert.ErrorContains(t, err, "requested tags")
@@ -2137,9 +2137,9 @@ func TestTagsAuthKeyWithoutTagRequestNonExistentTag(t *testing.T) {
 			assert.NoError(c, err)
 
 			if len(nodes) == 1 {
-				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].Tags)
+				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].GetTags())
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "checking node state")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "checking node state")
 
 		t.Fail()
 	}
@@ -2179,7 +2179,7 @@ func TestTagsAuthKeyWithoutTagRequestUnownedTag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create an auth key WITHOUT tags
 	authKey, err := scenario.CreatePreAuthKey(userID, false, false)
@@ -2195,7 +2195,7 @@ func TestTagsAuthKeyWithoutTagRequestUnownedTag(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login should fail because ANY advertise-tags is rejected for PreAuthKey registrations
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	if err != nil {
 		t.Logf("Test 3.8 PASS: Registration correctly rejected: %v", err)
 		assert.ErrorContains(t, err, "requested tags")
@@ -2207,9 +2207,9 @@ func TestTagsAuthKeyWithoutTagRequestUnownedTag(t *testing.T) {
 			assert.NoError(c, err)
 
 			if len(nodes) == 1 {
-				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].Tags)
+				t.Logf("Node registered with tags: %v (expected rejection)", nodes[0].GetTags())
 			}
-		}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "checking node state")
+		}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "checking node state")
 
 		t.Fail()
 	}
@@ -2253,7 +2253,7 @@ func TestTagsAdminAPICannotSetNonExistentTag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey to register a node
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
@@ -2266,7 +2266,7 @@ func TestTagsAdminAPICannotSetNonExistentTag(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for registration and get node ID
@@ -2278,10 +2278,10 @@ func TestTagsAdminAPICannotSetNonExistentTag(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
-			t.Logf("Node %d registered with tags: %v", nodeID, nodes[0].Tags)
+			nodeID = nodes[0].GetId()
+			t.Logf("Node %d registered with tags: %v", nodeID, nodes[0].GetTags())
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for registration")
 
 	// Try to set a non-existent tag via admin API - should fail
 	err = headscale.SetNodeTags(nodeID, []string{"tag:nonexistent"})
@@ -2325,7 +2325,7 @@ func TestTagsAdminAPICanSetUnownedTag(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey to register a node
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
@@ -2338,7 +2338,7 @@ func TestTagsAdminAPICanSetUnownedTag(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for registration and get node ID
@@ -2350,10 +2350,10 @@ func TestTagsAdminAPICanSetUnownedTag(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
-			t.Logf("Node %d registered with tags: %v", nodeID, nodes[0].Tags)
+			nodeID = nodes[0].GetId()
+			t.Logf("Node %d registered with tags: %v", nodeID, nodes[0].GetTags())
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for registration")
 
 	// Admin sets an "unowned" tag - should SUCCEED because admin has full authority
 	// (tag:valid-unowned is owned by other-user, but admin can assign it)
@@ -2369,12 +2369,12 @@ func TestTagsAdminAPICanSetUnownedTag(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-unowned"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying unowned tag was applied on server")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying unowned tag was applied on server")
 
 	// Verify the tag was propagated to node's self view (issue #2978)
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-unowned"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying unowned tag propagated to node self")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying unowned tag propagated to node self")
 
 	t.Logf("Test 4.2 PASS: Admin API correctly allowed setting unowned tag")
 }
@@ -2413,7 +2413,7 @@ func TestTagsAdminAPICannotRemoveAllTags(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey to register a node
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
@@ -2426,7 +2426,7 @@ func TestTagsAdminAPICannotRemoveAllTags(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for registration and get node ID
@@ -2438,10 +2438,10 @@ func TestTagsAdminAPICannotRemoveAllTags(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
-			t.Logf("Node %d registered with tags: %v", nodeID, nodes[0].Tags)
+			nodeID = nodes[0].GetId()
+			t.Logf("Node %d registered with tags: %v", nodeID, nodes[0].GetTags())
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for registration")
 
 	// Try to remove all tags - should fail
 	err = headscale.SetNodeTags(nodeID, []string{})
@@ -2458,7 +2458,7 @@ func TestTagsAdminAPICannotRemoveAllTags(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying original tags preserved")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying original tags preserved")
 }
 
 // assertNetmapSelfHasTagsWithCollect asserts that the client's netmap self node has expected tags.
@@ -2560,15 +2560,15 @@ func TestTagsIssue2978ReproTagReplacement(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
+			nodeID = nodes[0].GetId()
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for initial registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for initial registration")
 
 	// Verify client initially sees tag:valid-owned
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-owned"})
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "client should see initial tag")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "client should see initial tag")
 
 	t.Logf("Step 1: Node %d registered via web auth with --advertise-tags=tag:valid-owned, client sees it", nodeID)
 
@@ -2588,7 +2588,7 @@ func TestTagsIssue2978ReproTagReplacement(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:second"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "server should show tag:second after first call")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "server should show tag:second after first call")
 
 	t.Log("Step 2a: Server shows tag:second after first call")
 
@@ -2638,11 +2638,11 @@ func TestTagsIssue2978ReproTagReplacement(t *testing.T) {
 	t.Log("Step 3a: Verifying client self view updates after SECOND call")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:second"})
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "client status.Self should update to tag:second after SECOND call")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "client status.Self should update to tag:second after SECOND call")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNetmapSelfHasTagsWithCollect(c, client, []string{"tag:second"})
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "client netmap.SelfNode should update to tag:second after SECOND call")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "client netmap.SelfNode should update to tag:second after SECOND call")
 
 	t.Log("Step 3b: Client self view updated to tag:second after SECOND call")
 
@@ -2660,7 +2660,7 @@ func TestTagsIssue2978ReproTagReplacement(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-unowned"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "server should show tag:valid-unowned")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "server should show tag:valid-unowned")
 
 	t.Log("Step 4a: Server shows tag:valid-unowned after first call")
 
@@ -2692,11 +2692,11 @@ func TestTagsIssue2978ReproTagReplacement(t *testing.T) {
 	t.Log("Step 5a: Verifying client self view updates after SECOND call")
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNodeSelfHasTagsWithCollect(c, client, []string{"tag:valid-unowned"})
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "client status.Self should update to tag:valid-unowned after SECOND call")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "client status.Self should update to tag:valid-unowned after SECOND call")
 
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		assertNetmapSelfHasTagsWithCollect(c, client, []string{"tag:valid-unowned"})
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "client netmap.SelfNode should update to tag:valid-unowned after SECOND call")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "client netmap.SelfNode should update to tag:valid-unowned after SECOND call")
 
 	t.Log("Test complete - see logs for bug reproduction details")
 }
@@ -2735,7 +2735,7 @@ func TestTagsAdminAPICannotSetInvalidFormat(t *testing.T) {
 	userMap, err := headscale.MapUsers()
 	require.NoError(t, err)
 
-	userID := mustParseID(userMap[tagTestUser].Id)
+	userID := userMap[tagTestUser].GetId()
 
 	// Create a tagged PreAuthKey to register a node
 	authKey, err := scenario.CreatePreAuthKeyWithTags(userID, false, false, []string{"tag:valid-owned"})
@@ -2748,7 +2748,7 @@ func TestTagsAdminAPICannotSetInvalidFormat(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for registration and get node ID
@@ -2760,10 +2760,10 @@ func TestTagsAdminAPICannotSetInvalidFormat(t *testing.T) {
 		assert.Len(c, nodes, 1)
 
 		if len(nodes) == 1 {
-			nodeID = mustParseID(nodes[0].Id)
-			t.Logf("Node %d registered with tags: %v", nodeID, nodes[0].Tags)
+			nodeID = nodes[0].GetId()
+			t.Logf("Node %d registered with tags: %v", nodeID, nodes[0].GetTags())
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "waiting for registration")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "waiting for registration")
 
 	// Try to set a tag without the "tag:" prefix - should fail
 	err = headscale.SetNodeTags(nodeID, []string{"invalid-no-prefix"})
@@ -2780,7 +2780,7 @@ func TestTagsAdminAPICannotSetInvalidFormat(t *testing.T) {
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
 		}
-	}, integrationutil.ScaledTimeout(10*time.Second), integrationutil.SlowPoll, "verifying original tags preserved")
+	}, integrationutil.ScaledTimeout(10*time.Second), 500*time.Millisecond, "verifying original tags preserved")
 }
 
 // =============================================================================
@@ -2855,7 +2855,7 @@ func TestTagsUserLoginReauthWithEmptyTagsRemovesAllTags(t *testing.T) {
 		require.NoError(t, err)
 
 		// Verify initial tags
-		var initialNodeID string
+		var initialNodeID uint64
 
 		assert.EventuallyWithT(t, func(c *assert.CollectT) {
 			nodes, err := headscale.ListNodes()
@@ -2864,14 +2864,14 @@ func TestTagsUserLoginReauthWithEmptyTagsRemovesAllTags(t *testing.T) {
 
 			if len(nodes) == 1 {
 				node := nodes[0]
-				initialNodeID = node.Id
-				t.Logf("Initial state - Node ID: %s, Tags: %v, User: %s",
-					node.Id, node.Tags, node.User.Name)
+				initialNodeID = node.GetId()
+				t.Logf("Initial state - Node ID: %d, Tags: %v, User: %s",
+					node.GetId(), node.GetTags(), node.GetUser().GetName())
 
 				// Verify node has the expected tags
 				assertNodeHasTagsWithCollect(c, node, []string{"tag:valid-owned", "tag:second"})
 			}
-		}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "checking initial tags")
+		}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "checking initial tags")
 
 		// Step 2: Reauth with empty tags to remove all tags
 		t.Logf("Step 2: Reauthenticating with empty tag list to untag device (%s)", tc.name)
@@ -2926,28 +2926,28 @@ func TestTagsUserLoginReauthWithEmptyTagsRemovesAllTags(t *testing.T) {
 
 			if len(nodes) >= 1 {
 				node := nodes[0]
-				t.Logf("After reauth - Node ID: %s, Tags: %v, User: %s",
-					node.Id, node.Tags, node.User.Name)
+				t.Logf("After reauth - Node ID: %d, Tags: %v, User: %s",
+					node.GetId(), node.GetTags(), node.GetUser().GetName())
 
 				// Assert: Node should have NO tags
 				assertNodeHasNoTagsWithCollect(c, node)
 
 				// Assert: Node should be owned by the user (not tagged-devices)
-				assert.Equal(c, tagTestUser, node.User.Name,
+				assert.Equal(c, tagTestUser, node.GetUser().GetName(),
 					"Node ownership should return to user %s after untagging", tagTestUser)
 
 				// Verify the node ID is still the same (not a new registration)
-				assert.Equal(c, initialNodeID, node.Id,
+				assert.Equal(c, initialNodeID, node.GetId(),
 					"Node ID should remain the same after reauth")
 
-				if len(node.Tags) == 0 && node.User.Name == tagTestUser {
+				if len(node.GetTags()) == 0 && node.GetUser().GetName() == tagTestUser {
 					t.Logf("Test #2979 (%s) PASS: Node successfully untagged and ownership returned to user", tc.name)
 				} else {
 					t.Logf("Test #2979 (%s) FAIL: Expected no tags and user=%s, got tags=%v user=%s",
-						tc.name, tagTestUser, node.Tags, node.User.Name)
+						tc.name, tagTestUser, node.GetTags(), node.GetUser().GetName())
 				}
 			}
-		}, integrationutil.HAConvergeTimeout, 1*time.Second, "verifying tags removed and ownership returned")
+		}, integrationutil.ScaledTimeout(60*time.Second), 1*time.Second, "verifying tags removed and ownership returned")
 	})
 }
 
@@ -2994,7 +2994,7 @@ func TestTagsAuthKeyWithoutUserInheritsTags(t *testing.T) {
 		Tags:      []string{"tag:valid-owned"},
 	})
 	require.NoError(t, err)
-	t.Logf("Created tags-only PreAuthKey with tags: %v", authKey.AclTags)
+	t.Logf("Created tags-only PreAuthKey with tags: %v", authKey.GetAclTags())
 
 	// Create a tailscale client WITHOUT --advertise-tags
 	client, err := scenario.CreateTailscaleNode(
@@ -3005,7 +3005,7 @@ func TestTagsAuthKeyWithoutUserInheritsTags(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login with the tags-only auth key
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	// Wait for node to be registered and verify it has the key's tags
@@ -3017,10 +3017,10 @@ func TestTagsAuthKeyWithoutUserInheritsTags(t *testing.T) {
 
 		if len(nodes) == 1 {
 			node := nodes[0]
-			t.Logf("Node registered with tags: %v", node.Tags)
+			t.Logf("Node registered with tags: %v", node.GetTags())
 			assertNodeHasTagsWithCollect(c, node, []string{"tag:valid-owned"})
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "verifying node inherited tags from auth key")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "verifying node inherited tags from auth key")
 
 	t.Logf("Test 5.1 PASS: Node inherited tags from tags-only auth key")
 }
@@ -3065,7 +3065,7 @@ func TestTagsAuthKeyWithoutUserRejectsAdvertisedTags(t *testing.T) {
 		Tags:      []string{"tag:valid-owned"},
 	})
 	require.NoError(t, err)
-	t.Logf("Created tags-only PreAuthKey with tags: %v", authKey.AclTags)
+	t.Logf("Created tags-only PreAuthKey with tags: %v", authKey.GetAclTags())
 
 	// Create a tailscale client WITH --advertise-tags for a DIFFERENT tag
 	client, err := scenario.CreateTailscaleNode(
@@ -3076,7 +3076,7 @@ func TestTagsAuthKeyWithoutUserRejectsAdvertisedTags(t *testing.T) {
 	require.NoError(t, err)
 
 	// Login should fail because ANY advertise-tags is rejected for PreAuthKey registrations
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	if err != nil {
 		t.Logf("Test 5.2 PASS: Registration correctly rejected with error: %v", err)
 		assert.ErrorContains(t, err, "requested tags")
@@ -3093,8 +3093,8 @@ func TestTagsAuthKeyWithoutUserRejectsAdvertisedTags(t *testing.T) {
 // TestTagsAuthKeyConvertToUserViaCLIRegister reproduces the panic from
 // issue #3038: register a node with a tags-only preauthkey (no user), then
 // convert it to a user-owned node via "headscale auth register --auth-id <id> --user <user>".
-// The crash happens in the mapper's generateUserProfiles when [types.Node.User] is nil
-// after the tag→user conversion in [State.processReauthTags].
+// The crash happens in the mapper's generateUserProfiles when node.User is nil
+// after the tag→user conversion in processReauthTags.
 //
 // The key detail is using a tags-only PreAuthKey (User: nil). When created under
 // a user, the node inherits User from the PreAuthKey and the bug is masked.
@@ -3124,8 +3124,8 @@ func TestTagsAuthKeyConvertToUserViaCLIRegister(t *testing.T) {
 	requireNoErrGetHeadscale(t, err)
 
 	// Step 1: Create a tags-only preauthkey WITHOUT a user.
-	// This is the critical detail: when [types.PreAuthKey.UserID] is nil, the node
-	// enters the [state.NodeStore] with [types.Node.User] == nil. The [state.State.processReauthTags]
+	// This is the critical detail: when PreAuthKey.UserID is nil, the node
+	// enters the NodeStore with node.User == nil. The processReauthTags
 	// conversion then sets UserID but not User, leaving it nil for the mapper.
 	authKey, err := scenario.CreatePreAuthKeyWithOptions(hsic.AuthKeyOptions{
 		User:      nil,
@@ -3134,7 +3134,7 @@ func TestTagsAuthKeyConvertToUserViaCLIRegister(t *testing.T) {
 		Tags:      []string{"tag:valid-owned"},
 	})
 	require.NoError(t, err)
-	t.Logf("Created tags-only PreAuthKey (no user) with tags: %v", authKey.AclTags)
+	t.Logf("Created tags-only PreAuthKey (no user) with tags: %v", authKey.GetAclTags())
 
 	client, err := scenario.CreateTailscaleNode(
 		"head",
@@ -3142,7 +3142,7 @@ func TestTagsAuthKeyConvertToUserViaCLIRegister(t *testing.T) {
 	)
 	require.NoError(t, err)
 
-	err = client.Login(headscale.GetEndpoint(), authKey.Key)
+	err = client.Login(headscale.GetEndpoint(), authKey.GetKey())
 	require.NoError(t, err)
 
 	err = client.WaitForRunning(integrationutil.PeerSyncTimeout())
@@ -3156,9 +3156,9 @@ func TestTagsAuthKeyConvertToUserViaCLIRegister(t *testing.T) {
 
 		if len(nodes) == 1 {
 			assertNodeHasTagsWithCollect(c, nodes[0], []string{"tag:valid-owned"})
-			t.Logf("Initial state - Node ID: %s, Tags: %v", nodes[0].Id, nodes[0].Tags)
+			t.Logf("Initial state - Node ID: %d, Tags: %v", nodes[0].GetId(), nodes[0].GetTags())
 		}
-	}, integrationutil.StatusReadyTimeout, integrationutil.SlowPoll, "node should be tagged initially")
+	}, integrationutil.ScaledTimeout(30*time.Second), 500*time.Millisecond, "node should be tagged initially")
 
 	// Step 2: Force reauth with empty tags (triggers web auth flow)
 	command := []string{
@@ -3186,8 +3186,8 @@ func TestTagsAuthKeyConvertToUserViaCLIRegister(t *testing.T) {
 	require.NoError(t, err)
 
 	// Step 4: Verify node is now user-owned and the mapper didn't panic.
-	// The panic would occur when the mapper builds the [tailcfg.MapResponse] and calls
-	// [types.Node.Owner].Model().ID with a nil User pointer.
+	// The panic would occur when the mapper builds the MapResponse and calls
+	// node.Owner().Model().ID with a nil User pointer.
 	// ShutdownAssertNoPanics in the defer catches any panics in headscale logs.
 	assert.EventuallyWithT(t, func(c *assert.CollectT) {
 		nodes, err := headscale.ListNodes()
@@ -3196,10 +3196,10 @@ func TestTagsAuthKeyConvertToUserViaCLIRegister(t *testing.T) {
 
 		if len(nodes) == 1 {
 			assertNodeHasNoTagsWithCollect(c, nodes[0])
-			assert.Equal(c, tagTestUser, nodes[0].User.Name,
+			assert.Equal(c, tagTestUser, nodes[0].GetUser().GetName(),
 				"Node ownership should be returned to user after untagging")
-			t.Logf("After conversion - Node ID: %s, Tags: %v, User: %s",
-				nodes[0].Id, nodes[0].Tags, nodes[0].User.Name)
+			t.Logf("After conversion - Node ID: %d, Tags: %v, User: %s",
+				nodes[0].GetId(), nodes[0].GetTags(), nodes[0].GetUser().GetName())
 		}
-	}, integrationutil.HAConvergeTimeout, 1*time.Second, "node should be user-owned after conversion via CLI register")
+	}, integrationutil.ScaledTimeout(60*time.Second), 1*time.Second, "node should be user-owned after conversion via CLI register")
 }
diff --git a/integration/ts2021_websocket_test.go b/integration/ts2021_websocket_test.go
deleted file mode 100644
index fc7f425e3..000000000
--- a/integration/ts2021_websocket_test.go
+++ /dev/null
@@ -1,315 +0,0 @@
-package integration
-
-import (
-	"context"
-	"crypto/tls"
-	"crypto/x509"
-	"encoding/base64"
-	"encoding/json"
-	"errors"
-	"fmt"
-	"net/http"
-	"net/netip"
-	"net/url"
-	"testing"
-	"time"
-
-	"github.com/coder/websocket"
-	"github.com/juanfont/headscale/integration/dockertestutil"
-	"github.com/juanfont/headscale/integration/hsic"
-	"github.com/juanfont/headscale/integration/tsic"
-	"github.com/ory/dockertest/v3"
-	"github.com/samber/lo"
-	"github.com/stretchr/testify/require"
-	"tailscale.com/control/controlbase"
-	"tailscale.com/control/controlhttp/controlhttpcommon"
-	"tailscale.com/net/wsconn"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
-	"tailscale.com/util/rands"
-)
-
-// Tailscale's JS/WASM control client opens /ts2021 as a browser WebSocket — an
-// HTTP GET upgrade — rather than the native client's HTTP POST upgrade. A router
-// that registers /ts2021 for POST only rejects that GET with 405 before the
-// Noise handshake starts, which breaks every WASM client (issue #3357).
-//
-// These two tests guard that path against real headscale:
-//
-//   - TestTS2021WebSocketGET dials the WebSocket GET directly from the test
-//     process using the same coder/websocket + controlbase primitives the WASM
-//     client uses. It is fast and always on.
-//   - TestTS2021WASMClientUnderNode runs the *actual* tailscale.com js/wasm
-//     control dial (integration/wasmic/wasmclient, built for GOOS=js) inside a
-//     Node container, alongside normal Tailscale clients, and asserts it
-//     completes the Noise handshake with headscale over the WebSocket.
-//
-// The server cannot tell the two apart: both send GET /ts2021 with
-// Sec-WebSocket-Protocol: tailscale-control-protocol. Before the fix both fail
-// with 405; after it, both complete the handshake.
-
-// TestTS2021WebSocketGET connects to /ts2021 over a WebSocket GET from the test
-// process and completes the Noise handshake, exactly as a browser/WASM client
-// would.
-func TestTS2021WebSocketGET(t *testing.T) {
-	IntegrationSkip(t)
-	t.Parallel()
-
-	spec := ScenarioSpec{
-		NodesPerUser: 1,
-		Users:        []string{"user1"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoErrorf(t, err, "failed to create scenario: %s", err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	err = scenario.CreateHeadscaleEnv([]tsic.Option{}, hsic.WithTestName("ts2021ws"))
-	requireNoErrHeadscaleEnv(t, err)
-
-	headscale, err := scenario.Headscale()
-	requireNoErrGetHeadscale(t, err)
-
-	conn, err := dialTS2021WebSocket(t, headscale.GetEndpoint(), headscale.GetCert())
-	require.NoError(t, err,
-		"WebSocket GET to /ts2021 must reach NoiseUpgradeHandler, not be rejected by the router with 405")
-	require.NotNil(t, conn)
-	t.Cleanup(func() { _ = conn.Close() })
-
-	t.Logf("noise established over websocket, protocol version %d", conn.ProtocolVersion())
-}
-
-// TestTS2021WASMClientUnderNode runs the real tailscale.com js/wasm control dial
-// inside a Node container against real headscale, next to normal Tailscale
-// clients, and asserts the WASM client completes the /ts2021 handshake.
-func TestTS2021WASMClientUnderNode(t *testing.T) {
-	IntegrationSkip(t)
-	t.Parallel()
-
-	spec := ScenarioSpec{
-		NodesPerUser: 2,
-		Users:        []string{"user1"},
-		Networks: map[string]NetworkSpec{
-			"wasmnet": {Users: []string{"user1"}},
-		},
-		ExtraService: map[string][]extraServiceFunc{
-			"wasmnet": {wasmClientService},
-		},
-		// The wasm client image builds from this module; pair it with the
-		// head Tailscale clients so the whole environment is current.
-		Versions: []string{"head"},
-	}
-
-	scenario, err := NewScenario(spec)
-
-	require.NoErrorf(t, err, "failed to create scenario: %s", err)
-	defer scenario.ShutdownAssertNoPanics(t)
-
-	// The Tailscale JS/WASM client dials the control server as a WebSocket.
-	// client_js.go only honours a custom port for ws:// (plain HTTP); over
-	// wss:// it always targets :443, so it cannot reach a TLS control server on
-	// :8080. Run headscale without TLS, matching the http:// setup in the issue.
-	err = scenario.CreateHeadscaleEnv(
-		[]tsic.Option{},
-		hsic.WithTestName("ts2021wasm"),
-		hsic.WithoutTLS(),
-	)
-	requireNoErrHeadscaleEnv(t, err)
-
-	allClients, err := scenario.ListTailscaleClients()
-	requireNoErrListClients(t, err)
-
-	allIPs, err := scenario.ListTailscaleClientsIPs()
-	requireNoErrListClientIPs(t, err)
-
-	// Normal Tailscale clients come up and form a working tailnet alongside the
-	// WASM control client.
-	err = scenario.WaitForTailscaleSync()
-	requireNoErrSync(t, err)
-
-	headscale, err := scenario.Headscale()
-	requireNoErrGetHeadscale(t, err)
-
-	// Sanity-check the tailnet the WASM client is joining: the normal clients
-	// must be able to reach each other.
-	allAddrs := lo.Map(allIPs, func(x netip.Addr, _ int) string { return x.String() })
-	assertPingAll(t, allClients, allAddrs)
-
-	services, err := scenario.Services("wasmnet")
-	require.NoError(t, err)
-	require.Len(t, services, 1, "expected the wasm client container")
-
-	wasm := services[0]
-	controlURL := headscale.GetEndpoint()
-
-	// Fetch the server's Noise key here and pass it to the WASM client: Go's
-	// net/http DNS resolver is unavailable under GOOS=js, so the client can only
-	// use the JS WebSocket transport, not an HTTP GET to /key.
-	ctx, cancel := context.WithTimeout(context.Background(), 15*time.Second)
-	defer cancel()
-
-	controlKey, err := fetchServerNoiseKey(ctx, &http.Client{Timeout: 15 * time.Second}, controlURL)
-	require.NoError(t, err)
-	controlKeyText, err := controlKey.MarshalText()
-	require.NoError(t, err)
-
-	// Run the real js/wasm control client under Node: it dials /ts2021 as a
-	// WebSocket GET; success means the Noise handshake completed.
-	stdout, stderr, err := dockertestutil.ExecuteCommand(
-		wasm,
-		[]string{"node", "/app/wasm_exec_node.js", "/app/client.wasm", controlURL, string(controlKeyText)},
-		[]string{},
-		dockertestutil.ExecuteCommandTimeout(60*time.Second),
-	)
-	t.Logf("wasm client stdout:\n%s", stdout)
-	t.Logf("wasm client stderr:\n%s", stderr)
-
-	require.NoError(t, err,
-		"wasm control client must connect to /ts2021 over websocket (405 means the router rejected the GET)")
-	require.Contains(t, stdout, "WASM_TS2021_OK",
-		"wasm control client should report a completed Noise handshake")
-}
-
-// wasmClientService builds and starts the Node + js/wasm control-client
-// container (Dockerfile.wasmclient) on the given network so it can reach
-// headscale by hostname. It idles; the test execs the client on demand.
-func wasmClientService(s *Scenario, networkName string) (*dockertest.Resource, error) {
-	hash := rands.HexString(hsicOIDCMockHashLength)
-	hostname := "hs-wasmclient-" + hash
-
-	network, ok := s.networks[s.prefixedNetworkName(networkName)]
-	if !ok {
-		return nil, fmt.Errorf("network does not exist: %s", networkName) //nolint:err113
-	}
-
-	runOpts := &dockertest.RunOptions{
-		Name:     hostname,
-		Networks: []*dockertest.Network{network},
-		Env:      []string{},
-	}
-	dockertestutil.DockerAddIntegrationLabels(runOpts, "wasmclient")
-
-	buildOpts := &dockertest.BuildOptions{
-		Dockerfile: "Dockerfile.wasmclient",
-		ContextDir: dockerContextPath,
-	}
-
-	resource, err := s.pool.BuildAndRunWithBuildOptions(
-		buildOpts,
-		runOpts,
-		dockertestutil.DockerRestartPolicy,
-	)
-	if err != nil {
-		return nil, fmt.Errorf("building wasm client container: %w", err)
-	}
-
-	return resource, nil
-}
-
-// dialTS2021WebSocket opens /ts2021 as a WebSocket GET (subprotocol
-// tailscale-control-protocol) and completes the Noise handshake, mirroring what
-// tailscale.com/control/controlhttp/client_js.go does in a browser. It returns
-// the established Noise connection, or an error (a router that only allows POST
-// returns 405 here).
-func dialTS2021WebSocket(t *testing.T, endpoint string, caCert []byte) (*controlbase.Conn, error) {
-	t.Helper()
-
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	t.Cleanup(cancel)
-
-	u, err := url.Parse(endpoint)
-	require.NoError(t, err)
-
-	httpClient := &http.Client{Timeout: 15 * time.Second}
-
-	if u.Scheme == "https" {
-		pool := x509.NewCertPool()
-		pool.AppendCertsFromPEM(caCert)
-		httpClient.Transport = &http.Transport{
-			TLSClientConfig: &tls.Config{RootCAs: pool, MinVersion: tls.VersionTLS12},
-		}
-	}
-
-	controlKey, err := fetchServerNoiseKey(ctx, httpClient, endpoint)
-	require.NoError(t, err)
-
-	init, cont, err := controlbase.ClientDeferred(
-		key.NewMachine(),
-		controlKey,
-		uint16(tailcfg.CurrentCapabilityVersion),
-	)
-	require.NoError(t, err)
-
-	wsScheme := "ws"
-	if u.Scheme == "https" {
-		wsScheme = "wss"
-	}
-
-	wsURL := &url.URL{
-		Scheme: wsScheme,
-		Host:   u.Host,
-		Path:   "/ts2021",
-		RawQuery: url.Values{
-			controlhttpcommon.HandshakeHeaderName: []string{base64.StdEncoding.EncodeToString(init)},
-		}.Encode(),
-	}
-
-	wsConn, resp, err := websocket.Dial(ctx, wsURL.String(), &websocket.DialOptions{
-		Subprotocols: []string{controlhttpcommon.UpgradeHeaderValue},
-		HTTPClient:   httpClient,
-	})
-	if resp != nil && resp.Body != nil {
-		_ = resp.Body.Close()
-	}
-
-	if err != nil {
-		return nil, err
-	}
-
-	netConn := wsconn.NetConn(ctx, wsConn, websocket.MessageBinary, wsURL.String())
-
-	cbConn, err := cont(ctx, netConn)
-	if err != nil {
-		_ = netConn.Close()
-		return nil, fmt.Errorf("noise handshake over websocket: %w", err)
-	}
-
-	return cbConn, nil
-}
-
-// fetchServerNoiseKey retrieves headscale's Noise public key from /key, the same
-// endpoint a real client consults before dialing /ts2021.
-func fetchServerNoiseKey(
-	ctx context.Context,
-	client *http.Client,
-	endpoint string,
-) (key.MachinePublic, error) {
-	var zero key.MachinePublic
-
-	keyURL := fmt.Sprintf("%s/key?v=%d", endpoint, tailcfg.CurrentCapabilityVersion)
-
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, keyURL, nil)
-	if err != nil {
-		return zero, err
-	}
-
-	resp, err := client.Do(req)
-	if err != nil {
-		return zero, err
-	}
-	defer resp.Body.Close()
-
-	var k tailcfg.OverTLSPublicKeyResponse
-
-	err = json.NewDecoder(resp.Body).Decode(&k)
-	if err != nil {
-		return zero, fmt.Errorf("decoding /key response: %w", err)
-	}
-
-	if k.PublicKey.IsZero() {
-		return zero, errors.New("server returned zero Noise public key") //nolint:err113
-	}
-
-	return k.PublicKey, nil
-}
diff --git a/integration/tsic/tsic.go b/integration/tsic/tsic.go
index 3e19d2b14..4a558a049 100644
--- a/integration/tsic/tsic.go
+++ b/integration/tsic/tsic.go
@@ -34,7 +34,6 @@ import (
 	"tailscale.com/types/key"
 	"tailscale.com/types/netmap"
 	"tailscale.com/util/multierr"
-	"tailscale.com/util/rands"
 	"tailscale.com/wgengine/filter"
 )
 
@@ -44,7 +43,6 @@ const (
 	dockerContextPath    = "../."
 	caCertRoot           = "/usr/local/share/ca-certificates"
 	dockerExecuteTimeout = 60 * time.Second
-	tailscaleBin         = "tailscale"
 )
 
 // defaultPingTimeoutVal returns the per-attempt timeout for tailscale ping.
@@ -69,7 +67,6 @@ var (
 	errTailscaleImageRequiredInCI      = errors.New("HEADSCALE_INTEGRATION_TAILSCALE_IMAGE must be set in CI for HEAD version")
 	errContainerNotInitialized         = errors.New("container not initialized")
 	errFQDNNotYetAvailable             = errors.New("FQDN not yet available")
-	errCurlEmptyResponseBody           = errors.New("curl returned empty response body")
 )
 
 const (
@@ -98,7 +95,6 @@ type TailscaleInContainer struct {
 	caCerts           [][]byte
 	headscaleHostname string
 	withWebsocketDERP bool
-	withDERPOverHTTP  bool
 	withSSH           bool
 	withTags          []string
 	withEntrypoint    []string
@@ -130,7 +126,7 @@ func WithCACert(cert []byte) Option {
 	}
 }
 
-// WithNetwork sets the Docker [dockertest.Network] to use with
+// WithNetwork sets the Docker container network to use with
 // the Tailscale instance.
 func WithNetwork(network *dockertest.Network) Option {
 	return func(tsic *TailscaleInContainer) {
@@ -161,18 +157,6 @@ func WithWebsocketDERP(enabled bool) Option {
 	}
 }
 
-// WithDERPOverHTTP makes the client reach the DERP server over plain-HTTP
-// websockets (TS_DEBUG_DERP_WS_CLIENT + TS_DEBUG_USE_DERP_HTTP). It is the
-// counterpart to [hsic.WithoutTLS]: a Headscale serving its embedded DERP without
-// TLS is otherwise unreachable, because the client defaults to dialing DERP over
-// HTTPS.
-func WithDERPOverHTTP() Option {
-	return func(tsic *TailscaleInContainer) {
-		tsic.withWebsocketDERP = true
-		tsic.withDERPOverHTTP = true
-	}
-}
-
 // WithSSH enables SSH for the Tailscale instance.
 func WithSSH() Option {
 	return func(tsic *TailscaleInContainer) {
@@ -230,7 +214,7 @@ func WithBuildTag(tag string) Option {
 }
 
 // WithExtraLoginArgs adds additional arguments to the `tailscale up` command
-// as part of the [TailscaleInContainer.Login] function.
+// as part of the Login function.
 func WithExtraLoginArgs(args []string) Option {
 	return func(tsic *TailscaleInContainer) {
 		tsic.extraLoginArgs = append(tsic.extraLoginArgs, args...)
@@ -285,7 +269,7 @@ func (t *TailscaleInContainer) buildEntrypoint() []string {
 	commands = append(commands, "while ! ip route show default >/dev/null 2>&1; do sleep 0.1; done")
 
 	// If CA certs are configured, wait for them to be written by the Go code
-	// (certs are written after container start via [TailscaleInContainer.WriteFile])
+	// (certs are written after container start via tsic.WriteFile)
 	if len(t.caCerts) > 0 {
 		commands = append(commands,
 			fmt.Sprintf("while [ ! -f %s/user-0.crt ]; do sleep 0.1; done", caCertRoot))
@@ -328,9 +312,10 @@ func New(
 	version string,
 	opts ...Option,
 ) (*TailscaleInContainer, error) {
-	hash := rands.HexString(tsicHashLength)
-
-	var err error
+	hash, err := util.GenerateRandomStringDNSSafe(tsicHashLength)
+	if err != nil {
+		return nil, err
+	}
 
 	// Include run ID in hostname for easier identification of which test run owns this container
 	runID := dockertestutil.GetIntegrationRunID()
@@ -385,12 +370,6 @@ func New(
 			tailscaleOptions.Env,
 			fmt.Sprintf("TS_DEBUG_DERP_WS_CLIENT=%t", tsic.withWebsocketDERP),
 		)
-
-		// Plain-HTTP DERP additionally needs the client to dial http:// instead of
-		// the default https://; see [WithDERPOverHTTP].
-		if tsic.withDERPOverHTTP {
-			tailscaleOptions.Env = append(tailscaleOptions.Env, "TS_DEBUG_USE_DERP_HTTP=true")
-		}
 	}
 
 	tailscaleOptions.ExtraHosts = append(tailscaleOptions.ExtraHosts,
@@ -409,7 +388,7 @@ func New(
 	}
 
 	// Add integration test labels if running under hi tool
-	dockertestutil.DockerAddIntegrationLabels(tailscaleOptions, tailscaleBin)
+	dockertestutil.DockerAddIntegrationLabels(tailscaleOptions, "tailscale")
 
 	var container *dockertest.Resource
 
@@ -433,13 +412,13 @@ func New(
 		// the pre-built image as it won't have the necessary code compiled in.
 		hasBuildTags := len(tsic.buildConfig.tags) > 0
 		if hasBuildTags && prebuiltImage != "" {
-			log.Printf("Ignoring pre-built image %s because custom build tags are required: %v", //nolint:gosec // G706: integration-only log of trusted env value
+			log.Printf("Ignoring pre-built image %s because custom build tags are required: %v",
 				prebuiltImage, tsic.buildConfig.tags)
 			prebuiltImage = ""
 		}
 
 		if prebuiltImage != "" {
-			log.Printf("Using pre-built tailscale image: %s", prebuiltImage) //nolint:gosec // G706: integration-only log of trusted env value
+			log.Printf("Using pre-built tailscale image: %s", prebuiltImage)
 
 			// Parse image into repository and tag
 			repo, tag, ok := strings.Cut(prebuiltImage, ":")
@@ -541,18 +520,9 @@ func New(
 			}
 		}
 	case "unstable":
-		// ghcr.io/tailscale/tailscale:unstable is stale (last updated
-		// 2022); only tailscale/tailscale on Docker Hub publishes
-		// current unstable builds.
 		tailscaleOptions.Repository = "tailscale/tailscale"
 		tailscaleOptions.Tag = version
 
-		err = dockertestutil.PullWithAuth(pool, tailscaleOptions.Repository+":"+tailscaleOptions.Tag)
-		if err != nil {
-			//nolint:gosec // G706: tag value is from MustTestVersions, not external input
-			log.Printf("Pull failed for %s:%s, error: %v", tailscaleOptions.Repository, tailscaleOptions.Tag, err)
-		}
-
 		container, err = pool.RunWithOptions(
 			tailscaleOptions,
 			dockertestutil.DockerRestartPolicy,
@@ -564,15 +534,9 @@ func New(
 			log.Printf("Docker run failed for %s (unstable), error: %v", hostname, err)
 		}
 	default:
-		tailscaleOptions.Repository = "ghcr.io/tailscale/tailscale"
+		tailscaleOptions.Repository = "tailscale/tailscale"
 		tailscaleOptions.Tag = "v" + version
 
-		err = dockertestutil.PullWithAuth(pool, tailscaleOptions.Repository+":"+tailscaleOptions.Tag)
-		if err != nil {
-			//nolint:gosec // G706: tag value is from MustTestVersions, not external input
-			log.Printf("Pull failed for %s:%s, error: %v", tailscaleOptions.Repository, tailscaleOptions.Tag, err)
-		}
-
 		container, err = pool.RunWithOptions(
 			tailscaleOptions,
 			dockertestutil.DockerRestartPolicy,
@@ -632,7 +596,7 @@ func (t *TailscaleInContainer) Version() string {
 	return t.version
 }
 
-// ContainerID returns the Docker container ID of the [TailscaleInContainer]
+// ContainerID returns the Docker container ID of the TailscaleInContainer
 // instance.
 func (t *TailscaleInContainer) ContainerID() string {
 	return t.container.Container.ID
@@ -680,7 +644,7 @@ func (t *TailscaleInContainer) buildLoginCommand(
 	loginServer, authKey string,
 ) []string {
 	command := []string{
-		tailscaleBin,
+		"tailscale",
 		"up",
 		"--login-server=" + loginServer,
 		"--hostname=" + t.hostname,
@@ -704,8 +668,7 @@ func (t *TailscaleInContainer) buildLoginCommand(
 	}
 
 	if len(t.withTags) > 0 {
-		command = append(
-			command,
+		command = append(command,
 			"--advertise-tags="+strings.Join(t.withTags, ","),
 		)
 	}
@@ -760,12 +723,12 @@ func (t *TailscaleInContainer) LoginWithURL(
 
 // Logout runs the logout routine on the given Tailscale instance.
 func (t *TailscaleInContainer) Logout() error {
-	_, _, err := t.Execute([]string{tailscaleBin, "logout"})
+	_, _, err := t.Execute([]string{"tailscale", "logout"})
 	if err != nil {
 		return err
 	}
 
-	stdout, stderr, _ := t.Execute([]string{tailscaleBin, "status"})
+	stdout, stderr, _ := t.Execute([]string{"tailscale", "status"})
 	if !strings.Contains(stdout+stderr, "Logged out.") {
 		return fmt.Errorf("logging out, stdout: %s, stderr: %s", stdout, stderr) //nolint:err113
 	}
@@ -792,7 +755,7 @@ func (t *TailscaleInContainer) Restart() error {
 	// We use exponential backoff to poll until we can successfully execute a command
 	_, err = backoff.Retry(context.Background(), func() (struct{}, error) {
 		// Try to execute a simple command to verify the container is responsive
-		_, _, err := t.Execute([]string{tailscaleBin, "version"}, dockertestutil.ExecuteCommandTimeout(5*time.Second))
+		_, _, err := t.Execute([]string{"tailscale", "version"}, dockertestutil.ExecuteCommandTimeout(5*time.Second))
 		if err != nil {
 			return struct{}{}, fmt.Errorf("container not ready: %w", err)
 		}
@@ -809,7 +772,7 @@ func (t *TailscaleInContainer) Restart() error {
 // Up runs `tailscale up` with no arguments.
 func (t *TailscaleInContainer) Up() error {
 	command := []string{
-		tailscaleBin,
+		"tailscale",
 		"up",
 	}
 
@@ -828,7 +791,7 @@ func (t *TailscaleInContainer) Up() error {
 // Down runs `tailscale down` with no arguments.
 func (t *TailscaleInContainer) Down() error {
 	command := []string{
-		tailscaleBin,
+		"tailscale",
 		"down",
 	}
 
@@ -859,7 +822,7 @@ func (t *TailscaleInContainer) ReconnectToNetwork(network *dockertest.Network) e
 	return dockertestutil.ReconnectContainerToNetwork(t.pool, network, t.hostname)
 }
 
-// IPs returns the [netip.Addr] of the Tailscale instance.
+// IPs returns the netip.Addr of the Tailscale instance.
 func (t *TailscaleInContainer) IPs() ([]netip.Addr, error) {
 	if len(t.ips) != 0 {
 		return t.ips, nil
@@ -868,7 +831,7 @@ func (t *TailscaleInContainer) IPs() ([]netip.Addr, error) {
 	// Retry with exponential backoff to handle eventual consistency
 	ips, err := backoff.Retry(context.Background(), func() ([]netip.Addr, error) {
 		command := []string{
-			tailscaleBin,
+			"tailscale",
 			"ip",
 		}
 
@@ -950,58 +913,35 @@ func (t *TailscaleInContainer) MustIPv6() netip.Addr {
 	panic("no ipv6 found")
 }
 
-// execJSON runs command on the Tailscale instance, unmarshals the stdout into a
-// fresh T, and returns the value alongside the raw JSON for callers that persist
-// it. stderr is printed when the command fails. execErr and unmarshalErr provide
-// the error context used in test diagnostics.
-func execJSON[T any](
-	t *TailscaleInContainer,
-	command []string,
-	execErr, unmarshalErr string,
-) (*T, string, error) {
-	result, stderr, err := t.Execute(command)
-	if err != nil {
-		fmt.Printf("stderr: %s\n", stderr)
-		return nil, "", fmt.Errorf("%s: %w", execErr, err)
-	}
-
-	var v T
-
-	err = json.Unmarshal([]byte(result), &v)
-	if err != nil {
-		return nil, "", fmt.Errorf("%s: %w", unmarshalErr, err)
-	}
-
-	return &v, result, nil
-}
-
-// Status returns the [ipnstate.Status] of the Tailscale instance.
+// Status returns the ipnstate.Status of the Tailscale instance.
 func (t *TailscaleInContainer) Status(save ...bool) (*ipnstate.Status, error) {
 	command := []string{
-		tailscaleBin,
+		"tailscale",
 		"status",
 		"--json",
 	}
 
-	status, raw, err := execJSON[ipnstate.Status](
-		t,
-		command,
-		"executing tailscale status command",
-		"unmarshalling tailscale status",
-	)
+	result, _, err := t.Execute(command)
 	if err != nil {
-		return nil, err
+		return nil, fmt.Errorf("executing tailscale status command: %w", err)
 	}
 
-	err = os.WriteFile(fmt.Sprintf("/tmp/control/%s_status.json", t.hostname), []byte(raw), 0o755) //nolint:gosec // test infrastructure log files
+	var status ipnstate.Status
+
+	err = json.Unmarshal([]byte(result), &status)
+	if err != nil {
+		return nil, fmt.Errorf("unmarshalling tailscale status: %w", err)
+	}
+
+	err = os.WriteFile(fmt.Sprintf("/tmp/control/%s_status.json", t.hostname), []byte(result), 0o755) //nolint:gosec // test infrastructure log files
 	if err != nil {
 		return nil, fmt.Errorf("status netmap to /tmp/control: %w", err)
 	}
 
-	return status, nil
+	return &status, err
 }
 
-// MustStatus returns the [ipnstate.Status] of the Tailscale instance.
+// MustStatus returns the ipnstate.Status of the Tailscale instance.
 func (t *TailscaleInContainer) MustStatus() *ipnstate.Status {
 	status, err := t.Status()
 	if err != nil {
@@ -1026,7 +966,7 @@ func (t *TailscaleInContainer) MustID() types.NodeID {
 	return types.NodeID(id)
 }
 
-// Netmap returns the current Netmap ([netmap.NetworkMap]) of the Tailscale instance.
+// Netmap returns the current Netmap (netmap.NetworkMap) of the Tailscale instance.
 // Only works with Tailscale 1.56 and newer.
 // Panics if version is lower then minimum.
 func (t *TailscaleInContainer) Netmap() (*netmap.NetworkMap, error) {
@@ -1035,30 +975,33 @@ func (t *TailscaleInContainer) Netmap() (*netmap.NetworkMap, error) {
 	}
 
 	command := []string{
-		tailscaleBin,
+		"tailscale",
 		"debug",
 		"netmap",
 	}
 
-	nm, raw, err := execJSON[netmap.NetworkMap](
-		t,
-		command,
-		"executing tailscale debug netmap command",
-		"unmarshalling tailscale netmap",
-	)
+	result, stderr, err := t.Execute(command)
 	if err != nil {
-		return nil, err
+		fmt.Printf("stderr: %s\n", stderr)
+		return nil, fmt.Errorf("executing tailscale debug netmap command: %w", err)
 	}
 
-	err = os.WriteFile(fmt.Sprintf("/tmp/control/%s_netmap.json", t.hostname), []byte(raw), 0o755) //nolint:gosec // test infrastructure log files
+	var nm netmap.NetworkMap
+
+	err = json.Unmarshal([]byte(result), &nm)
+	if err != nil {
+		return nil, fmt.Errorf("unmarshalling tailscale netmap: %w", err)
+	}
+
+	err = os.WriteFile(fmt.Sprintf("/tmp/control/%s_netmap.json", t.hostname), []byte(result), 0o755) //nolint:gosec // test infrastructure log files
 	if err != nil {
 		return nil, fmt.Errorf("saving netmap to /tmp/control: %w", err)
 	}
 
-	return nm, nil
+	return &nm, err
 }
 
-// Netmap returns the current Netmap ([netmap.NetworkMap]) of the Tailscale instance.
+// Netmap returns the current Netmap (netmap.NetworkMap) of the Tailscale instance.
 // This implementation is based on getting the netmap from `tailscale debug watch-ipn`
 // as there seem to be some weirdness omitting endpoint and DERP info if we use
 // Patch updates.
@@ -1081,8 +1024,8 @@ func (t *TailscaleInContainer) Netmap() (*netmap.NetworkMap, error) {
 // 	return notify.NetMap, nil
 // }
 
-// watchIPN watches `tailscale debug watch-ipn` for a [ipn.Notify] object until
-// it gets one that has a [netmap.NetworkMap].
+// watchIPN watches `tailscale debug watch-ipn` for a ipn.Notify object until
+// it gets one that has a netmap.NetworkMap.
 //
 //nolint:unused
 func (t *TailscaleInContainer) watchIPN(ctx context.Context) (*ipn.Notify, error) {
@@ -1130,7 +1073,7 @@ func (t *TailscaleInContainer) watchIPN(ctx context.Context) (*ipn.Notify, error
 				resultChan <- result{nil, fmt.Errorf("parse notify: %w", err)}
 			}
 
-			if notify.NetMap != nil { //nolint:staticcheck // SA1019: NetMap is still populated on the platforms our integration containers run; migrating to InitialStatus/PeerChanges is a separate change
+			if notify.NetMap != nil {
 				resultChan <- result{&notify, nil}
 			}
 		}
@@ -1159,44 +1102,51 @@ func (t *TailscaleInContainer) DebugDERPRegion(region string) (*ipnstate.DebugDE
 	}
 
 	command := []string{
-		tailscaleBin,
+		"tailscale",
 		"debug",
 		"derp",
 		region,
 	}
 
-	report, _, err := execJSON[ipnstate.DebugDERPRegionReport](
-		t,
-		command,
-		"executing tailscale debug derp command",
-		"unmarshalling tailscale derp region report",
-	)
+	result, stderr, err := t.Execute(command)
 	if err != nil {
-		return nil, err
+		fmt.Printf("stderr: %s\n", stderr) // nolint
+
+		return nil, fmt.Errorf("executing tailscale debug derp command: %w", err)
 	}
 
-	return report, nil
+	var report ipnstate.DebugDERPRegionReport
+
+	err = json.Unmarshal([]byte(result), &report)
+	if err != nil {
+		return nil, fmt.Errorf("unmarshalling tailscale derp region report: %w", err)
+	}
+
+	return &report, err
 }
 
-// Netcheck returns the current Netcheck Report ([netcheck.Report]) of the Tailscale instance.
+// Netcheck returns the current Netcheck Report (netcheck.Report) of the Tailscale instance.
 func (t *TailscaleInContainer) Netcheck() (*netcheck.Report, error) {
 	command := []string{
-		tailscaleBin,
+		"tailscale",
 		"netcheck",
 		"--format=json",
 	}
 
-	nm, _, err := execJSON[netcheck.Report](
-		t,
-		command,
-		"executing tailscale debug netcheck command",
-		"unmarshalling tailscale netcheck",
-	)
+	result, stderr, err := t.Execute(command)
 	if err != nil {
-		return nil, err
+		fmt.Printf("stderr: %s\n", stderr)
+		return nil, fmt.Errorf("executing tailscale debug netcheck command: %w", err)
 	}
 
-	return nm, nil
+	var nm netcheck.Report
+
+	err = json.Unmarshal([]byte(result), &nm)
+	if err != nil {
+		return nil, fmt.Errorf("unmarshalling tailscale netcheck: %w", err)
+	}
+
+	return &nm, err
 }
 
 // FQDN returns the FQDN as a string of the Tailscale instance.
@@ -1295,7 +1245,7 @@ func (t *TailscaleInContainer) waitForBackendState(state string, timeout time.Du
 				continue // Keep retrying on status errors
 			}
 
-			// [ipnstate.Status.CurrentTailnet] was added in Tailscale 1.22.0
+			// ipnstate.Status.CurrentTailnet was added in Tailscale 1.22.0
 			// https://github.com/tailscale/tailscale/pull/3865
 			//
 			// Before that, we can check the BackendState to see if the
@@ -1419,7 +1369,7 @@ func WithPingUntilDirect(direct bool) PingOption {
 }
 
 // Ping executes the Tailscale ping command and pings a hostname
-// or IP. It accepts a series of [PingOption].
+// or IP. It accepts a series of PingOption.
 // TODO(kradalby): Make multiping, go routine magic.
 func (t *TailscaleInContainer) Ping(hostnameOrIP string, opts ...PingOption) error {
 	args := pingArgs{
@@ -1433,9 +1383,8 @@ func (t *TailscaleInContainer) Ping(hostnameOrIP string, opts ...PingOption) err
 	}
 
 	command := make([]string, 0, 6)
-	command = append(
-		command,
-		tailscaleBin, "ping",
+	command = append(command,
+		"tailscale", "ping",
 		fmt.Sprintf("--timeout=%s", args.timeout),
 		fmt.Sprintf("--c=%d", args.count),
 		"--until-direct="+strconv.FormatBool(args.direct),
@@ -1532,7 +1481,7 @@ const (
 )
 
 // Curl executes the Tailscale curl command and curls a hostname
-// or IP. It accepts a series of [CurlOption].
+// or IP. It accepts a series of CurlOption.
 func (t *TailscaleInContainer) Curl(url string, opts ...CurlOption) (string, error) {
 	args := curlArgs{
 		connectionTimeout: defaultConnectionTimeout,
@@ -1571,15 +1520,6 @@ func (t *TailscaleInContainer) Curl(url string, opts ...CurlOption) (string, err
 		return result, err
 	}
 
-	// curl exit 0 with an empty body usually means a mid-stream reset
-	// after headers (HTTP 200 with the connection torn down before the
-	// body arrived). Without this signal, callers wrapping the call in
-	// [assert.EventuallyWithT] see [assert.NoError] pass and [assert.Len] fail with
-	// no error to drive a retry.
-	if result == "" {
-		return result, fmt.Errorf("%w: %s from %s", errCurlEmptyResponseBody, url, t.Hostname())
-	}
-
 	return result, nil
 }
 
@@ -1595,16 +1535,8 @@ func (t *TailscaleInContainer) CurlFailFast(url string) (string, error) {
 }
 
 func (t *TailscaleInContainer) Traceroute(ip netip.Addr) (util.Traceroute, error) {
-	// -w 1: wait at most 1s for each probe response. busybox's default
-	//       is 5s, which means an [assert.EventuallyWithT] loop at 200ms ticks
-	//       can spend 25 ticks worth of budget on a single Traceroute.
-	// -q 1: send 1 probe per hop instead of 3. The HA tests only care
-	//       about the first hop's identity; the other probes are dead
-	//       weight for the same retry budget.
 	command := []string{
 		"traceroute",
-		"-w", "1",
-		"-q", "1",
 		ip.String(),
 	}
 
@@ -1641,7 +1573,7 @@ func (t *TailscaleInContainer) SaveLog(path string) (string, string, error) {
 }
 
 // WriteLogs writes the current stdout/stderr log of the container to
-// the given [io.Writer]s.
+// the given io.Writers.
 func (t *TailscaleInContainer) WriteLogs(stdout, stderr io.Writer) error {
 	return dockertestutil.WriteLog(t.pool, t.container, stdout, stderr)
 }
@@ -1715,7 +1647,7 @@ func (t *TailscaleInContainer) GetNodePrivateKey() (*key.NodePrivate, error) {
 	return &p.Persist.PrivateNodeKey, nil
 }
 
-// ConnectToNetwork connects the Tailscale container to an additional Docker [dockertest.Network].
+// ConnectToNetwork connects the Tailscale container to an additional Docker network.
 func (t *TailscaleInContainer) ConnectToNetwork(network *dockertest.Network) error {
 	return t.container.ConnectToNetwork(network)
 }
diff --git a/integration/tsric/tsric.go b/integration/tsric/tsric.go
index e160d855d..b7f19c724 100644
--- a/integration/tsric/tsric.go
+++ b/integration/tsric/tsric.go
@@ -15,11 +15,11 @@ import (
 	"os"
 	"strings"
 
+	"github.com/juanfont/headscale/hscontrol/util"
 	"github.com/juanfont/headscale/integration/dockertestutil"
 	"github.com/juanfont/headscale/integration/integrationutil"
 	"github.com/ory/dockertest/v3"
 	"github.com/ory/dockertest/v3/docker"
-	"tailscale.com/util/rands"
 )
 
 const (
@@ -65,7 +65,7 @@ func WithCACert(cert []byte) Option {
 	}
 }
 
-// WithNetwork sets the Docker [dockertest.Network].
+// WithNetwork sets the Docker container network.
 func WithNetwork(network *dockertest.Network) Option {
 	return func(t *TailscaleRustInContainer) {
 		t.network = network
@@ -129,8 +129,7 @@ func (t *TailscaleRustInContainer) buildEntrypoint() []string {
 
 	commands = append(commands, "update-ca-certificates 2>/dev/null || true")
 
-	commands = append(
-		commands,
+	commands = append(commands,
 		fmt.Sprintf(`export TS_CONTROL_URL=%q`, t.headscaleURL),
 		// The tailscale crate refuses to run without this env gate;
 		// see lib.rs in tailscale-rs.
@@ -147,14 +146,15 @@ func (t *TailscaleRustInContainer) buildEntrypoint() []string {
 	return []string{"/bin/sh", "-c", strings.Join(commands, " ; ")}
 }
 
-// New creates and starts a new [TailscaleRustInContainer] instance.
+// New creates and starts a new TailscaleRustInContainer instance.
 func New(
 	pool *dockertest.Pool,
 	opts ...Option,
 ) (*TailscaleRustInContainer, error) {
-	hash := rands.HexString(tsricHashLength)
-
-	var err error
+	hash, err := util.GenerateRandomStringDNSSafe(tsricHashLength)
+	if err != nil {
+		return nil, err
+	}
 
 	runID := dockertestutil.GetIntegrationRunID()
 
@@ -280,7 +280,7 @@ func New(
 	return t, nil
 }
 
-// Hostname returns the hostname of the [TailscaleRustInContainer] instance.
+// Hostname returns the hostname of the TailscaleRustInContainer instance.
 func (t *TailscaleRustInContainer) Hostname() string {
 	return t.hostname
 }
@@ -310,7 +310,7 @@ func (t *TailscaleRustInContainer) SaveLog(path string) (string, string, error)
 }
 
 // WriteLogs writes the current stdout/stderr log of the container to
-// the given [io.Writer]s.
+// the given io.Writers.
 func (t *TailscaleRustInContainer) WriteLogs(stdout, stderr io.Writer) error {
 	return dockertestutil.WriteLog(t.pool, t.container, stdout, stderr)
 }
diff --git a/integration/tsric_test.go b/integration/tsric_test.go
index 73a147403..525106155 100644
--- a/integration/tsric_test.go
+++ b/integration/tsric_test.go
@@ -73,8 +73,8 @@ func TestTailscaleRustAxum(t *testing.T) {
 	var userID uint64
 
 	for _, u := range users {
-		if u.Name == "user1" { //nolint:goconst
-			userID = mustParseID(u.Id)
+		if u.GetName() == "user1" { //nolint:goconst
+			userID = u.GetId()
 
 			break
 		}
@@ -101,7 +101,7 @@ func TestTailscaleRustAxum(t *testing.T) {
 	tsrsOpts := []tsric.Option{
 		tsric.WithNetwork(network),
 		tsric.WithHeadscaleURL(headscaleEndpoint),
-		tsric.WithAuthKey(pak.Key),
+		tsric.WithAuthKey(pak.GetKey()),
 		tsric.WithExtraHosts([]string{headscaleHostname + ":" + headscaleIP}),
 	}
 
@@ -142,8 +142,8 @@ func TestTailscaleRustAxum(t *testing.T) {
 
 		// Find the tailscale-rs node by hostname prefix
 		for _, n := range nodes {
-			if strings.HasPrefix(n.GivenName, "tsrs-") {
-				addrs := n.IpAddresses
+			if strings.HasPrefix(n.GetGivenName(), "tsrs-") {
+				addrs := n.GetIpAddresses()
 				if len(addrs) > 0 {
 					rustNodeIPv4 = addrs[0]
 				}
@@ -152,7 +152,7 @@ func TestTailscaleRustAxum(t *testing.T) {
 					rustNodeIPv6 = addrs[1]
 				}
 
-				rustNodeName = n.GivenName
+				rustNodeName = n.GetGivenName()
 			}
 		}
 
@@ -241,7 +241,7 @@ func TestTailscaleRustAxum(t *testing.T) {
 
 	// Fire several more POSTs and verify the counter advances.
 	// The axum handler returns {"count": N} where N is the pre-increment value.
-	// After the initial [assert.EventuallyWithT] loop we don't know the exact counter,
+	// After the initial EventuallyWithT loop we don't know the exact counter,
 	// but two back-to-back POSTs should return consecutive values.
 	t.Log("Verifying counter increments across multiple requests...")
 
diff --git a/integration/wasmic/wasmclient/main.go b/integration/wasmic/wasmclient/main.go
deleted file mode 100644
index dfc099251..000000000
--- a/integration/wasmic/wasmclient/main.go
+++ /dev/null
@@ -1,103 +0,0 @@
-//go:build js
-
-// Command wasmclient is a minimal Tailscale control client compiled to
-// GOOS=js/GOARCH=wasm and run under Node. It exercises the real
-// tailscale.com/control/controlhttp js/wasm dial path
-// (control/controlhttp/client_js.go), which opens /ts2021 as a browser-style
-// WebSocket GET — the exact transport a Tailscale JS/WASM client uses.
-//
-// It is the container-side half of the integration test guarding issue #3357:
-// headscale must register /ts2021 for GET, not POST only, or the WebSocket
-// upgrade is rejected with 405 before the Noise handshake can start.
-//
-// It is intentionally not the full tsconnect IPN — the regression is entirely
-// in the control-connection upgrade, and this drives the real upgrade code with
-// the smallest possible harness. On success it prints wasmSuccessMarker and
-// exits 0; on any failure it prints wasmFailureMarker and exits non-zero.
-package main
-
-import (
-	"context"
-	"fmt"
-	"net/url"
-	"os"
-	"time"
-
-	"tailscale.com/control/controlhttp"
-	"tailscale.com/tailcfg"
-	"tailscale.com/types/key"
-)
-
-// These markers are matched by the integration test on the client's stdout.
-const (
-	wasmSuccessMarker = "WASM_TS2021_OK"
-	wasmFailureMarker = "WASM_TS2021_FAIL"
-)
-
-func main() {
-	if len(os.Args) < 3 {
-		fmt.Printf("%s: usage: wasmclient <control-url> <noise-key>\n", wasmFailureMarker)
-		os.Exit(2)
-	}
-
-	if err := run(os.Args[1], os.Args[2]); err != nil {
-		fmt.Printf("%s: %v\n", wasmFailureMarker, err)
-		os.Exit(1)
-	}
-}
-
-// run dials /ts2021 exactly as tailscale.com/control/controlhttp/client_js.go
-// does in a browser: a WebSocket GET via the JS/undici WebSocket. The server's
-// Noise key is passed in (the test fetches /key) rather than fetched here,
-// because Go's net/http DNS resolver is unavailable under GOOS=js — only the
-// WebSocket transport, which runs through the JS host, works.
-func run(controlURL, noiseKeyText string) error {
-	ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
-	defer cancel()
-
-	u, err := url.Parse(controlURL)
-	if err != nil {
-		return fmt.Errorf("parse control url %q: %w", controlURL, err)
-	}
-
-	var controlKey key.MachinePublic
-	if err := controlKey.UnmarshalText([]byte(noiseKeyText)); err != nil {
-		return fmt.Errorf("parse noise key %q: %w", noiseKeyText, err)
-	}
-
-	port := u.Port()
-	if port == "" {
-		if u.Scheme == "https" {
-			port = "443"
-		} else {
-			port = "80"
-		}
-	}
-
-	// client_js.go selects ws:// (and appends the port) only when HTTPPort is a
-	// custom non-80 port and HTTPS is 443 or disabled; otherwise it dials wss://
-	// on the default port. Set the fields to match the server's actual scheme.
-	d := &controlhttp.Dialer{
-		Hostname:        u.Hostname(),
-		MachineKey:      key.NewMachine(),
-		ControlKey:      controlKey,
-		ProtocolVersion: uint16(tailcfg.CurrentCapabilityVersion),
-	}
-	if u.Scheme == "https" {
-		d.HTTPSPort = port
-	} else {
-		d.HTTPPort = port
-		d.HTTPSPort = controlhttp.NoPort
-	}
-
-	conn, err := d.Dial(ctx)
-	if err != nil {
-		return fmt.Errorf("ts2021 websocket dial: %w", err)
-	}
-	defer conn.Close()
-
-	fmt.Printf("%s: noise established over websocket, protocol version %d\n",
-		wasmSuccessMarker, conn.ProtocolVersion())
-
-	return nil
-}
diff --git a/integration/wasmic/wasmclient/stub.go b/integration/wasmic/wasmclient/stub.go
deleted file mode 100644
index 10ee01de5..000000000
--- a/integration/wasmic/wasmclient/stub.go
+++ /dev/null
@@ -1,8 +0,0 @@
-//go:build !js
-
-// This package only does something when built for GOOS=js (see main.go). The
-// stub exists so `go build ./...` and `go vet ./...` on the host don't fail with
-// "build constraints exclude all Go files" for this directory.
-package main
-
-func main() {}
diff --git a/mkdocs.yml b/mkdocs.yml
index c360bd407..694505237 100644
--- a/mkdocs.yml
+++ b/mkdocs.yml
@@ -87,8 +87,8 @@ plugins:
         iOS-client.md: usage/connect/apple.md#ios
         oidc.md: ref/oidc.md
         ref/exit-node.md: ref/routes.md
-        ref/remote-cli.md: ref/api.md#remote-control
-        remote-cli.md: ref/api.md#remote-control
+        ref/remote-cli.md: ref/api.md#grpc
+        remote-cli.md: ref/api.md#grpc
         reverse-proxy.md: ref/integration/reverse-proxy.md
         tls.md: ref/tls.md
         web-ui.md: ref/integration/web-ui.md
@@ -111,7 +111,7 @@ extra:
     - icon: fontawesome/brands/discord
       link: https://discord.gg/c84AZQhmpx
   headscale:
-    version: 0.29.1
+    version: 0.28.0
 
 # Extensions
 markdown_extensions:
diff --git a/packaging/systemd/headscale.service b/packaging/systemd/headscale.service
index 9d3b69712..7d20444ff 100644
--- a/packaging/systemd/headscale.service
+++ b/packaging/systemd/headscale.service
@@ -1,6 +1,7 @@
 [Unit]
 After=network.target
 Description=headscale coordination server for Tailscale
+X-Restart-Triggers=/etc/headscale/config.yaml
 
 [Service]
 Type=simple
@@ -14,11 +15,9 @@ RestartSec=5
 WorkingDirectory=/var/lib/headscale
 ReadWritePaths=/var/lib/headscale
 
-AmbientCapabilities=CAP_NET_BIND_SERVICE
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE
-DevicePolicy=closed
+AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_CHOWN
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_CHOWN
 LockPersonality=true
-MemoryDenyWriteExecute=true
 NoNewPrivileges=true
 PrivateDevices=true
 PrivateMounts=true
@@ -43,9 +42,9 @@ RuntimeDirectoryMode=0750
 StateDirectory=headscale
 StateDirectoryMode=0750
 SystemCallArchitectures=native
+SystemCallFilter=@chown
 SystemCallFilter=@system-service
 SystemCallFilter=~@privileged
-SystemCallFilter=~@resources
 UMask=0077
 
 [Install]
diff --git a/proto/buf.lock b/proto/buf.lock
new file mode 100644
index 000000000..31cd0644b
--- /dev/null
+++ b/proto/buf.lock
@@ -0,0 +1,18 @@
+# Generated by buf. DO NOT EDIT.
+version: v1
+deps:
+  - remote: buf.build
+    owner: googleapis
+    repository: googleapis
+    commit: 61b203b9a9164be9a834f58c37be6f62
+    digest: shake256:e619113001d6e284ee8a92b1561e5d4ea89a47b28bf0410815cb2fa23914df8be9f1a6a98dcf069f5bc2d829a2cfb1ac614863be45cd4f8a5ad8606c5f200224
+  - remote: buf.build
+    owner: grpc-ecosystem
+    repository: grpc-gateway
+    commit: 4c5ba75caaf84e928b7137ae5c18c26a
+    digest: shake256:e174ad9408f3e608f6157907153ffec8d310783ee354f821f57178ffbeeb8faa6bb70b41b61099c1783c82fe16210ebd1279bc9c9ee6da5cffba9f0e675b8b99
+  - remote: buf.build
+    owner: ufoundit-dev
+    repository: protoc-gen-gorm
+    commit: e2ecbaa0d37843298104bd29fd866df8
+    digest: shake256:088347669906bc49513b40d58fd7ae877769668928fca038e070732ce0f9855c03f21885b0099e0d27acf9475feca0a34dbcedac22bb374bf2cd7c1e352de56c
diff --git a/proto/buf.yaml b/proto/buf.yaml
new file mode 100644
index 000000000..7e524ba03
--- /dev/null
+++ b/proto/buf.yaml
@@ -0,0 +1,12 @@
+version: v1
+lint:
+  use:
+    - DEFAULT
+breaking:
+  use:
+    - FILE
+
+deps:
+  - buf.build/googleapis/googleapis
+  - buf.build/grpc-ecosystem/grpc-gateway
+  - buf.build/ufoundit-dev/protoc-gen-gorm
diff --git a/proto/headscale/v1/apikey.proto b/proto/headscale/v1/apikey.proto
new file mode 100644
index 000000000..6ea0d6699
--- /dev/null
+++ b/proto/headscale/v1/apikey.proto
@@ -0,0 +1,35 @@
+syntax = "proto3";
+package headscale.v1;
+option go_package = "github.com/juanfont/headscale/gen/go/v1";
+
+import "google/protobuf/timestamp.proto";
+
+message ApiKey {
+  uint64 id = 1;
+  string prefix = 2;
+  google.protobuf.Timestamp expiration = 3;
+  google.protobuf.Timestamp created_at = 4;
+  google.protobuf.Timestamp last_seen = 5;
+}
+
+message CreateApiKeyRequest { google.protobuf.Timestamp expiration = 1; }
+
+message CreateApiKeyResponse { string api_key = 1; }
+
+message ExpireApiKeyRequest {
+  string prefix = 1;
+  uint64 id = 2;
+}
+
+message ExpireApiKeyResponse {}
+
+message ListApiKeysRequest {}
+
+message ListApiKeysResponse { repeated ApiKey api_keys = 1; }
+
+message DeleteApiKeyRequest {
+  string prefix = 1;
+  uint64 id = 2;
+}
+
+message DeleteApiKeyResponse {}
diff --git a/proto/headscale/v1/auth.proto b/proto/headscale/v1/auth.proto
new file mode 100644
index 000000000..cc0ec95a4
--- /dev/null
+++ b/proto/headscale/v1/auth.proto
@@ -0,0 +1,26 @@
+syntax = "proto3";
+package headscale.v1;
+option go_package = "github.com/juanfont/headscale/gen/go/v1";
+
+import "headscale/v1/node.proto";
+
+message AuthRegisterRequest {
+  string user = 1;
+  string auth_id = 2;
+}
+
+message AuthRegisterResponse {
+  Node node = 1;
+}
+
+message AuthApproveRequest {
+  string auth_id = 1;
+}
+
+message AuthApproveResponse {}
+
+message AuthRejectRequest {
+  string auth_id = 1;
+}
+
+message AuthRejectResponse {}
diff --git a/proto/headscale/v1/device.proto b/proto/headscale/v1/device.proto
new file mode 100644
index 000000000..6c75df887
--- /dev/null
+++ b/proto/headscale/v1/device.proto
@@ -0,0 +1,76 @@
+syntax = "proto3";
+package headscale.v1;
+option go_package = "github.com/juanfont/headscale/gen/go/v1";
+
+import "google/protobuf/timestamp.proto";
+
+// This is a potential reimplementation of Tailscale's API
+// https://github.com/tailscale/tailscale/blob/main/api.md
+
+message Latency {
+  float latency_ms = 1;
+  bool preferred = 2;
+}
+
+message ClientSupports {
+  bool hair_pinning = 1;
+  bool ipv6 = 2;
+  bool pcp = 3;
+  bool pmp = 4;
+  bool udp = 5;
+  bool upnp = 6;
+}
+
+message ClientConnectivity {
+  repeated string endpoints = 1;
+  string derp = 2;
+  bool mapping_varies_by_dest_ip = 3;
+  map<string, Latency> latency = 4;
+  ClientSupports client_supports = 5;
+}
+
+message GetDeviceRequest { string id = 1; }
+
+message GetDeviceResponse {
+  repeated string addresses = 1;
+  string id = 2;
+  string user = 3;
+  string name = 4;
+  string hostname = 5;
+  string client_version = 6;
+  bool update_available = 7;
+  string os = 8;
+  google.protobuf.Timestamp created = 9;
+  google.protobuf.Timestamp last_seen = 10;
+  bool key_expiry_disabled = 11;
+  google.protobuf.Timestamp expires = 12;
+  bool authorized = 13;
+  bool is_external = 14;
+  string machine_key = 15;
+  string node_key = 16;
+  bool blocks_incoming_connections = 17;
+  repeated string enabled_routes = 18;
+  repeated string advertised_routes = 19;
+  ClientConnectivity client_connectivity = 20;
+}
+
+message DeleteDeviceRequest { string id = 1; }
+
+message DeleteDeviceResponse {}
+
+message GetDeviceRoutesRequest { string id = 1; }
+
+message GetDeviceRoutesResponse {
+  repeated string enabled_routes = 1;
+  repeated string advertised_routes = 2;
+}
+
+message EnableDeviceRoutesRequest {
+  string id = 1;
+  repeated string routes = 2;
+}
+
+message EnableDeviceRoutesResponse {
+  repeated string enabled_routes = 1;
+  repeated string advertised_routes = 2;
+}
diff --git a/proto/headscale/v1/headscale.proto b/proto/headscale/v1/headscale.proto
new file mode 100644
index 000000000..cc2958a28
--- /dev/null
+++ b/proto/headscale/v1/headscale.proto
@@ -0,0 +1,256 @@
+syntax = "proto3";
+package headscale.v1;
+option go_package = "github.com/juanfont/headscale/gen/go/v1";
+
+import "google/api/annotations.proto";
+
+import "headscale/v1/user.proto";
+import "headscale/v1/preauthkey.proto";
+import "headscale/v1/node.proto";
+import "headscale/v1/apikey.proto";
+import "headscale/v1/auth.proto";
+import "headscale/v1/policy.proto";
+
+service HeadscaleService {
+  // --- User start ---
+  rpc CreateUser(CreateUserRequest) returns (CreateUserResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/user"
+      body : "*"
+    };
+  }
+
+  rpc RenameUser(RenameUserRequest) returns (RenameUserResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/user/{old_id}/rename/{new_name}"
+    };
+  }
+
+  rpc DeleteUser(DeleteUserRequest) returns (DeleteUserResponse) {
+    option (google.api.http) = {
+      delete : "/api/v1/user/{id}"
+    };
+  }
+
+  rpc ListUsers(ListUsersRequest) returns (ListUsersResponse) {
+    option (google.api.http) = {
+      get : "/api/v1/user"
+    };
+  }
+  // --- User end ---
+
+  // --- PreAuthKeys start ---
+  rpc CreatePreAuthKey(CreatePreAuthKeyRequest)
+      returns (CreatePreAuthKeyResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/preauthkey"
+      body : "*"
+    };
+  }
+
+  rpc ExpirePreAuthKey(ExpirePreAuthKeyRequest)
+      returns (ExpirePreAuthKeyResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/preauthkey/expire"
+      body : "*"
+    };
+  }
+
+  rpc DeletePreAuthKey(DeletePreAuthKeyRequest)
+      returns (DeletePreAuthKeyResponse) {
+    option (google.api.http) = {
+      delete : "/api/v1/preauthkey"
+    };
+  }
+
+  rpc ListPreAuthKeys(ListPreAuthKeysRequest)
+      returns (ListPreAuthKeysResponse) {
+    option (google.api.http) = {
+      get : "/api/v1/preauthkey"
+    };
+  }
+  // --- PreAuthKeys end ---
+
+  // --- Node start ---
+  rpc DebugCreateNode(DebugCreateNodeRequest)
+      returns (DebugCreateNodeResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/debug/node"
+      body : "*"
+    };
+  }
+
+  rpc GetNode(GetNodeRequest) returns (GetNodeResponse) {
+    option (google.api.http) = {
+      get : "/api/v1/node/{node_id}"
+    };
+  }
+
+  rpc SetTags(SetTagsRequest) returns (SetTagsResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/node/{node_id}/tags"
+      body : "*"
+    };
+  }
+
+  rpc SetApprovedRoutes(SetApprovedRoutesRequest)
+      returns (SetApprovedRoutesResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/node/{node_id}/approve_routes"
+      body : "*"
+    };
+  }
+
+  rpc RegisterNode(RegisterNodeRequest) returns (RegisterNodeResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/node/register"
+    };
+  }
+
+  rpc DeleteNode(DeleteNodeRequest) returns (DeleteNodeResponse) {
+    option (google.api.http) = {
+      delete : "/api/v1/node/{node_id}"
+    };
+  }
+
+  rpc ExpireNode(ExpireNodeRequest) returns (ExpireNodeResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/node/{node_id}/expire"
+    };
+  }
+
+  rpc RenameNode(RenameNodeRequest) returns (RenameNodeResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/node/{node_id}/rename/{new_name}"
+    };
+  }
+
+  rpc ListNodes(ListNodesRequest) returns (ListNodesResponse) {
+    option (google.api.http) = {
+      get : "/api/v1/node"
+    };
+  }
+
+  rpc BackfillNodeIPs(BackfillNodeIPsRequest)
+      returns (BackfillNodeIPsResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/node/backfillips"
+    };
+  }
+
+  // --- Node end ---
+
+  // --- Auth start ---
+  rpc AuthRegister(AuthRegisterRequest) returns (AuthRegisterResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/auth/register"
+      body : "*"
+    };
+  }
+
+  rpc AuthApprove(AuthApproveRequest) returns (AuthApproveResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/auth/approve"
+      body : "*"
+    };
+  }
+
+  rpc AuthReject(AuthRejectRequest) returns (AuthRejectResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/auth/reject"
+      body : "*"
+    };
+  }
+  // --- Auth end ---
+
+  // --- ApiKeys start ---
+  rpc CreateApiKey(CreateApiKeyRequest) returns (CreateApiKeyResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/apikey"
+      body : "*"
+    };
+  }
+
+  rpc ExpireApiKey(ExpireApiKeyRequest) returns (ExpireApiKeyResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/apikey/expire"
+      body : "*"
+    };
+  }
+
+  rpc ListApiKeys(ListApiKeysRequest) returns (ListApiKeysResponse) {
+    option (google.api.http) = {
+      get : "/api/v1/apikey"
+    };
+  }
+
+  rpc DeleteApiKey(DeleteApiKeyRequest) returns (DeleteApiKeyResponse) {
+    option (google.api.http) = {
+      delete : "/api/v1/apikey/{prefix}"
+    };
+  }
+  // --- ApiKeys end ---
+
+  // --- Policy start ---
+  rpc GetPolicy(GetPolicyRequest) returns (GetPolicyResponse) {
+    option (google.api.http) = {
+      get : "/api/v1/policy"
+    };
+  }
+
+  rpc SetPolicy(SetPolicyRequest) returns (SetPolicyResponse) {
+    option (google.api.http) = {
+      put : "/api/v1/policy"
+      body : "*"
+    };
+  }
+
+  rpc CheckPolicy(CheckPolicyRequest) returns (CheckPolicyResponse) {
+    option (google.api.http) = {
+      post : "/api/v1/policy/check"
+      body : "*"
+    };
+  }
+  // --- Policy end ---
+
+  // --- Health start ---
+  rpc Health(HealthRequest) returns (HealthResponse) {
+    option (google.api.http) = {
+      get : "/api/v1/health"
+    };
+  }
+  // --- Health end ---
+
+  // Implement Tailscale API
+  // rpc GetDevice(GetDeviceRequest) returns(GetDeviceResponse) {
+  //     option(google.api.http) = {
+  //         get : "/api/v1/device/{id}"
+  //     };
+  // }
+
+  // rpc DeleteDevice(DeleteDeviceRequest) returns(DeleteDeviceResponse) {
+  //     option(google.api.http) = {
+  //         delete : "/api/v1/device/{id}"
+  //     };
+  // }
+
+  // rpc GetDeviceRoutes(GetDeviceRoutesRequest)
+  // returns(GetDeviceRoutesResponse) {
+  //     option(google.api.http) = {
+  //         get : "/api/v1/device/{id}/routes"
+  //     };
+  // }
+
+  // rpc EnableDeviceRoutes(EnableDeviceRoutesRequest)
+  // returns(EnableDeviceRoutesResponse) {
+  //     option(google.api.http) = {
+  //         post : "/api/v1/device/{id}/routes"
+  //     };
+  // }
+}
+
+message HealthRequest {}
+
+message HealthResponse {
+  bool database_connectivity = 1;
+}
diff --git a/proto/headscale/v1/node.proto b/proto/headscale/v1/node.proto
new file mode 100644
index 000000000..1a3dd0e66
--- /dev/null
+++ b/proto/headscale/v1/node.proto
@@ -0,0 +1,144 @@
+syntax = "proto3";
+package headscale.v1;
+
+import "google/protobuf/timestamp.proto";
+import "headscale/v1/preauthkey.proto";
+import "headscale/v1/user.proto";
+
+option go_package = "github.com/juanfont/headscale/gen/go/v1";
+
+enum RegisterMethod {
+  REGISTER_METHOD_UNSPECIFIED = 0;
+  REGISTER_METHOD_AUTH_KEY = 1;
+  REGISTER_METHOD_CLI = 2;
+  REGISTER_METHOD_OIDC = 3;
+}
+
+message Node {
+  // 9: removal of last_successful_update
+  reserved 9;
+
+  uint64 id = 1;
+  string machine_key = 2;
+  string node_key = 3;
+  string disco_key = 4;
+  repeated string ip_addresses = 5;
+  string name = 6;
+  User user = 7;
+
+  google.protobuf.Timestamp last_seen = 8;
+  google.protobuf.Timestamp expiry = 10;
+
+  PreAuthKey pre_auth_key = 11;
+
+  google.protobuf.Timestamp created_at = 12;
+
+  RegisterMethod register_method = 13;
+
+  reserved 14 to 20;
+  // google.protobuf.Timestamp updated_at = 14;
+  // google.protobuf.Timestamp deleted_at = 15;
+
+  // bytes host_info      = 15;
+  // bytes endpoints      = 16;
+  // bytes enabled_routes = 17;
+
+  // Deprecated
+  // repeated string forced_tags = 18;
+  // repeated string invalid_tags = 19;
+  // repeated string valid_tags = 20;
+  string given_name = 21;
+  bool online = 22;
+  repeated string approved_routes = 23;
+  repeated string available_routes = 24;
+  repeated string subnet_routes = 25;
+  repeated string tags = 26;
+}
+
+message RegisterNodeRequest {
+  string user = 1;
+  string key = 2;
+}
+
+message RegisterNodeResponse {
+  Node node = 1;
+}
+
+message GetNodeRequest {
+  uint64 node_id = 1;
+}
+
+message GetNodeResponse {
+  Node node = 1;
+}
+
+message SetTagsRequest {
+  uint64 node_id = 1;
+  repeated string tags = 2;
+}
+
+message SetTagsResponse {
+  Node node = 1;
+}
+
+message SetApprovedRoutesRequest {
+  uint64 node_id = 1;
+  repeated string routes = 2;
+}
+
+message SetApprovedRoutesResponse {
+  Node node = 1;
+}
+
+message DeleteNodeRequest {
+  uint64 node_id = 1;
+}
+
+message DeleteNodeResponse {}
+
+message ExpireNodeRequest {
+  uint64 node_id = 1;
+  google.protobuf.Timestamp expiry = 2;
+  // When true, sets expiry to null (node will never expire).
+  bool disable_expiry = 3;
+}
+
+message ExpireNodeResponse {
+  Node node = 1;
+}
+
+message RenameNodeRequest {
+  uint64 node_id = 1;
+  string new_name = 2;
+}
+
+message RenameNodeResponse {
+  Node node = 1;
+}
+
+message ListNodesRequest {
+  string user = 1;
+}
+
+message ListNodesResponse {
+  repeated Node nodes = 1;
+}
+
+message DebugCreateNodeRequest {
+  string user = 1;
+  string key = 2;
+  string name = 3;
+  repeated string routes = 4;
+}
+
+message DebugCreateNodeResponse {
+  Node node = 1;
+}
+
+message BackfillNodeIPsRequest {
+  bool confirmed = 1;
+}
+
+message BackfillNodeIPsResponse {
+  repeated string changes = 1;
+}
diff --git a/proto/headscale/v1/policy.proto b/proto/headscale/v1/policy.proto
new file mode 100644
index 000000000..4a578dbe4
--- /dev/null
+++ b/proto/headscale/v1/policy.proto
@@ -0,0 +1,23 @@
+syntax = "proto3";
+package headscale.v1;
+option go_package = "github.com/juanfont/headscale/gen/go/v1";
+
+import "google/protobuf/timestamp.proto";
+
+message SetPolicyRequest { string policy = 1; }
+
+message SetPolicyResponse {
+  string policy = 1;
+  google.protobuf.Timestamp updated_at = 2;
+}
+
+message GetPolicyRequest {}
+
+message GetPolicyResponse {
+  string policy = 1;
+  google.protobuf.Timestamp updated_at = 2;
+}
+
+message CheckPolicyRequest { string policy = 1; }
+
+message CheckPolicyResponse {}
diff --git a/proto/headscale/v1/preauthkey.proto b/proto/headscale/v1/preauthkey.proto
new file mode 100644
index 000000000..04e88821a
--- /dev/null
+++ b/proto/headscale/v1/preauthkey.proto
@@ -0,0 +1,49 @@
+syntax = "proto3";
+package headscale.v1;
+
+import "google/protobuf/timestamp.proto";
+import "headscale/v1/user.proto";
+
+option go_package = "github.com/juanfont/headscale/gen/go/v1";
+
+message PreAuthKey {
+  User user = 1;
+  uint64 id = 2;
+  string key = 3;
+  bool reusable = 4;
+  bool ephemeral = 5;
+  bool used = 6;
+  google.protobuf.Timestamp expiration = 7;
+  google.protobuf.Timestamp created_at = 8;
+  repeated string acl_tags = 9;
+}
+
+message CreatePreAuthKeyRequest {
+  uint64 user = 1;
+  bool reusable = 2;
+  bool ephemeral = 3;
+  google.protobuf.Timestamp expiration = 4;
+  repeated string acl_tags = 5;
+}
+
+message CreatePreAuthKeyResponse {
+  PreAuthKey pre_auth_key = 1;
+}
+
+message ExpirePreAuthKeyRequest {
+  uint64 id = 1;
+}
+
+message ExpirePreAuthKeyResponse {}
+
+message DeletePreAuthKeyRequest {
+  uint64 id = 1;
+}
+
+message DeletePreAuthKeyResponse {}
+
+message ListPreAuthKeysRequest {}
+
+message ListPreAuthKeysResponse {
+  repeated PreAuthKey pre_auth_keys = 1;
+}
diff --git a/proto/headscale/v1/user.proto b/proto/headscale/v1/user.proto
new file mode 100644
index 000000000..bd71bcb1e
--- /dev/null
+++ b/proto/headscale/v1/user.proto
@@ -0,0 +1,44 @@
+syntax = "proto3";
+package headscale.v1;
+option go_package = "github.com/juanfont/headscale/gen/go/v1";
+
+import "google/protobuf/timestamp.proto";
+
+message User {
+  uint64 id = 1;
+  string name = 2;
+  google.protobuf.Timestamp created_at = 3;
+  string display_name = 4;
+  string email = 5;
+  string provider_id = 6;
+  string provider = 7;
+  string profile_pic_url = 8;
+}
+
+message CreateUserRequest {
+  string name = 1;
+  string display_name = 2;
+  string email = 3;
+  string picture_url = 4;
+}
+
+message CreateUserResponse { User user = 1; }
+
+message RenameUserRequest {
+  uint64 old_id = 1;
+  string new_name = 2;
+}
+
+message RenameUserResponse { User user = 1; }
+
+message DeleteUserRequest { uint64 id = 1; }
+
+message DeleteUserResponse {}
+
+message ListUsersRequest {
+  uint64 id = 1;
+  string name = 2;
+  string email = 3;
+}
+
+message ListUsersResponse { repeated User users = 1; }
diff --git a/swagger.go b/swagger.go
new file mode 100644
index 000000000..514bbdf70
--- /dev/null
+++ b/swagger.go
@@ -0,0 +1,97 @@
+package headscale
+
+import (
+	"bytes"
+	_ "embed"
+	"html/template"
+	"net/http"
+
+	"github.com/rs/zerolog/log"
+)
+
+//go:embed gen/openapiv2/headscale/v1/headscale.swagger.json
+var apiV1JSON []byte
+
+func SwaggerUI(
+	writer http.ResponseWriter,
+	req *http.Request,
+) {
+	swaggerTemplate := template.Must(template.New("swagger").Parse(`
+<html>
+	<head>
+	<link rel="stylesheet" type="text/css" href="https://unpkg.com/swagger-ui-dist@3/swagger-ui.css">
+	<link rel="icon" href="/favicon.ico">
+	<script src="https://unpkg.com/swagger-ui-dist@3/swagger-ui-standalone-preset.js"></script>
+	<script src="https://unpkg.com/swagger-ui-dist@3/swagger-ui-bundle.js" charset="UTF-8"></script>
+	</head>
+	<body>
+	<div id="swagger-ui"></div>
+	<script>
+		window.addEventListener('load', (event) => {
+			const ui = SwaggerUIBundle({
+			    url: "/swagger/v1/openapiv2.json",
+			    dom_id: '#swagger-ui',
+			    presets: [
+			      SwaggerUIBundle.presets.apis,
+			      SwaggerUIBundle.SwaggerUIStandalonePreset
+			    ],
+				plugins: [
+                	SwaggerUIBundle.plugins.DownloadUrl
+            	],
+				deepLinking: true,
+				// TODO(kradalby): Figure out why this does not work
+				// layout: "StandaloneLayout",
+			  })
+			window.ui = ui
+		});
+	</script>
+	</body>
+</html>`))
+
+	var payload bytes.Buffer
+	if err := swaggerTemplate.Execute(&payload, struct{}{}); err != nil { //nolint:noinlineerr
+		log.Error().
+			Caller().
+			Err(err).
+			Msg("Could not render Swagger")
+
+		writer.Header().Set("Content-Type", "text/plain; charset=utf-8")
+		writer.WriteHeader(http.StatusInternalServerError)
+
+		_, err := writer.Write([]byte("Could not render Swagger"))
+		if err != nil {
+			log.Error().
+				Caller().
+				Err(err).
+				Msg("Failed to write response")
+		}
+
+		return
+	}
+
+	writer.Header().Set("Content-Type", "text/html; charset=utf-8")
+	writer.WriteHeader(http.StatusOK)
+
+	_, err := writer.Write(payload.Bytes())
+	if err != nil {
+		log.Error().
+			Caller().
+			Err(err).
+			Msg("Failed to write response")
+	}
+}
+
+func SwaggerAPIv1(
+	writer http.ResponseWriter,
+	req *http.Request,
+) {
+	writer.Header().Set("Content-Type", "application/json; charset=utf-8")
+	writer.WriteHeader(http.StatusOK)
+
+	if _, err := writer.Write(apiV1JSON); err != nil { //nolint:noinlineerr
+		log.Error().
+			Caller().
+			Err(err).
+			Msg("Failed to write response")
+	}
+}
diff --git a/tools/capver/main.go b/tools/capver/main.go
index 368214c83..21c92d260 100644
--- a/tools/capver/main.go
+++ b/tools/capver/main.go
@@ -10,14 +10,15 @@ import (
 	"go/format"
 	"io"
 	"log"
-	"maps"
 	"net/http"
 	"os"
 	"regexp"
 	"slices"
+	"sort"
 	"strconv"
 	"strings"
 
+	xmaps "golang.org/x/exp/maps"
 	"tailscale.com/tailcfg"
 )
 
@@ -196,7 +197,7 @@ func getCapabilityVersions(ctx context.Context) (map[string]tailcfg.CapabilityVe
 	minorVersions := getMinorVersionsFromTags(tags)
 	log.Printf("Found %d minor versions", len(minorVersions))
 
-	// Regular expression to find the [tailcfg.CurrentCapabilityVersion] line
+	// Regular expression to find the CurrentCapabilityVersion line
 	re := regexp.MustCompile(`const CurrentCapabilityVersion CapabilityVersion = (\d+)`)
 
 	versions := make(map[string]tailcfg.CapabilityVersion)
@@ -230,7 +231,7 @@ func getCapabilityVersions(ctx context.Context) (map[string]tailcfg.CapabilityVe
 			continue
 		}
 
-		// Find the [tailcfg.CurrentCapabilityVersion]
+		// Find the CurrentCapabilityVersion
 		matches := re.FindStringSubmatch(string(body))
 		if len(matches) > 1 {
 			capabilityVersionStr := matches[1]
@@ -245,7 +246,8 @@ func getCapabilityVersions(ctx context.Context) (map[string]tailcfg.CapabilityVe
 
 func calculateMinSupportedCapabilityVersion(versions map[string]tailcfg.CapabilityVersion) tailcfg.CapabilityVersion {
 	// Since we now store minor versions directly, just sort and take the oldest of the latest N
-	minorVersions := slices.Sorted(maps.Keys(versions))
+	minorVersions := xmaps.Keys(versions)
+	sort.Strings(minorVersions)
 
 	supportedCount := min(len(minorVersions), supportedMajorMinorVersions)
 
@@ -259,23 +261,6 @@ func calculateMinSupportedCapabilityVersion(versions map[string]tailcfg.Capabili
 	return versions[oldestSupportedMinor]
 }
 
-// firstTailscaleVerPerCapVer inverts versions into a map from each capability
-// version to the first (lowest-sorted) Tailscale minor version reporting it.
-func firstTailscaleVerPerCapVer(versions map[string]tailcfg.CapabilityVersion) map[tailcfg.CapabilityVersion]string {
-	sortedVersions := slices.Sorted(maps.Keys(versions))
-
-	capVerToTailscaleVer := make(map[tailcfg.CapabilityVersion]string)
-
-	for _, v := range sortedVersions {
-		capabilityVersion := versions[v]
-		if _, ok := capVerToTailscaleVer[capabilityVersion]; !ok {
-			capVerToTailscaleVer[capabilityVersion] = v
-		}
-	}
-
-	return capVerToTailscaleVer
-}
-
 func writeCapabilityVersionsToFile(versions map[string]tailcfg.CapabilityVersion, minSupportedCapVer tailcfg.CapabilityVersion) error {
 	// Generate the Go code as a string
 	var content strings.Builder
@@ -285,7 +270,8 @@ func writeCapabilityVersionsToFile(versions map[string]tailcfg.CapabilityVersion
 	content.WriteString("\n\n")
 	content.WriteString("var tailscaleToCapVer = map[string]tailcfg.CapabilityVersion{\n")
 
-	sortedVersions := slices.Sorted(maps.Keys(versions))
+	sortedVersions := xmaps.Keys(versions)
+	sort.Strings(sortedVersions)
 
 	for _, version := range sortedVersions {
 		fmt.Fprintf(&content, "\t\"%s\": %d,\n", version, versions[version])
@@ -296,21 +282,35 @@ func writeCapabilityVersionsToFile(versions map[string]tailcfg.CapabilityVersion
 	content.WriteString("\n\n")
 	content.WriteString("var capVerToTailscaleVer = map[tailcfg.CapabilityVersion]string{\n")
 
-	capVerToTailscaleVer := firstTailscaleVerPerCapVer(versions)
+	capVarToTailscaleVer := make(map[tailcfg.CapabilityVersion]string)
 
-	capsSorted := slices.Sorted(maps.Keys(capVerToTailscaleVer))
+	for _, v := range sortedVersions {
+		capabilityVersion := versions[v]
+
+		// If it is already set, skip and continue,
+		// we only want the first tailscale version per
+		// capability version.
+		if _, ok := capVarToTailscaleVer[capabilityVersion]; ok {
+			continue
+		}
+
+		capVarToTailscaleVer[capabilityVersion] = v
+	}
+
+	capsSorted := xmaps.Keys(capVarToTailscaleVer)
+	slices.Sort(capsSorted)
 
 	for _, capVer := range capsSorted {
-		fmt.Fprintf(&content, "\t%d:\t\t\"%s\",\n", capVer, capVerToTailscaleVer[capVer])
+		fmt.Fprintf(&content, "\t%d:\t\t\"%s\",\n", capVer, capVarToTailscaleVer[capVer])
 	}
 
 	content.WriteString("}\n\n")
 
-	// Add the [capver.SupportedMajorMinorVersions] constant
+	// Add the SupportedMajorMinorVersions constant
 	content.WriteString("// SupportedMajorMinorVersions is the number of major.minor Tailscale versions supported.\n")
 	fmt.Fprintf(&content, "const SupportedMajorMinorVersions = %d\n\n", supportedMajorMinorVersions)
 
-	// Add the [capver.MinSupportedCapabilityVersion] constant
+	// Add the MinSupportedCapabilityVersion constant
 	content.WriteString("// MinSupportedCapabilityVersion represents the minimum capability version\n")
 	content.WriteString("// supported by this Headscale instance (latest 10 minor versions)\n")
 	fmt.Fprintf(&content, "const MinSupportedCapabilityVersion tailcfg.CapabilityVersion = %d\n", minSupportedCapVer)
@@ -332,7 +332,8 @@ func writeCapabilityVersionsToFile(versions map[string]tailcfg.CapabilityVersion
 
 func writeTestDataFile(versions map[string]tailcfg.CapabilityVersion, minSupportedCapVer tailcfg.CapabilityVersion) error {
 	// Sort minor versions
-	minorVersions := slices.Sorted(maps.Keys(versions))
+	minorVersions := xmaps.Keys(versions)
+	sort.Strings(minorVersions)
 
 	// Take latest N
 	supportedCount := min(len(minorVersions), supportedMajorMinorVersions)
@@ -347,7 +348,7 @@ func writeTestDataFile(versions map[string]tailcfg.CapabilityVersion, minSupport
 	content.WriteString("// Generated DO NOT EDIT\n\n")
 	content.WriteString("import \"tailscale.com/tailcfg\"\n\n")
 
-	// Generate complete test struct for [capver.TailscaleLatestMajorMinor]
+	// Generate complete test struct for TailscaleLatestMajorMinor
 	content.WriteString("var tailscaleLatestMajorMinorTests = []struct {\n")
 	content.WriteString("\tn        int\n")
 	content.WriteString("\tstripV   bool\n")
@@ -397,9 +398,18 @@ func writeTestDataFile(versions map[string]tailcfg.CapabilityVersion, minSupport
 	content.WriteString("}\n\n")
 
 	// Build capVerToTailscaleVer for test data
-	capVerToTailscaleVer := firstTailscaleVerPerCapVer(versions)
+	capVerToTailscaleVer := make(map[tailcfg.CapabilityVersion]string)
+	sortedVersions := xmaps.Keys(versions)
+	sort.Strings(sortedVersions)
 
-	// Generate complete test struct for [capver.CapVerMinimumTailscaleVersion]
+	for _, v := range sortedVersions {
+		capabilityVersion := versions[v]
+		if _, ok := capVerToTailscaleVer[capabilityVersion]; !ok {
+			capVerToTailscaleVer[capabilityVersion] = v
+		}
+	}
+
+	// Generate complete test struct for CapVerMinimumTailscaleVersion
 	content.WriteString("var capVerMinimumTailscaleVersionTests = []struct {\n")
 	content.WriteString("\tinput    tailcfg.CapabilityVersion\n")
 	content.WriteString("\texpected string\n")
@@ -410,7 +420,8 @@ func writeTestDataFile(versions map[string]tailcfg.CapabilityVersion, minSupport
 	fmt.Fprintf(&content, "\t{%d, \"%s\"},\n", minSupportedCapVer, minVersionString)
 
 	// Add a few more test cases
-	capsSorted := slices.Sorted(maps.Keys(capVerToTailscaleVer))
+	capsSorted := xmaps.Keys(capVerToTailscaleVer)
+	slices.Sort(capsSorted)
 
 	testCount := 0
 	for _, capVer := range capsSorted {